[Tue Nov 11 01:08:20.352430 2025] [:error] [pid 41825:tid 41907] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Nov 11 01:08:20.585628 2025] [:error] [pid 41825:tid 41890] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Nov 11 01:08:20.851486 2025] [:error] [pid 41825:tid 41905] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Nov 11 01:08:21.097283 2025] [:error] [pid 41825:tid 41910] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Tue Nov 11 01:08:21.351492 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Nov 11 01:08:21.565919 2025] [:error] [pid 41825:tid 41907] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Tue Nov 11 01:08:21.779687 2025] [:error] [pid 41825:tid 41890] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Nov 11 01:08:22.016409 2025] [:error] [pid 41825:tid 41905] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Tue Nov 11 01:08:22.342590 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue Nov 11 01:08:22.472697 2025] [:error] [pid 41825:tid 41907] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Nov 11 01:08:22.828916 2025] [:error] [pid 41825:tid 41905] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Nov 11 01:08:26.100455 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Tue Nov 11 01:08:26.227088 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Nov 11 01:08:26.483384 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue Nov 11 01:08:26.610486 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Tue Nov 11 01:08:26.733106 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Nov 11 01:08:26.865605 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue Nov 11 01:08:27.000879 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Nov 11 01:08:27.126518 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Nov 11 01:08:27.370569 2025] [:error] [pid 41825:tid 41891] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Nov 11 01:08:28.133719 2025] [:error] [pid 41825:tid 41894] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Tue Nov 11 01:08:28.275762 2025] [:error] [pid 41825:tid 41894] [client 48.210.12.166:57258] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Tue Nov 11 14:47:23.536897 2025] [:error] [pid 53355:tid 53362] [client 134.199.162.125:37638] [client 134.199.162.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRLb-4B5X5A3rMc4_nAxQgAAAAQ"]
[Tue Nov 11 14:47:23.696629 2025] [:error] [pid 53355:tid 53358] [client 134.199.162.125:47514] [client 134.199.162.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRLb-4B5X5A3rMc4_nAxQwAAAAA"]
[Tue Nov 11 18:47:30.935231 2025] [:error] [pid 36579:tid 36630] [client 134.199.162.125:45006] [client 134.199.162.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRMUQumuedRSntjwLw51uwAAABM"]
[Tue Nov 11 18:47:31.006940 2025] [:error] [pid 36579:tid 36611] [client 134.199.162.125:53394] [client 134.199.162.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRMUQ-muedRSntjwLw51vAAAAAA"]
[Tue Nov 11 19:56:37.665117 2025] [:error] [pid 36579:tid 36625] [client 187.122.63.117:13458] [client 187.122.63.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.122.63.117, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aRMkdemuedRSntjwLw6E7wAAAA4"]
[Tue Nov 11 19:56:37.672535 2025] [:error] [pid 36579:tid 36625] [client 187.122.63.117:13458] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 11 20:06:57.983008 2025] [:error] [pid 36579:tid 36631] [client 38.114.122.142:53208] [client 38.114.122.142] ModSecurity: Access denied with code 403 (phase 2). Found 30 byte(s) in ARGS:_path outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||nextspaceconsulting.com.au|F|3"] [data "ARGS:_path=_controller=Symfony\\x5cComponent\\x5cYaml\\x5cInline::parse&value=!!php/object:a:1:{i:1;a:2:{i:0;O:32:\\x22Monolog\\x5cHandler\\x5cSyslogUdpHandler\\x22:1:{s:9:\\x22\\x00*\\x00socket\\x22;O:29:\\x22Monolog\\x5cHandler\\x5cBufferHandler\\x22:7:{s:10:\\x22\\x00*\\x00handler\\x22;O:29:\\x22Monolog\\x5cHandler\\x5cBufferHandler\\x22:7:{s:10:\\x22\\x00*\\x00handler\\x22;N;s:13:\\x22\\x00*\\x00bufferSize\\x22;i:-1;s:9:\\x22\\x00*\\x00buffer\\x22;a:1:{i:0;a:2:{i:0;s:2:\\x22-1\\x22;s:5:\\x22level\\x22;N;}}s:8:\\x22\\x00*\\x00level\\x22;N;s:14..."] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/_fragment"] [unique_id "aRMm4emuedRSntjwLw6HEAAAABQ"]
[Wed Nov 12 00:03:31.557881 2025] [:error] [pid 47931:tid 47947] [client 134.199.162.125:35416] [client 134.199.162.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRNeUzWP7ptQ6Y-gz69HuQAAAU0"]
[Wed Nov 12 00:03:32.127281 2025] [:error] [pid 47964:tid 47974] [client 134.199.162.125:47260] [client 134.199.162.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRNeVF6CQC3ebUS5pkQxcgAAAYc"]
[Wed Nov 12 15:30:00.838505 2025] [:error] [pid 12744:tid 12755] [client 106.222.210.42:24711] [client 106.222.210.42] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.210.42, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aRQ3eJ1cp_ouUvkFj0UMSAAAAQc"]
[Wed Nov 12 15:30:00.845092 2025] [:error] [pid 12744:tid 12755] [client 106.222.210.42:24711] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 12 18:51:37.135008 2025] [:error] [pid 60096:tid 60134] [client 45.153.34.41:41122] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRRmuTmzkhCvvk8DXOyiKAAAAIg"]
[Wed Nov 12 19:36:03.231274 2025] [:error] [pid 60180:tid 60201] [client 45.153.34.41:38772] [client 45.153.34.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRRxI1hgd7ccS8EZg1pOZQAAAVM"]
[Thu Nov 13 07:30:08.153177 2025] [:error] [pid 34451:tid 34469] [client 85.203.36.146:54389] [client 85.203.36.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aRUYgDRcD8KetQb4RaqnOAAAAVA"]
[Thu Nov 13 10:06:01.945396 2025] [:error] [pid 32882:tid 32887] [client 111.67.96.99:49915] [client 111.67.96.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 111.67.96.99, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aRU9Cei5dxX_4ZQTqZs0lAAAAQM"]
[Thu Nov 13 10:06:01.951723 2025] [:error] [pid 32882:tid 32887] [client 111.67.96.99:49915] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 13 17:55:44.433735 2025] [:error] [pid 62215:tid 62237] [client 150.241.107.255:56665] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aRWrIEvClof1c6XaOBWsLgAAANI"]
[Thu Nov 13 17:55:44.979391 2025] [:error] [pid 62217:tid 62287] [client 150.241.107.255:56876] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aRWrIBjGU3T9wKBmdNc28QAAAE0"]
[Thu Nov 13 17:55:45.528040 2025] [:error] [pid 6086:tid 6102] [client 150.241.107.255:57285] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIX9_6CRZzjZnAe0zgQAAAQ0"]
[Thu Nov 13 21:43:53.437262 2025] [:error] [pid 4994:tid 5062] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Nov 13 21:43:54.082740 2025] [:error] [pid 4994:tid 5064] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Thu Nov 13 21:43:54.912940 2025] [:error] [pid 4994:tid 5063] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Nov 13 21:43:55.456329 2025] [:error] [pid 4994:tid 5053] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Nov 13 21:43:56.063277 2025] [:error] [pid 4994:tid 5070] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Nov 13 21:43:56.739883 2025] [:error] [pid 4994:tid 5062] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Nov 13 21:43:57.386918 2025] [:error] [pid 4994:tid 5060] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/meta.php
[Thu Nov 13 21:43:57.882270 2025] [:error] [pid 4994:tid 5064] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Nov 13 21:43:58.651480 2025] [:error] [pid 4994:tid 5056] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Nov 13 21:43:59.619521 2025] [:error] [pid 4994:tid 5077] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Nov 13 21:44:00.486184 2025] [:error] [pid 4994:tid 5068] [client 68.154.21.129:22515] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Thu Nov 13 21:44:00.946555 2025] [:error] [pid 4994:tid 5062] [client 68.154.21.129:22515] [client 68.154.21.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aRXgoAVaYoYtjfBbabUJQwAAAIk"]
[Thu Nov 13 21:44:02.147857 2025] [:error] [pid 5086:tid 5109] [client 68.154.21.129:22465] [client 68.154.21.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aRXgoh_dsYLFCHw574ijPwAAARQ"]
[Thu Nov 13 21:44:03.621073 2025] [:error] [pid 4994:tid 5066] [client 68.154.21.129:22490] [client 68.154.21.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aRXgowVaYoYtjfBbabUJRwAAAI0"]
[Thu Nov 13 21:44:04.297465 2025] [:error] [pid 4994:tid 5071] [client 68.154.21.129:22401] [client 68.154.21.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aRXgpAVaYoYtjfBbabUJSAAAAJI"]
[Fri Nov 14 03:46:07.788339 2025] [:error] [pid 56586:tid 56603] [client 112.206.106.94:16782] [client 112.206.106.94] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.206.106.94, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aRY1f67eYD3G9deYMP55dgAAAYw"]
[Fri Nov 14 03:46:07.794102 2025] [:error] [pid 56586:tid 56603] [client 112.206.106.94:16782] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Nov 15 00:08:55.623895 2025] [:error] [pid 1170:tid 1187] [client 49.146.145.96:22943] [client 49.146.145.96] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.146.145.96, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aRdUFw5pkvzCDzzjItTJYgAAAA8"]
[Sat Nov 15 00:08:55.631590 2025] [:error] [pid 1170:tid 1187] [client 49.146.145.96:22943] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Nov 15 01:08:28.662156 2025] [:error] [pid 45907:tid 45920] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Nov 15 01:08:29.522419 2025] [:error] [pid 45907:tid 45925] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php
[Sat Nov 15 01:08:30.009751 2025] [:error] [pid 45907:tid 45912] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Nov 15 01:08:30.531630 2025] [:error] [pid 45907:tid 45929] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Nov 15 01:08:31.147674 2025] [:error] [pid 45907:tid 45914] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Nov 15 01:08:31.658587 2025] [:error] [pid 45907:tid 45923] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Nov 15 01:08:32.079899 2025] [:error] [pid 45907:tid 45930] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/meta.php
[Sat Nov 15 01:08:32.386568 2025] [:error] [pid 45907:tid 45919] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Sat Nov 15 01:08:32.821691 2025] [:error] [pid 45907:tid 45934] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Nov 15 01:08:33.159453 2025] [:error] [pid 45907:tid 45924] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Nov 15 01:08:33.472757 2025] [:error] [pid 45907:tid 45920] [client 4.205.211.97:58389] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Sat Nov 15 01:08:34.056593 2025] [:error] [pid 45907:tid 45918] [client 4.205.211.97:58389] [client 4.205.211.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aRdiElAqmYxCpnT9gJF9pAAAAUc"]
[Sat Nov 15 01:08:34.794142 2025] [:error] [pid 45908:tid 45958] [client 4.205.211.97:58395] [client 4.205.211.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aRdiEmWG19mWwZX7KatbdAAAABQ"]
[Sat Nov 15 01:08:35.410452 2025] [:error] [pid 18513:tid 18521] [client 4.205.211.97:58382] [client 4.205.211.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aRdiE_c94upQFzRWlUm7-QAAAEM"]
[Sat Nov 15 01:08:36.682891 2025] [:error] [pid 45909:tid 45985] [client 4.205.211.97:58373] [client 4.205.211.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aRdiFMZqItrYybG86kiRawAAAdQ"]
[Sat Nov 15 02:52:20.907646 2025] [autoindex:error] [pid 45907:tid 45928] [client 4.206.94.204:6393] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 15 02:52:21.118585 2025] [:error] [pid 45907:tid 45911] [client 4.206.94.204:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Nov 15 02:52:21.328689 2025] [:error] [pid 45907:tid 45925] [client 4.206.94.204:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Nov 15 02:52:21.550559 2025] [:error] [pid 45907:tid 45935] [client 4.206.94.204:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Nov 15 02:52:21.763243 2025] [:error] [pid 45907:tid 45922] [client 4.206.94.204:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Nov 15 02:52:21.995469 2025] [:error] [pid 45907:tid 45916] [client 4.206.94.204:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php
[Sat Nov 15 02:52:22.205848 2025] [:error] [pid 45907:tid 45919] [client 4.206.94.204:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Sat Nov 15 02:52:22.417170 2025] [:error] [pid 45907:tid 45932] [client 4.206.94.204:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Nov 15 02:52:22.627010 2025] [:error] [pid 45907:tid 45926] [client 4.206.94.204:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php
[Sat Nov 15 02:52:22.837118 2025] [:error] [pid 45907:tid 45924] [client 4.206.94.204:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Nov 15 02:52:23.294308 2025] [:error] [pid 45907:tid 45918] [client 4.206.94.204:6393] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Sat Nov 15 02:52:23.545977 2025] [:error] [pid 45907:tid 45920] [client 4.206.94.204:6393] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/"] [unique_id "aRd6Z1AqmYxCpnT9gJGkHAAAAUk"]
[Sat Nov 15 02:52:24.037164 2025] [:error] [pid 45909:tid 45973] [client 4.206.94.204:6534] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/"] [unique_id "aRd6aMZqItrYybG86ki1tQAAAcg"]
[Sat Nov 15 02:52:24.464971 2025] [:error] [pid 18513:tid 18524] [client 4.206.94.204:6357] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/"] [unique_id "aRd6aPc94upQFzRWlUn0tAAAAEY"]
[Sat Nov 15 02:52:24.919772 2025] [:error] [pid 45908:tid 45944] [client 4.206.94.204:6537] [client 4.206.94.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/"] [unique_id "aRd6aGWG19mWwZX7KauB3gAAAAY"]
[Sat Nov 15 05:35:45.548236 2025] [:error] [pid 27911:tid 27989] [client 52.167.165.186:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Nov 15 05:35:45.764049 2025] [:error] [pid 27911:tid 27974] [client 52.167.165.186:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/file17.php
[Sat Nov 15 05:35:45.976650 2025] [:error] [pid 27911:tid 27978] [client 52.167.165.186:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Nov 15 05:35:46.188688 2025] [:error] [pid 27911:tid 27979] [client 52.167.165.186:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/blue.php
[Sat Nov 15 05:35:46.400749 2025] [:error] [pid 27911:tid 27980] [client 52.167.165.186:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Sat Nov 15 05:35:46.753670 2025] [:error] [pid 27911:tid 27975] [client 52.167.165.186:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sat Nov 15 05:35:46.979325 2025] [:error] [pid 27911:tid 27990] [client 52.167.165.186:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Nov 15 05:35:47.420856 2025] [:error] [pid 27911:tid 27971] [client 52.167.165.186:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/sh.php
[Sat Nov 15 05:35:47.814186 2025] [:error] [pid 27911:tid 27982] [client 52.167.165.186:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Nov 15 05:35:48.027844 2025] [:error] [pid 27911:tid 27983] [client 52.167.165.186:7248] File does not exist: /usr/local/apache/htdocs/suspended-page/thai.php
[Sat Nov 15 05:36:01.898086 2025] [:error] [pid 27910:tid 27943] [client 52.167.165.186:6360] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filei.php"] [unique_id "aRegwY6e1LusHMYkS7ZQ_wAAAEI"]
[Sat Nov 15 05:36:02.647731 2025] [:error] [pid 37318:tid 37377] [client 52.167.165.186:5914] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filei.php"] [unique_id "aRegwugM1rHoEAqoQDcjrAAAAQ8"]
[Sat Nov 15 05:36:03.907424 2025] [:error] [pid 27909:tid 27929] [client 52.167.165.186:7248] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filei.php"] [unique_id "aRegwyTfZ6B57n8HepWK6gAAABA"]
[Sat Nov 15 05:36:05.133085 2025] [:error] [pid 27909:tid 27920] [client 52.167.165.186:1572] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filei.php"] [unique_id "aRegxSTfZ6B57n8HepWK7wAAAAc"]
[Sat Nov 15 05:36:06.731354 2025] [:error] [pid 27997:tid 28007] [client 52.167.165.186:7276] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "aRegxtpja_6cDxKbxFkXogAAAMg"]
[Sat Nov 15 05:36:07.970790 2025] [:error] [pid 27910:tid 27962] [client 52.167.165.186:7261] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "aRegx46e1LusHMYkS7ZRAwAAAFU"]
[Sat Nov 15 05:36:08.741150 2025] [:error] [pid 37318:tid 37381] [client 52.167.165.186:6014] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "aRegyOgM1rHoEAqoQDcjtgAAARM"]
[Sat Nov 15 05:36:09.695691 2025] [:error] [pid 27910:tid 27959] [client 52.167.165.186:3276] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "aRegyY6e1LusHMYkS7ZRBQAAAFI"]
[Sat Nov 15 05:36:11.110562 2025] [:error] [pid 27909:tid 27925] [client 52.167.165.186:3309] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aRegyyTfZ6B57n8HepWK_gAAAAw"]
[Sat Nov 15 05:36:11.919334 2025] [:error] [pid 27911:tid 27970] [client 52.167.165.186:4582] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aRegy8GzUdrhGBIfiKS-qgAAAII"]
[Sat Nov 15 05:36:13.074876 2025] [:error] [pid 27997:tid 28015] [client 52.167.165.186:5996] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aRegzdpja_6cDxKbxFkXrwAAANA"]
[Sat Nov 15 05:36:13.711482 2025] [:error] [pid 27911:tid 27978] [client 52.167.165.186:7260] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aRegzcGzUdrhGBIfiKS-rQAAAIo"]
[Sat Nov 15 05:36:14.949508 2025] [:error] [pid 27910:tid 27945] [client 52.167.165.186:4583] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aRegzo6e1LusHMYkS7ZRDQAAAEQ"]
[Sat Nov 15 05:36:16.755930 2025] [:error] [pid 27911:tid 27982] [client 52.167.165.186:6387] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aReg0MGzUdrhGBIfiKS-sQAAAI4"]
[Sat Nov 15 05:36:17.417750 2025] [:error] [pid 27997:tid 28020] [client 52.167.165.186:1550] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aReg0dpja_6cDxKbxFkXtAAAANU"]
[Sat Nov 15 05:36:22.398471 2025] [:error] [pid 37318:tid 37370] [client 52.167.165.186:1559] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aReg1ugM1rHoEAqoQDcjyQAAAQg"]
[Sat Nov 15 05:36:23.893309 2025] [:error] [pid 37318:tid 37378] [client 52.167.165.186:5906] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/info.php"] [unique_id "aReg1-gM1rHoEAqoQDcjzAAAARA"]
[Sat Nov 15 05:36:24.477918 2025] [:error] [pid 27997:tid 28009] [client 52.167.165.186:5908] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/info.php"] [unique_id "aReg2Npja_6cDxKbxFkXvwAAAMo"]
[Sat Nov 15 05:36:26.121117 2025] [:error] [pid 27910:tid 27941] [client 52.167.165.186:5418] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/info.php"] [unique_id "aReg2o6e1LusHMYkS7ZRGgAAAEA"]
[Sat Nov 15 05:36:26.792470 2025] [:error] [pid 27911:tid 27979] [client 52.167.165.186:5896] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/info.php"] [unique_id "aReg2sGzUdrhGBIfiKS-wQAAAIs"]
[Sat Nov 15 05:36:27.686879 2025] [:error] [pid 27909:tid 27918] [client 52.167.165.186:4933] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aReg2yTfZ6B57n8HepWLEgAAAAU"]
[Sat Nov 15 05:36:28.756965 2025] [:error] [pid 27910:tid 27962] [client 52.167.165.186:7270] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aReg3I6e1LusHMYkS7ZRIAAAAFU"]
[Sat Nov 15 05:36:30.023927 2025] [:error] [pid 27910:tid 27961] [client 52.167.165.186:6388] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aReg3o6e1LusHMYkS7ZRJQAAAFQ"]
[Sat Nov 15 05:36:31.253014 2025] [:error] [pid 27911:tid 27992] [client 52.167.165.186:4607] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aReg38GzUdrhGBIfiKS-yQAAAJg"]
[Sat Nov 15 05:36:31.931640 2025] [:error] [pid 27909:tid 27917] [client 52.167.165.186:6567] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rsnu.php"] [unique_id "aReg3yTfZ6B57n8HepWLHgAAAAQ"]
[Sat Nov 15 05:36:34.285670 2025] [:error] [pid 27911:tid 27988] [client 52.167.165.186:2113] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rsnu.php"] [unique_id "aReg4sGzUdrhGBIfiKS-zwAAAJQ"]
[Sat Nov 15 05:36:35.134732 2025] [:error] [pid 27911:tid 27987] [client 52.167.165.186:4551] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rsnu.php"] [unique_id "aReg48GzUdrhGBIfiKS-0gAAAJM"]
[Sat Nov 15 05:36:38.370914 2025] [:error] [pid 37318:tid 37365] [client 52.167.165.186:7305] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rsnu.php"] [unique_id "aReg5ugM1rHoEAqoQDcj2QAAAQM"]
[Sat Nov 15 05:36:40.764954 2025] [:error] [pid 27909:tid 27914] [client 52.167.165.186:4595] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x4.php"] [unique_id "aReg6CTfZ6B57n8HepWLIQAAAAE"]
[Sat Nov 15 05:36:42.445056 2025] [:error] [pid 27997:tid 28012] [client 52.167.165.186:6398] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x4.php"] [unique_id "aReg6tpja_6cDxKbxFkX2gAAAM0"]
[Sat Nov 15 05:36:43.982923 2025] [:error] [pid 27910:tid 27964] [client 52.167.165.186:4590] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x4.php"] [unique_id "aReg646e1LusHMYkS7ZROQAAAFc"]
[Sat Nov 15 05:36:47.509691 2025] [:error] [pid 37318:tid 37362] [client 52.167.165.186:7206] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x4.php"] [unique_id "aReg7-gM1rHoEAqoQDcj5gAAAQA"]
[Sat Nov 15 05:36:49.970830 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Sat Nov 15 05:36:50.187726 2025] [:error] [pid 37318:tid 37373] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/bless3.php
[Sat Nov 15 05:36:50.620980 2025] [:error] [pid 37318:tid 37381] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/456.php
[Sat Nov 15 05:36:50.832478 2025] [:error] [pid 37318:tid 37366] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sat Nov 15 05:36:51.056886 2025] [:error] [pid 37318:tid 37383] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Nov 15 05:36:51.754015 2025] [:error] [pid 37318:tid 37364] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/naxc.php
[Sat Nov 15 05:36:51.977709 2025] [:error] [pid 37318:tid 37379] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Sat Nov 15 05:36:52.190274 2025] [:error] [pid 37318:tid 37363] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/lc.php
[Sat Nov 15 05:36:52.403382 2025] [:error] [pid 37318:tid 37373] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/mo.php
[Sat Nov 15 05:36:52.648837 2025] [:error] [pid 37318:tid 37375] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/nij.php
[Sat Nov 15 05:36:53.011993 2025] [:error] [pid 37318:tid 37371] [client 52.167.165.186:6846] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Sat Nov 15 05:36:53.238781 2025] [:error] [pid 37318:tid 37381] [client 52.167.165.186:6846] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpas2.php"] [unique_id "aReg9egM1rHoEAqoQDcj-wAAARM"]
[Sat Nov 15 05:36:53.815134 2025] [:error] [pid 27911:tid 27991] [client 52.167.165.186:7643] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpas2.php"] [unique_id "aReg9cGzUdrhGBIfiKS-8wAAAJc"]
[Sat Nov 15 05:36:55.976327 2025] [:error] [pid 37318:tid 37363] [client 52.167.165.186:2115] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpas2.php"] [unique_id "aReg9-gM1rHoEAqoQDckBgAAAQE"]
[Sat Nov 15 05:36:59.110903 2025] [:error] [pid 27909:tid 27936] [client 52.167.165.186:6356] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpas2.php"] [unique_id "aReg-yTfZ6B57n8HepWLNwAAABc"]
[Sat Nov 15 05:37:01.735879 2025] [:error] [pid 27911:tid 27973] [client 52.167.165.186:7657] [client 52.167.165.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "aReg_cGzUdrhGBIfiKS--wAAAIU"]
[Sat Nov 15 05:37:02.591032 2025] [:error] [pid 27911:tid 27980] [client 52.167.165.186:7667] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "aReg_sGzUdrhGBIfiKS-_AAAAIw"]
[Sat Nov 15 05:37:03.656708 2025] [:error] [pid 27909:tid 27929] [client 52.167.165.186:6829] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "aReg_yTfZ6B57n8HepWLQAAAABA"]
[Sat Nov 15 05:37:04.894539 2025] [:error] [pid 27997:tid 28013] [client 52.167.165.186:2551] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "aRehANpja_6cDxKbxFkX7gAAAM4"]
[Sat Nov 15 05:37:05.822808 2025] [:error] [pid 27997:tid 28017] [client 52.167.165.186:7617] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd67.php"] [unique_id "aRehAdpja_6cDxKbxFkX8AAAANI"]
[Sat Nov 15 05:37:14.842357 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:2783] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd67.php"] [unique_id "aRehCugM1rHoEAqoQDckMwAAAQ4"]
[Sat Nov 15 05:37:15.590239 2025] [:error] [pid 27997:tid 28017] [client 52.167.165.186:4240] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd67.php"] [unique_id "aRehC9pja_6cDxKbxFkYBgAAANI"]
[Sat Nov 15 05:37:16.350582 2025] [:error] [pid 27910:tid 27959] [client 52.167.165.186:2814] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd67.php"] [unique_id "aRehDI6e1LusHMYkS7ZRcQAAAFI"]
[Sat Nov 15 05:37:18.107712 2025] [:error] [pid 27909:tid 27931] [client 52.167.165.186:4868] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alam.php"] [unique_id "aRehDiTfZ6B57n8HepWLYQAAABI"]
[Sat Nov 15 05:37:18.767507 2025] [:error] [pid 27911:tid 27969] [client 52.167.165.186:5267] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alam.php"] [unique_id "aRehDsGzUdrhGBIfiKS_HwAAAIE"]
[Sat Nov 15 05:37:20.028002 2025] [:error] [pid 27911:tid 27977] [client 52.167.165.186:2544] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alam.php"] [unique_id "aRehEMGzUdrhGBIfiKS_IgAAAIk"]
[Sat Nov 15 05:37:21.328786 2025] [:error] [pid 37318:tid 37388] [client 52.167.165.186:2811] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alam.php"] [unique_id "aRehEegM1rHoEAqoQDckSAAAARY"]
[Sat Nov 15 05:37:22.728965 2025] [:error] [pid 27997:tid 28021] [client 52.167.165.186:5267] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/700.php"] [unique_id "aRehEtpja_6cDxKbxFkYGAAAANY"]
[Sat Nov 15 05:37:23.462406 2025] [:error] [pid 27911:tid 27970] [client 52.167.165.186:4883] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/700.php"] [unique_id "aRehE8GzUdrhGBIfiKS_KgAAAII"]
[Sat Nov 15 05:37:25.440627 2025] [:error] [pid 27909:tid 27914] [client 52.167.165.186:4921] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/700.php"] [unique_id "aRehFSTfZ6B57n8HepWLeAAAAAE"]
[Sat Nov 15 05:37:26.061522 2025] [:error] [pid 27910:tid 27956] [client 52.167.165.186:7320] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/700.php"] [unique_id "aRehFo6e1LusHMYkS7ZRhAAAAE8"]
[Sat Nov 15 05:37:28.224013 2025] [:error] [pid 27911:tid 27969] [client 52.167.165.186:5302] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fifi.php"] [unique_id "aRehGMGzUdrhGBIfiKS_MAAAAIE"]
[Sat Nov 15 05:37:31.309101 2025] [:error] [pid 27997:tid 28005] [client 52.167.165.186:5251] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fifi.php"] [unique_id "aRehG9pja_6cDxKbxFkYMAAAAMY"]
[Sat Nov 15 05:37:33.386341 2025] [:error] [pid 37318:tid 37365] [client 52.167.165.186:2220] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fifi.php"] [unique_id "aRehHegM1rHoEAqoQDckaQAAAQM"]
[Sat Nov 15 05:37:35.964089 2025] [:error] [pid 27910:tid 27957] [client 52.167.165.186:2352] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fifi.php"] [unique_id "aRehH46e1LusHMYkS7ZRlwAAAFA"]
[Sat Nov 15 05:37:36.708727 2025] [:error] [pid 27997:tid 28020] [client 52.167.165.186:2530] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-signup.php"] [unique_id "aRehINpja_6cDxKbxFkYOwAAANU"]
[Sat Nov 15 05:37:38.298199 2025] [:error] [pid 27910:tid 27956] [client 52.167.165.186:2339] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-signup.php"] [unique_id "aRehIo6e1LusHMYkS7ZRoAAAAE8"]
[Sat Nov 15 05:37:39.796504 2025] [:error] [pid 37318:tid 37365] [client 52.167.165.186:7652] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-signup.php"] [unique_id "aRehI-gM1rHoEAqoQDckegAAAQM"]
[Sat Nov 15 05:37:41.383526 2025] [:error] [pid 27997:tid 28005] [client 52.167.165.186:7846] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-signup.php"] [unique_id "aRehJdpja_6cDxKbxFkYSQAAAMY"]
[Sat Nov 15 05:37:42.656722 2025] [:error] [pid 37318:tid 37382] [client 52.167.165.186:2313] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gold.php"] [unique_id "aRehJugM1rHoEAqoQDckgwAAARQ"]
[Sat Nov 15 05:37:44.463163 2025] [:error] [pid 27997:tid 28006] [client 52.167.165.186:2184] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gold.php"] [unique_id "aRehKNpja_6cDxKbxFkYVQAAAMc"]
[Sat Nov 15 05:37:45.388068 2025] [:error] [pid 27910:tid 27947] [client 52.167.165.186:2194] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gold.php"] [unique_id "aRehKY6e1LusHMYkS7ZRrQAAAEY"]
[Sat Nov 15 05:37:46.113676 2025] [:error] [pid 27910:tid 27959] [client 52.167.165.186:2225] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gold.php"] [unique_id "aRehKo6e1LusHMYkS7ZRrwAAAFI"]
[Sat Nov 15 05:37:47.196982 2025] [:error] [pid 27910:tid 27963] [client 52.167.165.186:2216] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blurbs8.php"] [unique_id "aRehK46e1LusHMYkS7ZRsgAAAFY"]
[Sat Nov 15 05:37:47.825595 2025] [:error] [pid 27911:tid 27989] [client 52.167.165.186:4283] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blurbs8.php"] [unique_id "aRehK8GzUdrhGBIfiKS_SwAAAJU"]
[Sat Nov 15 05:37:50.824285 2025] [:error] [pid 27911:tid 27983] [client 52.167.165.186:5268] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blurbs8.php"] [unique_id "aRehLsGzUdrhGBIfiKS_UwAAAI8"]
[Sat Nov 15 05:37:51.492702 2025] [:error] [pid 27911:tid 27977] [client 52.167.165.186:2342] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blurbs8.php"] [unique_id "aRehL8GzUdrhGBIfiKS_VwAAAIk"]
[Sat Nov 15 05:37:53.546151 2025] [:error] [pid 27909:tid 27918] [client 52.167.165.186:6509] File does not exist: /usr/local/apache/htdocs/suspended-page/sid.php
[Sat Nov 15 05:37:53.966676 2025] [:error] [pid 27909:tid 27926] [client 52.167.165.186:6509] [client 52.167.165.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aRehMSTfZ6B57n8HepWLnQAAAA0"]
[Sat Nov 15 05:37:55.103899 2025] [:error] [pid 37318:tid 37369] [client 52.167.165.186:2498] File does not exist: /usr/local/apache/htdocs/suspended-page/unity.php
[Sat Nov 15 05:37:55.529850 2025] [:error] [pid 37318:tid 37363] [client 52.167.165.186:2498] File does not exist: /usr/local/apache/htdocs/suspended-page/cf.php
[Sat Nov 15 05:37:55.742195 2025] [:error] [pid 37318:tid 37364] [client 52.167.165.186:2498] File does not exist: /usr/local/apache/htdocs/suspended-page/get.php
[Sat Nov 15 05:37:55.950107 2025] [:error] [pid 37318:tid 37368] [client 52.167.165.186:2498] File does not exist: /usr/local/apache/htdocs/suspended-page/v3.php
[Sat Nov 15 05:37:56.367052 2025] [:error] [pid 37318:tid 37390] [client 52.167.165.186:2498] File does not exist: /usr/local/apache/htdocs/suspended-page/wteed.php
[Sat Nov 15 05:37:57.327784 2025] [:error] [pid 37318:tid 37382] [client 52.167.165.186:2498] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Sat Nov 15 05:37:57.544371 2025] [:error] [pid 37318:tid 37381] [client 52.167.165.186:2498] File does not exist: /usr/local/apache/htdocs/suspended-page/ntgn.php
[Sat Nov 15 05:37:57.751646 2025] [:error] [pid 37318:tid 37373] [client 52.167.165.186:2498] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Nov 15 05:37:57.956403 2025] [:error] [pid 37318:tid 37378] [client 52.167.165.186:2498] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "aRehNegM1rHoEAqoQDckowAAARA"]
[Sat Nov 15 05:37:59.039501 2025] [:error] [pid 27911:tid 27981] [client 52.167.165.186:4543] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "aRehN8GzUdrhGBIfiKS_XQAAAI0"]
[Sat Nov 15 05:38:01.443612 2025] [:error] [pid 37318:tid 37390] [client 52.167.165.186:8766] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "aRehOegM1rHoEAqoQDckqAAAARg"]
[Sat Nov 15 05:38:02.122420 2025] [:error] [pid 37318:tid 37373] [client 52.167.165.186:5273] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "aRehOugM1rHoEAqoQDckrAAAAQs"]
[Sat Nov 15 05:38:03.720400 2025] [:error] [pid 27911:tid 27971] [client 52.167.165.186:4502] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7h.php"] [unique_id "aRehO8GzUdrhGBIfiKS_ZQAAAIM"]
[Sat Nov 15 05:38:04.288883 2025] [:error] [pid 27911:tid 27974] [client 52.167.165.186:2518] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7h.php"] [unique_id "aRehPMGzUdrhGBIfiKS_aQAAAIY"]
[Sat Nov 15 05:38:06.393831 2025] [:error] [pid 37318:tid 37366] [client 52.167.165.186:5266] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7h.php"] [unique_id "aRehPugM1rHoEAqoQDckvQAAAQQ"]
[Sat Nov 15 05:38:08.791889 2025] [:error] [pid 27997:tid 28019] [client 52.167.165.186:2506] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7h.php"] [unique_id "aRehQNpja_6cDxKbxFkYdwAAANQ"]
[Sat Nov 15 05:38:09.765297 2025] [:error] [pid 27910:tid 27944] [client 52.167.165.186:5182] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "aRehQY6e1LusHMYkS7ZRywAAAEM"]
[Sat Nov 15 05:38:10.864482 2025] [:error] [pid 27909:tid 27926] [client 52.167.165.186:2188] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "aRehQiTfZ6B57n8HepWLuQAAAA0"]
[Sat Nov 15 05:38:12.285504 2025] [:error] [pid 37318:tid 37381] [client 52.167.165.186:5159] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "aRehROgM1rHoEAqoQDckzwAAARM"]
[Sat Nov 15 05:38:13.167877 2025] [:error] [pid 27910:tid 27955] [client 52.167.165.186:4239] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "aRehRY6e1LusHMYkS7ZR1wAAAE4"]
[Sat Nov 15 05:38:14.120211 2025] [:error] [pid 37318:tid 37373] [client 52.167.165.186:2505] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aRehRugM1rHoEAqoQDck0wAAAQs"]
[Sat Nov 15 05:38:15.049771 2025] [:error] [pid 27909:tid 27933] [client 52.167.165.186:5147] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aRehRyTfZ6B57n8HepWLwQAAABQ"]
[Sat Nov 15 05:38:16.937781 2025] [:error] [pid 27997:tid 28002] [client 52.167.165.186:4229] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aRehSNpja_6cDxKbxFkYfQAAAMM"]
[Sat Nov 15 05:38:17.592765 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:2511] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aRehSegM1rHoEAqoQDck1gAAAQ4"]
[Sat Nov 15 05:38:20.036416 2025] [:error] [pid 27910:tid 27965] [client 52.167.165.186:2322] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mjq.php"] [unique_id "aRehTI6e1LusHMYkS7ZR4QAAAFg"]
[Sat Nov 15 05:38:24.301364 2025] [:error] [pid 27910:tid 27951] [client 52.167.165.186:6882] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mjq.php"] [unique_id "aRehUI6e1LusHMYkS7ZR4wAAAEo"]
[Sat Nov 15 05:38:26.003939 2025] [:error] [pid 27911:tid 27991] [client 52.167.165.186:6877] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mjq.php"] [unique_id "aRehUsGzUdrhGBIfiKS_nwAAAJc"]
[Sat Nov 15 05:38:29.289905 2025] [:error] [pid 27910:tid 27961] [client 52.167.165.186:2718] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mjq.php"] [unique_id "aRehVY6e1LusHMYkS7ZR7wAAAFQ"]
[Sat Nov 15 05:38:34.696892 2025] [:error] [pid 27911:tid 27973] [client 52.167.165.186:6883] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rdfe.php"] [unique_id "aRehWsGzUdrhGBIfiKS_sgAAAIU"]
[Sat Nov 15 05:38:36.609498 2025] [:error] [pid 37318:tid 37373] [client 52.167.165.186:7386] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rdfe.php"] [unique_id "aRehXOgM1rHoEAqoQDclCAAAAQs"]
[Sat Nov 15 05:38:38.539278 2025] [:error] [pid 27909:tid 27933] [client 52.167.165.186:2642] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rdfe.php"] [unique_id "aRehXiTfZ6B57n8HepWL4gAAABQ"]
[Sat Nov 15 05:38:39.349916 2025] [:error] [pid 27909:tid 27924] [client 52.167.165.186:2665] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rdfe.php"] [unique_id "aRehXyTfZ6B57n8HepWL5QAAAAs"]
[Sat Nov 15 05:38:41.412603 2025] [:error] [pid 27911:tid 27977] [client 52.167.165.186:5364] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xojryvch.php"] [unique_id "aRehYcGzUdrhGBIfiKS_ugAAAIk"]
[Sat Nov 15 05:38:42.670323 2025] [:error] [pid 27909:tid 27931] [client 52.167.165.186:4035] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xojryvch.php"] [unique_id "aRehYiTfZ6B57n8HepWL6QAAABI"]
[Sat Nov 15 05:38:44.764881 2025] [:error] [pid 27997:tid 28020] [client 52.167.165.186:4112] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xojryvch.php"] [unique_id "aRehZNpja_6cDxKbxFkYqQAAANU"]
[Sat Nov 15 05:38:45.597834 2025] [:error] [pid 37318:tid 37365] [client 52.167.165.186:4781] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xojryvch.php"] [unique_id "aRehZegM1rHoEAqoQDclEAAAAQM"]
[Sat Nov 15 05:38:46.497498 2025] [:error] [pid 27910:tid 27960] [client 52.167.165.186:4744] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reyna.php"] [unique_id "aRehZo6e1LusHMYkS7ZSBAAAAFM"]
[Sat Nov 15 05:38:52.892339 2025] [:error] [pid 37318:tid 37383] [client 52.167.165.186:6982] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reyna.php"] [unique_id "aRehbOgM1rHoEAqoQDclJwAAARU"]
[Sat Nov 15 05:38:53.898392 2025] [:error] [pid 27909:tid 27922] [client 52.167.165.186:1281] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reyna.php"] [unique_id "aRehbSTfZ6B57n8HepWL-AAAAAk"]
[Sat Nov 15 05:38:55.558408 2025] [:error] [pid 27911:tid 27983] [client 52.167.165.186:3383] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reyna.php"] [unique_id "aRehb8GzUdrhGBIfiKS_yAAAAI8"]
[Sat Nov 15 05:38:59.338433 2025] [:error] [pid 27911:tid 27986] [client 52.167.165.186:3589] File does not exist: /usr/local/apache/htdocs/suspended-page/unzip.php
[Sat Nov 15 05:38:59.550468 2025] [:error] [pid 27911:tid 27972] [client 52.167.165.186:3589] File does not exist: /usr/local/apache/htdocs/suspended-page/cool.php
[Sat Nov 15 05:39:00.000992 2025] [:error] [pid 27911:tid 27985] [client 52.167.165.186:3589] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Sat Nov 15 05:39:00.225990 2025] [:error] [pid 27911:tid 27982] [client 52.167.165.186:3589] File does not exist: /usr/local/apache/htdocs/suspended-page/w3llstore.php
[Sat Nov 15 05:39:00.485722 2025] [:error] [pid 27911:tid 27978] [client 52.167.165.186:3589] File does not exist: /usr/local/apache/htdocs/suspended-page/aua.php
[Sat Nov 15 05:39:00.699530 2025] [:error] [pid 27911:tid 27973] [client 52.167.165.186:3589] File does not exist: /usr/local/apache/htdocs/suspended-page/c4.php
[Sat Nov 15 05:39:00.911838 2025] [:error] [pid 27911:tid 27992] [client 52.167.165.186:3589] File does not exist: /usr/local/apache/htdocs/suspended-page/bu5.php
[Sat Nov 15 05:39:01.125416 2025] [:error] [pid 27911:tid 27991] [client 52.167.165.186:3589] File does not exist: /usr/local/apache/htdocs/suspended-page/lhh2.php
[Sat Nov 15 05:39:01.338975 2025] [:error] [pid 27911:tid 27970] [client 52.167.165.186:3589] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Nov 15 05:39:02.416453 2025] [:error] [pid 27911:tid 27979] [client 52.167.165.186:3589] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "aRehdsGzUdrhGBIfiKS_3wAAAIs"]
[Sat Nov 15 05:39:03.588678 2025] [:error] [pid 27997:tid 28009] [client 52.167.165.186:1093] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "aRehd9pja_6cDxKbxFkYugAAAMo"]
[Sat Nov 15 05:39:04.651696 2025] [:error] [pid 27909:tid 27917] [client 52.167.165.186:1028] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "aReheCTfZ6B57n8HepWMCAAAAAQ"]
[Sat Nov 15 05:39:06.140287 2025] [:error] [pid 27909:tid 27935] [client 52.167.165.186:1055] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "aReheiTfZ6B57n8HepWMCgAAABY"]
[Sat Nov 15 05:39:07.208538 2025] [:error] [pid 27911:tid 27990] [client 52.167.165.186:4595] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aRehe8GzUdrhGBIfiKS_5QAAAJY"]
[Sat Nov 15 05:39:08.032517 2025] [:error] [pid 27909:tid 27915] [client 52.167.165.186:3007] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aRehfCTfZ6B57n8HepWMDQAAAAI"]
[Sat Nov 15 05:39:08.981172 2025] [:error] [pid 27909:tid 27920] [client 52.167.165.186:1111] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aRehfCTfZ6B57n8HepWMDwAAAAc"]
[Sat Nov 15 05:39:10.124938 2025] [:error] [pid 37318:tid 37378] [client 52.167.165.186:7845] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aRehfugM1rHoEAqoQDclSgAAARA"]
[Sat Nov 15 05:39:11.346847 2025] [:error] [pid 27997:tid 28011] [client 52.167.165.186:8158] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aRehf9pja_6cDxKbxFkYyAAAAMw"]
[Sat Nov 15 05:39:12.190755 2025] [:error] [pid 27910:tid 27946] [client 52.167.165.186:3745] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aRehgI6e1LusHMYkS7ZSPwAAAEU"]
[Sat Nov 15 05:39:17.889369 2025] [:error] [pid 27997:tid 28016] [client 52.167.165.186:5859] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aRehhdpja_6cDxKbxFkY0wAAANE"]
[Sat Nov 15 05:39:19.389358 2025] [:error] [pid 27909:tid 27913] [client 52.167.165.186:4002] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aRehhyTfZ6B57n8HepWMHQAAAAA"]
[Sat Nov 15 05:39:22.484597 2025] [:error] [pid 27997:tid 28010] [client 52.167.165.186:8803] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "aRehitpja_6cDxKbxFkY3QAAAMs"]
[Sat Nov 15 05:39:23.200611 2025] [:error] [pid 37318:tid 37383] [client 52.167.165.186:8647] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "aRehi-gM1rHoEAqoQDclXwAAARU"]
[Sat Nov 15 05:39:24.664522 2025] [:error] [pid 27910:tid 27963] [client 52.167.165.186:7907] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "aRehjI6e1LusHMYkS7ZSWwAAAFY"]
[Sat Nov 15 05:39:25.809103 2025] [:error] [pid 27997:tid 28004] [client 52.167.165.186:7884] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "aRehjdpja_6cDxKbxFkY5AAAAMU"]
[Sat Nov 15 05:39:27.133780 2025] [:error] [pid 27911:tid 27977] [client 52.167.165.186:7921] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "aRehj8GzUdrhGBIfiKTABgAAAIk"]
[Sat Nov 15 05:39:27.900202 2025] [:error] [pid 27997:tid 28020] [client 52.167.165.186:1344] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "aRehj9pja_6cDxKbxFkY5wAAANU"]
[Sat Nov 15 05:39:37.080742 2025] [:error] [pid 37318:tid 37381] [client 52.167.165.186:1203] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "aRehmegM1rHoEAqoQDcldwAAARM"]
[Sat Nov 15 05:39:38.783698 2025] [:error] [pid 37318:tid 37388] [client 52.167.165.186:3404] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "aRehmugM1rHoEAqoQDclewAAARY"]
[Sat Nov 15 05:39:39.935597 2025] [:error] [pid 27909:tid 27919] [client 52.167.165.186:5073] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cache.php"] [unique_id "aRehmyTfZ6B57n8HepWMXgAAAAY"]
[Sat Nov 15 05:39:40.701027 2025] [:error] [pid 37318:tid 37371] [client 52.167.165.186:6761] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cache.php"] [unique_id "aRehnOgM1rHoEAqoQDclfgAAAQk"]
[Sat Nov 15 05:39:41.629745 2025] [:error] [pid 37318:tid 37378] [client 52.167.165.186:2490] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cache.php"] [unique_id "aRehnegM1rHoEAqoQDclhAAAARA"]
[Sat Nov 15 05:39:42.837634 2025] [:error] [pid 27911:tid 27992] [client 52.167.165.186:2474] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cache.php"] [unique_id "aRehnsGzUdrhGBIfiKTAEgAAAJg"]
[Sat Nov 15 05:39:43.858121 2025] [:error] [pid 37318:tid 37380] [client 52.167.165.186:8584] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ffile.php"] [unique_id "aRehn-gM1rHoEAqoQDcllQAAARI"]
[Sat Nov 15 05:39:48.298231 2025] [:error] [pid 27910:tid 27951] [client 52.167.165.186:8010] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ffile.php"] [unique_id "aRehpI6e1LusHMYkS7ZShgAAAEo"]
[Sat Nov 15 05:39:51.931153 2025] [:error] [pid 27911:tid 27988] [client 52.167.165.186:6188] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ffile.php"] [unique_id "aRehp8GzUdrhGBIfiKTAGQAAAJQ"]
[Sat Nov 15 05:39:52.667460 2025] [:error] [pid 27911:tid 27989] [client 52.167.165.186:6726] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ffile.php"] [unique_id "aRehqMGzUdrhGBIfiKTAGgAAAJU"]
[Sat Nov 15 05:39:56.888935 2025] [:error] [pid 27997:tid 28001] [client 52.167.165.186:5060] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxac.php"] [unique_id "aRehrNpja_6cDxKbxFkZCwAAAMI"]
[Sat Nov 15 05:39:57.747212 2025] [:error] [pid 37318:tid 37367] [client 52.167.165.186:8844] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxac.php"] [unique_id "aRehregM1rHoEAqoQDclxAAAAQU"]
[Sat Nov 15 05:40:03.692667 2025] [:error] [pid 27997:tid 28011] [client 52.167.165.186:1902] File does not exist: /usr/local/apache/htdocs/suspended-page/nxac.php
[Sat Nov 15 05:40:03.913633 2025] [:error] [pid 27997:tid 28006] [client 52.167.165.186:1902] File does not exist: /usr/local/apache/htdocs/suspended-page/thh.php
[Sat Nov 15 05:40:06.046315 2025] [:error] [pid 27997:tid 28020] [client 52.167.165.186:1902] [client 52.167.165.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/buy.php"] [unique_id "aRehttpja_6cDxKbxFkZIQAAANU"]
[Sat Nov 15 05:40:07.109045 2025] [:error] [pid 27911:tid 27988] [client 52.167.165.186:1901] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Sat Nov 15 05:40:07.948953 2025] [:error] [pid 27911:tid 27984] [client 52.167.165.186:1901] File does not exist: /usr/local/apache/htdocs/suspended-page/fb.php
[Sat Nov 15 05:40:08.161924 2025] [:error] [pid 27911:tid 27980] [client 52.167.165.186:1901] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Sat Nov 15 05:40:08.382754 2025] [:error] [pid 27911:tid 27989] [client 52.167.165.186:1901] File does not exist: /usr/local/apache/htdocs/suspended-page/slo.php
[Sat Nov 15 05:40:08.606309 2025] [:error] [pid 27911:tid 27981] [client 52.167.165.186:1901] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Nov 15 05:40:08.823201 2025] [:error] [pid 27911:tid 27991] [client 52.167.165.186:1901] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Nov 15 05:40:09.254210 2025] [:error] [pid 27911:tid 27977] [client 52.167.165.186:1901] File does not exist: /usr/local/apache/htdocs/suspended-page/bqcheck.php
[Sat Nov 15 05:40:09.637537 2025] [:error] [pid 27911:tid 27968] [client 52.167.165.186:1901] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "aRehucGzUdrhGBIfiKTANgAAAIA"]
[Sat Nov 15 05:40:10.631883 2025] [:error] [pid 27911:tid 27973] [client 52.167.165.186:6178] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "aRehusGzUdrhGBIfiKTAOgAAAIU"]
[Sat Nov 15 05:40:11.652256 2025] [:error] [pid 27997:tid 28012] [client 52.167.165.186:6151] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "aRehu9pja_6cDxKbxFkZJwAAAM0"]
[Sat Nov 15 05:40:12.464478 2025] [:error] [pid 27909:tid 27929] [client 52.167.165.186:6197] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "aRehvCTfZ6B57n8HepWMfAAAABA"]
[Sat Nov 15 05:40:13.903289 2025] [:error] [pid 37318:tid 37369] [client 52.167.165.186:8035] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ar.php"] [unique_id "aRehvegM1rHoEAqoQDcl2QAAAQc"]
[Sat Nov 15 05:40:15.672961 2025] [:error] [pid 27911:tid 27983] [client 52.167.165.186:7561] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ar.php"] [unique_id "aRehv8GzUdrhGBIfiKTARwAAAI8"]
[Sat Nov 15 05:40:17.629846 2025] [:error] [pid 37318:tid 37369] [client 52.167.165.186:8592] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ar.php"] [unique_id "aRehwegM1rHoEAqoQDcl4gAAAQc"]
[Sat Nov 15 05:40:20.552326 2025] [:error] [pid 27911:tid 27990] [client 52.167.165.186:8056] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ar.php"] [unique_id "aRehxMGzUdrhGBIfiKTATwAAAJY"]
[Sat Nov 15 05:40:21.291190 2025] [:error] [pid 27910:tid 27949] [client 52.167.165.186:1885] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bv3.php"] [unique_id "aRehxY6e1LusHMYkS7ZS3wAAAEg"]
[Sat Nov 15 05:40:22.245978 2025] [:error] [pid 27910:tid 27954] [client 52.167.165.186:2460] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bv3.php"] [unique_id "aRehxo6e1LusHMYkS7ZS4AAAAE0"]
[Sat Nov 15 05:40:23.579685 2025] [:error] [pid 27909:tid 27916] [client 52.167.165.186:5530] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bv3.php"] [unique_id "aRehxyTfZ6B57n8HepWMiQAAAAM"]
[Sat Nov 15 05:40:25.066868 2025] [:error] [pid 37318:tid 37365] [client 52.167.165.186:5979] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bv3.php"] [unique_id "aRehyegM1rHoEAqoQDcl8AAAAQM"]
[Sat Nov 15 05:40:27.533836 2025] [:error] [pid 27910:tid 27951] [client 52.167.165.186:8005] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aRehy46e1LusHMYkS7ZS5wAAAEo"]
[Sat Nov 15 05:40:30.235872 2025] [:error] [pid 27910:tid 27949] [client 52.167.165.186:5665] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aRehzo6e1LusHMYkS7ZS8AAAAEg"]
[Sat Nov 15 05:40:30.743869 2025] [:error] [pid 37318:tid 37370] [client 52.167.165.186:7480] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aRehzugM1rHoEAqoQDcl8wAAAQg"]
[Sat Nov 15 05:40:31.358789 2025] [:error] [pid 27997:tid 28003] [client 52.167.165.186:3941] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aRehz9pja_6cDxKbxFkZQQAAAMQ"]
[Sat Nov 15 05:40:33.172125 2025] [:error] [pid 37318:tid 37381] [client 52.167.165.186:3932] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/racs3.php"] [unique_id "aReh0egM1rHoEAqoQDcl9wAAARM"]
[Sat Nov 15 05:40:33.880684 2025] [:error] [pid 27910:tid 27945] [client 52.167.165.186:3964] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/racs3.php"] [unique_id "aReh0Y6e1LusHMYkS7ZS9QAAAEQ"]
[Sat Nov 15 05:40:34.661712 2025] [:error] [pid 37318:tid 37380] [client 52.167.165.186:7467] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/racs3.php"] [unique_id "aReh0ugM1rHoEAqoQDcl-gAAARI"]
[Sat Nov 15 05:40:35.883045 2025] [:error] [pid 37318:tid 37379] [client 52.167.165.186:5428] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/racs3.php"] [unique_id "aReh0-gM1rHoEAqoQDcl_AAAARE"]
[Sat Nov 15 05:40:36.459163 2025] [:error] [pid 27909:tid 27914] [client 52.167.165.186:7562] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "aReh1CTfZ6B57n8HepWMmQAAAAE"]
[Sat Nov 15 05:40:37.622155 2025] [:error] [pid 27909:tid 27921] [client 52.167.165.186:3279] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "aReh1STfZ6B57n8HepWMnQAAAAg"]
[Sat Nov 15 05:40:38.725335 2025] [:error] [pid 27997:tid 28013] [client 52.167.165.186:5529] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "aReh1tpja_6cDxKbxFkZRwAAAM4"]
[Sat Nov 15 05:40:40.868735 2025] [:error] [pid 37318:tid 37378] [client 52.167.165.186:3294] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "aReh2OgM1rHoEAqoQDcmBQAAARA"]
[Sat Nov 15 05:40:45.515028 2025] [:error] [pid 27911:tid 27986] [client 52.167.165.186:1644] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lufix.php"] [unique_id "aReh3cGzUdrhGBIfiKTAXAAAAJI"]
[Sat Nov 15 05:40:46.103923 2025] [:error] [pid 27911:tid 27980] [client 52.167.165.186:5679] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lufix.php"] [unique_id "aReh3sGzUdrhGBIfiKTAXgAAAIw"]
[Sat Nov 15 05:40:46.976096 2025] [:error] [pid 27911:tid 27970] [client 52.167.165.186:5974] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lufix.php"] [unique_id "aReh3sGzUdrhGBIfiKTAYQAAAII"]
[Sat Nov 15 05:40:47.754913 2025] [:error] [pid 37318:tid 37378] [client 52.167.165.186:5988] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lufix.php"] [unique_id "aReh3-gM1rHoEAqoQDcmGAAAARA"]
[Sat Nov 15 05:40:49.329127 2025] [:error] [pid 27910:tid 27948] [client 52.167.165.186:1645] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bluejackets.php"] [unique_id "aReh4Y6e1LusHMYkS7ZTBAAAAEc"]
[Sat Nov 15 05:40:50.608749 2025] [:error] [pid 27910:tid 27951] [client 52.167.165.186:5984] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bluejackets.php"] [unique_id "aReh4o6e1LusHMYkS7ZTCAAAAEo"]
[Sat Nov 15 05:40:51.776014 2025] [:error] [pid 27997:tid 28010] [client 52.167.165.186:5385] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bluejackets.php"] [unique_id "aReh49pja_6cDxKbxFkZUwAAAMs"]
[Sat Nov 15 05:40:52.508354 2025] [:error] [pid 27909:tid 27931] [client 52.167.165.186:3470] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bluejackets.php"] [unique_id "aReh5CTfZ6B57n8HepWMpQAAABI"]
[Sat Nov 15 05:40:53.083030 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:3281] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zt2.php"] [unique_id "aReh5egM1rHoEAqoQDcmIgAAAQ4"]
[Sat Nov 15 05:40:54.231598 2025] [:error] [pid 27909:tid 27925] [client 52.167.165.186:6001] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zt2.php"] [unique_id "aReh5iTfZ6B57n8HepWMpwAAAAw"]
[Sat Nov 15 05:40:54.988888 2025] [:error] [pid 27909:tid 27926] [client 52.167.165.186:5383] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zt2.php"] [unique_id "aReh5iTfZ6B57n8HepWMqQAAAA0"]
[Sat Nov 15 05:40:56.167104 2025] [:error] [pid 27997:tid 28012] [client 52.167.165.186:6533] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zt2.php"] [unique_id "aReh6Npja_6cDxKbxFkZXAAAAM0"]
[Sat Nov 15 05:40:58.029169 2025] [:error] [pid 27997:tid 28017] [client 52.167.165.186:5437] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aReh6tpja_6cDxKbxFkZZAAAANI"]
[Sat Nov 15 05:40:59.142399 2025] [:error] [pid 27909:tid 27919] [client 52.167.165.186:3317] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aReh6yTfZ6B57n8HepWMrwAAAAY"]
[Sat Nov 15 05:41:00.847141 2025] [:error] [pid 37318:tid 37370] [client 52.167.165.186:3288] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aReh7OgM1rHoEAqoQDcmUQAAAQg"]
[Sat Nov 15 05:41:03.448347 2025] [:error] [pid 27911:tid 27976] [client 52.167.165.186:1582] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aReh78GzUdrhGBIfiKTAdAAAAIg"]
[Sat Nov 15 05:41:04.543267 2025] [:error] [pid 37318:tid 37366] [client 52.167.165.186:5641] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aReh8OgM1rHoEAqoQDcmZgAAAQQ"]
[Sat Nov 15 05:41:06.634177 2025] [:error] [pid 27997:tid 28011] [client 52.167.165.186:3297] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aReh8tpja_6cDxKbxFkZbAAAAMw"]
[Sat Nov 15 05:41:07.875450 2025] [:error] [pid 27997:tid 28008] [client 52.167.165.186:3924] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aReh89pja_6cDxKbxFkZcAAAAMk"]
[Sat Nov 15 05:41:09.205411 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:5395] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Sat Nov 15 05:41:09.649869 2025] [:error] [pid 37318:tid 37381] [client 52.167.165.186:5395] File does not exist: /usr/local/apache/htdocs/suspended-page/aa8.php
[Sat Nov 15 05:41:09.861504 2025] [:error] [pid 37318:tid 37375] [client 52.167.165.186:5395] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php
[Sat Nov 15 05:41:10.073203 2025] [:error] [pid 37318:tid 37373] [client 52.167.165.186:5395] File does not exist: /usr/local/apache/htdocs/suspended-page/r4f_1.php
[Sat Nov 15 05:41:10.301471 2025] [:error] [pid 37318:tid 37382] [client 52.167.165.186:5395] File does not exist: /usr/local/apache/htdocs/suspended-page/sarang.php
[Sat Nov 15 05:41:10.514015 2025] [:error] [pid 37318:tid 37372] [client 52.167.165.186:5395] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Nov 15 05:41:10.801436 2025] [:error] [pid 37318:tid 37379] [client 52.167.165.186:5395] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Sat Nov 15 05:41:11.019826 2025] [:error] [pid 37318:tid 37390] [client 52.167.165.186:5395] File does not exist: /usr/local/apache/htdocs/suspended-page/xo.php
[Sat Nov 15 05:41:11.232681 2025] [:error] [pid 37318:tid 37362] [client 52.167.165.186:5395] File does not exist: /usr/local/apache/htdocs/suspended-page/ggs.php
[Sat Nov 15 05:41:11.473735 2025] [:error] [pid 37318:tid 37364] [client 52.167.165.186:5395] File does not exist: /usr/local/apache/htdocs/suspended-page/wsr2.php
[Sat Nov 15 05:41:12.133959 2025] [:error] [pid 37318:tid 37363] [client 52.167.165.186:5395] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class9.php"] [unique_id "aReh-OgM1rHoEAqoQDcmiAAAAQE"]
[Sat Nov 15 05:41:13.320709 2025] [:error] [pid 27911:tid 27992] [client 52.167.165.186:5975] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class9.php"] [unique_id "aReh-cGzUdrhGBIfiKTAfAAAAJg"]
[Sat Nov 15 05:41:14.366835 2025] [:error] [pid 27910:tid 27951] [client 52.167.165.186:8520] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class9.php"] [unique_id "aReh-o6e1LusHMYkS7ZTJwAAAEo"]
[Sat Nov 15 05:41:16.483122 2025] [:error] [pid 27911:tid 27987] [client 52.167.165.186:6559] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class9.php"] [unique_id "aReh_MGzUdrhGBIfiKTAggAAAJM"]
[Sat Nov 15 05:41:17.357112 2025] [:error] [pid 27909:tid 27931] [client 52.167.165.186:3275] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/wsr2.php"] [unique_id "aReh_STfZ6B57n8HepWMwwAAABI"]
[Sat Nov 15 05:41:19.039592 2025] [:error] [pid 27909:tid 27937] [client 52.167.165.186:3926] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/wsr2.php"] [unique_id "aReh_yTfZ6B57n8HepWMywAAABg"]
[Sat Nov 15 05:41:21.949257 2025] [:error] [pid 27910:tid 27946] [client 52.167.165.186:5667] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/wsr2.php"] [unique_id "aReiAY6e1LusHMYkS7ZTLAAAAEU"]
[Sat Nov 15 05:41:22.590801 2025] [:error] [pid 27910:tid 27944] [client 52.167.165.186:7601] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/wsr2.php"] [unique_id "aReiAo6e1LusHMYkS7ZTLQAAAEM"]
[Sat Nov 15 05:41:23.924285 2025] [:error] [pid 27997:tid 28014] [client 52.167.165.186:3936] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tcp.php"] [unique_id "aReiA9pja_6cDxKbxFkZgAAAAM8"]
[Sat Nov 15 05:41:24.614699 2025] [:error] [pid 27910:tid 27948] [client 52.167.165.186:1592] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tcp.php"] [unique_id "aReiBI6e1LusHMYkS7ZTMAAAAEc"]
[Sat Nov 15 05:41:26.507504 2025] [:error] [pid 27911:tid 27981] [client 52.167.165.186:3951] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tcp.php"] [unique_id "aReiBsGzUdrhGBIfiKTAnwAAAI0"]
[Sat Nov 15 05:41:27.082066 2025] [:error] [pid 27911:tid 27970] [client 52.167.165.186:1542] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tcp.php"] [unique_id "aReiB8GzUdrhGBIfiKTAoAAAAII"]
[Sat Nov 15 05:41:28.572148 2025] [:error] [pid 37318:tid 37367] [client 52.167.165.186:3277] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/witmm.php"] [unique_id "aReiCOgM1rHoEAqoQDcmqwAAAQU"]
[Sat Nov 15 05:41:29.145885 2025] [:error] [pid 27911:tid 27968] [client 52.167.165.186:5678] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/witmm.php"] [unique_id "aReiCcGzUdrhGBIfiKTApAAAAIA"]
[Sat Nov 15 05:41:29.619463 2025] [:error] [pid 27911:tid 27979] [client 52.167.165.186:7578] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/witmm.php"] [unique_id "aReiCcGzUdrhGBIfiKTApgAAAIs"]
[Sat Nov 15 05:41:30.477740 2025] [:error] [pid 27997:tid 28013] [client 52.167.165.186:3935] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/witmm.php"] [unique_id "aReiCtpja_6cDxKbxFkZoAAAAM4"]
[Sat Nov 15 05:41:31.128450 2025] [:error] [pid 37318:tid 37378] [client 52.167.165.186:3956] [client 52.167.165.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aReiC-gM1rHoEAqoQDcmvAAAARA"]
[Sat Nov 15 05:41:31.913373 2025] [:error] [pid 27909:tid 27926] [client 52.167.165.186:5429] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aReiCyTfZ6B57n8HepWM9gAAAA0"]
[Sat Nov 15 05:41:32.990092 2025] [:error] [pid 27997:tid 28012] [client 52.167.165.186:8522] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aReiDNpja_6cDxKbxFkZqwAAAM0"]
[Sat Nov 15 05:41:33.478809 2025] [:error] [pid 27997:tid 28022] [client 52.167.165.186:3290] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aReiDdpja_6cDxKbxFkZrAAAANc"]
[Sat Nov 15 05:41:34.127501 2025] [:error] [pid 27997:tid 28008] [client 52.167.165.186:4864] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aReiDtpja_6cDxKbxFkZrgAAAMk"]
[Sat Nov 15 05:41:35.222775 2025] [:error] [pid 27909:tid 27920] [client 52.167.165.186:5661] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxx.php"] [unique_id "aReiDyTfZ6B57n8HepWM-gAAAAc"]
[Sat Nov 15 05:41:35.990784 2025] [:error] [pid 37318:tid 37368] [client 52.167.165.186:7584] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxx.php"] [unique_id "aReiD-gM1rHoEAqoQDcmyQAAAQY"]
[Sat Nov 15 05:41:36.621196 2025] [:error] [pid 27911:tid 27970] [client 52.167.165.186:8533] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxx.php"] [unique_id "aReiEMGzUdrhGBIfiKTAsgAAAII"]
[Sat Nov 15 05:41:38.167353 2025] [:error] [pid 27909:tid 27930] [client 52.167.165.186:5987] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxx.php"] [unique_id "aReiEiTfZ6B57n8HepWM_AAAABE"]
[Sat Nov 15 05:41:38.939954 2025] [:error] [pid 37318:tid 37367] [client 52.167.165.186:5991] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaaa.php"] [unique_id "aReiEugM1rHoEAqoQDcm1QAAAQU"]
[Sat Nov 15 05:41:40.037721 2025] [:error] [pid 27911:tid 27987] [client 52.167.165.186:5412] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaaa.php"] [unique_id "aReiFMGzUdrhGBIfiKTAuAAAAJM"]
[Sat Nov 15 05:41:40.620060 2025] [:error] [pid 27909:tid 27928] [client 52.167.165.186:3264] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaaa.php"] [unique_id "aReiFCTfZ6B57n8HepWNBwAAAA8"]
[Sat Nov 15 05:41:41.729298 2025] [:error] [pid 27911:tid 27976] [client 52.167.165.186:5680] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaaa.php"] [unique_id "aReiFcGzUdrhGBIfiKTAvAAAAIg"]
[Sat Nov 15 05:41:42.633846 2025] [:error] [pid 27997:tid 28016] [client 52.167.165.186:8602] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aReiFtpja_6cDxKbxFkZxwAAANE"]
[Sat Nov 15 05:41:43.411731 2025] [:error] [pid 37318:tid 37378] [client 52.167.165.186:8515] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aReiF-gM1rHoEAqoQDcm3gAAARA"]
[Sat Nov 15 05:41:45.260342 2025] [:error] [pid 27909:tid 27932] [client 52.167.165.186:3961] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aReiGSTfZ6B57n8HepWNEAAAABM"]
[Sat Nov 15 05:41:46.561194 2025] [:error] [pid 27910:tid 27954] [client 52.167.165.186:7479] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aReiGo6e1LusHMYkS7ZTZwAAAE0"]
[Sat Nov 15 05:41:47.719462 2025] [:error] [pid 37318:tid 37390] [client 52.167.165.186:3939] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aReiG-gM1rHoEAqoQDcm5wAAARg"]
[Sat Nov 15 05:41:48.396838 2025] [:error] [pid 27910:tid 27948] [client 52.167.165.186:8561] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aReiHI6e1LusHMYkS7ZTbwAAAEc"]
[Sat Nov 15 05:41:49.075775 2025] [:error] [pid 27910:tid 27958] [client 52.167.165.186:8575] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aReiHY6e1LusHMYkS7ZTcwAAAFE"]
[Sat Nov 15 05:41:50.467681 2025] [:error] [pid 37318:tid 37368] [client 52.167.165.186:8570] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aReiHugM1rHoEAqoQDcm7QAAAQY"]
[Sat Nov 15 05:41:50.995293 2025] [:error] [pid 27909:tid 27924] [client 52.167.165.186:7559] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc.php"] [unique_id "aReiHiTfZ6B57n8HepWNFwAAAAs"]
[Sat Nov 15 05:41:52.629490 2025] [:error] [pid 27909:tid 27917] [client 52.167.165.186:5400] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc.php"] [unique_id "aReiICTfZ6B57n8HepWNHAAAAAQ"]
[Sat Nov 15 05:41:53.206807 2025] [:error] [pid 27909:tid 27916] [client 52.167.165.186:5376] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc.php"] [unique_id "aReiISTfZ6B57n8HepWNHgAAAAM"]
[Sat Nov 15 05:41:55.236386 2025] [:error] [pid 27909:tid 27928] [client 52.167.165.186:3948] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc.php"] [unique_id "aReiIyTfZ6B57n8HepWNJAAAAA8"]
[Sat Nov 15 05:41:55.785946 2025] [:error] [pid 37318:tid 37374] [client 52.167.165.186:1865] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dex.php"] [unique_id "aReiI-gM1rHoEAqoQDcm-AAAAQw"]
[Sat Nov 15 05:41:58.012156 2025] [:error] [pid 27909:tid 27933] [client 52.167.165.186:7588] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dex.php"] [unique_id "aReiJiTfZ6B57n8HepWNKQAAABQ"]
[Sat Nov 15 05:41:59.166962 2025] [:error] [pid 27911:tid 27980] [client 52.167.165.186:5669] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dex.php"] [unique_id "aReiJ8GzUdrhGBIfiKTA2QAAAIw"]
[Sat Nov 15 05:42:00.051350 2025] [:error] [pid 37318:tid 37365] [client 52.167.165.186:7554] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dex.php"] [unique_id "aReiKOgM1rHoEAqoQDcnAgAAAQM"]
[Sat Nov 15 05:42:00.796864 2025] [:error] [pid 37318:tid 37371] [client 52.167.165.186:1856] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad.php"] [unique_id "aReiKOgM1rHoEAqoQDcnBQAAAQk"]
[Sat Nov 15 05:42:01.492663 2025] [:error] [pid 37318:tid 37388] [client 52.167.165.186:7448] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad.php"] [unique_id "aReiKegM1rHoEAqoQDcnCAAAARY"]
[Sat Nov 15 05:42:02.911781 2025] [:error] [pid 27909:tid 27932] [client 52.167.165.186:7575] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad.php"] [unique_id "aReiKiTfZ6B57n8HepWNMAAAABM"]
[Sat Nov 15 05:42:03.495414 2025] [:error] [pid 27909:tid 27933] [client 52.167.165.186:8525] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad.php"] [unique_id "aReiKyTfZ6B57n8HepWNMgAAABQ"]
[Sat Nov 15 05:42:04.656314 2025] [:error] [pid 27909:tid 27930] [client 52.167.165.186:8523] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aReiLCTfZ6B57n8HepWNNAAAABE"]
[Sat Nov 15 05:42:05.142011 2025] [:error] [pid 27997:tid 28001] [client 52.167.165.186:8711] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aReiLdpja_6cDxKbxFkZ4AAAAMI"]
[Sat Nov 15 05:42:05.994126 2025] [:error] [pid 27911:tid 27976] [client 52.167.165.186:5519] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aReiLcGzUdrhGBIfiKTA4QAAAIg"]
[Sat Nov 15 05:42:07.087742 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:7486] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aReiL-gM1rHoEAqoQDcnGwAAAQ4"]
[Sat Nov 15 05:42:07.964090 2025] [:error] [pid 27997:tid 28005] [client 52.167.165.186:8594] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "aReiL9pja_6cDxKbxFkZ6QAAAMY"]
[Sat Nov 15 05:45:53.177781 2025] [:error] [pid 37318:tid 37389] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/cfile.php
[Sat Nov 15 05:45:53.389662 2025] [:error] [pid 37318:tid 37370] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/sder52u.php
[Sat Nov 15 05:45:53.675171 2025] [:error] [pid 37318:tid 37383] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/asserter.php
[Sat Nov 15 05:45:53.890825 2025] [:error] [pid 37318:tid 37363] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Sat Nov 15 05:45:54.119036 2025] [:error] [pid 37318:tid 37365] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/pass.php
[Sat Nov 15 05:45:54.332207 2025] [:error] [pid 37318:tid 37371] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sat Nov 15 05:45:54.616139 2025] [:error] [pid 37318:tid 37380] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/ot.php
[Sat Nov 15 05:45:54.827780 2025] [:error] [pid 37318:tid 37378] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-rss4.php
[Sat Nov 15 05:45:55.041014 2025] [:error] [pid 37318:tid 37364] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Sat Nov 15 05:45:55.255651 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/bin.php
[Sat Nov 15 05:45:55.488994 2025] [:error] [pid 37318:tid 37373] [client 52.167.165.186:1360] File does not exist: /usr/local/apache/htdocs/suspended-page/yee.php
[Sat Nov 15 05:45:55.697846 2025] [:error] [pid 37318:tid 37375] [client 52.167.165.186:1360] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/epinyins.php"] [unique_id "aRejE-gM1rHoEAqoQDco3QAAAQ0"]
[Sat Nov 15 05:45:56.317313 2025] [:error] [pid 37318:tid 37389] [client 52.167.165.186:6587] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/epinyins.php"] [unique_id "aRejFOgM1rHoEAqoQDco3gAAARc"]
[Sat Nov 15 05:45:56.764114 2025] [:error] [pid 37318:tid 37379] [client 52.167.165.186:3395] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/epinyins.php"] [unique_id "aRejFOgM1rHoEAqoQDco4AAAARE"]
[Sat Nov 15 05:45:57.296999 2025] [:error] [pid 27911:tid 27981] [client 52.167.165.186:1546] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/epinyins.php"] [unique_id "aRejFcGzUdrhGBIfiKTCMQAAAI0"]
[Sat Nov 15 05:45:57.720391 2025] [:error] [pid 37318:tid 37363] [client 52.167.165.186:1582] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa17.php"] [unique_id "aRejFegM1rHoEAqoQDco4wAAAQE"]
[Sat Nov 15 05:45:58.240041 2025] [:error] [pid 27911:tid 27990] [client 52.167.165.186:1546] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa17.php"] [unique_id "aRejFsGzUdrhGBIfiKTCNgAAAJY"]
[Sat Nov 15 05:45:58.664792 2025] [:error] [pid 27911:tid 27992] [client 52.167.165.186:1184] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa17.php"] [unique_id "aRejFsGzUdrhGBIfiKTCOgAAAJg"]
[Sat Nov 15 05:45:59.100515 2025] [:error] [pid 27910:tid 27947] [client 52.167.165.186:3514] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa17.php"] [unique_id "aRejF46e1LusHMYkS7ZUzgAAAEY"]
[Sat Nov 15 05:45:59.535281 2025] [:error] [pid 27909:tid 27928] [client 52.167.165.186:3506] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/winkel.php"] [unique_id "aRejFyTfZ6B57n8HepWOtgAAAA8"]
[Sat Nov 15 05:46:00.019108 2025] [:error] [pid 27997:tid 28012] [client 52.167.165.186:3493] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/winkel.php"] [unique_id "aRejGNpja_6cDxKbxFkbRgAAAM0"]
[Sat Nov 15 05:46:00.438823 2025] [:error] [pid 27997:tid 28011] [client 52.167.165.186:1194] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/winkel.php"] [unique_id "aRejGNpja_6cDxKbxFkbRwAAAMw"]
[Sat Nov 15 05:46:00.855638 2025] [:error] [pid 27997:tid 28013] [client 52.167.165.186:3513] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/winkel.php"] [unique_id "aRejGNpja_6cDxKbxFkbSAAAAM4"]
[Sat Nov 15 05:46:01.332655 2025] [:error] [pid 27997:tid 28020] [client 52.167.165.186:1363] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ef.php"] [unique_id "aRejGdpja_6cDxKbxFkbSwAAANU"]
[Sat Nov 15 05:46:01.743628 2025] [:error] [pid 27997:tid 28000] [client 52.167.165.186:7889] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ef.php"] [unique_id "aRejGdpja_6cDxKbxFkbTQAAAME"]
[Sat Nov 15 05:46:02.197714 2025] [:error] [pid 27997:tid 27999] [client 52.167.165.186:1390] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ef.php"] [unique_id "aRejGtpja_6cDxKbxFkbTgAAAMA"]
[Sat Nov 15 05:46:02.607232 2025] [:error] [pid 37318:tid 37366] [client 52.167.165.186:7924] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ef.php"] [unique_id "aRejGugM1rHoEAqoQDco7AAAAQQ"]
[Sat Nov 15 05:46:03.026911 2025] [:error] [pid 27997:tid 28010] [client 52.167.165.186:3441] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass4.php"] [unique_id "aRejG9pja_6cDxKbxFkbTwAAAMs"]
[Sat Nov 15 05:46:03.514490 2025] [:error] [pid 27997:tid 28012] [client 52.167.165.186:4880] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass4.php"] [unique_id "aRejG9pja_6cDxKbxFkbUgAAAM0"]
[Sat Nov 15 05:46:03.926873 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:5407] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass4.php"] [unique_id "aRejG-gM1rHoEAqoQDco8AAAAQ4"]
[Sat Nov 15 05:46:04.356966 2025] [:error] [pid 37318:tid 37373] [client 52.167.165.186:6575] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass4.php"] [unique_id "aRejHOgM1rHoEAqoQDco8QAAAQs"]
[Sat Nov 15 05:46:04.787511 2025] [:error] [pid 37318:tid 37388] [client 52.167.165.186:7920] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/667.php"] [unique_id "aRejHOgM1rHoEAqoQDco8gAAARY"]
[Sat Nov 15 05:46:05.197878 2025] [:error] [pid 27997:tid 28002] [client 52.167.165.186:3478] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/667.php"] [unique_id "aRejHdpja_6cDxKbxFkbVgAAAMM"]
[Sat Nov 15 05:46:05.615968 2025] [:error] [pid 27911:tid 27987] [client 52.167.165.186:3398] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/667.php"] [unique_id "aRejHcGzUdrhGBIfiKTCRAAAAJM"]
[Sat Nov 15 05:46:06.028992 2025] [:error] [pid 27911:tid 27980] [client 52.167.165.186:4895] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/667.php"] [unique_id "aRejHsGzUdrhGBIfiKTCRQAAAIw"]
[Sat Nov 15 05:46:06.448993 2025] [:error] [pid 37318:tid 37390] [client 52.167.165.186:4914] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aRejHugM1rHoEAqoQDco_AAAARg"]
[Sat Nov 15 05:46:07.287983 2025] [:error] [pid 27911:tid 27991] [client 52.167.165.186:1536] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aRejH8GzUdrhGBIfiKTCRwAAAJc"]
[Sat Nov 15 05:46:07.823004 2025] [:error] [pid 27911:tid 27992] [client 52.167.165.186:3396] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aRejH8GzUdrhGBIfiKTCSgAAAJg"]
[Sat Nov 15 05:46:09.073853 2025] [:error] [pid 27909:tid 27926] [client 52.167.165.186:3488] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aRejISTfZ6B57n8HepWOvQAAAA0"]
[Sat Nov 15 05:46:09.626656 2025] [:error] [pid 27910:tid 27951] [client 52.167.165.186:3471] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-su.php"] [unique_id "aRejIY6e1LusHMYkS7ZU2AAAAEo"]
[Sat Nov 15 05:46:10.203373 2025] [:error] [pid 27911:tid 27981] [client 52.167.165.186:1548] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-su.php"] [unique_id "aRejIsGzUdrhGBIfiKTCUgAAAI0"]
[Sat Nov 15 05:46:10.980312 2025] [:error] [pid 37318:tid 37383] [client 52.167.165.186:5406] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-su.php"] [unique_id "aRejIugM1rHoEAqoQDcpBAAAARU"]
[Sat Nov 15 05:46:11.477107 2025] [:error] [pid 27911:tid 27991] [client 52.167.165.186:5393] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-su.php"] [unique_id "aRejI8GzUdrhGBIfiKTCVQAAAJc"]
[Sat Nov 15 05:46:12.068921 2025] [:error] [pid 27997:tid 28020] [client 52.167.165.186:4876] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t3x.php"] [unique_id "aRejJNpja_6cDxKbxFkbXwAAANU"]
[Sat Nov 15 05:46:28.360809 2025] [:error] [pid 37318:tid 37388] [client 52.167.165.186:5974] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aRejNOgM1rHoEAqoQDcpGwAAARY"]
[Sat Nov 15 05:46:32.310966 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:3966] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aRejOOgM1rHoEAqoQDcpJAAAAQ4"]
[Sat Nov 15 05:46:39.032250 2025] [:error] [pid 27909:tid 27934] [client 52.167.165.186:3911] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aRejPyTfZ6B57n8HepWO5wAAABU"]
[Sat Nov 15 05:46:40.346101 2025] [:error] [pid 37318:tid 37379] [client 52.167.165.186:8757] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aRejQOgM1rHoEAqoQDcpNwAAARE"]
[Sat Nov 15 05:46:45.829285 2025] [:error] [pid 27997:tid 28003] [client 52.167.165.186:5661] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yasnu.php"] [unique_id "aRejRdpja_6cDxKbxFkbiwAAAMQ"]
[Sat Nov 15 05:46:47.809257 2025] [:error] [pid 27911:tid 27992] [client 52.167.165.186:6003] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yasnu.php"] [unique_id "aRejR8GzUdrhGBIfiKTCmQAAAJg"]
[Sat Nov 15 05:46:49.139332 2025] [:error] [pid 27910:tid 27951] [client 52.167.165.186:8557] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yasnu.php"] [unique_id "aRejSY6e1LusHMYkS7ZVEQAAAEo"]
[Sat Nov 15 05:46:50.799680 2025] [:error] [pid 27910:tid 27963] [client 52.167.165.186:5998] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yasnu.php"] [unique_id "aRejSo6e1LusHMYkS7ZVEgAAAFY"]
[Sat Nov 15 05:46:55.065568 2025] [:error] [pid 27997:tid 28006] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/trd.php
[Sat Nov 15 05:46:55.468671 2025] [:error] [pid 27997:tid 28020] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/oiepfuav.php
[Sat Nov 15 05:46:55.893363 2025] [:error] [pid 27997:tid 28011] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/02.php
[Sat Nov 15 05:46:56.455221 2025] [:error] [pid 27997:tid 28019] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Nov 15 05:46:56.672025 2025] [:error] [pid 27997:tid 28002] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Nov 15 05:46:56.895676 2025] [:error] [pid 27997:tid 28022] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Sat Nov 15 05:46:57.164846 2025] [:error] [pid 27997:tid 28008] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/btufulhs.php
[Sat Nov 15 05:46:57.375826 2025] [:error] [pid 27997:tid 28004] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/ant.php
[Sat Nov 15 05:46:57.593653 2025] [:error] [pid 27997:tid 28016] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/bb5.php
[Sat Nov 15 05:46:57.809585 2025] [:error] [pid 27997:tid 28006] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Sat Nov 15 05:46:59.123521 2025] [:error] [pid 27997:tid 28023] [client 52.167.165.186:6004] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Sat Nov 15 05:46:59.332382 2025] [:error] [pid 27997:tid 28018] [client 52.167.165.186:6004] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yzkvrell.php"] [unique_id "aRejU9pja_6cDxKbxFkbqAAAANM"]
[Sat Nov 15 05:47:04.136846 2025] [:error] [pid 37318:tid 37367] [client 52.167.165.186:7463] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yzkvrell.php"] [unique_id "aRejWOgM1rHoEAqoQDcpawAAAQU"]
[Sat Nov 15 05:47:05.148488 2025] [:error] [pid 27909:tid 27937] [client 52.167.165.186:3299] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yzkvrell.php"] [unique_id "aRejWSTfZ6B57n8HepWO_wAAABg"]
[Sat Nov 15 05:47:06.766840 2025] [:error] [pid 27911:tid 27968] [client 52.167.165.186:5686] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yzkvrell.php"] [unique_id "aRejWsGzUdrhGBIfiKTCqQAAAIA"]
[Sat Nov 15 05:47:09.871281 2025] [:error] [pid 27997:tid 28003] [client 52.167.165.186:5566] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "aRejXdpja_6cDxKbxFkbxgAAAMQ"]
[Sat Nov 15 05:47:12.095307 2025] [:error] [pid 27910:tid 27964] [client 52.167.165.186:8058] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "aRejYI6e1LusHMYkS7ZVIwAAAFc"]
[Sat Nov 15 05:47:42.880642 2025] [:error] [pid 27911:tid 27973] [client 52.167.165.186:8015] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-749.php"] [unique_id "aRejfsGzUdrhGBIfiKTC2QAAAIU"]
[Sat Nov 15 05:47:44.397130 2025] [:error] [pid 27910:tid 27950] [client 52.167.165.186:5093] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-749.php"] [unique_id "aRejgI6e1LusHMYkS7ZVcAAAAEk"]
[Sat Nov 15 05:47:49.679407 2025] [:error] [pid 37318:tid 37374] [client 52.167.165.186:6165] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-749.php"] [unique_id "aRejhegM1rHoEAqoQDcp5AAAAQw"]
[Sat Nov 15 05:47:55.742546 2025] [:error] [pid 27911:tid 27969] [client 52.167.165.186:8502] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-749.php"] [unique_id "aReji8GzUdrhGBIfiKTC7AAAAIE"]
[Sat Nov 15 05:47:56.629790 2025] [:error] [pid 27911:tid 27972] [client 52.167.165.186:8841] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/fm.php"] [unique_id "aRejjMGzUdrhGBIfiKTC7gAAAIQ"]
[Sat Nov 15 05:47:57.628673 2025] [:error] [pid 27910:tid 27960] [client 52.167.165.186:5109] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/fm.php"] [unique_id "aRejjY6e1LusHMYkS7ZVhQAAAFM"]
[Sat Nov 15 05:47:58.454782 2025] [:error] [pid 27997:tid 28023] [client 52.167.165.186:1640] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/fm.php"] [unique_id "aRejjtpja_6cDxKbxFkcMAAAANg"]
[Sat Nov 15 05:48:01.483205 2025] [:error] [pid 37318:tid 37366] [client 52.167.165.186:8631] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php
[Sat Nov 15 05:48:01.687648 2025] [:error] [pid 37318:tid 37374] [client 52.167.165.186:8631] File does not exist: /usr/local/apache/htdocs/suspended-page/nqsa.php
[Sat Nov 15 05:48:01.894405 2025] [:error] [pid 37318:tid 37377] [client 52.167.165.186:8631] File does not exist: /usr/local/apache/htdocs/suspended-page/2020.php
[Sat Nov 15 05:48:02.120572 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:8631] File does not exist: /usr/local/apache/htdocs/suspended-page/rak.php
[Sat Nov 15 05:48:02.570201 2025] [:error] [pid 37318:tid 37363] [client 52.167.165.186:8631] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Nov 15 05:48:02.782561 2025] [:error] [pid 37318:tid 37388] [client 52.167.165.186:8631] File does not exist: /usr/local/apache/htdocs/suspended-page/zr.php
[Sat Nov 15 05:48:02.993802 2025] [:error] [pid 37318:tid 37375] [client 52.167.165.186:8631] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Sat Nov 15 05:48:03.201363 2025] [:error] [pid 37318:tid 37378] [client 52.167.165.186:8631] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Nov 15 05:48:03.406781 2025] [:error] [pid 37318:tid 37382] [client 52.167.165.186:8631] File does not exist: /usr/local/apache/htdocs/suspended-page/great.php
[Sat Nov 15 05:48:03.612136 2025] [:error] [pid 37318:tid 37369] [client 52.167.165.186:8631] File does not exist: /usr/local/apache/htdocs/suspended-page/fifii.php
[Sat Nov 15 05:48:03.868623 2025] [:error] [pid 37318:tid 37389] [client 52.167.165.186:8631] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "aRejk-gM1rHoEAqoQDcqDwAAARc"]
[Sat Nov 15 05:48:06.470905 2025] [:error] [pid 27909:tid 27923] [client 52.167.165.186:1613] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "aRejliTfZ6B57n8HepWPYQAAAAo"]
[Sat Nov 15 05:48:27.778109 2025] [:error] [pid 27910:tid 27957] [client 52.167.165.186:8461] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/efile.php"] [unique_id "aRejq46e1LusHMYkS7ZVqwAAAFA"]
[Sat Nov 15 05:48:32.373632 2025] [:error] [pid 27910:tid 27952] [client 52.167.165.186:6690] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/efile.php"] [unique_id "aRejsI6e1LusHMYkS7ZVuQAAAEs"]
[Sat Nov 15 05:48:38.661210 2025] [:error] [pid 27909:tid 27931] [client 52.167.165.186:8633] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/past1.php"] [unique_id "aRejtiTfZ6B57n8HepWPiQAAABI"]
[Sat Nov 15 05:48:40.034924 2025] [:error] [pid 27911:tid 27986] [client 52.167.165.186:8600] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/past1.php"] [unique_id "aRejuMGzUdrhGBIfiKTDNwAAAJI"]
[Sat Nov 15 05:48:42.365188 2025] [:error] [pid 27909:tid 27918] [client 52.167.165.186:8523] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/past1.php"] [unique_id "aRejuiTfZ6B57n8HepWPlwAAAAU"]
[Sat Nov 15 05:48:48.554176 2025] [:error] [pid 27997:tid 28002] [client 52.167.165.186:8896] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/past1.php"] [unique_id "aRejwNpja_6cDxKbxFkchQAAAMM"]
[Sat Nov 15 05:48:49.775622 2025] [:error] [pid 27909:tid 27926] [client 52.167.165.186:2924] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aRejwSTfZ6B57n8HepWPngAAAA0"]
[Sat Nov 15 05:48:51.664173 2025] [:error] [pid 37318:tid 37379] [client 52.167.165.186:1286] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aRejw-gM1rHoEAqoQDcqPgAAARE"]
[Sat Nov 15 05:48:52.722567 2025] [:error] [pid 27910:tid 27944] [client 52.167.165.186:7981] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aRejxI6e1LusHMYkS7ZVzAAAAEM"]
[Sat Nov 15 05:48:56.421888 2025] [:error] [pid 27997:tid 28023] [client 52.167.165.186:3640] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aRejyNpja_6cDxKbxFkcjwAAANg"]
[Sat Nov 15 05:48:57.302524 2025] [:error] [pid 27909:tid 27914] [client 52.167.165.186:7779] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "aRejySTfZ6B57n8HepWPpAAAAAE"]
[Sat Nov 15 05:48:59.109892 2025] [:error] [pid 27911:tid 27975] [client 52.167.165.186:4156] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "aRejy8GzUdrhGBIfiKTDUwAAAIc"]
[Sat Nov 15 05:49:01.128810 2025] [:error] [pid 37318:tid 37362] [client 52.167.165.186:4140] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "aRejzegM1rHoEAqoQDcqSgAAAQA"]
[Sat Nov 15 05:49:02.638030 2025] [:error] [pid 27910:tid 27951] [client 52.167.165.186:3541] [client 52.167.165.186] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "aRejzo6e1LusHMYkS7ZV1QAAAEo"]
[Sat Nov 15 05:49:06.632756 2025] [:error] [pid 37318:tid 37381] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Sat Nov 15 05:49:06.841511 2025] [:error] [pid 37318:tid 37376] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Nov 15 05:49:07.057004 2025] [:error] [pid 37318:tid 37367] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/35.php
[Sat Nov 15 05:49:07.481892 2025] [:error] [pid 37318:tid 37375] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/witm.php
[Sat Nov 15 05:49:07.692012 2025] [:error] [pid 37318:tid 37371] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Nov 15 05:49:07.900791 2025] [:error] [pid 37318:tid 37371] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/bless2.php
[Sat Nov 15 05:49:08.286797 2025] [:error] [pid 37318:tid 37390] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Sat Nov 15 05:49:08.495021 2025] [:error] [pid 37318:tid 37373] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/wsr2.php
[Sat Nov 15 05:49:08.702847 2025] [:error] [pid 37318:tid 37381] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/shlo.php
[Sat Nov 15 05:49:08.918938 2025] [:error] [pid 37318:tid 37390] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/CLA.php
[Sat Nov 15 05:49:09.351401 2025] [:error] [pid 37318:tid 37365] [client 52.167.165.186:8324] File does not exist: /usr/local/apache/htdocs/suspended-page/kill-9-1.php
[Sat Nov 15 06:49:01.323835 2025] [:error] [pid 37318:tid 37367] [client 188.213.202.119:25869] [client 188.213.202.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aRex3egM1rHoEAqoQDdGXwAAAQU"]
[Sat Nov 15 06:49:02.169888 2025] [:error] [pid 27911:tid 27968] [client 188.213.202.158:44637] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "aRex3sGzUdrhGBIfiKTV5QAAAIA"]
[Sat Nov 15 06:49:03.016755 2025] [:error] [pid 37318:tid 37390] [client 188.213.202.120:61327] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRex3-gM1rHoEAqoQDdGYAAAARg"]
[Sat Nov 15 06:49:03.866419 2025] [:error] [pid 27911:tid 27984] [client 188.213.202.109:38429] [client 188.213.202.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "aRex38GzUdrhGBIfiKTV5wAAAJA"]
[Sat Nov 15 06:49:04.715941 2025] [:error] [pid 37318:tid 37369] [client 188.213.202.129:25365] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aRex4OgM1rHoEAqoQDdGYwAAAQc"]
[Sat Nov 15 06:49:05.562807 2025] [:error] [pid 27911:tid 27988] [client 188.213.202.158:49529] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aRex4cGzUdrhGBIfiKTV7AAAAJQ"]
[Sat Nov 15 06:49:06.409957 2025] [:error] [pid 27997:tid 28015] [client 188.213.202.110:44939] [client 188.213.202.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "aRex4tpja_6cDxKbxFkyDAAAANA"]
[Sat Nov 15 06:49:07.257455 2025] [:error] [pid 37318:tid 37367] [client 188.213.202.152:40427] [client 188.213.202.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "aRex4-gM1rHoEAqoQDdGZwAAAQU"]
[Sat Nov 15 06:49:08.104422 2025] [:error] [pid 27909:tid 27915] [client 188.213.202.149:50135] [client 188.213.202.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "aRex5CTfZ6B57n8HepWgXgAAAAI"]
[Sat Nov 15 06:49:08.951922 2025] [:error] [pid 27911:tid 27984] [client 188.213.202.148:20739] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/moderation.php"] [unique_id "aRex5MGzUdrhGBIfiKTV9AAAAJA"]
[Sat Nov 15 06:49:09.799469 2025] [:error] [pid 37318:tid 37363] [client 188.213.202.141:33893] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conflg.php"] [unique_id "aRex5egM1rHoEAqoQDdGawAAAQE"]
[Sat Nov 15 06:49:10.647831 2025] [:error] [pid 37318:tid 37364] [client 188.213.202.155:53651] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aRex5ugM1rHoEAqoQDdGbgAAAQI"]
[Sat Nov 15 06:49:11.494692 2025] [:error] [pid 37318:tid 37389] [client 188.213.202.130:35387] [client 188.213.202.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aRex5-gM1rHoEAqoQDdGcAAAARc"]
[Sat Nov 15 06:49:12.341603 2025] [:error] [pid 37318:tid 37363] [client 188.213.202.113:43471] [client 188.213.202.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aRex6OgM1rHoEAqoQDdGdAAAAQE"]
[Sat Nov 15 06:49:13.188211 2025] [:error] [pid 27910:tid 27942] [client 188.213.202.144:31113] [client 188.213.202.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/classwithtostring.php"] [unique_id "aRex6Y6e1LusHMYkS7Zn7wAAAEE"]
[Sat Nov 15 06:49:14.034442 2025] [:error] [pid 27910:tid 27951] [client 188.213.202.111:48887] [client 188.213.202.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "aRex6o6e1LusHMYkS7Zn8QAAAEo"]
[Sat Nov 15 06:49:14.882747 2025] [:error] [pid 27911:tid 27976] [client 188.213.202.145:44865] [client 188.213.202.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aRex6sGzUdrhGBIfiKTV-wAAAIg"]
[Sat Nov 15 06:49:15.735059 2025] [:error] [pid 37318:tid 37363] [client 188.213.202.141:23861] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aRex6-gM1rHoEAqoQDdGfgAAAQE"]
[Sat Nov 15 06:49:16.582411 2025] [:error] [pid 37318:tid 37364] [client 188.213.202.123:46333] [client 188.213.202.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aRex7OgM1rHoEAqoQDdGgAAAAQI"]
[Sat Nov 15 06:49:17.438698 2025] [:error] [pid 27909:tid 27922] [client 188.213.202.117:48353] [client 188.213.202.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/load.php"] [unique_id "aRex7STfZ6B57n8HepWgZQAAAAk"]
[Sat Nov 15 06:49:18.285123 2025] [:error] [pid 27997:tid 28015] [client 188.213.202.147:27857] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aRex7tpja_6cDxKbxFkyGwAAANA"]
[Sat Nov 15 06:49:19.132397 2025] [:error] [pid 37318:tid 37379] [client 188.213.202.133:58127] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "aRex7-gM1rHoEAqoQDdGiQAAARE"]
[Sat Nov 15 06:49:19.980846 2025] [:error] [pid 27997:tid 28004] [client 188.213.202.131:41101] [client 188.213.202.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/jindex.php"] [unique_id "aRex79pja_6cDxKbxFkyIgAAAMU"]
[Sat Nov 15 06:49:20.828408 2025] [:error] [pid 27997:tid 27999] [client 188.213.202.130:50283] [client 188.213.202.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/system.php"] [unique_id "aRex8Npja_6cDxKbxFkyJQAAAMA"]
[Sat Nov 15 06:49:21.677518 2025] [:error] [pid 27909:tid 27915] [client 188.213.202.126:24505] [client 188.213.202.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aRex8STfZ6B57n8HepWgZwAAAAI"]
[Sat Nov 15 06:49:22.524036 2025] [:error] [pid 37318:tid 37382] [client 188.213.202.122:30765] [client 188.213.202.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wso.php"] [unique_id "aRex8ugM1rHoEAqoQDdGmAAAARQ"]
[Sat Nov 15 06:49:23.372307 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.147:53999] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aRex8-gM1rHoEAqoQDdGnAAAAQ0"]
[Sat Nov 15 06:49:24.219996 2025] [:error] [pid 27909:tid 27923] [client 188.213.202.106:43591] [client 188.213.202.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aRex9CTfZ6B57n8HepWgaQAAAAo"]
[Sat Nov 15 06:49:25.067515 2025] [:error] [pid 37318:tid 37381] [client 188.213.202.107:31771] [client 188.213.202.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-bindings"] [unique_id "aRex9egM1rHoEAqoQDdGngAAARM"]
[Sat Nov 15 06:49:25.915670 2025] [:error] [pid 27909:tid 27935] [client 188.213.202.120:28003] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/classwithtostring.php"] [unique_id "aRex9STfZ6B57n8HepWgbQAAABY"]
[Sat Nov 15 06:49:26.763361 2025] [:error] [pid 27997:tid 28022] [client 188.213.202.128:34193] [client 188.213.202.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue"] [unique_id "aRex9tpja_6cDxKbxFkyKgAAANc"]
[Sat Nov 15 06:49:27.610824 2025] [:error] [pid 27910:tid 27959] [client 188.213.202.121:58203] [client 188.213.202.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/erinyani/default.php"] [unique_id "aRex946e1LusHMYkS7ZoAQAAAFI"]
[Sat Nov 15 06:49:28.457089 2025] [:error] [pid 27910:tid 27946] [client 188.213.202.140:62381] [client 188.213.202.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aRex-I6e1LusHMYkS7ZoBQAAAEU"]
[Sat Nov 15 06:49:29.304006 2025] [:error] [pid 27911:tid 27982] [client 188.213.202.115:44183] [client 188.213.202.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/index.php"] [unique_id "aRex-cGzUdrhGBIfiKTWAwAAAI4"]
[Sat Nov 15 06:49:30.149790 2025] [:error] [pid 27911:tid 27983] [client 188.213.202.158:44903] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aRex-sGzUdrhGBIfiKTWBgAAAI8"]
[Sat Nov 15 06:49:31.043711 2025] [:error] [pid 27909:tid 27926] [client 188.213.202.110:57547] [client 188.213.202.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aRex-yTfZ6B57n8HepWgewAAAA0"]
[Sat Nov 15 06:49:31.890696 2025] [:error] [pid 27909:tid 27933] [client 188.213.202.112:53911] [client 188.213.202.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/leafmailer.php"] [unique_id "aRex-yTfZ6B57n8HepWgfgAAABQ"]
[Sat Nov 15 06:49:32.736300 2025] [:error] [pid 27911:tid 27984] [client 188.213.202.112:32633] [client 188.213.202.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/leaf.php"] [unique_id "aRex_MGzUdrhGBIfiKTWDwAAAJA"]
[Sat Nov 15 06:49:33.585898 2025] [:error] [pid 27911:tid 27971] [client 188.213.202.132:58527] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/mah/function.php"] [unique_id "aRex_cGzUdrhGBIfiKTWEQAAAIM"]
[Sat Nov 15 06:49:34.430169 2025] [:error] [pid 37318:tid 37362] [client 188.213.202.119:45649] [client 188.213.202.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aRex_ugM1rHoEAqoQDdGqgAAAQA"]
[Sat Nov 15 06:49:35.281682 2025] [:error] [pid 37318:tid 37369] [client 188.213.202.153:21637] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/sketch/404.php"] [unique_id "aRex_-gM1rHoEAqoQDdGrQAAAQc"]
[Sat Nov 15 06:49:36.127667 2025] [:error] [pid 37318:tid 37370] [client 188.213.202.154:31311] [client 188.213.202.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aReyAOgM1rHoEAqoQDdGsQAAAQg"]
[Sat Nov 15 06:49:36.980457 2025] [:error] [pid 37318:tid 37389] [client 188.213.202.140:35365] [client 188.213.202.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin-wolf.php"] [unique_id "aReyAOgM1rHoEAqoQDdGtQAAARc"]
[Sat Nov 15 06:49:37.827232 2025] [:error] [pid 37318:tid 37369] [client 188.213.202.115:55761] [client 188.213.202.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "aReyAegM1rHoEAqoQDdGuQAAAQc"]
[Sat Nov 15 06:49:38.672669 2025] [:error] [pid 27909:tid 27922] [client 188.213.202.143:62265] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aReyAiTfZ6B57n8HepWggAAAAAk"]
[Sat Nov 15 06:49:39.519669 2025] [:error] [pid 37318:tid 37366] [client 188.213.202.120:20613] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "aReyA-gM1rHoEAqoQDdGvQAAAQQ"]
[Sat Nov 15 06:49:40.366531 2025] [:error] [pid 27997:tid 28011] [client 188.213.202.114:58635] [client 188.213.202.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aReyBNpja_6cDxKbxFkyNwAAAMw"]
[Sat Nov 15 06:49:41.213681 2025] [:error] [pid 27911:tid 27982] [client 188.213.202.133:40411] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links.php"] [unique_id "aReyBcGzUdrhGBIfiKTWFwAAAI4"]
[Sat Nov 15 06:49:42.059308 2025] [:error] [pid 27997:tid 28006] [client 188.213.202.157:26575] [client 188.213.202.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/uploaded_script.php"] [unique_id "aReyBtpja_6cDxKbxFkyPgAAAMc"]
[Sat Nov 15 06:49:42.905715 2025] [:error] [pid 27997:tid 28019] [client 188.213.202.120:37857] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aReyBtpja_6cDxKbxFkyQAAAANQ"]
[Sat Nov 15 06:49:43.751246 2025] [:error] [pid 27909:tid 27930] [client 188.213.202.143:27347] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "aReyByTfZ6B57n8HepWgiAAAABE"]
[Sat Nov 15 06:49:44.599881 2025] [:error] [pid 27997:tid 28022] [client 188.213.202.106:49173] [client 188.213.202.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aReyCNpja_6cDxKbxFkyQQAAANc"]
[Sat Nov 15 06:49:45.446658 2025] [:error] [pid 27910:tid 27949] [client 188.213.202.123:36041] [client 188.213.202.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/license.php"] [unique_id "aReyCY6e1LusHMYkS7ZoGwAAAEg"]
[Sat Nov 15 06:49:46.296128 2025] [:error] [pid 37318:tid 37377] [client 188.213.202.147:35529] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/mainhosting/default.php"] [unique_id "aReyCugM1rHoEAqoQDdGxQAAAQ8"]
[Sat Nov 15 06:49:47.143499 2025] [:error] [pid 27911:tid 27986] [client 188.213.202.147:35197] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/privacy-tools.min.php"] [unique_id "aReyC8GzUdrhGBIfiKTWGQAAAJI"]
[Sat Nov 15 06:49:49.425140 2025] [:error] [pid 37318:tid 37362] [client 188.213.202.141:48771] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat"] [unique_id "aReyDegM1rHoEAqoQDdGygAAAQA"]
[Sat Nov 15 06:49:50.273846 2025] [:error] [pid 37318:tid 37380] [client 188.213.202.109:34435] [client 188.213.202.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "aReyDugM1rHoEAqoQDdGzgAAARI"]
[Sat Nov 15 06:49:51.120419 2025] [:error] [pid 27911:tid 27969] [client 188.213.202.120:24135] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/admin-ajax.php"] [unique_id "aReyD8GzUdrhGBIfiKTWHAAAAIE"]
[Sat Nov 15 06:49:51.966701 2025] [:error] [pid 27910:tid 27949] [client 188.213.202.114:20361] [client 188.213.202.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/log.php"] [unique_id "aReyD46e1LusHMYkS7ZoJQAAAEg"]
[Sat Nov 15 06:49:52.812737 2025] [:error] [pid 27910:tid 27958] [client 188.213.202.135:25117] [client 188.213.202.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aReyEI6e1LusHMYkS7ZoJgAAAFE"]
[Sat Nov 15 06:49:53.660747 2025] [:error] [pid 27909:tid 27928] [client 188.213.202.132:34107] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "aReyESTfZ6B57n8HepWgoAAAAA8"]
[Sat Nov 15 06:49:54.507230 2025] [:error] [pid 27911:tid 27976] [client 188.213.202.137:36565] [client 188.213.202.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aReyEsGzUdrhGBIfiKTWKAAAAIg"]
[Sat Nov 15 06:49:55.354080 2025] [:error] [pid 37318:tid 37378] [client 188.213.202.155:37725] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/block-support.php"] [unique_id "aReyE-gM1rHoEAqoQDdG0QAAARA"]
[Sat Nov 15 06:49:56.199716 2025] [:error] [pid 27910:tid 27950] [client 188.213.202.113:48391] [client 188.213.202.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aReyFI6e1LusHMYkS7ZoKQAAAEk"]
[Sat Nov 15 06:49:57.049014 2025] [:error] [pid 27911:tid 27988] [client 188.213.202.159:25755] [client 188.213.202.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/index.php"] [unique_id "aReyFcGzUdrhGBIfiKTWLgAAAJQ"]
[Sat Nov 15 06:49:57.897033 2025] [:error] [pid 27997:tid 28002] [client 188.213.202.154:22889] [client 188.213.202.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aReyFdpja_6cDxKbxFkySwAAAMM"]
[Sat Nov 15 06:49:58.745119 2025] [:error] [pid 27909:tid 27930] [client 188.213.202.155:63249] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "aReyFiTfZ6B57n8HepWgrQAAABE"]
[Sat Nov 15 06:49:59.592399 2025] [:error] [pid 27910:tid 27954] [client 188.213.202.148:55239] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/403.php"] [unique_id "aReyF46e1LusHMYkS7ZoKgAAAE0"]
[Sat Nov 15 06:50:00.443661 2025] [:error] [pid 27911:tid 27969] [client 188.213.202.128:24209] [client 188.213.202.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/index2.php"] [unique_id "aReyGMGzUdrhGBIfiKTWNAAAAIE"]
[Sat Nov 15 06:50:01.301051 2025] [:error] [pid 27910:tid 27946] [client 188.213.202.130:63295] [client 188.213.202.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aReyGY6e1LusHMYkS7ZoLAAAAEU"]
[Sat Nov 15 06:50:02.149716 2025] [:error] [pid 27911:tid 27978] [client 188.213.202.132:22747] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/index.php"] [unique_id "aReyGsGzUdrhGBIfiKTWNwAAAIo"]
[Sat Nov 15 06:50:02.999735 2025] [:error] [pid 27911:tid 27979] [client 188.213.202.132:58225] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "aReyGsGzUdrhGBIfiKTWOwAAAIs"]
[Sat Nov 15 06:50:03.847419 2025] [:error] [pid 27910:tid 27941] [client 188.213.202.123:65353] [client 188.213.202.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aReyG46e1LusHMYkS7ZoLgAAAEA"]
[Sat Nov 15 06:50:04.769990 2025] [:error] [pid 37318:tid 37390] [client 188.213.202.131:37465] [client 188.213.202.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/inc.php"] [unique_id "aReyHOgM1rHoEAqoQDdG4gAAARg"]
[Sat Nov 15 06:50:05.616343 2025] [:error] [pid 27911:tid 27984] [client 188.213.202.149:55825] [client 188.213.202.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aReyHcGzUdrhGBIfiKTWPwAAAJA"]
[Sat Nov 15 06:50:06.465126 2025] [:error] [pid 37318:tid 37379] [client 188.213.202.113:41635] [client 188.213.202.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aReyHugM1rHoEAqoQDdG5gAAARE"]
[Sat Nov 15 06:50:07.317999 2025] [:error] [pid 27910:tid 27965] [client 188.213.202.143:31665] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aReyH46e1LusHMYkS7ZoMAAAAFg"]
[Sat Nov 15 06:50:08.168335 2025] [:error] [pid 37318:tid 37381] [client 188.213.202.159:61301] [client 188.213.202.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "aReyIOgM1rHoEAqoQDdG6wAAARM"]
[Sat Nov 15 06:50:09.021152 2025] [:error] [pid 27909:tid 27929] [client 188.213.202.156:59723] [client 188.213.202.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/mah.php"] [unique_id "aReyISTfZ6B57n8HepWgtwAAABA"]
[Sat Nov 15 06:50:09.872434 2025] [:error] [pid 37318:tid 37388] [client 188.213.202.144:60981] [client 188.213.202.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "aReyIegM1rHoEAqoQDdG7QAAARY"]
[Sat Nov 15 06:50:12.488812 2025] [:error] [pid 27909:tid 27925] [client 188.213.202.130:64125] [client 188.213.202.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-signin.php"] [unique_id "aReyJCTfZ6B57n8HepWgwAAAAAw"]
[Sat Nov 15 06:50:13.336091 2025] [:error] [pid 27910:tid 27943] [client 188.213.202.141:60093] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/worksec.php"] [unique_id "aReyJY6e1LusHMYkS7ZoNQAAAEI"]
[Sat Nov 15 06:50:14.186210 2025] [:error] [pid 27911:tid 27983] [client 188.213.202.145:50955] [client 188.213.202.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "aReyJsGzUdrhGBIfiKTWTwAAAI8"]
[Sat Nov 15 06:50:15.036423 2025] [:error] [pid 27910:tid 27948] [client 188.213.202.156:59763] [client 188.213.202.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "aReyJ46e1LusHMYkS7ZoNwAAAEc"]
[Sat Nov 15 06:50:15.885186 2025] [:error] [pid 27909:tid 27917] [client 188.213.202.110:42831] [client 188.213.202.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/function/function.php"] [unique_id "aReyJyTfZ6B57n8HepWgxgAAAAQ"]
[Sat Nov 15 06:50:16.736828 2025] [:error] [pid 27911:tid 27970] [client 188.213.202.137:47443] [client 188.213.202.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/about.php"] [unique_id "aReyKMGzUdrhGBIfiKTWWAAAAII"]
[Sat Nov 15 06:50:17.584983 2025] [:error] [pid 27997:tid 28008] [client 188.213.202.142:37647] [client 188.213.202.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aReyKdpja_6cDxKbxFkyVgAAAMk"]
[Sat Nov 15 06:50:18.440853 2025] [:error] [pid 27909:tid 27931] [client 188.213.202.132:63659] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/images/index.php"] [unique_id "aReyKiTfZ6B57n8HepWgyQAAABI"]
[Sat Nov 15 06:50:19.287499 2025] [:error] [pid 27911:tid 27981] [client 188.213.202.146:31627] [client 188.213.202.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/about.php"] [unique_id "aReyK8GzUdrhGBIfiKTWXAAAAI0"]
[Sat Nov 15 06:50:20.134773 2025] [:error] [pid 37318:tid 37366] [client 188.213.202.152:37847] [client 188.213.202.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwenty/404.php"] [unique_id "aReyLOgM1rHoEAqoQDdG9wAAAQQ"]
[Sat Nov 15 06:50:20.981770 2025] [:error] [pid 27910:tid 27953] [client 188.213.202.148:64101] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/sim.php"] [unique_id "aReyLI6e1LusHMYkS7ZoQAAAAEw"]
[Sat Nov 15 06:50:21.827703 2025] [:error] [pid 27910:tid 27944] [client 188.213.202.118:22889] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/buy.php"] [unique_id "aReyLY6e1LusHMYkS7ZoRQAAAEM"]
[Sat Nov 15 06:50:22.673697 2025] [:error] [pid 37318:tid 37389] [client 188.213.202.119:59503] [client 188.213.202.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ini.php"] [unique_id "aReyLugM1rHoEAqoQDdG-gAAARc"]
[Sat Nov 15 06:50:23.522704 2025] [:error] [pid 27911:tid 27992] [client 188.213.202.111:20955] [client 188.213.202.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentyfive/include.php"] [unique_id "aReyL8GzUdrhGBIfiKTWYQAAAJg"]
[Sat Nov 15 06:50:24.374504 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.158:29999] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aReyMOgM1rHoEAqoQDdG_QAAAQY"]
[Sat Nov 15 06:50:25.225450 2025] [:error] [pid 27997:tid 28000] [client 188.213.202.144:25275] [client 188.213.202.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/options.php"] [unique_id "aReyMdpja_6cDxKbxFkyXAAAAME"]
[Sat Nov 15 06:50:26.071756 2025] [:error] [pid 27910:tid 27953] [client 188.213.202.151:46689] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "aReyMo6e1LusHMYkS7ZoUAAAAEw"]
[Sat Nov 15 06:50:26.925743 2025] [:error] [pid 27911:tid 27973] [client 188.213.202.143:34549] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/function.php"] [unique_id "aReyMsGzUdrhGBIfiKTWZwAAAIU"]
[Sat Nov 15 06:50:27.772438 2025] [:error] [pid 27909:tid 27915] [client 188.213.202.129:42315] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aReyMyTfZ6B57n8HepWgzQAAAAI"]
[Sat Nov 15 06:50:28.619391 2025] [:error] [pid 27909:tid 27937] [client 188.213.202.130:39803] [client 188.213.202.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/core.php"] [unique_id "aReyNCTfZ6B57n8HepWg0QAAABg"]
[Sat Nov 15 06:50:29.466028 2025] [:error] [pid 27909:tid 27927] [client 188.213.202.110:26991] [client 188.213.202.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aReyNSTfZ6B57n8HepWg0wAAAA4"]
[Sat Nov 15 06:50:30.314022 2025] [:error] [pid 27997:tid 28010] [client 188.213.202.160:50669] [client 188.213.202.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aReyNtpja_6cDxKbxFkyZAAAAMs"]
[Sat Nov 15 06:50:31.161009 2025] [:error] [pid 27997:tid 28011] [client 188.213.202.154:24917] [client 188.213.202.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aReyN9pja_6cDxKbxFkyZgAAAMw"]
[Sat Nov 15 06:50:32.007466 2025] [:error] [pid 37318:tid 37378] [client 188.213.202.108:61841] [client 188.213.202.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "aReyOOgM1rHoEAqoQDdHCAAAARA"]
[Sat Nov 15 06:50:32.853648 2025] [:error] [pid 27910:tid 27960] [client 188.213.202.137:63457] [client 188.213.202.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images"] [unique_id "aReyOI6e1LusHMYkS7ZoVQAAAFM"]
[Sat Nov 15 06:50:33.703829 2025] [:error] [pid 27911:tid 27975] [client 188.213.202.148:64503] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aReyOcGzUdrhGBIfiKTWcQAAAIc"]
[Sat Nov 15 06:50:34.550220 2025] [:error] [pid 27997:tid 27999] [client 188.213.202.127:48135] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aReyOtpja_6cDxKbxFkybAAAAMA"]
[Sat Nov 15 06:50:35.406602 2025] [:error] [pid 27997:tid 28019] [client 188.213.202.152:49505] [client 188.213.202.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfour"] [unique_id "aReyO9pja_6cDxKbxFkybgAAANQ"]
[Sat Nov 15 06:50:36.252520 2025] [:error] [pid 37318:tid 37373] [client 188.213.202.120:34049] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/xml.php"] [unique_id "aReyPOgM1rHoEAqoQDdHEAAAAQs"]
[Sat Nov 15 06:50:37.099051 2025] [:error] [pid 27997:tid 28008] [client 188.213.202.118:32161] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aReyPdpja_6cDxKbxFkycAAAAMk"]
[Sat Nov 15 06:50:37.944405 2025] [:error] [pid 27910:tid 27957] [client 188.213.202.148:33705] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/images/class-config.php"] [unique_id "aReyPY6e1LusHMYkS7ZoWAAAAFA"]
[Sat Nov 15 06:50:38.791140 2025] [:error] [pid 27911:tid 27990] [client 188.213.202.112:55455] [client 188.213.202.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aReyPsGzUdrhGBIfiKTWfAAAAJY"]
[Sat Nov 15 06:50:39.640594 2025] [:error] [pid 27997:tid 28012] [client 188.213.202.144:36399] [client 188.213.202.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aReyP9pja_6cDxKbxFkydAAAAM0"]
[Sat Nov 15 06:50:41.914894 2025] [:error] [pid 27997:tid 28008] [client 188.213.202.126:63547] [client 188.213.202.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-json-ajax-session.php"] [unique_id "aReyQdpja_6cDxKbxFkyeAAAAMk"]
[Sat Nov 15 06:50:42.761912 2025] [:error] [pid 27911:tid 27978] [client 188.213.202.155:56215] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aReyQsGzUdrhGBIfiKTWgAAAAIo"]
[Sat Nov 15 06:50:43.723236 2025] [:error] [pid 37318:tid 37388] [client 188.213.202.125:20627] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aReyQ-gM1rHoEAqoQDdHHgAAARY"]
[Sat Nov 15 06:50:44.572742 2025] [:error] [pid 27909:tid 27918] [client 188.213.202.147:36645] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aReyRCTfZ6B57n8HepWg4AAAAAU"]
[Sat Nov 15 06:50:45.418514 2025] [:error] [pid 37318:tid 37378] [client 188.213.202.130:35519] [client 188.213.202.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aReyRegM1rHoEAqoQDdHJQAAARA"]
[Sat Nov 15 06:50:46.266690 2025] [:error] [pid 27909:tid 27937] [client 188.213.202.125:51933] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aReyRiTfZ6B57n8HepWg4gAAABg"]
[Sat Nov 15 06:50:47.115941 2025] [:error] [pid 37318:tid 37369] [client 188.213.202.122:46081] [client 188.213.202.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mail.php"] [unique_id "aReyR-gM1rHoEAqoQDdHJwAAAQc"]
[Sat Nov 15 06:50:47.962239 2025] [:error] [pid 27909:tid 27926] [client 188.213.202.119:56683] [client 188.213.202.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content.php"] [unique_id "aReyRyTfZ6B57n8HepWg5wAAAA0"]
[Sat Nov 15 06:50:48.809115 2025] [:error] [pid 27910:tid 27944] [client 188.213.202.115:52457] [client 188.213.202.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "aReySI6e1LusHMYkS7ZoYgAAAEM"]
[Sat Nov 15 06:50:49.658147 2025] [:error] [pid 27910:tid 27956] [client 188.213.202.141:60807] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge"] [unique_id "aReySY6e1LusHMYkS7ZoZQAAAE8"]
[Sat Nov 15 06:50:50.505820 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.119:64667] [client 188.213.202.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "aReySugM1rHoEAqoQDdHKgAAAQY"]
[Sat Nov 15 06:50:51.352924 2025] [:error] [pid 27909:tid 27928] [client 188.213.202.158:56411] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aReySyTfZ6B57n8HepWg6QAAAA8"]
[Sat Nov 15 06:50:52.199040 2025] [:error] [pid 37318:tid 37366] [client 188.213.202.109:51877] [client 188.213.202.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/back.php"] [unique_id "aReyTOgM1rHoEAqoQDdHMAAAAQQ"]
[Sat Nov 15 06:50:54.480172 2025] [:error] [pid 37318:tid 37377] [client 188.213.202.106:60421] [client 188.213.202.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aReyTugM1rHoEAqoQDdHOQAAAQ8"]
[Sat Nov 15 06:50:55.333828 2025] [:error] [pid 27910:tid 27956] [client 188.213.202.121:37873] [client 188.213.202.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/bk/index.php"] [unique_id "aReyT46e1LusHMYkS7ZoawAAAE8"]
[Sat Nov 15 06:50:56.196480 2025] [:error] [pid 37318:tid 37362] [client 188.213.202.146:38931] [client 188.213.202.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "aReyUOgM1rHoEAqoQDdHQAAAAQA"]
[Sat Nov 15 06:50:57.043929 2025] [:error] [pid 37318:tid 37379] [client 188.213.202.159:23469] [client 188.213.202.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "aReyUegM1rHoEAqoQDdHQgAAARE"]
[Sat Nov 15 06:50:57.891168 2025] [:error] [pid 27997:tid 28011] [client 188.213.202.136:43231] [client 188.213.202.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aReyUdpja_6cDxKbxFkyhQAAAMw"]
[Sat Nov 15 06:50:58.752922 2025] [:error] [pid 27909:tid 27924] [client 188.213.202.121:55739] [client 188.213.202.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conf.php"] [unique_id "aReyUiTfZ6B57n8HepWg8QAAAAs"]
[Sat Nov 15 06:50:59.624358 2025] [:error] [pid 37318:tid 37373] [client 188.213.202.151:50613] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api"] [unique_id "aReyU-gM1rHoEAqoQDdHTQAAAQs"]
[Sat Nov 15 06:51:00.479991 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.125:60063] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer"] [unique_id "aReyVOgM1rHoEAqoQDdHVQAAAQ0"]
[Sat Nov 15 06:51:01.330419 2025] [:error] [pid 27910:tid 27950] [client 188.213.202.139:63931] [client 188.213.202.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/product.php"] [unique_id "aReyVY6e1LusHMYkS7ZobQAAAEk"]
[Sat Nov 15 06:51:02.180178 2025] [:error] [pid 27910:tid 27952] [client 188.213.202.146:64677] [client 188.213.202.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "aReyVo6e1LusHMYkS7ZobwAAAEs"]
[Sat Nov 15 06:51:03.027467 2025] [:error] [pid 37318:tid 37372] [client 188.213.202.152:31587] [client 188.213.202.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/leafmailer2.8.php"] [unique_id "aReyV-gM1rHoEAqoQDdHWQAAAQo"]
[Sat Nov 15 06:51:03.876308 2025] [:error] [pid 27910:tid 27941] [client 188.213.202.109:24287] [client 188.213.202.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "aReyV46e1LusHMYkS7ZocgAAAEA"]
[Sat Nov 15 06:51:04.723945 2025] [:error] [pid 27911:tid 27970] [client 188.213.202.153:52843] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "aReyWMGzUdrhGBIfiKTWlwAAAII"]
[Sat Nov 15 06:51:05.570610 2025] [:error] [pid 27911:tid 27980] [client 188.213.202.122:51169] [client 188.213.202.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wsa.php"] [unique_id "aReyWcGzUdrhGBIfiKTWmwAAAIw"]
[Sat Nov 15 06:51:06.425913 2025] [:error] [pid 27909:tid 27929] [client 188.213.202.149:55551] [client 188.213.202.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/themes"] [unique_id "aReyWiTfZ6B57n8HepWg9QAAABA"]
[Sat Nov 15 06:51:07.274099 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.122:58179] [client 188.213.202.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aReyW-gM1rHoEAqoQDdHXgAAAQ0"]
[Sat Nov 15 06:51:08.122608 2025] [:error] [pid 27910:tid 27959] [client 188.213.202.155:23585] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aReyXI6e1LusHMYkS7ZoeAAAAFI"]
[Sat Nov 15 06:51:08.971505 2025] [:error] [pid 27910:tid 27944] [client 188.213.202.135:40783] [client 188.213.202.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/m.php"] [unique_id "aReyXI6e1LusHMYkS7ZoeQAAAEM"]
[Sat Nov 15 06:51:09.825268 2025] [:error] [pid 27911:tid 27983] [client 188.213.202.156:44535] [client 188.213.202.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aReyXcGzUdrhGBIfiKTWngAAAI8"]
[Sat Nov 15 06:51:10.672192 2025] [:error] [pid 27911:tid 27992] [client 188.213.202.129:56249] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-l0gin.php"] [unique_id "aReyXsGzUdrhGBIfiKTWoAAAAJg"]
[Sat Nov 15 06:51:11.519223 2025] [:error] [pid 27997:tid 28009] [client 188.213.202.126:31625] [client 188.213.202.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-config-sample.php"] [unique_id "aReyX9pja_6cDxKbxFkymAAAAMo"]
[Sat Nov 15 06:51:12.551433 2025] [:error] [pid 27910:tid 27962] [client 188.213.202.113:48991] [client 188.213.202.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/index.php"] [unique_id "aReyYI6e1LusHMYkS7ZogAAAAFU"]
[Sat Nov 15 06:51:13.398382 2025] [:error] [pid 37318:tid 37372] [client 188.213.202.144:28319] [client 188.213.202.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aReyYegM1rHoEAqoQDdHYgAAAQo"]
[Sat Nov 15 06:51:14.250340 2025] [:error] [pid 27911:tid 27968] [client 188.213.202.107:60667] [client 188.213.202.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/version.php"] [unique_id "aReyYsGzUdrhGBIfiKTWogAAAIA"]
[Sat Nov 15 06:51:15.096096 2025] [:error] [pid 27909:tid 27934] [client 188.213.202.132:65461] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aReyYyTfZ6B57n8HepWhAgAAABU"]
[Sat Nov 15 06:51:15.943854 2025] [:error] [pid 27910:tid 27948] [client 188.213.202.160:42771] [client 188.213.202.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/ectoplasm"] [unique_id "aReyY46e1LusHMYkS7ZogwAAAEc"]
[Sat Nov 15 06:51:16.790936 2025] [:error] [pid 37318:tid 37380] [client 188.213.202.151:29511] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps"] [unique_id "aReyZOgM1rHoEAqoQDdHcgAAARI"]
[Sat Nov 15 06:51:17.637179 2025] [:error] [pid 27911:tid 27977] [client 188.213.202.153:20041] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aReyZcGzUdrhGBIfiKTWpQAAAIk"]
[Sat Nov 15 06:51:18.484350 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.116:42779] [client 188.213.202.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aReyZugM1rHoEAqoQDdHeQAAAQY"]
[Sat Nov 15 06:51:19.335001 2025] [:error] [pid 27997:tid 28009] [client 188.213.202.120:58101] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aReyZ9pja_6cDxKbxFkypQAAAMo"]
[Sat Nov 15 06:51:20.180951 2025] [:error] [pid 27910:tid 27947] [client 188.213.202.129:30269] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/archives"] [unique_id "aReyaI6e1LusHMYkS7ZohwAAAEY"]
[Sat Nov 15 06:51:21.028760 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.155:61159] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "aReyaegM1rHoEAqoQDdHfAAAAQ0"]
[Sat Nov 15 06:51:21.874778 2025] [:error] [pid 27911:tid 27979] [client 188.213.202.128:33167] [client 188.213.202.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "aReyacGzUdrhGBIfiKTWqwAAAIs"]
[Sat Nov 15 06:51:22.720907 2025] [:error] [pid 27909:tid 27933] [client 188.213.202.160:35093] [client 188.213.202.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/autoload_classmap.php"] [unique_id "aReyaiTfZ6B57n8HepWhDgAAABQ"]
[Sat Nov 15 06:51:23.567006 2025] [:error] [pid 27910:tid 27950] [client 188.213.202.121:58871] [client 188.213.202.121] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "aReya46e1LusHMYkS7ZoiwAAAEk"]
[Sat Nov 15 06:51:24.415213 2025] [:error] [pid 27911:tid 27987] [client 188.213.202.107:58657] [client 188.213.202.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aReybMGzUdrhGBIfiKTWrQAAAJM"]
[Sat Nov 15 06:51:25.263366 2025] [:error] [pid 27910:tid 27951] [client 188.213.202.128:53939] [client 188.213.202.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/file.php"] [unique_id "aReybY6e1LusHMYkS7ZojQAAAEo"]
[Sat Nov 15 06:51:26.111537 2025] [:error] [pid 27909:tid 27913] [client 188.213.202.159:21941] [client 188.213.202.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "aReybiTfZ6B57n8HepWhEgAAAAA"]
[Sat Nov 15 06:51:26.960479 2025] [:error] [pid 37318:tid 37376] [client 188.213.202.140:20167] [client 188.213.202.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/files/home.php"] [unique_id "aReybugM1rHoEAqoQDdHhgAAAQ4"]
[Sat Nov 15 06:51:27.810152 2025] [:error] [pid 27997:tid 28005] [client 188.213.202.126:49981] [client 188.213.202.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aReyb9pja_6cDxKbxFkysAAAAMY"]
[Sat Nov 15 06:51:28.657161 2025] [:error] [pid 27910:tid 27947] [client 188.213.202.118:25185] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aReycI6e1LusHMYkS7ZokAAAAEY"]
[Sat Nov 15 06:51:29.507058 2025] [:error] [pid 37318:tid 37372] [client 188.213.202.132:34037] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/zasf"] [unique_id "aReycegM1rHoEAqoQDdHiQAAAQo"]
[Sat Nov 15 06:51:30.355261 2025] [:error] [pid 27911:tid 27987] [client 188.213.202.149:54185] [client 188.213.202.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "aReycsGzUdrhGBIfiKTWtgAAAJM"]
[Sat Nov 15 06:51:31.202062 2025] [:error] [pid 27909:tid 27928] [client 188.213.202.159:47385] [client 188.213.202.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/assets"] [unique_id "aReycyTfZ6B57n8HepWhHAAAAA8"]
[Sat Nov 15 06:51:32.048267 2025] [:error] [pid 27910:tid 27964] [client 188.213.202.115:62249] [client 188.213.202.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aReydI6e1LusHMYkS7ZomQAAAFc"]
[Sat Nov 15 06:51:32.894985 2025] [:error] [pid 27910:tid 27956] [client 188.213.202.125:39447] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/js/index.php"] [unique_id "aReydI6e1LusHMYkS7ZomgAAAE8"]
[Sat Nov 15 06:51:33.764454 2025] [:error] [pid 27910:tid 27958] [client 188.213.202.148:62995] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aReydY6e1LusHMYkS7ZomwAAAFE"]
[Sat Nov 15 06:51:34.609160 2025] [:error] [pid 27910:tid 27944] [client 188.213.202.125:54407] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/include.php"] [unique_id "aReydo6e1LusHMYkS7ZongAAAEM"]
[Sat Nov 15 06:51:35.456597 2025] [:error] [pid 27909:tid 27929] [client 188.213.202.159:59931] [client 188.213.202.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-themes.php"] [unique_id "aReydyTfZ6B57n8HepWhJgAAABA"]
[Sat Nov 15 06:51:36.303387 2025] [:error] [pid 27911:tid 27981] [client 188.213.202.146:42189] [client 188.213.202.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-info.php"] [unique_id "aReyeMGzUdrhGBIfiKTWvQAAAI0"]
[Sat Nov 15 06:51:37.163470 2025] [:error] [pid 27910:tid 27957] [client 188.213.202.128:58391] [client 188.213.202.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aReyeY6e1LusHMYkS7ZooAAAAFA"]
[Sat Nov 15 06:51:38.157749 2025] [:error] [pid 27911:tid 27968] [client 188.213.202.145:25387] [client 188.213.202.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "aReyesGzUdrhGBIfiKTWwAAAAIA"]
[Sat Nov 15 06:51:39.005603 2025] [:error] [pid 27997:tid 28007] [client 188.213.202.113:24339] [client 188.213.202.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aReye9pja_6cDxKbxFkyvwAAAMg"]
[Sat Nov 15 06:51:39.850818 2025] [:error] [pid 27910:tid 27960] [client 188.213.202.152:47043] [client 188.213.202.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known"] [unique_id "aReye46e1LusHMYkS7ZopQAAAFM"]
[Sat Nov 15 06:51:40.697145 2025] [:error] [pid 37318:tid 37383] [client 188.213.202.111:50571] [client 188.213.202.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/function.php"] [unique_id "aReyfOgM1rHoEAqoQDdHlAAAARU"]
[Sat Nov 15 06:51:41.556111 2025] [:error] [pid 37318:tid 37377] [client 188.213.202.133:59253] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aReyfegM1rHoEAqoQDdHlwAAAQ8"]
[Sat Nov 15 06:51:42.404412 2025] [:error] [pid 27909:tid 27916] [client 188.213.202.118:47781] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aReyfiTfZ6B57n8HepWhKAAAAAM"]
[Sat Nov 15 06:51:43.253635 2025] [:error] [pid 27911:tid 27978] [client 188.213.202.129:44977] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aReyf8GzUdrhGBIfiKTWwwAAAIo"]
[Sat Nov 15 06:51:44.101825 2025] [:error] [pid 27997:tid 28000] [client 188.213.202.153:44211] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-login.php"] [unique_id "aReygNpja_6cDxKbxFkyywAAAME"]
[Sat Nov 15 06:51:44.950279 2025] [:error] [pid 27997:tid 28016] [client 188.213.202.144:46593] [client 188.213.202.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/index.php"] [unique_id "aReygNpja_6cDxKbxFkyzAAAANE"]
[Sat Nov 15 06:51:45.796287 2025] [:error] [pid 27910:tid 27949] [client 188.213.202.129:40845] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets"] [unique_id "aReygY6e1LusHMYkS7ZorAAAAEg"]
[Sat Nov 15 06:51:46.660692 2025] [:error] [pid 27910:tid 27963] [client 188.213.202.118:38783] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/7b3658dfc7.php"] [unique_id "aReygo6e1LusHMYkS7ZosAAAAFY"]
[Sat Nov 15 06:51:47.507274 2025] [:error] [pid 27909:tid 27934] [client 188.213.202.158:42855] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-file.php"] [unique_id "aReygyTfZ6B57n8HepWhLwAAABU"]
[Sat Nov 15 06:51:48.357702 2025] [:error] [pid 27911:tid 27968] [client 188.213.202.130:42105] [client 188.213.202.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aReyhMGzUdrhGBIfiKTWzgAAAIA"]
[Sat Nov 15 06:51:49.205652 2025] [:error] [pid 27911:tid 27987] [client 188.213.202.158:46413] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aReyhcGzUdrhGBIfiKTW0AAAAJM"]
[Sat Nov 15 06:51:50.050283 2025] [:error] [pid 37318:tid 37367] [client 188.213.202.141:56203] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "aReyhugM1rHoEAqoQDdHngAAAQU"]
[Sat Nov 15 06:51:50.897044 2025] [:error] [pid 27910:tid 27965] [client 188.213.202.120:26705] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aReyho6e1LusHMYkS7ZotgAAAFg"]
[Sat Nov 15 06:51:51.741963 2025] [:error] [pid 37318:tid 37364] [client 188.213.202.120:58383] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/byp.php"] [unique_id "aReyh-gM1rHoEAqoQDdHoAAAAQI"]
[Sat Nov 15 06:51:52.587456 2025] [:error] [pid 27997:tid 28004] [client 188.213.202.151:52997] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/utils/index.php"] [unique_id "aReyiNpja_6cDxKbxFky1AAAAMU"]
[Sat Nov 15 06:51:53.434220 2025] [:error] [pid 27997:tid 28006] [client 188.213.202.147:25349] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade"] [unique_id "aReyidpja_6cDxKbxFky1gAAAMc"]
[Sat Nov 15 06:51:54.281276 2025] [:error] [pid 27910:tid 27946] [client 188.213.202.118:59515] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aReyio6e1LusHMYkS7ZougAAAEU"]
[Sat Nov 15 06:51:55.128927 2025] [:error] [pid 27909:tid 27933] [client 188.213.202.111:33463] [client 188.213.202.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight"] [unique_id "aReyiyTfZ6B57n8HepWhNAAAABQ"]
[Sat Nov 15 06:51:56.125083 2025] [:error] [pid 37318:tid 37373] [client 188.213.202.156:31327] [client 188.213.202.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aReyjOgM1rHoEAqoQDdHpgAAAQs"]
[Sat Nov 15 06:51:56.972371 2025] [:error] [pid 27909:tid 27914] [client 188.213.202.120:25841] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aReyjCTfZ6B57n8HepWhNgAAAAE"]
[Sat Nov 15 06:51:57.818816 2025] [:error] [pid 27997:tid 28020] [client 188.213.202.106:63475] [client 188.213.202.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "aReyjdpja_6cDxKbxFky5AAAANU"]
[Sat Nov 15 06:51:58.666667 2025] [:error] [pid 27910:tid 27959] [client 188.213.202.148:20629] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/sts.php"] [unique_id "aReyjo6e1LusHMYkS7ZovgAAAFI"]
[Sat Nov 15 06:51:59.513078 2025] [:error] [pid 27910:tid 27945] [client 188.213.202.139:36145] [client 188.213.202.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/about.php"] [unique_id "aReyj46e1LusHMYkS7ZowQAAAEQ"]
[Sat Nov 15 06:52:00.361177 2025] [:error] [pid 37318:tid 37388] [client 188.213.202.142:23009] [client 188.213.202.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/f.php"] [unique_id "aReykOgM1rHoEAqoQDdHrwAAARY"]
[Sat Nov 15 06:52:01.208075 2025] [:error] [pid 27909:tid 27936] [client 188.213.202.149:41043] [client 188.213.202.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/WordPressCore/index.php"] [unique_id "aReykSTfZ6B57n8HepWhPQAAABc"]
[Sat Nov 15 06:52:02.054493 2025] [:error] [pid 27997:tid 28021] [client 188.213.202.126:53879] [client 188.213.202.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/components/index.php"] [unique_id "aReyktpja_6cDxKbxFkzIAAAANY"]
[Sat Nov 15 06:52:02.899992 2025] [:error] [pid 27997:tid 28000] [client 188.213.202.153:61023] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/button/index.php"] [unique_id "aReyktpja_6cDxKbxFkzIgAAAME"]
[Sat Nov 15 06:52:03.745775 2025] [:error] [pid 27910:tid 27949] [client 188.213.202.141:33355] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aReyk46e1LusHMYkS7Zo5AAAAEg"]
[Sat Nov 15 06:52:04.593322 2025] [:error] [pid 27911:tid 27977] [client 188.213.202.110:28023] [client 188.213.202.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aReylMGzUdrhGBIfiKTW8gAAAIk"]
[Sat Nov 15 06:52:05.440627 2025] [:error] [pid 27909:tid 27927] [client 188.213.202.137:48287] [client 188.213.202.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "aReylSTfZ6B57n8HepWhQgAAAA4"]
[Sat Nov 15 06:52:06.290086 2025] [:error] [pid 27997:tid 28019] [client 188.213.202.127:39355] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/index.php"] [unique_id "aReyltpja_6cDxKbxFkzLQAAANQ"]
[Sat Nov 15 06:52:07.138364 2025] [:error] [pid 27911:tid 27976] [client 188.213.202.142:25337] [client 188.213.202.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/dist"] [unique_id "aReyl8GzUdrhGBIfiKTW9wAAAIg"]
[Sat Nov 15 06:52:07.985492 2025] [:error] [pid 27909:tid 27924] [client 188.213.202.124:46935] [client 188.213.202.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-file-manager/file_folder_manager.php"] [unique_id "aReylyTfZ6B57n8HepWhRgAAAAs"]
[Sat Nov 15 06:52:08.835341 2025] [:error] [pid 27997:tid 28020] [client 188.213.202.153:49471] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "aReymNpja_6cDxKbxFkzMQAAANU"]
[Sat Nov 15 06:52:09.684758 2025] [:error] [pid 27911:tid 27968] [client 188.213.202.131:46041] [client 188.213.202.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "aReymcGzUdrhGBIfiKTW-gAAAIA"]
[Sat Nov 15 06:52:10.531830 2025] [:error] [pid 37318:tid 37390] [client 188.213.202.143:21927] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/404.php"] [unique_id "aReymugM1rHoEAqoQDdHygAAARg"]
[Sat Nov 15 06:52:11.379603 2025] [:error] [pid 27997:tid 28000] [client 188.213.202.119:44209] [client 188.213.202.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-Owl.php"] [unique_id "aReym9pja_6cDxKbxFkzNwAAAME"]
[Sat Nov 15 06:52:12.226582 2025] [:error] [pid 27997:tid 27999] [client 188.213.202.127:30509] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aReynNpja_6cDxKbxFkzOAAAAMA"]
[Sat Nov 15 06:52:13.074033 2025] [:error] [pid 27997:tid 28002] [client 188.213.202.148:60711] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "aReyndpja_6cDxKbxFkzOwAAAMM"]
[Sat Nov 15 06:52:13.925782 2025] [:error] [pid 37318:tid 37365] [client 188.213.202.122:52317] [client 188.213.202.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aReynegM1rHoEAqoQDdHzAAAAQM"]
[Sat Nov 15 06:52:14.785589 2025] [:error] [pid 27997:tid 28009] [client 188.213.202.111:61241] [client 188.213.202.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aReyntpja_6cDxKbxFkzPAAAAMo"]
[Sat Nov 15 06:52:15.633268 2025] [:error] [pid 27910:tid 27943] [client 188.213.202.153:54269] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/cc.php"] [unique_id "aReyn46e1LusHMYkS7Zo8gAAAEI"]
[Sat Nov 15 06:52:16.482666 2025] [:error] [pid 37318:tid 37364] [client 188.213.202.123:32917] [client 188.213.202.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/cong.php"] [unique_id "aReyoOgM1rHoEAqoQDdH0AAAAQI"]
[Sat Nov 15 06:52:17.328840 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.141:30545] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/item.php"] [unique_id "aReyoegM1rHoEAqoQDdH0wAAAQY"]
[Sat Nov 15 06:52:18.177010 2025] [:error] [pid 27910:tid 27961] [client 188.213.202.152:26033] [client 188.213.202.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aReyoo6e1LusHMYkS7Zo8wAAAFQ"]
[Sat Nov 15 06:52:19.023399 2025] [:error] [pid 27910:tid 27944] [client 188.213.202.111:55271] [client 188.213.202.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aReyo46e1LusHMYkS7Zo9gAAAEM"]
[Sat Nov 15 06:52:19.869002 2025] [:error] [pid 27911:tid 27974] [client 188.213.202.130:55705] [client 188.213.202.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/phpad/as.php"] [unique_id "aReyo8GzUdrhGBIfiKTXDAAAAIY"]
[Sat Nov 15 06:52:20.716779 2025] [:error] [pid 37318:tid 37390] [client 188.213.202.132:39097] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/sunrise/index.php"] [unique_id "aReypOgM1rHoEAqoQDdH3gAAARg"]
[Sat Nov 15 06:52:21.564610 2025] [:error] [pid 27911:tid 27987] [client 188.213.202.126:21289] [client 188.213.202.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aReypcGzUdrhGBIfiKTXDgAAAJM"]
[Sat Nov 15 06:52:22.413789 2025] [:error] [pid 27910:tid 27941] [client 188.213.202.132:53565] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "aReypo6e1LusHMYkS7Zo-AAAAEA"]
[Sat Nov 15 06:52:23.259894 2025] [:error] [pid 27909:tid 27937] [client 188.213.202.157:46427] [client 188.213.202.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "aReypyTfZ6B57n8HepWhUwAAABg"]
[Sat Nov 15 06:52:24.172380 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.116:49073] [client 188.213.202.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist"] [unique_id "aReyqOgM1rHoEAqoQDdH4gAAAQ0"]
[Sat Nov 15 06:52:25.019950 2025] [:error] [pid 27911:tid 27976] [client 188.213.202.136:29193] [client 188.213.202.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen/function.php"] [unique_id "aReyqcGzUdrhGBIfiKTXGQAAAIg"]
[Sat Nov 15 06:52:25.866668 2025] [:error] [pid 27997:tid 28013] [client 188.213.202.122:39729] [client 188.213.202.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ajax/xl2024.php"] [unique_id "aReyqdpja_6cDxKbxFkzTQAAAM4"]
[Sat Nov 15 06:52:26.714028 2025] [:error] [pid 27911:tid 27986] [client 188.213.202.112:55603] [client 188.213.202.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/autoload_classmap.php"] [unique_id "aReyqsGzUdrhGBIfiKTXHgAAAJI"]
[Sat Nov 15 06:52:27.562044 2025] [:error] [pid 27911:tid 27981] [client 188.213.202.148:22481] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/linkpreview"] [unique_id "aReyq8GzUdrhGBIfiKTXHwAAAI0"]
[Sat Nov 15 06:52:28.408039 2025] [:error] [pid 27909:tid 27931] [client 188.213.202.113:60137] [client 188.213.202.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aReyrCTfZ6B57n8HepWhWgAAABI"]
[Sat Nov 15 06:52:29.255237 2025] [:error] [pid 27997:tid 28018] [client 188.213.202.141:20491] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "aReyrdpja_6cDxKbxFkzUAAAANM"]
[Sat Nov 15 06:52:30.101631 2025] [:error] [pid 37318:tid 37369] [client 188.213.202.157:47813] [client 188.213.202.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/options.php"] [unique_id "aReyrugM1rHoEAqoQDdH6gAAAQc"]
[Sat Nov 15 06:52:30.946934 2025] [:error] [pid 27997:tid 28023] [client 188.213.202.120:55113] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "aReyrtpja_6cDxKbxFkzVQAAANg"]
[Sat Nov 15 06:52:31.793967 2025] [:error] [pid 27997:tid 28009] [client 188.213.202.132:24241] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads"] [unique_id "aReyr9pja_6cDxKbxFkzVwAAAMo"]
[Sat Nov 15 06:52:32.644653 2025] [:error] [pid 27911:tid 27988] [client 188.213.202.109:21743] [client 188.213.202.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/admin.php"] [unique_id "aReysMGzUdrhGBIfiKTXKQAAAJQ"]
[Sat Nov 15 06:52:33.495695 2025] [:error] [pid 27909:tid 27937] [client 188.213.202.137:61399] [client 188.213.202.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aReysSTfZ6B57n8HepWhXwAAABg"]
[Sat Nov 15 06:52:34.342625 2025] [:error] [pid 37318:tid 37363] [client 188.213.202.151:53705] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/wp-login.php"] [unique_id "aReysugM1rHoEAqoQDdH9QAAAQE"]
[Sat Nov 15 06:52:35.191108 2025] [:error] [pid 27997:tid 28014] [client 188.213.202.141:23351] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "aReys9pja_6cDxKbxFkzWwAAAM8"]
[Sat Nov 15 06:52:36.037803 2025] [:error] [pid 37318:tid 37370] [client 188.213.202.125:52237] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/cache/index.php"] [unique_id "aReytOgM1rHoEAqoQDdH_AAAAQg"]
[Sat Nov 15 06:52:36.883684 2025] [:error] [pid 37318:tid 37371] [client 188.213.202.153:45647] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-signup.php"] [unique_id "aReytOgM1rHoEAqoQDdH_wAAAQk"]
[Sat Nov 15 06:52:37.730619 2025] [:error] [pid 27910:tid 27957] [client 188.213.202.148:22881] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "aReytY6e1LusHMYkS7ZpAgAAAFA"]
[Sat Nov 15 06:52:38.583737 2025] [:error] [pid 27997:tid 28005] [client 188.213.202.116:54761] [client 188.213.202.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aReyttpja_6cDxKbxFkzYwAAAMY"]
[Sat Nov 15 06:52:39.431039 2025] [:error] [pid 27911:tid 27978] [client 188.213.202.125:31895] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/endpoints"] [unique_id "aReyt8GzUdrhGBIfiKTXLwAAAIo"]
[Sat Nov 15 06:52:40.278160 2025] [:error] [pid 27997:tid 28019] [client 188.213.202.113:26425] [client 188.213.202.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/text.php"] [unique_id "aReyuNpja_6cDxKbxFkzZwAAANQ"]
[Sat Nov 15 06:52:41.125038 2025] [:error] [pid 27911:tid 27968] [client 188.213.202.112:25131] [client 188.213.202.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aReyucGzUdrhGBIfiKTXMwAAAIA"]
[Sat Nov 15 06:52:41.972848 2025] [:error] [pid 27997:tid 28015] [client 188.213.202.143:43627] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "aReyudpja_6cDxKbxFkzaAAAANA"]
[Sat Nov 15 06:52:42.819270 2025] [:error] [pid 27997:tid 28007] [client 188.213.202.153:61131] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks"] [unique_id "aReyutpja_6cDxKbxFkzagAAAMg"]
[Sat Nov 15 06:52:43.665574 2025] [:error] [pid 27910:tid 27960] [client 188.213.202.130:64525] [client 188.213.202.130] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aReyu46e1LusHMYkS7ZpBgAAAFM"]
[Sat Nov 15 06:52:44.512095 2025] [:error] [pid 27910:tid 27950] [client 188.213.202.145:35305] [client 188.213.202.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-header.php"] [unique_id "aReyvI6e1LusHMYkS7ZpCAAAAEk"]
[Sat Nov 15 06:52:45.358759 2025] [:error] [pid 27911:tid 27990] [client 188.213.202.111:27985] [client 188.213.202.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aReyvcGzUdrhGBIfiKTXNwAAAJY"]
[Sat Nov 15 06:52:46.209484 2025] [:error] [pid 37318:tid 37382] [client 188.213.202.151:62773] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "aReyvugM1rHoEAqoQDdIDAAAARQ"]
[Sat Nov 15 06:52:47.056806 2025] [:error] [pid 27910:tid 27959] [client 188.213.202.124:42691] [client 188.213.202.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/css"] [unique_id "aReyv46e1LusHMYkS7ZpCQAAAFI"]
[Sat Nov 15 06:52:47.964607 2025] [:error] [pid 27997:tid 28022] [client 188.213.202.139:46619] [client 188.213.202.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/interactivity-api"] [unique_id "aReyv9pja_6cDxKbxFkzgwAAANc"]
[Sat Nov 15 06:52:50.163814 2025] [:error] [pid 27910:tid 27946] [client 188.213.202.151:57415] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/buy.php"] [unique_id "aReywo6e1LusHMYkS7ZpDQAAAEU"]
[Sat Nov 15 06:52:51.009418 2025] [:error] [pid 37318:tid 37382] [client 188.213.202.136:21291] [client 188.213.202.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/index.php"] [unique_id "aReyw-gM1rHoEAqoQDdIGwAAARQ"]
[Sat Nov 15 06:52:51.855242 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.139:60299] [client 188.213.202.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aReyw-gM1rHoEAqoQDdIHgAAAQY"]
[Sat Nov 15 06:52:52.701975 2025] [:error] [pid 27910:tid 27955] [client 188.213.202.140:32447] [client 188.213.202.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aReyxI6e1LusHMYkS7ZpDgAAAE4"]
[Sat Nov 15 06:52:53.546894 2025] [:error] [pid 27911:tid 27979] [client 188.213.202.144:35689] [client 188.213.202.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "aReyxcGzUdrhGBIfiKTXUgAAAIs"]
[Sat Nov 15 06:52:54.393010 2025] [:error] [pid 27909:tid 27914] [client 188.213.202.127:56761] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/update/function.php"] [unique_id "aReyxiTfZ6B57n8HepWhcwAAAAE"]
[Sat Nov 15 06:52:55.238037 2025] [:error] [pid 37318:tid 37370] [client 188.213.202.152:31663] [client 188.213.202.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/files"] [unique_id "aReyx-gM1rHoEAqoQDdIJwAAAQg"]
[Sat Nov 15 06:52:56.088426 2025] [:error] [pid 27911:tid 27991] [client 188.213.202.112:30993] [client 188.213.202.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/about.php"] [unique_id "aReyyMGzUdrhGBIfiKTXVQAAAJc"]
[Sat Nov 15 06:52:56.934918 2025] [:error] [pid 37318:tid 37367] [client 188.213.202.119:39545] [client 188.213.202.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/index.php"] [unique_id "aReyyOgM1rHoEAqoQDdIKwAAAQU"]
[Sat Nov 15 06:52:57.780946 2025] [:error] [pid 27911:tid 27988] [client 188.213.202.133:25655] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aReyycGzUdrhGBIfiKTXWAAAAJQ"]
[Sat Nov 15 06:52:58.639627 2025] [:error] [pid 27911:tid 27969] [client 188.213.202.123:52941] [client 188.213.202.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/packed.php"] [unique_id "aReyysGzUdrhGBIfiKTXWgAAAIE"]
[Sat Nov 15 06:52:59.485852 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.145:25965] [client 188.213.202.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/update/g.php"] [unique_id "aReyy-gM1rHoEAqoQDdILwAAAQY"]
[Sat Nov 15 06:53:00.333523 2025] [:error] [pid 27911:tid 27984] [client 188.213.202.132:30909] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aReyzMGzUdrhGBIfiKTXXwAAAJA"]
[Sat Nov 15 06:53:01.181638 2025] [:error] [pid 27997:tid 28015] [client 188.213.202.107:27813] [client 188.213.202.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "aReyzdpja_6cDxKbxFkzkAAAANA"]
[Sat Nov 15 06:53:02.028969 2025] [:error] [pid 27997:tid 28000] [client 188.213.202.109:31963] [client 188.213.202.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "aReyztpja_6cDxKbxFkzkgAAAME"]
[Sat Nov 15 06:53:02.874747 2025] [:error] [pid 27997:tid 28018] [client 188.213.202.139:53913] [client 188.213.202.139] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/media"] [unique_id "aReyztpja_6cDxKbxFkzlwAAANM"]
[Sat Nov 15 06:53:03.721847 2025] [:error] [pid 27997:tid 28015] [client 188.213.202.133:30241] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aReyz9pja_6cDxKbxFkzmgAAANA"]
[Sat Nov 15 06:53:04.568659 2025] [:error] [pid 37318:tid 37389] [client 188.213.202.114:30715] [client 188.213.202.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js"] [unique_id "aRey0OgM1rHoEAqoQDdIMgAAARc"]
[Sat Nov 15 06:53:05.416008 2025] [:error] [pid 27911:tid 27980] [client 188.213.202.157:35999] [client 188.213.202.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "aRey0cGzUdrhGBIfiKTXZgAAAIw"]
[Sat Nov 15 06:53:06.262267 2025] [:error] [pid 27997:tid 28020] [client 188.213.202.129:60517] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aRey0tpja_6cDxKbxFkzpQAAANU"]
[Sat Nov 15 06:53:07.109992 2025] [:error] [pid 27909:tid 27927] [client 188.213.202.122:23703] [client 188.213.202.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/about.php"] [unique_id "aRey0yTfZ6B57n8HepWhgQAAAA4"]
[Sat Nov 15 06:53:07.957261 2025] [:error] [pid 27909:tid 27922] [client 188.213.202.148:63149] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/function.php"] [unique_id "aRey0yTfZ6B57n8HepWhggAAAAk"]
[Sat Nov 15 06:53:08.808706 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.146:30211] [client 188.213.202.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/admin.php"] [unique_id "aRey1OgM1rHoEAqoQDdINgAAAQY"]
[Sat Nov 15 06:53:09.654565 2025] [:error] [pid 37318:tid 37380] [client 188.213.202.133:32461] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aRey1egM1rHoEAqoQDdIOwAAARI"]
[Sat Nov 15 06:53:10.502746 2025] [:error] [pid 27911:tid 27980] [client 188.213.202.151:25879] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "aRey1sGzUdrhGBIfiKTXbgAAAIw"]
[Sat Nov 15 06:53:11.349718 2025] [:error] [pid 27910:tid 27952] [client 188.213.202.135:33551] [client 188.213.202.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/copypaths.php"] [unique_id "aRey146e1LusHMYkS7ZpHAAAAEs"]
[Sat Nov 15 06:53:12.197035 2025] [:error] [pid 27911:tid 27979] [client 188.213.202.131:41797] [client 188.213.202.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media"] [unique_id "aRey2MGzUdrhGBIfiKTXbwAAAIs"]
[Sat Nov 15 06:53:13.043042 2025] [:error] [pid 27909:tid 27926] [client 188.213.202.159:24147] [client 188.213.202.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/about.php"] [unique_id "aRey2STfZ6B57n8HepWhiAAAAA0"]
[Sat Nov 15 06:53:13.889829 2025] [:error] [pid 27909:tid 27919] [client 188.213.202.110:62929] [client 188.213.202.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "aRey2STfZ6B57n8HepWhigAAAAY"]
[Sat Nov 15 06:53:14.736362 2025] [:error] [pid 27909:tid 27925] [client 188.213.202.154:57467] [client 188.213.202.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aRey2iTfZ6B57n8HepWhjwAAAAw"]
[Sat Nov 15 06:53:15.586800 2025] [:error] [pid 27911:tid 27969] [client 188.213.202.135:51737] [client 188.213.202.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "aRey28GzUdrhGBIfiKTXdAAAAIE"]
[Sat Nov 15 06:53:16.437689 2025] [:error] [pid 27997:tid 28009] [client 188.213.202.133:62157] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/dz.php"] [unique_id "aRey3Npja_6cDxKbxFkzrwAAAMo"]
[Sat Nov 15 06:53:17.285699 2025] [:error] [pid 27997:tid 28006] [client 188.213.202.142:36067] [client 188.213.202.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aRey3dpja_6cDxKbxFkzsgAAAMc"]
[Sat Nov 15 06:53:18.137157 2025] [:error] [pid 27911:tid 27976] [client 188.213.202.153:27819] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/upload/css.php"] [unique_id "aRey3sGzUdrhGBIfiKTXfQAAAIg"]
[Sat Nov 15 06:53:18.989743 2025] [:error] [pid 27909:tid 27915] [client 188.213.202.110:64073] [client 188.213.202.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/files.php"] [unique_id "aRey3iTfZ6B57n8HepWhkgAAAAI"]
[Sat Nov 15 06:53:19.838161 2025] [:error] [pid 27997:tid 28015] [client 188.213.202.132:38439] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aRey39pja_6cDxKbxFkztAAAANA"]
[Sat Nov 15 06:53:20.684113 2025] [:error] [pid 27997:tid 28013] [client 188.213.202.160:54155] [client 188.213.202.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "aRey4Npja_6cDxKbxFkztwAAAM4"]
[Sat Nov 15 06:53:21.531185 2025] [:error] [pid 27910:tid 27959] [client 188.213.202.156:65295] [client 188.213.202.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aRey4Y6e1LusHMYkS7ZpJAAAAFI"]
[Sat Nov 15 06:53:22.382435 2025] [:error] [pid 27911:tid 27975] [client 188.213.202.159:51565] [client 188.213.202.159] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "aRey4sGzUdrhGBIfiKTXgAAAAIc"]
[Sat Nov 15 06:53:23.231411 2025] [:error] [pid 27997:tid 28017] [client 188.213.202.151:25929] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aRey49pja_6cDxKbxFkzvwAAANI"]
[Sat Nov 15 06:53:24.077655 2025] [:error] [pid 27997:tid 28019] [client 188.213.202.158:51201] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aRey5Npja_6cDxKbxFkzwwAAANQ"]
[Sat Nov 15 06:53:24.923416 2025] [:error] [pid 27909:tid 27915] [client 188.213.202.128:21871] [client 188.213.202.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/about.php"] [unique_id "aRey5CTfZ6B57n8HepWhmgAAAAI"]
[Sat Nov 15 06:53:25.771167 2025] [:error] [pid 37318:tid 37390] [client 188.213.202.123:51209] [client 188.213.202.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aRey5egM1rHoEAqoQDdIUQAAARg"]
[Sat Nov 15 06:53:26.617934 2025] [:error] [pid 37318:tid 37381] [client 188.213.202.131:26701] [client 188.213.202.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/chosen.php"] [unique_id "aRey5ugM1rHoEAqoQDdIUwAAARM"]
[Sat Nov 15 06:53:27.464630 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.143:49671] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aRey5-gM1rHoEAqoQDdIVAAAAQY"]
[Sat Nov 15 06:53:28.310093 2025] [:error] [pid 27910:tid 27952] [client 188.213.202.135:37093] [client 188.213.202.135] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/as/function.php"] [unique_id "aRey6I6e1LusHMYkS7ZpLQAAAEs"]
[Sat Nov 15 06:53:29.158425 2025] [:error] [pid 27910:tid 27950] [client 188.213.202.125:61457] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "aRey6Y6e1LusHMYkS7ZpLwAAAEk"]
[Sat Nov 15 06:53:30.004008 2025] [:error] [pid 27909:tid 27937] [client 188.213.202.147:54283] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aRey6iTfZ6B57n8HepWhmwAAABg"]
[Sat Nov 15 06:53:30.856231 2025] [:error] [pid 37318:tid 37388] [client 188.213.202.158:42223] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/moon.php"] [unique_id "aRey6ugM1rHoEAqoQDdIYAAAARY"]
[Sat Nov 15 06:53:31.702686 2025] [:error] [pid 27911:tid 27970] [client 188.213.202.118:65373] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/class.api.php"] [unique_id "aRey68GzUdrhGBIfiKTXiwAAAII"]
[Sat Nov 15 06:53:32.549699 2025] [:error] [pid 27997:tid 28019] [client 188.213.202.147:62575] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-activate.php"] [unique_id "aRey7Npja_6cDxKbxFkzzAAAANQ"]
[Sat Nov 15 06:53:33.398670 2025] [:error] [pid 27909:tid 27920] [client 188.213.202.149:59147] [client 188.213.202.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aRey7STfZ6B57n8HepWhoAAAAAc"]
[Sat Nov 15 06:53:34.247762 2025] [:error] [pid 27910:tid 27952] [client 188.213.202.106:21063] [client 188.213.202.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/wp-login.php"] [unique_id "aRey7o6e1LusHMYkS7ZpNgAAAEs"]
[Sat Nov 15 06:53:35.093869 2025] [:error] [pid 27909:tid 27926] [client 188.213.202.106:58721] [client 188.213.202.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/hehe.php"] [unique_id "aRey7yTfZ6B57n8HepWhpgAAAA0"]
[Sat Nov 15 06:53:35.940476 2025] [:error] [pid 27909:tid 27931] [client 188.213.202.118:45497] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aRey7yTfZ6B57n8HepWhqAAAABI"]
[Sat Nov 15 06:53:36.785523 2025] [:error] [pid 27910:tid 27953] [client 188.213.202.143:47011] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/about.php"] [unique_id "aRey8I6e1LusHMYkS7ZpPAAAAEw"]
[Sat Nov 15 06:53:37.633430 2025] [:error] [pid 27997:tid 28020] [client 188.213.202.122:53463] [client 188.213.202.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-theme-editor/include.php"] [unique_id "aRey8dpja_6cDxKbxFkz1AAAANU"]
[Sat Nov 15 06:53:38.481645 2025] [:error] [pid 37318:tid 37383] [client 188.213.202.133:34915] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/lib"] [unique_id "aRey8ugM1rHoEAqoQDdIZQAAARU"]
[Sat Nov 15 06:53:39.328736 2025] [:error] [pid 27909:tid 27913] [client 188.213.202.140:42639] [client 188.213.202.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/504.php"] [unique_id "aRey8yTfZ6B57n8HepWhrwAAAAA"]
[Sat Nov 15 06:53:40.186841 2025] [:error] [pid 27910:tid 27954] [client 188.213.202.107:50485] [client 188.213.202.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin.php"] [unique_id "aRey9I6e1LusHMYkS7ZpSQAAAE0"]
[Sat Nov 15 06:53:41.033327 2025] [:error] [pid 37318:tid 37376] [client 188.213.202.140:61567] [client 188.213.202.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/87.php"] [unique_id "aRey9egM1rHoEAqoQDdIagAAAQ4"]
[Sat Nov 15 06:53:41.881231 2025] [:error] [pid 27909:tid 27932] [client 188.213.202.111:62751] [client 188.213.202.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/contact.php"] [unique_id "aRey9STfZ6B57n8HepWhtAAAABM"]
[Sat Nov 15 06:53:42.728963 2025] [:error] [pid 37318:tid 37363] [client 188.213.202.122:48643] [client 188.213.202.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/he.php"] [unique_id "aRey9ugM1rHoEAqoQDdIcQAAAQE"]
[Sat Nov 15 06:53:43.574631 2025] [:error] [pid 37318:tid 37371] [client 188.213.202.151:58753] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wordpress/BypassBest.php"] [unique_id "aRey9-gM1rHoEAqoQDdIcwAAAQk"]
[Sat Nov 15 06:53:44.423661 2025] [:error] [pid 37318:tid 37378] [client 188.213.202.127:45937] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "aRey-OgM1rHoEAqoQDdIdgAAARA"]
[Sat Nov 15 06:53:45.270961 2025] [:error] [pid 27911:tid 27981] [client 188.213.202.148:31151] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes"] [unique_id "aRey-cGzUdrhGBIfiKTXlwAAAI0"]
[Sat Nov 15 06:53:46.123776 2025] [:error] [pid 27997:tid 28015] [client 188.213.202.116:58267] [client 188.213.202.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/images/about.php"] [unique_id "aRey-tpja_6cDxKbxFkz4AAAANA"]
[Sat Nov 15 06:53:46.970883 2025] [:error] [pid 27997:tid 28013] [client 188.213.202.107:65291] [client 188.213.202.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/post.php"] [unique_id "aRey-tpja_6cDxKbxFkz4QAAAM4"]
[Sat Nov 15 06:53:47.818683 2025] [:error] [pid 27911:tid 27968] [client 188.213.202.115:56949] [client 188.213.202.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine"] [unique_id "aRey-8GzUdrhGBIfiKTXmQAAAIA"]
[Sat Nov 15 06:53:48.667394 2025] [:error] [pid 37318:tid 37362] [client 188.213.202.124:40667] [client 188.213.202.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/defaults.php"] [unique_id "aRey_OgM1rHoEAqoQDdIfAAAAQA"]
[Sat Nov 15 06:53:49.512715 2025] [:error] [pid 37318:tid 37376] [client 188.213.202.155:35221] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/epinyins.php"] [unique_id "aRey_egM1rHoEAqoQDdIgAAAAQ4"]
[Sat Nov 15 06:53:50.360327 2025] [:error] [pid 37318:tid 37367] [client 188.213.202.133:55327] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aRey_ugM1rHoEAqoQDdIgwAAAQU"]
[Sat Nov 15 06:53:51.208258 2025] [:error] [pid 27910:tid 27945] [client 188.213.202.142:42527] [client 188.213.202.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aRey_46e1LusHMYkS7ZpUQAAAEQ"]
[Sat Nov 15 06:53:52.055075 2025] [:error] [pid 27909:tid 27927] [client 188.213.202.157:55263] [client 188.213.202.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/yasnu.php"] [unique_id "aRezACTfZ6B57n8HepWhwQAAAA4"]
[Sat Nov 15 06:53:52.901921 2025] [:error] [pid 27909:tid 27922] [client 188.213.202.154:63999] [client 188.213.202.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/hehe.php"] [unique_id "aRezACTfZ6B57n8HepWhxQAAAAk"]
[Sat Nov 15 06:53:53.748397 2025] [:error] [pid 37318:tid 37367] [client 188.213.202.153:60013] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ajk.php"] [unique_id "aRezAegM1rHoEAqoQDdIiwAAAQU"]
[Sat Nov 15 06:53:54.595690 2025] [:error] [pid 37318:tid 37366] [client 188.213.202.145:47733] [client 188.213.202.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/simple/simple.php"] [unique_id "aRezAugM1rHoEAqoQDdIjgAAAQQ"]
[Sat Nov 15 06:53:55.441496 2025] [:error] [pid 27910:tid 27959] [client 188.213.202.155:22197] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "aRezA46e1LusHMYkS7ZpWwAAAFI"]
[Sat Nov 15 06:53:56.289899 2025] [:error] [pid 27910:tid 27945] [client 188.213.202.118:62411] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/product.php"] [unique_id "aRezBI6e1LusHMYkS7ZpXAAAAEQ"]
[Sat Nov 15 06:53:57.138533 2025] [:error] [pid 27909:tid 27927] [client 188.213.202.107:65445] [client 188.213.202.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aRezBSTfZ6B57n8HepWhzAAAAA4"]
[Sat Nov 15 06:53:57.987883 2025] [:error] [pid 27997:tid 28012] [client 188.213.202.106:25817] [client 188.213.202.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/wp-login.php"] [unique_id "aRezBdpja_6cDxKbxFkz6AAAAM0"]
[Sat Nov 15 06:53:58.834444 2025] [:error] [pid 27997:tid 28020] [client 188.213.202.154:38799] [client 188.213.202.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/upgrade.php"] [unique_id "aRezBtpja_6cDxKbxFkz6wAAANU"]
[Sat Nov 15 06:53:59.681742 2025] [:error] [pid 27911:tid 27977] [client 188.213.202.115:47215] [client 188.213.202.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/chosen.php"] [unique_id "aRezB8GzUdrhGBIfiKTXpQAAAIk"]
[Sat Nov 15 06:54:00.532208 2025] [:error] [pid 27909:tid 27916] [client 188.213.202.142:54541] [client 188.213.202.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/install.php"] [unique_id "aRezCCTfZ6B57n8HepWh0AAAAAM"]
[Sat Nov 15 06:54:01.383372 2025] [:error] [pid 37318:tid 37382] [client 188.213.202.133:49547] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/about.php"] [unique_id "aRezCegM1rHoEAqoQDdImgAAARQ"]
[Sat Nov 15 06:54:02.229773 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.123:58427] [client 188.213.202.123] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aRezCugM1rHoEAqoQDdInQAAAQ0"]
[Sat Nov 15 06:54:03.076950 2025] [:error] [pid 37318:tid 37381] [client 188.213.202.120:39665] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "aRezC-gM1rHoEAqoQDdIoAAAARM"]
[Sat Nov 15 06:54:03.921885 2025] [:error] [pid 27997:tid 28013] [client 188.213.202.132:48767] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/Coldsellers.php"] [unique_id "aRezC9pja_6cDxKbxFkz8wAAAM4"]
[Sat Nov 15 06:54:04.768736 2025] [:error] [pid 27909:tid 27915] [client 188.213.202.154:42799] [client 188.213.202.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aRezDCTfZ6B57n8HepWh2QAAAAI"]
[Sat Nov 15 06:54:05.615178 2025] [:error] [pid 27911:tid 27971] [client 188.213.202.152:60213] [client 188.213.202.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "aRezDcGzUdrhGBIfiKTXsQAAAIM"]
[Sat Nov 15 06:54:06.462519 2025] [:error] [pid 27909:tid 27918] [client 188.213.202.129:23843] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "aRezDiTfZ6B57n8HepWh3wAAAAU"]
[Sat Nov 15 06:54:07.312436 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.154:43443] [client 188.213.202.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aRezD-gM1rHoEAqoQDdIpQAAAQY"]
[Sat Nov 15 06:54:08.159157 2025] [:error] [pid 27911:tid 27968] [client 188.213.202.152:48013] [client 188.213.202.152] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/file.php"] [unique_id "aRezEMGzUdrhGBIfiKTXtQAAAIA"]
[Sat Nov 15 06:54:09.004993 2025] [:error] [pid 27909:tid 27917] [client 188.213.202.116:55255] [client 188.213.202.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/search"] [unique_id "aRezESTfZ6B57n8HepWh5gAAAAQ"]
[Sat Nov 15 06:54:09.953786 2025] [:error] [pid 27911:tid 27973] [client 188.213.202.125:43225] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aRezEcGzUdrhGBIfiKTXvAAAAIU"]
[Sat Nov 15 06:54:10.801090 2025] [:error] [pid 27910:tid 27945] [client 188.213.202.133:32589] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/ioxi/ioxi/dropdown.php"] [unique_id "aRezEo6e1LusHMYkS7ZpbgAAAEQ"]
[Sat Nov 15 06:54:11.648026 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.151:38001] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aRezE-gM1rHoEAqoQDdIqwAAAQ0"]
[Sat Nov 15 06:54:12.496247 2025] [:error] [pid 27997:tid 28020] [client 188.213.202.129:23301] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aRezFNpja_6cDxKbxFk0AgAAANU"]
[Sat Nov 15 06:54:13.345460 2025] [:error] [pid 37318:tid 37389] [client 188.213.202.148:52777] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/wp-login.php"] [unique_id "aRezFegM1rHoEAqoQDdIsgAAARc"]
[Sat Nov 15 06:54:14.192086 2025] [:error] [pid 27909:tid 27916] [client 188.213.202.131:45957] [client 188.213.202.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/man.php7"] [unique_id "aRezFiTfZ6B57n8HepWh7gAAAAM"]
[Sat Nov 15 06:54:15.039948 2025] [:error] [pid 27909:tid 27937] [client 188.213.202.153:64199] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff"] [unique_id "aRezFyTfZ6B57n8HepWh7wAAABg"]
[Sat Nov 15 06:54:15.886662 2025] [:error] [pid 37318:tid 37364] [client 188.213.202.155:21027] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/fie.php"] [unique_id "aRezF-gM1rHoEAqoQDdIuwAAAQI"]
[Sat Nov 15 06:54:16.732929 2025] [:error] [pid 27911:tid 27981] [client 188.213.202.158:23307] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ab.php"] [unique_id "aRezGMGzUdrhGBIfiKTXwgAAAI0"]
[Sat Nov 15 06:54:17.590298 2025] [:error] [pid 37318:tid 37373] [client 188.213.202.113:39383] [client 188.213.202.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR"] [unique_id "aRezGegM1rHoEAqoQDdIwAAAAQs"]
[Sat Nov 15 06:54:18.436464 2025] [:error] [pid 27911:tid 27970] [client 188.213.202.137:47987] [client 188.213.202.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/customize.php"] [unique_id "aRezGsGzUdrhGBIfiKTXwwAAAII"]
[Sat Nov 15 06:54:19.286479 2025] [:error] [pid 37318:tid 37372] [client 188.213.202.121:30007] [client 188.213.202.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aRezG-gM1rHoEAqoQDdIxgAAAQo"]
[Sat Nov 15 06:54:20.133477 2025] [:error] [pid 27909:tid 27924] [client 188.213.202.108:35587] [client 188.213.202.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/about.php"] [unique_id "aRezHCTfZ6B57n8HepWh_AAAAAs"]
[Sat Nov 15 06:54:20.981828 2025] [:error] [pid 27910:tid 27960] [client 188.213.202.147:58199] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "aRezHI6e1LusHMYkS7ZpfgAAAFM"]
[Sat Nov 15 06:54:21.867511 2025] [:error] [pid 27997:tid 28009] [client 188.213.202.148:57463] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/nav.php"] [unique_id "aRezHdpja_6cDxKbxFk0CAAAAMo"]
[Sat Nov 15 06:54:22.714042 2025] [:error] [pid 27997:tid 28017] [client 188.213.202.125:44253] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/css/admin.php"] [unique_id "aRezHtpja_6cDxKbxFk0CwAAANI"]
[Sat Nov 15 06:54:23.561926 2025] [:error] [pid 37318:tid 37365] [client 188.213.202.107:42005] [client 188.213.202.107] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/wp-login.php"] [unique_id "aRezH-gM1rHoEAqoQDdIzQAAAQM"]
[Sat Nov 15 06:54:24.407686 2025] [:error] [pid 27911:tid 27968] [client 188.213.202.116:33871] [client 188.213.202.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Renderer"] [unique_id "aRezIMGzUdrhGBIfiKTXzwAAAIA"]
[Sat Nov 15 06:54:25.255645 2025] [:error] [pid 27911:tid 27969] [client 188.213.202.147:31275] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aRezIcGzUdrhGBIfiKTX0gAAAIE"]
[Sat Nov 15 06:54:26.110728 2025] [:error] [pid 27997:tid 28015] [client 188.213.202.149:39905] [client 188.213.202.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/hi.php"] [unique_id "aRezItpja_6cDxKbxFk0EQAAANA"]
[Sat Nov 15 06:54:26.957347 2025] [:error] [pid 27997:tid 28005] [client 188.213.202.116:51265] [client 188.213.202.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/css/about.php"] [unique_id "aRezItpja_6cDxKbxFk0EgAAAMY"]
[Sat Nov 15 06:54:27.804388 2025] [:error] [pid 27909:tid 27924] [client 188.213.202.144:58381] [client 188.213.202.144] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aRezIyTfZ6B57n8HepWh_gAAAAs"]
[Sat Nov 15 06:54:28.651251 2025] [:error] [pid 27909:tid 27935] [client 188.213.202.127:22223] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ge.php"] [unique_id "aRezJCTfZ6B57n8HepWh_wAAABY"]
[Sat Nov 15 06:54:29.528517 2025] [:error] [pid 27997:tid 28013] [client 188.213.202.143:37097] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/users.php"] [unique_id "aRezJdpja_6cDxKbxFk0FwAAAM4"]
[Sat Nov 15 06:54:31.699187 2025] [:error] [pid 27909:tid 27934] [client 188.213.202.117:63305] [client 188.213.202.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/webdb.php"] [unique_id "aRezJyTfZ6B57n8HepWiBAAAABU"]
[Sat Nov 15 06:54:32.549365 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.110:29059] [client 188.213.202.110] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/nope.php"] [unique_id "aRezKOgM1rHoEAqoQDdI1QAAAQY"]
[Sat Nov 15 06:54:33.394526 2025] [:error] [pid 27997:tid 28004] [client 188.213.202.112:35223] [client 188.213.202.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/index.php"] [unique_id "aRezKdpja_6cDxKbxFk0IQAAAMU"]
[Sat Nov 15 06:54:34.254451 2025] [:error] [pid 37318:tid 37380] [client 188.213.202.155:49399] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aRezKugM1rHoEAqoQDdI2AAAARI"]
[Sat Nov 15 06:54:35.101449 2025] [:error] [pid 27909:tid 27916] [client 188.213.202.148:59739] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/xleet.php"] [unique_id "aRezKyTfZ6B57n8HepWiCgAAAAM"]
[Sat Nov 15 06:54:35.948372 2025] [:error] [pid 37318:tid 37362] [client 188.213.202.157:47039] [client 188.213.202.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/about.php"] [unique_id "aRezK-gM1rHoEAqoQDdI3AAAAQA"]
[Sat Nov 15 06:54:36.797123 2025] [:error] [pid 37318:tid 37374] [client 188.213.202.136:49917] [client 188.213.202.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/erinyani"] [unique_id "aRezLOgM1rHoEAqoQDdI4QAAAQw"]
[Sat Nov 15 06:54:37.650772 2025] [:error] [pid 27911:tid 27973] [client 188.213.202.128:40129] [client 188.213.202.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aRezLcGzUdrhGBIfiKTX3gAAAIU"]
[Sat Nov 15 06:54:38.503010 2025] [:error] [pid 27909:tid 27915] [client 188.213.202.141:61693] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "aRezLiTfZ6B57n8HepWiCwAAAAI"]
[Sat Nov 15 06:54:39.348953 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.141:52065] [client 188.213.202.141] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3"] [unique_id "aRezL-gM1rHoEAqoQDdI5gAAAQ0"]
[Sat Nov 15 06:54:40.202708 2025] [:error] [pid 27997:tid 28000] [client 188.213.202.121:33337] [client 188.213.202.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aRezMNpja_6cDxKbxFk0JwAAAME"]
[Sat Nov 15 06:54:41.053326 2025] [:error] [pid 27911:tid 27982] [client 188.213.202.149:46849] [client 188.213.202.149] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "aRezMcGzUdrhGBIfiKTX4gAAAI4"]
[Sat Nov 15 06:54:41.902076 2025] [:error] [pid 27910:tid 27959] [client 188.213.202.113:52889] [client 188.213.202.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css"] [unique_id "aRezMY6e1LusHMYkS7ZpnQAAAFI"]
[Sat Nov 15 06:54:42.748069 2025] [:error] [pid 27911:tid 27971] [client 188.213.202.154:54123] [client 188.213.202.154] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin"] [unique_id "aRezMsGzUdrhGBIfiKTX5gAAAIM"]
[Sat Nov 15 06:54:43.595170 2025] [:error] [pid 27909:tid 27929] [client 188.213.202.156:37221] [client 188.213.202.156] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/sbryl.php"] [unique_id "aRezMyTfZ6B57n8HepWiEgAAABA"]
[Sat Nov 15 06:54:44.441360 2025] [:error] [pid 27911:tid 27990] [client 188.213.202.114:30915] [client 188.213.202.114] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "aRezNMGzUdrhGBIfiKTX7AAAAJY"]
[Sat Nov 15 06:54:45.287620 2025] [:error] [pid 27911:tid 27969] [client 188.213.202.109:58325] [client 188.213.202.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/file2.php"] [unique_id "aRezNcGzUdrhGBIfiKTX7gAAAIE"]
[Sat Nov 15 06:54:46.134954 2025] [:error] [pid 27910:tid 27962] [client 188.213.202.116:22381] [client 188.213.202.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/w1px.php"] [unique_id "aRezNo6e1LusHMYkS7ZpowAAAFU"]
[Sat Nov 15 06:54:46.981233 2025] [:error] [pid 27910:tid 27965] [client 188.213.202.122:52189] [client 188.213.202.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/baxa1.php7"] [unique_id "aRezNo6e1LusHMYkS7ZppQAAAFg"]
[Sat Nov 15 06:54:47.833873 2025] [:error] [pid 27910:tid 27948] [client 188.213.202.127:30679] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/classsmtps.php"] [unique_id "aRezN46e1LusHMYkS7ZppgAAAEc"]
[Sat Nov 15 06:54:48.680163 2025] [:error] [pid 27910:tid 27951] [client 188.213.202.129:20447] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/aresk.php"] [unique_id "aRezOI6e1LusHMYkS7ZpqAAAAEo"]
[Sat Nov 15 06:54:49.547232 2025] [:error] [pid 37318:tid 37388] [client 188.213.202.125:48783] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "aRezOegM1rHoEAqoQDdI6wAAARY"]
[Sat Nov 15 06:54:50.393487 2025] [:error] [pid 37318:tid 37366] [client 188.213.202.112:31341] [client 188.213.202.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/mari.php"] [unique_id "aRezOugM1rHoEAqoQDdI7wAAAQQ"]
[Sat Nov 15 06:54:51.240079 2025] [:error] [pid 37318:tid 37373] [client 188.213.202.127:25081] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "aRezO-gM1rHoEAqoQDdI9QAAAQs"]
[Sat Nov 15 06:54:52.086004 2025] [:error] [pid 37318:tid 37363] [client 188.213.202.142:56771] [client 188.213.202.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/xman.php"] [unique_id "aRezPOgM1rHoEAqoQDdI9wAAAQE"]
[Sat Nov 15 06:54:52.931727 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.120:26927] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/css"] [unique_id "aRezPOgM1rHoEAqoQDdI-gAAAQY"]
[Sat Nov 15 06:54:53.780500 2025] [:error] [pid 27911:tid 27990] [client 188.213.202.108:20543] [client 188.213.202.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/zex.php"] [unique_id "aRezPcGzUdrhGBIfiKTX8QAAAJY"]
[Sat Nov 15 06:54:54.627326 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.126:20189] [client 188.213.202.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/contact/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRezPugM1rHoEAqoQDdJAAAAAQ0"]
[Sat Nov 15 06:54:55.483718 2025] [:error] [pid 27997:tid 28000] [client 188.213.202.148:43621] [client 188.213.202.148] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aRezP9pja_6cDxKbxFk0NgAAAME"]
[Sat Nov 15 06:54:56.343657 2025] [:error] [pid 37318:tid 37374] [client 188.213.202.109:64195] [client 188.213.202.109] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/user.php"] [unique_id "aRezQOgM1rHoEAqoQDdJBwAAAQw"]
[Sat Nov 15 06:54:57.189595 2025] [:error] [pid 37318:tid 37365] [client 188.213.202.137:30423] [client 188.213.202.137] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/files/"] [unique_id "aRezQegM1rHoEAqoQDdJDAAAAQM"]
[Sat Nov 15 06:54:58.035302 2025] [:error] [pid 37318:tid 37366] [client 188.213.202.160:31033] [client 188.213.202.160] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/c.php"] [unique_id "aRezQugM1rHoEAqoQDdJEAAAAQQ"]
[Sat Nov 15 06:54:58.883090 2025] [:error] [pid 37318:tid 37365] [client 188.213.202.128:20127] [client 188.213.202.128] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-2019.php"] [unique_id "aRezQugM1rHoEAqoQDdJEwAAAQM"]
[Sat Nov 15 06:54:59.730060 2025] [:error] [pid 37318:tid 37364] [client 188.213.202.133:41217] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aRezQ-gM1rHoEAqoQDdJFwAAAQI"]
[Sat Nov 15 06:55:00.576802 2025] [:error] [pid 37318:tid 37373] [client 188.213.202.146:57629] [client 188.213.202.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/simple/function.php"] [unique_id "aRezROgM1rHoEAqoQDdJGwAAAQs"]
[Sat Nov 15 06:55:01.423435 2025] [:error] [pid 37318:tid 37376] [client 188.213.202.131:43231] [client 188.213.202.131] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "aRezRegM1rHoEAqoQDdJHgAAAQ4"]
[Sat Nov 15 06:55:02.271063 2025] [:error] [pid 27997:tid 28020] [client 188.213.202.151:28459] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aRezRtpja_6cDxKbxFk0PQAAANU"]
[Sat Nov 15 06:55:03.144756 2025] [:error] [pid 37318:tid 37382] [client 188.213.202.129:47917] [client 188.213.202.129] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/utils"] [unique_id "aRezR-gM1rHoEAqoQDdJJAAAARQ"]
[Sat Nov 15 06:55:03.990089 2025] [:error] [pid 27911:tid 27978] [client 188.213.202.108:52083] [client 188.213.202.108] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/404.php"] [unique_id "aRezR8GzUdrhGBIfiKTX9wAAAIo"]
[Sat Nov 15 06:55:04.841663 2025] [:error] [pid 37318:tid 37366] [client 188.213.202.142:29957] [client 188.213.202.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/public/hi.php"] [unique_id "aRezSOgM1rHoEAqoQDdJKgAAAQQ"]
[Sat Nov 15 06:55:05.690804 2025] [:error] [pid 27910:tid 27962] [client 188.213.202.136:62051] [client 188.213.202.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/subs/pics/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aRezSY6e1LusHMYkS7ZpuAAAAFU"]
[Sat Nov 15 06:55:06.537122 2025] [:error] [pid 27997:tid 28008] [client 188.213.202.157:50411] [client 188.213.202.157] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/login.php"] [unique_id "aRezStpja_6cDxKbxFk0RwAAAMk"]
[Sat Nov 15 06:55:07.384196 2025] [:error] [pid 27911:tid 27974] [client 188.213.202.106:63983] [client 188.213.202.106] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/fucku.php"] [unique_id "aRezS8GzUdrhGBIfiKTX_AAAAIY"]
[Sat Nov 15 06:55:08.230847 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.158:35267] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/pki-validation/"] [unique_id "aRezTOgM1rHoEAqoQDdJLwAAAQY"]
[Sat Nov 15 06:55:09.146225 2025] [:error] [pid 37318:tid 37379] [client 188.213.202.117:58001] [client 188.213.202.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-bindings/index.php"] [unique_id "aRezTegM1rHoEAqoQDdJMQAAARE"]
[Sat Nov 15 06:55:09.992955 2025] [:error] [pid 27911:tid 27984] [client 188.213.202.142:21471] [client 188.213.202.142] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/files/index.php"] [unique_id "aRezTcGzUdrhGBIfiKTYAAAAAJA"]
[Sat Nov 15 06:55:10.838750 2025] [:error] [pid 27911:tid 27973] [client 188.213.202.140:46691] [client 188.213.202.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aRezTsGzUdrhGBIfiKTYAQAAAIU"]
[Sat Nov 15 06:55:11.685452 2025] [:error] [pid 27911:tid 27986] [client 188.213.202.119:25773] [client 188.213.202.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "aRezT8GzUdrhGBIfiKTYBQAAAJI"]
[Sat Nov 15 06:55:12.535842 2025] [:error] [pid 37318:tid 37366] [client 188.213.202.111:61269] [client 188.213.202.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ans.php"] [unique_id "aRezUOgM1rHoEAqoQDdJNwAAAQQ"]
[Sat Nov 15 06:55:14.741852 2025] [:error] [pid 27911:tid 27977] [client 188.213.202.117:23687] [client 188.213.202.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/qfunctions.php"] [unique_id "aRezUsGzUdrhGBIfiKTYCAAAAIk"]
[Sat Nov 15 06:55:15.591401 2025] [:error] [pid 27911:tid 27988] [client 188.213.202.120:42937] [client 188.213.202.120] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/upload.php"] [unique_id "aRezU8GzUdrhGBIfiKTYCgAAAJQ"]
[Sat Nov 15 06:55:16.439539 2025] [:error] [pid 27911:tid 27986] [client 188.213.202.153:48919] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/worksec.php"] [unique_id "aRezVMGzUdrhGBIfiKTYDwAAAJI"]
[Sat Nov 15 06:55:17.286735 2025] [:error] [pid 27997:tid 28004] [client 188.213.202.136:31901] [client 188.213.202.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/fix/as.php"] [unique_id "aRezVdpja_6cDxKbxFk0WgAAAMU"]
[Sat Nov 15 06:55:18.135770 2025] [:error] [pid 27910:tid 27946] [client 188.213.202.127:47275] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/tolly-t/hello.php"] [unique_id "aRezVo6e1LusHMYkS7ZpvgAAAEU"]
[Sat Nov 15 06:55:18.982722 2025] [:error] [pid 37318:tid 37370] [client 188.213.202.119:61747] [client 188.213.202.119] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aRezVugM1rHoEAqoQDdJPwAAAQg"]
[Sat Nov 15 06:55:19.840879 2025] [:error] [pid 27997:tid 28022] [client 188.213.202.124:62113] [client 188.213.202.124] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/alera/alpha.php"] [unique_id "aRezV9pja_6cDxKbxFk0XQAAANc"]
[Sat Nov 15 06:55:20.687921 2025] [:error] [pid 27910:tid 27950] [client 188.213.202.147:38457] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/mah.php"] [unique_id "aRezWI6e1LusHMYkS7ZpxgAAAEk"]
[Sat Nov 15 06:55:21.534673 2025] [:error] [pid 27910:tid 27945] [client 188.213.202.127:42561] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/BypassBest.php"] [unique_id "aRezWY6e1LusHMYkS7ZpywAAAEQ"]
[Sat Nov 15 06:55:22.387647 2025] [:error] [pid 27910:tid 27954] [client 188.213.202.140:50789] [client 188.213.202.140] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/bak.php"] [unique_id "aRezWo6e1LusHMYkS7ZpzAAAAE0"]
[Sat Nov 15 06:55:23.237219 2025] [:error] [pid 37318:tid 37373] [client 188.213.202.145:63907] [client 188.213.202.145] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content"] [unique_id "aRezW-gM1rHoEAqoQDdJRAAAAQs"]
[Sat Nov 15 06:55:24.083423 2025] [:error] [pid 27910:tid 27950] [client 188.213.202.116:35531] [client 188.213.202.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates"] [unique_id "aRezXI6e1LusHMYkS7Zp1AAAAEk"]
[Sat Nov 15 06:55:24.930303 2025] [:error] [pid 27910:tid 27951] [client 188.213.202.143:26123] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conf.phps"] [unique_id "aRezXI6e1LusHMYkS7Zp1wAAAEo"]
[Sat Nov 15 06:55:25.777066 2025] [:error] [pid 27911:tid 27976] [client 188.213.202.116:64653] [client 188.213.202.116] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/b1ack.php"] [unique_id "aRezXcGzUdrhGBIfiKTYHwAAAIg"]
[Sat Nov 15 06:55:26.623777 2025] [:error] [pid 27910:tid 27950] [client 188.213.202.117:43511] [client 188.213.202.117] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aRezXo6e1LusHMYkS7Zp3AAAAEk"]
[Sat Nov 15 06:55:27.472772 2025] [:error] [pid 37318:tid 37362] [client 188.213.202.111:27161] [client 188.213.202.111] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/site/buy.php"] [unique_id "aRezX-gM1rHoEAqoQDdJSAAAAQA"]
[Sat Nov 15 06:55:28.318744 2025] [:error] [pid 37318:tid 37375] [client 188.213.202.127:22917] [client 188.213.202.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "aRezYOgM1rHoEAqoQDdJTAAAAQ0"]
[Sat Nov 15 06:55:30.533711 2025] [:error] [pid 27911:tid 27991] [client 188.213.202.133:45697] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/widgets"] [unique_id "aRezYsGzUdrhGBIfiKTYIgAAAJc"]
[Sat Nov 15 06:55:31.379605 2025] [:error] [pid 27997:tid 28005] [client 188.213.202.115:55069] [client 188.213.202.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/index.php"] [unique_id "aRezY9pja_6cDxKbxFk0ZwAAAMY"]
[Sat Nov 15 06:55:32.225680 2025] [:error] [pid 27911:tid 27969] [client 188.213.202.147:26825] [client 188.213.202.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aRezZMGzUdrhGBIfiKTYJwAAAIE"]
[Sat Nov 15 06:55:33.070599 2025] [:error] [pid 37318:tid 37365] [client 188.213.202.143:41797] [client 188.213.202.143] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/item.php"] [unique_id "aRezZegM1rHoEAqoQDdJVgAAAQM"]
[Sat Nov 15 06:55:33.916640 2025] [:error] [pid 27997:tid 28013] [client 188.213.202.142:22401] [client 188.213.202.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aRezZdpja_6cDxKbxFk0bQAAAM4"]
[Sat Nov 15 06:55:34.795613 2025] [:error] [pid 37318:tid 37381] [client 188.213.202.126:29787] [client 188.213.202.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-set.php"] [unique_id "aRezZugM1rHoEAqoQDdJWAAAARM"]
[Sat Nov 15 06:55:35.642907 2025] [:error] [pid 27997:tid 28003] [client 188.213.202.125:53299] [client 188.213.202.125] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/1.php"] [unique_id "aRezZ9pja_6cDxKbxFk0cgAAAMQ"]
[Sat Nov 15 06:55:36.488257 2025] [:error] [pid 27997:tid 28009] [client 188.213.202.151:58977] [client 188.213.202.151] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aRezaNpja_6cDxKbxFk0dQAAAMo"]
[Sat Nov 15 06:55:37.334044 2025] [:error] [pid 27911:tid 27982] [client 188.213.202.112:43241] [client 188.213.202.112] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2024/index.php"] [unique_id "aRezacGzUdrhGBIfiKTYLgAAAI4"]
[Sat Nov 15 06:55:38.179046 2025] [:error] [pid 37318:tid 37376] [client 188.213.202.158:56199] [client 188.213.202.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aRezaugM1rHoEAqoQDdJXgAAAQ4"]
[Sat Nov 15 06:55:39.023609 2025] [:error] [pid 37318:tid 37367] [client 188.213.202.136:38635] [client 188.213.202.136] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "aReza-gM1rHoEAqoQDdJZAAAAQU"]
[Sat Nov 15 06:55:39.875392 2025] [:error] [pid 37318:tid 37368] [client 188.213.202.155:36959] [client 188.213.202.155] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/Ova-Simple.php"] [unique_id "aReza-gM1rHoEAqoQDdJZwAAAQY"]
[Sat Nov 15 06:55:40.727142 2025] [:error] [pid 27911:tid 27991] [client 188.213.202.132:27723] [client 188.213.202.132] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/budmachine/web/s.php"] [unique_id "aRezbMGzUdrhGBIfiKTYMgAAAJc"]
[Sat Nov 15 06:55:41.581334 2025] [:error] [pid 27910:tid 27954] [client 188.213.202.153:46811] [client 188.213.202.153] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint"] [unique_id "aRezbY6e1LusHMYkS7Zp5wAAAE0"]
[Sat Nov 15 06:55:42.430359 2025] [:error] [pid 27997:tid 28020] [client 188.213.202.118:40801] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns"] [unique_id "aRezbtpja_6cDxKbxFk0hQAAANU"]
[Sat Nov 15 06:55:43.277688 2025] [:error] [pid 37318:tid 37372] [client 188.213.202.118:50615] [client 188.213.202.118] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/digital-download/new.php"] [unique_id "aRezb-gM1rHoEAqoQDdJbgAAAQo"]
[Sat Nov 15 06:55:44.123349 2025] [:error] [pid 27910:tid 27958] [client 188.213.202.133:53551] [client 188.213.202.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/xx.php"] [unique_id "aRezcI6e1LusHMYkS7Zp6gAAAFE"]
[Sat Nov 15 11:16:05.871637 2025] [:error] [pid 27911:tid 27969] [client 47.129.86.135:44184] [client 47.129.86.135] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRfwdcGzUdrhGBIfiKQdUwAAAIE"]
[Sat Nov 15 11:26:11.645467 2025] [:error] [pid 27997:tid 28021] [client 18.135.27.105:49254] [client 18.135.27.105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRfy09pja_6cDxKbxFmGLAAAANY"]
[Sat Nov 15 11:39:41.713056 2025] [:error] [pid 22765:tid 22775] [client 51.44.219.122:43526] [client 51.44.219.122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRf1_abrQzjuZmPIWDaZhgAAAoU"]
[Sat Nov 15 11:46:55.026442 2025] [:error] [pid 20654:tid 20675] [client 13.40.74.204:45198] [client 13.40.74.204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRf3r3cS7eC8vO76_ydnQQAAA5I"]
[Sat Nov 15 12:40:36.852057 2025] [:error] [pid 20654:tid 20664] [client 3.78.227.8:37786] [client 3.78.227.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRgERHcS7eC8vO76_yd34gAAA4c"]
[Sat Nov 15 12:41:51.667815 2025] [:error] [pid 20346:tid 20355] [client 13.208.201.237:48932] [client 13.208.201.237] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRgEj57hsydZdIoVTlvV0QAAAwY"]
[Sat Nov 15 21:34:26.346972 2025] [:error] [pid 22765:tid 22794] [client 179.76.44.184:51662] [client 179.76.44.184] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.76.44.184, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aRiBYqbrQzjuZmPIWDYKAgAAApg"]
[Sat Nov 15 21:34:26.352388 2025] [:error] [pid 22765:tid 22794] [client 179.76.44.184:51662] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Nov 15 22:10:30.834377 2025] [:error] [pid 20313:tid 20320] [client 15.164.163.137:44922] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "aRiJ1hI9DXIgPadBLUaqJAAAAsQ"]
[Sat Nov 15 22:10:30.851652 2025] [:error] [pid 22765:tid 22784] [client 15.164.163.137:44918] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "aRiJ1qbrQzjuZmPIWDYR7QAAAo4"]
[Sat Nov 15 22:10:30.882280 2025] [:error] [pid 22765:tid 22783] [client 15.164.163.137:44946] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "aRiJ1qbrQzjuZmPIWDYR7gAAAo0"]
[Sat Nov 15 22:10:30.887342 2025] [:error] [pid 20313:tid 20332] [client 15.164.163.137:44980] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "aRiJ1hI9DXIgPadBLUaqJQAAAtA"]
[Sat Nov 15 22:10:30.898482 2025] [:error] [pid 20313:tid 20323] [client 15.164.163.137:44936] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "aRiJ1hI9DXIgPadBLUaqJgAAAsc"]
[Sat Nov 15 22:10:30.899609 2025] [:error] [pid 20313:tid 20316] [client 15.164.163.137:44952] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "aRiJ1hI9DXIgPadBLUaqJwAAAsA"]
[Sat Nov 15 22:10:30.900514 2025] [:error] [pid 22765:tid 22793] [client 15.164.163.137:44914] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "aRiJ1qbrQzjuZmPIWDYR7wAAApc"]
[Sat Nov 15 22:10:30.903448 2025] [:error] [pid 20313:tid 20324] [client 15.164.163.137:44970] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "aRiJ1hI9DXIgPadBLUaqKAAAAsg"]
[Sat Nov 15 22:10:30.912143 2025] [:error] [pid 19961:tid 20006] [client 15.164.163.137:44956] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "aRiJ1jar7Si-84EApVSRmQAAAc0"]
[Sat Nov 15 22:10:30.927686 2025] [:error] [pid 20654:tid 20680] [client 15.164.163.137:44976] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aRiJ1ncS7eC8vO76_yce1gAAA5c"]
[Sat Nov 15 22:10:33.272913 2025] [:error] [pid 27911:tid 27977] [client 15.164.163.137:44986] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "aRiJ2cGzUdrhGBIfiKSDhQAAAIk"]
[Sat Nov 15 22:10:33.292564 2025] [:error] [pid 22765:tid 22780] [client 15.164.163.137:44990] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.sample"] [unique_id "aRiJ2abrQzjuZmPIWDYR8AAAAoo"]
[Sat Nov 15 22:10:33.499774 2025] [:error] [pid 27909:tid 27921] [client 15.164.163.137:45006] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "aRiJ2STfZ6B57n8HepVKoQAAAAg"]
[Sat Nov 15 22:10:33.525887 2025] [:error] [pid 20654:tid 20673] [client 15.164.163.137:44992] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "aRiJ2XcS7eC8vO76_yce2AAAA5A"]
[Sat Nov 15 22:10:35.514518 2025] [:error] [pid 22765:tid 22786] [client 15.164.163.137:45008] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.swp"] [unique_id "aRiJ26brQzjuZmPIWDYR8QAAApA"]
[Sat Nov 15 22:10:35.592167 2025] [:error] [pid 20346:tid 20368] [client 15.164.163.137:45016] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.orig"] [unique_id "aRiJ257hsydZdIoVTlthmwAAAxM"]
[Sat Nov 15 22:10:40.308430 2025] [:error] [pid 27997:tid 28010] [client 15.164.163.137:43160] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.tmp"] [unique_id "aRiJ4Npja_6cDxKbxFn55wAAAMs"]
[Sat Nov 15 22:10:40.365953 2025] [:error] [pid 27909:tid 27936] [client 15.164.163.137:43170] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env.save"] [unique_id "aRiJ4CTfZ6B57n8HepVKowAAABc"]
[Sat Nov 15 22:10:40.367012 2025] [:error] [pid 20346:tid 20367] [client 15.164.163.137:43180] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env.bak"] [unique_id "aRiJ4J7hsydZdIoVTlthnQAAAxI"]
[Sat Nov 15 22:10:40.395337 2025] [:error] [pid 27911:tid 27968] [client 15.164.163.137:43192] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env.old"] [unique_id "aRiJ4MGzUdrhGBIfiKSDiAAAAIA"]
[Sat Nov 15 22:10:40.410951 2025] [:error] [pid 19959:tid 19980] [client 15.164.163.137:43152] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "aRiJ4MjejiTUP1-IawP-uQAAAY4"]
[Sat Nov 15 22:10:40.425872 2025] [:error] [pid 19959:tid 19979] [client 15.164.163.137:43198] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "aRiJ4MjejiTUP1-IawP-ugAAAY0"]
[Sat Nov 15 22:10:40.437624 2025] [:error] [pid 20654:tid 20661] [client 15.164.163.137:43202] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "aRiJ4HcS7eC8vO76_yce3AAAA4Q"]
[Sat Nov 15 22:10:40.561040 2025] [:error] [pid 27911:tid 27975] [client 15.164.163.137:43224] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env.save"] [unique_id "aRiJ4MGzUdrhGBIfiKSDiQAAAIc"]
[Sat Nov 15 22:10:40.604116 2025] [:error] [pid 20654:tid 20670] [client 15.164.163.137:43248] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env.old"] [unique_id "aRiJ4HcS7eC8vO76_yce3QAAA40"]
[Sat Nov 15 22:10:40.624991 2025] [:error] [pid 19959:tid 19975] [client 15.164.163.137:43232] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env.bak"] [unique_id "aRiJ4MjejiTUP1-IawP-uwAAAYk"]
[Sat Nov 15 22:10:40.736924 2025] [:error] [pid 27909:tid 27928] [client 15.164.163.137:43210] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env.save"] [unique_id "aRiJ4CTfZ6B57n8HepVKpAAAAA8"]
[Sat Nov 15 22:10:40.736924 2025] [:error] [pid 27909:tid 27923] [client 15.164.163.137:43254] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "aRiJ4CTfZ6B57n8HepVKpQAAAAo"]
[Sat Nov 15 22:10:40.879485 2025] [:error] [pid 22613:tid 22627] [client 15.164.163.137:43270] [client 15.164.163.137] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env.bak"] [unique_id "aRiJ4CoyR3cDsIRGPRnf0QAAAgw"]
[Sun Nov 16 02:39:46.251712 2025] [:error] [pid 27911:tid 27991] [client 136.107.41.62:50562] [client 136.107.41.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aRjI8sGzUdrhGBIfiKShZQAAAJc"]
[Sun Nov 16 02:47:20.440540 2025] [:error] [pid 20346:tid 20366] [client 20.2.83.141:56337] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/images/"] [unique_id "aRjKuJ7hsydZdIoVTluS8wAAAxE"], referer: binance.com
[Sun Nov 16 02:47:25.511508 2025] [:error] [pid 22765:tid 22772] [client 20.2.83.141:59249] [client 20.2.83.141] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/files/"] [unique_id "aRjKvabrQzjuZmPIWDZRhwAAAoQ"], referer: binance.com
[Sun Nov 16 15:12:12.338949 2025] [:error] [pid 34133:tid 34146] [client 52.53.217.19:55988] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "aRl5TPSAB3iwXVRY0gFzEwAAAUs"]
[Sun Nov 16 15:12:12.371297 2025] [:error] [pid 34227:tid 34246] [client 52.53.217.19:56018] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "aRl5TH108zGLYs9eMugU3gAAAhE"]
[Sun Nov 16 15:12:12.393391 2025] [:error] [pid 34133:tid 34137] [client 52.53.217.19:55966] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "aRl5TPSAB3iwXVRY0gFzFAAAAUI"]
[Sun Nov 16 15:12:12.393987 2025] [:error] [pid 34227:tid 34250] [client 52.53.217.19:55980] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "aRl5TH108zGLYs9eMugU3wAAAhU"]
[Sun Nov 16 15:12:12.430997 2025] [:error] [pid 34227:tid 34236] [client 52.53.217.19:55994] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "aRl5TH108zGLYs9eMugU4QAAAgc"]
[Sun Nov 16 15:12:12.673190 2025] [:error] [pid 20556:tid 20570] [client 52.53.217.19:56004] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aRl5TEkbyEckbWtBcCJVcQAAAQw"]
[Sun Nov 16 15:12:29.981764 2025] [:error] [pid 52471:tid 52537] [client 52.53.217.19:54982] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "aRl5XdmWsFzjR5CEgDUrdgAAAIU"]
[Sun Nov 16 15:12:30.062758 2025] [:error] [pid 52471:tid 52550] [client 52.53.217.19:54976] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "aRl5XtmWsFzjR5CEgDUrdwAAAJI"]
[Sun Nov 16 15:12:30.211752 2025] [:error] [pid 52471:tid 52553] [client 52.53.217.19:54986] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "aRl5XtmWsFzjR5CEgDUreAAAAJU"]
[Sun Nov 16 15:12:31.796633 2025] [:error] [pid 52563:tid 52585] [client 52.53.217.19:53272] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "aRl5X8-l3ey-hVJ5AuuG1QAAANM"]
[Sun Nov 16 15:12:31.802166 2025] [:error] [pid 34133:tid 34152] [client 52.53.217.19:53264] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "aRl5X_SAB3iwXVRY0gFzFgAAAVE"]
[Sun Nov 16 15:12:31.840091 2025] [:error] [pid 34227:tid 34235] [client 52.53.217.19:53434] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env.save"] [unique_id "aRl5X3108zGLYs9eMugU8AAAAgY"]
[Sun Nov 16 15:12:31.848170 2025] [:error] [pid 34133:tid 34143] [client 52.53.217.19:53558] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/.env.bak"] [unique_id "aRl5X_SAB3iwXVRY0gFzFwAAAUg"]
[Sun Nov 16 15:12:31.848170 2025] [:error] [pid 34227:tid 34239] [client 52.53.217.19:53284] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/lib/.env.old"] [unique_id "aRl5X3108zGLYs9eMugU8QAAAgo"]
[Sun Nov 16 15:12:31.854349 2025] [:error] [pid 52563:tid 52583] [client 52.53.217.19:53262] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/src/.env.save"] [unique_id "aRl5X8-l3ey-hVJ5AuuG1gAAANE"]
[Sun Nov 16 15:12:31.857353 2025] [:error] [pid 52563:tid 52586] [client 52.53.217.19:53240] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.tmp"] [unique_id "aRl5X8-l3ey-hVJ5AuuG1wAAANQ"]
[Sun Nov 16 15:12:31.858636 2025] [:error] [pid 52469:tid 52482] [client 52.53.217.19:53652] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/system/.env.old"] [unique_id "aRl5X06HaXpHeEZ98Z2ZRQAAAAU"]
[Sun Nov 16 15:12:31.862131 2025] [:error] [pid 34301:tid 34321] [client 52.53.217.19:53690] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.swp"] [unique_id "aRl5X7GPoZwUGuFNREumbQAAApE"]
[Sun Nov 16 15:12:31.863678 2025] [:error] [pid 52563:tid 52568] [client 52.53.217.19:53310] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env.bak"] [unique_id "aRl5X8-l3ey-hVJ5AuuG2AAAAMI"]
[Sun Nov 16 15:12:31.865607 2025] [:error] [pid 34301:tid 34309] [client 52.53.217.19:53404] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/.env.bak"] [unique_id "aRl5X7GPoZwUGuFNREumbgAAAoU"]
[Sun Nov 16 15:12:31.868667 2025] [:error] [pid 52563:tid 52572] [client 52.53.217.19:53296] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env.bak"] [unique_id "aRl5X8-l3ey-hVJ5AuuG2QAAAMY"]
[Sun Nov 16 15:12:31.869059 2025] [:error] [pid 52563:tid 52579] [client 52.53.217.19:53254] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "aRl5X8-l3ey-hVJ5AuuG2gAAAM0"]
[Sun Nov 16 15:12:31.869239 2025] [:error] [pid 52469:tid 52494] [client 52.53.217.19:53506] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/lib/.env.bak"] [unique_id "aRl5X06HaXpHeEZ98Z2ZRgAAABE"]
[Sun Nov 16 15:12:31.873439 2025] [:error] [pid 52563:tid 52570] [client 52.53.217.19:53742] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env.bak"] [unique_id "aRl5X8-l3ey-hVJ5AuuG2wAAAMQ"]
[Sun Nov 16 15:12:31.874109 2025] [:error] [pid 52563:tid 52573] [client 52.53.217.19:53630] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "aRl5X8-l3ey-hVJ5AuuG3QAAAMc"]
[Sun Nov 16 15:12:31.874223 2025] [:error] [pid 52563:tid 52567] [client 52.53.217.19:53372] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/includes/.env.bak"] [unique_id "aRl5X8-l3ey-hVJ5AuuG3AAAAME"]
[Sun Nov 16 15:12:31.875246 2025] [:error] [pid 52469:tid 52485] [client 52.53.217.19:53450] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/system/.env.bak"] [unique_id "aRl5X06HaXpHeEZ98Z2ZRwAAAAg"]
[Sun Nov 16 15:12:31.878499 2025] [:error] [pid 52563:tid 52576] [client 52.53.217.19:53676] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "aRl5X8-l3ey-hVJ5AuuG3gAAAMo"]
[Sun Nov 16 15:12:31.880387 2025] [:error] [pid 34133:tid 34142] [client 52.53.217.19:53568] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/core/.env"] [unique_id "aRl5X_SAB3iwXVRY0gFzGAAAAUc"]
[Sun Nov 16 15:12:31.881809 2025] [:error] [pid 34133:tid 34136] [client 52.53.217.19:53428] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/.env.save"] [unique_id "aRl5X_SAB3iwXVRY0gFzGQAAAUE"]
[Sun Nov 16 15:12:31.885173 2025] [:error] [pid 52563:tid 52577] [client 52.53.217.19:53438] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env.old"] [unique_id "aRl5X8-l3ey-hVJ5AuuG3wAAAMs"]
[Sun Nov 16 15:12:31.892963 2025] [:error] [pid 52563:tid 52590] [client 52.53.217.19:53534] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/.env"] [unique_id "aRl5X8-l3ey-hVJ5AuuG4AAAANg"]
[Sun Nov 16 15:12:31.895876 2025] [:error] [pid 34301:tid 34306] [client 52.53.217.19:53480] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env.bak"] [unique_id "aRl5X7GPoZwUGuFNREumbwAAAoI"]
[Sun Nov 16 15:12:31.897840 2025] [:error] [pid 52563:tid 52589] [client 52.53.217.19:53496] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/.env"] [unique_id "aRl5X8-l3ey-hVJ5AuuG4QAAANc"]
[Sun Nov 16 15:12:31.898180 2025] [:error] [pid 20556:tid 20567] [client 52.53.217.19:53368] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env.bak"] [unique_id "aRl5X0kbyEckbWtBcCJVegAAAQk"]
[Sun Nov 16 15:12:31.898669 2025] [:error] [pid 34301:tid 34303] [client 52.53.217.19:53364] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env.save"] [unique_id "aRl5X7GPoZwUGuFNREumcAAAAoA"]
[Sun Nov 16 15:12:31.899166 2025] [:error] [pid 34301:tid 34316] [client 52.53.217.19:53542] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env.save"] [unique_id "aRl5X7GPoZwUGuFNREumcQAAAow"]
[Sun Nov 16 15:12:31.903336 2025] [:error] [pid 52563:tid 52584] [client 52.53.217.19:53606] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/.env.old"] [unique_id "aRl5X8-l3ey-hVJ5AuuG4gAAANI"]
[Sun Nov 16 15:12:31.903752 2025] [:error] [pid 52563:tid 52582] [client 52.53.217.19:53836] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/core/.env.bak"] [unique_id "aRl5X8-l3ey-hVJ5AuuG4wAAANA"]
[Sun Nov 16 15:12:31.907485 2025] [:error] [pid 34227:tid 34240] [client 52.53.217.19:53564] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "aRl5X3108zGLYs9eMugU8gAAAgs"]
[Sun Nov 16 15:12:31.909583 2025] [:error] [pid 34227:tid 34247] [client 52.53.217.19:53470] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env.save"] [unique_id "aRl5X3108zGLYs9eMugU8wAAAhI"]
[Sun Nov 16 15:12:31.910571 2025] [:error] [pid 34133:tid 34156] [client 52.53.217.19:53476] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/application/.env"] [unique_id "aRl5X_SAB3iwXVRY0gFzGgAAAVU"]
[Sun Nov 16 15:12:31.911731 2025] [:error] [pid 52563:tid 52571] [client 52.53.217.19:53794] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/includes/.env.old"] [unique_id "aRl5X8-l3ey-hVJ5AuuG5AAAAMU"]
[Sun Nov 16 15:12:31.913175 2025] [:error] [pid 34133:tid 34139] [client 52.53.217.19:53728] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "aRl5X_SAB3iwXVRY0gFzGwAAAUQ"]
[Sun Nov 16 15:12:31.931931 2025] [:error] [pid 34301:tid 34320] [client 52.53.217.19:53704] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/application/.env.old"] [unique_id "aRl5X7GPoZwUGuFNREumcgAAApA"]
[Sun Nov 16 15:12:31.932033 2025] [:error] [pid 52563:tid 52587] [client 52.53.217.19:53664] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/lib/.env.save"] [unique_id "aRl5X8-l3ey-hVJ5AuuG5QAAANU"]
[Sun Nov 16 15:12:31.932714 2025] [:error] [pid 34227:tid 34232] [client 52.53.217.19:53638] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env.save"] [unique_id "aRl5X3108zGLYs9eMugU9AAAAgM"]
[Sun Nov 16 15:12:31.935173 2025] [:error] [pid 34133:tid 34148] [client 52.53.217.19:53388] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/.env.save"] [unique_id "aRl5X_SAB3iwXVRY0gFzHAAAAU0"]
[Sun Nov 16 15:12:31.936004 2025] [:error] [pid 52563:tid 52581] [client 52.53.217.19:53342] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/src/.env"] [unique_id "aRl5X8-l3ey-hVJ5AuuG5gAAAM8"]
[Sun Nov 16 15:12:31.936136 2025] [:error] [pid 34301:tid 34327] [client 52.53.217.19:53344] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/core/.env.save"] [unique_id "aRl5X7GPoZwUGuFNREumcwAAApc"]
[Sun Nov 16 15:12:32.611096 2025] [:error] [pid 34301:tid 34307] [client 52.53.217.19:53414] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env"] [unique_id "aRl5YLGPoZwUGuFNREumdQAAAoM"]
[Sun Nov 16 15:12:32.616284 2025] [:error] [pid 34271:tid 34276] [client 52.53.217.19:53560] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "aRl5YENmlZhoZZV1BUCW6AAAAkM"]
[Sun Nov 16 15:12:32.635670 2025] [:error] [pid 34133:tid 34138] [client 52.53.217.19:53510] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/core/.env.old"] [unique_id "aRl5YPSAB3iwXVRY0gFzHQAAAUM"]
[Sun Nov 16 15:12:32.636420 2025] [:error] [pid 34165:tid 34208] [client 52.53.217.19:53522] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/system/.env"] [unique_id "aRl5YHhG2YTKEjXchwkGZAAAAc0"]
[Sun Nov 16 15:12:32.649158 2025] [:error] [pid 34227:tid 34250] [client 52.53.217.19:53852] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/includes/.env"] [unique_id "aRl5YH108zGLYs9eMugU9gAAAhU"]
[Sun Nov 16 15:12:32.664357 2025] [:error] [pid 52563:tid 52569] [client 52.53.217.19:53462] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/src/.env.old"] [unique_id "aRl5YM-l3ey-hVJ5AuuG6AAAAMM"]
[Sun Nov 16 15:12:32.682819 2025] [:error] [pid 34133:tid 34147] [client 52.53.217.19:53466] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/.env.save"] [unique_id "aRl5YPSAB3iwXVRY0gFzHgAAAUw"]
[Sun Nov 16 15:12:32.688228 2025] [:error] [pid 34301:tid 34318] [client 52.53.217.19:53778] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.sample"] [unique_id "aRl5YLGPoZwUGuFNREumdgAAAo4"]
[Sun Nov 16 15:12:32.689044 2025] [:error] [pid 34165:tid 34206] [client 52.53.217.19:53818] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/lib/.env"] [unique_id "aRl5YHhG2YTKEjXchwkGZQAAAcs"]
[Sun Nov 16 15:12:32.702808 2025] [:error] [pid 34301:tid 34310] [client 52.53.217.19:53614] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/includes/.env.save"] [unique_id "aRl5YLGPoZwUGuFNREumdwAAAoY"]
[Sun Nov 16 15:12:32.708098 2025] [:error] [pid 52469:tid 52497] [client 52.53.217.19:53570] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/application/.env.save"] [unique_id "aRl5YE6HaXpHeEZ98Z2ZSgAAABQ"]
[Sun Nov 16 15:12:32.720818 2025] [:error] [pid 52469:tid 52491] [client 52.53.217.19:53834] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env.old"] [unique_id "aRl5YE6HaXpHeEZ98Z2ZSwAAAA4"]
[Sun Nov 16 15:12:32.725858 2025] [:error] [pid 52469:tid 52490] [client 52.53.217.19:53826] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/.env.bak"] [unique_id "aRl5YE6HaXpHeEZ98Z2ZTAAAAA0"]
[Sun Nov 16 15:12:32.728374 2025] [:error] [pid 52563:tid 52588] [client 52.53.217.19:53758] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/.env"] [unique_id "aRl5YM-l3ey-hVJ5AuuG6QAAANY"]
[Sun Nov 16 15:12:32.732919 2025] [:error] [pid 52469:tid 52501] [client 52.53.217.19:53326] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/src/.env.bak"] [unique_id "aRl5YE6HaXpHeEZ98Z2ZTQAAABg"]
[Sun Nov 16 15:12:32.733002 2025] [:error] [pid 34271:tid 34290] [client 52.53.217.19:53348] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env"] [unique_id "aRl5YENmlZhoZZV1BUCW6QAAAlE"]
[Sun Nov 16 15:12:32.740425 2025] [:error] [pid 34301:tid 34324] [client 52.53.217.19:53590] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env.old"] [unique_id "aRl5YLGPoZwUGuFNREumeAAAApQ"]
[Sun Nov 16 15:12:32.753288 2025] [:error] [pid 52563:tid 52574] [client 52.53.217.19:53712] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env.old"] [unique_id "aRl5YM-l3ey-hVJ5AuuG6gAAAMg"]
[Sun Nov 16 15:12:32.762667 2025] [:error] [pid 34301:tid 34323] [client 52.53.217.19:53808] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/system/.env.save"] [unique_id "aRl5YLGPoZwUGuFNREumeQAAApM"]
[Sun Nov 16 15:12:32.766441 2025] [:error] [pid 20556:tid 20580] [client 52.53.217.19:53816] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/application/.env.bak"] [unique_id "aRl5YEkbyEckbWtBcCJVfAAAARY"]
[Sun Nov 16 15:12:32.770090 2025] [:error] [pid 52563:tid 52575] [client 52.53.217.19:53574] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.orig"] [unique_id "aRl5YM-l3ey-hVJ5AuuG6wAAAMk"]
[Sun Nov 16 15:12:32.781152 2025] [:error] [pid 52469:tid 52499] [client 52.53.217.19:53772] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env.old"] [unique_id "aRl5YE6HaXpHeEZ98Z2ZTgAAABY"]
[Sun Nov 16 15:12:32.786312 2025] [:error] [pid 52563:tid 52578] [client 52.53.217.19:53692] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/.env.old"] [unique_id "aRl5YM-l3ey-hVJ5AuuG7AAAAMw"]
[Sun Nov 16 15:12:33.263829 2025] [:error] [pid 34271:tid 34286] [client 52.53.217.19:53878] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/.env.bak"] [unique_id "aRl5YUNmlZhoZZV1BUCW6gAAAk0"]
[Sun Nov 16 15:12:33.319712 2025] [:error] [pid 52471:tid 52533] [client 52.53.217.19:53936] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/.env.old"] [unique_id "aRl5YdmWsFzjR5CEgDUreQAAAIE"]
[Sun Nov 16 15:12:33.426719 2025] [:error] [pid 34271:tid 34289] [client 52.53.217.19:53960] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/.env.save"] [unique_id "aRl5YUNmlZhoZZV1BUCW6wAAAlA"]
[Sun Nov 16 15:12:33.427903 2025] [:error] [pid 34165:tid 34212] [client 52.53.217.19:53862] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/.env.bak"] [unique_id "aRl5YXhG2YTKEjXchwkGZgAAAdE"]
[Sun Nov 16 15:12:33.432739 2025] [:error] [pid 34164:tid 34192] [client 52.53.217.19:53920] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/.env.old"] [unique_id "aRl5Ye93ccBCLD8-Q4YiQgAAAZg"]
[Sun Nov 16 15:12:33.440736 2025] [:error] [pid 34164:tid 34183] [client 52.53.217.19:53892] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/.env"] [unique_id "aRl5Ye93ccBCLD8-Q4YiQwAAAY8"]
[Sun Nov 16 15:12:33.441078 2025] [:error] [pid 34165:tid 34195] [client 52.53.217.19:53950] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/.env"] [unique_id "aRl5YXhG2YTKEjXchwkGZwAAAcA"]
[Sun Nov 16 15:12:33.449152 2025] [:error] [pid 34133:tid 34146] [client 52.53.217.19:53932] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/.env.old"] [unique_id "aRl5YfSAB3iwXVRY0gFzIAAAAUs"]
[Sun Nov 16 15:12:33.470778 2025] [:error] [pid 52563:tid 52572] [client 52.53.217.19:53904] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/.env"] [unique_id "aRl5Yc-l3ey-hVJ5AuuG7gAAAMY"]
[Sun Nov 16 15:12:33.481151 2025] [:error] [pid 34164:tid 34176] [client 52.53.217.19:53942] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/.env.save"] [unique_id "aRl5Ye93ccBCLD8-Q4YiRAAAAYg"]
[Sun Nov 16 15:12:33.488217 2025] [:error] [pid 34164:tid 34168] [client 52.53.217.19:53930] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/.env.save"] [unique_id "aRl5Ye93ccBCLD8-Q4YiRQAAAYA"]
[Sun Nov 16 15:12:33.512469 2025] [:error] [pid 34165:tid 34198] [client 52.53.217.19:54006] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sun Nov 16 15:12:33.512469 2025] [:error] [pid 34301:tid 34303] [client 52.53.217.19:54010] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sun Nov 16 15:12:33.528904 2025] [:error] [pid 34164:tid 34184] [client 52.53.217.19:54002] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sun Nov 16 15:12:33.530634 2025] [:error] [pid 52469:tid 52483] [client 52.53.217.19:54018] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sun Nov 16 15:12:33.556902 2025] [:error] [pid 34301:tid 34316] [client 52.53.217.19:53988] File does not exist: /usr/local/apache/htdocs/suspended-page/info1.php
[Sun Nov 16 15:12:33.559797 2025] [:error] [pid 34165:tid 34207] [client 52.53.217.19:53954] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/.env.bak"] [unique_id "aRl5YXhG2YTKEjXchwkGaQAAAcw"]
[Sun Nov 16 15:12:33.562288 2025] [:error] [pid 34301:tid 34305] [client 52.53.217.19:54062] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sun Nov 16 15:12:33.578342 2025] [:error] [pid 34164:tid 34189] [client 52.53.217.19:54036] File does not exist: /usr/local/apache/htdocs/suspended-page/php_info.php
[Sun Nov 16 15:12:33.649161 2025] [:error] [pid 34164:tid 34187] [client 52.53.217.19:54030] [client 52.53.217.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/.env.old"] [unique_id "aRl5Ye93ccBCLD8-Q4YiSQAAAZM"]
[Sun Nov 16 15:12:33.743204 2025] [:error] [pid 34165:tid 34211] [client 52.53.217.19:54052] File does not exist: /usr/local/apache/htdocs/suspended-page/info2.php
[Sun Nov 16 15:12:33.892163 2025] [:error] [pid 34301:tid 34320] [client 52.53.217.19:54022] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sun Nov 16 18:18:03.473760 2025] [:error] [pid 20556:tid 20566] [client 155.94.163.116:52724] [client 155.94.163.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/"] [unique_id "aRmk20kbyEckbWtBcCKERgAAAQg"], referer: binance.com
[Sun Nov 16 20:09:56.087905 2025] [:error] [pid 52469:tid 52501] [client 143.137.195.207:38214] [client 143.137.195.207] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 143.137.195.207, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aRm_FE6HaXpHeEZ98Z38MgAAABg"]
[Sun Nov 16 20:09:56.092701 2025] [:error] [pid 52469:tid 52501] [client 143.137.195.207:38214] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Nov 17 17:31:34.714655 2025] [:error] [pid 32753:tid 32778] [client 82.192.129.64:11985] [client 82.192.129.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.192.129.64, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aRrrdk6YNqI5vkht921SswAAA9Y"]
[Mon Nov 17 17:31:34.719589 2025] [:error] [pid 32753:tid 32778] [client 82.192.129.64:11985] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 18 12:13:35.310409 2025] [:error] [pid 44624:tid 44628] [client 185.177.72.49:45056] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "aRvybyllffozoBluWCXjPwAAAYE"]
[Tue Nov 18 12:13:35.310870 2025] [:error] [pid 44472:tid 44534] [client 185.177.72.49:45070] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aRvyb4KhGwkiLjv8BQxsoQAAAUM"]
[Tue Nov 18 12:13:36.180137 2025] [:error] [pid 44471:tid 44507] [client 185.177.72.49:45086] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "aRvycO_6m0bQO14XwtPgAQAAAQM"]
[Tue Nov 18 12:13:37.016785 2025] [:error] [pid 44470:tid 44482] [client 185.177.72.49:6788] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/laravel/.env"] [unique_id "aRvycTv-RLYfULjlgDZNJAAAAEc"]
[Tue Nov 18 12:13:39.119237 2025] [:error] [pid 44624:tid 44646] [client 185.177.72.49:6798] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "aRvycyllffozoBluWCXjRQAAAZM"]
[Tue Nov 18 12:13:39.981285 2025] [:error] [pid 44624:tid 44632] [client 185.177.72.49:6820] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.testing"] [unique_id "aRvycyllffozoBluWCXjSAAAAYU"]
[Tue Nov 18 12:13:41.113765 2025] [:error] [pid 44624:tid 44637] [client 185.177.72.49:6824] [client 185.177.72.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "aRvydSllffozoBluWCXjTAAAAYo"]
[Tue Nov 18 13:22:11.276876 2025] [:error] [pid 44624:tid 44647] [client 189.201.251.74:13166] [client 189.201.251.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.201.251.74, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aRwCgyllffozoBluWCX9NQAAAZQ"]
[Tue Nov 18 13:22:11.285807 2025] [:error] [pid 44624:tid 44647] [client 189.201.251.74:13166] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 18 19:53:49.711630 2025] [:error] [pid 44560:tid 44589] [client 84.247.191.22:54404] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/images/"] [unique_id "aRxeTQnbP7etF3q5-5uwEwAAANI"], referer: binance.com
[Tue Nov 18 19:53:55.631619 2025] [:error] [pid 44560:tid 44573] [client 84.247.191.22:64094] [client 84.247.191.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/files/"] [unique_id "aRxeUwnbP7etF3q5-5uwGQAAAMI"], referer: binance.com
[Tue Nov 18 21:37:29.290249 2025] [:error] [pid 3500:tid 3518] [client 45.134.79.103:60660] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aRx2mfCbRC7k2D7mjbSTgwAAAdA"]
[Tue Nov 18 21:37:29.967176 2025] [:error] [pid 44470:tid 44489] [client 45.134.79.103:51564] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aRx2mTv-RLYfULjlgDb_NQAAAE4"]
[Tue Nov 18 21:37:30.639393 2025] [:error] [pid 44470:tid 44487] [client 45.134.79.103:61104] [client 45.134.79.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRx2mjv-RLYfULjlgDb_SAAAAEw"]
[Wed Nov 19 07:06:05.788899 2025] [:error] [pid 6556:tid 6641] [client 112.208.189.15:41532] [client 112.208.189.15] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.208.189.15, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aRz73ZuL7hhgrmdM1mtxiAAAAJc"]
[Wed Nov 19 07:06:05.793717 2025] [:error] [pid 6556:tid 6641] [client 112.208.189.15:41532] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 19 20:35:57.662339 2025] [:error] [pid 6919:tid 6926] [client 104.196.176.201:58006] [client 104.196.176.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/system/js/core.js"] [unique_id "aR25rUYFdN1s_9xJVUmBeQAAAQQ"]
[Thu Nov 20 01:50:14.452337 2025] [:error] [pid 45115:tid 45122] [client 82.167.124.28:14532] [client 82.167.124.28] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.167.124.28, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aR4DVgGi_fIGlZjI1V5EwAAAAMU"]
[Thu Nov 20 01:50:14.457914 2025] [:error] [pid 45115:tid 45122] [client 82.167.124.28:14532] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 20 12:10:20.107077 2025] [:error] [pid 55340:tid 55367] [client 98.81.111.26:54207] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aR6UrPOxD-NeMydTybBJewAAABY"]
[Thu Nov 20 12:10:20.511606 2025] [:error] [pid 55340:tid 55367] [client 98.81.111.26:62601] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aR6UrPOxD-NeMydTybBJiwAAABY"]
[Thu Nov 20 12:10:20.915698 2025] [:error] [pid 804:tid 806] [client 98.81.111.26:55104] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aR6UrPaRHpUlPL9O0Lk1agAAAYA"]
[Thu Nov 20 12:10:21.320944 2025] [:error] [pid 34405:tid 34417] [client 98.81.111.26:62428] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aR6UrTFpvu8oRK7ATfvI6wAAAQo"]
[Thu Nov 20 12:10:21.728341 2025] [:error] [pid 55342:tid 55372] [client 98.81.111.26:58883] [client 98.81.111.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aR6Urbg6x32Tvk7fIG-L1wAAAEA"]
[Thu Nov 20 13:00:34.628627 2025] [:error] [pid 55342:tid 55392] [client 173.239.254.75:47831] [client 173.239.254.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.254.75, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aR6gcrg6x32Tvk7fIG-XswAAAFQ"]
[Thu Nov 20 13:00:34.632315 2025] [:error] [pid 55342:tid 55392] [client 173.239.254.75:47831] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Nov 20 18:59:43.003898 2025] [:error] [pid 40415:tid 40425] [client 35.229.36.250:56561] [client 35.229.36.250] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.229.36.250, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aR70n6hjIyLSv09svwOqUgAAAcc"]
[Thu Nov 20 18:59:43.009351 2025] [:error] [pid 40415:tid 40425] [client 35.229.36.250:56561] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Nov 20 18:59:45.865674 2025] [:error] [pid 40415:tid 40423] [client 35.229.36.250:56561] [client 35.229.36.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aR70oahjIyLSv09svwOqXQAAAcU"]
[Thu Nov 20 18:59:46.479149 2025] [:error] [pid 34405:tid 34416] [client 35.229.36.250:50235] [client 35.229.36.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aR70ojFpvu8oRK7ATfscNAAAAQk"]
[Thu Nov 20 18:59:46.957105 2025] [:error] [pid 40508:tid 40517] [client 35.229.36.250:61659] [client 35.229.36.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aR70oqxXNVCMW_ksxPut0gAAAoc"]
[Thu Nov 20 18:59:47.461619 2025] [:error] [pid 55340:tid 55364] [client 35.229.36.250:52754] [client 35.229.36.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aR70o_OxD-NeMydTybCf8QAAABM"]
[Thu Nov 20 18:59:47.942303 2025] [:error] [pid 55340:tid 55345] [client 35.229.36.250:53913] [client 35.229.36.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aR70o_OxD-NeMydTybCf8gAAAAA"]
[Thu Nov 20 18:59:48.410635 2025] [:error] [pid 40508:tid 40527] [client 35.229.36.250:54285] [client 35.229.36.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aR70pKxXNVCMW_ksxPut2wAAApE"]
[Thu Nov 20 18:59:48.887593 2025] [:error] [pid 40508:tid 40526] [client 35.229.36.250:53798] [client 35.229.36.250] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aR70pKxXNVCMW_ksxPut3QAAApA"]
[Thu Nov 20 19:41:24.271154 2025] [:error] [pid 55340:tid 55345] [client 172.161.90.19:25945] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR7-ZPOxD-NeMydTybCoIgAAAAA"]
[Thu Nov 20 19:41:26.245598 2025] [:error] [pid 40445:tid 40495] [client 172.161.90.19:25983] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR7-ZlH-MuFcoWRjXpZn-wAAAlQ"]
[Thu Nov 20 19:41:27.824248 2025] [:error] [pid 40445:tid 40490] [client 172.161.90.19:25976] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR7-Z1H-MuFcoWRjXpZoAwAAAk8"]
[Thu Nov 20 19:41:30.020445 2025] [:error] [pid 34405:tid 34408] [client 172.161.90.19:25922] [client 172.161.90.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aR7-ajFpvu8oRK7ATfskewAAAQE"]
[Thu Nov 20 22:26:42.384311 2025] [:error] [pid 40537:tid 40556] [client 49.43.130.253:58646] [client 49.43.130.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.43.130.253, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aR8lIqKlsL5kxTa3c1wHRAAAAs8"]
[Thu Nov 20 22:26:42.389086 2025] [:error] [pid 40537:tid 40556] [client 49.43.130.253:58646] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Nov 21 01:57:31.940287 2025] [:error] [pid 13805:tid 13812] [client 93.123.109.7:37410] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aR9Wi1urU5-GZdwKvr7RwQAAAUQ"]
[Fri Nov 21 02:27:28.476721 2025] [:error] [pid 13522:tid 13704] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:27:28.650518 2025] [:error] [pid 13522:tid 13701] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:27:28.801659 2025] [:error] [pid 13522:tid 13717] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/ava.php, referer: https://www.google.fr/
[Fri Nov 21 02:27:28.954402 2025] [:error] [pid 13522:tid 13718] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:29.145667 2025] [:error] [pid 13522:tid 13719] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/pow.php, referer: https://www.google.de/
[Fri Nov 21 02:27:29.300387 2025] [:error] [pid 13522:tid 13707] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/zuk.php, referer: https://www.google.de/
[Fri Nov 21 02:27:29.463967 2025] [:error] [pid 13522:tid 13713] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/fss.php, referer: https://www.google.com/
[Fri Nov 21 02:27:30.124394 2025] [:error] [pid 13522:tid 13710] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:27:30.279238 2025] [:error] [pid 13522:tid 13720] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:27:30.503876 2025] [:error] [pid 13522:tid 13711] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.google.de/
[Fri Nov 21 02:27:30.717940 2025] [:error] [pid 13522:tid 13722] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:27:31.165229 2025] [:error] [pid 13522:tid 13708] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:27:31.982586 2025] [:error] [pid 13522:tid 13706] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:27:32.693517 2025] [:error] [pid 13522:tid 13712] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php, referer: https://www.google.com/
[Fri Nov 21 02:27:33.116058 2025] [:error] [pid 13522:tid 13700] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:27:33.676398 2025] [:error] [pid 13522:tid 13715] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:27:33.827414 2025] [:error] [pid 13522:tid 13723] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.de/
[Fri Nov 21 02:27:34.211622 2025] [:error] [pid 13522:tid 13721] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:27:34.364373 2025] [:error] [pid 13522:tid 13705] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:27:34.515395 2025] [:error] [pid 13522:tid 13704] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:27:35.133500 2025] [:error] [pid 13522:tid 13717] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:35.299960 2025] [:error] [pid 13522:tid 13718] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:27:35.469316 2025] [:error] [pid 13522:tid 13719] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:27:36.444775 2025] [:error] [pid 13522:tid 13707] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:36.804978 2025] [:error] [pid 13522:tid 13713] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.fr/
[Fri Nov 21 02:27:36.981020 2025] [:error] [pid 13522:tid 13710] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.fr/
[Fri Nov 21 02:27:37.135250 2025] [:error] [pid 13522:tid 13720] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:27:37.287889 2025] [:error] [pid 13522:tid 13711] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://www.google.de/
[Fri Nov 21 02:27:37.441806 2025] [:error] [pid 13522:tid 13722] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:38.085677 2025] [:error] [pid 13522:tid 13708] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:27:38.240634 2025] [:error] [pid 13522:tid 13714] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:38.440430 2025] [:error] [pid 13522:tid 13709] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:27:40.388288 2025] [:error] [pid 13522:tid 13706] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:27:40.544797 2025] [:error] [pid 13522:tid 13712] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:40.714954 2025] [:error] [pid 13522:tid 13716] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.com/
[Fri Nov 21 02:27:41.394724 2025] [:error] [pid 13522:tid 13700] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:41.553937 2025] [:error] [pid 13522:tid 13715] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:27:42.809435 2025] [:error] [pid 13522:tid 13705] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.com/
[Fri Nov 21 02:27:44.265540 2025] [:error] [pid 13522:tid 13713] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:27:44.577892 2025] [:error] [pid 13522:tid 13720] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:27:44.954206 2025] [:error] [pid 13522:tid 13722] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:27:45.523720 2025] [:error] [pid 13522:tid 13714] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:45.712696 2025] [:error] [pid 13522:tid 13709] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.de/
[Fri Nov 21 02:27:45.872691 2025] [:error] [pid 13522:tid 13703] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/.__info.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:46.081027 2025] [:error] [pid 13522:tid 13706] [client 20.214.241.99:21385] [client 20.214.241.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.214.241.99, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aR9doqOM9BReD2C3mbL09QAAAEY"], referer: https://www.bing.com/
[Fri Nov 21 02:27:46.084135 2025] [:error] [pid 13522:tid 13706] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:46.476314 2025] [:error] [pid 13522:tid 13716] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:27:47.012758 2025] [:error] [pid 13522:tid 13700] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:47.172379 2025] [:error] [pid 13522:tid 13715] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php, referer: https://www.google.com/
[Fri Nov 21 02:27:47.324724 2025] [:error] [pid 13522:tid 13723] [client 20.214.241.99:21385] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:47.799714 2025] [:error] [pid 13522:tid 13721] [client 20.214.241.99:21385] [client 20.214.241.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "aR9do6OM9BReD2C3mbL0_AAAAFU"], referer: https://www.bing.com/
[Fri Nov 21 02:27:49.883110 2025] [:error] [pid 13805:tid 13818] [client 20.214.241.99:21500] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:27:50.758073 2025] [:error] [pid 13805:tid 13815] [client 20.214.241.99:21500] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.google.fr/
[Fri Nov 21 02:27:50.916024 2025] [:error] [pid 13805:tid 13819] [client 20.214.241.99:21500] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.google.com/
[Fri Nov 21 02:27:51.227841 2025] [:error] [pid 13805:tid 13829] [client 20.214.241.99:21500] [client 20.214.241.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR9dp1urU5-GZdwKvr7ccQAAAVU"], referer: https://duckduckgo.com/
[Fri Nov 21 02:27:52.668101 2025] [:error] [pid 28937:tid 28939] [client 20.214.241.99:21455] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php, referer: https://www.bing.com/
[Fri Nov 21 02:27:54.184886 2025] [:error] [pid 28937:tid 28941] [client 20.214.241.99:21455] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.google.de/
[Fri Nov 21 02:27:54.345925 2025] [:error] [pid 28937:tid 28951] [client 20.214.241.99:21455] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:27:55.369818 2025] [:error] [pid 28937:tid 28961] [client 20.214.241.99:21455] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.google.fr/
[Fri Nov 21 02:27:58.890745 2025] [:error] [pid 28937:tid 28963] [client 20.214.241.99:21455] [client 20.214.241.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR9drvtbT10GL1y3DOaGswAAANg"], referer: https://www.google.fr/
[Fri Nov 21 02:28:00.746869 2025] [:error] [pid 13522:tid 13703] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php, referer: https://www.google.com/
[Fri Nov 21 02:28:00.901905 2025] [:error] [pid 13522:tid 13712] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:01.287018 2025] [:error] [pid 13522:tid 13702] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://www.google.de/
[Fri Nov 21 02:28:01.449002 2025] [:error] [pid 13522:tid 13700] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/07.php, referer: https://www.google.de/
[Fri Nov 21 02:28:01.623475 2025] [:error] [pid 13522:tid 13721] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:02.274195 2025] [:error] [pid 13522:tid 13704] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.fr/
[Fri Nov 21 02:28:02.425844 2025] [:error] [pid 13522:tid 13705] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:02.579062 2025] [:error] [pid 13522:tid 13717] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://www.bing.com/
[Fri Nov 21 02:28:02.744842 2025] [:error] [pid 13522:tid 13710] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.bing.com/
[Fri Nov 21 02:28:02.900787 2025] [:error] [pid 13522:tid 13707] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:03.072816 2025] [:error] [pid 13522:tid 13720] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.bing.com/
[Fri Nov 21 02:28:03.247291 2025] [:error] [pid 13522:tid 13718] [client 20.214.241.99:21481] [client 20.214.241.99] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.214.241.99, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aR9ds6OM9BReD2C3mbL1JwAAAFI"], referer: https://duckduckgo.com/
[Fri Nov 21 02:28:03.251028 2025] [:error] [pid 13522:tid 13718] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:28:03.404315 2025] [:error] [pid 13522:tid 13722] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.bing.com/
[Fri Nov 21 02:28:03.555986 2025] [:error] [pid 13522:tid 13724] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.de/
[Fri Nov 21 02:28:03.706898 2025] [:error] [pid 13522:tid 13714] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php, referer: https://www.google.com/
[Fri Nov 21 02:28:03.908765 2025] [:error] [pid 13522:tid 13706] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:04.060008 2025] [:error] [pid 13522:tid 13712] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.google.fr/
[Fri Nov 21 02:28:04.211433 2025] [:error] [pid 13522:tid 13700] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.google.com/
[Fri Nov 21 02:28:04.520454 2025] [:error] [pid 13522:tid 13715] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments-post.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:04.715943 2025] [:error] [pid 13522:tid 13723] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.google.com/
[Fri Nov 21 02:28:04.948841 2025] [:error] [pid 13522:tid 13721] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:05.111752 2025] [:error] [pid 13522:tid 13711] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php, referer: https://www.google.com/
[Fri Nov 21 02:28:05.291475 2025] [:error] [pid 13522:tid 13704] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:28:05.861965 2025] [:error] [pid 13522:tid 13701] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:28:06.014135 2025] [:error] [pid 13522:tid 13717] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:28:06.417326 2025] [:error] [pid 13522:tid 13719] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php, referer: https://www.google.fr/
[Fri Nov 21 02:28:06.568869 2025] [:error] [pid 13522:tid 13710] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:06.720335 2025] [:error] [pid 13522:tid 13707] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/hoot.php, referer: https://www.google.com/
[Fri Nov 21 02:28:06.919921 2025] [:error] [pid 13522:tid 13720] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://www.google.com/
[Fri Nov 21 02:28:07.079342 2025] [:error] [pid 13522:tid 13718] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.google.com/
[Fri Nov 21 02:28:07.235248 2025] [:error] [pid 13522:tid 13724] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:28:07.388108 2025] [:error] [pid 13522:tid 13714] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php, referer: https://www.google.fr/
[Fri Nov 21 02:28:07.558718 2025] [:error] [pid 13522:tid 13709] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://www.google.com/
[Fri Nov 21 02:28:07.731468 2025] [:error] [pid 13522:tid 13703] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php, referer: https://www.google.de/
[Fri Nov 21 02:28:07.932975 2025] [:error] [pid 13522:tid 13706] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:08.093312 2025] [:error] [pid 13522:tid 13713] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:28:08.955868 2025] [:error] [pid 13522:tid 13712] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.bing.com/
[Fri Nov 21 02:28:09.106287 2025] [:error] [pid 13522:tid 13716] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://www.google.de/
[Fri Nov 21 02:28:09.300978 2025] [:error] [pid 13522:tid 13702] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:28:09.453644 2025] [:error] [pid 13522:tid 13700] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php, referer: https://www.google.com/
[Fri Nov 21 02:28:09.615470 2025] [:error] [pid 13522:tid 13721] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php, referer: https://www.bing.com/
[Fri Nov 21 02:28:09.826163 2025] [:error] [pid 13522:tid 13711] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.bing.com/
[Fri Nov 21 02:28:09.994044 2025] [:error] [pid 13522:tid 13704] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:28:10.145367 2025] [:error] [pid 13522:tid 13701] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:10.445707 2025] [:error] [pid 13522:tid 13719] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://www.bing.com/
[Fri Nov 21 02:28:10.597640 2025] [:error] [pid 13522:tid 13705] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php, referer: https://www.bing.com/
[Fri Nov 21 02:28:10.793166 2025] [:error] [pid 13522:tid 13710] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php, referer: https://www.google.com/
[Fri Nov 21 02:28:11.013259 2025] [:error] [pid 13522:tid 13707] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php, referer: https://www.google.fr/
[Fri Nov 21 02:28:11.166211 2025] [:error] [pid 13522:tid 13720] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php, referer: https://www.google.fr/
[Fri Nov 21 02:28:11.416081 2025] [:error] [pid 13522:tid 13722] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:28:12.086009 2025] [:error] [pid 13522:tid 13718] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:28:13.233463 2025] [:error] [pid 13522:tid 13718] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php, referer: https://www.bing.com/
[Fri Nov 21 02:28:13.391222 2025] [:error] [pid 13522:tid 13709] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php, referer: https://www.google.co.uk/
[Fri Nov 21 02:28:13.542839 2025] [:error] [pid 13522:tid 13713] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php, referer: https://www.yahoo.com/
[Fri Nov 21 02:28:13.697096 2025] [:error] [pid 13522:tid 13712] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.de/
[Fri Nov 21 02:28:13.859231 2025] [:error] [pid 13522:tid 13702] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php, referer: https://www.google.fr/
[Fri Nov 21 02:28:14.046682 2025] [:error] [pid 13522:tid 13708] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://www.google.com/
[Fri Nov 21 02:28:14.292467 2025] [:error] [pid 13522:tid 13700] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/kyami.php, referer: https://duckduckgo.com/
[Fri Nov 21 02:28:14.445533 2025] [:error] [pid 13522:tid 13715] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.google.de/
[Fri Nov 21 02:28:14.612497 2025] [:error] [pid 13522:tid 13723] [client 20.214.241.99:21481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.google.fr/
[Fri Nov 21 02:32:10.123863 2025] [:error] [pid 13506:tid 13686] [client 93.123.109.7:37728] [client 93.123.109.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aR9eqqTbGYpGB-467xZjBAAAABA"]
[Fri Nov 21 14:44:57.496147 2025] [:error] [pid 25521:tid 25524] [client 213.21.239.4:32910] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aSAKafhXnBMilDddn3WzfQAAAME"]
[Fri Nov 21 15:10:23.150578 2025] [:error] [pid 25554:tid 25562] [client 213.21.239.4:45860] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aSAQXx-NtB-9AzFZrk4iWwAAAQQ"]
[Fri Nov 21 15:43:58.840801 2025] [:error] [pid 25521:tid 25524] [client 213.21.239.4:50090] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAYPvhXnBMilDddn3XUUwAAAME"]
[Fri Nov 21 16:09:25.254195 2025] [:error] [pid 46939:tid 46952] [client 213.21.239.4:37098] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.svn/wc.db"] [unique_id "aSAeNe0OmVoxD4VZ_Zl64gAAAUo"]
[Fri Nov 21 18:45:32.460567 2025] [:error] [pid 25429:tid 25455] [client 104.28.240.81:34370] [client 104.28.240.81] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.28.240.81, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aSBCzD4rZbRSr7vu-NPbbgAAABY"]
[Fri Nov 21 18:45:32.464193 2025] [:error] [pid 25429:tid 25455] [client 104.28.240.81:34370] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Nov 21 19:28:04.990413 2025] [:error] [pid 25429:tid 25434] [client 103.191.235.26:57521] [client 103.191.235.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.191.235.26, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aSBMxD4rZbRSr7vu-NPlLgAAAAE"]
[Fri Nov 21 19:28:04.997473 2025] [:error] [pid 25429:tid 25434] [client 103.191.235.26:57521] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Nov 22 01:39:16.128481 2025] [:error] [pid 9180:tid 9204] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.google.fr/
[Sat Nov 22 01:39:16.349099 2025] [:error] [pid 9180:tid 9195] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:39:16.962747 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.fr/
[Sat Nov 22 01:39:17.171092 2025] [:error] [pid 9180:tid 9190] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/.__info.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:39:17.612428 2025] [:error] [pid 9180:tid 9202] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:17.840941 2025] [:error] [pid 9180:tid 9187] [client 172.200.72.235:56531] [client 172.200.72.235] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.200.72.235, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aSCjxbrk9msixUFV2i-b1QAAAEU"], referer: https://www.google.de/
[Sat Nov 22 01:39:17.845517 2025] [:error] [pid 9180:tid 9187] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.de/
[Sat Nov 22 01:39:19.118897 2025] [:error] [pid 9180:tid 9197] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php, referer: https://www.google.com/
[Sat Nov 22 01:39:19.331677 2025] [:error] [pid 9180:tid 9195] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.com/
[Sat Nov 22 01:39:19.794615 2025] [:error] [pid 9180:tid 9200] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.de/
[Sat Nov 22 01:39:20.031168 2025] [:error] [pid 9180:tid 9188] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:20.245202 2025] [:error] [pid 9180:tid 9196] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.com/
[Sat Nov 22 01:39:20.456163 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:39:20.695265 2025] [:error] [pid 9180:tid 9192] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.com/
[Sat Nov 22 01:39:20.948852 2025] [:error] [pid 9180:tid 9190] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.com/
[Sat Nov 22 01:39:21.410662 2025] [:error] [pid 9180:tid 9186] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.com/
[Sat Nov 22 01:39:22.728825 2025] [:error] [pid 9180:tid 9193] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://www.bing.com/
[Sat Nov 22 01:39:22.943999 2025] [:error] [pid 9180:tid 9202] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:23.157087 2025] [:error] [pid 9180:tid 9187] [client 172.200.72.235:56531] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.bing.com/
[Sat Nov 22 01:39:24.344059 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:56531] [client 172.200.72.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "aSCjzLrk9msixUFV2i-b6AAAAFc"], referer: https://www.google.fr/
[Sat Nov 22 01:39:26.717740 2025] [:error] [pid 49642:tid 49891] [client 172.200.72.235:56542] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.google.fr/
[Sat Nov 22 01:39:27.584324 2025] [:error] [pid 49642:tid 49892] [client 172.200.72.235:56542] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:39:27.805316 2025] [:error] [pid 49642:tid 49914] [client 172.200.72.235:56542] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.google.de/
[Sat Nov 22 01:39:29.566843 2025] [:error] [pid 49642:tid 49900] [client 172.200.72.235:56542] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.fr/
[Sat Nov 22 01:39:29.796427 2025] [:error] [pid 49642:tid 49902] [client 172.200.72.235:56542] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.google.com/
[Sat Nov 22 01:39:34.182692 2025] [:error] [pid 49642:tid 49911] [client 172.200.72.235:56542] [client 172.200.72.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSCj1oOXTPSuQfgUUtWVJgAAAJQ"], referer: https://www.yahoo.com/
[Sat Nov 22 01:39:38.582794 2025] [:error] [pid 49641:tid 49830] [client 172.200.72.235:56540] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:39:39.210886 2025] [:error] [pid 49641:tid 49829] [client 172.200.72.235:56540] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:39.926130 2025] [:error] [pid 49641:tid 49845] [client 172.200.72.235:56540] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.de/
[Sat Nov 22 01:39:40.133726 2025] [:error] [pid 49641:tid 49839] [client 172.200.72.235:56540] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:40.342934 2025] [:error] [pid 49641:tid 49841] [client 172.200.72.235:56540] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:40.553653 2025] [:error] [pid 49641:tid 49831] [client 172.200.72.235:56540] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.bing.com/
[Sat Nov 22 01:39:40.762118 2025] [:error] [pid 49641:tid 49824] [client 172.200.72.235:56540] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.google.com/
[Sat Nov 22 01:39:41.852476 2025] [:error] [pid 49641:tid 49826] [client 172.200.72.235:56540] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.google.de/
[Sat Nov 22 01:39:44.495988 2025] [:error] [pid 49641:tid 49845] [client 172.200.72.235:56540] [client 172.200.72.235] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSCj4FnhuiDak938N_a-JgAAABY"], referer: https://www.google.fr/
[Sat Nov 22 01:39:49.799262 2025] [:error] [pid 9180:tid 9201] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.google.de/
[Sat Nov 22 01:39:50.017454 2025] [:error] [pid 9180:tid 9189] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php, referer: https://www.google.fr/
[Sat Nov 22 01:39:50.275650 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:39:50.503318 2025] [:error] [pid 9180:tid 9200] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:39:51.046883 2025] [:error] [pid 9180:tid 9186] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:39:51.977259 2025] [:error] [pid 9180:tid 9202] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/07.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:52.182137 2025] [:error] [pid 9180:tid 9187] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.de/
[Sat Nov 22 01:39:52.398718 2025] [:error] [pid 9180:tid 9184] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.com/
[Sat Nov 22 01:39:52.637694 2025] [:error] [pid 9180:tid 9184] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:52.929920 2025] [:error] [pid 9180:tid 9199] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:53.243311 2025] [:error] [pid 9180:tid 9203] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:39:53.446453 2025] [:error] [pid 9180:tid 9204] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://www.google.com/
[Sat Nov 22 01:39:53.658438 2025] [:error] [pid 9180:tid 9191] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:53.861896 2025] [:error] [pid 9180:tid 9197] [client 172.200.72.235:56569] [client 172.200.72.235] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.200.72.235, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aSCj6brk9msixUFV2i-cGAAAAE8"], referer: https://www.yahoo.com/
[Sat Nov 22 01:39:53.865592 2025] [:error] [pid 9180:tid 9197] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:39:54.094855 2025] [:error] [pid 9180:tid 9188] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.google.com/
[Sat Nov 22 01:39:55.002438 2025] [:error] [pid 9180:tid 9192] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.com/
[Sat Nov 22 01:39:55.212113 2025] [:error] [pid 9180:tid 9190] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php, referer: https://www.google.fr/
[Sat Nov 22 01:39:55.420196 2025] [:error] [pid 9180:tid 9185] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://www.google.com/
[Sat Nov 22 01:39:56.028299 2025] [:error] [pid 9180:tid 9183] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.google.de/
[Sat Nov 22 01:39:56.233526 2025] [:error] [pid 9180:tid 9187] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.google.de/
[Sat Nov 22 01:39:56.467373 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments-post.php, referer: https://www.google.com/
[Sat Nov 22 01:39:58.337905 2025] [:error] [pid 9180:tid 9194] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:39:59.164231 2025] [:error] [pid 9180:tid 9191] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php, referer: https://www.google.fr/
[Sat Nov 22 01:39:59.421075 2025] [:error] [pid 9180:tid 9182] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php, referer: https://www.google.fr/
[Sat Nov 22 01:40:01.600275 2025] [:error] [pid 9180:tid 9197] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php, referer: https://www.google.de/
[Sat Nov 22 01:40:01.930616 2025] [:error] [pid 9180:tid 9188] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:40:02.136405 2025] [:error] [pid 9180:tid 9196] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:40:02.809926 2025] [:error] [pid 9180:tid 9189] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php, referer: https://www.google.de/
[Sat Nov 22 01:40:03.027047 2025] [:error] [pid 9180:tid 9192] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:40:03.253631 2025] [:error] [pid 9180:tid 9190] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/hoot.php, referer: https://www.google.de/
[Sat Nov 22 01:40:03.457630 2025] [:error] [pid 9180:tid 9185] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://www.google.fr/
[Sat Nov 22 01:40:03.675034 2025] [:error] [pid 9180:tid 9187] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.google.de/
[Sat Nov 22 01:40:05.188243 2025] [:error] [pid 9180:tid 9203] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:40:05.393488 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php, referer: https://www.bing.com/
[Sat Nov 22 01:40:06.092647 2025] [:error] [pid 9180:tid 9194] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:40:06.297677 2025] [:error] [pid 9180:tid 9191] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:40:07.207273 2025] [:error] [pid 9180:tid 9193] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:40:08.213444 2025] [:error] [pid 9180:tid 9201] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:40:08.450728 2025] [:error] [pid 9180:tid 9198] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.google.com/
[Sat Nov 22 01:40:08.669954 2025] [:error] [pid 9180:tid 9189] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://www.google.fr/
[Sat Nov 22 01:40:08.900233 2025] [:error] [pid 9180:tid 9192] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.google.com/
[Sat Nov 22 01:40:09.220123 2025] [:error] [pid 9180:tid 9185] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php, referer: https://www.google.de/
[Sat Nov 22 01:40:09.460729 2025] [:error] [pid 9180:tid 9183] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php, referer: https://www.bing.com/
[Sat Nov 22 01:40:09.688987 2025] [:error] [pid 9180:tid 9187] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.google.fr/
[Sat Nov 22 01:40:09.894749 2025] [:error] [pid 9180:tid 9206] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:40:10.132642 2025] [:error] [pid 9180:tid 9184] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.bing.com/
[Sat Nov 22 01:40:11.231354 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://www.google.de/
[Sat Nov 22 01:40:11.436171 2025] [:error] [pid 9180:tid 9199] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php, referer: https://www.google.fr/
[Sat Nov 22 01:40:11.639677 2025] [:error] [pid 9180:tid 9182] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.de/
[Sat Nov 22 01:40:11.845148 2025] [:error] [pid 9180:tid 9204] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:40:12.053859 2025] [:error] [pid 9180:tid 9193] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:40:12.258468 2025] [:error] [pid 9180:tid 9201] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php, referer: https://www.bing.com/
[Sat Nov 22 01:40:12.470203 2025] [:error] [pid 9180:tid 9188] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:40:12.710274 2025] [:error] [pid 9180:tid 9196] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.bing.com/
[Sat Nov 22 01:40:12.916049 2025] [:error] [pid 9180:tid 9189] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://duckduckgo.com/
[Sat Nov 22 01:40:13.675075 2025] [:error] [pid 9180:tid 9192] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php, referer: https://www.google.fr/
[Sat Nov 22 01:40:13.879408 2025] [:error] [pid 9180:tid 9190] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php, referer: https://www.google.fr/
[Sat Nov 22 01:40:14.161980 2025] [:error] [pid 9180:tid 9183] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:40:14.955882 2025] [:error] [pid 9180:tid 9206] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.google.co.uk/
[Sat Nov 22 01:40:15.335787 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.com/
[Sat Nov 22 01:40:15.798333 2025] [:error] [pid 9180:tid 9195] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php, referer: https://www.google.com/
[Sat Nov 22 01:40:16.006279 2025] [:error] [pid 9180:tid 9199] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://www.google.com/
[Sat Nov 22 01:40:16.210129 2025] [:error] [pid 9180:tid 9182] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.google.fr/
[Sat Nov 22 01:40:17.781091 2025] [:error] [pid 9180:tid 9185] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/kyami.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:40:17.992725 2025] [:error] [pid 9180:tid 9206] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.yahoo.com/
[Sat Nov 22 01:40:18.217269 2025] [:error] [pid 9180:tid 9205] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.bing.com/
[Sat Nov 22 01:40:18.459636 2025] [:error] [pid 9180:tid 9195] [client 172.200.72.235:56569] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.google.com/
[Sat Nov 22 03:52:56.710246 2025] [:error] [pid 53479:tid 53553] [client 103.167.150.158:58488] [client 103.167.150.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/system/js/core.js"] [unique_id "aSDDGG6cicFF3Aas-oQ70gAAAJE"]
[Sat Nov 22 05:24:09.052294 2025] [:error] [pid 25856:tid 25859] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:24:09.980020 2025] [:error] [pid 25856:tid 25865] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:10.192922 2025] [:error] [pid 25856:tid 25873] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.com/
[Sat Nov 22 05:24:11.894753 2025] [:error] [pid 25856:tid 25873] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/.__info.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:12.108237 2025] [:error] [pid 25856:tid 25862] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.de/
[Sat Nov 22 05:24:12.358079 2025] [:error] [pid 25856:tid 25881] [client 172.200.124.64:1250] [client 172.200.124.64] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 172.200.124.64, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDYfBsTP0wy94zKUvGczwAAARc"], referer: https://www.yahoo.com/
[Sat Nov 22 05:24:12.361416 2025] [:error] [pid 25856:tid 25881] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:12.796676 2025] [:error] [pid 25856:tid 25872] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:24:13.025856 2025] [:error] [pid 25856:tid 25876] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php, referer: https://www.google.de/
[Sat Nov 22 05:24:13.584506 2025] [:error] [pid 25856:tid 25869] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://www.google.de/
[Sat Nov 22 05:24:13.796807 2025] [:error] [pid 25856:tid 25858] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:24:14.094628 2025] [:error] [pid 25856:tid 25864] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.com/
[Sat Nov 22 05:24:14.389857 2025] [:error] [pid 25856:tid 25864] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:24:14.649314 2025] [:error] [pid 25856:tid 25872] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:14.862163 2025] [:error] [pid 25856:tid 25880] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:24:16.024677 2025] [:error] [pid 25856:tid 25870] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:16.237080 2025] [:error] [pid 25856:tid 25881] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://www.google.de/
[Sat Nov 22 05:24:16.462510 2025] [:error] [pid 25856:tid 25862] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.google.de/
[Sat Nov 22 05:24:17.224947 2025] [:error] [pid 25856:tid 25860] [client 172.200.124.64:1250] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:17.458109 2025] [:error] [pid 25856:tid 25875] [client 172.200.124.64:1250] [client 172.200.124.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "aSDYgRsTP0wy94zKUvGc7wAAARE"], referer: https://www.bing.com/
[Sat Nov 22 05:24:20.030801 2025] [:error] [pid 53566:tid 53591] [client 172.200.124.64:2365] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:20.906861 2025] [:error] [pid 53566:tid 53569] [client 172.200.124.64:2365] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:24:21.222147 2025] [:error] [pid 53566:tid 53592] [client 172.200.124.64:2365] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:21.436398 2025] [:error] [pid 53566:tid 53574] [client 172.200.124.64:2365] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.de/
[Sat Nov 22 05:24:21.762187 2025] [:error] [pid 53566:tid 53587] [client 172.200.124.64:2365] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:24.064960 2025] [:error] [pid 53566:tid 53590] [client 172.200.124.64:2365] [client 172.200.124.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSDYiMbSHDBkRbwMbd4qowAAANY"], referer: https://duckduckgo.com/
[Sat Nov 22 05:24:29.302258 2025] [:error] [pid 53478:tid 53521] [client 172.200.124.64:1121] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:24:29.955432 2025] [:error] [pid 53478:tid 53524] [client 172.200.124.64:1121] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:24:30.700451 2025] [:error] [pid 53478:tid 53531] [client 172.200.124.64:1121] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:30.915847 2025] [:error] [pid 53478:tid 53523] [client 172.200.124.64:1121] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:31.210394 2025] [:error] [pid 53478:tid 53516] [client 172.200.124.64:1121] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.google.com/
[Sat Nov 22 05:24:31.506711 2025] [:error] [pid 53478:tid 53522] [client 172.200.124.64:1121] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:31.732509 2025] [:error] [pid 53478:tid 53525] [client 172.200.124.64:1121] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:33.038424 2025] [:error] [pid 53478:tid 53530] [client 172.200.124.64:1121] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php, referer: https://www.google.com/
[Sat Nov 22 05:24:33.903845 2025] [:error] [pid 53478:tid 53528] [client 172.200.124.64:1121] [client 172.200.124.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSDYkQhUYdXBbQswAdQGjAAAAFM"], referer: https://duckduckgo.com/
[Sat Nov 22 05:24:38.015621 2025] [:error] [pid 25856:tid 25866] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:24:38.323280 2025] [:error] [pid 25856:tid 25861] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:38.545241 2025] [:error] [pid 25856:tid 25872] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/god4m.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:38.758178 2025] [:error] [pid 25856:tid 25858] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://www.google.de/
[Sat Nov 22 05:24:39.184115 2025] [:error] [pid 25856:tid 25880] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:39.412869 2025] [:error] [pid 25856:tid 25875] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/07.php, referer: https://www.google.com/
[Sat Nov 22 05:24:39.630465 2025] [:error] [pid 25856:tid 25870] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:39.842612 2025] [:error] [pid 25856:tid 25874] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:40.076312 2025] [:error] [pid 25856:tid 25866] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sigunq.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:40.299528 2025] [:error] [pid 25856:tid 25861] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/wso112233.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:40.535682 2025] [:error] [pid 25856:tid 25871] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:40.779029 2025] [:error] [pid 25856:tid 25863] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:24:40.995433 2025] [:error] [pid 25856:tid 25864] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:42.050783 2025] [:error] [pid 25856:tid 25858] [client 172.200.124.64:2119] [client 172.200.124.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.200.124.64, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aSDYmhsTP0wy94zKUvGdYQAAAQA"], referer: https://www.google.fr/
[Sat Nov 22 05:24:42.056142 2025] [:error] [pid 25856:tid 25858] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:42.291929 2025] [:error] [pid 25856:tid 25868] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:24:42.543796 2025] [:error] [pid 25856:tid 25860] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.google.de/
[Sat Nov 22 05:24:42.810333 2025] [:error] [pid 25856:tid 25867] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:24:43.068329 2025] [:error] [pid 25856:tid 25861] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:43.297428 2025] [:error] [pid 25856:tid 25862] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.google.com/
[Sat Nov 22 05:24:43.539633 2025] [:error] [pid 25856:tid 25863] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:43.754055 2025] [:error] [pid 25856:tid 25864] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments-post.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:43.968334 2025] [:error] [pid 25856:tid 25872] [client 172.200.124.64:2119] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:55.067166 2025] [:error] [pid 53479:tid 53542] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php, referer: https://www.google.de/
[Sat Nov 22 05:24:55.302134 2025] [:error] [pid 53479:tid 53545] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activate.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:55.571708 2025] [:error] [pid 53479:tid 53538] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:24:55.861383 2025] [:error] [pid 53479:tid 53555] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/post.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:56.127564 2025] [:error] [pid 53479:tid 53557] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:56.370568 2025] [:error] [pid 53479:tid 53539] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/geju.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:56.650603 2025] [:error] [pid 53479:tid 53551] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:56.949476 2025] [:error] [pid 53479:tid 53544] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/hoot.php, referer: https://www.google.de/
[Sat Nov 22 05:24:57.179157 2025] [:error] [pid 53479:tid 53560] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:57.417103 2025] [:error] [pid 53479:tid 53546] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php, referer: https://www.google.de/
[Sat Nov 22 05:24:57.632239 2025] [:error] [pid 53479:tid 53542] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php, referer: https://www.google.de/
[Sat Nov 22 05:24:57.862996 2025] [:error] [pid 53479:tid 53556] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:58.079287 2025] [:error] [pid 53479:tid 53543] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:58.327582 2025] [:error] [pid 53479:tid 53538] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/upfile.php, referer: https://www.google.fr/
[Sat Nov 22 05:24:58.582179 2025] [:error] [pid 53479:tid 53547] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:58.815560 2025] [:error] [pid 53479:tid 53553] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:59.099828 2025] [:error] [pid 53479:tid 53555] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php, referer: https://www.bing.com/
[Sat Nov 22 05:24:59.346100 2025] [:error] [pid 53479:tid 53557] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://www.google.com/
[Sat Nov 22 05:24:59.579462 2025] [:error] [pid 53479:tid 53559] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:24:59.814516 2025] [:error] [pid 53479:tid 53539] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/ae.php, referer: https://www.google.fr/
[Sat Nov 22 05:25:00.078273 2025] [:error] [pid 53479:tid 53560] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:25:00.360028 2025] [:error] [pid 53479:tid 53558] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:25:00.581872 2025] [:error] [pid 53479:tid 53550] [client 172.200.124.64:1436] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://www.google.de/
[Sat Nov 22 05:25:12.144192 2025] [:error] [pid 53478:tid 53521] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://www.google.fr/
[Sat Nov 22 05:25:12.357754 2025] [:error] [pid 53478:tid 53533] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php, referer: https://www.google.fr/
[Sat Nov 22 05:25:12.582003 2025] [:error] [pid 53478:tid 53517] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php, referer: https://www.google.de/
[Sat Nov 22 05:25:12.845172 2025] [:error] [pid 53478:tid 53531] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:25:13.060688 2025] [:error] [pid 53478:tid 53525] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php, referer: https://www.google.de/
[Sat Nov 22 05:25:13.282223 2025] [:error] [pid 53478:tid 53532] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:25:13.549357 2025] [:error] [pid 53478:tid 53524] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-ajax.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:25:13.790976 2025] [:error] [pid 53478:tid 53513] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:25:14.015546 2025] [:error] [pid 53478:tid 53514] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php, referer: https://www.google.com/
[Sat Nov 22 05:25:14.245589 2025] [:error] [pid 53478:tid 53529] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.google.com/
[Sat Nov 22 05:25:14.515868 2025] [:error] [pid 53478:tid 53522] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php, referer: https://www.google.fr/
[Sat Nov 22 05:25:14.731290 2025] [:error] [pid 53478:tid 53521] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:25:14.983933 2025] [:error] [pid 53478:tid 53510] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/checkbox.php, referer: https://duckduckgo.com/
[Sat Nov 22 05:25:15.222052 2025] [:error] [pid 53478:tid 53533] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php, referer: https://www.google.fr/
[Sat Nov 22 05:25:15.454238 2025] [:error] [pid 53478:tid 53517] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.yahoo.com/
[Sat Nov 22 05:25:15.688358 2025] [:error] [pid 53478:tid 53516] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/form.php, referer: https://www.bing.com/
[Sat Nov 22 05:25:15.959789 2025] [:error] [pid 53478:tid 53532] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://www.google.fr/
[Sat Nov 22 05:25:16.204731 2025] [:error] [pid 53478:tid 53523] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://www.bing.com/
[Sat Nov 22 05:25:16.459967 2025] [:error] [pid 53478:tid 53530] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/kyami.php, referer: https://www.google.de/
[Sat Nov 22 05:25:16.696516 2025] [:error] [pid 53478:tid 53518] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.bing.com/
[Sat Nov 22 05:25:16.939091 2025] [:error] [pid 53478:tid 53522] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.co.uk/
[Sat Nov 22 05:25:17.176388 2025] [:error] [pid 53478:tid 53515] [client 172.200.124.64:6388] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.google.com/
[Sat Nov 22 06:56:48.112601 2025] [:error] [pid 53477:tid 53492] [client 212.116.231.26:51888] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSDuMH7Lu30Ku9O40aIHCQAAAAs"]
[Sat Nov 22 06:56:48.924185 2025] [:error] [pid 53478:tid 53527] [client 212.116.231.26:52352] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSDuMAhUYdXBbQswAdRAWAAAAFI"]
[Sat Nov 22 06:56:49.758312 2025] [:error] [pid 53478:tid 53511] [client 212.116.231.26:45660] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSDuMQhUYdXBbQswAdRAXQAAAEI"]
[Sat Nov 22 06:56:50.569598 2025] [:error] [pid 53566:tid 53585] [client 212.116.231.26:46200] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSDuMsbSHDBkRbwMbd5nzAAAANE"]
[Sat Nov 22 06:56:51.383703 2025] [:error] [pid 9547:tid 9576] [client 212.116.231.26:46662] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSDuM9ClOR5qk7DoMeGmBQAAAVc"]
[Sat Nov 22 06:56:52.198638 2025] [:error] [pid 53566:tid 53578] [client 212.116.231.26:47152] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNMbSHDBkRbwMbd5n-AAAAMo"]
[Sat Nov 22 06:56:53.012466 2025] [:error] [pid 53479:tid 53552] [client 212.116.231.26:47556] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNW6cicFF3Aas-oSh4AAAAJA"]
[Sat Nov 22 06:56:53.824242 2025] [:error] [pid 53477:tid 53491] [client 212.116.231.26:48026] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNX7Lu30Ku9O40aIHRgAAAAo"]
[Sat Nov 22 06:56:54.659138 2025] [:error] [pid 53566:tid 53578] [client 212.116.231.26:48404] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuNsbSHDBkRbwMbd5oEAAAAMo"]
[Sat Nov 22 06:56:55.478667 2025] [:error] [pid 53566:tid 53590] [client 212.116.231.26:48726] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuN8bSHDBkRbwMbd5oHQAAANY"]
[Sat Nov 22 08:29:59.070498 2025] [:error] [pid 9547:tid 9553] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Nov 22 08:29:59.226749 2025] [:error] [pid 9547:tid 9568] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Nov 22 08:29:59.351596 2025] [:error] [pid 9547:tid 9574] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Nov 22 08:29:59.476958 2025] [:error] [pid 9547:tid 9563] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Nov 22 08:29:59.607063 2025] [:error] [pid 9547:tid 9560] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Nov 22 08:29:59.751517 2025] [:error] [pid 9547:tid 9576] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Nov 22 08:29:59.920510 2025] [:error] [pid 9547:tid 9569] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Nov 22 08:30:00.042745 2025] [:error] [pid 9547:tid 9570] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Nov 22 08:30:00.280221 2025] [:error] [pid 9547:tid 9554] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Nov 22 08:30:00.608059 2025] [:error] [pid 9547:tid 9561] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Nov 22 08:30:00.886919 2025] [:error] [pid 9547:tid 9574] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Nov 22 08:30:01.021009 2025] [:error] [pid 9547:tid 9563] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Nov 22 08:30:01.124563 2025] [:error] [pid 9547:tid 9576] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Nov 22 08:30:01.241768 2025] [:error] [pid 9547:tid 9569] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Nov 22 08:30:01.390470 2025] [:error] [pid 9547:tid 9554] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Nov 22 08:30:01.505656 2025] [:error] [pid 9547:tid 9571] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Nov 22 08:30:01.633784 2025] [:error] [pid 9547:tid 9561] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Nov 22 08:30:01.823001 2025] [:error] [pid 9547:tid 9574] [client 194.5.82.161:36477] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Nov 22 08:30:05.702512 2025] [:error] [pid 9547:tid 9564] [client 194.5.82.161:36477] [client 194.5.82.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSEEDdClOR5qk7DoMeHXxQAAAUs"]
[Sat Nov 22 08:30:06.427852 2025] [:error] [pid 53478:tid 53522] [client 194.5.82.140:26707] [client 194.5.82.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSEEDghUYdXBbQswAdReMwAAAE0"]
[Sat Nov 22 08:30:07.246259 2025] [:error] [pid 9547:tid 9564] [client 194.5.82.164:49801] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Nov 22 08:30:07.554634 2025] [:error] [pid 9547:tid 9572] [client 194.5.82.164:49801] [client 194.5.82.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSEED9ClOR5qk7DoMeHX0gAAAVM"]
[Sat Nov 22 17:09:40.142215 2025] [:error] [pid 53566:tid 53576] [client 45.113.101.4:52164] [client 45.113.101.4] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.113.101.4, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aSF91MbSHDBkRbwMbd4SnAAAAMg"]
[Sat Nov 22 17:09:40.146888 2025] [:error] [pid 53566:tid 53576] [client 45.113.101.4:52164] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Nov 23 04:56:11.456636 2025] [:error] [pid 38739:tid 38785] [client 216.126.225.91:48776] [client 216.126.225.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aSIjawdvEgJm2n2cDmr0qAAAAFA"]
[Sun Nov 23 13:13:52.877331 2025] [:error] [pid 38740:tid 38803] [client 13.70.85.214:52375] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sun Nov 23 13:13:52.904142 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:52375] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Nov 23 13:13:53.012382 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:52375] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 13:13:53.123680 2025] [:error] [pid 38740:tid 38820] [client 13.70.85.214:52375] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sun Nov 23 13:13:53.191330 2025] [:error] [pid 38740:tid 38809] [client 13.70.85.214:52375] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSKYEQ13QPZSi6O8umUpEAAAAI0"]
[Sun Nov 23 13:13:53.834933 2025] [:error] [pid 38738:tid 38764] [client 13.70.85.214:52354] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Sun Nov 23 13:13:53.855065 2025] [:error] [pid 38738:tid 38752] [client 13.70.85.214:52354] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Sun Nov 23 13:13:53.873639 2025] [:error] [pid 38738:tid 38749] [client 13.70.85.214:52354] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aSKYEQytc6TL9XavPmN3hwAAAAc"]
[Sun Nov 23 13:13:54.307271 2025] [:error] [pid 44652:tid 44730] [client 13.70.85.214:52356] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Sun Nov 23 13:13:54.324084 2025] [:error] [pid 44652:tid 44729] [client 13.70.85.214:52356] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/images/m.php"] [unique_id "aSKYEtiQFwsyXQDhwyBQsgAAARc"]
[Sun Nov 23 13:13:55.021719 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:53438] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/images/m.php"] [unique_id "aSKYEw13QPZSi6O8umUpGAAAAJI"]
[Sun Nov 23 13:13:55.240749 2025] [:error] [pid 38740:tid 38812] [client 13.70.85.214:53385] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/images/m.php"] [unique_id "aSKYEw13QPZSi6O8umUpGQAAAJA"]
[Sun Nov 23 13:13:55.932706 2025] [:error] [pid 38739:tid 38790] [client 13.70.85.214:53388] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/images/m.php"] [unique_id "aSKYEwdvEgJm2n2cDmrEdAAAAFU"]
[Sun Nov 23 13:13:56.334729 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:53428] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "aSKYFAytc6TL9XavPmN3pgAAABE"]
[Sun Nov 23 13:13:57.045962 2025] [:error] [pid 38740:tid 38810] [client 13.70.85.214:52360] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "aSKYFQ13QPZSi6O8umUpIQAAAI4"]
[Sun Nov 23 13:13:57.508716 2025] [:error] [pid 44652:tid 44709] [client 13.70.85.214:52377] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "aSKYFdiQFwsyXQDhwyBQ0wAAAQM"]
[Sun Nov 23 13:13:57.957715 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:53420] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "aSKYFQytc6TL9XavPmN3sQAAAAw"]
[Sun Nov 23 13:13:58.046760 2025] [:error] [pid 44652:tid 44725] [client 13.70.85.214:53417] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "aSKYFtiQFwsyXQDhwyBQ1gAAARM"]
[Sun Nov 23 13:13:58.174920 2025] [:error] [pid 38824:tid 38835] [client 13.70.85.214:53421] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "aSKYFk8WZjXLvbHTHPdUAQAAAMg"]
[Sun Nov 23 13:13:58.695249 2025] [:error] [pid 38739:tid 38770] [client 13.70.85.214:53393] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "aSKYFgdvEgJm2n2cDmrEewAAAEE"]
[Sun Nov 23 13:14:00.683943 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:52369] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "aSKYGAytc6TL9XavPmN3twAAAA0"]
[Sun Nov 23 13:14:01.451663 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:53425] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "aSKYGQytc6TL9XavPmN3uwAAAA8"]
[Sun Nov 23 13:14:02.008108 2025] [:error] [pid 38738:tid 38744] [client 13.70.85.214:53402] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "aSKYGgytc6TL9XavPmN3wQAAAAI"]
[Sun Nov 23 13:14:02.702856 2025] [:error] [pid 38824:tid 38829] [client 13.70.85.214:53390] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "aSKYGk8WZjXLvbHTHPdUDgAAAMI"]
[Sun Nov 23 13:14:02.856863 2025] [:error] [pid 38824:tid 38838] [client 13.70.85.214:52388] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "aSKYGk8WZjXLvbHTHPdUEAAAAMs"]
[Sun Nov 23 13:14:02.934630 2025] [:error] [pid 38824:tid 38848] [client 13.70.85.214:53399] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "aSKYGk8WZjXLvbHTHPdUEgAAANU"]
[Sun Nov 23 13:14:04.148476 2025] [:error] [pid 44652:tid 44707] [client 13.70.85.214:52391] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "aSKYHNiQFwsyXQDhwyBQ6AAAAQE"]
[Sun Nov 23 13:14:04.549637 2025] [:error] [pid 38740:tid 38797] [client 13.70.85.214:53401] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "aSKYHA13QPZSi6O8umUpUQAAAIE"]
[Sun Nov 23 13:14:04.983538 2025] [:error] [pid 44652:tid 44723] [client 13.70.85.214:52379] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "aSKYHNiQFwsyXQDhwyBQ6gAAARE"]
[Sun Nov 23 13:14:05.663206 2025] [:error] [pid 38824:tid 38849] [client 13.70.85.214:52381] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "aSKYHU8WZjXLvbHTHPdUGAAAANY"]
[Sun Nov 23 13:14:06.300378 2025] [:error] [pid 38824:tid 38839] [client 13.70.85.214:53377] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "aSKYHk8WZjXLvbHTHPdUGwAAAMw"]
[Sun Nov 23 13:14:06.914965 2025] [:error] [pid 44652:tid 44723] [client 13.70.85.214:52376] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "aSKYHtiQFwsyXQDhwyBQ8gAAARE"]
[Sun Nov 23 13:14:07.636400 2025] [:error] [pid 38824:tid 38843] [client 13.70.85.214:53381] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "aSKYH08WZjXLvbHTHPdUHQAAANA"]
[Sun Nov 23 13:14:08.345820 2025] [:error] [pid 38740:tid 38798] [client 13.70.85.214:53418] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "aSKYIA13QPZSi6O8umUpWAAAAII"]
[Sun Nov 23 13:14:08.648064 2025] [:error] [pid 38739:tid 38777] [client 13.70.85.214:52359] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "aSKYIAdvEgJm2n2cDmrEjQAAAEg"]
[Sun Nov 23 13:14:08.865715 2025] [:error] [pid 38824:tid 38833] [client 13.70.85.214:53434] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "aSKYIE8WZjXLvbHTHPdUHgAAAMY"]
[Sun Nov 23 13:14:09.631252 2025] [:error] [pid 38738:tid 38751] [client 13.70.85.214:52364] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "aSKYIQytc6TL9XavPmN31AAAAAk"]
[Sun Nov 23 13:14:09.706383 2025] [:error] [pid 38824:tid 38844] [client 13.70.85.214:53395] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cok.php"] [unique_id "aSKYIU8WZjXLvbHTHPdUHwAAANE"]
[Sun Nov 23 13:14:10.662663 2025] [:error] [pid 44652:tid 44707] [client 13.70.85.214:53386] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cok.php"] [unique_id "aSKYItiQFwsyXQDhwyBQ-gAAAQE"]
[Sun Nov 23 13:14:11.330141 2025] [:error] [pid 44652:tid 44713] [client 13.70.85.214:53422] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cok.php"] [unique_id "aSKYI9iQFwsyXQDhwyBQ-wAAAQc"]
[Sun Nov 23 13:14:12.014836 2025] [:error] [pid 38824:tid 38837] [client 13.70.85.214:53419] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cok.php"] [unique_id "aSKYJE8WZjXLvbHTHPdUKAAAAMo"]
[Sun Nov 23 13:14:12.620668 2025] [:error] [pid 38739:tid 38792] [client 13.70.85.214:52374] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hob.php"] [unique_id "aSKYJAdvEgJm2n2cDmrEkgAAAFc"]
[Sun Nov 23 13:14:13.469984 2025] [:error] [pid 44652:tid 44716] [client 13.70.85.214:53391] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hob.php"] [unique_id "aSKYJdiQFwsyXQDhwyBRAQAAAQo"]
[Sun Nov 23 13:14:14.635057 2025] [:error] [pid 38824:tid 38841] [client 13.70.85.214:52380] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hob.php"] [unique_id "aSKYJk8WZjXLvbHTHPdUNwAAAM4"]
[Sun Nov 23 13:14:15.320318 2025] [:error] [pid 38738:tid 38744] [client 13.70.85.214:52387] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hob.php"] [unique_id "aSKYJwytc6TL9XavPmN34wAAAAI"]
[Sun Nov 23 13:14:15.833706 2025] [:error] [pid 38738:tid 38747] [client 13.70.85.214:53435] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "aSKYJwytc6TL9XavPmN35gAAAAU"]
[Sun Nov 23 13:14:17.249839 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:53384] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "aSKYKQytc6TL9XavPmN36wAAABg"]
[Sun Nov 23 13:14:18.155702 2025] [:error] [pid 38739:tid 38793] [client 13.70.85.214:52357] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "aSKYKgdvEgJm2n2cDmrEmAAAAFg"]
[Sun Nov 23 13:14:19.289977 2025] [:error] [pid 38824:tid 38827] [client 13.70.85.214:53423] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "aSKYK08WZjXLvbHTHPdUPgAAAMA"]
[Sun Nov 23 13:14:20.155561 2025] [:error] [pid 44652:tid 44718] [client 13.70.85.214:52379] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fh26.php"] [unique_id "aSKYLNiQFwsyXQDhwyBRCQAAAQw"]
[Sun Nov 23 13:14:20.759914 2025] [:error] [pid 38738:tid 38749] [client 13.70.85.214:53408] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fh26.php"] [unique_id "aSKYLAytc6TL9XavPmN39gAAAAc"]
[Sun Nov 23 13:14:21.717948 2025] [:error] [pid 38738:tid 38742] [client 13.70.85.214:53389] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fh26.php"] [unique_id "aSKYLQytc6TL9XavPmN3-wAAAAA"]
[Sun Nov 23 13:14:22.068736 2025] [:error] [pid 38740:tid 38807] [client 13.70.85.214:7128] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fh26.php"] [unique_id "aSKYLg13QPZSi6O8umUpbwAAAIs"]
[Sun Nov 23 13:14:23.401824 2025] [:error] [pid 38824:tid 38845] [client 13.70.85.214:53413] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSKYL08WZjXLvbHTHPdUQgAAANI"]
[Sun Nov 23 13:14:23.858223 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:52358] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSKYLw13QPZSi6O8umUpdgAAAJI"]
[Sun Nov 23 13:14:24.892130 2025] [:error] [pid 44652:tid 44717] [client 13.70.85.214:52365] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSKYMNiQFwsyXQDhwyBREQAAAQs"]
[Sun Nov 23 13:14:25.743621 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:52363] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSKYMQytc6TL9XavPmN4BQAAAAw"]
[Sun Nov 23 13:14:27.186782 2025] [:error] [pid 38738:tid 38746] [client 13.70.85.214:52384] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kal.php"] [unique_id "aSKYMwytc6TL9XavPmN4CQAAAAQ"]
[Sun Nov 23 13:14:27.878305 2025] [:error] [pid 38824:tid 38836] [client 13.70.85.214:7159] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kal.php"] [unique_id "aSKYM08WZjXLvbHTHPdUTAAAAMk"]
[Sun Nov 23 13:14:28.991535 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:53431] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kal.php"] [unique_id "aSKYNA13QPZSi6O8umUpgAAAAJI"]
[Sun Nov 23 13:14:30.477792 2025] [:error] [pid 38824:tid 38834] [client 13.70.85.214:52392] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kal.php"] [unique_id "aSKYNk8WZjXLvbHTHPdUUwAAAMc"]
[Sun Nov 23 13:14:30.991644 2025] [:error] [pid 38738:tid 38753] [client 13.70.85.214:53392] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "aSKYNgytc6TL9XavPmN4GQAAAAs"]
[Sun Nov 23 13:14:31.711571 2025] [:error] [pid 38740:tid 38819] [client 13.70.85.214:53403] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "aSKYNw13QPZSi6O8umUpiwAAAJc"]
[Sun Nov 23 13:14:32.392195 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:7108] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "aSKYOAdvEgJm2n2cDmrEsgAAAEs"]
[Sun Nov 23 13:14:33.491989 2025] [:error] [pid 44652:tid 44722] [client 13.70.85.214:53406] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "aSKYOdiQFwsyXQDhwyBRIAAAARA"]
[Sun Nov 23 13:14:34.199401 2025] [:error] [pid 38740:tid 38816] [client 13.70.85.214:7136] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lx.php"] [unique_id "aSKYOg13QPZSi6O8umUpkgAAAJQ"]
[Sun Nov 23 13:14:34.962908 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:52389] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lx.php"] [unique_id "aSKYOgdvEgJm2n2cDmrEuQAAAEc"]
[Sun Nov 23 13:14:36.039963 2025] [:error] [pid 44652:tid 44725] [client 13.70.85.214:52361] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lx.php"] [unique_id "aSKYPNiQFwsyXQDhwyBRJAAAARM"]
[Sun Nov 23 13:14:36.745310 2025] [:error] [pid 44652:tid 44721] [client 13.70.85.214:7134] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lx.php"] [unique_id "aSKYPNiQFwsyXQDhwyBRKwAAAQ8"]
[Sun Nov 23 13:14:37.248224 2025] [:error] [pid 38738:tid 38765] [client 13.70.85.214:7105] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w1w.php"] [unique_id "aSKYPQytc6TL9XavPmN4IgAAABc"]
[Sun Nov 23 13:14:37.536507 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:53427] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w1w.php"] [unique_id "aSKYPQytc6TL9XavPmN4JgAAAAw"]
[Sun Nov 23 13:14:37.922038 2025] [:error] [pid 38740:tid 38799] [client 13.70.85.214:53414] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w1w.php"] [unique_id "aSKYPQ13QPZSi6O8umUpmwAAAIM"]
[Sun Nov 23 13:14:38.687498 2025] [:error] [pid 38824:tid 38850] [client 13.70.85.214:52372] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w1w.php"] [unique_id "aSKYPk8WZjXLvbHTHPdUYQAAANc"]
[Sun Nov 23 13:14:38.796332 2025] [:error] [pid 44652:tid 44719] [client 13.70.85.214:7166] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cafe.php"] [unique_id "aSKYPtiQFwsyXQDhwyBRLgAAAQ0"]
[Sun Nov 23 13:14:39.505590 2025] [:error] [pid 44652:tid 44729] [client 13.70.85.214:52368] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cafe.php"] [unique_id "aSKYP9iQFwsyXQDhwyBRMwAAARc"]
[Sun Nov 23 13:14:40.181444 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:53380] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cafe.php"] [unique_id "aSKYQAdvEgJm2n2cDmrEwQAAAEU"]
[Sun Nov 23 13:14:41.261542 2025] [:error] [pid 38824:tid 38841] [client 13.70.85.214:7133] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cafe.php"] [unique_id "aSKYQU8WZjXLvbHTHPdUaQAAAM4"]
[Sun Nov 23 13:14:41.677884 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:52390] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww2.php"] [unique_id "aSKYQQytc6TL9XavPmN4TwAAAA0"]
[Sun Nov 23 13:14:41.897709 2025] [:error] [pid 38739:tid 38772] [client 13.70.85.214:52366] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww2.php"] [unique_id "aSKYQQdvEgJm2n2cDmrExgAAAEM"]
[Sun Nov 23 13:14:42.640994 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:52412] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww2.php"] [unique_id "aSKYQgytc6TL9XavPmN4WgAAABg"]
[Sun Nov 23 13:14:43.064751 2025] [:error] [pid 38739:tid 38779] [client 13.70.85.214:53437] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww2.php"] [unique_id "aSKYQwdvEgJm2n2cDmrEyQAAAEo"]
[Sun Nov 23 13:14:44.034074 2025] [:error] [pid 38740:tid 38803] [client 13.70.85.214:53410] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww3.php"] [unique_id "aSKYRA13QPZSi6O8umUptgAAAIc"]
[Sun Nov 23 13:14:44.783887 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:53405] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww3.php"] [unique_id "aSKYRAdvEgJm2n2cDmrEzAAAAEs"]
[Sun Nov 23 13:14:45.251336 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:52394] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww3.php"] [unique_id "aSKYRQdvEgJm2n2cDmrEzgAAAFY"]
[Sun Nov 23 13:14:45.716113 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:7120] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww3.php"] [unique_id "aSKYRQdvEgJm2n2cDmrE0AAAAE4"]
[Sun Nov 23 13:14:46.168556 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:7045] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww4.php"] [unique_id "aSKYRgdvEgJm2n2cDmrE0wAAAEc"]
[Sun Nov 23 13:14:47.576630 2025] [:error] [pid 44652:tid 44723] [client 13.70.85.214:7114] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww4.php"] [unique_id "aSKYR9iQFwsyXQDhwyBRSQAAARE"]
[Sun Nov 23 13:14:47.769660 2025] [:error] [pid 38738:tid 38758] [client 13.70.85.214:52399] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww4.php"] [unique_id "aSKYRwytc6TL9XavPmN4dQAAABA"]
[Sun Nov 23 13:14:47.881589 2025] [:error] [pid 38824:tid 38843] [client 13.70.85.214:7107] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww4.php"] [unique_id "aSKYR08WZjXLvbHTHPdUcAAAANA"]
[Sun Nov 23 13:14:48.415122 2025] [:error] [pid 44652:tid 44711] [client 13.70.85.214:7122] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aSKYSNiQFwsyXQDhwyBRTAAAAQU"]
[Sun Nov 23 13:14:49.477411 2025] [:error] [pid 38740:tid 38803] [client 13.70.85.214:53394] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aSKYSQ13QPZSi6O8umUpxwAAAIc"]
[Sun Nov 23 13:14:49.851404 2025] [:error] [pid 38740:tid 38802] [client 13.70.85.214:52352] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aSKYSQ13QPZSi6O8umUpygAAAIY"]
[Sun Nov 23 13:14:50.403710 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:53407] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aSKYSgytc6TL9XavPmN4eAAAAA0"]
[Sun Nov 23 13:14:51.707398 2025] [:error] [pid 44652:tid 44709] [client 13.70.85.214:7125] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "aSKYS9iQFwsyXQDhwyBRUgAAAQM"]
[Sun Nov 23 13:14:52.659612 2025] [:error] [pid 44652:tid 44728] [client 13.70.85.214:52383] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "aSKYTNiQFwsyXQDhwyBRVQAAARY"]
[Sun Nov 23 13:14:54.322687 2025] [:error] [pid 44652:tid 44719] [client 13.70.85.214:7138] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Sun Nov 23 13:14:54.363342 2025] [:error] [pid 44652:tid 44726] [client 13.70.85.214:7138] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sun Nov 23 13:14:54.512394 2025] [:error] [pid 44652:tid 44716] [client 13.70.85.214:7138] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Sun Nov 23 13:14:54.546469 2025] [:error] [pid 44652:tid 44710] [client 13.70.85.214:7138] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sun Nov 23 13:14:54.586544 2025] [:error] [pid 44652:tid 44729] [client 13.70.85.214:7138] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Nov 23 13:14:54.713971 2025] [:error] [pid 44652:tid 44727] [client 13.70.85.214:7138] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sun Nov 23 13:14:54.734002 2025] [:error] [pid 44652:tid 44715] [client 13.70.85.214:7138] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sun Nov 23 13:14:56.336944 2025] [:error] [pid 44652:tid 44715] [client 13.70.85.214:7138] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sun Nov 23 13:14:56.356094 2025] [:error] [pid 44652:tid 44714] [client 13.70.85.214:7138] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSKYUNiQFwsyXQDhwyBRYgAAAQg"]
[Sun Nov 23 13:14:57.210000 2025] [:error] [pid 38824:tid 38849] [client 13.70.85.214:7147] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSKYUU8WZjXLvbHTHPdUfgAAANY"]
[Sun Nov 23 13:14:57.644312 2025] [:error] [pid 38824:tid 38841] [client 13.70.85.214:7163] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSKYUU8WZjXLvbHTHPdUfwAAAM4"]
[Sun Nov 23 13:14:57.876088 2025] [:error] [pid 38740:tid 38813] [client 13.70.85.214:52373] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSKYUQ13QPZSi6O8umUp1wAAAJE"]
[Sun Nov 23 13:14:58.751859 2025] [:error] [pid 44652:tid 44722] [client 13.70.85.214:52401] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "aSKYUtiQFwsyXQDhwyBRaQAAARA"]
[Sun Nov 23 13:14:59.601261 2025] [:error] [pid 38738:tid 38751] [client 13.70.85.214:7158] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "aSKYUwytc6TL9XavPmN4hgAAAAk"]
[Sun Nov 23 13:15:00.196391 2025] [:error] [pid 38738:tid 38745] [client 13.70.85.214:7156] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "aSKYVAytc6TL9XavPmN4iAAAAAM"]
[Sun Nov 23 13:15:01.148135 2025] [:error] [pid 38740:tid 38819] [client 13.70.85.214:52386] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "aSKYVQ13QPZSi6O8umUp2wAAAJc"]
[Sun Nov 23 13:15:01.961469 2025] [:error] [pid 38824:tid 38831] [client 13.70.85.214:7131] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSKYVU8WZjXLvbHTHPdUhAAAAMQ"]
[Sun Nov 23 13:15:02.786710 2025] [:error] [pid 38824:tid 38847] [client 13.70.85.214:7072] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSKYVk8WZjXLvbHTHPdUiwAAANQ"]
[Sun Nov 23 13:15:03.350921 2025] [:error] [pid 38738:tid 38758] [client 13.70.85.214:7129] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSKYVwytc6TL9XavPmN4kAAAABA"]
[Sun Nov 23 13:15:04.283088 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:52409] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSKYWA13QPZSi6O8umUp4AAAAIU"]
[Sun Nov 23 13:15:04.865497 2025] [:error] [pid 38740:tid 38799] [client 13.70.85.214:53376] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "aSKYWA13QPZSi6O8umUp4QAAAIM"]
[Sun Nov 23 13:15:05.705274 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:52385] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "aSKYWQdvEgJm2n2cDmrE9QAAAEs"]
[Sun Nov 23 13:15:06.143583 2025] [:error] [pid 38824:tid 38833] [client 13.70.85.214:7060] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "aSKYWk8WZjXLvbHTHPdUkgAAAMY"]
[Sun Nov 23 13:15:06.665199 2025] [:error] [pid 38740:tid 38797] [client 13.70.85.214:53398] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "aSKYWg13QPZSi6O8umUp5AAAAIE"]
[Sun Nov 23 13:15:07.121318 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:7160] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSKYWwytc6TL9XavPmN4lgAAAAw"]
[Sun Nov 23 13:15:07.830567 2025] [:error] [pid 38824:tid 38834] [client 13.70.85.214:7148] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSKYW08WZjXLvbHTHPdUlAAAAMc"]
[Sun Nov 23 13:15:07.991805 2025] [:error] [pid 38740:tid 38798] [client 13.70.85.214:7155] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSKYWw13QPZSi6O8umUp5gAAAII"]
[Sun Nov 23 13:15:08.490233 2025] [:error] [pid 38740:tid 38811] [client 13.70.85.214:52382] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSKYXA13QPZSi6O8umUp6AAAAI8"]
[Sun Nov 23 13:15:09.356920 2025] [:error] [pid 38738:tid 38749] [client 13.70.85.214:52406] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fw.php"] [unique_id "aSKYXQytc6TL9XavPmN4nwAAAAc"]
[Sun Nov 23 13:15:09.724337 2025] [:error] [pid 38740:tid 38802] [client 13.70.85.214:53415] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fw.php"] [unique_id "aSKYXQ13QPZSi6O8umUp6gAAAIY"]
[Sun Nov 23 13:15:09.902964 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:7153] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fw.php"] [unique_id "aSKYXQdvEgJm2n2cDmrE-QAAAEU"]
[Sun Nov 23 13:15:11.131053 2025] [:error] [pid 38824:tid 38829] [client 13.70.85.214:7046] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fw.php"] [unique_id "aSKYX08WZjXLvbHTHPdUngAAAMI"]
[Sun Nov 23 13:15:11.894990 2025] [:error] [pid 38824:tid 38838] [client 13.70.85.214:7115] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aSKYX08WZjXLvbHTHPdUnwAAAMs"]
[Sun Nov 23 13:15:12.830513 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:7150] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aSKYYAytc6TL9XavPmN4ogAAABM"]
[Sun Nov 23 13:15:13.127456 2025] [:error] [pid 44652:tid 44718] [client 13.70.85.214:53412] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aSKYYdiQFwsyXQDhwyBRiQAAAQw"]
[Sun Nov 23 13:15:13.720544 2025] [:error] [pid 38824:tid 38837] [client 13.70.85.214:52400] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aSKYYU8WZjXLvbHTHPdUpQAAAMo"]
[Sun Nov 23 13:15:13.997973 2025] [:error] [pid 38824:tid 38835] [client 13.70.85.214:52371] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSKYYU8WZjXLvbHTHPdUpgAAAMg"]
[Sun Nov 23 13:15:14.150053 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:52353] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "aSKYYgytc6TL9XavPmN4pAAAAAg"]
[Sun Nov 23 13:15:14.754370 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:52367] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "aSKYYgytc6TL9XavPmN4qgAAAAE"]
[Sun Nov 23 13:15:15.698513 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:7061] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "aSKYYwytc6TL9XavPmN4rwAAABE"]
[Sun Nov 23 13:15:16.141889 2025] [:error] [pid 38824:tid 38846] [client 13.70.85.214:7109] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aSKYZE8WZjXLvbHTHPdUqQAAANM"]
[Sun Nov 23 13:15:16.713643 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:52370] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aSKYZAytc6TL9XavPmN4vAAAABg"]
[Sun Nov 23 13:15:17.628229 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:7117] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aSKYZQ13QPZSi6O8umUp-gAAAIU"]
[Sun Nov 23 13:15:17.915820 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:52403] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aSKYZQdvEgJm2n2cDmrFBAAAAEU"]
[Sun Nov 23 13:15:18.596412 2025] [:error] [pid 44652:tid 44715] [client 13.70.85.214:52414] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSKYZtiQFwsyXQDhwyBRpwAAAQk"]
[Sun Nov 23 13:15:18.836220 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:53396] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSKYZk8WZjXLvbHTHPdUrAAAAME"]
[Sun Nov 23 13:15:19.083606 2025] [:error] [pid 38739:tid 38786] [client 13.70.85.214:7119] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSKYZwdvEgJm2n2cDmrFBgAAAFE"]
[Sun Nov 23 13:15:20.194852 2025] [:error] [pid 38739:tid 38784] [client 13.70.85.214:52355] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSKYaAdvEgJm2n2cDmrFCwAAAE8"]
[Sun Nov 23 13:15:20.771739 2025] [:error] [pid 38738:tid 38765] [client 13.70.85.214:7161] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aSKYaAytc6TL9XavPmN42QAAABc"]
[Sun Nov 23 13:15:21.601106 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:53387] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aSKYaQytc6TL9XavPmN44AAAAA8"]
[Sun Nov 23 13:15:21.742796 2025] [:error] [pid 38739:tid 38773] [client 13.70.85.214:7124] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aSKYaQdvEgJm2n2cDmrFDgAAAEQ"]
[Sun Nov 23 13:15:21.886011 2025] [:error] [pid 38740:tid 38811] [client 13.70.85.214:53430] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aSKYaQ13QPZSi6O8umUqAgAAAI8"]
[Sun Nov 23 13:15:22.937291 2025] [:error] [pid 44652:tid 44720] [client 13.70.85.214:7041] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSKYatiQFwsyXQDhwyBRrQAAAQ4"]
[Sun Nov 23 13:15:23.301598 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:53433] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSKYawytc6TL9XavPmN47wAAABE"]
[Sun Nov 23 13:15:23.920918 2025] [:error] [pid 38824:tid 38827] [client 13.70.85.214:7071] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSKYa08WZjXLvbHTHPdUvQAAAMA"]
[Sun Nov 23 13:15:24.683454 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:7113] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSKYbA13QPZSi6O8umUqEQAAAIA"]
[Sun Nov 23 13:15:25.411186 2025] [:error] [pid 38824:tid 38837] [client 13.70.85.214:6987] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSKYbU8WZjXLvbHTHPdU0QAAAMo"]
[Sun Nov 23 13:15:26.045247 2025] [:error] [pid 38739:tid 38772] [client 13.70.85.214:53383] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSKYbgdvEgJm2n2cDmrFKAAAAEM"]
[Sun Nov 23 13:15:27.111312 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:53429] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSKYb08WZjXLvbHTHPdU3gAAAME"]
[Sun Nov 23 13:15:27.818079 2025] [:error] [pid 38824:tid 38839] [client 13.70.85.214:52398] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSKYb08WZjXLvbHTHPdU4gAAAMw"]
[Sun Nov 23 13:15:29.064431 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:7049] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aSKYcQytc6TL9XavPmN5AAAAABM"]
[Sun Nov 23 13:15:29.674932 2025] [:error] [pid 44652:tid 44727] [client 13.70.85.214:53411] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aSKYcdiQFwsyXQDhwyBRxgAAARU"]
[Sun Nov 23 13:15:30.249780 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:52396] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aSKYcgytc6TL9XavPmN5CgAAAAw"]
[Sun Nov 23 13:15:31.551561 2025] [:error] [pid 38824:tid 38827] [client 13.70.85.214:52362] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aSKYc08WZjXLvbHTHPdU_QAAAMA"]
[Sun Nov 23 13:15:32.447345 2025] [:error] [pid 38739:tid 38789] [client 13.70.85.214:7144] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSKYdAdvEgJm2n2cDmrFNgAAAFQ"]
[Sun Nov 23 13:15:33.674539 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:53424] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSKYdQytc6TL9XavPmN5HQAAABM"]
[Sun Nov 23 13:15:34.287324 2025] [:error] [pid 38738:tid 38753] [client 13.70.85.214:52413] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSKYdgytc6TL9XavPmN5IQAAAAs"]
[Sun Nov 23 13:15:35.103255 2025] [:error] [pid 38738:tid 38766] [client 13.70.85.214:7116] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSKYdwytc6TL9XavPmN5KAAAABg"]
[Sun Nov 23 13:15:36.423790 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:7127] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/function.php"] [unique_id "aSKYeAdvEgJm2n2cDmrFPgAAAEU"]
[Sun Nov 23 13:15:36.751954 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:7065] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/function.php"] [unique_id "aSKYeAytc6TL9XavPmN5MQAAAAE"]
[Sun Nov 23 13:15:37.255568 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:53426] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/function.php"] [unique_id "aSKYeQytc6TL9XavPmN5MwAAAA0"]
[Sun Nov 23 13:15:39.476391 2025] [:error] [pid 44652:tid 44725] [client 13.70.85.214:7094] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/function.php"] [unique_id "aSKYe9iQFwsyXQDhwyBR0gAAARM"]
[Sun Nov 23 13:15:40.732884 2025] [:error] [pid 38740:tid 38796] [client 13.70.85.214:53378] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aSKYfA13QPZSi6O8umUqOgAAAIA"]
[Sun Nov 23 13:15:42.014829 2025] [:error] [pid 38740:tid 38797] [client 13.70.85.214:7047] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aSKYfg13QPZSi6O8umUqPQAAAIE"]
[Sun Nov 23 13:15:42.962834 2025] [:error] [pid 38738:tid 38760] [client 13.70.85.214:52411] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aSKYfgytc6TL9XavPmN5SAAAABI"]
[Sun Nov 23 13:15:43.995814 2025] [:error] [pid 38740:tid 38812] [client 13.70.85.214:52555] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aSKYfw13QPZSi6O8umUqRgAAAJA"]
[Sun Nov 23 13:15:45.764443 2025] [:error] [pid 38740:tid 38808] [client 13.70.85.214:52597] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSKYgQ13QPZSi6O8umUqUQAAAIw"]
[Sun Nov 23 13:15:46.169251 2025] [:error] [pid 38824:tid 38844] [client 13.70.85.214:52584] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSKYgk8WZjXLvbHTHPdVFQAAANE"]
[Sun Nov 23 13:15:47.191356 2025] [:error] [pid 38824:tid 38846] [client 13.70.85.214:52554] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSKYg08WZjXLvbHTHPdVFgAAANM"]
[Sun Nov 23 13:15:48.650829 2025] [:error] [pid 38738:tid 38764] [client 13.70.85.214:7143] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSKYhAytc6TL9XavPmN5UgAAABY"]
[Sun Nov 23 13:15:50.249954 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:6998] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aSKYhk8WZjXLvbHTHPdVHwAAAME"]
[Sun Nov 23 13:15:51.501126 2025] [:error] [pid 38824:tid 38837] [client 13.70.85.214:7106] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aSKYh08WZjXLvbHTHPdVJwAAAMo"]
[Sun Nov 23 13:15:52.093715 2025] [:error] [pid 38739:tid 38771] [client 13.70.85.214:52566] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aSKYiAdvEgJm2n2cDmrFVwAAAEI"]
[Sun Nov 23 13:15:52.680323 2025] [:error] [pid 44652:tid 44713] [client 13.70.85.214:52565] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aSKYiNiQFwsyXQDhwyBR4AAAAQc"]
[Sun Nov 23 13:15:52.833726 2025] [:error] [pid 38739:tid 38769] [client 13.70.85.214:53397] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "aSKYiAdvEgJm2n2cDmrFWwAAAEA"]
[Sun Nov 23 13:15:53.155368 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:52549] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "aSKYiQytc6TL9XavPmN5XQAAAAg"]
[Sun Nov 23 13:15:54.413348 2025] [:error] [pid 38738:tid 38764] [client 13.70.85.214:52553] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "aSKYigytc6TL9XavPmN5XgAAABY"]
[Sun Nov 23 13:15:55.074608 2025] [:error] [pid 44652:tid 44723] [client 13.70.85.214:52402] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "aSKYi9iQFwsyXQDhwyBR4gAAARE"]
[Sun Nov 23 13:15:55.624963 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:7087] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aSKYiwytc6TL9XavPmN5YgAAABM"]
[Sun Nov 23 13:15:56.615875 2025] [:error] [pid 38739:tid 38774] [client 13.70.85.214:52560] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Nov 23 13:15:56.679856 2025] [:error] [pid 38739:tid 38790] [client 13.70.85.214:52560] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 13:15:56.725862 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:52560] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Nov 23 13:15:56.747073 2025] [:error] [pid 38739:tid 38781] [client 13.70.85.214:52560] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sun Nov 23 13:15:56.767274 2025] [:error] [pid 38739:tid 38792] [client 13.70.85.214:52560] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sun Nov 23 13:15:56.787668 2025] [:error] [pid 38739:tid 38772] [client 13.70.85.214:52560] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Nov 23 13:15:56.807532 2025] [:error] [pid 38739:tid 38785] [client 13.70.85.214:52560] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sun Nov 23 13:15:56.830023 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:52560] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sun Nov 23 13:15:56.858337 2025] [:error] [pid 38739:tid 38771] [client 13.70.85.214:52560] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sun Nov 23 13:15:56.879365 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:52560] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Nov 23 13:15:56.897228 2025] [:error] [pid 38739:tid 38784] [client 13.70.85.214:52560] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "aSKYjAdvEgJm2n2cDmrFawAAAE8"]
[Sun Nov 23 13:15:57.733244 2025] [:error] [pid 38740:tid 38819] [client 13.70.85.214:52576] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "aSKYjQ13QPZSi6O8umUqYAAAAJc"]
[Sun Nov 23 13:15:58.646272 2025] [:error] [pid 44652:tid 44722] [client 13.70.85.214:52582] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "aSKYjtiQFwsyXQDhwyBR5QAAARA"]
[Sun Nov 23 13:15:59.307364 2025] [:error] [pid 38824:tid 38851] [client 13.70.85.214:53436] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "aSKYj08WZjXLvbHTHPdVMwAAANg"]
[Sun Nov 23 13:16:00.397198 2025] [:error] [pid 38738:tid 38742] [client 13.70.85.214:52408] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aSKYkAytc6TL9XavPmN5cgAAAAA"]
[Sun Nov 23 13:16:01.098795 2025] [:error] [pid 38739:tid 38775] [client 13.70.85.214:52407] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aSKYkQdvEgJm2n2cDmrFbAAAAEY"]
[Sun Nov 23 13:16:01.802383 2025] [:error] [pid 38739:tid 38786] [client 13.70.85.214:52570] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aSKYkQdvEgJm2n2cDmrFbQAAAFE"]
[Sun Nov 23 13:16:02.398823 2025] [:error] [pid 38824:tid 38842] [client 13.70.85.214:52561] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aSKYkk8WZjXLvbHTHPdVNAAAAM8"]
[Sun Nov 23 13:16:03.294647 2025] [:error] [pid 44652:tid 44720] [client 13.70.85.214:52578] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSKYk9iQFwsyXQDhwyBR9wAAAQ4"]
[Sun Nov 23 13:16:04.414589 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:7068] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSKYlAytc6TL9XavPmN5dQAAAA8"]
[Sun Nov 23 13:16:04.813537 2025] [:error] [pid 38738:tid 38764] [client 13.70.85.214:7139] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSKYlAytc6TL9XavPmN5dgAAABY"]
[Sun Nov 23 13:16:05.786891 2025] [:error] [pid 38740:tid 38813] [client 13.70.85.214:52581] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSKYlQ13QPZSi6O8umUqbQAAAJE"]
[Sun Nov 23 13:16:06.791068 2025] [:error] [pid 38738:tid 38748] [client 13.70.85.214:53382] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSKYlgytc6TL9XavPmN5fAAAAAY"]
[Sun Nov 23 13:16:07.100861 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:52378] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSKYlwdvEgJm2n2cDmrFeAAAAE4"]
[Sun Nov 23 13:16:07.852838 2025] [:error] [pid 38824:tid 38840] [client 13.70.85.214:52599] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSKYl08WZjXLvbHTHPdVPQAAAM0"]
[Sun Nov 23 13:16:08.581853 2025] [:error] [pid 44652:tid 44725] [client 13.70.85.214:52585] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSKYmNiQFwsyXQDhwyBSDQAAARM"]
[Sun Nov 23 13:16:09.635237 2025] [:error] [pid 44652:tid 44730] [client 13.70.85.214:6990] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpa.php"] [unique_id "aSKYmdiQFwsyXQDhwyBSEgAAARg"]
[Sun Nov 23 13:16:09.705647 2025] [:error] [pid 38824:tid 38850] [client 13.70.85.214:7056] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpa.php"] [unique_id "aSKYmU8WZjXLvbHTHPdVQAAAANc"]
[Sun Nov 23 13:16:10.165720 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:52572] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpa.php"] [unique_id "aSKYmgytc6TL9XavPmN5gQAAAA8"]
[Sun Nov 23 13:16:11.168673 2025] [:error] [pid 38740:tid 38798] [client 13.70.85.214:52551] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpa.php"] [unique_id "aSKYmw13QPZSi6O8umUqdAAAAII"]
[Sun Nov 23 13:16:12.786496 2025] [:error] [pid 38739:tid 38777] [client 13.70.85.214:7000] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSKYnAdvEgJm2n2cDmrFfAAAAEg"]
[Sun Nov 23 13:16:14.681629 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:7165] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSKYngytc6TL9XavPmN5hgAAABE"]
[Sun Nov 23 13:16:15.419158 2025] [:error] [pid 38738:tid 38758] [client 13.70.85.214:52567] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSKYnwytc6TL9XavPmN5iAAAABA"]
[Sun Nov 23 13:16:16.359390 2025] [:error] [pid 38739:tid 38789] [client 13.70.85.214:52546] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSKYoAdvEgJm2n2cDmrFfwAAAFQ"]
[Sun Nov 23 13:16:16.944824 2025] [:error] [pid 38824:tid 38832] [client 13.70.85.214:52559] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSKYoE8WZjXLvbHTHPdVRAAAAMU"]
[Sun Nov 23 13:16:17.676270 2025] [:error] [pid 38740:tid 38815] [client 13.70.85.214:52405] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSKYoQ13QPZSi6O8umUqfgAAAJM"]
[Sun Nov 23 13:16:17.882842 2025] [:error] [pid 38740:tid 38809] [client 13.70.85.214:52574] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSKYoQ13QPZSi6O8umUqfwAAAI0"]
[Sun Nov 23 13:16:18.844611 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:52558] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSKYog13QPZSi6O8umUqgAAAAIU"]
[Sun Nov 23 13:16:19.419174 2025] [:error] [pid 38824:tid 38836] [client 13.70.85.214:7151] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSKYo08WZjXLvbHTHPdVRwAAAMk"]
[Sun Nov 23 13:16:19.821129 2025] [:error] [pid 38824:tid 38844] [client 13.70.85.214:7064] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSKYo08WZjXLvbHTHPdVSAAAANE"]
[Sun Nov 23 13:16:20.156858 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:52569] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSKYpAdvEgJm2n2cDmrFhgAAAE4"]
[Sun Nov 23 13:16:20.504952 2025] [:error] [pid 38739:tid 38771] [client 13.70.85.214:7154] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSKYpAdvEgJm2n2cDmrFhwAAAEI"]
[Sun Nov 23 13:16:20.965041 2025] [:error] [pid 44652:tid 44728] [client 13.70.85.214:7079] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSKYpNiQFwsyXQDhwyBSFwAAARY"]
[Sun Nov 23 13:16:21.413468 2025] [:error] [pid 38739:tid 38784] [client 13.70.85.214:52552] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSKYpQdvEgJm2n2cDmrFiQAAAE8"]
[Sun Nov 23 13:16:22.124050 2025] [:error] [pid 44652:tid 44730] [client 13.70.85.214:7123] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSKYptiQFwsyXQDhwyBSGAAAARg"]
[Sun Nov 23 13:16:22.810164 2025] [:error] [pid 44652:tid 44719] [client 13.70.85.214:7058] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSKYptiQFwsyXQDhwyBSGwAAAQ0"]
[Sun Nov 23 13:16:23.689384 2025] [:error] [pid 38738:tid 38748] [client 13.70.85.214:52575] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSKYpwytc6TL9XavPmN5kwAAAAY"]
[Sun Nov 23 13:16:23.941775 2025] [:error] [pid 38739:tid 38787] [client 13.70.85.214:52588] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSKYpwdvEgJm2n2cDmrFjQAAAFI"]
[Sun Nov 23 13:16:24.786653 2025] [:error] [pid 38738:tid 38752] [client 13.70.85.214:52556] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSKYqAytc6TL9XavPmN5lgAAAAo"]
[Sun Nov 23 13:16:25.461066 2025] [:error] [pid 38824:tid 38831] [client 13.70.85.214:7059] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSKYqU8WZjXLvbHTHPdVUAAAAMQ"]
[Sun Nov 23 13:16:25.785342 2025] [:error] [pid 38738:tid 38764] [client 13.70.85.214:53432] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "aSKYqQytc6TL9XavPmN5ogAAABY"]
[Sun Nov 23 13:16:26.652564 2025] [:error] [pid 38824:tid 38845] [client 13.70.85.214:7076] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "aSKYqk8WZjXLvbHTHPdVVQAAANI"]
[Sun Nov 23 13:16:27.191671 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:52397] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "aSKYqwytc6TL9XavPmN5twAAABE"]
[Sun Nov 23 13:16:27.714095 2025] [:error] [pid 44652:tid 44724] [client 13.70.85.214:52586] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "aSKYq9iQFwsyXQDhwyBSIQAAARI"]
[Sun Nov 23 13:16:28.601737 2025] [:error] [pid 38738:tid 38745] [client 13.70.85.214:7157] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "aSKYrAytc6TL9XavPmN5wgAAAAM"]
[Sun Nov 23 13:16:28.702993 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:7137] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "aSKYrAdvEgJm2n2cDmrFkAAAAFY"]
[Sun Nov 23 13:16:28.865800 2025] [:error] [pid 38739:tid 38792] [client 13.70.85.214:52590] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "aSKYrAdvEgJm2n2cDmrFkQAAAFc"]
[Sun Nov 23 13:16:29.651836 2025] [:error] [pid 38738:tid 38750] [client 13.70.85.214:52395] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "aSKYrQytc6TL9XavPmN5xgAAAAg"]
[Sun Nov 23 13:16:30.057825 2025] [:error] [pid 44652:tid 44728] [client 13.70.85.214:7046] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSKYrtiQFwsyXQDhwyBSJgAAARY"]
[Sun Nov 23 13:16:30.729764 2025] [:error] [pid 44652:tid 44707] [client 13.70.85.214:53379] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSKYrtiQFwsyXQDhwyBSKAAAAQE"]
[Sun Nov 23 13:16:31.745789 2025] [:error] [pid 38739:tid 38775] [client 13.70.85.214:52564] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSKYrwdvEgJm2n2cDmrFlwAAAEY"]
[Sun Nov 23 13:16:32.655372 2025] [:error] [pid 38738:tid 38765] [client 13.70.85.214:7100] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSKYsAytc6TL9XavPmN5yQAAABc"]
[Sun Nov 23 13:16:32.911779 2025] [:error] [pid 38738:tid 38749] [client 13.70.85.214:7118] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSKYsAytc6TL9XavPmN5zAAAAAc"]
[Sun Nov 23 13:16:33.987139 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:53416] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSKYsQdvEgJm2n2cDmrFmQAAAEs"]
[Sun Nov 23 13:16:34.201302 2025] [:error] [pid 38739:tid 38782] [client 13.70.85.214:7121] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSKYsgdvEgJm2n2cDmrFmgAAAE0"]
[Sun Nov 23 13:16:35.117667 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:52589] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSKYswytc6TL9XavPmN50QAAAAw"]
[Sun Nov 23 13:16:35.522369 2025] [:error] [pid 38738:tid 38765] [client 13.70.85.214:53400] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSKYswytc6TL9XavPmN50wAAABc"]
[Sun Nov 23 13:16:36.186716 2025] [:error] [pid 38738:tid 38745] [client 13.70.85.214:7130] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSKYtAytc6TL9XavPmN51gAAAAM"]
[Sun Nov 23 13:16:37.449772 2025] [:error] [pid 38824:tid 38837] [client 13.70.85.214:7132] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSKYtU8WZjXLvbHTHPdVXwAAAMo"]
[Sun Nov 23 13:16:37.873932 2025] [:error] [pid 38738:tid 38758] [client 13.70.85.214:52591] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSKYtQytc6TL9XavPmN52wAAABA"]
[Sun Nov 23 13:16:38.236508 2025] [:error] [pid 38824:tid 38844] [client 13.70.85.214:53439] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSKYtk8WZjXLvbHTHPdVYQAAANE"]
[Sun Nov 23 13:16:38.528662 2025] [:error] [pid 38824:tid 38851] [client 13.70.85.214:7135] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSKYtk8WZjXLvbHTHPdVYgAAANg"]
[Sun Nov 23 13:16:38.668111 2025] [:error] [pid 44652:tid 44717] [client 13.70.85.214:52583] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSKYttiQFwsyXQDhwyBSLQAAAQs"]
[Sun Nov 23 13:16:39.182105 2025] [:error] [pid 38824:tid 38842] [client 13.70.85.214:52563] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSKYt08WZjXLvbHTHPdVYwAAAM8"]
[Sun Nov 23 13:16:40.637165 2025] [:error] [pid 38739:tid 38769] [client 13.70.85.214:7080] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "aSKYuAdvEgJm2n2cDmrFoQAAAEA"]
[Sun Nov 23 13:16:41.563642 2025] [:error] [pid 38739:tid 38777] [client 13.70.85.214:6991] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "aSKYuQdvEgJm2n2cDmrFogAAAEg"]
[Sun Nov 23 13:16:42.448576 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:7066] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "aSKYug13QPZSi6O8umUqpQAAAIU"]
[Sun Nov 23 13:16:43.412068 2025] [:error] [pid 44652:tid 44722] [client 13.70.85.214:52393] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "aSKYu9iQFwsyXQDhwyBSMwAAARA"]
[Sun Nov 23 13:16:43.903401 2025] [:error] [pid 38739:tid 38778] [client 13.70.85.214:52562] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSKYuwdvEgJm2n2cDmrFqgAAAEk"]
[Sun Nov 23 13:16:44.272669 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:52603] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSKYvAdvEgJm2n2cDmrFqwAAAE4"]
[Sun Nov 23 13:16:45.060348 2025] [:error] [pid 38740:tid 38802] [client 13.70.85.214:7039] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSKYvQ13QPZSi6O8umUqqAAAAIY"]
[Sun Nov 23 13:16:46.117683 2025] [:error] [pid 38824:tid 38829] [client 13.70.85.214:7104] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSKYvk8WZjXLvbHTHPdVaQAAAMI"]
[Sun Nov 23 13:16:46.832805 2025] [:error] [pid 38739:tid 38775] [client 13.70.85.214:52577] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/article.php"] [unique_id "aSKYvgdvEgJm2n2cDmrFrgAAAEY"]
[Sun Nov 23 13:16:48.158532 2025] [:error] [pid 38739:tid 38773] [client 13.70.85.214:7098] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/article.php"] [unique_id "aSKYwAdvEgJm2n2cDmrFtQAAAEQ"]
[Sun Nov 23 13:16:49.712013 2025] [:error] [pid 38740:tid 38808] [client 13.70.85.214:52602] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/article.php"] [unique_id "aSKYwQ13QPZSi6O8umUqrwAAAIw"]
[Sun Nov 23 13:16:50.439623 2025] [:error] [pid 44652:tid 44710] [client 13.70.85.214:52604] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/article.php"] [unique_id "aSKYwtiQFwsyXQDhwyBSOAAAAQQ"]
[Sun Nov 23 13:16:51.973546 2025] [:error] [pid 44652:tid 44726] [client 13.70.85.214:7090] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSKYw9iQFwsyXQDhwyBSPAAAARQ"]
[Sun Nov 23 13:16:52.213096 2025] [:error] [pid 38740:tid 38797] [client 13.70.85.214:7018] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSKYxA13QPZSi6O8umUqtgAAAIE"]
[Sun Nov 23 13:16:52.954624 2025] [:error] [pid 38824:tid 38850] [client 13.70.85.214:7073] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSKYxE8WZjXLvbHTHPdVcQAAANc"]
[Sun Nov 23 13:16:53.706612 2025] [:error] [pid 38740:tid 38807] [client 13.70.85.214:7097] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSKYxQ13QPZSi6O8umUquQAAAIs"]
[Sun Nov 23 13:16:54.658274 2025] [:error] [pid 38739:tid 38780] [client 13.70.85.214:7126] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aSKYxgdvEgJm2n2cDmrFvwAAAEs"]
[Sun Nov 23 13:16:55.808527 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:6986] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aSKYxwytc6TL9XavPmN56QAAAAw"]
[Sun Nov 23 13:16:56.467306 2025] [:error] [pid 44652:tid 44722] [client 13.70.85.214:52547] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Nov 23 13:16:56.486727 2025] [:error] [pid 44652:tid 44728] [client 13.70.85.214:52547] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sun Nov 23 13:16:56.593528 2025] [:error] [pid 44652:tid 44709] [client 13.70.85.214:52547] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Sun Nov 23 13:16:56.625437 2025] [:error] [pid 44652:tid 44727] [client 13.70.85.214:52547] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sun Nov 23 13:16:56.782602 2025] [:error] [pid 44652:tid 44719] [client 13.70.85.214:52547] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sun Nov 23 13:16:56.802607 2025] [:error] [pid 44652:tid 44706] [client 13.70.85.214:52547] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun Nov 23 13:16:56.858743 2025] [:error] [pid 44652:tid 44713] [client 13.70.85.214:52547] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aSKYyNiQFwsyXQDhwyBSSAAAAQc"]
[Sun Nov 23 13:16:57.150498 2025] [:error] [pid 38824:tid 38844] [client 13.70.85.214:7103] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Sun Nov 23 13:16:57.396711 2025] [:error] [pid 38824:tid 38851] [client 13.70.85.214:7103] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSKYyU8WZjXLvbHTHPdVewAAANg"]
[Sun Nov 23 13:16:57.848031 2025] [:error] [pid 38738:tid 38765] [client 13.70.85.214:7130] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSKYyQytc6TL9XavPmN57QAAABc"]
[Sun Nov 23 13:16:57.995582 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:52587] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSKYyQytc6TL9XavPmN57gAAAAE"]
[Sun Nov 23 13:16:58.551751 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:7110] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSKYygytc6TL9XavPmN58wAAABE"]
[Sun Nov 23 13:16:59.413482 2025] [:error] [pid 38740:tid 38818] [client 13.70.85.214:6996] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "aSKYyw13QPZSi6O8umUqwQAAAJY"]
[Sun Nov 23 13:16:59.824808 2025] [:error] [pid 38739:tid 38781] [client 13.70.85.214:7093] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSKYywdvEgJm2n2cDmrFwgAAAEw"]
[Sun Nov 23 13:17:00.662179 2025] [:error] [pid 38739:tid 38784] [client 13.70.85.214:7140] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSKYzAdvEgJm2n2cDmrFxAAAAE8"]
[Sun Nov 23 13:17:00.846124 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:6912] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSKYzAytc6TL9XavPmN59wAAABM"]
[Sun Nov 23 13:17:01.711500 2025] [:error] [pid 38738:tid 38762] [client 13.70.85.214:52579] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSKYzQytc6TL9XavPmN5-gAAABQ"]
[Sun Nov 23 13:17:02.165499 2025] [:error] [pid 44652:tid 44722] [client 13.70.85.214:52545] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSKYztiQFwsyXQDhwyBSUAAAARA"]
[Sun Nov 23 13:17:02.641647 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:7145] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSKYzgytc6TL9XavPmN6BwAAABM"]
[Sun Nov 23 13:17:03.052586 2025] [:error] [pid 38738:tid 38752] [client 13.70.85.214:7037] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSKYzwytc6TL9XavPmN6CQAAAAo"]
[Sun Nov 23 13:17:03.673314 2025] [:error] [pid 38738:tid 38756] [client 13.70.85.214:52415] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSKYzwytc6TL9XavPmN6EQAAAA4"]
[Sun Nov 23 13:17:03.975613 2025] [:error] [pid 38824:tid 38848] [client 13.70.85.214:7102] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSKYz08WZjXLvbHTHPdViAAAANU"]
[Sun Nov 23 13:17:04.804582 2025] [:error] [pid 38738:tid 38757] [client 13.70.85.214:52580] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSKY0Aytc6TL9XavPmN6GgAAAA8"]
[Sun Nov 23 13:17:05.325765 2025] [:error] [pid 38738:tid 38748] [client 13.70.85.214:7050] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSKY0Qytc6TL9XavPmN6HwAAAAY"]
[Sun Nov 23 13:17:07.359142 2025] [:error] [pid 38824:tid 38827] [client 13.70.85.214:7085] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSKY008WZjXLvbHTHPdVjQAAAMA"]
[Sun Nov 23 13:17:07.600176 2025] [:error] [pid 44652:tid 44715] [client 13.70.85.214:7042] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSKY09iQFwsyXQDhwyBSVQAAAQk"]
[Sun Nov 23 13:17:07.830473 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:52557] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "aSKY0wytc6TL9XavPmN6IgAAAA0"]
[Sun Nov 23 13:17:08.082431 2025] [:error] [pid 38740:tid 38809] [client 13.70.85.214:7040] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSKY1A13QPZSi6O8umUqywAAAI0"]
[Sun Nov 23 13:17:08.485430 2025] [:error] [pid 44652:tid 44721] [client 13.70.85.214:7013] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSKY1NiQFwsyXQDhwyBSWQAAAQ8"]
[Sun Nov 23 13:17:09.340037 2025] [:error] [pid 38740:tid 38802] [client 13.70.85.214:7067] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSKY1Q13QPZSi6O8umUq0AAAAIY"]
[Sun Nov 23 13:17:09.742923 2025] [:error] [pid 38739:tid 38776] [client 13.70.85.214:6976] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSKY1QdvEgJm2n2cDmrF0QAAAEc"]
[Sun Nov 23 13:17:10.516719 2025] [:error] [pid 38739:tid 38784] [client 13.70.85.214:52607] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSKY1gdvEgJm2n2cDmrF0gAAAE8"]
[Sun Nov 23 13:17:10.804377 2025] [:error] [pid 38739:tid 38785] [client 13.70.85.214:7048] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSKY1gdvEgJm2n2cDmrF0wAAAFA"]
[Sun Nov 23 13:17:11.295880 2025] [:error] [pid 38740:tid 38803] [client 13.70.85.214:52544] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSKY1w13QPZSi6O8umUq1QAAAIc"]
[Sun Nov 23 13:17:11.809348 2025] [:error] [pid 44652:tid 44708] [client 13.70.85.214:7028] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSKY19iQFwsyXQDhwyBSXAAAAQI"]
[Sun Nov 23 13:17:12.459443 2025] [:error] [pid 38740:tid 38809] [client 13.70.85.214:7069] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSKY2A13QPZSi6O8umUq1wAAAI0"]
[Sun Nov 23 13:17:13.452851 2025] [:error] [pid 38740:tid 38815] [client 13.70.85.214:7052] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aSKY2Q13QPZSi6O8umUq3QAAAJM"]
[Sun Nov 23 13:17:14.044087 2025] [:error] [pid 38740:tid 38799] [client 13.70.85.214:53409] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSKY2g13QPZSi6O8umUq3gAAAIM"]
[Sun Nov 23 13:17:14.697510 2025] [:error] [pid 44652:tid 44727] [client 13.70.85.214:6978] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww1.php"] [unique_id "aSKY2tiQFwsyXQDhwyBSXgAAARU"]
[Sun Nov 23 13:17:15.581200 2025] [:error] [pid 38740:tid 38805] [client 13.70.85.214:6934] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww1.php"] [unique_id "aSKY2w13QPZSi6O8umUq3wAAAIk"]
[Sun Nov 23 13:17:16.307732 2025] [:error] [pid 44652:tid 44716] [client 13.70.85.214:52605] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww1.php"] [unique_id "aSKY3NiQFwsyXQDhwyBSYQAAAQo"]
[Sun Nov 23 13:17:16.658572 2025] [:error] [pid 38739:tid 38783] [client 13.70.85.214:7035] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww1.php"] [unique_id "aSKY3AdvEgJm2n2cDmrF1gAAAE4"]
[Sun Nov 23 13:17:17.633950 2025] [:error] [pid 38738:tid 38746] [client 13.70.85.214:52548] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqq.php"] [unique_id "aSKY3Qytc6TL9XavPmN6LQAAAAQ"]
[Sun Nov 23 13:17:18.106921 2025] [:error] [pid 38738:tid 38752] [client 13.70.85.214:52548] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqq.php"] [unique_id "aSKY3gytc6TL9XavPmN6LgAAAAo"]
[Sun Nov 23 13:17:19.343665 2025] [:error] [pid 38738:tid 38748] [client 13.70.85.214:52592] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqq.php"] [unique_id "aSKY3wytc6TL9XavPmN6MAAAAAY"]
[Sun Nov 23 13:17:19.903878 2025] [:error] [pid 38739:tid 38773] [client 13.70.85.214:7142] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqq.php"] [unique_id "aSKY3wdvEgJm2n2cDmrF3QAAAEQ"]
[Sun Nov 23 13:17:20.715060 2025] [:error] [pid 38739:tid 38793] [client 13.70.85.214:7149] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSKY4AdvEgJm2n2cDmrF3gAAAFg"]
[Sun Nov 23 13:17:21.165681 2025] [:error] [pid 38739:tid 38775] [client 13.70.85.214:7078] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSKY4QdvEgJm2n2cDmrF4AAAAEY"]
[Sun Nov 23 13:17:22.509272 2025] [:error] [pid 38738:tid 38765] [client 13.70.85.214:7077] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSKY4gytc6TL9XavPmN6MgAAABc"]
[Sun Nov 23 13:17:23.056734 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:6993] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSKY4wdvEgJm2n2cDmrF5QAAAFY"]
[Sun Nov 23 13:17:24.160032 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:6852] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSKY5Aytc6TL9XavPmN6NgAAAA0"]
[Sun Nov 23 13:17:24.683163 2025] [:error] [pid 38738:tid 38742] [client 13.70.85.214:6980] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/function.php"] [unique_id "aSKY5Aytc6TL9XavPmN6NwAAAAA"]
[Sun Nov 23 13:17:25.490833 2025] [:error] [pid 38824:tid 38836] [client 13.70.85.214:6983] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/function.php"] [unique_id "aSKY5U8WZjXLvbHTHPdVnwAAAMk"]
[Sun Nov 23 13:17:26.391193 2025] [:error] [pid 38824:tid 38847] [client 13.70.85.214:7063] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/function.php"] [unique_id "aSKY5k8WZjXLvbHTHPdVoQAAANQ"]
[Sun Nov 23 13:17:26.906246 2025] [:error] [pid 38739:tid 38770] [client 13.70.85.214:7017] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/function.php"] [unique_id "aSKY5gdvEgJm2n2cDmrF7QAAAEE"]
[Sun Nov 23 13:17:28.714737 2025] [:error] [pid 38738:tid 38759] [client 13.70.85.214:6981] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSKY6Aytc6TL9XavPmN6PAAAABE"]
[Sun Nov 23 13:17:29.029221 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:52594] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSKY6Qytc6TL9XavPmN6PQAAAAE"]
[Sun Nov 23 13:17:29.652836 2025] [:error] [pid 38738:tid 38765] [client 13.70.85.214:6915] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSKY6Qytc6TL9XavPmN6QAAAABc"]
[Sun Nov 23 13:17:30.102242 2025] [:error] [pid 44652:tid 44710] [client 13.70.85.214:7146] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSKY6tiQFwsyXQDhwyBSbgAAAQQ"]
[Sun Nov 23 13:17:30.577135 2025] [:error] [pid 38824:tid 38834] [client 13.70.85.214:52601] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSKY6k8WZjXLvbHTHPdVpwAAAMc"]
[Sun Nov 23 13:17:32.037642 2025] [:error] [pid 38738:tid 38754] [client 13.70.85.214:7074] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSKY7Aytc6TL9XavPmN6RwAAAAw"]
[Sun Nov 23 13:17:32.515646 2025] [:error] [pid 44652:tid 44711] [client 13.70.85.214:7152] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSKY7NiQFwsyXQDhwyBScAAAAQU"]
[Sun Nov 23 13:17:32.989679 2025] [:error] [pid 38824:tid 38844] [client 13.70.85.214:7162] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSKY7E8WZjXLvbHTHPdVqQAAANE"]
[Sun Nov 23 13:17:34.457737 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:6995] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSKY7g13QPZSi6O8umUq_wAAAIU"]
[Sun Nov 23 13:17:35.703709 2025] [:error] [pid 38738:tid 38764] [client 13.70.85.214:6932] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSKY7wytc6TL9XavPmN6TwAAABY"]
[Sun Nov 23 13:17:35.984565 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:6999] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSKY7wytc6TL9XavPmN6UAAAAA0"]
[Sun Nov 23 13:17:36.885457 2025] [:error] [pid 38824:tid 38845] [client 13.70.85.214:7024] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aSKY8E8WZjXLvbHTHPdVrQAAANI"]
[Sun Nov 23 13:17:37.589296 2025] [:error] [pid 38738:tid 38748] [client 13.70.85.214:6922] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aSKY8Qytc6TL9XavPmN6WAAAAAY"]
[Sun Nov 23 13:17:37.880923 2025] [:error] [pid 38738:tid 38756] [client 13.70.85.214:52598] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aSKY8Qytc6TL9XavPmN6WQAAAA4"]
[Sun Nov 23 13:17:38.247317 2025] [:error] [pid 38740:tid 38820] [client 13.70.85.214:7002] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aSKY8g13QPZSi6O8umUrBAAAAJg"]
[Sun Nov 23 13:17:38.666334 2025] [:error] [pid 38738:tid 38751] [client 13.70.85.214:52568] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aSKY8gytc6TL9XavPmN6WwAAAAk"]
[Sun Nov 23 13:17:39.649813 2025] [:error] [pid 38740:tid 38798] [client 13.70.85.214:7101] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSKY8w13QPZSi6O8umUrCQAAAII"]
[Sun Nov 23 13:17:40.158224 2025] [:error] [pid 38824:tid 38842] [client 13.70.85.214:6916] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSKY9E8WZjXLvbHTHPdVrwAAAM8"]
[Sun Nov 23 13:17:40.951712 2025] [:error] [pid 38824:tid 38846] [client 13.70.85.214:52550] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSKY9E8WZjXLvbHTHPdVsgAAANM"]
[Sun Nov 23 13:17:43.198874 2025] [:error] [pid 44652:tid 44710] [client 13.70.85.214:7051] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSKY99iQFwsyXQDhwyBSegAAAQQ"]
[Sun Nov 23 13:17:44.541353 2025] [:error] [pid 38739:tid 38779] [client 13.70.85.214:7003] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSKY-AdvEgJm2n2cDmrF_AAAAEo"]
[Sun Nov 23 13:17:44.840773 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:52593] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSKY-A13QPZSi6O8umUrEwAAAIU"]
[Sun Nov 23 13:17:45.954280 2025] [:error] [pid 38740:tid 38803] [client 13.70.85.214:7007] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSKY-Q13QPZSi6O8umUrFgAAAIc"]
[Sun Nov 23 13:17:46.088527 2025] [:error] [pid 44652:tid 44711] [client 13.70.85.214:7038] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aSKY-tiQFwsyXQDhwyBSewAAAQU"]
[Sun Nov 23 13:17:47.171949 2025] [:error] [pid 38738:tid 38765] [client 13.70.85.214:6893] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSKY-wytc6TL9XavPmN6ZQAAABc"]
[Sun Nov 23 13:17:48.667173 2025] [:error] [pid 44652:tid 44727] [client 13.70.85.214:6921] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSKY_NiQFwsyXQDhwyBSgwAAARU"]
[Sun Nov 23 13:17:48.899907 2025] [:error] [pid 38738:tid 38755] [client 13.70.85.214:7092] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSKY_Aytc6TL9XavPmN6aAAAAA0"]
[Sun Nov 23 13:17:49.786847 2025] [:error] [pid 38739:tid 38786] [client 13.70.85.214:7088] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aSKY_QdvEgJm2n2cDmrGAAAAAFE"]
[Sun Nov 23 13:17:50.019698 2025] [:error] [pid 38738:tid 38746] [client 13.70.85.214:7009] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSKY_gytc6TL9XavPmN6awAAAAQ"]
[Sun Nov 23 13:17:50.412502 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:6931] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSKY_gytc6TL9XavPmN6bAAAAAE"]
[Sun Nov 23 13:17:50.946559 2025] [:error] [pid 38738:tid 38760] [client 13.70.85.214:6975] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSKY_gytc6TL9XavPmN6bgAAABI"]
[Sun Nov 23 13:17:51.401873 2025] [:error] [pid 38739:tid 38791] [client 13.70.85.214:7016] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSKY_wdvEgJm2n2cDmrGAQAAAFY"]
[Sun Nov 23 13:17:52.092151 2025] [:error] [pid 38738:tid 38753] [client 13.70.85.214:7014] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "aSKZAAytc6TL9XavPmN6dAAAAAs"]
[Sun Nov 23 13:17:52.560015 2025] [:error] [pid 38738:tid 38761] [client 13.70.85.214:7031] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSKZAAytc6TL9XavPmN6dgAAABM"]
[Sun Nov 23 13:17:53.093982 2025] [:error] [pid 38738:tid 38763] [client 13.70.85.214:6984] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSKZAQytc6TL9XavPmN6eQAAABU"]
[Sun Nov 23 13:17:53.874873 2025] [:error] [pid 38738:tid 38743] [client 13.70.85.214:6945] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSKZAQytc6TL9XavPmN6ewAAAAE"]
[Sun Nov 23 13:17:54.037941 2025] [:error] [pid 38824:tid 38846] [client 13.70.85.214:7053] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSKZAk8WZjXLvbHTHPdVvQAAANM"]
[Sun Nov 23 13:17:54.630439 2025] [:error] [pid 38824:tid 38842] [client 13.70.85.214:6927] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSKZAk8WZjXLvbHTHPdVvgAAAM8"]
[Sun Nov 23 13:17:54.927967 2025] [:error] [pid 38824:tid 38839] [client 13.70.85.214:53404] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSKZAk8WZjXLvbHTHPdVvwAAAMw"]
[Sun Nov 23 13:17:56.241321 2025] [:error] [pid 38740:tid 38801] [client 13.70.85.214:7089] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSKZBA13QPZSi6O8umUrHgAAAIU"]
[Sun Nov 23 13:17:56.471183 2025] [:error] [pid 38739:tid 38778] [client 13.70.85.214:7167] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aSKZBAdvEgJm2n2cDmrGAgAAAEk"]
[Sun Nov 23 13:17:57.361309 2025] [:error] [pid 38740:tid 38811] [client 13.70.85.214:52571] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sun Nov 23 13:17:57.393501 2025] [:error] [pid 38740:tid 38814] [client 13.70.85.214:52571] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Sun Nov 23 13:17:57.416183 2025] [:error] [pid 38740:tid 38815] [client 13.70.85.214:52571] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSKZBQ13QPZSi6O8umUrJgAAAJM"]
[Sun Nov 23 13:17:57.867074 2025] [:error] [pid 38739:tid 38792] [client 13.70.85.214:7111] [client 13.70.85.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSKZBQdvEgJm2n2cDmrGBAAAAFc"]
[Sun Nov 23 13:17:58.431269 2025] [:error] [pid 38824:tid 38849] [client 13.70.85.214:6967] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 13:17:58.594052 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:6967] File does not exist: /usr/local/apache/htdocs/suspended-page/bge.php
[Sun Nov 23 13:17:59.991487 2025] [:error] [pid 38824:tid 38828] [client 13.70.85.214:6967] File does not exist: /usr/local/apache/htdocs/suspended-page/ifm.php
[Sun Nov 23 13:18:00.085976 2025] [:error] [pid 38824:tid 38845] [client 13.70.85.214:6967] File does not exist: /usr/local/apache/htdocs/suspended-page/ww5.php
[Sun Nov 23 13:18:00.312347 2025] [:error] [pid 38824:tid 38836] [client 13.70.85.214:6967] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/thxt.php"] [unique_id "aSKZCE8WZjXLvbHTHPdVyQAAAMk"]
[Sun Nov 23 13:18:01.364966 2025] [:error] [pid 38739:tid 38769] [client 13.70.85.214:6979] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/thxt.php"] [unique_id "aSKZCQdvEgJm2n2cDmrGBwAAAEA"]
[Sun Nov 23 13:18:01.726500 2025] [:error] [pid 38740:tid 38808] [client 13.70.85.214:52596] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/thxt.php"] [unique_id "aSKZCQ13QPZSi6O8umUrKQAAAIw"]
[Sun Nov 23 13:18:02.157277 2025] [:error] [pid 38824:tid 38833] [client 13.70.85.214:7019] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/thxt.php"] [unique_id "aSKZCk8WZjXLvbHTHPdVywAAAMY"]
[Sun Nov 23 13:18:03.319985 2025] [:error] [pid 38740:tid 38818] [client 13.70.85.214:6924] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kairolin.php"] [unique_id "aSKZCw13QPZSi6O8umUrKwAAAJY"]
[Sun Nov 23 13:18:03.727775 2025] [:error] [pid 38740:tid 38812] [client 13.70.85.214:7112] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kairolin.php"] [unique_id "aSKZCw13QPZSi6O8umUrLAAAAJA"]
[Sun Nov 23 13:18:04.654501 2025] [:error] [pid 38738:tid 38742] [client 13.70.85.214:52573] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kairolin.php"] [unique_id "aSKZDAytc6TL9XavPmN6iQAAAAA"]
[Sun Nov 23 13:18:05.457258 2025] [:error] [pid 38740:tid 38809] [client 13.70.85.214:6963] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kairolin.php"] [unique_id "aSKZDQ13QPZSi6O8umUrLgAAAI0"]
[Sun Nov 23 13:18:06.298091 2025] [:error] [pid 38740:tid 38819] [client 13.70.85.214:7054] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/siln.php"] [unique_id "aSKZDg13QPZSi6O8umUrMAAAAJc"]
[Sun Nov 23 13:18:07.048124 2025] [:error] [pid 38739:tid 38773] [client 13.70.85.214:7082] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/siln.php"] [unique_id "aSKZDwdvEgJm2n2cDmrGDQAAAEQ"]
[Sun Nov 23 13:18:07.230010 2025] [:error] [pid 38739:tid 38786] [client 13.70.85.214:6970] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/siln.php"] [unique_id "aSKZDwdvEgJm2n2cDmrGDwAAAFE"]
[Sun Nov 23 13:18:07.881607 2025] [:error] [pid 38824:tid 38848] [client 13.70.85.214:7022] [client 13.70.85.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/siln.php"] [unique_id "aSKZD08WZjXLvbHTHPdVzwAAANU"]
[Sun Nov 23 15:24:28.941943 2025] [:error] [pid 38824:tid 38834] [client 167.71.203.246:59919] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sun Nov 23 16:44:47.146922 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sun Nov 23 16:44:47.318722 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sun Nov 23 16:44:47.473380 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sun Nov 23 16:44:47.604902 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Nov 23 16:44:47.788968 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Nov 23 16:44:47.930951 2025] [:error] [pid 38740:tid 38815] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Nov 23 16:44:48.152459 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Nov 23 16:44:48.266258 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Nov 23 16:44:48.586764 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sun Nov 23 16:44:48.879503 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sun Nov 23 16:44:49.038816 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sun Nov 23 16:44:49.165613 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Nov 23 16:44:49.268744 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Nov 23 16:44:49.429203 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Nov 23 16:44:49.535138 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sun Nov 23 16:44:49.661560 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sun Nov 23 16:44:49.763941 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sun Nov 23 16:44:49.884501 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.33:42633] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Nov 23 16:45:00.387096 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.33:42633] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLJjA13QPZSi6O8umWitgAAAIc"]
[Sun Nov 23 16:45:01.240956 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.30:36261] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLJjQ13QPZSi6O8umWi1AAAAJA"]
[Sun Nov 23 16:45:02.139900 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.62:29885] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Nov 23 16:45:02.687349 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.62:29885] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLJjgytc6TL9XavPmMF9gAAAAk"]
[Sun Nov 23 20:08:54.042285 2025] [:error] [pid 44652:tid 44727] [client 176.65.132.18:46896] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aSL5VtiQFwsyXQDhwyAOTwAAARU"]
[Sun Nov 23 20:09:39.175217 2025] [:error] [pid 17534:tid 17555] [client 176.65.132.18:44130] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aSL5g3PX9nXBrhgM8syNUAAAAdM"]
[Mon Nov 24 03:53:41.604797 2025] [:error] [pid 56850:tid 56898] [client 193.37.33.73:52903] [client 193.37.33.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.37.33.73, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aSNmRazRApTptDSemw9IrwAAAEI"]
[Mon Nov 24 03:53:41.609254 2025] [:error] [pid 56850:tid 56898] [client 193.37.33.73:52903] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Nov 24 04:39:44.274419 2025] [:error] [pid 12911:tid 12952] [client 176.65.132.18:50246] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aSNxEEDMbk9464jnIl7ZJAAAAEo"]
[Mon Nov 24 04:45:30.276251 2025] [:error] [pid 12911:tid 12954] [client 176.65.132.18:42272] [client 176.65.132.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aSNyakDMbk9464jnIl7aLQAAAEw"]
[Mon Nov 24 08:20:26.484534 2025] [:error] [pid 48601:tid 48681] [client 103.65.237.124:58013] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "aSOkyoMM4MaVTk74-AYoTQAAAhg"]
[Mon Nov 24 12:57:09.799416 2025] [:error] [pid 16516:tid 16527] [client 4.211.111.86:37882] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon Nov 24 12:57:10.057260 2025] [:error] [pid 16516:tid 16534] [client 4.211.111.86:37882] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon Nov 24 12:57:11.190523 2025] [:error] [pid 16516:tid 16543] [client 4.211.111.86:37882] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Nov 24 12:57:11.431849 2025] [:error] [pid 16516:tid 16525] [client 4.211.111.86:37882] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Mon Nov 24 12:57:11.769447 2025] [:error] [pid 16516:tid 16528] [client 4.211.111.86:37882] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Mon Nov 24 12:57:12.012423 2025] [:error] [pid 16516:tid 16531] [client 4.211.111.86:37882] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Mon Nov 24 12:57:12.253253 2025] [:error] [pid 16516:tid 16524] [client 4.211.111.86:37882] [client 4.211.111.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/cs.php"] [unique_id "aSPlqPqZbniwaNwL8XnBfwAAAQU"]
[Mon Nov 24 12:57:14.126669 2025] [:error] [pid 16516:tid 16526] [client 4.211.111.86:37884] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "aSPlqvqZbniwaNwL8XnBgQAAAQc"]
[Mon Nov 24 12:57:16.593477 2025] [:error] [pid 9630:tid 9652] [client 4.211.111.86:37847] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "aSPlrCrSgUgPGkizt2qskQAAAFQ"]
[Mon Nov 24 12:57:17.275739 2025] [:error] [pid 48601:tid 48677] [client 4.211.111.86:37860] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "aSPlrYMM4MaVTk74-AaBQQAAAhQ"]
[Mon Nov 24 12:57:18.451968 2025] [:error] [pid 16593:tid 16618] [client 4.211.111.86:37764] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "aSPlrhVGznHBJI2LKpQXyAAAApc"]
[Mon Nov 24 12:57:19.417973 2025] [:error] [pid 48600:tid 48638] [client 4.211.111.86:37784] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "aSPlr_tOzSUAQvWVjBdWvQAAAcg"]
[Mon Nov 24 12:57:20.159462 2025] [:error] [pid 16593:tid 16613] [client 4.211.111.86:37761] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "aSPlsBVGznHBJI2LKpQXyQAAApI"]
[Mon Nov 24 12:57:20.859247 2025] [:error] [pid 16441:tid 16453] [client 4.211.111.86:37773] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "aSPlsIq_bc5MOa9Hflnb1QAAAIk"]
[Mon Nov 24 12:57:21.786916 2025] [:error] [pid 16441:tid 16461] [client 4.211.111.86:37851] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "aSPlsYq_bc5MOa9Hflnb1wAAAJE"]
[Mon Nov 24 12:57:22.770304 2025] [:error] [pid 16516:tid 16529] [client 4.211.111.86:37770] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "aSPlsvqZbniwaNwL8XnBhQAAAQo"]
[Mon Nov 24 12:57:23.458418 2025] [:error] [pid 49900:tid 49918] [client 4.211.111.86:37854] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "aSPlszCyPLrvg06aornWhgAAABA"]
[Mon Nov 24 12:57:24.138403 2025] [:error] [pid 48599:tid 48626] [client 4.211.111.86:37877] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "aSPltJzvu6PDJiRKE3L66wAAAZc"]
[Mon Nov 24 12:57:24.815688 2025] [:error] [pid 16441:tid 16456] [client 4.211.111.86:37778] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "aSPltIq_bc5MOa9Hflnb2AAAAIw"]
[Mon Nov 24 12:57:26.262754 2025] [:error] [pid 48599:tid 48609] [client 4.211.111.86:37878] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "aSPltpzvu6PDJiRKE3L67QAAAYY"]
[Mon Nov 24 12:57:26.959669 2025] [:error] [pid 48601:tid 48680] [client 4.211.111.86:37866] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "aSPltoMM4MaVTk74-AaBRQAAAhc"]
[Mon Nov 24 12:57:27.840754 2025] [:error] [pid 48601:tid 48661] [client 4.211.111.86:37873] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "aSPlt4MM4MaVTk74-AaBRwAAAgQ"]
[Mon Nov 24 12:57:28.779786 2025] [:error] [pid 16441:tid 16468] [client 4.211.111.86:37846] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "aSPluIq_bc5MOa9Hflnb6wAAAJg"]
[Mon Nov 24 12:57:29.651608 2025] [:error] [pid 49900:tid 49902] [client 4.211.111.86:37832] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "aSPluTCyPLrvg06aornWiwAAAAA"]
[Mon Nov 24 12:57:30.567623 2025] [:error] [pid 16516:tid 16522] [client 4.211.111.86:37852] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "aSPluvqZbniwaNwL8XnBhgAAAQM"]
[Mon Nov 24 12:57:31.414074 2025] [:error] [pid 9630:tid 9640] [client 4.211.111.86:37881] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "aSPluyrSgUgPGkizt2qsnwAAAEg"]
[Mon Nov 24 12:57:32.567893 2025] [:error] [pid 16441:tid 16466] [client 4.211.111.86:37858] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "aSPlvIq_bc5MOa9Hflnb7gAAAJY"]
[Mon Nov 24 12:57:33.173068 2025] [:error] [pid 48599:tid 48622] [client 4.211.111.86:37837] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "aSPlvZzvu6PDJiRKE3L69AAAAZM"]
[Mon Nov 24 12:57:33.868492 2025] [:error] [pid 16441:tid 16459] [client 4.211.111.86:37777] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "aSPlvYq_bc5MOa9Hflnb8AAAAI8"]
[Mon Nov 24 12:57:34.490069 2025] [:error] [pid 16441:tid 16464] [client 4.211.111.86:37703] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "aSPlvoq_bc5MOa9Hflnb9AAAAJQ"]
[Mon Nov 24 12:57:35.245261 2025] [:error] [pid 9630:tid 9652] [client 4.211.111.86:37822] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "aSPlvyrSgUgPGkizt2qsoAAAAFQ"]
[Mon Nov 24 12:57:35.911134 2025] [:error] [pid 48601:tid 48667] [client 4.211.111.86:37762] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cok.php"] [unique_id "aSPlv4MM4MaVTk74-AaBSwAAAgo"]
[Mon Nov 24 12:57:36.722320 2025] [:error] [pid 9630:tid 9645] [client 4.211.111.86:37855] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cok.php"] [unique_id "aSPlwCrSgUgPGkizt2qsoQAAAE0"]
[Mon Nov 24 12:57:37.450646 2025] [:error] [pid 48601:tid 48672] [client 4.211.111.86:37849] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cok.php"] [unique_id "aSPlwYMM4MaVTk74-AaBTQAAAg8"]
[Mon Nov 24 12:57:38.195532 2025] [:error] [pid 48601:tid 48658] [client 4.211.111.86:37774] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cok.php"] [unique_id "aSPlwoMM4MaVTk74-AaBTgAAAgE"]
[Mon Nov 24 12:57:38.888871 2025] [:error] [pid 48599:tid 48614] [client 4.211.111.86:37768] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hob.php"] [unique_id "aSPlwpzvu6PDJiRKE3L69gAAAYs"]
[Mon Nov 24 12:57:39.797600 2025] [:error] [pid 49900:tid 49903] [client 4.211.111.86:37780] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hob.php"] [unique_id "aSPlwzCyPLrvg06aornWjQAAAAE"]
[Mon Nov 24 12:57:40.447347 2025] [:error] [pid 16441:tid 16463] [client 4.211.111.86:37698] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hob.php"] [unique_id "aSPlxIq_bc5MOa9Hflnb9wAAAJM"]
[Mon Nov 24 12:57:41.254896 2025] [:error] [pid 16593:tid 16618] [client 4.211.111.86:37746] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hob.php"] [unique_id "aSPlxRVGznHBJI2LKpQX3AAAApc"]
[Mon Nov 24 12:57:42.047395 2025] [:error] [pid 9630:tid 9639] [client 4.211.111.86:37845] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "aSPlxirSgUgPGkizt2qspgAAAEc"]
[Mon Nov 24 12:57:42.698779 2025] [:error] [pid 16593:tid 16613] [client 4.211.111.86:37850] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "aSPlxhVGznHBJI2LKpQX3QAAApI"]
[Mon Nov 24 12:57:43.342947 2025] [:error] [pid 16549:tid 16559] [client 4.211.111.86:37766] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "aSPlx6eWW19A99PUw_cUUgAAAUc"]
[Mon Nov 24 12:57:44.057935 2025] [:error] [pid 16441:tid 16447] [client 4.211.111.86:37725] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "aSPlyIq_bc5MOa9Hflnb-AAAAIM"]
[Mon Nov 24 12:57:44.995200 2025] [:error] [pid 16441:tid 16459] [client 4.211.111.86:37864] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fh26.php"] [unique_id "aSPlyIq_bc5MOa9Hflnb-wAAAI8"]
[Mon Nov 24 12:57:45.907990 2025] [:error] [pid 48599:tid 48606] [client 4.211.111.86:37776] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fh26.php"] [unique_id "aSPlyZzvu6PDJiRKE3L6-QAAAYM"]
[Mon Nov 24 12:57:46.814660 2025] [:error] [pid 16549:tid 16553] [client 4.211.111.86:37803] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fh26.php"] [unique_id "aSPlyqeWW19A99PUw_cUUwAAAUE"]
[Mon Nov 24 12:57:47.514604 2025] [:error] [pid 16441:tid 16446] [client 4.211.111.86:37824] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fh26.php"] [unique_id "aSPly4q_bc5MOa9Hflnb_AAAAII"]
[Mon Nov 24 12:57:48.309981 2025] [:error] [pid 16441:tid 16449] [client 4.211.111.86:37804] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSPlzIq_bc5MOa9Hflnb_QAAAIU"]
[Mon Nov 24 12:57:49.052118 2025] [:error] [pid 49900:tid 49912] [client 4.211.111.86:37872] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSPlzTCyPLrvg06aornWkQAAAAo"]
[Mon Nov 24 12:57:49.902000 2025] [:error] [pid 48688:tid 48704] [client 4.211.111.86:37886] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSPlzRm2q1FkzLam7A1xBAAAAkw"]
[Mon Nov 24 12:57:50.664909 2025] [:error] [pid 48688:tid 48697] [client 4.211.111.86:37775] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSPlzhm2q1FkzLam7A1xBQAAAkU"]
[Mon Nov 24 12:57:51.278045 2025] [:error] [pid 16549:tid 16552] [client 4.211.111.86:37795] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "aSPlz6eWW19A99PUw_cUVwAAAUA"]
[Mon Nov 24 12:57:52.046429 2025] [:error] [pid 48601:tid 48666] [client 4.211.111.86:37869] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "aSPl0IMM4MaVTk74-AaBUQAAAgk"]
[Mon Nov 24 12:57:52.733806 2025] [:error] [pid 9630:tid 9651] [client 4.211.111.86:37769] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "aSPl0CrSgUgPGkizt2qsrAAAAFM"]
[Mon Nov 24 12:57:55.260441 2025] [:error] [pid 48599:tid 48625] [client 4.211.111.86:37861] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "aSPl05zvu6PDJiRKE3L6_AAAAZY"]
[Mon Nov 24 12:57:56.730837 2025] [:error] [pid 16593:tid 16595] [client 4.211.111.86:37771] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lx.php"] [unique_id "aSPl1BVGznHBJI2LKpQX4gAAAoA"]
[Mon Nov 24 12:57:57.796127 2025] [:error] [pid 48600:tid 48638] [client 4.211.111.86:37801] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lx.php"] [unique_id "aSPl1ftOzSUAQvWVjBdWxwAAAcg"]
[Mon Nov 24 12:57:58.782384 2025] [:error] [pid 48599:tid 48623] [client 4.211.111.86:37844] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lx.php"] [unique_id "aSPl1pzvu6PDJiRKE3L6_wAAAZQ"]
[Mon Nov 24 12:57:59.577366 2025] [:error] [pid 16441:tid 16455] [client 4.211.111.86:37874] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lx.php"] [unique_id "aSPl14q_bc5MOa9HflncAgAAAIs"]
[Mon Nov 24 12:58:00.546141 2025] [:error] [pid 9630:tid 9640] [client 4.211.111.86:37788] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w1w.php"] [unique_id "aSPl2CrSgUgPGkizt2qsrQAAAEg"]
[Mon Nov 24 12:58:01.304903 2025] [:error] [pid 16441:tid 16463] [client 4.211.111.86:37834] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w1w.php"] [unique_id "aSPl2Yq_bc5MOa9HflncBAAAAJM"]
[Mon Nov 24 12:58:01.995650 2025] [:error] [pid 48688:tid 48709] [client 4.211.111.86:37699] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w1w.php"] [unique_id "aSPl2Rm2q1FkzLam7A1xDAAAAlE"]
[Mon Nov 24 12:58:02.965974 2025] [:error] [pid 16441:tid 16468] [client 4.211.111.86:37705] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w1w.php"] [unique_id "aSPl2oq_bc5MOa9HflncBQAAAJg"]
[Mon Nov 24 12:58:03.719419 2025] [:error] [pid 49900:tid 49913] [client 4.211.111.86:37820] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cafe.php"] [unique_id "aSPl2zCyPLrvg06aornWlAAAAAs"]
[Mon Nov 24 12:58:04.636621 2025] [:error] [pid 48599:tid 48604] [client 4.211.111.86:37828] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cafe.php"] [unique_id "aSPl3Jzvu6PDJiRKE3L7AAAAAYE"]
[Mon Nov 24 12:58:05.809077 2025] [:error] [pid 16441:tid 16456] [client 4.211.111.86:37724] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cafe.php"] [unique_id "aSPl3Yq_bc5MOa9HflncBgAAAIw"]
[Mon Nov 24 12:58:06.902423 2025] [:error] [pid 48601:tid 48678] [client 4.211.111.86:37781] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cafe.php"] [unique_id "aSPl3oMM4MaVTk74-AaBXAAAAhU"]
[Mon Nov 24 12:58:07.536414 2025] [:error] [pid 16516:tid 16529] [client 4.211.111.86:37840] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww2.php"] [unique_id "aSPl3_qZbniwaNwL8XnBkAAAAQo"]
[Mon Nov 24 12:58:08.527180 2025] [:error] [pid 49900:tid 49911] [client 4.211.111.86:37857] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww2.php"] [unique_id "aSPl4DCyPLrvg06aornWlgAAAAk"]
[Mon Nov 24 12:58:09.216103 2025] [:error] [pid 48600:tid 48649] [client 4.211.111.86:37876] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww2.php"] [unique_id "aSPl4ftOzSUAQvWVjBdWyQAAAdM"]
[Mon Nov 24 12:58:09.957132 2025] [:error] [pid 49900:tid 49925] [client 4.211.111.86:37701] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww2.php"] [unique_id "aSPl4TCyPLrvg06aornWmAAAABc"]
[Mon Nov 24 12:58:10.863801 2025] [:error] [pid 16549:tid 16554] [client 4.211.111.86:37814] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww3.php"] [unique_id "aSPl4qeWW19A99PUw_cUXAAAAUI"]
[Mon Nov 24 12:58:11.762933 2025] [:error] [pid 48601:tid 48660] [client 4.211.111.86:37833] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww3.php"] [unique_id "aSPl44MM4MaVTk74-AaBXgAAAgM"]
[Mon Nov 24 12:58:12.351013 2025] [:error] [pid 9630:tid 9638] [client 4.211.111.86:37650] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww3.php"] [unique_id "aSPl5CrSgUgPGkizt2qssgAAAEY"]
[Mon Nov 24 12:58:13.071766 2025] [:error] [pid 9630:tid 9647] [client 4.211.111.86:37829] File does not exist: /usr/local/apache/htdocs/suspended-page/ww3.php
[Mon Nov 24 12:58:13.409300 2025] [:error] [pid 9630:tid 9637] [client 4.211.111.86:37829] File does not exist: /usr/local/apache/htdocs/suspended-page/ww4.php
[Mon Nov 24 12:58:13.676535 2025] [:error] [pid 9630:tid 9641] [client 4.211.111.86:37829] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Nov 24 12:58:13.918884 2025] [:error] [pid 9630:tid 9648] [client 4.211.111.86:37829] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Mon Nov 24 12:58:14.234848 2025] [:error] [pid 9630:tid 9650] [client 4.211.111.86:37829] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Nov 24 12:58:14.539333 2025] [:error] [pid 9630:tid 9636] [client 4.211.111.86:37829] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Mon Nov 24 12:58:14.778821 2025] [:error] [pid 9630:tid 9649] [client 4.211.111.86:37829] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Mon Nov 24 12:58:15.040178 2025] [:error] [pid 9630:tid 9646] [client 4.211.111.86:37829] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Nov 24 12:58:15.779124 2025] [:error] [pid 9630:tid 9632] [client 4.211.111.86:37829] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Mon Nov 24 12:58:16.017587 2025] [:error] [pid 9630:tid 9653] [client 4.211.111.86:37829] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "aSPl6CrSgUgPGkizt2qsvwAAAFU"]
[Mon Nov 24 12:58:16.813164 2025] [:error] [pid 49900:tid 49909] [client 4.211.111.86:37704] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "aSPl6DCyPLrvg06aornWmwAAAAc"]
[Mon Nov 24 12:58:17.706680 2025] [:error] [pid 48688:tid 48716] [client 4.211.111.86:37825] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "aSPl6Rm2q1FkzLam7A1xEQAAAlg"]
[Mon Nov 24 12:58:18.686065 2025] [:error] [pid 16441:tid 16452] [client 4.211.111.86:37841] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "aSPl6oq_bc5MOa9HflncCwAAAIg"]
[Mon Nov 24 12:58:19.934744 2025] [:error] [pid 16441:tid 16450] [client 4.211.111.86:37821] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "aSPl64q_bc5MOa9HflncDQAAAIY"]
[Mon Nov 24 12:58:21.025428 2025] [:error] [pid 9630:tid 9643] [client 4.211.111.86:37818] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "aSPl7SrSgUgPGkizt2qswgAAAEs"]
[Mon Nov 24 12:58:21.765125 2025] [:error] [pid 16549:tid 16574] [client 4.211.111.86:37867] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "aSPl7aeWW19A99PUw_cUXQAAAVU"]
[Mon Nov 24 12:58:22.402219 2025] [:error] [pid 16516:tid 16541] [client 4.211.111.86:37865] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "aSPl7vqZbniwaNwL8XnBmgAAARY"]
[Mon Nov 24 12:58:23.514887 2025] [:error] [pid 16593:tid 16601] [client 4.211.111.86:37813] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSPl7xVGznHBJI2LKpQX8gAAAoY"]
[Mon Nov 24 12:58:24.826032 2025] [:error] [pid 16516:tid 16536] [client 4.211.111.86:37765] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSPl8PqZbniwaNwL8XnBnQAAARE"]
[Mon Nov 24 12:58:25.482592 2025] [:error] [pid 48601:tid 48681] [client 4.211.111.86:37815] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSPl8YMM4MaVTk74-AaBZQAAAhg"]
[Mon Nov 24 12:58:26.673758 2025] [:error] [pid 48601:tid 48675] [client 4.211.111.86:37842] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSPl8oMM4MaVTk74-AaBZwAAAhI"]
[Mon Nov 24 12:58:27.454016 2025] [:error] [pid 48599:tid 48621] [client 4.211.111.86:37868] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSPl85zvu6PDJiRKE3L7CAAAAZI"]
[Mon Nov 24 12:58:28.236181 2025] [:error] [pid 48688:tid 48714] [client 4.211.111.86:37827] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSPl9Bm2q1FkzLam7A1xFQAAAlY"]
[Mon Nov 24 12:58:29.072314 2025] [:error] [pid 16549:tid 16561] [client 4.211.111.86:37767] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSPl9aeWW19A99PUw_cUYAAAAUk"]
[Mon Nov 24 12:58:30.314083 2025] [:error] [pid 49900:tid 49903] [client 4.211.111.86:37816] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "aSPl9jCyPLrvg06aornWnQAAAAE"]
[Mon Nov 24 12:58:31.284177 2025] [:error] [pid 48688:tid 48713] [client 4.211.111.86:37710] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow3.php"] [unique_id "aSPl9xm2q1FkzLam7A1xGQAAAlU"]
[Mon Nov 24 12:58:32.297002 2025] [:error] [pid 16441:tid 16462] [client 4.211.111.86:37712] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow3.php"] [unique_id "aSPl-Iq_bc5MOa9HflncDwAAAJI"]
[Mon Nov 24 12:58:33.294120 2025] [:error] [pid 9630:tid 9646] [client 4.211.111.86:37719] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow3.php"] [unique_id "aSPl-SrSgUgPGkizt2qsxwAAAE4"]
[Mon Nov 24 12:58:34.141277 2025] [:error] [pid 16441:tid 16453] [client 4.211.111.86:37749] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow3.php"] [unique_id "aSPl-oq_bc5MOa9HflncEgAAAIk"]
[Mon Nov 24 12:58:35.349299 2025] [:error] [pid 16516:tid 16537] [client 4.211.111.86:37809] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSPl-_qZbniwaNwL8XnBoAAAARI"]
[Mon Nov 24 12:58:36.625608 2025] [:error] [pid 9630:tid 9651] [client 4.211.111.86:37836] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSPl_CrSgUgPGkizt2qszQAAAFM"]
[Mon Nov 24 12:58:37.642701 2025] [:error] [pid 48599:tid 48607] [client 4.211.111.86:37789] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSPl_Zzvu6PDJiRKE3L7DQAAAYQ"]
[Mon Nov 24 12:58:38.714366 2025] [:error] [pid 16516:tid 16532] [client 4.211.111.86:37697] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSPl_vqZbniwaNwL8XnBogAAAQ0"]
[Mon Nov 24 12:58:39.608038 2025] [:error] [pid 16441:tid 16445] [client 4.211.111.86:37733] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fw.php"] [unique_id "aSPl_4q_bc5MOa9HflncHAAAAIE"]
[Mon Nov 24 12:58:40.464529 2025] [:error] [pid 16441:tid 16460] [client 4.211.111.86:37782] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fw.php"] [unique_id "aSPmAIq_bc5MOa9HflncKQAAAJA"]
[Mon Nov 24 12:58:41.472139 2025] [:error] [pid 48688:tid 48708] [client 4.211.111.86:37819] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fw.php"] [unique_id "aSPmARm2q1FkzLam7A1xHQAAAlA"]
[Mon Nov 24 12:58:42.261302 2025] [:error] [pid 9630:tid 9648] [client 4.211.111.86:37748] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fw.php"] [unique_id "aSPmAirSgUgPGkizt2qs0AAAAFA"]
[Mon Nov 24 12:58:42.978772 2025] [:error] [pid 16593:tid 16609] [client 4.211.111.86:37796] [client 4.211.111.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSPmAhVGznHBJI2LKpQX-gAAAo4"]
[Mon Nov 24 12:58:43.888312 2025] [:error] [pid 9630:tid 9646] [client 4.211.111.86:37702] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "aSPmAyrSgUgPGkizt2qs0gAAAE4"]
[Mon Nov 24 12:58:45.131475 2025] [:error] [pid 16549:tid 16568] [client 4.211.111.86:37856] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "aSPmBaeWW19A99PUw_cUZAAAAVA"]
[Mon Nov 24 12:58:46.901421 2025] [:error] [pid 16549:tid 16569] [client 4.211.111.86:37772] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "aSPmBqeWW19A99PUw_cUZQAAAVE"]
[Mon Nov 24 12:58:47.427480 2025] [:error] [pid 16593:tid 16612] [client 4.211.111.86:37633] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "aSPmBxVGznHBJI2LKpQX_AAAApE"]
[Mon Nov 24 12:58:48.117633 2025] [:error] [pid 16549:tid 16564] [client 4.211.111.86:37792] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aSPmCKeWW19A99PUw_cUZgAAAUw"]
[Mon Nov 24 12:58:48.961389 2025] [:error] [pid 16549:tid 16563] [client 4.211.111.86:37802] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aSPmCKeWW19A99PUw_cUZwAAAUs"]
[Mon Nov 24 12:58:49.635946 2025] [:error] [pid 48601:tid 48668] [client 4.211.111.86:37871] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aSPmCYMM4MaVTk74-AaBeAAAAgs"]
[Mon Nov 24 12:58:50.449983 2025] [:error] [pid 16516:tid 16526] [client 4.211.111.86:37808] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/co.php"] [unique_id "aSPmCvqZbniwaNwL8XnBqQAAAQc"]
[Mon Nov 24 12:58:51.736831 2025] [:error] [pid 9630:tid 9637] [client 4.211.111.86:37732] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSPmCyrSgUgPGkizt2qs2gAAAEU"]
[Mon Nov 24 12:58:53.630677 2025] [:error] [pid 16441:tid 16466] [client 4.211.111.86:37863] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSPmDYq_bc5MOa9HflncPQAAAJY"]
[Mon Nov 24 12:58:54.943801 2025] [:error] [pid 16549:tid 16571] [client 4.211.111.86:37810] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSPmDqeWW19A99PUw_cUaQAAAVI"]
[Mon Nov 24 12:58:56.125771 2025] [:error] [pid 9630:tid 9650] [client 4.211.111.86:37843] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "aSPmECrSgUgPGkizt2qs3gAAAFI"]
[Mon Nov 24 12:58:57.022361 2025] [:error] [pid 49900:tid 49914] [client 4.211.111.86:37755] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aSPmETCyPLrvg06aornWpQAAAAw"]
[Mon Nov 24 12:58:57.899067 2025] [:error] [pid 49900:tid 49926] [client 4.211.111.86:37740] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aSPmETCyPLrvg06aornWpgAAABg"]
[Mon Nov 24 12:58:59.419333 2025] [:error] [pid 49900:tid 49910] [client 4.211.111.86:37862] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aSPmEzCyPLrvg06aornWqAAAAAg"]
[Mon Nov 24 12:59:00.889355 2025] [:error] [pid 48599:tid 48618] [client 4.211.111.86:37791] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aSPmFJzvu6PDJiRKE3L7FwAAAY8"]
[Mon Nov 24 12:59:01.855232 2025] [:error] [pid 48688:tid 48715] [client 4.211.111.86:37817] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSPmFRm2q1FkzLam7A1xIgAAAlc"]
[Mon Nov 24 12:59:03.206395 2025] [:error] [pid 16441:tid 16450] [client 4.211.111.86:37812] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSPmF4q_bc5MOa9HflncQgAAAIY"]
[Mon Nov 24 12:59:04.230969 2025] [:error] [pid 16516:tid 16522] [client 4.211.111.86:37709] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSPmGPqZbniwaNwL8XnBrgAAAQM"]
[Mon Nov 24 12:59:04.981229 2025] [:error] [pid 16441:tid 16454] [client 4.211.111.86:37880] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSPmGIq_bc5MOa9HflncRQAAAIo"]
[Mon Nov 24 12:59:05.859794 2025] [:error] [pid 48599:tid 48613] [client 4.211.111.86:37728] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSPmGZzvu6PDJiRKE3L7HAAAAYo"]
[Mon Nov 24 12:59:06.594441 2025] [:error] [pid 49900:tid 49915] [client 4.211.111.86:37700] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSPmGjCyPLrvg06aornWqwAAAA0"]
[Mon Nov 24 12:59:07.228220 2025] [:error] [pid 16549:tid 16562] [client 4.211.111.86:37731] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSPmG6eWW19A99PUw_cUewAAAUo"]
[Mon Nov 24 12:59:07.971426 2025] [:error] [pid 16441:tid 16456] [client 4.211.111.86:37741] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSPmG4q_bc5MOa9HflncSAAAAIw"]
[Mon Nov 24 12:59:08.936169 2025] [:error] [pid 48601:tid 48679] [client 4.211.111.86:37714] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aSPmHIMM4MaVTk74-AaBigAAAhY"]
[Mon Nov 24 12:59:09.617791 2025] [:error] [pid 48601:tid 48677] [client 4.211.111.86:37662] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aSPmHYMM4MaVTk74-AaBiwAAAhQ"]
[Mon Nov 24 12:59:10.273997 2025] [:error] [pid 9630:tid 9634] [client 4.211.111.86:37717] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aSPmHirSgUgPGkizt2qtDAAAAEI"]
[Mon Nov 24 12:59:10.871335 2025] [:error] [pid 9630:tid 9638] [client 4.211.111.86:37763] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aSPmHirSgUgPGkizt2qtDQAAAEY"]
[Mon Nov 24 12:59:11.591097 2025] [:error] [pid 9630:tid 9637] [client 4.211.111.86:37831] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSPmHyrSgUgPGkizt2qtDwAAAEU"]
[Mon Nov 24 12:59:12.234902 2025] [:error] [pid 48688:tid 48710] [client 4.211.111.86:37853] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSPmIBm2q1FkzLam7A1xJgAAAlI"]
[Mon Nov 24 12:59:12.907114 2025] [:error] [pid 16441:tid 16461] [client 4.211.111.86:37670] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSPmIIq_bc5MOa9HflncSwAAAJE"]
[Mon Nov 24 12:59:13.556303 2025] [:error] [pid 16549:tid 16567] [client 4.211.111.86:37830] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSPmIaeWW19A99PUw_cUfQAAAU8"]
[Mon Nov 24 12:59:14.490973 2025] [:error] [pid 16549:tid 16559] [client 4.211.111.86:37635] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/function.php"] [unique_id "aSPmIqeWW19A99PUw_cUgAAAAUc"]
[Mon Nov 24 12:59:15.462895 2025] [:error] [pid 49900:tid 49913] [client 4.211.111.86:37811] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Mon Nov 24 12:59:15.710429 2025] [:error] [pid 49900:tid 49922] [client 4.211.111.86:37811] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Mon Nov 24 12:59:16.034846 2025] [:error] [pid 49900:tid 49925] [client 4.211.111.86:37811] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Mon Nov 24 12:59:16.786880 2025] [:error] [pid 49900:tid 49902] [client 4.211.111.86:37811] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Nov 24 12:59:17.068175 2025] [:error] [pid 49900:tid 49904] [client 4.211.111.86:37811] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Nov 24 12:59:17.553170 2025] [:error] [pid 49900:tid 49926] [client 4.211.111.86:37811] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Mon Nov 24 12:59:17.809832 2025] [:error] [pid 49900:tid 49910] [client 4.211.111.86:37811] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon Nov 24 12:59:18.079795 2025] [:error] [pid 49900:tid 49909] [client 4.211.111.86:37811] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Mon Nov 24 12:59:18.332095 2025] [:error] [pid 49900:tid 49921] [client 4.211.111.86:37811] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moon.php"] [unique_id "aSPmJjCyPLrvg06aornWuwAAABM"]
[Mon Nov 24 12:59:19.066089 2025] [:error] [pid 48688:tid 48713] [client 4.211.111.86:37838] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moon.php"] [unique_id "aSPmJxm2q1FkzLam7A1xKAAAAlU"]
[Mon Nov 24 12:59:19.938107 2025] [:error] [pid 16593:tid 16596] [client 4.211.111.86:37783] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moon.php"] [unique_id "aSPmJxVGznHBJI2LKpQYCgAAAoE"]
[Mon Nov 24 12:59:20.850925 2025] [:error] [pid 48601:tid 48680] [client 4.211.111.86:37887] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moon.php"] [unique_id "aSPmKIMM4MaVTk74-AaBjgAAAhc"]
[Mon Nov 24 12:59:21.528711 2025] [:error] [pid 9630:tid 9632] [client 4.211.111.86:37643] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSPmKSrSgUgPGkizt2qtEgAAAEA"]
[Mon Nov 24 12:59:22.381352 2025] [:error] [pid 16441:tid 16457] [client 4.211.111.86:37839] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSPmKoq_bc5MOa9HflncTgAAAI0"]
[Mon Nov 24 12:59:23.719762 2025] [:error] [pid 16593:tid 16613] [client 4.211.111.86:37744] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSPmKxVGznHBJI2LKpQYDAAAApI"]
[Mon Nov 24 12:59:24.887977 2025] [:error] [pid 48601:tid 48676] [client 4.211.111.86:37723] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "aSPmLIMM4MaVTk74-AaBjwAAAhM"]
[Mon Nov 24 12:59:25.657682 2025] [:error] [pid 16441:tid 16447] [client 4.211.111.86:37785] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aSPmLYq_bc5MOa9HflncVwAAAIM"]
[Mon Nov 24 12:59:26.304042 2025] [:error] [pid 16516:tid 16528] [client 4.211.111.86:37730] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aSPmLvqZbniwaNwL8XnBsQAAAQk"]
[Mon Nov 24 12:59:27.157901 2025] [:error] [pid 48601:tid 48674] [client 4.211.111.86:37706] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aSPmL4MM4MaVTk74-AaBkgAAAhE"]
[Mon Nov 24 12:59:28.119999 2025] [:error] [pid 48601:tid 48671] [client 4.211.111.86:37649] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aSPmMIMM4MaVTk74-AaBlQAAAg4"]
[Mon Nov 24 12:59:28.808521 2025] [:error] [pid 48600:tid 48646] [client 4.211.111.86:37794] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSPmMPtOzSUAQvWVjBdW4AAAAdA"]
[Mon Nov 24 12:59:29.603413 2025] [:error] [pid 16593:tid 16600] [client 4.211.111.86:37823] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSPmMRVGznHBJI2LKpQYDQAAAoU"]
[Mon Nov 24 12:59:30.582906 2025] [:error] [pid 49900:tid 49913] [client 4.211.111.86:37760] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSPmMjCyPLrvg06aornWwAAAAAs"]
[Mon Nov 24 12:59:31.291933 2025] [:error] [pid 48599:tid 48607] [client 4.211.111.86:37734] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSPmM5zvu6PDJiRKE3L7JQAAAYQ"]
[Mon Nov 24 12:59:32.083697 2025] [:error] [pid 48599:tid 48604] [client 4.211.111.86:37779] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSPmNJzvu6PDJiRKE3L7JgAAAYE"]
[Mon Nov 24 12:59:32.811972 2025] [:error] [pid 16593:tid 16595] [client 4.211.111.86:37642] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSPmNBVGznHBJI2LKpQYEAAAAoA"]
[Mon Nov 24 12:59:33.503833 2025] [:error] [pid 16593:tid 16610] [client 4.211.111.86:37727] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSPmNRVGznHBJI2LKpQYEQAAAo8"]
[Mon Nov 24 12:59:34.243853 2025] [:error] [pid 9630:tid 9649] [client 4.211.111.86:37675] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "aSPmNirSgUgPGkizt2qtGQAAAFE"]
[Mon Nov 24 12:59:35.384163 2025] [:error] [pid 16593:tid 16608] [client 4.211.111.86:37800] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSPmNxVGznHBJI2LKpQYFAAAAo0"]
[Mon Nov 24 12:59:36.221207 2025] [:error] [pid 48599:tid 48605] [client 4.211.111.86:37666] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSPmOJzvu6PDJiRKE3L7KgAAAYI"]
[Mon Nov 24 12:59:36.996945 2025] [:error] [pid 9630:tid 9650] [client 4.211.111.86:37736] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSPmOCrSgUgPGkizt2qtGwAAAFI"]
[Mon Nov 24 12:59:37.715744 2025] [:error] [pid 9630:tid 9641] [client 4.211.111.86:37786] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "aSPmOSrSgUgPGkizt2qtHAAAAEk"]
[Mon Nov 24 12:59:38.437392 2025] [:error] [pid 16549:tid 16576] [client 4.211.111.86:37848] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSPmOqeWW19A99PUw_cUhQAAAVc"]
[Mon Nov 24 12:59:39.014946 2025] [:error] [pid 16549:tid 16571] [client 4.211.111.86:37754] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSPmO6eWW19A99PUw_cUhgAAAVI"]
[Mon Nov 24 12:59:39.658485 2025] [:error] [pid 9630:tid 9654] [client 4.211.111.86:37671] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSPmOyrSgUgPGkizt2qtHQAAAFY"]
[Mon Nov 24 12:59:40.358636 2025] [:error] [pid 48688:tid 48711] [client 4.211.111.86:37807] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aSPmPBm2q1FkzLam7A1xMwAAAlM"]
[Mon Nov 24 12:59:41.444383 2025] [:error] [pid 9630:tid 9656] [client 4.211.111.86:37573] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSPmPSrSgUgPGkizt2qtHgAAAFg"]
[Mon Nov 24 12:59:42.027363 2025] [:error] [pid 16441:tid 16459] [client 4.211.111.86:37634] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSPmPoq_bc5MOa9HflncYwAAAI8"]
[Mon Nov 24 12:59:42.658341 2025] [:error] [pid 48600:tid 48652] [client 4.211.111.86:37729] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSPmPvtOzSUAQvWVjBdW4wAAAdY"]
[Mon Nov 24 12:59:43.720046 2025] [:error] [pid 16549:tid 16574] [client 4.211.111.86:37885] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aSPmP6eWW19A99PUw_cUiAAAAVU"]
[Mon Nov 24 12:59:44.414183 2025] [:error] [pid 16593:tid 16618] [client 4.211.111.86:37676] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSPmQBVGznHBJI2LKpQYHAAAApc"]
[Mon Nov 24 12:59:45.016979 2025] [:error] [pid 48601:tid 48660] [client 4.211.111.86:37790] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSPmQYMM4MaVTk74-AaBowAAAgM"]
[Mon Nov 24 12:59:45.679813 2025] [:error] [pid 48600:tid 48653] [client 4.211.111.86:37716] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSPmQftOzSUAQvWVjBdW6AAAAdc"]
[Mon Nov 24 12:59:46.566724 2025] [:error] [pid 48599:tid 48612] [client 4.211.111.86:37726] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSPmQpzvu6PDJiRKE3L7LwAAAYk"]
[Mon Nov 24 12:59:47.674120 2025] [:error] [pid 48601:tid 48672] [client 4.211.111.86:37742] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSPmQ4MM4MaVTk74-AaBpwAAAg8"]
[Mon Nov 24 12:59:49.049500 2025] [:error] [pid 9630:tid 9652] [client 4.211.111.86:37737] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSPmRSrSgUgPGkizt2qtKQAAAFQ"]
[Mon Nov 24 12:59:50.092657 2025] [:error] [pid 48599:tid 48604] [client 4.211.111.86:37743] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSPmRpzvu6PDJiRKE3L7NAAAAYE"]
[Mon Nov 24 12:59:50.941513 2025] [:error] [pid 48601:tid 48679] [client 4.211.111.86:37645] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSPmRoMM4MaVTk74-AaBqQAAAhY"]
[Mon Nov 24 12:59:51.530662 2025] [:error] [pid 9630:tid 9655] [client 4.211.111.86:37799] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "aSPmRyrSgUgPGkizt2qtLQAAAFc"]
[Mon Nov 24 12:59:52.103485 2025] [:error] [pid 48600:tid 48641] [client 4.211.111.86:37739] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "aSPmSPtOzSUAQvWVjBdXEwAAAcs"]
[Mon Nov 24 12:59:52.754889 2025] [:error] [pid 16516:tid 16520] [client 4.211.111.86:37601] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "aSPmSPqZbniwaNwL8XnBtgAAAQE"]
[Mon Nov 24 12:59:54.115080 2025] [:error] [pid 16549:tid 16577] [client 4.211.111.86:37713] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "aSPmSqeWW19A99PUw_cUnAAAAVg"]
[Mon Nov 24 12:59:55.360161 2025] [:error] [pid 16593:tid 16600] [client 4.211.111.86:37678] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "aSPmSxVGznHBJI2LKpQYMQAAAoU"]
[Mon Nov 24 12:59:56.835519 2025] [:error] [pid 9630:tid 9635] [client 4.211.111.86:37685] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "aSPmTCrSgUgPGkizt2qtMQAAAEM"]
[Mon Nov 24 12:59:57.731443 2025] [:error] [pid 48599:tid 48608] [client 4.211.111.86:37677] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "aSPmTZzvu6PDJiRKE3L7NQAAAYU"]
[Mon Nov 24 12:59:58.508530 2025] [:error] [pid 48599:tid 48627] [client 4.211.111.86:37883] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "aSPmTpzvu6PDJiRKE3L7NgAAAZg"]
[Mon Nov 24 12:59:59.243108 2025] [:error] [pid 48599:tid 48613] [client 4.211.111.86:37641] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSPmT5zvu6PDJiRKE3L7NwAAAYo"]
[Mon Nov 24 13:00:00.014623 2025] [:error] [pid 48688:tid 48709] [client 4.211.111.86:37806] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSPmUBm2q1FkzLam7A1xPAAAAlE"]
[Mon Nov 24 13:00:00.993617 2025] [:error] [pid 16593:tid 16615] [client 4.211.111.86:37672] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSPmUBVGznHBJI2LKpQYNQAAApQ"]
[Mon Nov 24 13:00:01.769391 2025] [:error] [pid 16516:tid 16533] [client 4.211.111.86:37708] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "aSPmUfqZbniwaNwL8XnBvAAAAQ4"]
[Mon Nov 24 13:00:02.656571 2025] [:error] [pid 9630:tid 9637] [client 4.211.111.86:37632] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSPmUirSgUgPGkizt2qtMgAAAEU"]
[Mon Nov 24 13:00:03.705784 2025] [:error] [pid 16441:tid 16446] [client 4.211.111.86:37798] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSPmU4q_bc5MOa9HflncegAAAII"]
[Mon Nov 24 13:00:04.457623 2025] [:error] [pid 16441:tid 16455] [client 4.211.111.86:37653] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSPmVIq_bc5MOa9HflncfQAAAIs"]
[Mon Nov 24 13:00:05.032419 2025] [:error] [pid 16441:tid 16448] [client 4.211.111.86:37805] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "aSPmVYq_bc5MOa9HflncfwAAAIQ"]
[Mon Nov 24 13:00:05.798221 2025] [:error] [pid 16441:tid 16445] [client 4.211.111.86:37607] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSPmVYq_bc5MOa9HflncgAAAAIE"]
[Mon Nov 24 13:00:06.490131 2025] [:error] [pid 16549:tid 16566] [client 4.211.111.86:37629] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSPmVqeWW19A99PUw_cUnQAAAU4"]
[Mon Nov 24 13:00:07.125742 2025] [:error] [pid 9630:tid 9644] [client 4.211.111.86:37590] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSPmVyrSgUgPGkizt2qtNQAAAEw"]
[Mon Nov 24 13:00:08.053436 2025] [:error] [pid 9630:tid 9646] [client 4.211.111.86:37759] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSPmWCrSgUgPGkizt2qtOAAAAE4"]
[Mon Nov 24 13:00:08.824288 2025] [:error] [pid 16593:tid 16597] [client 4.211.111.86:37797] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSPmWBVGznHBJI2LKpQYOAAAAoI"]
[Mon Nov 24 13:00:09.671457 2025] [:error] [pid 48601:tid 48673] [client 4.211.111.86:37644] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSPmWYMM4MaVTk74-AaBrwAAAhA"]
[Mon Nov 24 13:00:10.448824 2025] [:error] [pid 48688:tid 48695] [client 4.211.111.86:37718] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSPmWhm2q1FkzLam7A1xQAAAAkM"]
[Mon Nov 24 13:00:11.208422 2025] [:error] [pid 16441:tid 16459] [client 4.211.111.86:37787] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aSPmW4q_bc5MOa9HflncggAAAI8"]
[Mon Nov 24 13:00:11.998763 2025] [:error] [pid 48688:tid 48698] [client 4.211.111.86:37879] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "aSPmWxm2q1FkzLam7A1xQgAAAkY"]
[Mon Nov 24 13:00:13.095918 2025] [:error] [pid 16593:tid 16596] [client 4.211.111.86:37757] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "aSPmXRVGznHBJI2LKpQYOQAAAoE"]
[Mon Nov 24 13:00:13.897703 2025] [:error] [pid 48688:tid 48696] [client 4.211.111.86:37735] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "aSPmXRm2q1FkzLam7A1xRQAAAkQ"]
[Mon Nov 24 13:00:14.754226 2025] [:error] [pid 16516:tid 16521] [client 4.211.111.86:37722] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "aSPmXvqZbniwaNwL8XnBvQAAAQI"]
[Mon Nov 24 13:00:16.014615 2025] [:error] [pid 49900:tid 49926] [client 4.211.111.86:37758] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSPmYDCyPLrvg06aornWzQAAABg"]
[Mon Nov 24 13:00:16.808630 2025] [:error] [pid 48688:tid 48692] [client 4.211.111.86:37750] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSPmYBm2q1FkzLam7A1xRgAAAkA"]
[Mon Nov 24 13:00:17.707463 2025] [:error] [pid 16593:tid 16604] [client 4.211.111.86:37657] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aSPmYRVGznHBJI2LKpQYPQAAAok"]
[Mon Nov 24 13:00:18.843566 2025] [:error] [pid 48601:tid 48677] [client 4.211.111.86:37674] File does not exist: /usr/local/apache/htdocs/suspended-page/article.php
[Mon Nov 24 13:00:19.099807 2025] [:error] [pid 48601:tid 48658] [client 4.211.111.86:37674] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Nov 24 13:00:19.349235 2025] [:error] [pid 48601:tid 48659] [client 4.211.111.86:37674] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Nov 24 13:00:19.740621 2025] [:error] [pid 48601:tid 48663] [client 4.211.111.86:37674] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Nov 24 13:00:20.161635 2025] [:error] [pid 48601:tid 48676] [client 4.211.111.86:37674] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Mon Nov 24 13:00:20.431534 2025] [:error] [pid 48601:tid 48669] [client 4.211.111.86:37674] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Mon Nov 24 13:00:21.009813 2025] [:error] [pid 48601:tid 48669] [client 4.211.111.86:37674] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Mon Nov 24 13:00:21.293947 2025] [:error] [pid 48601:tid 48674] [client 4.211.111.86:37674] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Mon Nov 24 13:00:22.212465 2025] [:error] [pid 48601:tid 48681] [client 4.211.111.86:37674] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSPmZoMM4MaVTk74-AaBwgAAAhg"]
[Mon Nov 24 13:00:22.869000 2025] [:error] [pid 48600:tid 48634] [client 4.211.111.86:37655] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSPmZvtOzSUAQvWVjBdXIwAAAcQ"]
[Mon Nov 24 13:00:24.269617 2025] [:error] [pid 16593:tid 16610] [client 4.211.111.86:37696] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSPmaBVGznHBJI2LKpQYPwAAAo8"]
[Mon Nov 24 13:00:26.492865 2025] [:error] [pid 16441:tid 16453] [client 4.211.111.86:37587] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSPmaoq_bc5MOa9HflncmAAAAIk"]
[Mon Nov 24 13:00:27.286388 2025] [:error] [pid 16549:tid 16571] [client 4.211.111.86:37658] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "aSPma6eWW19A99PUw_cUowAAAVI"]
[Mon Nov 24 13:00:28.026890 2025] [:error] [pid 48688:tid 48699] [client 4.211.111.86:37711] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "aSPmbBm2q1FkzLam7A1xSAAAAkc"]
[Mon Nov 24 13:00:30.551288 2025] [:error] [pid 16549:tid 16562] [client 4.211.111.86:37659] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "aSPmbqeWW19A99PUw_cUpQAAAUo"]
[Mon Nov 24 13:00:31.340397 2025] [:error] [pid 16549:tid 16558] [client 4.211.111.86:37583] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "aSPmb6eWW19A99PUw_cUpgAAAUY"]
[Mon Nov 24 13:00:32.289089 2025] [:error] [pid 16441:tid 16460] [client 4.211.111.86:37684] [client 4.211.111.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSPmcIq_bc5MOa9HflncnAAAAJA"]
[Mon Nov 24 13:00:33.257036 2025] [:error] [pid 16441:tid 16463] [client 4.211.111.86:37694] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "aSPmcYq_bc5MOa9HflncnwAAAJM"]
[Mon Nov 24 13:00:33.999057 2025] [:error] [pid 48601:tid 48677] [client 4.211.111.86:37826] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "aSPmcYMM4MaVTk74-AaBxgAAAhQ"]
[Mon Nov 24 13:00:34.654886 2025] [:error] [pid 48601:tid 48658] [client 4.211.111.86:37599] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "aSPmcoMM4MaVTk74-AaBxwAAAgE"]
[Mon Nov 24 13:00:35.553683 2025] [:error] [pid 16441:tid 16466] [client 4.211.111.86:37673] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "aSPmc4q_bc5MOa9HflncpAAAAJY"]
[Mon Nov 24 13:00:36.808062 2025] [:error] [pid 9630:tid 9640] [client 4.211.111.86:37661] [client 4.211.111.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSPmdCrSgUgPGkizt2qtQgAAAEg"]
[Mon Nov 24 13:00:37.705490 2025] [:error] [pid 16549:tid 16557] [client 4.211.111.86:37578] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSPmdaeWW19A99PUw_cUpwAAAUU"]
[Mon Nov 24 13:00:38.468939 2025] [:error] [pid 49900:tid 49925] [client 4.211.111.86:37639] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSPmdjCyPLrvg06aornW2gAAABc"]
[Mon Nov 24 13:00:39.389866 2025] [:error] [pid 48601:tid 48676] [client 4.211.111.86:37691] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSPmd4MM4MaVTk74-AaByQAAAhM"]
[Mon Nov 24 13:00:40.765927 2025] [:error] [pid 16441:tid 16460] [client 4.211.111.86:37541] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aSPmeIq_bc5MOa9HflncpQAAAJA"]
[Mon Nov 24 13:00:41.624746 2025] [:error] [pid 16441:tid 16451] [client 4.211.111.86:37695] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSPmeYq_bc5MOa9HflncpwAAAIc"]
[Mon Nov 24 13:00:42.417478 2025] [:error] [pid 49900:tid 49909] [client 4.211.111.86:37720] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSPmejCyPLrvg06aornW3QAAAAc"]
[Mon Nov 24 13:00:43.472016 2025] [:error] [pid 48688:tid 48702] [client 4.211.111.86:37586] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSPmexm2q1FkzLam7A1xTAAAAko"]
[Mon Nov 24 13:00:44.464224 2025] [:error] [pid 49900:tid 49916] [client 4.211.111.86:37667] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "aSPmfDCyPLrvg06aornW3gAAAA4"]
[Mon Nov 24 13:00:45.341167 2025] [:error] [pid 9630:tid 9650] [client 4.211.111.86:37679] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSPmfSrSgUgPGkizt2qtSgAAAFI"]
[Mon Nov 24 13:00:46.530648 2025] [:error] [pid 48688:tid 48693] [client 4.211.111.86:37738] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSPmfhm2q1FkzLam7A1xTgAAAkE"]
[Mon Nov 24 13:00:47.737090 2025] [:error] [pid 48688:tid 48701] [client 4.211.111.86:37646] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSPmfxm2q1FkzLam7A1xUAAAAkk"]
[Mon Nov 24 13:00:49.193696 2025] [:error] [pid 48688:tid 48695] [client 4.211.111.86:37664] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "aSPmgRm2q1FkzLam7A1xUQAAAkM"]
[Mon Nov 24 13:00:49.789440 2025] [:error] [pid 49900:tid 49908] [client 4.211.111.86:37654] [client 4.211.111.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSPmgTCyPLrvg06aornW3wAAAAY"]
[Mon Nov 24 13:00:50.391445 2025] [:error] [pid 49900:tid 49902] [client 4.211.111.86:37577] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSPmgjCyPLrvg06aornW6gAAAAA"]
[Mon Nov 24 13:00:51.102117 2025] [:error] [pid 48688:tid 48698] [client 4.211.111.86:37665] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSPmgxm2q1FkzLam7A1xUgAAAkY"]
[Mon Nov 24 13:00:51.794663 2025] [:error] [pid 49900:tid 49915] [client 4.211.111.86:37536] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSPmgzCyPLrvg06aornW8wAAAA0"]
[Mon Nov 24 13:00:52.411035 2025] [:error] [pid 16441:tid 16455] [client 4.211.111.86:37793] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSPmhIq_bc5MOa9HflnctQAAAIs"]
[Mon Nov 24 13:00:53.455390 2025] [:error] [pid 16593:tid 16599] [client 4.211.111.86:37638] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSPmhRVGznHBJI2LKpQYQwAAAoQ"]
[Mon Nov 24 13:00:54.120035 2025] [:error] [pid 9630:tid 9640] [client 4.211.111.86:37756] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSPmhirSgUgPGkizt2qtTAAAAEg"]
[Mon Nov 24 13:00:54.913841 2025] [:error] [pid 48688:tid 48714] [client 4.211.111.86:37609] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSPmhhm2q1FkzLam7A1xVAAAAlY"]
[Mon Nov 24 13:00:56.017540 2025] [:error] [pid 49900:tid 49913] [client 4.211.111.86:37568] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/autoload_classmap.php"] [unique_id "aSPmiDCyPLrvg06aornW_QAAAAs"]
[Mon Nov 24 13:00:57.010455 2025] [:error] [pid 16549:tid 16554] [client 4.211.111.86:37647] [client 4.211.111.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSPmiaeWW19A99PUw_cUrAAAAUI"]
[Mon Nov 24 13:00:57.728944 2025] [:error] [pid 48688:tid 48716] [client 4.211.111.86:37751] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww1.php"] [unique_id "aSPmiRm2q1FkzLam7A1xVQAAAlg"]
[Mon Nov 24 13:00:58.894316 2025] [:error] [pid 48601:tid 48674] [client 4.211.111.86:37747] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww1.php"] [unique_id "aSPmioMM4MaVTk74-AaBzgAAAhE"]
[Mon Nov 24 13:00:59.762421 2025] [:error] [pid 16593:tid 16616] [client 4.211.111.86:37687] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww1.php"] [unique_id "aSPmixVGznHBJI2LKpQYTAAAApU"]
[Mon Nov 24 13:01:00.717745 2025] [:error] [pid 16516:tid 16523] [client 4.211.111.86:37683] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww1.php"] [unique_id "aSPmjPqZbniwaNwL8XnBzwAAAQQ"]
[Mon Nov 24 13:01:01.605000 2025] [:error] [pid 48599:tid 48625] [client 4.211.111.86:37652] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqq.php"] [unique_id "aSPmjZzvu6PDJiRKE3L7PgAAAZY"]
[Mon Nov 24 13:01:02.513143 2025] [:error] [pid 49900:tid 49922] [client 4.211.111.86:37637] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqq.php"] [unique_id "aSPmjjCyPLrvg06aornXFAAAABQ"]
[Mon Nov 24 13:01:03.349594 2025] [:error] [pid 48599:tid 48618] [client 4.211.111.86:37613] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqq.php"] [unique_id "aSPmj5zvu6PDJiRKE3L7PwAAAY8"]
[Mon Nov 24 13:01:04.130425 2025] [:error] [pid 16593:tid 16612] [client 4.211.111.86:37585] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqq.php"] [unique_id "aSPmkBVGznHBJI2LKpQYUAAAApE"]
[Mon Nov 24 13:01:04.926756 2025] [:error] [pid 9630:tid 9651] [client 4.211.111.86:37663] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSPmkCrSgUgPGkizt2qtTwAAAFM"]
[Mon Nov 24 13:01:06.128458 2025] [:error] [pid 48599:tid 48617] [client 4.211.111.86:37688] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSPmkpzvu6PDJiRKE3L7QAAAAY4"]
[Mon Nov 24 13:01:06.963441 2025] [:error] [pid 48599:tid 48623] [client 4.211.111.86:37512] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSPmkpzvu6PDJiRKE3L7QQAAAZQ"]
[Mon Nov 24 13:01:07.805636 2025] [:error] [pid 48600:tid 48652] [client 4.211.111.86:37594] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSPmk_tOzSUAQvWVjBdXLQAAAdY"]
[Mon Nov 24 13:01:08.645309 2025] [:error] [pid 48688:tid 48703] [client 4.211.111.86:37515] [client 4.211.111.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSPmlBm2q1FkzLam7A1xVgAAAks"]
[Mon Nov 24 13:01:09.496913 2025] [:error] [pid 16441:tid 16468] [client 4.211.111.86:37875] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/function.php"] [unique_id "aSPmlYq_bc5MOa9HflncxgAAAJg"]
[Mon Nov 24 13:01:10.897385 2025] [:error] [pid 16516:tid 16538] [client 4.211.111.86:37596] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/function.php"] [unique_id "aSPmlvqZbniwaNwL8XnB0wAAARM"]
[Mon Nov 24 13:01:11.659410 2025] [:error] [pid 9630:tid 9638] [client 4.211.111.86:37582] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/function.php"] [unique_id "aSPmlyrSgUgPGkizt2qtUQAAAEY"]
[Mon Nov 24 13:01:12.476329 2025] [:error] [pid 9630:tid 9652] [client 4.211.111.86:37721] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/function.php"] [unique_id "aSPmmCrSgUgPGkizt2qtUgAAAFQ"]
[Mon Nov 24 13:01:13.596517 2025] [:error] [pid 9630:tid 9635] [client 4.211.111.86:37660] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSPmmSrSgUgPGkizt2qtVAAAAEM"]
[Mon Nov 24 13:01:14.418592 2025] [:error] [pid 16549:tid 16576] [client 4.211.111.86:37598] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSPmmqeWW19A99PUw_cUsAAAAVc"]
[Mon Nov 24 13:01:16.802663 2025] [:error] [pid 9630:tid 9655] [client 4.211.111.86:37707] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSPmnCrSgUgPGkizt2qtWgAAAFc"]
[Mon Nov 24 13:01:17.966625 2025] [:error] [pid 49900:tid 49926] [client 4.211.111.86:37686] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSPmnTCyPLrvg06aornXFgAAABg"]
[Mon Nov 24 13:01:18.619019 2025] [:error] [pid 48601:tid 48660] [client 4.211.111.86:37591] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSPmnoMM4MaVTk74-AaB1gAAAgM"]
[Mon Nov 24 13:01:19.539850 2025] [:error] [pid 48601:tid 48658] [client 4.211.111.86:37668] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSPmn4MM4MaVTk74-AaB2AAAAgE"]
[Mon Nov 24 13:01:20.735591 2025] [:error] [pid 48600:tid 48648] [client 4.211.111.86:37602] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/colors/blue/index.php"] [unique_id "aSPmoPtOzSUAQvWVjBdXMAAAAdI"]
[Mon Nov 24 13:01:22.971941 2025] [:error] [pid 16441:tid 16460] [client 4.211.111.86:37669] [client 4.211.111.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSPmooq_bc5MOa9Hflnc0QAAAJA"]
[Mon Nov 24 13:01:26.571123 2025] [:error] [pid 49900:tid 49914] [client 4.211.111.86:37884] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/log.php"] [unique_id "aSPmpjCyPLrvg06aornXJQAAAAw"]
[Mon Nov 24 13:01:28.075909 2025] [:error] [pid 9630:tid 9654] [client 4.211.111.86:37522] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/log.php"] [unique_id "aSPmqCrSgUgPGkizt2qtaAAAAFY"]
[Mon Nov 24 13:01:28.975023 2025] [:error] [pid 48600:tid 48641] [client 4.211.111.86:37627] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/log.php"] [unique_id "aSPmqPtOzSUAQvWVjBdXMwAAAcs"]
[Mon Nov 24 13:01:29.909027 2025] [:error] [pid 16549:tid 16557] [client 4.211.111.86:37680] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/log.php"] [unique_id "aSPmqaeWW19A99PUw_cUtAAAAUU"]
[Mon Nov 24 13:01:30.767321 2025] [:error] [pid 16441:tid 16466] [client 4.211.111.86:37611] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "aSPmqoq_bc5MOa9Hflnc1QAAAJY"]
[Mon Nov 24 13:01:31.436504 2025] [:error] [pid 9630:tid 9652] [client 4.211.111.86:37625] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "aSPmqyrSgUgPGkizt2qtagAAAFQ"]
[Mon Nov 24 13:01:32.151431 2025] [:error] [pid 16549:tid 16569] [client 4.211.111.86:37626] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "aSPmrKeWW19A99PUw_cUtgAAAVE"]
[Mon Nov 24 13:01:33.016680 2025] [:error] [pid 49900:tid 49920] [client 4.211.111.86:37581] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "aSPmrTCyPLrvg06aornXKAAAABI"]
[Mon Nov 24 13:01:34.134234 2025] [:error] [pid 48599:tid 48606] [client 4.211.111.86:37580] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "aSPmrpzvu6PDJiRKE3L7RgAAAYM"]
[Mon Nov 24 13:01:35.199761 2025] [:error] [pid 49900:tid 49916] [client 4.211.111.86:37574] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "aSPmrzCyPLrvg06aornXLQAAAA4"]
[Mon Nov 24 13:01:36.286224 2025] [:error] [pid 48601:tid 48665] [client 4.211.111.86:37505] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "aSPmsIMM4MaVTk74-AaB5AAAAgg"]
[Mon Nov 24 13:01:37.015504 2025] [:error] [pid 48688:tid 48706] [client 4.211.111.86:37851] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "aSPmsRm2q1FkzLam7A1xWAAAAk4"]
[Mon Nov 24 13:01:38.177375 2025] [:error] [pid 16441:tid 16453] [client 4.211.111.86:37854] [client 4.211.111.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSPmsoq_bc5MOa9Hflnc2QAAAIk"]
[Mon Nov 24 13:01:38.895208 2025] [:error] [pid 49900:tid 49912] [client 4.211.111.86:37519] [client 4.211.111.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "aSPmsjCyPLrvg06aornXMAAAAAo"]
[Mon Nov 24 13:01:39.760451 2025] [:error] [pid 16516:tid 16528] [client 4.211.111.86:37852] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "aSPms_qZbniwaNwL8XnB3QAAAQk"]
[Mon Nov 24 13:01:41.126415 2025] [:error] [pid 48601:tid 48668] [client 4.211.111.86:37579] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "aSPmtYMM4MaVTk74-AaB-QAAAgs"]
[Mon Nov 24 13:01:41.995123 2025] [:error] [pid 9630:tid 9648] [client 4.211.111.86:37778] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "aSPmtSrSgUgPGkizt2qtbwAAAFA"]
[Mon Nov 24 13:01:42.905858 2025] [:error] [pid 9630:tid 9635] [client 4.211.111.86:37752] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "aSPmtirSgUgPGkizt2qtcAAAAEM"]
[Mon Nov 24 13:01:43.771086 2025] [:error] [pid 16593:tid 16611] [client 4.211.111.86:37870] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bge.php"] [unique_id "aSPmtxVGznHBJI2LKpQYVwAAApA"]
[Mon Nov 24 13:01:45.212799 2025] [:error] [pid 49900:tid 49913] [client 4.211.111.86:37651] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bge.php"] [unique_id "aSPmuTCyPLrvg06aornXQgAAAAs"]
[Mon Nov 24 13:01:46.560376 2025] [:error] [pid 48601:tid 48673] [client 4.211.111.86:37600] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bge.php"] [unique_id "aSPmuoMM4MaVTk74-AaCAgAAAhA"]
[Mon Nov 24 13:01:47.420019 2025] [:error] [pid 16593:tid 16615] [client 4.211.111.86:37770] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bge.php"] [unique_id "aSPmuxVGznHBJI2LKpQYXwAAApQ"]
[Mon Nov 24 13:01:48.554754 2025] [:error] [pid 48688:tid 48702] [client 4.211.111.86:37690] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ifm.php"] [unique_id "aSPmvBm2q1FkzLam7A1xcAAAAko"]
[Mon Nov 24 13:01:49.289332 2025] [:error] [pid 48688:tid 48693] [client 4.211.111.86:37575] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ifm.php"] [unique_id "aSPmvRm2q1FkzLam7A1xcgAAAkE"]
[Mon Nov 24 13:01:50.208586 2025] [:error] [pid 16441:tid 16464] [client 4.211.111.86:37566] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ifm.php"] [unique_id "aSPmvoq_bc5MOa9Hflnc5AAAAJQ"]
[Mon Nov 24 13:01:50.842518 2025] [:error] [pid 48688:tid 48707] [client 4.211.111.86:37832] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ifm.php"] [unique_id "aSPmvhm2q1FkzLam7A1xcwAAAk8"]
[Mon Nov 24 13:01:51.614755 2025] [:error] [pid 16441:tid 16453] [client 4.211.111.86:37773] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww5.php"] [unique_id "aSPmv4q_bc5MOa9Hflnc5QAAAIk"]
[Mon Nov 24 13:01:52.682000 2025] [:error] [pid 16593:tid 16596] [client 4.211.111.86:37846] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww5.php"] [unique_id "aSPmwBVGznHBJI2LKpQYYwAAAoE"]
[Mon Nov 24 13:01:53.370941 2025] [:error] [pid 49900:tid 49922] [client 4.211.111.86:37777] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww5.php"] [unique_id "aSPmwTCyPLrvg06aornXVgAAABQ"]
[Mon Nov 24 13:01:54.692863 2025] [:error] [pid 49900:tid 49925] [client 4.211.111.86:37882] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww5.php"] [unique_id "aSPmwjCyPLrvg06aornXWAAAABc"]
[Mon Nov 24 13:01:55.918995 2025] [:error] [pid 49900:tid 49911] [client 4.211.111.86:37595] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/thxt.php"] [unique_id "aSPmwzCyPLrvg06aornXWQAAAAk"]
[Mon Nov 24 13:01:56.848049 2025] [:error] [pid 48599:tid 48610] [client 4.211.111.86:37560] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/thxt.php"] [unique_id "aSPmxJzvu6PDJiRKE3L7TQAAAYc"]
[Mon Nov 24 13:01:57.627612 2025] [:error] [pid 48599:tid 48625] [client 4.211.111.86:37768] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/thxt.php"] [unique_id "aSPmxZzvu6PDJiRKE3L7TgAAAZY"]
[Mon Nov 24 13:01:58.566512 2025] [:error] [pid 48601:tid 48657] [client 4.211.111.86:37530] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/thxt.php"] [unique_id "aSPmxoMM4MaVTk74-AaCDgAAAgA"]
[Mon Nov 24 13:01:59.469276 2025] [:error] [pid 9630:tid 9636] [client 4.211.111.86:37610] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kairolin.php"] [unique_id "aSPmxyrSgUgPGkizt2qtcgAAAEQ"]
[Mon Nov 24 13:02:00.532441 2025] [:error] [pid 9630:tid 9650] [client 4.211.111.86:37576] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kairolin.php"] [unique_id "aSPmyCrSgUgPGkizt2qtcwAAAFI"]
[Mon Nov 24 13:02:01.310863 2025] [:error] [pid 9630:tid 9632] [client 4.211.111.86:37592] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kairolin.php"] [unique_id "aSPmySrSgUgPGkizt2qtdQAAAEA"]
[Mon Nov 24 13:02:02.532149 2025] [:error] [pid 49900:tid 49908] [client 4.211.111.86:37572] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kairolin.php"] [unique_id "aSPmyjCyPLrvg06aornXXQAAAAY"]
[Mon Nov 24 13:02:03.696048 2025] [:error] [pid 48599:tid 48617] [client 4.211.111.86:37835] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/siln.php"] [unique_id "aSPmy5zvu6PDJiRKE3L7UAAAAY4"]
[Mon Nov 24 13:02:04.555021 2025] [:error] [pid 48600:tid 48638] [client 4.211.111.86:37864] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/siln.php"] [unique_id "aSPmzPtOzSUAQvWVjBdXPQAAAcg"]
[Mon Nov 24 13:02:05.428649 2025] [:error] [pid 48601:tid 48675] [client 4.211.111.86:37504] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/siln.php"] [unique_id "aSPmzYMM4MaVTk74-AaCEwAAAhI"]
[Mon Nov 24 13:02:06.243941 2025] [:error] [pid 48599:tid 48603] [client 4.211.111.86:37523] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/siln.php"] [unique_id "aSPmzpzvu6PDJiRKE3L7UwAAAYA"]
[Mon Nov 24 13:02:07.877276 2025] [:error] [pid 16441:tid 16465] [client 4.211.111.86:37784] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/congab.php"] [unique_id "aSPmz4q_bc5MOa9Hflnc7wAAAJU"]
[Mon Nov 24 13:02:08.748195 2025] [:error] [pid 48601:tid 48662] [client 4.211.111.86:37612] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/congab.php"] [unique_id "aSPm0IMM4MaVTk74-AaCFgAAAgU"]
[Mon Nov 24 13:02:09.476439 2025] [:error] [pid 9630:tid 9647] [client 4.211.111.86:37860] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/congab.php"] [unique_id "aSPm0SrSgUgPGkizt2qtkAAAAE8"]
[Mon Nov 24 13:02:10.131009 2025] [:error] [pid 16441:tid 16459] [client 4.211.111.86:37520] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/congab.php"] [unique_id "aSPm0oq_bc5MOa9HflndMwAAAI8"]
[Mon Nov 24 13:02:10.918018 2025] [:error] [pid 48599:tid 48614] [client 4.211.111.86:37824] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/show.php"] [unique_id "aSPm0pzvu6PDJiRKE3L7WAAAAYs"]
[Mon Nov 24 13:02:11.800133 2025] [:error] [pid 48600:tid 48636] [client 4.211.111.86:37656] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/show.php"] [unique_id "aSPm0_tOzSUAQvWVjBdXRwAAAcY"]
[Mon Nov 24 13:02:12.759455 2025] [:error] [pid 49900:tid 49923] [client 4.211.111.86:37533] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/show.php"] [unique_id "aSPm1DCyPLrvg06aornXXwAAABU"]
[Mon Nov 24 13:02:13.902636 2025] [:error] [pid 49900:tid 49905] [client 4.211.111.86:37507] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/show.php"] [unique_id "aSPm1TCyPLrvg06aornXYQAAAAM"]
[Mon Nov 24 13:02:14.640989 2025] [:error] [pid 16593:tid 16619] [client 4.211.111.86:37847] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSPm1hVGznHBJI2LKpQYawAAApg"]
[Mon Nov 24 13:02:15.499261 2025] [:error] [pid 48600:tid 48637] [client 4.211.111.86:37874] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSPm1_tOzSUAQvWVjBdXSwAAAcc"]
[Mon Nov 24 13:02:16.193543 2025] [:error] [pid 48600:tid 48647] [client 4.211.111.86:37588] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSPm2PtOzSUAQvWVjBdXTAAAAdE"]
[Mon Nov 24 13:02:16.901481 2025] [:error] [pid 48601:tid 48673] [client 4.211.111.86:37850] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o1.php"] [unique_id "aSPm2IMM4MaVTk74-AaCIAAAAhA"]
[Mon Nov 24 13:02:17.792830 2025] [:error] [pid 48688:tid 48713] [client 4.211.111.86:37608] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "aSPm2Rm2q1FkzLam7A1xlwAAAlU"]
[Mon Nov 24 13:02:18.535497 2025] [:error] [pid 16593:tid 16598] [client 4.211.111.86:37703] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "aSPm2hVGznHBJI2LKpQYbQAAAoM"]
[Mon Nov 24 13:02:19.558519 2025] [:error] [pid 48688:tid 48701] [client 4.211.111.86:37849] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "aSPm2xm2q1FkzLam7A1xmAAAAkk"]
[Mon Nov 24 13:02:20.202069 2025] [:error] [pid 48601:tid 48667] [client 4.211.111.86:37776] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "aSPm3IMM4MaVTk74-AaCIQAAAgo"]
[Mon Nov 24 13:02:21.961348 2025] [:error] [pid 48601:tid 48662] [client 4.211.111.86:37771] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ha.php"] [unique_id "aSPm3YMM4MaVTk74-AaCIgAAAgU"]
[Mon Nov 24 13:02:22.595961 2025] [:error] [pid 16441:tid 16450] [client 4.211.111.86:37762] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ha.php"] [unique_id "aSPm3oq_bc5MOa9HflndTwAAAIY"]
[Mon Nov 24 13:02:23.316009 2025] [:error] [pid 9630:tid 9637] [client 4.211.111.86:37834] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ha.php"] [unique_id "aSPm3yrSgUgPGkizt2qttAAAAEU"]
[Mon Nov 24 13:02:24.096148 2025] [:error] [pid 16593:tid 16613] [client 4.211.111.86:37640] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ha.php"] [unique_id "aSPm4BVGznHBJI2LKpQYeAAAApI"]
[Mon Nov 24 13:02:24.750223 2025] [:error] [pid 49900:tid 49905] [client 4.211.111.86:37746] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/waw.php"] [unique_id "aSPm4DCyPLrvg06aornXagAAAAM"]
[Mon Nov 24 13:02:25.449937 2025] [:error] [pid 16441:tid 16451] [client 4.211.111.86:37775] [client 4.211.111.86] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/waw.php"] [unique_id "aSPm4Yq_bc5MOa9HflndWQAAAIc"]
[Mon Nov 24 13:02:26.133791 2025] [:error] [pid 16593:tid 16598] [client 4.211.111.86:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/waw.php
[Mon Nov 24 13:02:26.375939 2025] [:error] [pid 16593:tid 16615] [client 4.211.111.86:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Mon Nov 24 13:02:26.635335 2025] [:error] [pid 16593:tid 16608] [client 4.211.111.86:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/bless2.php
[Mon Nov 24 13:02:26.875510 2025] [:error] [pid 16593:tid 16607] [client 4.211.111.86:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/01.php
[Mon Nov 24 13:02:27.132289 2025] [:error] [pid 16593:tid 16604] [client 4.211.111.86:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/02.php
[Mon Nov 24 13:02:27.380417 2025] [:error] [pid 16593:tid 16596] [client 4.211.111.86:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/03.php
[Mon Nov 24 13:02:27.634225 2025] [:error] [pid 16593:tid 16614] [client 4.211.111.86:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Mon Nov 24 13:02:27.960703 2025] [:error] [pid 16593:tid 16618] [client 4.211.111.86:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/05.php
[Mon Nov 24 13:02:28.230394 2025] [:error] [pid 16593:tid 16609] [client 4.211.111.86:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Mon Nov 24 13:02:28.665432 2025] [:error] [pid 16593:tid 16603] [client 4.211.111.86:37715] File does not exist: /usr/local/apache/htdocs/suspended-page/bless3.php
[Mon Nov 24 20:28:57.630977 2025] [:error] [pid 9630:tid 9636] [client 4.233.64.129:48052] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Mon Nov 24 20:28:57.872269 2025] [:error] [pid 9630:tid 9647] [client 4.233.64.129:48052] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Nov 24 20:28:58.113968 2025] [:error] [pid 9630:tid 9646] [client 4.233.64.129:48052] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Mon Nov 24 20:28:58.595262 2025] [:error] [pid 9630:tid 9649] [client 4.233.64.129:48052] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Mon Nov 24 20:28:58.843979 2025] [:error] [pid 9630:tid 9638] [client 4.233.64.129:48052] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Mon Nov 24 20:28:59.084683 2025] [:error] [pid 9630:tid 9651] [client 4.233.64.129:48052] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon Nov 24 20:28:59.330263 2025] [:error] [pid 9630:tid 9644] [client 4.233.64.129:48052] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSRPiyrSgUgPGkizt2olAQAAAEw"]
[Mon Nov 24 20:29:03.776038 2025] [:error] [pid 48601:tid 48672] [client 4.233.64.129:48010] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Mon Nov 24 20:29:04.266725 2025] [:error] [pid 48601:tid 48660] [client 4.233.64.129:48010] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aSRPkIMM4MaVTk74-AbYkAAAAgM"]
[Mon Nov 24 20:29:06.684218 2025] [:error] [pid 48599:tid 48624] [client 4.233.64.129:48060] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aSRPkpzvu6PDJiRKE3JETAAAAZU"]
[Mon Nov 24 20:29:09.660813 2025] [:error] [pid 16441:tid 16459] [client 4.233.64.129:20587] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aSRPlYq_bc5MOa9Hfll5UAAAAI8"]
[Mon Nov 24 20:29:12.092997 2025] [:error] [pid 16593:tid 16617] [client 4.233.64.129:52705] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aSRPmBVGznHBJI2LKpRe5gAAApY"]
[Mon Nov 24 20:29:13.739448 2025] [:error] [pid 16441:tid 16458] [client 4.233.64.129:52696] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aSRPmYq_bc5MOa9Hfll5VgAAAI4"]
[Mon Nov 24 20:29:17.241070 2025] [:error] [pid 9630:tid 9654] [client 4.233.64.129:52723] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aSRPnSrSgUgPGkizt2olEQAAAFY"]
[Mon Nov 24 20:29:18.381835 2025] [:error] [pid 48601:tid 48665] [client 4.233.64.129:43724] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aSRPnoMM4MaVTk74-AbYnQAAAgg"]
[Mon Nov 24 20:29:19.649212 2025] [:error] [pid 9630:tid 9650] [client 4.233.64.129:52706] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aSRPnyrSgUgPGkizt2olFQAAAFI"]
[Mon Nov 24 20:29:22.836840 2025] [:error] [pid 16441:tid 16460] [client 4.233.64.129:20603] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSRPooq_bc5MOa9Hfll5YAAAAJA"]
[Mon Nov 24 20:29:24.634836 2025] [:error] [pid 49900:tid 49921] [client 4.233.64.129:43722] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSRPpDCyPLrvg06aork5gQAAABM"]
[Mon Nov 24 20:29:29.519600 2025] [:error] [pid 16549:tid 16567] [client 4.233.64.129:52731] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSRPqaeWW19A99PUw_dbZwAAAU8"]
[Mon Nov 24 20:29:32.541016 2025] [:error] [pid 9630:tid 9648] [client 4.233.64.129:20599] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aSRPrCrSgUgPGkizt2olHQAAAFA"]
[Mon Nov 24 20:29:34.519153 2025] [:error] [pid 49900:tid 49905] [client 4.233.64.129:52687] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aSRPrjCyPLrvg06aork5igAAAAM"]
[Mon Nov 24 20:29:37.840144 2025] [:error] [pid 48688:tid 48708] [client 4.233.64.129:48030] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aSRPsRm2q1FkzLam7A3A4wAAAlA"]
[Mon Nov 24 20:29:39.672246 2025] [:error] [pid 48601:tid 48673] [client 4.233.64.129:48039] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aSRPs4MM4MaVTk74-AbYsQAAAhA"]
[Mon Nov 24 20:29:43.123712 2025] [:error] [pid 9630:tid 9634] [client 4.233.64.129:43762] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aSRPtyrSgUgPGkizt2olJgAAAEI"]
[Mon Nov 24 20:29:44.065031 2025] [:error] [pid 48601:tid 48675] [client 4.233.64.129:20561] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSRPuIMM4MaVTk74-AbYtwAAAhI"]
[Mon Nov 24 20:29:46.601062 2025] [:error] [pid 16441:tid 16451] [client 4.233.64.129:43763] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSRPuoq_bc5MOa9Hfll5fgAAAIc"]
[Mon Nov 24 20:29:51.393519 2025] [:error] [pid 9630:tid 9644] [client 4.233.64.129:48016] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSRPvyrSgUgPGkizt2olMgAAAEw"]
[Mon Nov 24 20:29:53.700853 2025] [:error] [pid 48688:tid 48693] [client 4.233.64.129:48017] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/wp-ksv1i.php"] [unique_id "aSRPwRm2q1FkzLam7A3A7wAAAkE"]
[Mon Nov 24 20:29:57.645613 2025] [:error] [pid 48688:tid 48703] [client 4.233.64.129:48044] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSRPxRm2q1FkzLam7A3A8QAAAks"]
[Mon Nov 24 20:30:00.423039 2025] [:error] [pid 16549:tid 16574] [client 4.233.64.129:20607] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSRPyKeWW19A99PUw_dbgAAAAVU"]
[Mon Nov 24 20:30:01.961386 2025] [:error] [pid 48599:tid 48626] [client 4.233.64.129:20548] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSRPyZzvu6PDJiRKE3JEcwAAAZc"]
[Mon Nov 24 20:30:07.863909 2025] [:error] [pid 9630:tid 9641] [client 4.233.64.129:20602] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Mon Nov 24 20:30:08.127737 2025] [:error] [pid 9630:tid 9639] [client 4.233.64.129:20602] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/0.php"] [unique_id "aSRP0CrSgUgPGkizt2olPQAAAEc"]
[Mon Nov 24 20:30:09.601819 2025] [:error] [pid 48599:tid 48609] [client 4.233.64.129:20604] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSRP0Zzvu6PDJiRKE3JEdgAAAYY"]
[Mon Nov 24 20:30:11.990889 2025] [:error] [pid 48601:tid 48678] [client 4.233.64.129:52703] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Mon Nov 24 20:30:12.236922 2025] [:error] [pid 48601:tid 48660] [client 4.233.64.129:52703] File does not exist: /usr/local/apache/htdocs/suspended-page/i1.php
[Mon Nov 24 20:30:12.487302 2025] [:error] [pid 48601:tid 48676] [client 4.233.64.129:52703] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Mon Nov 24 20:30:13.322712 2025] [:error] [pid 48601:tid 48670] [client 4.233.64.129:52703] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Mon Nov 24 20:30:13.563271 2025] [:error] [pid 48601:tid 48657] [client 4.233.64.129:52703] File does not exist: /usr/local/apache/htdocs/suspended-page/mail.php
[Mon Nov 24 20:30:14.128656 2025] [:error] [pid 48601:tid 48658] [client 4.233.64.129:52703] File does not exist: /usr/local/apache/htdocs/suspended-page/17.php
[Mon Nov 24 20:30:14.374245 2025] [:error] [pid 48601:tid 48669] [client 4.233.64.129:52703] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "aSRP1oMM4MaVTk74-AbYzQAAAgw"]
[Mon Nov 24 20:30:16.305352 2025] [:error] [pid 49900:tid 49926] [client 4.233.64.129:20591] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "aSRP2DCyPLrvg06aork5pwAAABg"]
[Mon Nov 24 20:30:18.408338 2025] [:error] [pid 16516:tid 16524] [client 4.233.64.129:20597] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "aSRP2vqZbniwaNwL8XkAwAAAAQU"]
[Mon Nov 24 20:30:19.138142 2025] [:error] [pid 48601:tid 48678] [client 4.233.64.129:20554] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "aSRP24MM4MaVTk74-AbY0wAAAhU"]
[Mon Nov 24 20:30:22.376087 2025] [:error] [pid 16516:tid 16532] [client 4.233.64.129:48035] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSRP3vqZbniwaNwL8XkAzAAAAQ0"]
[Mon Nov 24 20:30:24.984773 2025] [:error] [pid 9630:tid 9635] [client 4.233.64.129:43754] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSRP4CrSgUgPGkizt2olQgAAAEM"]
[Mon Nov 24 20:30:26.417449 2025] [:error] [pid 16441:tid 16453] [client 4.233.64.129:20593] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSRP4oq_bc5MOa9Hfll5qQAAAIk"]
[Mon Nov 24 20:30:29.945005 2025] [:error] [pid 48601:tid 48672] [client 4.233.64.129:48062] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Mailer.php"] [unique_id "aSRP5YMM4MaVTk74-AbY3wAAAg8"]
[Mon Nov 24 20:30:32.953477 2025] [:error] [pid 49900:tid 49909] [client 4.233.64.129:52686] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "aSRP6DCyPLrvg06aork5yQAAAAc"]
[Mon Nov 24 20:30:34.342526 2025] [:error] [pid 16593:tid 16596] [client 4.233.64.129:20566] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "aSRP6hVGznHBJI2LKpRfTAAAAoE"]
[Mon Nov 24 20:30:36.021717 2025] [:error] [pid 48599:tid 48619] [client 4.233.64.129:20584] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "aSRP7Jzvu6PDJiRKE3JEhQAAAZA"]
[Mon Nov 24 20:30:39.599120 2025] [:error] [pid 48601:tid 48678] [client 4.233.64.129:52716] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "aSRP74MM4MaVTk74-AbY7AAAAhU"]
[Mon Nov 24 20:30:40.853746 2025] [:error] [pid 48688:tid 48699] [client 4.233.64.129:20582] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSRP8Bm2q1FkzLam7A3BIwAAAkc"]
[Mon Nov 24 20:30:46.179429 2025] [:error] [pid 16516:tid 16526] [client 4.233.64.129:43721] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "aSRP9vqZbniwaNwL8XkA4gAAAQc"]
[Mon Nov 24 20:30:47.897300 2025] [:error] [pid 48599:tid 48625] [client 4.233.64.129:20583] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "aSRP95zvu6PDJiRKE3JEnQAAAZY"]
[Mon Nov 24 20:30:50.067291 2025] [:error] [pid 16441:tid 16468] [client 4.233.64.129:52681] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "aSRP-oq_bc5MOa9Hfll50AAAAJg"]
[Mon Nov 24 20:30:53.460750 2025] [:error] [pid 16549:tid 16563] [client 4.233.64.129:52711] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "aSRP_aeWW19A99PUw_dcFAAAAUs"]
[Mon Nov 24 20:30:54.460876 2025] [:error] [pid 16593:tid 16603] [client 4.233.64.129:48047] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "aSRP_hVGznHBJI2LKpRfZgAAAog"]
[Mon Nov 24 20:30:55.943262 2025] [:error] [pid 48601:tid 48661] [client 4.233.64.129:20578] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "aSRP_4MM4MaVTk74-AbY_gAAAgQ"]
[Mon Nov 24 20:31:00.181951 2025] [:error] [pid 16516:tid 16540] [client 4.233.64.129:52673] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "aSRQBPqZbniwaNwL8XkA6wAAARU"]
[Mon Nov 24 20:31:02.480476 2025] [:error] [pid 16441:tid 16463] [client 4.233.64.129:48041] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "aSRQBoq_bc5MOa9Hfll56AAAAJM"]
[Mon Nov 24 20:31:03.823750 2025] [:error] [pid 9630:tid 9654] [client 4.233.64.129:20581] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aSRQByrSgUgPGkizt2oleAAAAFY"]
[Mon Nov 24 20:31:07.462210 2025] [:error] [pid 48599:tid 48603] [client 4.233.64.129:43751] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aSRQC5zvu6PDJiRKE3JEuwAAAYA"]
[Mon Nov 24 20:31:15.267039 2025] [:error] [pid 16549:tid 16567] [client 4.233.64.129:48026] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Mon Nov 24 20:31:15.509234 2025] [:error] [pid 16549:tid 16552] [client 4.233.64.129:48026] File does not exist: /usr/local/apache/htdocs/suspended-page/goat1.php
[Mon Nov 24 20:31:15.751121 2025] [:error] [pid 16549:tid 16577] [client 4.233.64.129:48026] File does not exist: /usr/local/apache/htdocs/suspended-page/yu.php
[Mon Nov 24 20:31:16.542851 2025] [:error] [pid 16549:tid 16563] [client 4.233.64.129:48026] File does not exist: /usr/local/apache/htdocs/suspended-page/124.php
[Mon Nov 24 20:31:18.346779 2025] [:error] [pid 16549:tid 16572] [client 4.233.64.129:48026] File does not exist: /usr/local/apache/htdocs/suspended-page/q.php
[Mon Nov 24 20:31:18.589200 2025] [:error] [pid 16549:tid 16555] [client 4.233.64.129:48026] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Mon Nov 24 20:31:19.071880 2025] [:error] [pid 16549:tid 16560] [client 4.233.64.129:48026] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon Nov 24 20:31:19.407640 2025] [:error] [pid 16549:tid 16574] [client 4.233.64.129:48026] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/multi.php"] [unique_id "aSRQF6eWW19A99PUw_dcPgAAAVU"]
[Mon Nov 24 20:31:22.217619 2025] [:error] [pid 16441:tid 16452] [client 4.233.64.129:48036] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/multi.php"] [unique_id "aSRQGoq_bc5MOa9Hfll6CgAAAIg"]
[Mon Nov 24 20:31:23.384301 2025] [:error] [pid 48601:tid 48660] [client 4.233.64.129:52734] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/multi.php"] [unique_id "aSRQG4MM4MaVTk74-AbZDwAAAgM"]
[Mon Nov 24 20:31:25.341182 2025] [:error] [pid 16516:tid 16529] [client 4.233.64.129:52727] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/multi.php"] [unique_id "aSRQHfqZbniwaNwL8XkBBAAAAQo"]
[Mon Nov 24 20:31:29.614622 2025] [:error] [pid 48600:tid 48652] [client 4.233.64.129:20571] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aSRQIftOzSUAQvWVjBeYBQAAAdY"]
[Mon Nov 24 20:31:31.315125 2025] [:error] [pid 49900:tid 49904] [client 4.233.64.129:52721] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aSRQIzCyPLrvg06aork6AwAAAAI"]
[Mon Nov 24 20:31:32.481212 2025] [:error] [pid 49900:tid 49903] [client 4.233.64.129:43714] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aSRQJDCyPLrvg06aork6CAAAAAE"]
[Mon Nov 24 20:31:33.504256 2025] [:error] [pid 49900:tid 49924] [client 4.233.64.129:43736] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aSRQJTCyPLrvg06aork6CwAAABY"]
[Mon Nov 24 20:31:36.128794 2025] [:error] [pid 48601:tid 48673] [client 4.233.64.129:48020] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSRQKIMM4MaVTk74-AbZFgAAAhA"]
[Mon Nov 24 20:31:38.357575 2025] [:error] [pid 48600:tid 48653] [client 4.233.64.129:20586] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSRQKvtOzSUAQvWVjBeYBwAAAdc"]
[Mon Nov 24 20:31:39.492863 2025] [:error] [pid 16516:tid 16526] [client 4.233.64.129:43719] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSRQK_qZbniwaNwL8XkBCgAAAQc"]
[Mon Nov 24 20:31:41.129256 2025] [:error] [pid 9630:tid 9642] [client 4.233.64.129:48040] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/uploads/images/autoload_classmap.php"] [unique_id "aSRQLSrSgUgPGkizt2ologAAAEo"]
[Mon Nov 24 20:31:42.753928 2025] [:error] [pid 48688:tid 48696] [client 4.233.64.129:46741] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk.php"] [unique_id "aSRQLhm2q1FkzLam7A3BUwAAAkQ"]
[Mon Nov 24 20:31:44.685399 2025] [:error] [pid 9630:tid 9650] [client 4.233.64.129:20546] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk.php"] [unique_id "aSRQMCrSgUgPGkizt2olpAAAAFI"]
[Mon Nov 24 20:31:48.680148 2025] [:error] [pid 48600:tid 48634] [client 4.233.64.129:43712] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk.php"] [unique_id "aSRQNPtOzSUAQvWVjBeYCAAAAcQ"]
[Mon Nov 24 20:31:50.751693 2025] [:error] [pid 9630:tid 9651] [client 4.233.64.129:20595] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk.php"] [unique_id "aSRQNirSgUgPGkizt2olrAAAAFM"]
[Mon Nov 24 20:31:52.116650 2025] [:error] [pid 16593:tid 16613] [client 4.233.64.129:20594] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-crom.php"] [unique_id "aSRQOBVGznHBJI2LKpRf1QAAApI"]
[Mon Nov 24 20:31:56.399607 2025] [:error] [pid 48601:tid 48675] [client 4.233.64.129:48001] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-crom.php"] [unique_id "aSRQPIMM4MaVTk74-AbZKwAAAhI"]
[Mon Nov 24 20:32:00.760268 2025] [:error] [pid 16516:tid 16529] [client 4.233.64.129:46091] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-crom.php"] [unique_id "aSRQQPqZbniwaNwL8XkBEwAAAQo"]
[Mon Nov 24 20:32:02.203044 2025] [:error] [pid 49900:tid 49922] [client 4.233.64.129:43715] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-crom.php"] [unique_id "aSRQQjCyPLrvg06aork6FwAAABQ"]
[Mon Nov 24 20:32:05.974946 2025] [:error] [pid 9630:tid 9653] [client 4.233.64.129:43717] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/max.php"] [unique_id "aSRQRSrSgUgPGkizt2oltQAAAFU"]
[Mon Nov 24 20:32:09.444118 2025] [:error] [pid 49900:tid 49913] [client 4.233.64.129:20588] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/max.php"] [unique_id "aSRQSTCyPLrvg06aork6HAAAAAs"]
[Mon Nov 24 20:32:10.322062 2025] [:error] [pid 9630:tid 9648] [client 4.233.64.129:20576] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/max.php"] [unique_id "aSRQSirSgUgPGkizt2oluAAAAFA"]
[Mon Nov 24 20:32:11.157693 2025] [:error] [pid 49900:tid 49915] [client 4.233.64.129:48059] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/max.php"] [unique_id "aSRQSzCyPLrvg06aork6IAAAAA0"]
[Mon Nov 24 20:32:12.452295 2025] [:error] [pid 48600:tid 48648] [client 4.233.64.129:20589] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSRQTPtOzSUAQvWVjBeYEQAAAdI"]
[Mon Nov 24 20:32:13.412598 2025] [:error] [pid 48599:tid 48613] [client 4.233.64.129:46143] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSRQTZzvu6PDJiRKE3JE7QAAAYo"]
[Mon Nov 24 20:32:15.407015 2025] [:error] [pid 49900:tid 49922] [client 4.233.64.129:52688] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSRQTzCyPLrvg06aork6JgAAABQ"]
[Mon Nov 24 20:32:17.942345 2025] [:error] [pid 48601:tid 48663] [client 4.233.64.129:52726] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "aSRQUYMM4MaVTk74-AbZWQAAAgY"]
[Mon Nov 24 20:32:19.341033 2025] [:error] [pid 48601:tid 48660] [client 4.233.64.129:43733] File does not exist: /usr/local/apache/htdocs/suspended-page/1100.php
[Mon Nov 24 20:32:21.062012 2025] [:error] [pid 48601:tid 48672] [client 4.233.64.129:43733] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Nov 24 20:32:21.303880 2025] [:error] [pid 48601:tid 48669] [client 4.233.64.129:43733] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Mon Nov 24 20:32:21.543931 2025] [:error] [pid 48601:tid 48663] [client 4.233.64.129:43733] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Mon Nov 24 20:32:21.803127 2025] [:error] [pid 48601:tid 48658] [client 4.233.64.129:43733] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Nov 24 20:32:22.233973 2025] [:error] [pid 48601:tid 48666] [client 4.233.64.129:43733] File does not exist: /usr/local/apache/htdocs/suspended-page/oo.php
[Mon Nov 24 20:32:22.476745 2025] [:error] [pid 48601:tid 48665] [client 4.233.64.129:43733] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Mon Nov 24 20:32:22.714654 2025] [:error] [pid 48601:tid 48677] [client 4.233.64.129:43733] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSRQVoMM4MaVTk74-AbZdAAAAhQ"]
[Mon Nov 24 20:32:27.089680 2025] [:error] [pid 16441:tid 16451] [client 4.233.64.129:48751] File does not exist: /usr/local/apache/htdocs/suspended-page/ll.php
[Mon Nov 24 20:32:27.335076 2025] [:error] [pid 16441:tid 16467] [client 4.233.64.129:48751] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSRQW4q_bc5MOa9Hfll6lQAAAJc"]
[Mon Nov 24 20:32:35.681664 2025] [:error] [pid 49900:tid 49912] [client 4.233.64.129:52733] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aSRQYzCyPLrvg06aork6VQAAAAo"]
[Mon Nov 24 20:32:38.774252 2025] [:error] [pid 48601:tid 48659] [client 4.233.64.129:46726] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aSRQZoMM4MaVTk74-AbZmwAAAgI"]
[Mon Nov 24 20:32:40.339650 2025] [:error] [pid 16441:tid 16458] [client 4.233.64.129:48023] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aSRQaIq_bc5MOa9Hfll6swAAAI4"]
[Mon Nov 24 20:32:42.287677 2025] [:error] [pid 48688:tid 48716] [client 4.233.64.129:20580] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aSRQahm2q1FkzLam7A3BngAAAlg"]
[Mon Nov 24 20:32:47.871648 2025] [:error] [pid 48601:tid 48680] [client 4.233.64.129:46840] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSRQb4MM4MaVTk74-AbZogAAAhc"]
[Mon Nov 24 20:32:49.328781 2025] [:error] [pid 16441:tid 16450] [client 4.233.64.129:48743] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSRQcYq_bc5MOa9Hfll6ugAAAIY"]
[Mon Nov 24 20:32:51.090198 2025] [:error] [pid 16441:tid 16460] [client 4.233.64.129:52618] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSRQc4q_bc5MOa9Hfll6vgAAAJA"]
[Mon Nov 24 20:32:52.738479 2025] [:error] [pid 48600:tid 48638] [client 4.233.64.129:52650] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/product.php"] [unique_id "aSRQdPtOzSUAQvWVjBeYKgAAAcg"]
[Mon Nov 24 20:32:56.175228 2025] [:error] [pid 48688:tid 48695] [client 4.233.64.129:46802] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wi.php"] [unique_id "aSRQeBm2q1FkzLam7A3BogAAAkM"]
[Mon Nov 24 20:32:57.361320 2025] [:error] [pid 48601:tid 48678] [client 4.233.64.129:52620] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wi.php"] [unique_id "aSRQeYMM4MaVTk74-AbZrQAAAhU"]
[Mon Nov 24 20:32:58.888365 2025] [:error] [pid 16593:tid 16600] [client 4.233.64.129:52625] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wi.php"] [unique_id "aSRQehVGznHBJI2LKpRgQwAAAoU"]
[Mon Nov 24 20:33:00.280930 2025] [:error] [pid 48601:tid 48676] [client 4.233.64.129:48007] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wi.php"] [unique_id "aSRQfIMM4MaVTk74-AbZrwAAAhM"]
[Mon Nov 24 20:33:01.654348 2025] [:error] [pid 48599:tid 48619] [client 4.233.64.129:46793] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mms.php"] [unique_id "aSRQfZzvu6PDJiRKE3JFDwAAAZA"]
[Mon Nov 24 20:33:03.082583 2025] [:error] [pid 48599:tid 48622] [client 4.233.64.129:52610] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mms.php"] [unique_id "aSRQf5zvu6PDJiRKE3JFEQAAAZM"]
[Mon Nov 24 20:33:04.914744 2025] [:error] [pid 16441:tid 16447] [client 4.233.64.129:52660] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mms.php"] [unique_id "aSRQgIq_bc5MOa9Hfll6xwAAAIM"]
[Mon Nov 24 20:33:06.850884 2025] [:error] [pid 48599:tid 48614] [client 4.233.64.129:52649] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mms.php"] [unique_id "aSRQgpzvu6PDJiRKE3JFFQAAAYs"]
[Mon Nov 24 20:33:07.735144 2025] [:error] [pid 16593:tid 16616] [client 4.233.64.129:48011] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSRQgxVGznHBJI2LKpRgSgAAApU"]
[Mon Nov 24 20:33:08.907658 2025] [:error] [pid 9630:tid 9651] [client 4.233.64.129:44368] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "aSRQhCrSgUgPGkizt2omIgAAAFM"]
[Mon Nov 24 20:33:12.868416 2025] [:error] [pid 16441:tid 16459] [client 4.233.64.129:46799] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "aSRQiIq_bc5MOa9Hfll6zwAAAI8"]
[Mon Nov 24 20:33:14.957434 2025] [:error] [pid 48600:tid 48640] [client 4.233.64.129:21345] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "aSRQivtOzSUAQvWVjBeYLgAAAco"]
[Mon Nov 24 20:33:16.676519 2025] [:error] [pid 48601:tid 48672] [client 4.233.64.129:21367] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aSRQjIMM4MaVTk74-AbZswAAAg8"]
[Mon Nov 24 20:33:19.879586 2025] [:error] [pid 48599:tid 48619] [client 4.233.64.129:20482] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aSRQj5zvu6PDJiRKE3JFGwAAAZA"]
[Mon Nov 24 20:33:23.733392 2025] [:error] [pid 16441:tid 16462] [client 4.233.64.129:20486] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aSRQk4q_bc5MOa9Hfll61gAAAJI"]
[Mon Nov 24 20:33:25.129652 2025] [:error] [pid 48688:tid 48699] [client 4.233.64.129:46147] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aSRQlRm2q1FkzLam7A3BrAAAAkc"]
[Mon Nov 24 20:33:27.131729 2025] [:error] [pid 16441:tid 16459] [client 4.233.64.129:46191] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Mon Nov 24 20:33:27.617073 2025] [:error] [pid 16441:tid 16465] [client 4.233.64.129:46191] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Mon Nov 24 20:33:27.853978 2025] [:error] [pid 16441:tid 16461] [client 4.233.64.129:46191] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSRQl4q_bc5MOa9Hfll64wAAAJE"]
[Mon Nov 24 20:33:30.905151 2025] [:error] [pid 16441:tid 16446] [client 4.233.64.129:46200] File does not exist: /usr/local/apache/htdocs/suspended-page/po.php
[Mon Nov 24 20:33:31.290194 2025] [:error] [pid 16441:tid 16464] [client 4.233.64.129:46200] File does not exist: /usr/local/apache/htdocs/suspended-page/zews.php
[Mon Nov 24 20:33:31.815838 2025] [:error] [pid 16441:tid 16447] [client 4.233.64.129:46200] File does not exist: /usr/local/apache/htdocs/suspended-page/usage-file.php
[Mon Nov 24 20:33:33.402767 2025] [:error] [pid 16441:tid 16462] [client 4.233.64.129:46200] [client 4.233.64.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/js/wp-config.php"] [unique_id "aSRQnYq_bc5MOa9Hfll68QAAAJI"]
[Mon Nov 24 20:33:36.605976 2025] [:error] [pid 48688:tid 48714] [client 4.233.64.129:46163] File does not exist: /usr/local/apache/htdocs/suspended-page/Js.php
[Mon Nov 24 20:33:37.797268 2025] [:error] [pid 48688:tid 48700] [client 4.233.64.129:46163] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Mon Nov 24 20:33:38.036420 2025] [:error] [pid 48688:tid 48699] [client 4.233.64.129:46163] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Mon Nov 24 20:33:38.275626 2025] [:error] [pid 48688:tid 48708] [client 4.233.64.129:46163] File does not exist: /usr/local/apache/htdocs/suspended-page/build.php
[Mon Nov 24 20:33:38.529641 2025] [:error] [pid 48688:tid 48712] [client 4.233.64.129:46163] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ab.php"] [unique_id "aSRQohm2q1FkzLam7A3BvgAAAlQ"]
[Mon Nov 24 20:33:44.686616 2025] [:error] [pid 16441:tid 16452] [client 4.233.64.129:46195] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ab.php"] [unique_id "aSRQqIq_bc5MOa9Hfll6-gAAAIg"]
[Mon Nov 24 20:33:45.808176 2025] [:error] [pid 9630:tid 9650] [client 4.233.64.129:21343] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ab.php"] [unique_id "aSRQqSrSgUgPGkizt2omOQAAAFI"]
[Mon Nov 24 20:33:47.002717 2025] [:error] [pid 48688:tid 48708] [client 4.233.64.129:20798] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ab.php"] [unique_id "aSRQqxm2q1FkzLam7A3BxAAAAlA"]
[Mon Nov 24 20:33:48.386951 2025] [:error] [pid 49900:tid 49907] [client 4.233.64.129:21326] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "aSRQrDCyPLrvg06aork6twAAAAU"]
[Mon Nov 24 20:33:50.025887 2025] [:error] [pid 9630:tid 9638] [client 4.233.64.129:20736] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "aSRQrirSgUgPGkizt2omPgAAAEY"]
[Mon Nov 24 20:33:51.344796 2025] [:error] [pid 16516:tid 16542] [client 4.233.64.129:20796] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "aSRQr_qZbniwaNwL8XkBWAAAARc"]
[Mon Nov 24 20:33:53.567704 2025] [:error] [pid 48688:tid 48701] [client 4.233.64.129:21316] [client 4.233.64.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "aSRQsRm2q1FkzLam7A3BygAAAkk"]
[Mon Nov 24 21:45:37.028716 2025] [:error] [pid 48688:tid 48703] [client 193.32.126.212:52546] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aSRhgRm2q1FkzLam7A3PuQAAAks"]
[Mon Nov 24 21:45:37.522214 2025] [:error] [pid 48601:tid 48672] [client 193.32.126.212:53390] [client 193.32.126.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aSRhgYMM4MaVTk74-Abm5QAAAg8"]
[Tue Nov 25 01:52:23.591911 2025] [:error] [pid 49900:tid 49912] [client 20.242.70.185:5441] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Tue Nov 25 01:52:23.829947 2025] [:error] [pid 49900:tid 49906] [client 20.242.70.185:5441] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Tue Nov 25 01:52:24.043311 2025] [:error] [pid 49900:tid 49918] [client 20.242.70.185:5441] File does not exist: /usr/local/apache/htdocs/suspended-page/golden.php
[Tue Nov 25 01:52:24.256198 2025] [:error] [pid 49900:tid 49917] [client 20.242.70.185:5441] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Tue Nov 25 01:52:24.481769 2025] [:error] [pid 49900:tid 49919] [client 20.242.70.185:5441] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Nov 25 01:52:24.705068 2025] [:error] [pid 49900:tid 49926] [client 20.242.70.185:5441] [client 20.242.70.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aSSbWDCyPLrvg06aorl-TAAAABg"]
[Tue Nov 25 01:52:26.270454 2025] [:error] [pid 16549:tid 16566] [client 20.242.70.185:4691] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Tue Nov 25 01:52:26.486434 2025] [:error] [pid 16549:tid 16571] [client 20.242.70.185:4691] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php
[Tue Nov 25 01:52:26.781858 2025] [:error] [pid 16549:tid 16575] [client 20.242.70.185:4691] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue Nov 25 01:52:27.015359 2025] [:error] [pid 16549:tid 16567] [client 20.242.70.185:4691] File does not exist: /usr/local/apache/htdocs/suspended-page/re.php
[Tue Nov 25 01:52:27.233234 2025] [:error] [pid 16549:tid 16564] [client 20.242.70.185:4691] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Tue Nov 25 01:52:27.684008 2025] [:error] [pid 16549:tid 16555] [client 20.242.70.185:4691] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aSSbW6eWW19A99PUw_eLHgAAAUM"]
[Tue Nov 25 01:52:29.298920 2025] [:error] [pid 48599:tid 48608] [client 20.242.70.185:3930] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aSSbXZzvu6PDJiRKE3J5zQAAAYU"]
[Tue Nov 25 01:52:30.655427 2025] [:error] [pid 48601:tid 48674] [client 20.242.70.185:1094] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aSSbXoMM4MaVTk74-AYW7AAAAhE"]
[Tue Nov 25 01:52:35.740433 2025] [:error] [pid 48600:tid 48651] [client 20.242.70.185:7873] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aSSbY_tOzSUAQvWVjBfCjwAAAdU"]
[Tue Nov 25 01:52:38.629372 2025] [:error] [pid 48601:tid 48670] [client 20.242.70.185:5484] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "aSSbZoMM4MaVTk74-AYW-wAAAg0"]
[Tue Nov 25 01:52:40.069435 2025] [:error] [pid 16593:tid 16599] [client 20.242.70.185:5444] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "aSSbaBVGznHBJI2LKpSPvgAAAoQ"]
[Tue Nov 25 01:52:40.913050 2025] [:error] [pid 16441:tid 16447] [client 20.242.70.185:7898] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "aSSbaIq_bc5MOa9HflnmUQAAAIM"]
[Tue Nov 25 01:52:45.137174 2025] [:error] [pid 48599:tid 48625] [client 20.242.70.185:6807] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "aSSbbZzvu6PDJiRKE3J52gAAAZY"]
[Tue Nov 25 01:52:46.454145 2025] [:error] [pid 49900:tid 49916] [client 20.242.70.185:1119] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "aSSbbjCyPLrvg06aorl-agAAAA4"]
[Tue Nov 25 01:52:48.173002 2025] [:error] [pid 16549:tid 16556] [client 20.242.70.185:7905] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "aSSbcKeWW19A99PUw_eLLgAAAUQ"]
[Tue Nov 25 01:52:49.326982 2025] [:error] [pid 48688:tid 48701] [client 20.242.70.185:1151] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "aSSbcRm2q1FkzLam7A36MQAAAkk"]
[Tue Nov 25 01:52:51.274950 2025] [:error] [pid 48600:tid 48654] [client 20.242.70.185:6815] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "aSSbc_tOzSUAQvWVjBfClgAAAdg"]
[Tue Nov 25 01:52:54.799522 2025] [:error] [pid 48600:tid 48644] [client 20.242.70.185:3941] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless2.php"] [unique_id "aSSbdvtOzSUAQvWVjBfCmgAAAc4"]
[Tue Nov 25 01:52:55.669957 2025] [:error] [pid 16549:tid 16574] [client 20.242.70.185:1130] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless2.php"] [unique_id "aSSbd6eWW19A99PUw_eLMQAAAVU"]
[Tue Nov 25 01:52:56.835678 2025] [:error] [pid 48600:tid 48647] [client 20.242.70.185:1123] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless2.php"] [unique_id "aSSbePtOzSUAQvWVjBfCnAAAAdE"]
[Tue Nov 25 01:52:57.830240 2025] [:error] [pid 48601:tid 48674] [client 20.242.70.185:5498] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless2.php"] [unique_id "aSSbeYMM4MaVTk74-AYXCQAAAhE"]
[Tue Nov 25 01:52:59.788133 2025] [:error] [pid 16549:tid 16559] [client 20.242.70.185:3927] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aSSbe6eWW19A99PUw_eLNAAAAUc"]
[Tue Nov 25 01:53:01.416848 2025] [:error] [pid 48601:tid 48667] [client 20.242.70.185:6808] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aSSbfYMM4MaVTk74-AYXDAAAAgo"]
[Tue Nov 25 01:53:03.007084 2025] [:error] [pid 9630:tid 9641] [client 20.242.70.185:5443] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aSSbfyrSgUgPGkizt2p1CgAAAEk"]
[Tue Nov 25 01:53:04.570360 2025] [:error] [pid 16441:tid 16458] [client 20.242.70.185:3962] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aSSbgIq_bc5MOa9HflnmawAAAI4"]
[Tue Nov 25 01:53:05.948495 2025] [:error] [pid 49900:tid 49915] [client 20.242.70.185:7291] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "aSSbgTCyPLrvg06aorl-ewAAAA0"]
[Tue Nov 25 01:53:07.205598 2025] [:error] [pid 16516:tid 16523] [client 20.242.70.185:6818] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "aSSbg_qZbniwaNwL8XkwdwAAAQQ"]
[Tue Nov 25 01:53:08.425746 2025] [:error] [pid 16441:tid 16453] [client 20.242.70.185:7904] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "aSSbhIq_bc5MOa9HflnmdgAAAIk"]
[Tue Nov 25 01:53:10.019627 2025] [:error] [pid 16441:tid 16458] [client 20.242.70.185:5474] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "aSSbhoq_bc5MOa9HflnmegAAAI4"]
[Tue Nov 25 01:53:14.542207 2025] [:error] [pid 16593:tid 16610] [client 20.242.70.185:6943] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsa.php"] [unique_id "aSSbihVGznHBJI2LKpSP1AAAAo8"]
[Tue Nov 25 01:53:17.723719 2025] [:error] [pid 16516:tid 16543] [client 20.242.70.185:3929] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsa.php"] [unique_id "aSSbjfqZbniwaNwL8XkwfQAAARg"]
[Tue Nov 25 01:53:18.946235 2025] [:error] [pid 9630:tid 9656] [client 20.242.70.185:3959] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsa.php"] [unique_id "aSSbjirSgUgPGkizt2p1DwAAAFg"]
[Tue Nov 25 01:53:19.662385 2025] [:error] [pid 16441:tid 16459] [client 20.242.70.185:7921] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsa.php"] [unique_id "aSSbj4q_bc5MOa9HflnmjAAAAI8"]
[Tue Nov 25 01:53:20.890403 2025] [:error] [pid 16516:tid 16540] [client 20.242.70.185:6814] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "aSSbkPqZbniwaNwL8XkwfgAAARU"]
[Tue Nov 25 01:53:21.469214 2025] [:error] [pid 49900:tid 49916] [client 20.242.70.185:7916] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "aSSbkTCyPLrvg06aorl-gQAAAA4"]
[Tue Nov 25 01:53:22.294753 2025] [:error] [pid 9630:tid 9643] [client 20.242.70.185:5452] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "aSSbkirSgUgPGkizt2p1EQAAAEs"]
[Tue Nov 25 01:53:25.003941 2025] [:error] [pid 16441:tid 16455] [client 20.242.70.185:3952] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "aSSblYq_bc5MOa9HflnmlQAAAIs"]
[Tue Nov 25 01:53:26.550206 2025] [:error] [pid 16516:tid 16542] [client 20.242.70.185:6935] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "aSSblvqZbniwaNwL8XkwgwAAARc"]
[Tue Nov 25 01:53:27.873252 2025] [:error] [pid 16593:tid 16599] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Tue Nov 25 01:53:28.741695 2025] [:error] [pid 16593:tid 16599] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue Nov 25 01:53:28.966972 2025] [:error] [pid 16593:tid 16601] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/dejavu.php
[Tue Nov 25 01:53:29.180344 2025] [:error] [pid 16593:tid 16608] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Tue Nov 25 01:53:29.394563 2025] [:error] [pid 16593:tid 16598] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Nov 25 01:53:29.608024 2025] [:error] [pid 16593:tid 16606] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Nov 25 01:53:29.838816 2025] [:error] [pid 16593:tid 16603] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php
[Tue Nov 25 01:53:30.169400 2025] [:error] [pid 16593:tid 16597] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Nov 25 01:53:30.381591 2025] [:error] [pid 16593:tid 16607] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Tue Nov 25 01:53:30.606809 2025] [:error] [pid 16593:tid 16618] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Tue Nov 25 01:53:30.839181 2025] [:error] [pid 16593:tid 16600] [client 20.242.70.185:1144] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue Nov 25 01:53:31.047950 2025] [:error] [pid 16593:tid 16619] [client 20.242.70.185:1144] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aSSbmxVGznHBJI2LKpSP6gAAApg"]
[Tue Nov 25 01:53:32.788869 2025] [:error] [pid 48600:tid 48651] [client 20.242.70.185:7930] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aSSbnPtOzSUAQvWVjBfCrwAAAdU"]
[Tue Nov 25 01:53:37.010327 2025] [:error] [pid 9630:tid 9633] [client 20.242.70.185:3938] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aSSboSrSgUgPGkizt2p1GwAAAEE"]
[Tue Nov 25 01:53:38.255224 2025] [:error] [pid 9630:tid 9634] [client 20.242.70.185:7901] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aSSboirSgUgPGkizt2p1HAAAAEI"]
[Tue Nov 25 01:53:39.243452 2025] [:error] [pid 9630:tid 9656] [client 20.242.70.185:6827] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/build.php"] [unique_id "aSSboyrSgUgPGkizt2p1HgAAAFg"]
[Tue Nov 25 01:53:39.894155 2025] [:error] [pid 9630:tid 9645] [client 20.242.70.185:3932] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/build.php"] [unique_id "aSSboyrSgUgPGkizt2p1HwAAAE0"]
[Tue Nov 25 01:53:41.095404 2025] [:error] [pid 49900:tid 49914] [client 20.242.70.185:3961] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/build.php"] [unique_id "aSSbpTCyPLrvg06aorl-igAAAAw"]
[Tue Nov 25 01:53:42.738215 2025] [:error] [pid 16516:tid 16542] [client 20.242.70.185:3967] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/build.php"] [unique_id "aSSbpvqZbniwaNwL8XkwkQAAARc"]
[Tue Nov 25 01:53:44.075835 2025] [:error] [pid 9630:tid 9640] [client 20.242.70.185:3936] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSSbqCrSgUgPGkizt2p1JwAAAEg"]
[Tue Nov 25 01:53:44.792971 2025] [:error] [pid 16516:tid 16529] [client 20.242.70.185:2747] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSSbqPqZbniwaNwL8XkwkgAAAQo"]
[Tue Nov 25 01:53:47.949428 2025] [:error] [pid 49900:tid 49910] [client 20.242.70.185:2229] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSSbqzCyPLrvg06aorl-jgAAAAg"]
[Tue Nov 25 01:53:49.934687 2025] [:error] [pid 48688:tid 48700] [client 20.242.70.185:1147] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ot.php"] [unique_id "aSSbrRm2q1FkzLam7A36eQAAAkg"]
[Tue Nov 25 01:53:52.519442 2025] [:error] [pid 49900:tid 49921] [client 20.242.70.185:7896] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lc.php"] [unique_id "aSSbsDCyPLrvg06aorl-kQAAABM"]
[Tue Nov 25 01:53:54.587930 2025] [:error] [pid 49900:tid 49915] [client 20.242.70.185:5501] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lc.php"] [unique_id "aSSbsjCyPLrvg06aorl-lgAAAA0"]
[Tue Nov 25 01:53:55.886659 2025] [:error] [pid 48600:tid 48636] [client 20.242.70.185:2203] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lc.php"] [unique_id "aSSbs_tOzSUAQvWVjBfCtwAAAcY"]
[Tue Nov 25 01:53:58.216407 2025] [:error] [pid 16549:tid 16563] [client 20.242.70.185:6920] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lc.php"] [unique_id "aSSbtqeWW19A99PUw_eLPQAAAUs"]
[Tue Nov 25 01:53:59.694661 2025] [:error] [pid 9630:tid 9635] [client 20.242.70.185:3928] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cool.php"] [unique_id "aSSbtyrSgUgPGkizt2p1OQAAAEM"]
[Tue Nov 25 01:54:03.969324 2025] [:error] [pid 16593:tid 16595] [client 20.242.70.185:6811] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cool.php"] [unique_id "aSSbuxVGznHBJI2LKpSP8QAAAoA"]
[Tue Nov 25 01:54:06.169976 2025] [:error] [pid 48600:tid 48643] [client 20.242.70.185:7908] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cool.php"] [unique_id "aSSbvvtOzSUAQvWVjBfCxgAAAc0"]
[Tue Nov 25 01:54:07.126307 2025] [:error] [pid 16441:tid 16456] [client 20.242.70.185:2114] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cool.php"] [unique_id "aSSbv4q_bc5MOa9HflnmxAAAAIw"]
[Tue Nov 25 01:54:09.534601 2025] [:error] [pid 16549:tid 16571] [client 20.242.70.185:5469] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSSbwaeWW19A99PUw_eLQAAAAVI"]
[Tue Nov 25 01:54:10.813563 2025] [:error] [pid 9630:tid 9640] [client 20.242.70.185:5288] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSSbwirSgUgPGkizt2p1QwAAAEg"]
[Tue Nov 25 01:54:12.308218 2025] [:error] [pid 9630:tid 9639] [client 20.242.70.185:5297] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSSbxCrSgUgPGkizt2p1RQAAAEc"]
[Tue Nov 25 01:54:13.641610 2025] [:error] [pid 9630:tid 9656] [client 20.242.70.185:7359] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "aSSbxSrSgUgPGkizt2p1RgAAAFg"]
[Tue Nov 25 01:54:15.352796 2025] [:error] [pid 16441:tid 16459] [client 20.242.70.185:5298] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aSSbx4q_bc5MOa9HflnmyAAAAI8"]
[Tue Nov 25 01:54:16.341062 2025] [:error] [pid 48599:tid 48626] [client 20.242.70.185:2413] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aSSbyJzvu6PDJiRKE3J6egAAAZc"]
[Tue Nov 25 01:54:18.432548 2025] [:error] [pid 48600:tid 48640] [client 20.242.70.185:5293] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aSSbyvtOzSUAQvWVjBfCzQAAAco"]
[Tue Nov 25 01:54:19.335985 2025] [:error] [pid 48601:tid 48667] [client 20.242.70.185:5263] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aSSby4MM4MaVTk74-AYXKwAAAgo"]
[Tue Nov 25 01:54:20.382684 2025] [:error] [pid 49900:tid 49914] [client 20.242.70.185:2115] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfile.php"] [unique_id "aSSbzDCyPLrvg06aorl-qgAAAAw"]
[Tue Nov 25 01:54:22.606589 2025] [:error] [pid 49900:tid 49926] [client 20.242.70.185:5472] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfile.php"] [unique_id "aSSbzjCyPLrvg06aorl-rAAAABg"]
[Tue Nov 25 01:54:26.564254 2025] [:error] [pid 9630:tid 9636] [client 20.242.70.185:7934] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfile.php"] [unique_id "aSSb0irSgUgPGkizt2p1ZQAAAEQ"]
[Tue Nov 25 01:54:27.619618 2025] [:error] [pid 48688:tid 48703] [client 20.242.70.185:1142] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfile.php"] [unique_id "aSSb0xm2q1FkzLam7A36pQAAAks"]
[Tue Nov 25 01:54:28.952278 2025] [:error] [pid 9630:tid 9642] [client 20.242.70.185:4730] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "aSSb1CrSgUgPGkizt2p1aAAAAEo"]
[Tue Nov 25 01:54:30.769684 2025] [:error] [pid 9630:tid 9648] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue Nov 25 01:54:31.108852 2025] [:error] [pid 9630:tid 9653] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Nov 25 01:54:31.458463 2025] [:error] [pid 9630:tid 9635] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Tue Nov 25 01:54:31.672348 2025] [:error] [pid 9630:tid 9633] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/astab.php
[Tue Nov 25 01:54:31.893010 2025] [:error] [pid 9630:tid 9655] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/xl.php
[Tue Nov 25 01:54:32.347707 2025] [:error] [pid 9630:tid 9649] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/file17.php
[Tue Nov 25 01:54:32.561366 2025] [:error] [pid 9630:tid 9654] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/pepe.php
[Tue Nov 25 01:54:32.775098 2025] [:error] [pid 9630:tid 9636] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Nov 25 01:54:32.996897 2025] [:error] [pid 9630:tid 9643] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Tue Nov 25 01:54:33.210162 2025] [:error] [pid 9630:tid 9651] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Nov 25 01:54:33.424712 2025] [:error] [pid 9630:tid 9644] [client 20.242.70.185:1479] File does not exist: /usr/local/apache/htdocs/suspended-page/faq.php
[Tue Nov 25 01:54:33.655675 2025] [:error] [pid 9630:tid 9637] [client 20.242.70.185:1479] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aSSb2SrSgUgPGkizt2p1dwAAAEU"]
[Tue Nov 25 01:54:35.749423 2025] [:error] [pid 16441:tid 16453] [client 20.242.70.185:4317] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aSSb24q_bc5MOa9Hflnm6QAAAIk"]
[Tue Nov 25 01:54:38.092102 2025] [:error] [pid 16441:tid 16464] [client 20.242.70.185:3755] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aSSb3oq_bc5MOa9Hflnm7QAAAJQ"]
[Tue Nov 25 01:54:38.821355 2025] [:error] [pid 48600:tid 48654] [client 20.242.70.185:3728] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aSSb3vtOzSUAQvWVjBfC1AAAAdg"]
[Tue Nov 25 01:54:39.475189 2025] [:error] [pid 16593:tid 16595] [client 20.242.70.185:3738] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CLA.php"] [unique_id "aSSb3xVGznHBJI2LKpSQAgAAAoA"]
[Tue Nov 25 01:54:40.876152 2025] [:error] [pid 48599:tid 48619] [client 20.242.70.185:2852] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CLA.php"] [unique_id "aSSb4Jzvu6PDJiRKE3J6hwAAAZA"]
[Tue Nov 25 01:54:41.831510 2025] [:error] [pid 48600:tid 48641] [client 20.242.70.185:4102] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CLA.php"] [unique_id "aSSb4ftOzSUAQvWVjBfC1gAAAcs"]
[Tue Nov 25 01:54:43.047309 2025] [:error] [pid 48601:tid 48674] [client 20.242.70.185:1933] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CLA.php"] [unique_id "aSSb44MM4MaVTk74-AYXWwAAAhE"]
[Tue Nov 25 01:54:43.813895 2025] [:error] [pid 49900:tid 49902] [client 20.242.70.185:6910] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aSSb4zCyPLrvg06aorl-twAAAAA"]
[Tue Nov 25 01:54:45.051371 2025] [:error] [pid 16516:tid 16526] [client 20.242.70.185:7460] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aSSb5fqZbniwaNwL8XkwtAAAAQc"]
[Tue Nov 25 01:54:46.997715 2025] [:error] [pid 16516:tid 16532] [client 20.242.70.185:6212] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aSSb5vqZbniwaNwL8XkwtQAAAQ0"]
[Tue Nov 25 01:54:48.662099 2025] [:error] [pid 48601:tid 48676] [client 20.242.70.185:1996] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aSSb6IMM4MaVTk74-AYXbgAAAhM"]
[Tue Nov 25 01:54:54.024907 2025] [:error] [pid 16593:tid 16612] [client 20.242.70.185:6920] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aSSb7hVGznHBJI2LKpSQDwAAApE"]
[Tue Nov 25 01:54:55.771796 2025] [:error] [pid 16549:tid 16553] [client 20.242.70.185:7618] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aSSb76eWW19A99PUw_eLVwAAAUE"]
[Tue Nov 25 01:54:58.420188 2025] [:error] [pid 9630:tid 9647] [client 20.242.70.185:6285] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aSSb8irSgUgPGkizt2p1hAAAAE8"]
[Tue Nov 25 01:54:59.276024 2025] [:error] [pid 9630:tid 9653] [client 20.242.70.185:3521] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "aSSb8yrSgUgPGkizt2p1hgAAAFU"]
[Tue Nov 25 01:55:00.992699 2025] [:error] [pid 9630:tid 9652] [client 20.242.70.185:1161] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aSSb9CrSgUgPGkizt2p1iAAAAFQ"]
[Tue Nov 25 01:55:03.545527 2025] [:error] [pid 48599:tid 48621] [client 20.242.70.185:6762] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aSSb95zvu6PDJiRKE3J6mQAAAZI"]
[Tue Nov 25 01:55:04.241368 2025] [:error] [pid 16441:tid 16459] [client 20.242.70.185:1262] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aSSb-Iq_bc5MOa9HflnnGgAAAI8"]
[Tue Nov 25 01:55:06.867894 2025] [:error] [pid 49900:tid 49917] [client 20.242.70.185:4435] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aSSb-jCyPLrvg06aorl-6QAAAA8"]
[Tue Nov 25 01:55:10.471273 2025] [:error] [pid 9630:tid 9648] [client 20.242.70.185:6289] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-logiin.php"] [unique_id "aSSb_irSgUgPGkizt2p1mAAAAFA"]
[Tue Nov 25 01:55:15.347433 2025] [:error] [pid 48599:tid 48605] [client 20.242.70.185:1232] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-logiin.php"] [unique_id "aSScA5zvu6PDJiRKE3J6pQAAAYI"]
[Tue Nov 25 01:55:16.688162 2025] [:error] [pid 16441:tid 16466] [client 20.242.70.185:2660] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-logiin.php"] [unique_id "aSScBIq_bc5MOa9HflnnSgAAAJY"]
[Tue Nov 25 01:55:17.709197 2025] [:error] [pid 16441:tid 16463] [client 20.242.70.185:3223] [client 20.242.70.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-logiin.php"] [unique_id "aSScBYq_bc5MOa9HflnnTAAAAJM"]
[Tue Nov 25 03:04:35.254076 2025] [:error] [pid 16516:tid 16531] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php, referer: https://www.google.fr/
[Tue Nov 25 03:04:35.403421 2025] [:error] [pid 16516:tid 16533] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php, referer: https://www.google.co.uk/
[Tue Nov 25 03:04:35.522461 2025] [:error] [pid 16516:tid 16541] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://duckduckgo.com/
[Tue Nov 25 03:04:36.722968 2025] [:error] [pid 16516:tid 16542] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.fr/
[Tue Nov 25 03:04:36.868248 2025] [:error] [pid 16516:tid 16532] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.yahoo.com/
[Tue Nov 25 03:04:36.988264 2025] [:error] [pid 16516:tid 16522] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.yahoo.com/
[Tue Nov 25 03:04:38.717450 2025] [:error] [pid 16516:tid 16536] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.fr/
[Tue Nov 25 03:04:38.838952 2025] [:error] [pid 16516:tid 16519] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://duckduckgo.com/
[Tue Nov 25 03:04:39.909135 2025] [:error] [pid 16516:tid 16521] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.yahoo.com/
[Tue Nov 25 03:04:40.964316 2025] [:error] [pid 16516:tid 16524] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php, referer: https://www.bing.com/
[Tue Nov 25 03:04:41.144301 2025] [:error] [pid 16516:tid 16537] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/ds.php, referer: https://www.bing.com/
[Tue Nov 25 03:04:41.262108 2025] [:error] [pid 16516:tid 16529] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.fr/
[Tue Nov 25 03:04:41.384424 2025] [:error] [pid 16516:tid 16526] [client 4.241.184.63:55945] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.de/
[Tue Nov 25 03:04:55.789272 2025] [autoindex:error] [pid 16516:tid 16522] [client 4.241.184.63:55945] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive, referer: https://www.google.fr/
[Tue Nov 25 11:48:54.561911 2025] [:error] [pid 28609:tid 28623] [client 103.181.86.67:55890] [client 103.181.86.67] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.181.86.67, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aSUnJiGGdT-nZJVs3x1UKgAAAYU"]
[Tue Nov 25 11:48:54.568012 2025] [:error] [pid 28609:tid 28623] [client 103.181.86.67:55890] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Nov 25 16:14:25.390678 2025] [:error] [pid 28740:tid 28796] [client 167.71.187.148:57135] [client 167.71.187.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.71.187.148, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aSVlYVppQCoYxWW6V0VDWgAAAkU"]
[Tue Nov 25 16:14:25.395434 2025] [:error] [pid 28740:tid 28796] [client 167.71.187.148:57135] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Nov 25 18:53:12.167336 2025] [:error] [pid 28739:tid 28766] [client 138.199.60.187:53140] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Nov 25 18:53:12.315007 2025] [:error] [pid 28739:tid 28782] [client 138.199.60.187:53140] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "aSWKmBxGpKmlkG4FexRwXQAAAhQ"]
[Tue Nov 25 18:53:12.571983 2025] [:error] [pid 14168:tid 14180] [client 138.199.60.187:53342] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "aSWKmPR-ZDU0QEgAIItcPgAAAMk"]
[Tue Nov 25 18:53:13.828851 2025] [:error] [pid 14078:tid 14147] [client 138.199.60.187:54116] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "aSWKmdVXYbb0ii_rVoI39QAAAIo"]
[Tue Nov 25 18:53:14.078884 2025] [:error] [pid 14077:tid 14114] [client 138.199.60.187:54254] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "aSWKmhG9n7UHEkwDTyh-VQAAAEQ"]
[Tue Nov 25 18:53:14.356057 2025] [:error] [pid 14077:tid 14116] [client 138.199.60.187:2715] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "aSWKmhG9n7UHEkwDTyh-VwAAAEY"]
[Tue Nov 25 18:53:14.592701 2025] [:error] [pid 14077:tid 14128] [client 138.199.60.187:54524] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmhG9n7UHEkwDTyh-WwAAAFI"]
[Tue Nov 25 18:53:14.880382 2025] [:error] [pid 28842:tid 28999] [client 138.199.60.187:54698] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmtNmoaPf6T4-6C2D0wAAA0k"]
[Tue Nov 25 18:53:15.113096 2025] [:error] [pid 14077:tid 14134] [client 138.199.60.187:54866] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmxG9n7UHEkwDTyh-ZwAAAFg"]
[Tue Nov 25 18:53:15.403889 2025] [:error] [pid 14077:tid 14114] [client 138.199.60.187:55048] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKmxG9n7UHEkwDTyh-aQAAAEQ"]
[Tue Nov 25 18:53:15.621650 2025] [:error] [pid 2987:tid 3011] [client 138.199.60.187:55304] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSWKm8-djEt-pTzPxnyUNQAAAVY"]
[Tue Nov 25 22:05:04.597674 2025] [:error] [pid 2987:tid 2999] [client 13.74.149.244:8673] File does not exist: /usr/local/apache/htdocs/suspended-page/acxx.php
[Tue Nov 25 22:05:04.851759 2025] [:error] [pid 2987:tid 2995] [client 13.74.149.244:8673] File does not exist: /usr/local/apache/htdocs/suspended-page/dev1s.php
[Tue Nov 25 22:05:05.107082 2025] [:error] [pid 2987:tid 2997] [client 13.74.149.244:8673] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Tue Nov 25 22:05:05.361258 2025] [:error] [pid 2987:tid 3007] [client 13.74.149.244:8673] File does not exist: /usr/local/apache/htdocs/suspended-page/c4.php
[Tue Nov 25 22:05:05.615215 2025] [:error] [pid 2987:tid 3008] [client 13.74.149.244:8673] File does not exist: /usr/local/apache/htdocs/suspended-page/wsx.php
[Tue Nov 25 22:05:05.869230 2025] [:error] [pid 2987:tid 2998] [client 13.74.149.244:8673] File does not exist: /usr/local/apache/htdocs/suspended-page/b4.php
[Tue Nov 25 22:05:06.123491 2025] [:error] [pid 2987:tid 3009] [client 13.74.149.244:8673] File does not exist: /usr/local/apache/htdocs/suspended-page/xenium4.php
[Tue Nov 25 22:05:06.377169 2025] [:error] [pid 2987:tid 3004] [client 13.74.149.244:8673] File does not exist: /usr/local/apache/htdocs/suspended-page/xpw.php
[Tue Nov 25 22:05:06.630322 2025] [:error] [pid 2987:tid 3011] [client 13.74.149.244:8673] File does not exist: /usr/local/apache/htdocs/suspended-page/ww2.php
[Tue Nov 25 22:05:06.883968 2025] [:error] [pid 2987:tid 3000] [client 13.74.149.244:8673] File does not exist: /usr/local/apache/htdocs/suspended-page/ww3.php
[Tue Nov 25 22:05:07.135381 2025] [:error] [pid 2987:tid 2992] [client 13.74.149.244:8673] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "aSW3k8-djEt-pTzPxnzUpAAAAUM"]
[Tue Nov 25 22:05:07.646449 2025] [:error] [pid 43981:tid 43985] [client 13.74.149.244:5172] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "aSW3kwgZn97m_qh_RaFwpgAAAwI"]
[Tue Nov 25 22:05:08.150433 2025] [:error] [pid 14077:tid 14134] [client 13.74.149.244:11597] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "aSW3lBG9n7UHEkwDTyjVcgAAAFg"]
[Tue Nov 25 22:05:08.654612 2025] [:error] [pid 28739:tid 28779] [client 13.74.149.244:2446] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "aSW3lBxGpKmlkG4FexS2ywAAAhE"]
[Tue Nov 25 22:05:09.159475 2025] [:error] [pid 14076:tid 14090] [client 13.74.149.244:1406] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "aSW3lXsB4Gz6Qw-pvBtL6wAAAAk"]
[Tue Nov 25 22:05:09.666835 2025] [:error] [pid 43981:tid 44006] [client 13.74.149.244:1382] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "aSW3lQgZn97m_qh_RaFwpwAAAxc"]
[Tue Nov 25 22:05:10.183929 2025] [:error] [pid 28739:tid 28783] [client 13.74.149.244:12532] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "aSW3lhxGpKmlkG4FexS2zwAAAhU"]
[Tue Nov 25 22:05:10.708429 2025] [:error] [pid 28609:tid 28619] [client 13.74.149.244:6699] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "aSW3liGGdT-nZJVs3x331QAAAYE"]
[Tue Nov 25 22:05:11.213665 2025] [:error] [pid 14076:tid 14105] [client 13.74.149.244:8674] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/snus.php"] [unique_id "aSW3l3sB4Gz6Qw-pvBtL8QAAABg"]
[Tue Nov 25 22:05:11.712690 2025] [:error] [pid 14077:tid 14111] [client 13.74.149.244:5052] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/snus.php"] [unique_id "aSW3lxG9n7UHEkwDTyjVdwAAAEE"]
[Tue Nov 25 22:05:12.213997 2025] [:error] [pid 28609:tid 28635] [client 13.74.149.244:18613] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/snus.php"] [unique_id "aSW3mCGGdT-nZJVs3x331gAAAZE"]
[Tue Nov 25 22:05:12.721176 2025] [:error] [pid 14077:tid 14110] [client 13.74.149.244:2195] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/snus.php"] [unique_id "aSW3mBG9n7UHEkwDTyjVegAAAEA"]
[Tue Nov 25 22:05:13.264458 2025] [:error] [pid 14076:tid 14082] [client 13.74.149.244:11602] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/011i.php"] [unique_id "aSW3mXsB4Gz6Qw-pvBtL-AAAAAE"]
[Tue Nov 25 22:05:13.795260 2025] [:error] [pid 14076:tid 14093] [client 13.74.149.244:2189] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/011i.php"] [unique_id "aSW3mXsB4Gz6Qw-pvBtL-QAAAAw"]
[Tue Nov 25 22:05:14.335120 2025] [:error] [pid 2987:tid 3013] [client 13.74.149.244:1389] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/011i.php"] [unique_id "aSW3ms-djEt-pTzPxnzUqgAAAVg"]
[Tue Nov 25 22:05:14.890761 2025] [:error] [pid 28609:tid 28630] [client 13.74.149.244:12494] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/011i.php"] [unique_id "aSW3miGGdT-nZJVs3x332gAAAYw"]
[Tue Nov 25 22:05:15.447715 2025] [:error] [pid 28609:tid 28642] [client 13.74.149.244:5160] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/disaos.php"] [unique_id "aSW3myGGdT-nZJVs3x332wAAAZg"]
[Tue Nov 25 22:05:15.952454 2025] [:error] [pid 43981:tid 43992] [client 13.74.149.244:6237] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/disaos.php"] [unique_id "aSW3mwgZn97m_qh_RaFwqwAAAwk"]
[Tue Nov 25 22:05:16.479606 2025] [:error] [pid 28609:tid 28638] [client 13.74.149.244:8697] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/disaos.php"] [unique_id "aSW3nCGGdT-nZJVs3x333QAAAZQ"]
[Tue Nov 25 22:05:16.999227 2025] [:error] [pid 14076:tid 14101] [client 13.74.149.244:9447] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/disaos.php"] [unique_id "aSW3nHsB4Gz6Qw-pvBtL_AAAABQ"]
[Tue Nov 25 22:05:17.519457 2025] [:error] [pid 14078:tid 14149] [client 13.74.149.244:18577] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gdn.php"] [unique_id "aSW3ndVXYbb0ii_rVoKNFAAAAIw"]
[Tue Nov 25 22:05:18.042175 2025] [:error] [pid 14077:tid 14113] [client 13.74.149.244:2176] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gdn.php"] [unique_id "aSW3nhG9n7UHEkwDTyjVfwAAAEM"]
[Tue Nov 25 22:05:18.559223 2025] [:error] [pid 14078:tid 14140] [client 13.74.149.244:5032] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gdn.php"] [unique_id "aSW3ntVXYbb0ii_rVoKNFgAAAIM"]
[Tue Nov 25 22:05:19.070462 2025] [:error] [pid 14078:tid 14138] [client 13.74.149.244:6684] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gdn.php"] [unique_id "aSW3n9VXYbb0ii_rVoKNGAAAAIE"]
[Tue Nov 25 22:05:19.572696 2025] [:error] [pid 28609:tid 28624] [client 13.74.149.244:2371] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww4.php"] [unique_id "aSW3nyGGdT-nZJVs3x333gAAAYY"]
[Tue Nov 25 22:05:20.089357 2025] [:error] [pid 43981:tid 44004] [client 13.74.149.244:12511] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww4.php"] [unique_id "aSW3oAgZn97m_qh_RaFwrgAAAxU"]
[Tue Nov 25 22:05:20.593617 2025] [:error] [pid 28609:tid 28639] [client 13.74.149.244:10020] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww4.php"] [unique_id "aSW3oCGGdT-nZJVs3x334QAAAZU"]
[Tue Nov 25 22:05:21.094249 2025] [:error] [pid 28836:tid 28955] [client 13.74.149.244:2472] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww4.php"] [unique_id "aSW3oZwNRsoxcLQGkTfyqAAAAsA"]
[Tue Nov 25 22:05:21.602045 2025] [:error] [pid 2987:tid 3007] [client 13.74.149.244:9999] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "aSW3oc-djEt-pTzPxnzUsAAAAVI"]
[Tue Nov 25 22:05:22.103527 2025] [:error] [pid 14077:tid 14118] [client 13.74.149.244:18608] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "aSW3ohG9n7UHEkwDTyjVhwAAAEg"]
[Tue Nov 25 22:05:22.606919 2025] [:error] [pid 28739:tid 28770] [client 13.74.149.244:3904] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "aSW3ohxGpKmlkG4FexS22wAAAgg"]
[Tue Nov 25 22:05:23.114437 2025] [:error] [pid 28739:tid 28764] [client 13.74.149.244:4997] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "aSW3oxxGpKmlkG4FexS23QAAAgI"]
[Tue Nov 25 22:05:23.623215 2025] [:error] [pid 14076:tid 14086] [client 13.74.149.244:11622] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aSW3o3sB4Gz6Qw-pvBtMCQAAAAU"]
[Tue Nov 25 22:05:24.124838 2025] [:error] [pid 14076:tid 14105] [client 13.74.149.244:6215] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aSW3pHsB4Gz6Qw-pvBtMCwAAABg"]
[Tue Nov 25 22:05:24.627433 2025] [:error] [pid 14077:tid 14127] [client 13.74.149.244:11635] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aSW3pBG9n7UHEkwDTyjViwAAAFE"]
[Tue Nov 25 22:05:25.134692 2025] [:error] [pid 28739:tid 28780] [client 13.74.149.244:3938] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aSW3pRxGpKmlkG4FexS24QAAAhI"]
[Tue Nov 25 22:05:25.636142 2025] [:error] [pid 28836:tid 28964] [client 13.74.149.244:1362] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nx1.php"] [unique_id "aSW3pZwNRsoxcLQGkTfysAAAAsk"]
[Tue Nov 25 22:05:26.140239 2025] [:error] [pid 14077:tid 14114] [client 13.74.149.244:12491] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nx1.php"] [unique_id "aSW3phG9n7UHEkwDTyjVjQAAAEQ"]
[Tue Nov 25 22:05:26.642600 2025] [:error] [pid 28609:tid 28641] [client 13.74.149.244:6704] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nx1.php"] [unique_id "aSW3piGGdT-nZJVs3x335QAAAZc"]
[Tue Nov 25 22:05:27.143938 2025] [:error] [pid 14077:tid 14120] [client 13.74.149.244:6228] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nx1.php"] [unique_id "aSW3pxG9n7UHEkwDTyjVjwAAAEo"]
[Tue Nov 25 22:05:27.644280 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:3918] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ii.php"] [unique_id "aSW3p9VXYbb0ii_rVoKNJQAAAJQ"]
[Tue Nov 25 22:05:28.144294 2025] [:error] [pid 14078:tid 14152] [client 13.74.149.244:1349] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ii.php"] [unique_id "aSW3qNVXYbb0ii_rVoKNKwAAAI8"]
[Tue Nov 25 22:05:28.645288 2025] [:error] [pid 28609:tid 28631] [client 13.74.149.244:8644] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ii.php"] [unique_id "aSW3qCGGdT-nZJVs3x335wAAAY0"]
[Tue Nov 25 22:05:29.148598 2025] [:error] [pid 14078:tid 14153] [client 13.74.149.244:9461] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ii.php"] [unique_id "aSW3qdVXYbb0ii_rVoKNOAAAAJA"]
[Tue Nov 25 22:05:29.652816 2025] [:error] [pid 14076:tid 14105] [client 13.74.149.244:10042] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kr.php"] [unique_id "aSW3qXsB4Gz6Qw-pvBtMFwAAABg"]
[Tue Nov 25 22:05:30.157846 2025] [:error] [pid 14168:tid 14191] [client 13.74.149.244:2385] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kr.php"] [unique_id "aSW3qvR-ZDU0QEgAIIuVZwAAANQ"]
[Tue Nov 25 22:05:30.670519 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:11588] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kr.php"] [unique_id "aSW3qtVXYbb0ii_rVoKNTAAAAJQ"]
[Tue Nov 25 22:05:31.170859 2025] [:error] [pid 14168:tid 14193] [client 13.74.149.244:8655] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kr.php"] [unique_id "aSW3q_R-ZDU0QEgAIIuVaAAAANY"]
[Tue Nov 25 22:05:31.671876 2025] [:error] [pid 28739:tid 28778] [client 13.74.149.244:1351] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/18299.php"] [unique_id "aSW3qxxGpKmlkG4FexS26AAAAhA"]
[Tue Nov 25 22:05:32.177857 2025] [:error] [pid 28739:tid 28766] [client 13.74.149.244:13771] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/18299.php"] [unique_id "aSW3rBxGpKmlkG4FexS26wAAAgQ"]
[Tue Nov 25 22:05:32.687926 2025] [:error] [pid 2987:tid 3011] [client 13.74.149.244:6668] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/18299.php"] [unique_id "aSW3rM-djEt-pTzPxnzUvgAAAVY"]
[Tue Nov 25 22:05:33.195340 2025] [:error] [pid 14076:tid 14100] [client 13.74.149.244:6708] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/18299.php"] [unique_id "aSW3rXsB4Gz6Qw-pvBtMHwAAABM"]
[Tue Nov 25 22:05:33.696218 2025] [:error] [pid 2987:tid 3003] [client 13.74.149.244:9455] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aSW3rc-djEt-pTzPxnzUwAAAAU4"]
[Tue Nov 25 22:05:34.201533 2025] [:error] [pid 14168:tid 14179] [client 13.74.149.244:5021] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aSW3rvR-ZDU0QEgAIIuVbQAAAMg"]
[Tue Nov 25 22:05:34.703617 2025] [:error] [pid 28609:tid 28641] [client 13.74.149.244:18562] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aSW3riGGdT-nZJVs3x338gAAAZc"]
[Tue Nov 25 22:05:35.212139 2025] [:error] [pid 43981:tid 43994] [client 13.74.149.244:2458] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aSW3rwgZn97m_qh_RaFwuwAAAws"]
[Tue Nov 25 22:05:35.711786 2025] [:error] [pid 2987:tid 3013] [client 13.74.149.244:12496] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chati.php"] [unique_id "aSW3r8-djEt-pTzPxnzUwwAAAVg"]
[Tue Nov 25 22:05:36.218693 2025] [:error] [pid 28836:tid 28969] [client 13.74.149.244:8665] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chati.php"] [unique_id "aSW3sJwNRsoxcLQGkTfy4AAAAs4"]
[Tue Nov 25 22:05:36.720041 2025] [:error] [pid 43843:tid 43852] [client 13.74.149.244:10032] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chati.php"] [unique_id "aSW3sBhx4v3NUNdMKDP89wAAAcc"]
[Tue Nov 25 22:05:37.225216 2025] [:error] [pid 28836:tid 29014] [client 13.74.149.244:9417] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chati.php"] [unique_id "aSW3sZwNRsoxcLQGkTfy4gAAAtg"]
[Tue Nov 25 22:05:37.724838 2025] [:error] [pid 2987:tid 3006] [client 13.74.149.244:6691] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content-over.php"] [unique_id "aSW3sc-djEt-pTzPxnzUyQAAAVE"]
[Tue Nov 25 22:05:38.227325 2025] [:error] [pid 28609:tid 28629] [client 13.74.149.244:2390] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content-over.php"] [unique_id "aSW3siGGdT-nZJVs3x33-gAAAYs"]
[Tue Nov 25 22:05:38.734644 2025] [:error] [pid 28836:tid 28962] [client 13.74.149.244:6701] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content-over.php"] [unique_id "aSW3spwNRsoxcLQGkTfy5gAAAsc"]
[Tue Nov 25 22:05:39.235889 2025] [:error] [pid 28609:tid 28624] [client 13.74.149.244:6573] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content-over.php"] [unique_id "aSW3syGGdT-nZJVs3x33_AAAAYY"]
[Tue Nov 25 22:05:39.739387 2025] [:error] [pid 14078:tid 14161] [client 13.74.149.244:3894] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "aSW3s9VXYbb0ii_rVoKNWAAAAJg"]
[Tue Nov 25 22:05:40.243165 2025] [:error] [pid 28739:tid 28766] [client 13.74.149.244:12509] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "aSW3tBxGpKmlkG4FexS29QAAAgQ"]
[Tue Nov 25 22:05:40.745773 2025] [:error] [pid 28836:tid 28986] [client 13.74.149.244:2490] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "aSW3tJwNRsoxcLQGkTfy6AAAAs8"]
[Tue Nov 25 22:05:41.267590 2025] [:error] [pid 2987:tid 2998] [client 13.74.149.244:2409] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "aSW3tc-djEt-pTzPxnzUzQAAAUk"]
[Tue Nov 25 22:05:41.768269 2025] [:error] [pid 43981:tid 43984] [client 13.74.149.244:5020] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/naxc.php"] [unique_id "aSW3tQgZn97m_qh_RaFwvwAAAwE"]
[Tue Nov 25 22:05:42.278238 2025] [:error] [pid 43981:tid 43988] [client 13.74.149.244:3921] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/naxc.php"] [unique_id "aSW3tggZn97m_qh_RaFwwQAAAwU"]
[Tue Nov 25 22:05:42.781806 2025] [:error] [pid 14078:tid 14141] [client 13.74.149.244:12498] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/naxc.php"] [unique_id "aSW3ttVXYbb0ii_rVoKNWgAAAIQ"]
[Tue Nov 25 22:05:43.286316 2025] [:error] [pid 28739:tid 28777] [client 13.74.149.244:3940] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/naxc.php"] [unique_id "aSW3txxGpKmlkG4FexS29wAAAg8"]
[Tue Nov 25 22:05:43.789969 2025] [:error] [pid 14078:tid 14150] [client 13.74.149.244:6554] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aSW3t9VXYbb0ii_rVoKNXwAAAI0"]
[Tue Nov 25 22:05:44.293702 2025] [:error] [pid 14077:tid 14118] [client 13.74.149.244:1388] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aSW3uBG9n7UHEkwDTyjVwQAAAEg"]
[Tue Nov 25 22:05:44.800794 2025] [:error] [pid 28739:tid 28767] [client 13.74.149.244:9410] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aSW3uBxGpKmlkG4FexS2-wAAAgU"]
[Tue Nov 25 22:05:45.320794 2025] [:error] [pid 28739:tid 28775] [client 13.74.149.244:1350] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aSW3uRxGpKmlkG4FexS2_QAAAg0"]
[Tue Nov 25 22:05:45.822841 2025] [:error] [pid 43843:tid 43859] [client 13.74.149.244:3864] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "aSW3uRhx4v3NUNdMKDP9BQAAAc4"]
[Tue Nov 25 22:05:46.331738 2025] [:error] [pid 14078:tid 14158] [client 13.74.149.244:3932] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "aSW3utVXYbb0ii_rVoKNYAAAAJU"]
[Tue Nov 25 22:05:46.832153 2025] [:error] [pid 43843:tid 43853] [client 13.74.149.244:5152] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "aSW3uhhx4v3NUNdMKDP9BgAAAcg"]
[Tue Nov 25 22:05:47.345772 2025] [:error] [pid 43843:tid 43855] [client 13.74.149.244:12504] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "aSW3uxhx4v3NUNdMKDP9BwAAAco"]
[Tue Nov 25 22:05:47.867132 2025] [:error] [pid 28739:tid 28781] [client 13.74.149.244:5135] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rsjlrria.php"] [unique_id "aSW3uxxGpKmlkG4FexS3BwAAAhM"]
[Tue Nov 25 22:05:48.376311 2025] [:error] [pid 43981:tid 43998] [client 13.74.149.244:2435] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rsjlrria.php"] [unique_id "aSW3vAgZn97m_qh_RaFwzAAAAw8"]
[Tue Nov 25 22:05:48.878728 2025] [:error] [pid 14168:tid 14185] [client 13.74.149.244:3903] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rsjlrria.php"] [unique_id "aSW3vPR-ZDU0QEgAIIuVdwAAAM4"]
[Tue Nov 25 22:05:49.385677 2025] [:error] [pid 43843:tid 43863] [client 13.74.149.244:8680] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rsjlrria.php"] [unique_id "aSW3vRhx4v3NUNdMKDP9DAAAAdI"]
[Tue Nov 25 22:05:49.890077 2025] [:error] [pid 14168:tid 14179] [client 13.74.149.244:11629] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSW3vfR-ZDU0QEgAIIuVewAAAMg"]
[Tue Nov 25 22:05:50.393330 2025] [:error] [pid 28609:tid 28627] [client 13.74.149.244:2235] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "aSW3viGGdT-nZJVs3x34CQAAAYk"]
[Tue Nov 25 22:05:50.897287 2025] [:error] [pid 28609:tid 28632] [client 13.74.149.244:1359] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "aSW3viGGdT-nZJVs3x34CwAAAY4"]
[Tue Nov 25 22:05:51.405791 2025] [:error] [pid 28836:tid 28962] [client 13.74.149.244:1374] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "aSW3v5wNRsoxcLQGkTfy8wAAAsc"]
[Tue Nov 25 22:05:51.909231 2025] [:error] [pid 14078:tid 14141] [client 13.74.149.244:3842] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/gec.php"] [unique_id "aSW3v9VXYbb0ii_rVoKNegAAAIQ"]
[Tue Nov 25 22:05:52.411190 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:6535] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/gec.php"] [unique_id "aSW3wNVXYbb0ii_rVoKNfgAAAIs"]
[Tue Nov 25 22:05:52.921101 2025] [:error] [pid 14077:tid 14121] [client 13.74.149.244:6695] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/gec.php"] [unique_id "aSW3wBG9n7UHEkwDTyjV2QAAAEs"]
[Tue Nov 25 22:05:53.430436 2025] [:error] [pid 28836:tid 28961] [client 13.74.149.244:1425] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/gec.php"] [unique_id "aSW3wZwNRsoxcLQGkTfy9wAAAsY"]
[Tue Nov 25 22:05:53.944784 2025] [:error] [pid 14076:tid 14081] [client 13.74.149.244:6577] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nfu.php"] [unique_id "aSW3wXsB4Gz6Qw-pvBtMOgAAAAA"]
[Tue Nov 25 22:05:54.447249 2025] [:error] [pid 14076:tid 14092] [client 13.74.149.244:6552] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nfu.php"] [unique_id "aSW3wnsB4Gz6Qw-pvBtMOwAAAAs"]
[Tue Nov 25 22:05:54.956946 2025] [:error] [pid 14076:tid 14100] [client 13.74.149.244:2396] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nfu.php"] [unique_id "aSW3wnsB4Gz6Qw-pvBtMPgAAABM"]
[Tue Nov 25 22:05:55.464627 2025] [:error] [pid 43981:tid 43987] [client 13.74.149.244:2178] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nfu.php"] [unique_id "aSW3wwgZn97m_qh_RaFw1gAAAwQ"]
[Tue Nov 25 22:05:55.966260 2025] [:error] [pid 43843:tid 43854] [client 13.74.149.244:1424] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/nfu.php"] [unique_id "aSW3wxhx4v3NUNdMKDP9FQAAAck"]
[Tue Nov 25 22:05:56.473377 2025] [:error] [pid 14076:tid 14081] [client 13.74.149.244:1348] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/nfu.php"] [unique_id "aSW3xHsB4Gz6Qw-pvBtMTAAAAAA"]
[Tue Nov 25 22:05:56.982740 2025] [:error] [pid 43843:tid 43849] [client 13.74.149.244:2376] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/nfu.php"] [unique_id "aSW3xBhx4v3NUNdMKDP9FwAAAcQ"]
[Tue Nov 25 22:05:57.484466 2025] [:error] [pid 14076:tid 14100] [client 13.74.149.244:6533] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/nfu.php"] [unique_id "aSW3xXsB4Gz6Qw-pvBtMTQAAABM"]
[Tue Nov 25 22:05:57.987836 2025] [:error] [pid 2987:tid 3002] [client 13.74.149.244:2377] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xl8.php"] [unique_id "aSW3xc-djEt-pTzPxnzU2wAAAU0"]
[Tue Nov 25 22:05:58.490877 2025] [:error] [pid 28609:tid 28629] [client 13.74.149.244:5174] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xl8.php"] [unique_id "aSW3xiGGdT-nZJVs3x34EwAAAYs"]
[Tue Nov 25 22:05:58.994655 2025] [:error] [pid 14077:tid 14111] [client 13.74.149.244:8694] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xl8.php"] [unique_id "aSW3xhG9n7UHEkwDTyjV6AAAAEE"]
[Tue Nov 25 22:05:59.499846 2025] [:error] [pid 28609:tid 28638] [client 13.74.149.244:4955] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xl8.php"] [unique_id "aSW3xyGGdT-nZJVs3x34GAAAAZQ"]
[Tue Nov 25 22:06:00.000227 2025] [:error] [pid 2987:tid 2990] [client 13.74.149.244:3869] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xl6.php"] [unique_id "aSW3x8-djEt-pTzPxnzU3QAAAUE"]
[Tue Nov 25 22:06:00.557305 2025] [:error] [pid 43981:tid 44001] [client 13.74.149.244:1428] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xl6.php"] [unique_id "aSW3yAgZn97m_qh_RaFw3wAAAxI"]
[Tue Nov 25 22:06:01.078927 2025] [:error] [pid 28836:tid 28960] [client 13.74.149.244:8696] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xl6.php"] [unique_id "aSW3yZwNRsoxcLQGkTfy-wAAAsU"]
[Tue Nov 25 22:06:01.584160 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:8681] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xl6.php"] [unique_id "aSW3yRG9n7UHEkwDTyjV7AAAAE8"]
[Tue Nov 25 22:06:02.117293 2025] [:error] [pid 28836:tid 29012] [client 13.74.149.244:6534] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aSW3ypwNRsoxcLQGkTfy_QAAAtY"]
[Tue Nov 25 22:06:02.624925 2025] [:error] [pid 14077:tid 14112] [client 13.74.149.244:13316] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aSW3yhG9n7UHEkwDTyjV8QAAAEI"]
[Tue Nov 25 22:06:03.130909 2025] [:error] [pid 14076:tid 14102] [client 13.74.149.244:6562] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aSW3y3sB4Gz6Qw-pvBtMWAAAABU"]
[Tue Nov 25 22:06:03.640195 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:13431] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aSW3y9VXYbb0ii_rVoKNhgAAAJE"]
[Tue Nov 25 22:06:04.162987 2025] [:error] [pid 43843:tid 43863] [client 13.74.149.244:11634] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-706.php"] [unique_id "aSW3zBhx4v3NUNdMKDP9HQAAAdI"]
[Tue Nov 25 22:06:04.677881 2025] [:error] [pid 28739:tid 28777] [client 13.74.149.244:2382] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-706.php"] [unique_id "aSW3zBxGpKmlkG4FexS3IQAAAg8"]
[Tue Nov 25 22:06:05.180913 2025] [:error] [pid 28739:tid 28769] [client 13.74.149.244:13397] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-706.php"] [unique_id "aSW3zRxGpKmlkG4FexS3IgAAAgc"]
[Tue Nov 25 22:06:05.683780 2025] [:error] [pid 14077:tid 14129] [client 13.74.149.244:6570] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-706.php"] [unique_id "aSW3zRG9n7UHEkwDTyjV9gAAAFM"]
[Tue Nov 25 22:06:06.191319 2025] [:error] [pid 14078:tid 14139] [client 13.74.149.244:9159] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Nov 25 22:06:06.442891 2025] [:error] [pid 14078:tid 14141] [client 13.74.149.244:9159] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Tue Nov 25 22:06:07.226559 2025] [:error] [pid 14078:tid 14160] [client 13.74.149.244:9159] File does not exist: /usr/local/apache/htdocs/suspended-page/e56.php
[Tue Nov 25 22:06:07.484280 2025] [:error] [pid 14078:tid 14140] [client 13.74.149.244:9159] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x.php
[Tue Nov 25 22:06:07.739457 2025] [:error] [pid 14078:tid 14155] [client 13.74.149.244:9159] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Nov 25 22:06:08.084994 2025] [:error] [pid 14078:tid 14155] [client 13.74.149.244:9159] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Tue Nov 25 22:06:08.342129 2025] [:error] [pid 14078:tid 14156] [client 13.74.149.244:9159] File does not exist: /usr/local/apache/htdocs/suspended-page/20.php
[Tue Nov 25 22:06:08.598646 2025] [:error] [pid 14078:tid 14152] [client 13.74.149.244:9159] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Nov 25 22:06:08.852224 2025] [:error] [pid 14078:tid 14143] [client 13.74.149.244:9159] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php
[Tue Nov 25 22:06:09.116369 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:9159] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/build.php"] [unique_id "aSW30dVXYbb0ii_rVoKNmgAAAJE"]
[Tue Nov 25 22:06:09.644691 2025] [:error] [pid 43981:tid 43986] [client 13.74.149.244:13386] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/build.php"] [unique_id "aSW30QgZn97m_qh_RaFw7gAAAwM"]
[Tue Nov 25 22:06:10.147535 2025] [:error] [pid 2987:tid 2989] [client 13.74.149.244:1440] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/build.php"] [unique_id "aSW30s-djEt-pTzPxnzU5AAAAUA"]
[Tue Nov 25 22:06:10.653416 2025] [:error] [pid 14168:tid 14183] [client 13.74.149.244:1413] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/build.php"] [unique_id "aSW30vR-ZDU0QEgAIIuVpQAAAMw"]
[Tue Nov 25 22:06:11.169228 2025] [:error] [pid 28609:tid 28639] [client 13.74.149.244:5224] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSW30yGGdT-nZJVs3x34IgAAAZU"]
[Tue Nov 25 22:06:11.688279 2025] [:error] [pid 14077:tid 14133] [client 13.74.149.244:13314] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSW30xG9n7UHEkwDTyjV_AAAAFc"]
[Tue Nov 25 22:06:12.207016 2025] [:error] [pid 28609:tid 28627] [client 13.74.149.244:13432] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSW31CGGdT-nZJVs3x34IwAAAYk"]
[Tue Nov 25 22:06:12.711421 2025] [:error] [pid 28609:tid 28636] [client 13.74.149.244:8652] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/upload/css.php"] [unique_id "aSW31CGGdT-nZJVs3x34JAAAAZI"]
[Tue Nov 25 22:06:13.224489 2025] [:error] [pid 14168:tid 14192] [client 13.74.149.244:13388] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "aSW31fR-ZDU0QEgAIIuVqAAAANU"]
[Tue Nov 25 22:06:13.727264 2025] [:error] [pid 28836:tid 28964] [client 13.74.149.244:1410] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "aSW31ZwNRsoxcLQGkTfzCAAAAsk"]
[Tue Nov 25 22:06:14.246464 2025] [:error] [pid 43843:tid 43863] [client 13.74.149.244:6233] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "aSW31hhx4v3NUNdMKDP9LAAAAdI"]
[Tue Nov 25 22:06:14.753326 2025] [:error] [pid 14076:tid 14089] [client 13.74.149.244:5245] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "aSW31nsB4Gz6Qw-pvBtMZAAAAAg"]
[Tue Nov 25 22:06:15.255014 2025] [:error] [pid 2987:tid 3001] [client 13.74.149.244:5233] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aSW318-djEt-pTzPxnzU7QAAAUw"]
[Tue Nov 25 22:06:15.756269 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:2457] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aSW319VXYbb0ii_rVoKNpwAAAJE"]
[Tue Nov 25 22:06:16.262506 2025] [:error] [pid 28609:tid 28637] [client 13.74.149.244:13390] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aSW32CGGdT-nZJVs3x34KAAAAZM"]
[Tue Nov 25 22:06:16.769347 2025] [:error] [pid 14077:tid 14129] [client 13.74.149.244:2387] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aSW32BG9n7UHEkwDTyjWBAAAAFM"]
[Tue Nov 25 22:06:17.271523 2025] [:error] [pid 14076:tid 14094] [client 13.74.149.244:11601] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "aSW32XsB4Gz6Qw-pvBtMaAAAAA0"]
[Tue Nov 25 22:06:17.776265 2025] [:error] [pid 14076:tid 14095] [client 13.74.149.244:2227] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "aSW32XsB4Gz6Qw-pvBtMaQAAAA4"]
[Tue Nov 25 22:06:18.291663 2025] [:error] [pid 43981:tid 44006] [client 13.74.149.244:2183] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "aSW32ggZn97m_qh_RaFw9QAAAxc"]
[Tue Nov 25 22:06:18.804937 2025] [:error] [pid 14168:tid 14180] [client 13.74.149.244:6945] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "aSW32vR-ZDU0QEgAIIuVsAAAAMk"]
[Tue Nov 25 22:06:19.316225 2025] [:error] [pid 28739:tid 28776] [client 13.74.149.244:18560] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSW32xxGpKmlkG4FexS3NQAAAg4"]
[Tue Nov 25 22:06:19.830897 2025] [:error] [pid 14076:tid 14088] [client 13.74.149.244:9202] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSW323sB4Gz6Qw-pvBtMbAAAAAc"]
[Tue Nov 25 22:06:20.342806 2025] [:error] [pid 28739:tid 28768] [client 13.74.149.244:12520] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSW33BxGpKmlkG4FexS3NgAAAgY"]
[Tue Nov 25 22:06:20.858981 2025] [:error] [pid 14077:tid 14127] [client 13.74.149.244:6551] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aSW33BG9n7UHEkwDTyjWDQAAAFE"]
[Tue Nov 25 22:06:21.366130 2025] [:error] [pid 43843:tid 43868] [client 13.74.149.244:3900] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r.php"] [unique_id "aSW33Rhx4v3NUNdMKDP9MQAAAdc"]
[Tue Nov 25 22:06:21.880794 2025] [:error] [pid 2987:tid 3009] [client 13.74.149.244:2411] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r.php"] [unique_id "aSW33c-djEt-pTzPxnzU9wAAAVQ"]
[Tue Nov 25 22:06:22.388952 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:1385] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r.php"] [unique_id "aSW33tVXYbb0ii_rVoKNtAAAAJE"]
[Tue Nov 25 22:06:22.892867 2025] [:error] [pid 2987:tid 3001] [client 13.74.149.244:1455] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r.php"] [unique_id "aSW33s-djEt-pTzPxnzU-AAAAUw"]
[Tue Nov 25 22:06:23.402518 2025] [:error] [pid 28739:tid 28782] [client 13.74.149.244:5179] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "aSW33xxGpKmlkG4FexS3PQAAAhQ"]
[Tue Nov 25 22:06:23.909022 2025] [:error] [pid 14078:tid 14151] [client 13.74.149.244:5129] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "aSW339VXYbb0ii_rVoKNtgAAAI4"]
[Tue Nov 25 22:06:24.420272 2025] [:error] [pid 14076:tid 14104] [client 13.74.149.244:9436] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "aSW34HsB4Gz6Qw-pvBtMdQAAABc"]
[Tue Nov 25 22:06:24.924807 2025] [:error] [pid 14077:tid 14116] [client 13.74.149.244:5218] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "aSW34BG9n7UHEkwDTyjWEwAAAEY"]
[Tue Nov 25 22:06:25.426961 2025] [:error] [pid 43843:tid 43847] [client 13.74.149.244:12480] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-22.php"] [unique_id "aSW34Rhx4v3NUNdMKDP9NAAAAcI"]
[Tue Nov 25 22:06:25.940836 2025] [:error] [pid 14077:tid 14119] [client 13.74.149.244:3851] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-22.php"] [unique_id "aSW34RG9n7UHEkwDTyjWFQAAAEk"]
[Tue Nov 25 22:06:26.449051 2025] [:error] [pid 43981:tid 43987] [client 13.74.149.244:13377] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-22.php"] [unique_id "aSW34ggZn97m_qh_RaFw-gAAAwQ"]
[Tue Nov 25 22:06:26.956260 2025] [:error] [pid 28739:tid 28768] [client 13.74.149.244:6581] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-22.php"] [unique_id "aSW34hxGpKmlkG4FexS3RQAAAgY"]
[Tue Nov 25 22:06:27.468930 2025] [:error] [pid 2987:tid 3008] [client 13.74.149.244:2480] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aSW348-djEt-pTzPxnzU-wAAAVM"]
[Tue Nov 25 22:06:27.982846 2025] [:error] [pid 2987:tid 3005] [client 13.74.149.244:2491] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aSW348-djEt-pTzPxnzU_AAAAVA"]
[Tue Nov 25 22:06:28.501184 2025] [:error] [pid 28739:tid 28777] [client 13.74.149.244:12516] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aSW35BxGpKmlkG4FexS3RwAAAg8"]
[Tue Nov 25 22:06:29.006000 2025] [:error] [pid 43843:tid 43864] [client 13.74.149.244:5173] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aSW35Rhx4v3NUNdMKDP9OAAAAdM"]
[Tue Nov 25 22:06:29.508967 2025] [:error] [pid 28739:tid 28775] [client 13.74.149.244:12531] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "aSW35RxGpKmlkG4FexS3SQAAAg0"]
[Tue Nov 25 22:06:30.025193 2025] [:error] [pid 28739:tid 28785] [client 13.74.149.244:9470] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "aSW35hxGpKmlkG4FexS3SgAAAhc"]
[Tue Nov 25 22:06:30.531257 2025] [:error] [pid 28739:tid 28770] [client 13.74.149.244:6664] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "aSW35hxGpKmlkG4FexS3TAAAAgg"]
[Tue Nov 25 22:06:31.049173 2025] [:error] [pid 28739:tid 28773] [client 13.74.149.244:1366] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "aSW35xxGpKmlkG4FexS3TgAAAgs"]
[Tue Nov 25 22:06:31.557726 2025] [:error] [pid 43843:tid 43855] [client 13.74.149.244:11643] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "aSW35xhx4v3NUNdMKDP9OQAAAco"]
[Tue Nov 25 22:06:32.064718 2025] [:error] [pid 2987:tid 2997] [client 13.74.149.244:6270] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "aSW36M-djEt-pTzPxnzVAAAAAUg"]
[Tue Nov 25 22:06:32.572479 2025] [:error] [pid 2987:tid 3001] [client 13.74.149.244:2440] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "aSW36M-djEt-pTzPxnzVBAAAAUw"]
[Tue Nov 25 22:06:33.083278 2025] [:error] [pid 28609:tid 28622] [client 13.74.149.244:5651] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "aSW36SGGdT-nZJVs3x34QAAAAYQ"]
[Tue Nov 25 22:06:33.585626 2025] [:error] [pid 28739:tid 28777] [client 13.74.149.244:18605] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aSW36RxGpKmlkG4FexS3VAAAAg8"]
[Tue Nov 25 22:06:34.090223 2025] [:error] [pid 14078:tid 14145] [client 13.74.149.244:8649] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aSW36tVXYbb0ii_rVoKNzwAAAIg"]
[Tue Nov 25 22:06:34.591197 2025] [:error] [pid 2987:tid 2992] [client 13.74.149.244:1405] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aSW36s-djEt-pTzPxnzVBwAAAUM"]
[Tue Nov 25 22:06:35.100827 2025] [:error] [pid 2987:tid 2993] [client 13.74.149.244:9431] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aSW368-djEt-pTzPxnzVDAAAAUQ"]
[Tue Nov 25 22:06:35.609143 2025] [:error] [pid 2987:tid 3012] [client 13.74.149.244:13088] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aSW368-djEt-pTzPxnzVEQAAAVc"]
[Tue Nov 25 22:06:36.117428 2025] [:error] [pid 28609:tid 28642] [client 13.74.149.244:6662] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aSW37CGGdT-nZJVs3x34RgAAAZg"]
[Tue Nov 25 22:06:36.620122 2025] [:error] [pid 28609:tid 28627] [client 13.74.149.244:2465] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aSW37CGGdT-nZJVs3x34SAAAAYk"]
[Tue Nov 25 22:06:37.123352 2025] [:error] [pid 2987:tid 2994] [client 13.74.149.244:12395] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "aSW37c-djEt-pTzPxnzVGgAAAUU"]
[Tue Nov 25 22:06:37.631847 2025] [:error] [pid 28609:tid 28639] [client 13.74.149.244:13066] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aSW37SGGdT-nZJVs3x34SQAAAZU"]
[Tue Nov 25 22:06:38.136239 2025] [:error] [pid 2987:tid 3009] [client 13.74.149.244:1398] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aSW37s-djEt-pTzPxnzVGwAAAVQ"]
[Tue Nov 25 22:06:38.641526 2025] [:error] [pid 14077:tid 14130] [client 13.74.149.244:6221] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aSW37hG9n7UHEkwDTyjWIwAAAFQ"]
[Tue Nov 25 22:06:39.158373 2025] [:error] [pid 28836:tid 29012] [client 13.74.149.244:12368] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aSW375wNRsoxcLQGkTfzIwAAAtY"]
[Tue Nov 25 22:06:39.662320 2025] [:error] [pid 14076:tid 14101] [client 13.74.149.244:5653] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aSW373sB4Gz6Qw-pvBtMjAAAABQ"]
[Tue Nov 25 22:06:40.170746 2025] [:error] [pid 43981:tid 43997] [client 13.74.149.244:12711] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aSW38AgZn97m_qh_RaFw_wAAAw4"]
[Tue Nov 25 22:06:40.673216 2025] [:error] [pid 2987:tid 2999] [client 13.74.149.244:9441] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aSW38M-djEt-pTzPxnzVHQAAAUo"]
[Tue Nov 25 22:06:41.183210 2025] [:error] [pid 14076:tid 14104] [client 13.74.149.244:6710] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aSW38XsB4Gz6Qw-pvBtMjgAAABc"]
[Tue Nov 25 22:06:41.692916 2025] [:error] [pid 14078:tid 14155] [client 13.74.149.244:12678] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "aSW38dVXYbb0ii_rVoKN1wAAAJI"]
[Tue Nov 25 22:06:42.198880 2025] [:error] [pid 14077:tid 14114] [client 13.74.149.244:3967] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "aSW38hG9n7UHEkwDTyjWKAAAAEQ"]
[Tue Nov 25 22:06:42.701722 2025] [:error] [pid 28609:tid 28635] [client 13.74.149.244:12718] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "aSW38iGGdT-nZJVs3x34UQAAAZE"]
[Tue Nov 25 22:06:43.209370 2025] [:error] [pid 14076:tid 14088] [client 13.74.149.244:3809] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "aSW383sB4Gz6Qw-pvBtMlAAAAAc"]
[Tue Nov 25 22:06:43.713068 2025] [:error] [pid 14076:tid 14084] [client 13.74.149.244:6659] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "aSW383sB4Gz6Qw-pvBtMmAAAAAM"]
[Tue Nov 25 22:06:44.218071 2025] [:error] [pid 14077:tid 14116] [client 13.74.149.244:13090] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "aSW39BG9n7UHEkwDTyjWLAAAAEY"]
[Tue Nov 25 22:06:44.719508 2025] [:error] [pid 43843:tid 43850] [client 13.74.149.244:3945] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "aSW39Bhx4v3NUNdMKDP9SgAAAcU"]
[Tue Nov 25 22:06:45.223623 2025] [:error] [pid 43981:tid 43994] [client 13.74.149.244:4891] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "aSW39QgZn97m_qh_RaFxBAAAAws"]
[Tue Nov 25 22:06:45.725727 2025] [:error] [pid 43981:tid 44004] [client 13.74.149.244:13787] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSW39QgZn97m_qh_RaFxBQAAAxU"]
[Tue Nov 25 22:06:46.246815 2025] [:error] [pid 14078:tid 14151] [client 13.74.149.244:5040] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSW39tVXYbb0ii_rVoKN4wAAAI4"]
[Tue Nov 25 22:06:46.748147 2025] [:error] [pid 14078:tid 14143] [client 13.74.149.244:5049] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSW39tVXYbb0ii_rVoKN5QAAAIY"]
[Tue Nov 25 22:06:47.271766 2025] [:error] [pid 14078:tid 14147] [client 13.74.149.244:13802] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "aSW399VXYbb0ii_rVoKN6AAAAIo"]
[Tue Nov 25 22:06:47.777598 2025] [:error] [pid 14168:tid 14182] [client 13.74.149.244:6267] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/02.php"] [unique_id "aSW39_R-ZDU0QEgAIIuVygAAAMs"]
[Tue Nov 25 22:06:48.283744 2025] [:error] [pid 28836:tid 28966] [client 13.74.149.244:6248] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/02.php"] [unique_id "aSW3-JwNRsoxcLQGkTfzLQAAAss"]
[Tue Nov 25 22:06:48.788929 2025] [:error] [pid 28609:tid 28618] [client 13.74.149.244:5022] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/02.php"] [unique_id "aSW3-CGGdT-nZJVs3x34VwAAAYA"]
[Tue Nov 25 22:06:49.293439 2025] [:error] [pid 2987:tid 2989] [client 13.74.149.244:4009] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/02.php"] [unique_id "aSW3-c-djEt-pTzPxnzVJwAAAUA"]
[Tue Nov 25 22:06:49.798677 2025] [:error] [pid 2987:tid 2994] [client 13.74.149.244:12455] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSW3-c-djEt-pTzPxnzVKAAAAUU"]
[Tue Nov 25 22:06:50.309235 2025] [:error] [pid 2987:tid 3006] [client 13.74.149.244:10029] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSW3-s-djEt-pTzPxnzVKQAAAVE"]
[Tue Nov 25 22:06:50.809270 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:12423] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSW3-tVXYbb0ii_rVoKN7wAAAJQ"]
[Tue Nov 25 22:06:51.311037 2025] [:error] [pid 14078:tid 14156] [client 13.74.149.244:3911] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "aSW3-9VXYbb0ii_rVoKN8gAAAJM"]
[Tue Nov 25 22:06:51.820628 2025] [:error] [pid 14078:tid 14144] [client 13.74.149.244:10043] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/go.php"] [unique_id "aSW3-9VXYbb0ii_rVoKN9AAAAIc"]
[Tue Nov 25 22:06:52.324272 2025] [:error] [pid 14077:tid 14114] [client 13.74.149.244:6717] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/go.php"] [unique_id "aSW3_BG9n7UHEkwDTyjWOQAAAEQ"]
[Tue Nov 25 22:06:52.826110 2025] [:error] [pid 28739:tid 28776] [client 13.74.149.244:4866] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/go.php"] [unique_id "aSW3_BxGpKmlkG4FexS3dwAAAg4"]
[Tue Nov 25 22:06:53.342527 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:3927] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/go.php"] [unique_id "aSW3_dVXYbb0ii_rVoKN_AAAAIs"]
[Tue Nov 25 22:06:53.850833 2025] [:error] [pid 28739:tid 28775] [client 13.74.149.244:7639] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an.php"] [unique_id "aSW3_RxGpKmlkG4FexS3eAAAAg0"]
[Tue Nov 25 22:06:54.367952 2025] [:error] [pid 14168:tid 14173] [client 13.74.149.244:5029] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an.php"] [unique_id "aSW3_vR-ZDU0QEgAIIuV0gAAAMI"]
[Tue Nov 25 22:06:54.869741 2025] [:error] [pid 14076:tid 14084] [client 13.74.149.244:6694] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an.php"] [unique_id "aSW3_nsB4Gz6Qw-pvBtMoAAAAAM"]
[Tue Nov 25 22:06:55.375505 2025] [:error] [pid 14168:tid 14181] [client 13.74.149.244:5659] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an.php"] [unique_id "aSW3__R-ZDU0QEgAIIuV1QAAAMo"]
[Tue Nov 25 22:06:55.875763 2025] [:error] [pid 14077:tid 14125] [client 13.74.149.244:13069] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aSW3_xG9n7UHEkwDTyjWPwAAAE8"]
[Tue Nov 25 22:06:56.378983 2025] [:error] [pid 14168:tid 14185] [client 13.74.149.244:12682] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aSW4APR-ZDU0QEgAIIuV2AAAAM4"]
[Tue Nov 25 22:06:56.879390 2025] [:error] [pid 43843:tid 43854] [client 13.74.149.244:12478] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aSW4ABhx4v3NUNdMKDP9TwAAAck"]
[Tue Nov 25 22:06:57.388225 2025] [:error] [pid 14078:tid 14149] [client 13.74.149.244:12702] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aSW4AdVXYbb0ii_rVoKOBQAAAIw"]
[Tue Nov 25 22:06:57.902770 2025] [:error] [pid 28739:tid 28771] [client 13.74.149.244:12451] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aSW4ARxGpKmlkG4FexS3fAAAAgk"]
[Tue Nov 25 22:06:58.408415 2025] [:error] [pid 43843:tid 43859] [client 13.74.149.244:7641] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aSW4Ahhx4v3NUNdMKDP9UwAAAc4"]
[Tue Nov 25 22:06:58.919291 2025] [:error] [pid 28739:tid 28764] [client 13.74.149.244:3806] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aSW4AhxGpKmlkG4FexS3hAAAAgI"]
[Tue Nov 25 22:06:59.435083 2025] [:error] [pid 28739:tid 28775] [client 13.74.149.244:12698] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aSW4AxxGpKmlkG4FexS3iQAAAg0"]
[Tue Nov 25 22:06:59.943750 2025] [:error] [pid 28739:tid 28766] [client 13.74.149.244:1967] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aSW4AxxGpKmlkG4FexS3jwAAAgQ"]
[Tue Nov 25 22:07:00.453203 2025] [:error] [pid 14078:tid 14151] [client 13.74.149.244:3021] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aSW4BNVXYbb0ii_rVoKOCgAAAI4"]
[Tue Nov 25 22:07:00.975701 2025] [:error] [pid 28836:tid 28967] [client 13.74.149.244:13768] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aSW4BJwNRsoxcLQGkTfzMwAAAsw"]
[Tue Nov 25 22:07:01.485247 2025] [:error] [pid 28836:tid 28968] [client 13.74.149.244:13769] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aSW4BZwNRsoxcLQGkTfzNQAAAs0"]
[Tue Nov 25 22:07:01.999304 2025] [:error] [pid 14077:tid 14124] [client 13.74.149.244:3052] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSW4BRG9n7UHEkwDTyjWRgAAAE4"]
[Tue Nov 25 22:07:02.512843 2025] [:error] [pid 28836:tid 28959] [client 13.74.149.244:14736] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSW4BpwNRsoxcLQGkTfzOAAAAsQ"]
[Tue Nov 25 22:07:03.024857 2025] [:error] [pid 14078:tid 14159] [client 13.74.149.244:4358] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSW4B9VXYbb0ii_rVoKODQAAAJY"]
[Tue Nov 25 22:07:03.527510 2025] [:error] [pid 28836:tid 29008] [client 13.74.149.244:12471] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "aSW4B5wNRsoxcLQGkTfzPgAAAtI"]
[Tue Nov 25 22:07:04.035618 2025] [:error] [pid 14076:tid 14092] [client 13.74.149.244:3984] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSW4CHsB4Gz6Qw-pvBtMsgAAAAs"]
[Tue Nov 25 22:07:04.546827 2025] [:error] [pid 28609:tid 28636] [client 13.74.149.244:4913] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/license.php"] [unique_id "aSW4CCGGdT-nZJVs3x34ZwAAAZI"]
[Tue Nov 25 22:07:05.055116 2025] [:error] [pid 28836:tid 29013] [client 13.74.149.244:1973] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/license.php"] [unique_id "aSW4CZwNRsoxcLQGkTfzQgAAAtc"]
[Tue Nov 25 22:07:05.560246 2025] [:error] [pid 43843:tid 43867] [client 13.74.149.244:3994] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/license.php"] [unique_id "aSW4CRhx4v3NUNdMKDP9WAAAAdY"]
[Tue Nov 25 22:07:06.067033 2025] [:error] [pid 14078:tid 14146] [client 13.74.149.244:3042] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "aSW4CtVXYbb0ii_rVoKOFAAAAIk"]
[Tue Nov 25 22:07:06.573629 2025] [:error] [pid 14077:tid 14112] [client 13.74.149.244:13242] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "aSW4ChG9n7UHEkwDTyjWSAAAAEI"]
[Tue Nov 25 22:07:07.097233 2025] [:error] [pid 43843:tid 43851] [client 13.74.149.244:1059] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "aSW4Cxhx4v3NUNdMKDP9WgAAAcY"]
[Tue Nov 25 22:07:07.604964 2025] [:error] [pid 14076:tid 14103] [client 13.74.149.244:3030] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "aSW4C3sB4Gz6Qw-pvBtMugAAABY"]
[Tue Nov 25 22:07:08.128156 2025] [:error] [pid 43981:tid 43986] [client 13.74.149.244:13229] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Nov 25 22:07:08.382363 2025] [:error] [pid 43981:tid 44002] [client 13.74.149.244:13229] File does not exist: /usr/local/apache/htdocs/suspended-page/alfanew.php
[Tue Nov 25 22:07:08.637338 2025] [:error] [pid 43981:tid 43996] [client 13.74.149.244:13229] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Nov 25 22:07:09.396315 2025] [:error] [pid 43981:tid 43985] [client 13.74.149.244:13229] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSW4DQgZn97m_qh_RaFxJAAAAwI"]
[Tue Nov 25 22:07:10.186192 2025] [:error] [pid 43981:tid 43992] [client 13.74.149.244:2579] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue Nov 25 22:07:10.440702 2025] [:error] [pid 43981:tid 43994] [client 13.74.149.244:2579] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Tue Nov 25 22:07:10.971283 2025] [:error] [pid 43981:tid 43996] [client 13.74.149.244:2579] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Tue Nov 25 22:07:11.222706 2025] [:error] [pid 43981:tid 43989] [client 13.74.149.244:2579] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSW4DwgZn97m_qh_RaFxMgAAAwY"]
[Tue Nov 25 22:07:12.008777 2025] [:error] [pid 43843:tid 43866] [client 13.74.149.244:6827] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSW4EBhx4v3NUNdMKDP9XwAAAdU"]
[Tue Nov 25 22:07:12.525993 2025] [:error] [pid 14168:tid 14182] [client 13.74.149.244:12872] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSW4EPR-ZDU0QEgAIIuV4wAAAMs"]
[Tue Nov 25 22:07:13.038683 2025] [:error] [pid 14076:tid 14089] [client 13.74.149.244:6449] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSW4EXsB4Gz6Qw-pvBtMvwAAAAg"]
[Tue Nov 25 22:07:13.550232 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:12170] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aSW4EdVXYbb0ii_rVoKOIAAAAJQ"]
[Tue Nov 25 22:07:14.065484 2025] [:error] [pid 14168:tid 14195] [client 13.74.149.244:12604] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aSW4EvR-ZDU0QEgAIIuV5QAAANg"]
[Tue Nov 25 22:07:14.589855 2025] [:error] [pid 14076:tid 14095] [client 13.74.149.244:8221] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aSW4EnsB4Gz6Qw-pvBtMxAAAAA4"]
[Tue Nov 25 22:07:15.096588 2025] [:error] [pid 14077:tid 14121] [client 13.74.149.244:1575] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aSW4ExG9n7UHEkwDTyjWTgAAAEs"]
[Tue Nov 25 22:07:15.606179 2025] [:error] [pid 14077:tid 14132] [client 13.74.149.244:3145] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aSW4ExG9n7UHEkwDTyjWUAAAAFY"]
[Tue Nov 25 22:07:16.119627 2025] [:error] [pid 14168:tid 14191] [client 13.74.149.244:14226] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "aSW4FPR-ZDU0QEgAIIuV6AAAANQ"]
[Tue Nov 25 22:07:16.680545 2025] [:error] [pid 28739:tid 28770] [client 13.74.149.244:14162] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "aSW4FBxGpKmlkG4FexS3mgAAAgg"]
[Tue Nov 25 22:07:17.230855 2025] [:error] [pid 14168:tid 14173] [client 13.74.149.244:14230] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "aSW4FfR-ZDU0QEgAIIuV7AAAAMI"]
[Tue Nov 25 22:07:17.747657 2025] [:error] [pid 28739:tid 28776] [client 13.74.149.244:12329] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "aSW4FRxGpKmlkG4FexS3nAAAAg4"]
[Tue Nov 25 22:07:18.261413 2025] [:error] [pid 43981:tid 44005] [client 13.74.149.244:9622] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSW4FggZn97m_qh_RaFxPwAAAxY"]
[Tue Nov 25 22:07:18.767766 2025] [:error] [pid 43981:tid 43985] [client 13.74.149.244:4830] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSW4FggZn97m_qh_RaFxQQAAAwI"]
[Tue Nov 25 22:07:19.280036 2025] [:error] [pid 14076:tid 14084] [client 13.74.149.244:1172] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSW4F3sB4Gz6Qw-pvBtMzgAAAAM"]
[Tue Nov 25 22:07:19.801377 2025] [:error] [pid 14078:tid 14147] [client 13.74.149.244:5964] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/function.php"] [unique_id "aSW4F9VXYbb0ii_rVoKOJwAAAIo"]
[Tue Nov 25 22:07:20.313343 2025] [:error] [pid 14078:tid 14137] [client 13.74.149.244:5420] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSW4GNVXYbb0ii_rVoKOKQAAAIA"]
[Tue Nov 25 22:07:20.818273 2025] [:error] [pid 43981:tid 44004] [client 13.74.149.244:11738] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSW4GAgZn97m_qh_RaFxRQAAAxU"]
[Tue Nov 25 22:07:21.322891 2025] [:error] [pid 14078:tid 14152] [client 13.74.149.244:7432] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSW4GdVXYbb0ii_rVoKOKwAAAI8"]
[Tue Nov 25 22:07:21.832461 2025] [:error] [pid 14168:tid 14180] [client 13.74.149.244:7706] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aSW4GfR-ZDU0QEgAIIuV9QAAAMk"]
[Tue Nov 25 22:07:22.349092 2025] [:error] [pid 2987:tid 2997] [client 13.74.149.244:11766] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "aSW4Gs-djEt-pTzPxnzVYQAAAUg"]
[Tue Nov 25 22:07:22.854898 2025] [:error] [pid 14168:tid 14171] [client 13.74.149.244:7482] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "aSW4GvR-ZDU0QEgAIIuV9wAAAMA"]
[Tue Nov 25 22:07:23.356388 2025] [:error] [pid 14078:tid 14146] [client 13.74.149.244:5174] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "aSW4G9VXYbb0ii_rVoKOLAAAAIk"]
[Tue Nov 25 22:07:23.861672 2025] [:error] [pid 2987:tid 2995] [client 13.74.149.244:11463] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "aSW4G8-djEt-pTzPxnzVaAAAAUY"]
[Tue Nov 25 22:07:24.370781 2025] [:error] [pid 28836:tid 28967] [client 13.74.149.244:7475] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aSW4HJwNRsoxcLQGkTfzYgAAAsw"]
[Tue Nov 25 22:07:24.884158 2025] [:error] [pid 28836:tid 29011] [client 13.74.149.244:7438] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aSW4HJwNRsoxcLQGkTfzZQAAAtU"]
[Tue Nov 25 22:07:25.390979 2025] [:error] [pid 14168:tid 14188] [client 13.74.149.244:12155] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aSW4HfR-ZDU0QEgAIIuV-wAAANE"]
[Tue Nov 25 22:07:25.909375 2025] [:error] [pid 14077:tid 14123] [client 13.74.149.244:9814] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aSW4HRG9n7UHEkwDTyjWYwAAAE0"]
[Tue Nov 25 22:07:26.414481 2025] [:error] [pid 2987:tid 2990] [client 13.74.149.244:9243] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cron.php"] [unique_id "aSW4Hs-djEt-pTzPxnzVbQAAAUE"]
[Tue Nov 25 22:07:26.926169 2025] [:error] [pid 2987:tid 3002] [client 13.74.149.244:11515] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cron.php"] [unique_id "aSW4Hs-djEt-pTzPxnzVbwAAAU0"]
[Tue Nov 25 22:07:27.444144 2025] [:error] [pid 14077:tid 14112] [client 13.74.149.244:11803] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cron.php"] [unique_id "aSW4HxG9n7UHEkwDTyjWaQAAAEI"]
[Tue Nov 25 22:07:27.951188 2025] [:error] [pid 2987:tid 3005] [client 13.74.149.244:5266] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cron.php"] [unique_id "aSW4H8-djEt-pTzPxnzVcwAAAVA"]
[Tue Nov 25 22:07:28.468608 2025] [:error] [pid 28609:tid 28625] [client 13.74.149.244:1878] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "aSW4ICGGdT-nZJVs3x34iQAAAYc"]
[Tue Nov 25 22:07:28.981084 2025] [:error] [pid 2987:tid 3000] [client 13.74.149.244:9955] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "aSW4IM-djEt-pTzPxnzVdAAAAUs"]
[Tue Nov 25 22:07:29.485231 2025] [:error] [pid 14076:tid 14081] [client 13.74.149.244:9513] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "aSW4IXsB4Gz6Qw-pvBtM3AAAAAA"]
[Tue Nov 25 22:07:30.052467 2025] [:error] [pid 43843:tid 43861] [client 13.74.149.244:5264] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "aSW4Ihhx4v3NUNdMKDP9agAAAdA"]
[Tue Nov 25 22:07:30.575178 2025] [:error] [pid 14076:tid 14093] [client 13.74.149.244:1667] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aSW4InsB4Gz6Qw-pvBtM3gAAAAw"]
[Tue Nov 25 22:07:31.094921 2025] [:error] [pid 28739:tid 28770] [client 13.74.149.244:10303] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aSW4IxxGpKmlkG4FexS3qAAAAgg"]
[Tue Nov 25 22:07:31.603417 2025] [:error] [pid 43843:tid 43862] [client 13.74.149.244:2927] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aSW4Ixhx4v3NUNdMKDP9bQAAAdE"]
[Tue Nov 25 22:07:32.119269 2025] [:error] [pid 28739:tid 28777] [client 13.74.149.244:3085] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aSW4JBxGpKmlkG4FexS3qgAAAg8"]
[Tue Nov 25 22:07:32.652707 2025] [:error] [pid 14076:tid 14089] [client 13.74.149.244:4461] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "aSW4JHsB4Gz6Qw-pvBtM4wAAAAg"]
[Tue Nov 25 22:07:33.160235 2025] [:error] [pid 14168:tid 14173] [client 13.74.149.244:4459] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "aSW4JfR-ZDU0QEgAIIuWAwAAAMI"]
[Tue Nov 25 22:07:33.675864 2025] [:error] [pid 28739:tid 28766] [client 13.74.149.244:10251] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "aSW4JRxGpKmlkG4FexS3sAAAAgQ"]
[Tue Nov 25 22:07:34.182031 2025] [:error] [pid 14078:tid 14145] [client 13.74.149.244:13678] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "aSW4JtVXYbb0ii_rVoKOOwAAAIg"]
[Tue Nov 25 22:07:34.694734 2025] [:error] [pid 14076:tid 14091] [client 13.74.149.244:2755] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-2019.php"] [unique_id "aSW4JnsB4Gz6Qw-pvBtM5QAAAAo"]
[Tue Nov 25 22:07:35.201880 2025] [:error] [pid 28609:tid 28630] [client 13.74.149.244:5810] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-2019.php"] [unique_id "aSW4JyGGdT-nZJVs3x34kQAAAYw"]
[Tue Nov 25 22:07:35.709477 2025] [:error] [pid 28609:tid 28637] [client 13.74.149.244:7373] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-2019.php"] [unique_id "aSW4JyGGdT-nZJVs3x34lAAAAZM"]
[Tue Nov 25 22:07:36.218704 2025] [:error] [pid 14078:tid 14143] [client 13.74.149.244:10869] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-2019.php"] [unique_id "aSW4KNVXYbb0ii_rVoKOQgAAAIY"]
[Tue Nov 25 22:07:36.728300 2025] [:error] [pid 43843:tid 43867] [client 13.74.149.244:15772] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "aSW4KBhx4v3NUNdMKDP9cQAAAdY"]
[Tue Nov 25 22:07:37.229025 2025] [:error] [pid 28739:tid 28763] [client 13.74.149.244:5483] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "aSW4KRxGpKmlkG4FexS3uQAAAgE"]
[Tue Nov 25 22:07:37.750591 2025] [:error] [pid 28739:tid 28785] [client 13.74.149.244:4442] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "aSW4KRxGpKmlkG4FexS3ugAAAhc"]
[Tue Nov 25 22:07:38.258705 2025] [:error] [pid 14077:tid 14119] [client 13.74.149.244:8599] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "aSW4KhG9n7UHEkwDTyjWegAAAEk"]
[Tue Nov 25 22:07:38.765037 2025] [:error] [pid 28739:tid 28776] [client 13.74.149.244:3133] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSW4KhxGpKmlkG4FexS3uwAAAg4"]
[Tue Nov 25 22:07:39.278214 2025] [:error] [pid 28739:tid 28762] [client 13.74.149.244:7406] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aSW4KxxGpKmlkG4FexS3vQAAAgA"]
[Tue Nov 25 22:07:39.798316 2025] [:error] [pid 14076:tid 14097] [client 13.74.149.244:8619] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "aSW4K3sB4Gz6Qw-pvBtM8AAAABA"]
[Tue Nov 25 22:07:40.312738 2025] [:error] [pid 28836:tid 28969] [client 13.74.149.244:3200] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "aSW4LJwNRsoxcLQGkTfzdwAAAs4"]
[Tue Nov 25 22:07:40.818738 2025] [:error] [pid 28739:tid 28783] [client 13.74.149.244:4485] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "aSW4LBxGpKmlkG4FexS3wwAAAhU"]
[Tue Nov 25 22:07:41.339783 2025] [:error] [pid 43843:tid 43854] [client 13.74.149.244:2789] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "aSW4LRhx4v3NUNdMKDP9dAAAAck"]
[Tue Nov 25 22:07:41.849151 2025] [:error] [pid 28836:tid 28964] [client 13.74.149.244:7238] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSW4LZwNRsoxcLQGkTfzeQAAAsk"]
[Tue Nov 25 22:07:42.355056 2025] [:error] [pid 43843:tid 43848] [client 13.74.149.244:7391] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSW4Lhhx4v3NUNdMKDP9dQAAAcM"]
[Tue Nov 25 22:07:42.862870 2025] [:error] [pid 28836:tid 28966] [client 13.74.149.244:7898] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSW4LpwNRsoxcLQGkTfzfAAAAss"]
[Tue Nov 25 22:07:43.362757 2025] [:error] [pid 28739:tid 28768] [client 13.74.149.244:7878] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "aSW4LxxGpKmlkG4FexS3ywAAAgY"]
[Tue Nov 25 22:07:43.871033 2025] [:error] [pid 28739:tid 28782] [client 13.74.149.244:4639] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSW4LxxGpKmlkG4FexS3zQAAAhQ"]
[Tue Nov 25 22:07:44.386259 2025] [:error] [pid 14076:tid 14095] [client 13.74.149.244:8622] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSW4MHsB4Gz6Qw-pvBtM_QAAAA4"]
[Tue Nov 25 22:07:44.909932 2025] [:error] [pid 28739:tid 28771] [client 13.74.149.244:8615] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSW4MBxGpKmlkG4FexS30QAAAgk"]
[Tue Nov 25 22:07:45.416000 2025] [:error] [pid 28739:tid 28783] [client 13.74.149.244:2775] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/system_log.php"] [unique_id "aSW4MRxGpKmlkG4FexS30gAAAhU"]
[Tue Nov 25 22:07:45.921196 2025] [:error] [pid 43843:tid 43866] [client 13.74.149.244:2803] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "aSW4MRhx4v3NUNdMKDP9dwAAAdU"]
[Tue Nov 25 22:07:46.425050 2025] [:error] [pid 28739:tid 28778] [client 13.74.149.244:11933] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "aSW4MhxGpKmlkG4FexS31QAAAhA"]
[Tue Nov 25 22:07:46.945438 2025] [:error] [pid 14077:tid 14128] [client 13.74.149.244:13171] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "aSW4MhG9n7UHEkwDTyjWhAAAAFI"]
[Tue Nov 25 22:07:47.470115 2025] [:error] [pid 28739:tid 28780] [client 13.74.149.244:1601] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "aSW4MxxGpKmlkG4FexS32QAAAhI"]
[Tue Nov 25 22:07:47.973858 2025] [:error] [pid 14078:tid 14138] [client 13.74.149.244:11960] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aSW4M9VXYbb0ii_rVoKOSwAAAIE"]
[Tue Nov 25 22:07:48.476690 2025] [:error] [pid 14078:tid 14153] [client 13.74.149.244:12496] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aSW4NNVXYbb0ii_rVoKOTAAAAJA"]
[Tue Nov 25 22:07:49.022118 2025] [:error] [pid 28609:tid 28624] [client 13.74.149.244:8888] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aSW4NSGGdT-nZJVs3x34pgAAAYY"]
[Tue Nov 25 22:07:49.564305 2025] [:error] [pid 28836:tid 28961] [client 13.74.149.244:2792] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aSW4NZwNRsoxcLQGkTfzhAAAAsY"]
[Tue Nov 25 22:07:50.069894 2025] [:error] [pid 28836:tid 28959] [client 13.74.149.244:7274] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSW4NpwNRsoxcLQGkTfzhQAAAsQ"]
[Tue Nov 25 22:07:50.575670 2025] [:error] [pid 14077:tid 14133] [client 13.74.149.244:4624] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSW4NhG9n7UHEkwDTyjWoQAAAFc"]
[Tue Nov 25 22:07:51.102210 2025] [:error] [pid 43843:tid 43863] [client 13.74.149.244:1315] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSW4Nxhx4v3NUNdMKDP9fAAAAdI"]
[Tue Nov 25 22:07:51.611614 2025] [:error] [pid 14168:tid 14173] [client 13.74.149.244:10873] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aSW4N_R-ZDU0QEgAIIuWDwAAAMI"]
[Tue Nov 25 22:07:52.136279 2025] [:error] [pid 28836:tid 28968] [client 13.74.149.244:10449] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSW4OJwNRsoxcLQGkTfziAAAAs0"]
[Tue Nov 25 22:07:52.646647 2025] [:error] [pid 14077:tid 14111] [client 13.74.149.244:8588] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSW4OBG9n7UHEkwDTyjWpQAAAEE"]
[Tue Nov 25 22:07:53.164376 2025] [:error] [pid 14076:tid 14090] [client 13.74.149.244:14336] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSW4OXsB4Gz6Qw-pvBtNEQAAAAk"]
[Tue Nov 25 22:07:53.678963 2025] [:error] [pid 28836:tid 29008] [client 13.74.149.244:5570] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/wp-pridmag/init.php"] [unique_id "aSW4OZwNRsoxcLQGkTfziQAAAtI"]
[Tue Nov 25 22:07:54.200971 2025] [:error] [pid 43981:tid 43983] [client 13.74.149.244:3495] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSW4OggZn97m_qh_RaFxZAAAAwA"]
[Tue Nov 25 22:07:54.722254 2025] [:error] [pid 2987:tid 3007] [client 13.74.149.244:5920] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSW4Os-djEt-pTzPxnzViAAAAVI"]
[Tue Nov 25 22:07:55.225719 2025] [:error] [pid 2987:tid 3002] [client 13.74.149.244:1341] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSW4O8-djEt-pTzPxnzViQAAAU0"]
[Tue Nov 25 22:07:55.724258 2025] [:error] [pid 14078:tid 14147] [client 13.74.149.244:10673] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/pwnd/as.php"] [unique_id "aSW4O9VXYbb0ii_rVoKOUQAAAIo"]
[Tue Nov 25 22:07:56.233867 2025] [:error] [pid 28609:tid 28620] [client 13.74.149.244:3750] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "aSW4PCGGdT-nZJVs3x34rgAAAYI"]
[Tue Nov 25 22:07:56.743900 2025] [:error] [pid 28609:tid 28627] [client 13.74.149.244:10468] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "aSW4PCGGdT-nZJVs3x34sAAAAYk"]
[Tue Nov 25 22:07:57.253678 2025] [:error] [pid 28609:tid 28639] [client 13.74.149.244:8535] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "aSW4PSGGdT-nZJVs3x34sgAAAZU"]
[Tue Nov 25 22:07:57.766833 2025] [:error] [pid 28739:tid 28781] [client 13.74.149.244:3726] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "aSW4PRxGpKmlkG4FexS34QAAAhM"]
[Tue Nov 25 22:07:58.269649 2025] [:error] [pid 2987:tid 2997] [client 13.74.149.244:9149] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSW4Ps-djEt-pTzPxnzViwAAAUg"]
[Tue Nov 25 22:07:58.771160 2025] [:error] [pid 28836:tid 28986] [client 13.74.149.244:10668] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSW4PpwNRsoxcLQGkTfzlAAAAs8"]
[Tue Nov 25 22:07:59.272910 2025] [:error] [pid 28836:tid 28968] [client 13.74.149.244:5888] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSW4P5wNRsoxcLQGkTfzmAAAAs0"]
[Tue Nov 25 22:07:59.778076 2025] [:error] [pid 28836:tid 29008] [client 13.74.149.244:9559] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/wp-conflg.php"] [unique_id "aSW4P5wNRsoxcLQGkTfzmQAAAtI"]
[Tue Nov 25 22:08:00.287763 2025] [:error] [pid 14078:tid 14152] [client 13.74.149.244:8997] [client 13.74.149.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/zmFM.php"] [unique_id "aSW4QNVXYbb0ii_rVoKObgAAAI8"]
[Tue Nov 25 22:08:00.797348 2025] [:error] [pid 14076:tid 14085] [client 13.74.149.244:4509] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSW4QHsB4Gz6Qw-pvBtNHwAAAAQ"]
[Tue Nov 25 22:08:01.300993 2025] [:error] [pid 14078:tid 14157] [client 13.74.149.244:2729] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSW4QdVXYbb0ii_rVoKObwAAAJQ"]
[Tue Nov 25 22:08:01.805970 2025] [:error] [pid 14078:tid 14143] [client 13.74.149.244:4503] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/fields/index.php"] [unique_id "aSW4QdVXYbb0ii_rVoKOcQAAAIY"]
[Tue Nov 25 22:08:02.308307 2025] [:error] [pid 43843:tid 43846] [client 13.74.149.244:4561] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/fucku.php"] [unique_id "aSW4Qhhx4v3NUNdMKDP9kQAAAcE"]
[Tue Nov 25 22:08:02.819166 2025] [:error] [pid 14077:tid 14117] [client 13.74.149.244:10719] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/fucku.php"] [unique_id "aSW4QhG9n7UHEkwDTyjWsgAAAEc"]
[Tue Nov 25 22:08:03.337855 2025] [:error] [pid 14076:tid 14096] [client 13.74.149.244:4528] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/fucku.php"] [unique_id "aSW4Q3sB4Gz6Qw-pvBtNJgAAAA8"]
[Tue Nov 25 22:08:03.841631 2025] [:error] [pid 2987:tid 2999] [client 13.74.149.244:7347] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/fucku.php"] [unique_id "aSW4Q8-djEt-pTzPxnzVkQAAAUo"]
[Tue Nov 25 22:08:04.348044 2025] [:error] [pid 14078:tid 14148] [client 13.74.149.244:3715] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSW4RNVXYbb0ii_rVoKOeQAAAIs"]
[Tue Nov 25 22:08:04.850009 2025] [:error] [pid 14078:tid 14154] [client 13.74.149.244:9052] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSW4RNVXYbb0ii_rVoKOfAAAAJE"]
[Tue Nov 25 22:08:05.353184 2025] [:error] [pid 28836:tid 28966] [client 13.74.149.244:8987] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSW4RZwNRsoxcLQGkTfznQAAAss"]
[Tue Nov 25 22:08:05.865012 2025] [:error] [pid 14078:tid 14158] [client 13.74.149.244:9100] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upload/wp-info.php"] [unique_id "aSW4RdVXYbb0ii_rVoKOfgAAAJU"]
[Tue Nov 25 22:08:06.381712 2025] [:error] [pid 14077:tid 14121] [client 13.74.149.244:8979] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/post.php"] [unique_id "aSW4RhG9n7UHEkwDTyjWuwAAAEs"]
[Tue Nov 25 22:08:06.888751 2025] [:error] [pid 14077:tid 14126] [client 13.74.149.244:9361] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/post.php"] [unique_id "aSW4RhG9n7UHEkwDTyjWvwAAAFA"]
[Tue Nov 25 22:08:07.396451 2025] [:error] [pid 2987:tid 3009] [client 13.74.149.244:2054] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/post.php"] [unique_id "aSW4R8-djEt-pTzPxnzVlQAAAVQ"]
[Tue Nov 25 22:08:07.904677 2025] [:error] [pid 43981:tid 44002] [client 13.74.149.244:2502] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/post.php"] [unique_id "aSW4RwgZn97m_qh_RaFxeAAAAxM"]
[Tue Nov 25 22:08:08.414056 2025] [:error] [pid 14078:tid 14160] [client 13.74.149.244:8341] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSW4SNVXYbb0ii_rVoKOhAAAAJc"]
[Tue Nov 25 22:08:08.918073 2025] [:error] [pid 14076:tid 14104] [client 13.74.149.244:11552] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSW4SHsB4Gz6Qw-pvBtNMAAAABc"]
[Tue Nov 25 22:08:09.429046 2025] [:error] [pid 2987:tid 3002] [client 13.74.149.244:8548] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSW4Sc-djEt-pTzPxnzVlgAAAU0"]
[Tue Nov 25 22:08:09.931005 2025] [:error] [pid 2987:tid 3003] [client 13.74.149.244:2103] [client 13.74.149.244] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/admin.php"] [unique_id "aSW4Sc-djEt-pTzPxnzVmQAAAU4"]
[Wed Nov 26 02:12:10.307467 2025] [:error] [pid 14077:tid 14127] [client 216.26.224.162:52575] [client 216.26.224.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "aSXxehG9n7UHEkwDTygTCgAAAFE"]
[Wed Nov 26 02:12:12.102984 2025] [:error] [pid 28739:tid 28772] [client 216.26.225.186:38719] [client 216.26.225.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aSXxfBxGpKmlkG4FexQJhAAAAgo"]
[Wed Nov 26 02:12:13.136599 2025] [:error] [pid 43981:tid 43995] [client 45.3.53.241:41995] [client 45.3.53.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.svn/wc.db"] [unique_id "aSXxfQgZn97m_qh_RaGj-gAAAww"]
[Wed Nov 26 04:53:07.431082 2025] [:error] [pid 3010:tid 3037] [client 213.21.239.4:56866] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting/;/.git/config"] [unique_id "aSYXM0Wl16-roARWvItW_QAAABc"]
[Wed Nov 26 04:53:07.434243 2025] [:error] [pid 3010:tid 3028] [client 213.21.239.4:57018] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/content../.git/config"] [unique_id "aSYXM0Wl16-roARWvItW_wAAAA4"]
[Wed Nov 26 04:53:07.439800 2025] [:error] [pid 3010:tid 3015] [client 213.21.239.4:56818] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/application/.git/config"] [unique_id "aSYXM0Wl16-roARWvItXAAAAAAE"]
[Wed Nov 26 04:53:07.440071 2025] [:error] [pid 3010:tid 3032] [client 213.21.239.4:56816] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/assets../.git/config"] [unique_id "aSYXM0Wl16-roARWvItXAQAAABI"]
[Wed Nov 26 04:53:07.443753 2025] [:error] [pid 3010:tid 3033] [client 213.21.239.4:56836] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backup/.git/config"] [unique_id "aSYXM0Wl16-roARWvItXAwAAABM"]
[Wed Nov 26 04:53:07.446444 2025] [:error] [pid 3010:tid 3031] [client 213.21.239.4:57014] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting/.git/config"] [unique_id "aSYXM0Wl16-roARWvItXBQAAABE"]
[Wed Nov 26 04:53:07.447346 2025] [:error] [pid 3010:tid 3019] [client 213.21.239.4:56942] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.git/config"] [unique_id "aSYXM0Wl16-roARWvItXBgAAAAU"]
[Wed Nov 26 04:53:07.450755 2025] [:error] [pid 3010:tid 3034] [client 213.21.239.4:56888] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/dev/.git/config"] [unique_id "aSYXM0Wl16-roARWvItXCAAAABQ"]
[Wed Nov 26 04:53:07.451226 2025] [:error] [pid 3012:tid 3088] [client 213.21.239.4:56852] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting/.git/config;"] [unique_id "aSYXM0fo8Sm1Un9NK6gndwAAAJM"]
[Wed Nov 26 04:53:07.452690 2025] [:error] [pid 3012:tid 3089] [client 213.21.239.4:56916] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting/..;/.git/config"] [unique_id "aSYXM0fo8Sm1Un9NK6gneAAAAJQ"]
[Wed Nov 26 04:53:07.460060 2025] [:error] [pid 3010:tid 3018] [client 213.21.239.4:56998] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.git/config"] [unique_id "aSYXM0Wl16-roARWvItXCgAAAAQ"]
[Wed Nov 26 04:53:07.460064 2025] [:error] [pid 3010:tid 3029] [client 213.21.239.4:56860] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting../.git/config"] [unique_id "aSYXM0Wl16-roARWvItXCwAAAA8"]
[Wed Nov 26 04:53:07.463860 2025] [:error] [pid 3493:tid 3508] [client 213.21.239.4:56884] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting/.git/config;.."] [unique_id "aSYXM2BUa93ugXko11NkOwAAAQ0"]
[Wed Nov 26 04:53:07.464374 2025] [:error] [pid 3010:tid 3024] [client 213.21.239.4:56880] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting/static../.git/config"] [unique_id "aSYXM0Wl16-roARWvItXDAAAAAo"]
[Wed Nov 26 04:53:07.465437 2025] [:error] [pid 3011:tid 3050] [client 213.21.239.4:56882] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/css../.git/config"] [unique_id "aSYXM0b0BA3GljiGlI63FgAAAEg"]
[Wed Nov 26 04:53:07.465508 2025] [:error] [pid 3012:tid 3076] [client 213.21.239.4:56956] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/database/.git/config"] [unique_id "aSYXM0fo8Sm1Un9NK6gneQAAAIc"]
[Wed Nov 26 04:53:07.466546 2025] [:error] [pid 3010:tid 3016] [client 213.21.239.4:56966] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/common/.git/config"] [unique_id "aSYXM0Wl16-roARWvItXDQAAAAI"]
[Wed Nov 26 04:53:07.468046 2025] [:error] [pid 3012:tid 3074] [client 213.21.239.4:57028] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.git/config"] [unique_id "aSYXM0fo8Sm1Un9NK6gnegAAAIU"]
[Wed Nov 26 04:53:07.471213 2025] [:error] [pid 3012:tid 3091] [client 213.21.239.4:57004] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/developer/.git/config"] [unique_id "aSYXM0fo8Sm1Un9NK6gnewAAAJY"]
[Wed Nov 26 04:53:07.471370 2025] [:error] [pid 3012:tid 3075] [client 213.21.239.4:57002] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting/.git/%0Aconfig"] [unique_id "aSYXM0fo8Sm1Un9NK6gnfAAAAIY"]
[Wed Nov 26 04:53:09.840659 2025] [:error] [pid 3010:tid 3028] [client 213.21.239.4:57140] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/js../.git/config"] [unique_id "aSYXNUWl16-roARWvItXFAAAAA4"]
[Wed Nov 26 04:53:09.840858 2025] [:error] [pid 3010:tid 3037] [client 213.21.239.4:57040] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aSYXNUWl16-roARWvItXFQAAABc"]
[Wed Nov 26 04:53:09.843476 2025] [:error] [pid 3010:tid 3033] [client 213.21.239.4:57180] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/.git/%0Aconfig"] [unique_id "aSYXNUWl16-roARWvItXFgAAABM"]
[Wed Nov 26 04:53:09.848981 2025] [:error] [pid 3010:tid 3023] [client 213.21.239.4:57054] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config;"] [unique_id "aSYXNUWl16-roARWvItXGAAAAAk"]
[Wed Nov 26 04:53:09.850761 2025] [:error] [pid 3010:tid 3032] [client 213.21.239.4:57106] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/git/.git/config"] [unique_id "aSYXNUWl16-roARWvItXGQAAABI"]
[Wed Nov 26 04:53:09.851944 2025] [:error] [pid 3011:tid 3053] [client 213.21.239.4:57220] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/.git/config;"] [unique_id "aSYXNUb0BA3GljiGlI63FwAAAEs"]
[Wed Nov 26 04:53:09.853377 2025] [:error] [pid 3011:tid 3063] [client 213.21.239.4:57172] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/m/.git/config"] [unique_id "aSYXNUb0BA3GljiGlI63GQAAAFU"]
[Wed Nov 26 04:53:09.853447 2025] [:error] [pid 3011:tid 3046] [client 213.21.239.4:57148] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/lib../.git/config"] [unique_id "aSYXNUb0BA3GljiGlI63GAAAAEQ"]
[Wed Nov 26 04:53:09.855703 2025] [:error] [pid 38796:tid 38813] [client 213.21.239.4:57150] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/live/.git/config"] [unique_id "aSYXNQGcUUzaXxvjCXOiFgAAAU4"]
[Wed Nov 26 04:53:09.855789 2025] [:error] [pid 3010:tid 3019] [client 213.21.239.4:57284] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSYXNUWl16-roARWvItXGgAAAAU"]
[Wed Nov 26 04:53:09.857807 2025] [:error] [pid 3011:tid 3054] [client 213.21.239.4:57128] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/img../.git/config"] [unique_id "aSYXNUb0BA3GljiGlI63GgAAAEw"]
[Wed Nov 26 04:53:09.859800 2025] [:error] [pid 38796:tid 38806] [client 213.21.239.4:57212] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/.git/config"] [unique_id "aSYXNQGcUUzaXxvjCXOiFwAAAUc"]
[Wed Nov 26 04:53:09.864525 2025] [:error] [pid 3010:tid 3031] [client 213.21.239.4:57066] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config;.."] [unique_id "aSYXNUWl16-roARWvItXHAAAABE"]
[Wed Nov 26 04:53:09.865208 2025] [:error] [pid 3010:tid 3020] [client 213.21.239.4:57100] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/;/.git/config"] [unique_id "aSYXNUWl16-roARWvItXHQAAAAY"]
[Wed Nov 26 04:53:09.867191 2025] [:error] [pid 3010:tid 3022] [client 213.21.239.4:57122] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/images../.git/config"] [unique_id "aSYXNUWl16-roARWvItXHgAAAAg"]
[Wed Nov 26 04:53:09.868437 2025] [:error] [pid 3097:tid 3121] [client 213.21.239.4:57198] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/..;/.git/config"] [unique_id "aSYXNeVgdOH9N9jhT56D2gAAANQ"]
[Wed Nov 26 04:53:09.869204 2025] [:error] [pid 3010:tid 3030] [client 213.21.239.4:57270] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/static../.git/config"] [unique_id "aSYXNUWl16-roARWvItXHwAAABA"]
[Wed Nov 26 04:53:09.869939 2025] [:error] [pid 3097:tid 3113] [client 213.21.239.4:57254] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/;/.git/config"] [unique_id "aSYXNeVgdOH9N9jhT56D2wAAAMw"]
[Wed Nov 26 04:53:09.871182 2025] [:error] [pid 3493:tid 3519] [client 213.21.239.4:57288] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/..;/.git/config"] [unique_id "aSYXNWBUa93ugXko11NkPwAAARg"]
[Wed Nov 26 04:53:09.872003 2025] [:error] [pid 3010:tid 3034] [client 213.21.239.4:57166] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/message-api/.git/config"] [unique_id "aSYXNUWl16-roARWvItXIAAAABQ"]
[Wed Nov 26 04:53:09.875602 2025] [:error] [pid 38796:tid 38802] [client 213.21.239.4:57232] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/.git/config;.."] [unique_id "aSYXNQGcUUzaXxvjCXOiGQAAAUM"]
[Wed Nov 26 04:53:09.876160 2025] [:error] [pid 3493:tid 3513] [client 213.21.239.4:57190] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au../.git/config"] [unique_id "aSYXNWBUa93ugXko11NkQAAAARI"]
[Wed Nov 26 04:53:12.869107 2025] [:error] [pid 3097:tid 3118] [client 213.21.239.4:45964] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/;/.git/config"] [unique_id "aSYXOOVgdOH9N9jhT56D4AAAANE"]
[Wed Nov 26 04:53:12.872010 2025] [:error] [pid 3097:tid 3116] [client 213.21.239.4:46034] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/.git/config;"] [unique_id "aSYXOOVgdOH9N9jhT56D4QAAAM8"]
[Wed Nov 26 04:53:12.872429 2025] [:error] [pid 3097:tid 3120] [client 213.21.239.4:46038] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/.git/config;.."] [unique_id "aSYXOOVgdOH9N9jhT56D4gAAANM"]
[Wed Nov 26 04:53:12.875659 2025] [:error] [pid 3097:tid 3115] [client 213.21.239.4:46002] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/qa/.git/config"] [unique_id "aSYXOOVgdOH9N9jhT56D4wAAAM4"]
[Wed Nov 26 04:53:12.876377 2025] [:error] [pid 3012:tid 3076] [client 213.21.239.4:46096] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config;"] [unique_id "aSYXOEfo8Sm1Un9NK6gnfwAAAIc"]
[Wed Nov 26 04:53:12.878764 2025] [:error] [pid 3012:tid 3074] [client 213.21.239.4:46074] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/;/.git/config"] [unique_id "aSYXOEfo8Sm1Un9NK6gngAAAAIU"]
[Wed Nov 26 04:53:12.881132 2025] [:error] [pid 3010:tid 3025] [client 213.21.239.4:46000] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSYXOEWl16-roARWvItXJQAAAAs"]
[Wed Nov 26 04:53:12.881179 2025] [:error] [pid 38796:tid 38819] [client 213.21.239.4:46006] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/.git/%0Aconfig"] [unique_id "aSYXOAGcUUzaXxvjCXOiIAAAAVQ"]
[Wed Nov 26 04:53:12.883860 2025] [:error] [pid 38796:tid 38814] [client 213.21.239.4:46010] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/..;/.git/config"] [unique_id "aSYXOAGcUUzaXxvjCXOiIQAAAU8"]
[Wed Nov 26 04:53:12.884475 2025] [:error] [pid 3011:tid 3060] [client 213.21.239.4:46008] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au../.git/config"] [unique_id "aSYXOEb0BA3GljiGlI63HAAAAFI"]
[Wed Nov 26 04:53:12.886468 2025] [core:error] [pid 3097:tid 3105] [client 213.21.239.4:45980] AH10244: invalid URI path (/../config)
[Wed Nov 26 04:53:12.887097 2025] [:error] [pid 3097:tid 3109] [client 213.21.239.4:46064] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/static../.git/config"] [unique_id "aSYXOOVgdOH9N9jhT56D5QAAAMg"]
[Wed Nov 26 04:53:12.891134 2025] [:error] [pid 3011:tid 3049] [client 213.21.239.4:46130] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.git/config"] [unique_id "aSYXOEb0BA3GljiGlI63HgAAAEc"]
[Wed Nov 26 04:53:12.891217 2025] [:error] [pid 3010:tid 3038] [client 213.21.239.4:46104] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/new/.git/config"] [unique_id "aSYXOEWl16-roARWvItXJgAAABg"]
[Wed Nov 26 04:53:12.894459 2025] [:error] [pid 3010:tid 3028] [client 213.21.239.4:46152] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/..;/.git/config"] [unique_id "aSYXOEWl16-roARWvItXJwAAAA4"]
[Wed Nov 26 04:53:12.895283 2025] [:error] [pid 3010:tid 3035] [client 213.21.239.4:46112] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/prod/.git/config"] [unique_id "aSYXOEWl16-roARWvItXKAAAABU"]
[Wed Nov 26 04:53:12.896234 2025] [:error] [pid 3097:tid 3117] [client 213.21.239.4:46128] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config;.."] [unique_id "aSYXOOVgdOH9N9jhT56D5gAAANA"]
[Wed Nov 26 04:53:12.898904 2025] [:error] [pid 3010:tid 3033] [client 213.21.239.4:46090] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aSYXOEWl16-roARWvItXKQAAABM"]
[Wed Nov 26 04:53:12.899929 2025] [:error] [pid 3010:tid 3037] [client 213.21.239.4:46084] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/../.git/config"] [unique_id "aSYXOEWl16-roARWvItXKgAAABc"]
[Wed Nov 26 04:53:12.903787 2025] [:error] [pid 38796:tid 38809] [client 213.21.239.4:46146] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.git;/config"] [unique_id "aSYXOAGcUUzaXxvjCXOiIwAAAUo"]
[Wed Nov 26 04:53:12.904458 2025] [:error] [pid 3493:tid 3518] [client 213.21.239.4:46022] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/.git/config"] [unique_id "aSYXOGBUa93ugXko11NkRAAAARc"]
[Wed Nov 26 04:53:12.926965 2025] [:error] [pid 3493:tid 3500] [client 213.21.239.4:45994] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/config"] [unique_id "aSYXOGBUa93ugXko11NkRQAAAQU"]
[Wed Nov 26 04:53:14.877929 2025] [:error] [pid 3493:tid 3505] [client 213.21.239.4:46160] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSYXOmBUa93ugXko11NkRwAAAQo"]
[Wed Nov 26 04:53:14.880291 2025] [:error] [pid 3097:tid 3122] [client 213.21.239.4:46202] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/uat/.git/config"] [unique_id "aSYXOuVgdOH9N9jhT56D6QAAANU"]
[Wed Nov 26 04:53:14.882471 2025] [:error] [pid 3012:tid 3070] [client 213.21.239.4:46164] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/static../.git/config"] [unique_id "aSYXOkfo8Sm1Un9NK6gngQAAAIE"]
[Wed Nov 26 04:53:14.890105 2025] [:error] [pid 3012:tid 3093] [client 213.21.239.4:46214] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSYXOkfo8Sm1Un9NK6gnggAAAJg"]
[Wed Nov 26 04:53:14.890342 2025] [:error] [pid 3097:tid 3108] [client 213.21.239.4:46222] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSYXOuVgdOH9N9jhT56D6gAAAMc"]
[Wed Nov 26 04:53:14.892144 2025] [:error] [pid 3097:tid 3125] [client 213.21.239.4:46210] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/web/.git/config"] [unique_id "aSYXOuVgdOH9N9jhT56D6wAAANg"]
[Wed Nov 26 04:53:14.895120 2025] [:error] [pid 3010:tid 3016] [client 213.21.239.4:46176] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/staging/.git/config"] [unique_id "aSYXOkWl16-roARWvItXLAAAAAI"]
[Wed Nov 26 04:53:14.900263 2025] [:error] [pid 3097:tid 3110] [client 213.21.239.4:46188] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/static../.git/config"] [unique_id "aSYXOuVgdOH9N9jhT56D7AAAAMk"]
[Wed Nov 26 04:53:15.011059 2025] [:error] [pid 3012:tid 3083] [client 213.21.239.4:46228] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nextspaceconsulting.com.au/config"] [unique_id "aSYXO0fo8Sm1Un9NK6gngwAAAI4"]
[Wed Nov 26 04:53:15.012098 2025] [:error] [pid 3097:tid 3114] [client 213.21.239.4:46230] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.git;/config"] [unique_id "aSYXO-VgdOH9N9jhT56D7QAAAM0"]
[Wed Nov 26 06:21:53.153797 2025] [:error] [pid 38796:tid 38820] [client 103.249.38.18:49176] [client 103.249.38.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.249.38.18, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYsAQGcUUzaXxvjCXPCJQAAAVU"]
[Wed Nov 26 06:21:53.163043 2025] [:error] [pid 38796:tid 38820] [client 103.249.38.18:49176] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Nov 26 12:37:26.974008 2025] [:error] [pid 34743:tid 34793] [client 20.122.98.56:8227] [client 20.122.98.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.122.98.56, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aSaEBgvyX7Q5oU7_mByQuQAAAVE"], referer: https://www.google.fr/
[Wed Nov 26 12:37:26.977783 2025] [:error] [pid 34743:tid 34793] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://www.google.fr/
[Wed Nov 26 12:37:27.194511 2025] [:error] [pid 34743:tid 34781] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/index1.php, referer: https://www.google.com/
[Wed Nov 26 12:37:27.692417 2025] [:error] [pid 34743:tid 34789] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:37:27.913788 2025] [:error] [pid 34743:tid 34785] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:37:28.363371 2025] [:error] [pid 34743:tid 34787] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:28.578897 2025] [:error] [pid 34743:tid 34797] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/api.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:37:29.014880 2025] [:error] [pid 34743:tid 34800] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php, referer: https://www.google.de/
[Wed Nov 26 12:37:29.259155 2025] [:error] [pid 34743:tid 34788] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:37:29.932661 2025] [:error] [pid 34743:tid 34792] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:37:30.897602 2025] [:error] [pid 34743:tid 34780] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:31.113912 2025] [:error] [pid 34743:tid 34794] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:37:31.337891 2025] [:error] [pid 34743:tid 34798] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/index4.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:37:31.841350 2025] [:error] [pid 34743:tid 34784] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:37:32.617649 2025] [:error] [pid 34743:tid 34783] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:37:32.884845 2025] [:error] [pid 34743:tid 34790] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/index3.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:37:33.117194 2025] [:error] [pid 34743:tid 34786] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php, referer: https://www.google.fr/
[Wed Nov 26 12:37:33.337228 2025] [:error] [pid 34743:tid 34795] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:33.571012 2025] [:error] [pid 34743:tid 34779] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php, referer: https://www.google.de/
[Wed Nov 26 12:37:34.182184 2025] [:error] [pid 34743:tid 34793] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:34.696721 2025] [:error] [pid 34743:tid 34781] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php, referer: https://www.google.com/
[Wed Nov 26 12:37:34.912379 2025] [:error] [pid 34743:tid 34778] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php, referer: https://www.google.de/
[Wed Nov 26 12:37:35.132964 2025] [:error] [pid 34743:tid 34789] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:37:35.350994 2025] [:error] [pid 34743:tid 34785] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:37:35.787398 2025] [:error] [pid 34743:tid 34787] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:36.003668 2025] [:error] [pid 34743:tid 34797] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:36.488284 2025] [:error] [pid 34743:tid 34800] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/backup.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:37:36.718331 2025] [:error] [pid 34743:tid 34788] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/browse.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:37:36.934984 2025] [:error] [pid 34743:tid 34792] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:37:37.151863 2025] [:error] [pid 34743:tid 34777] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:37.370103 2025] [:error] [pid 34743:tid 34780] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:37:37.813626 2025] [:error] [pid 34743:tid 34798] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php, referer: https://www.google.com/
[Wed Nov 26 12:37:38.047091 2025] [:error] [pid 34743:tid 34776] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/classsmtps.php, referer: https://www.google.fr/
[Wed Nov 26 12:37:38.268114 2025] [:error] [pid 34743:tid 34784] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php, referer: https://www.google.de/
[Wed Nov 26 12:37:38.497778 2025] [:error] [pid 34743:tid 34783] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:37:38.720066 2025] [:error] [pid 34743:tid 34790] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php, referer: https://www.google.fr/
[Wed Nov 26 12:37:38.960069 2025] [:error] [pid 34743:tid 34786] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:37:40.377850 2025] [:error] [pid 34743:tid 34786] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php, referer: https://www.google.fr/
[Wed Nov 26 12:37:40.594501 2025] [:error] [pid 34743:tid 34799] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/e.php, referer: https://www.google.com/
[Wed Nov 26 12:37:40.817452 2025] [:error] [pid 34743:tid 34793] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:41.068275 2025] [:error] [pid 34743:tid 34781] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:37:41.593937 2025] [:error] [pid 34743:tid 34778] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/fi2.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:37:42.025894 2025] [:error] [pid 34743:tid 34789] [client 20.122.98.56:8227] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php, referer: https://www.google.de/
[Wed Nov 26 12:37:42.268641 2025] [:error] [pid 34743:tid 34785] [client 20.122.98.56:8227] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "aSaEFgvyX7Q5oU7_mByQ7gAAAUk"], referer: https://www.yahoo.com/
[Wed Nov 26 12:37:43.399441 2025] [:error] [pid 34744:tid 34824] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/fw.php, referer: https://www.google.com/
[Wed Nov 26 12:37:43.620847 2025] [:error] [pid 34744:tid 34809] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/gebase.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:37:43.835262 2025] [:error] [pid 34744:tid 34815] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:37:44.300944 2025] [:error] [pid 34744:tid 34804] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:44.542455 2025] [:error] [pid 34744:tid 34818] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php, referer: https://www.google.com/
[Wed Nov 26 12:37:44.876039 2025] [:error] [pid 34744:tid 34803] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php, referer: https://www.google.com/
[Wed Nov 26 12:37:45.089344 2025] [:error] [pid 34744:tid 34827] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/load.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:37:45.365232 2025] [:error] [pid 34744:tid 34821] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:45.761532 2025] [:error] [pid 34744:tid 34807] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:37:45.993640 2025] [:error] [pid 34744:tid 34811] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php, referer: https://www.google.com/
[Wed Nov 26 12:37:46.288382 2025] [:error] [pid 34744:tid 34808] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:37:46.502629 2025] [:error] [pid 34744:tid 34822] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php, referer: https://www.google.de/
[Wed Nov 26 12:37:46.962046 2025] [:error] [pid 34744:tid 34826] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/past.php, referer: https://www.google.com/
[Wed Nov 26 12:37:47.176031 2025] [:error] [pid 34744:tid 34816] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/updates.php, referer: https://www.bing.com/
[Wed Nov 26 12:37:47.445347 2025] [:error] [pid 34744:tid 34819] [client 20.122.98.56:1055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php, referer: https://www.google.com/
[Wed Nov 26 12:37:51.393474 2025] [:error] [pid 34744:tid 34810] [client 20.122.98.56:1055] [client 20.122.98.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.122.98.56, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSaEH0tgOvVbhyALkTTuQwAAAYc"], referer: https://www.yahoo.com/
[Wed Nov 26 12:37:56.058274 2025] [:error] [pid 34744:tid 34812] [client 20.122.98.56:1055] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSaEJEtgOvVbhyALkTTuUQAAAYk"], referer: https://www.google.de/
[Wed Nov 26 12:38:05.372527 2025] [:error] [pid 34830:tid 34854] [client 20.122.98.56:7177] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:38:06.316102 2025] [:error] [pid 34830:tid 34853] [client 20.122.98.56:7177] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/404.php"] [unique_id "aSaELkukvkWgWN6jCR2dGAAAABU"], referer: https://www.bing.com/
[Wed Nov 26 12:38:11.745359 2025] [:error] [pid 34743:tid 34784] [client 20.122.98.56:7172] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSaEMwvyX7Q5oU7_mByRAAAAAUg"], referer: https://www.google.de/
[Wed Nov 26 12:38:21.056740 2025] [:error] [pid 45901:tid 45915] [client 20.122.98.56:4716] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSaEPSunQ1SpfPRNrtybGQAAAQw"], referer: https://www.google.co.uk/
[Wed Nov 26 12:38:31.753591 2025] [:error] [pid 35540:tid 35547] [client 20.122.98.56:7220] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSaER8GrIq2A6SZSnkJqGQAAAIE"], referer: https://www.google.com/
[Wed Nov 26 12:38:43.117378 2025] [:error] [pid 35540:tid 35566] [client 20.122.98.56:3778] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/shortcode/index.php"] [unique_id "aSaEU8GrIq2A6SZSnkJqIQAAAJQ"], referer: https://www.google.de/
[Wed Nov 26 12:39:03.403974 2025] [:error] [pid 34743:tid 34791] [client 20.122.98.56:2146] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/widgets/about.php"] [unique_id "aSaEZwvyX7Q5oU7_mByRGwAAAU8"], referer: https://www.google.co.uk/
[Wed Nov 26 12:39:15.898521 2025] [:error] [pid 35540:tid 35552] [client 20.122.98.56:2132] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSaEc8GrIq2A6SZSnkJqPgAAAIY"], referer: https://duckduckgo.com/
[Wed Nov 26 12:39:21.523371 2025] [:error] [pid 34742:tid 34751] [client 20.122.98.56:7626] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/admin.php"] [unique_id "aSaEeZSuLNwpQF_jzAc12wAAAEM"], referer: https://www.google.fr/
[Wed Nov 26 12:39:35.878720 2025] [:error] [pid 35540:tid 35569] [client 20.122.98.56:5906] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSaEh8GrIq2A6SZSnkJqSwAAAJc"], referer: https://www.google.fr/
[Wed Nov 26 12:39:43.027691 2025] [:error] [pid 34744:tid 34813] [client 20.122.98.56:5799] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSaEj0tgOvVbhyALkTTuiAAAAYo"], referer: https://www.google.fr/
[Wed Nov 26 12:39:53.990616 2025] [:error] [pid 34742:tid 34771] [client 20.122.98.56:5779] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSaEmZSuLNwpQF_jzAc18AAAAFc"], referer: https://www.google.de/
[Wed Nov 26 12:39:59.986163 2025] [:error] [pid 45901:tid 45906] [client 20.122.98.56:3396] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSaEnyunQ1SpfPRNrtybbgAAAQM"], referer: https://www.bing.com/
[Wed Nov 26 12:40:02.073329 2025] [:error] [pid 45901:tid 45927] [client 20.122.98.56:3821] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSaEoiunQ1SpfPRNrtybbwAAARg"], referer: https://www.google.de/
[Wed Nov 26 12:40:05.065674 2025] [:error] [pid 45901:tid 45912] [client 20.122.98.56:3441] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jcrop/jcrop.php"] [unique_id "aSaEpSunQ1SpfPRNrtybcQAAAQk"], referer: https://www.yahoo.com/
[Wed Nov 26 12:40:08.088240 2025] [:error] [pid 10383:tid 10401] [client 20.122.98.56:3012] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSaEqK0RJ-zjhOVjD8--tgAAAc8"], referer: https://www.yahoo.com/
[Wed Nov 26 12:40:12.710283 2025] [:error] [pid 34742:tid 34753] [client 20.122.98.56:7056] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/autoload_classmap.php"] [unique_id "aSaErJSuLNwpQF_jzAc1_AAAAEU"], referer: https://www.google.co.uk/
[Wed Nov 26 12:40:14.635848 2025] [:error] [pid 34744:tid 34819] [client 20.122.98.56:5903] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSaErktgOvVbhyALkTTuqgAAAZA"], referer: https://www.yahoo.com/
[Wed Nov 26 12:40:16.558488 2025] [:error] [pid 34743:tid 34784] [client 20.122.98.56:1353] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "aSaEsAvyX7Q5oU7_mByRZQAAAUg"], referer: https://www.google.co.uk/
[Wed Nov 26 12:40:18.542729 2025] [:error] [pid 10383:tid 10403] [client 20.122.98.56:4706] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/autoload_classmap.php"] [unique_id "aSaEsq0RJ-zjhOVjD8--ugAAAdE"], referer: https://duckduckgo.com/
[Wed Nov 26 12:40:22.458347 2025] [:error] [pid 35540:tid 35548] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:40:22.743446 2025] [:error] [pid 35540:tid 35564] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php, referer: https://www.google.fr/
[Wed Nov 26 12:40:28.942232 2025] [:error] [pid 35540:tid 35553] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:40:29.671982 2025] [:error] [pid 35540:tid 35570] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/gecko.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:40:31.148114 2025] [:error] [pid 35540:tid 35570] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/gel4y.php, referer: https://www.google.fr/
[Wed Nov 26 12:40:31.875811 2025] [:error] [pid 35540:tid 35547] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/gelay.php, referer: https://www.google.com/
[Wed Nov 26 12:40:32.526793 2025] [:error] [pid 35540:tid 35564] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/fix.php, referer: https://www.bing.com/
[Wed Nov 26 12:40:32.743109 2025] [:error] [pid 35540:tid 35552] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php, referer: https://www.google.fr/
[Wed Nov 26 12:40:32.958931 2025] [:error] [pid 35540:tid 35546] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/fox.php, referer: https://www.bing.com/
[Wed Nov 26 12:40:33.890856 2025] [:error] [pid 35540:tid 35557] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:40:34.325496 2025] [:error] [pid 35540:tid 35567] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:40:34.541864 2025] [:error] [pid 35540:tid 35558] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:40:34.764205 2025] [:error] [pid 35540:tid 35566] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:40:35.008676 2025] [:error] [pid 35540:tid 35563] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:40:35.247607 2025] [:error] [pid 35540:tid 35570] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/index.bak.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:40:35.712973 2025] [:error] [pid 35540:tid 35552] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php, referer: https://www.bing.com/
[Wed Nov 26 12:40:36.392002 2025] [:error] [pid 35540:tid 35548] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:40:36.625742 2025] [:error] [pid 35540:tid 35555] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:40:38.293452 2025] [:error] [pid 35540:tid 35561] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php, referer: https://www.google.de/
[Wed Nov 26 12:40:38.524265 2025] [:error] [pid 35540:tid 35567] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:40:38.743315 2025] [:error] [pid 35540:tid 35559] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php, referer: https://www.google.fr/
[Wed Nov 26 12:40:38.994138 2025] [:error] [pid 35540:tid 35558] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/mm.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:40:40.327777 2025] [:error] [pid 35540:tid 35562] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php, referer: https://www.google.com/
[Wed Nov 26 12:40:40.554515 2025] [:error] [pid 35540:tid 35570] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:40:40.821461 2025] [:error] [pid 35540:tid 35547] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php, referer: https://www.bing.com/
[Wed Nov 26 12:40:41.137157 2025] [:error] [pid 35540:tid 35568] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/options-general.php, referer: https://www.google.fr/
[Wed Nov 26 12:40:41.354094 2025] [:error] [pid 35540:tid 35551] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:40:42.901080 2025] [:error] [pid 35540:tid 35551] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php, referer: https://www.google.de/
[Wed Nov 26 12:40:43.117495 2025] [:error] [pid 35540:tid 35552] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php, referer: https://www.google.de/
[Wed Nov 26 12:40:43.335446 2025] [:error] [pid 35540:tid 35546] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:40:43.565084 2025] [:error] [pid 35540:tid 35548] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php, referer: https://www.google.com/
[Wed Nov 26 12:40:43.787360 2025] [:error] [pid 35540:tid 35555] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php, referer: https://www.google.com/
[Wed Nov 26 12:40:44.008720 2025] [:error] [pid 35540:tid 35569] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/sts.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:40:44.226333 2025] [:error] [pid 35540:tid 35565] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:40:44.673696 2025] [:error] [pid 35540:tid 35557] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:40:45.507878 2025] [:error] [pid 35540:tid 35567] [client 20.122.98.56:3817] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php, referer: https://www.google.fr/
[Wed Nov 26 12:40:45.731623 2025] [:error] [pid 35540:tid 35559] [client 20.122.98.56:3817] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSaEzcGrIq2A6SZSnkJq4gAAAI0"], referer: https://www.yahoo.com/
[Wed Nov 26 12:40:47.823933 2025] [:error] [pid 34743:tid 34785] [client 20.122.98.56:4699] File does not exist: /usr/local/apache/htdocs/suspended-page/ty.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:40:48.811342 2025] [:error] [pid 34743:tid 34792] [client 20.122.98.56:4699] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/user/.env"] [unique_id "aSaE0AvyX7Q5oU7_mByRewAAAVA"], referer: https://www.google.co.uk/
[Wed Nov 26 12:40:51.272642 2025] [:error] [pid 45836:tid 45850] [client 20.122.98.56:3979] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php, referer: https://www.bing.com/
[Wed Nov 26 12:40:52.072394 2025] [:error] [pid 45836:tid 45865] [client 20.122.98.56:3979] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:40:52.367225 2025] [:error] [pid 45836:tid 45870] [client 20.122.98.56:3979] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-aa.php, referer: https://www.yahoo.com/
[Wed Nov 26 12:40:53.010486 2025] [:error] [pid 45836:tid 45863] [client 20.122.98.56:3979] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-activat.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:40:54.975303 2025] [:error] [pid 45836:tid 45847] [client 20.122.98.56:3979] [client 20.122.98.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.122.98.56, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/light/wp-login.php"] [unique_id "aSaE1pfrnOGqL-seZAwx8AAAAME"], referer: https://duckduckgo.com/
[Wed Nov 26 12:41:01.849277 2025] [:error] [pid 45836:tid 45863] [client 20.122.98.56:3979] [client 20.122.98.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.122.98.56, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSaE3ZfrnOGqL-seZAwyAgAAANE"], referer: https://www.yahoo.com/
[Wed Nov 26 12:41:03.556286 2025] [:error] [pid 45836:tid 45848] [client 20.122.98.56:3979] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:41:03.948272 2025] [:error] [pid 45836:tid 45860] [client 20.122.98.56:3979] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php, referer: https://www.bing.com/
[Wed Nov 26 12:41:04.447908 2025] [:error] [pid 45836:tid 45853] [client 20.122.98.56:3979] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-comments.php, referer: https://www.google.fr/
[Wed Nov 26 12:41:04.718467 2025] [:error] [pid 45836:tid 45869] [client 20.122.98.56:3979] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-config-sample.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:41:14.293045 2025] [:error] [pid 45836:tid 45857] [client 20.122.98.56:3979] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:41:14.563279 2025] [:error] [pid 45836:tid 45851] [client 20.122.98.56:3979] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:41:14.825106 2025] [:error] [pid 45836:tid 45855] [client 20.122.98.56:3979] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSaE6pfrnOGqL-seZAwyJQAAAMk"], referer: https://www.google.co.uk/
[Wed Nov 26 12:41:16.614636 2025] [:error] [pid 45836:tid 45854] [client 20.122.98.56:2275] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSaE7JfrnOGqL-seZAwyKAAAAMg"], referer: https://www.google.co.uk/
[Wed Nov 26 12:41:17.794950 2025] [:error] [pid 45901:tid 45915] [client 20.122.98.56:4042] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSaE7SunQ1SpfPRNrtybsQAAAQw"], referer: https://www.yahoo.com/
[Wed Nov 26 12:41:19.800826 2025] [:error] [pid 34742:tid 34771] [client 20.122.98.56:3631] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/site-title/index.php"] [unique_id "aSaE75SuLNwpQF_jzAc2EgAAAFc"], referer: https://www.google.fr/
[Wed Nov 26 12:41:21.590418 2025] [:error] [pid 35540:tid 35560] [client 20.122.98.56:4602] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSaE8cGrIq2A6SZSnkJrHQAAAI4"], referer: https://www.google.co.uk/
[Wed Nov 26 12:41:23.649252 2025] [:error] [pid 34742:tid 34755] [client 20.122.98.56:2925] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/autoload_classmap.php"] [unique_id "aSaE85SuLNwpQF_jzAc2EwAAAEc"], referer: https://www.google.fr/
[Wed Nov 26 12:41:25.561482 2025] [:error] [pid 45901:tid 45916] [client 20.122.98.56:2736] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSaE9SunQ1SpfPRNrtybtQAAAQ0"], referer: https://www.google.co.uk/
[Wed Nov 26 12:41:27.251026 2025] [:error] [pid 10383:tid 10387] [client 20.122.98.56:3477] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/about.php"] [unique_id "aSaE960RJ-zjhOVjD8-_UwAAAcE"], referer: https://www.google.co.uk/
[Wed Nov 26 12:41:29.720445 2025] [:error] [pid 10383:tid 10390] [client 20.122.98.56:3456] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSaE-a0RJ-zjhOVjD8-_VwAAAcQ"], referer: https://duckduckgo.com/
[Wed Nov 26 12:41:31.877253 2025] [:error] [pid 45836:tid 45847] [client 20.122.98.56:4576] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSaE-5frnOGqL-seZAwyMQAAAME"], referer: https://duckduckgo.com/
[Wed Nov 26 12:41:33.974496 2025] [:error] [pid 10383:tid 10404] [client 20.122.98.56:3490] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSaE_a0RJ-zjhOVjD8-_XwAAAdI"], referer: https://www.google.de/
[Wed Nov 26 12:41:35.271412 2025] [:error] [pid 34744:tid 34822] [client 20.122.98.56:4742] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/file.php"] [unique_id "aSaE_0tgOvVbhyALkTTu3gAAAZM"], referer: https://www.google.com/
[Wed Nov 26 12:41:37.516783 2025] [:error] [pid 34743:tid 34778] [client 20.122.98.56:6378] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSaFAQvyX7Q5oU7_mByRlAAAAUI"], referer: https://www.bing.com/
[Wed Nov 26 12:41:39.449414 2025] [:error] [pid 34742:tid 34768] [client 20.122.98.56:4755] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/chosen.php"] [unique_id "aSaFA5SuLNwpQF_jzAc2FQAAAFQ"], referer: https://www.google.fr/
[Wed Nov 26 12:41:41.440620 2025] [:error] [pid 10383:tid 10388] [client 20.122.98.56:5446] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSaFBa0RJ-zjhOVjD8-_sgAAAcI"], referer: https://www.google.de/
[Wed Nov 26 12:41:43.512879 2025] [:error] [pid 34742:tid 34754] [client 20.122.98.56:5448] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSaFB5SuLNwpQF_jzAc2FwAAAEY"], referer: https://duckduckgo.com/
[Wed Nov 26 12:41:44.879261 2025] [:error] [pid 34743:tid 34797] [client 20.122.98.56:8196] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSaFCAvyX7Q5oU7_mByRlQAAAVU"], referer: https://www.google.fr/
[Wed Nov 26 12:41:46.220247 2025] [:error] [pid 35540:tid 35566] [client 20.122.98.56:3472] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/include.php"] [unique_id "aSaFCsGrIq2A6SZSnkJrMwAAAJQ"], referer: https://www.bing.com/
[Wed Nov 26 12:41:48.243773 2025] [:error] [pid 34742:tid 34750] [client 20.122.98.56:2695] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSaFDJSuLNwpQF_jzAc2IgAAAEI"], referer: https://duckduckgo.com/
[Wed Nov 26 12:41:49.951703 2025] [:error] [pid 35540:tid 35560] [client 20.122.98.56:3896] [client 20.122.98.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSaFDcGrIq2A6SZSnkJrPgAAAI4"], referer: https://www.bing.com/
[Wed Nov 26 12:41:50.983874 2025] [:error] [pid 34744:tid 34807] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php, referer: https://www.bing.com/
[Wed Nov 26 12:41:51.199991 2025] [:error] [pid 34744:tid 34809] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-logs.php, referer: https://www.google.com/
[Wed Nov 26 12:41:51.433701 2025] [:error] [pid 34744:tid 34803] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setting.php, referer: https://www.google.com/
[Wed Nov 26 12:41:51.650966 2025] [:error] [pid 34744:tid 34813] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php, referer: https://www.google.com/
[Wed Nov 26 12:41:51.904754 2025] [:error] [pid 34744:tid 34823] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signin.php, referer: https://www.bing.com/
[Wed Nov 26 12:41:52.167336 2025] [:error] [pid 34744:tid 34806] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-wso.php, referer: https://www.google.com/
[Wed Nov 26 12:41:52.535119 2025] [:error] [pid 34744:tid 34814] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php, referer: https://www.google.com/
[Wed Nov 26 12:41:52.904236 2025] [:error] [pid 34744:tid 34810] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:41:53.303588 2025] [:error] [pid 34744:tid 34812] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php, referer: https://www.bing.com/
[Wed Nov 26 12:41:53.522492 2025] [:error] [pid 34744:tid 34811] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:41:53.750539 2025] [:error] [pid 34744:tid 34808] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:41:53.973772 2025] [:error] [pid 34744:tid 34804] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/aaaa.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:41:54.259693 2025] [:error] [pid 34744:tid 34818] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php, referer: https://www.google.fr/
[Wed Nov 26 12:41:54.542062 2025] [:error] [pid 34744:tid 34805] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/bv3.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:41:54.766769 2025] [:error] [pid 34744:tid 34815] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/cfile.php, referer: https://www.google.de/
[Wed Nov 26 12:41:55.407667 2025] [:error] [pid 34744:tid 34821] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php, referer: https://www.google.de/
[Wed Nov 26 12:41:55.623993 2025] [:error] [pid 34744:tid 34824] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:41:55.883917 2025] [:error] [pid 34744:tid 34825] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/dex.php, referer: https://www.bing.com/
[Wed Nov 26 12:41:56.101076 2025] [:error] [pid 34744:tid 34819] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/ffile.php, referer: https://duckduckgo.com/
[Wed Nov 26 12:41:56.326326 2025] [:error] [pid 34744:tid 34820] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/file17.php, referer: https://www.bing.com/
[Wed Nov 26 12:41:56.543649 2025] [:error] [pid 34744:tid 34826] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:41:56.761174 2025] [:error] [pid 34744:tid 34807] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php, referer: https://www.google.com/
[Wed Nov 26 12:41:56.978684 2025] [:error] [pid 34744:tid 34809] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php, referer: https://www.google.co.uk/
[Wed Nov 26 12:41:57.266979 2025] [:error] [pid 34744:tid 34803] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/file8.php, referer: https://www.google.com/
[Wed Nov 26 12:41:57.485559 2025] [:error] [pid 34744:tid 34813] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php, referer: https://www.google.de/
[Wed Nov 26 12:41:57.766197 2025] [:error] [pid 34744:tid 34823] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/great.php, referer: https://www.google.com/
[Wed Nov 26 12:41:58.201657 2025] [:error] [pid 34744:tid 34822] [client 20.122.98.56:2694] File does not exist: /usr/local/apache/htdocs/suspended-page/view.php, referer: https://www.google.de/
[Wed Nov 26 22:31:31.092150 2025] [:error] [pid 45685:tid 45764] [client 216.126.239.203:36168] [client 216.126.239.203] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aScPQ1j3f_NRdgU0DQ4BRgAAARY"]
[Thu Nov 27 00:54:19.836800 2025] [:error] [pid 25262:tid 25328] [client 103.77.107.57:64936] [client 103.77.107.57] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "aScwu03p81VU3bYILBU9WAAAAgc"]
[Thu Nov 27 00:54:20.104489 2025] [:error] [pid 25180:tid 25183] [client 103.77.107.57:53061] [client 103.77.107.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aScwvL-owhtiwMHXYlzQJgAAAYE"]
[Thu Nov 27 02:24:04.413236 2025] [:error] [pid 54723:tid 54742] [client 179.125.144.203:46364] [client 179.125.144.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.125.144.203, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aSdFxA2CEg7QoyDosdIItgAAAAw"]
[Thu Nov 27 02:24:04.418305 2025] [:error] [pid 54723:tid 54742] [client 179.125.144.203:46364] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
2026/03/10 20:02:37 [error] 14458#14458: *89589 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 5.39.1.226, server: nextspaceconsulting.com.au, request: "GET /robots.txt HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/10 21:24:46 [error] 3834#3834: *151383 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 37.35.64.130, server: nextspaceconsulting.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/10 21:41:57 [error] 3838#3838: *163302 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 110.44.115.227, server: nextspaceconsulting.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/10 21:44:16 [error] 3831#3831: *164793 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 167.71.27.160, server: nextspaceconsulting.com.au, request: "GET /favicon.ico HTTP/1.1", host: "nextspaceconsulting.com.au", referrer: "http://nextspaceconsulting.com.au/"
2026/03/10 21:44:22 [error] 3820#3820: *164851 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 167.71.27.160, server: nextspaceconsulting.com.au, request: "GET /favicon.ico HTTP/1.1", host: "nextspaceconsulting.com.au", referrer: "https://nextspaceconsulting.com.au/"
2026/03/10 22:50:50 [error] 3843#3843: *213267 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 85.208.96.211, server: nextspaceconsulting.com.au, request: "GET /robots.txt HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 00:54:51 [error] 6426#6426: *302302 "/usr/local/apache/htdocs/suspended-page/wordpress/index.html" is not found (2: No such file or directory), client: 34.162.25.188, server: nextspaceconsulting.com.au, request: "HEAD /wordpress/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 00:54:52 [error] 6426#6426: *302302 "/usr/local/apache/htdocs/suspended-page/blog/index.html" is not found (2: No such file or directory), client: 34.162.25.188, server: nextspaceconsulting.com.au, request: "HEAD /blog/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 00:54:52 [error] 6426#6426: *302302 "/usr/local/apache/htdocs/suspended-page/wp/index.html" is not found (2: No such file or directory), client: 34.162.25.188, server: nextspaceconsulting.com.au, request: "HEAD /wp/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 00:54:52 [error] 6426#6426: *302302 "/usr/local/apache/htdocs/suspended-page/backup/index.html" is not found (2: No such file or directory), client: 34.162.25.188, server: nextspaceconsulting.com.au, request: "HEAD /backup/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 00:54:52 [error] 6426#6426: *302302 "/usr/local/apache/htdocs/suspended-page/new/index.html" is not found (2: No such file or directory), client: 34.162.25.188, server: nextspaceconsulting.com.au, request: "HEAD /new/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 00:54:53 [error] 6426#6426: *302302 "/usr/local/apache/htdocs/suspended-page/old/index.html" is not found (2: No such file or directory), client: 34.162.25.188, server: nextspaceconsulting.com.au, request: "HEAD /old/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 02:08:48 [error] 6419#6419: *355672 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 66.249.75.202, server: nextspaceconsulting.com.au, request: "GET /robots.txt HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 03:51:40 [error] 3458#3458: *426563 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 154.144.253.26, server: nextspaceconsulting.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 03:53:10 [error] 3459#3459: *427573 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 180.190.6.250, server: nextspaceconsulting.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 04:18:57 [error] 3462#3462: *445517 "/usr/local/apache/htdocs/suspended-page/new/index.html" is not found (2: No such file or directory), client: 35.224.218.65, server: nextspaceconsulting.com.au, request: "HEAD /new/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/11 04:18:57 [error] 3462#3462: *445517 "/usr/local/apache/htdocs/suspended-page/wp/index.html" is not found (2: No such file or directory), client: 35.224.218.65, server: nextspaceconsulting.com.au, request: "HEAD /wp/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/11 04:18:57 [error] 3462#3462: *445517 "/usr/local/apache/htdocs/suspended-page/backup/index.html" is not found (2: No such file or directory), client: 35.224.218.65, server: nextspaceconsulting.com.au, request: "HEAD /backup/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/11 04:18:58 [error] 3462#3462: *445517 "/usr/local/apache/htdocs/suspended-page/wordpress/index.html" is not found (2: No such file or directory), client: 35.224.218.65, server: nextspaceconsulting.com.au, request: "HEAD /wordpress/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/11 04:18:58 [error] 3462#3462: *445517 "/usr/local/apache/htdocs/suspended-page/blog/index.html" is not found (2: No such file or directory), client: 35.224.218.65, server: nextspaceconsulting.com.au, request: "HEAD /blog/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/11 04:18:58 [error] 3462#3462: *445517 "/usr/local/apache/htdocs/suspended-page/old/index.html" is not found (2: No such file or directory), client: 35.224.218.65, server: nextspaceconsulting.com.au, request: "HEAD /old/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/11 04:30:07 [error] 3463#3463: *453068 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/v3/payment_gateways" failed (2: No such file or directory), client: 79.127.155.174, server: nextspaceconsulting.com.au, request: "GET /wp-json/wc/v3/payment_gateways HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 04:30:08 [error] 3468#3468: *453078 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/v2/payment_gateways" failed (2: No such file or directory), client: 79.127.155.174, server: nextspaceconsulting.com.au, request: "GET /wp-json/wc/v2/payment_gateways HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 04:30:08 [error] 3470#3470: *453088 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/store/v1/cart" failed (2: No such file or directory), client: 79.127.155.174, server: nextspaceconsulting.com.au, request: "GET /wp-json/wc/store/v1/cart HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 04:30:09 [error] 3461#3461: *453097 openat() "/usr/local/apache/htdocs/suspended-page/wp-json/wc/store/v1/payment_methods" failed (2: No such file or directory), client: 79.127.155.174, server: nextspaceconsulting.com.au, request: "GET /wp-json/wc/store/v1/payment_methods HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 05:28:59 [error] 3465#3465: *494644 openat() "/usr/local/apache/htdocs/suspended-page/userfuns.php" failed (2: No such file or directory), client: 87.106.146.14, server: nextspaceconsulting.com.au, request: "GET /userfuns.php HTTP/1.1", host: "nextspaceconsulting.com.au", referrer: "www.google.com"
2026/03/11 05:29:25 [error] 3465#3465: *495019 openat() "/usr/local/apache/htdocs/suspended-page/userfuns.php" failed (2: No such file or directory), client: 87.106.146.14, server: nextspaceconsulting.com.au, request: "GET /userfuns.php HTTP/1.1", host: "nextspaceconsulting.com.au", referrer: "www.google.com"
2026/03/11 05:29:35 [error] 3469#3469: *495144 openat() "/usr/local/apache/htdocs/suspended-page/postnews.php" failed (2: No such file or directory), client: 87.106.146.14, server: nextspaceconsulting.com.au, request: "GET /postnews.php HTTP/1.1", host: "nextspaceconsulting.com.au", referrer: "www.google.com"
2026/03/11 05:29:46 [error] 3471#3471: *495272 openat() "/usr/local/apache/htdocs/suspended-page/postnews.php" failed (2: No such file or directory), client: 87.106.146.14, server: nextspaceconsulting.com.au, request: "GET /postnews.php HTTP/1.1", host: "nextspaceconsulting.com.au", referrer: "www.google.com"
2026/03/11 06:36:27 [error] 3471#3471: *535601 openat() "/usr/local/apache/htdocs/suspended-page/.git/config" failed (2: No such file or directory), client: 34.6.78.66, server: nextspaceconsulting.com.au, request: "GET /.git/config HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 06:45:34 [error] 3470#3470: *540344 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 150.228.105.237, server: nextspaceconsulting.com.au, request: "GET /robots.txt HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 07:48:35 [error] 3471#3471: *581508 openat() "/usr/local/apache/htdocs/suspended-page/wp-login.php" failed (2: No such file or directory), client: 209.87.169.76, server: nextspaceconsulting.com.au, request: "GET /wp-login.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 08:18:01 [error] 3464#3464: *597697 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 74.7.244.36, server: nextspaceconsulting.com.au, request: "GET /robots.txt HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 11:40:05 [error] 53947#53947: *708170 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 165.101.254.234, server: nextspaceconsulting.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 11:41:12 [error] 53948#53948: *708938 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 223.181.50.213, server: nextspaceconsulting.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 14:46:26 [error] 53948#53948: *825854 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 74.7.244.27, server: nextspaceconsulting.com.au, request: "GET /robots.txt HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/11 18:05:04 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:05 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /xmlrpc.php?rsd HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:06 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/blog/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:07 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/web/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:08 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/wordpress/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:08 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/website/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /website/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:09 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/wp/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /wp/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:10 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/news/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /news/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:10 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/2018/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /2018/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:11 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/2019/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /2019/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:11 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/shop/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /shop/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:12 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/wp1/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /wp1/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:13 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/test/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /test/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:13 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/media/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /media/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:14 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/wp2/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /wp2/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:14 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/site/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /site/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:15 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/cms/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /cms/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 18:05:16 [error] 53946#53946: *967004 openat() "/usr/local/apache/htdocs/suspended-page/sito/wp-includes/wlwmanifest.xml" failed (2: No such file or directory), client: 136.119.208.220, server: nextspaceconsulting.com.au, request: "GET /sito/wp-includes/wlwmanifest.xml HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:20 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/plugins/hellopress/wp_filemanager.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:20 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/dom.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /dom.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:20 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:21 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/ta0ol.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /ta0ol.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:21 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/xa.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /xa.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:21 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/a5.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /a5.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:21 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/phina.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /phina.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:21 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/jga.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /jga.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:22 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/fs6.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /fs6.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:22 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/fs7.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /fs7.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:22 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/kbfr.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /kbfr.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:22 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wander.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wander.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:22 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/xc0252.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /xc0252.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:23 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/f6.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /f6.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:23 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/8.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /8.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:23 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/xs.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /xs.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:23 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/ws47.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /ws47.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:23 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/vvvb.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /vvvb.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:24 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/x12.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /x12.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:24 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/webadmin.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /webadmin.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:24 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/sid3.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /sid3.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:24 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/class.api.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /class.api.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:24 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/blog/222.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /blog/222.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:25 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp-admin/js/about.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp-admin/js/about.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:25 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/rrr.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /rrr.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:25 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/ant.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /ant.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:25 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/1.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /1.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:25 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/vx.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /vx.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:26 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/gtc.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /gtc.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:26 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp-admin/images/admin.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp-admin/images/admin.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:26 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp-content/index.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp-content/index.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:26 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp-includes/Text/about.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp-includes/Text/about.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:26 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/mini.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /mini.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:27 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/sf.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /sf.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:27 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/pn.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /pn.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:27 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/miansha.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /miansha.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:27 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/az.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /az.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:27 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/155.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /155.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:28 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/file2.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /file2.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:28 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/oo.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /oo.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:28 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/bless.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /bless.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:28 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/z60.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /z60.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:28 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/666.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /666.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:29 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp-admin/setup-config.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp-admin/setup-config.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:29 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wsd.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wsd.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:29 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/ccou.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /ccou.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:29 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp-admin/css/colors/about.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp-admin/css/colors/about.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:29 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp-logout.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp-logout.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:30 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp-links.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp-links.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:30 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/web.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /web.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:30 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/11.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /11.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:30 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/style.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /style.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:30 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/past1.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /past1.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:31 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/ws46.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /ws46.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:31 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/f35.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /f35.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:31 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/eee.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /eee.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:31 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/buy.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /buy.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:31 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/chosen.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /chosen.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:32 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/ws36.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /ws36.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:32 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/past.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /past.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:32 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/size.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /size.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:32 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/a2.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /a2.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:32 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/abcd.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /abcd.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:33 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/mh.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /mh.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:33 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/s.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /s.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:33 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/x.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /x.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:33 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/item.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /item.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:33 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/support.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /support.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:34 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/siteheads.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /siteheads.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:34 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wen.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wen.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:34 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/ng.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /ng.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:34 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/gecko.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /gecko.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:34 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/to.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /to.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:35 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/error.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /error.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:35 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/log.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /log.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:35 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/wp-admin/js/index.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /wp-admin/js/index.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:35 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/amax.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /amax.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:35 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/m.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /m.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:36 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/222.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /222.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:36 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/test1.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /test1.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:36 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/geck.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /geck.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:36 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/0x.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /0x.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:36 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/ova.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /ova.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:37 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/img.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /img.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:37 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/abc.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /abc.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 20:04:37 [error] 53948#53948: *1056471 openat() "/usr/local/apache/htdocs/suspended-page/dropdown.php" failed (2: No such file or directory), client: 20.98.255.230, server: nextspaceconsulting.com.au, request: "GET /dropdown.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/11 22:20:40 [error] 53947#53947: *1155971 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 54.39.210.81, server: nextspaceconsulting.com.au, request: "GET /robots.txt HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 00:19:36 [error] 53948#53948: *1239704 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 176.29.1.182, server: nextspaceconsulting.com.au, request: "GET /robots.txt HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 00:31:21 [error] 53395#53395: *1248345 openat() "/usr/local/apache/htdocs/suspended-page/robots.txt" failed (2: No such file or directory), client: 104.237.151.163, server: nextspaceconsulting.com.au, request: "GET /robots.txt HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 00:31:23 [error] 53494#53494: *1248366 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 104.237.151.163, server: nextspaceconsulting.com.au, request: "HEAD /favicon.ico HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 01:06:52 [error] 53520#53520: *1274587 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 87.17.115.145, server: nextspaceconsulting.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 01:08:54 [error] 53415#53415: *1275948 openat() "/usr/local/apache/htdocs/suspended-page/xmlrpc.php" failed (2: No such file or directory), client: 138.84.79.111, server: nextspaceconsulting.com.au, request: "POST /xmlrpc.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 01:34:04 [error] 53500#53500: *1293898 "/usr/local/apache/htdocs/suspended-page/wordpress/index.html" is not found (2: No such file or directory), client: 34.174.10.176, server: nextspaceconsulting.com.au, request: "HEAD /wordpress/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 01:34:05 [error] 53500#53500: *1293898 "/usr/local/apache/htdocs/suspended-page/blog/index.html" is not found (2: No such file or directory), client: 34.174.10.176, server: nextspaceconsulting.com.au, request: "HEAD /blog/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 01:34:05 [error] 53500#53500: *1293898 "/usr/local/apache/htdocs/suspended-page/backup/index.html" is not found (2: No such file or directory), client: 34.174.10.176, server: nextspaceconsulting.com.au, request: "HEAD /backup/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 01:34:05 [error] 53500#53500: *1293898 "/usr/local/apache/htdocs/suspended-page/wp/index.html" is not found (2: No such file or directory), client: 34.174.10.176, server: nextspaceconsulting.com.au, request: "HEAD /wp/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 01:34:05 [error] 53500#53500: *1293898 "/usr/local/apache/htdocs/suspended-page/old/index.html" is not found (2: No such file or directory), client: 34.174.10.176, server: nextspaceconsulting.com.au, request: "HEAD /old/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 01:34:05 [error] 53500#53500: *1293898 "/usr/local/apache/htdocs/suspended-page/new/index.html" is not found (2: No such file or directory), client: 34.174.10.176, server: nextspaceconsulting.com.au, request: "HEAD /new/ HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 03:28:48 [error] 58922#58922: *1366695 "/usr/local/apache/htdocs/suspended-page/wordpress/index.html" is not found (2: No such file or directory), client: 8.229.142.142, server: nextspaceconsulting.com.au, request: "HEAD /wordpress/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/12 03:28:48 [error] 58922#58922: *1366695 "/usr/local/apache/htdocs/suspended-page/old/index.html" is not found (2: No such file or directory), client: 8.229.142.142, server: nextspaceconsulting.com.au, request: "HEAD /old/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/12 03:28:49 [error] 58922#58922: *1366695 "/usr/local/apache/htdocs/suspended-page/wp/index.html" is not found (2: No such file or directory), client: 8.229.142.142, server: nextspaceconsulting.com.au, request: "HEAD /wp/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/12 03:28:49 [error] 58922#58922: *1366695 "/usr/local/apache/htdocs/suspended-page/new/index.html" is not found (2: No such file or directory), client: 8.229.142.142, server: nextspaceconsulting.com.au, request: "HEAD /new/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/12 03:28:49 [error] 58922#58922: *1366695 "/usr/local/apache/htdocs/suspended-page/blog/index.html" is not found (2: No such file or directory), client: 8.229.142.142, server: nextspaceconsulting.com.au, request: "HEAD /blog/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/12 03:28:49 [error] 58922#58922: *1366695 "/usr/local/apache/htdocs/suspended-page/backup/index.html" is not found (2: No such file or directory), client: 8.229.142.142, server: nextspaceconsulting.com.au, request: "HEAD /backup/ HTTP/1.1", host: "www.nextspaceconsulting.com.au"
2026/03/12 03:56:24 [error] 58921#58921: *1381944 openat() "/usr/local/apache/htdocs/suspended-page/favicon.ico" failed (2: No such file or directory), client: 93.158.91.24, server: nextspaceconsulting.com.au, request: "GET /favicon.ico HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 04:02:14 [error] 58923#58923: *1385846 openat() "/usr/local/apache/htdocs/suspended-page/wp-login.php" failed (2: No such file or directory), client: 45.132.115.254, server: nextspaceconsulting.com.au, request: "GET /wp-login.php HTTP/1.1", host: "nextspaceconsulting.com.au"
2026/03/12 04:59:13 [error] 58921#58921: *1411444 openat() "/usr/local/apache/htdocs/suspended-page/wp-login.php" failed (2: No such file or directory), client: 45.132.115.244, server: nextspaceconsulting.com.au, request: "GET /wp-login.php HTTP/1.1", host: "nextspaceconsulting.com.au"
[Thu Mar 12 16:12:44.880319 2026] [:error] [pid 8249:tid 8272] [client 103.211.16.230:64686] [client 103.211.16.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.16.230, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abJ1fCK5dL3-8Jdf0M3MfQAAARU"]
[Thu Mar 12 16:12:44.885139 2026] [:error] [pid 8249:tid 8272] [client 103.211.16.230:64686] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 12 18:25:16.943507 2026] [:error] [pid 22063:tid 22067] [client 103.65.236.149:52521] [client 103.65.236.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "abKUjK0RUhS-MJyHWLQcGQAAAgI"]
[Thu Mar 12 18:25:17.164525 2026] [:error] [pid 22063:tid 22069] [client 103.65.236.149:52536] [client 103.65.236.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abKUja0RUhS-MJyHWLQcGgAAAgQ"]
[Thu Mar 12 19:10:12.694489 2026] [:error] [pid 8249:tid 8264] [client 185.198.240.179:52659] [client 185.198.240.179] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.179, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abKfFCK5dL3-8Jdf0M0hyAAAAQ0"]
[Thu Mar 12 19:10:12.698142 2026] [:error] [pid 8249:tid 8264] [client 185.198.240.179:52659] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 12 22:51:04.082888 2026] [:error] [pid 8249:tid 8265] [client 20.220.13.10:48680] File does not exist: /usr/local/apache/htdocs/suspended-page/fyiiz.php
[Thu Mar 12 22:51:04.292619 2026] [:error] [pid 8249:tid 8255] [client 20.220.13.10:48680] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Mar 12 22:51:04.505820 2026] [:error] [pid 8249:tid 8273] [client 20.220.13.10:48680] File does not exist: /usr/local/apache/htdocs/suspended-page/to.php
[Thu Mar 12 22:51:04.718923 2026] [:error] [pid 8249:tid 8261] [client 20.220.13.10:48680] File does not exist: /usr/local/apache/htdocs/suspended-page/xc0252.php
[Thu Mar 12 22:51:04.930267 2026] [:error] [pid 8249:tid 8272] [client 20.220.13.10:48680] File does not exist: /usr/local/apache/htdocs/suspended-page/595.php
[Thu Mar 12 22:51:05.143319 2026] [:error] [pid 8249:tid 8274] [client 20.220.13.10:48680] File does not exist: /usr/local/apache/htdocs/suspended-page/x1.php
[Thu Mar 12 22:51:05.353743 2026] [:error] [pid 8249:tid 8252] [client 20.220.13.10:48680] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Thu Mar 12 22:51:05.565672 2026] [:error] [pid 8249:tid 8263] [client 20.220.13.10:48680] File does not exist: /usr/local/apache/htdocs/suspended-page/scbpb.php
[Thu Mar 12 22:51:05.778333 2026] [:error] [pid 8249:tid 8257] [client 20.220.13.10:48680] File does not exist: /usr/local/apache/htdocs/suspended-page/yaiid.php
[Thu Mar 12 22:51:05.987585 2026] [:error] [pid 8249:tid 8256] [client 20.220.13.10:48680] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Thu Mar 12 22:51:06.196771 2026] [:error] [pid 8249:tid 8253] [client 20.220.13.10:48680] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "abLS2iK5dL3-8Jdf0M2TVgAAAQI"]
[Thu Mar 12 22:51:06.955428 2026] [:error] [pid 11953:tid 11978] [client 20.220.13.10:43329] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "abLS2pudzqsnq3bvtDZztQAAAVc"]
[Thu Mar 12 22:51:07.761879 2026] [:error] [pid 11986:tid 12039] [client 20.220.13.10:43718] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "abLS2zKqY2w-DVCrxTA9hgAAAdU"]
[Thu Mar 12 22:51:08.470154 2026] [:error] [pid 51456:tid 51504] [client 20.220.13.10:48658] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "abLS3BXu8LzVixNGr0uJnwAAAFE"]
[Thu Mar 12 22:51:08.896223 2026] [:error] [pid 20531:tid 20622] [client 20.220.13.10:59465] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "abLS3Pvw-RvNQd9b3a-3ygAAA8Y"]
[Thu Mar 12 22:51:09.341009 2026] [:error] [pid 11986:tid 12034] [client 20.220.13.10:59458] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "abLS3TKqY2w-DVCrxTA9hwAAAdA"]
[Thu Mar 12 22:51:09.854674 2026] [:error] [pid 11953:tid 11962] [client 20.220.13.10:59042] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "abLS3Zudzqsnq3bvtDZzwwAAAUc"]
[Thu Mar 12 22:51:10.390996 2026] [:error] [pid 8249:tid 8259] [client 20.220.13.10:59493] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "abLS3iK5dL3-8Jdf0M2TZAAAAQg"]
[Thu Mar 12 22:51:10.918640 2026] [:error] [pid 51457:tid 51530] [client 20.220.13.10:59064] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fss.php"] [unique_id "abLS3ijknw2FvT4H3DbXqwAAAJA"]
[Thu Mar 12 22:51:11.385781 2026] [:error] [pid 51456:tid 51505] [client 20.220.13.10:59066] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fss.php"] [unique_id "abLS3xXu8LzVixNGr0uJpgAAAFI"]
[Thu Mar 12 22:51:11.826993 2026] [:error] [pid 11953:tid 11969] [client 20.220.13.10:59035] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fss.php"] [unique_id "abLS35udzqsnq3bvtDZzxwAAAU4"]
[Thu Mar 12 22:51:12.352443 2026] [:error] [pid 11953:tid 11963] [client 20.220.13.10:59056] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fss.php"] [unique_id "abLS4Judzqsnq3bvtDZzywAAAUg"]
[Thu Mar 12 22:51:12.810281 2026] [:error] [pid 11953:tid 11962] [client 20.220.13.10:59009] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "abLS4Judzqsnq3bvtDZz0AAAAUc"]
[Thu Mar 12 22:51:13.269671 2026] [:error] [pid 11953:tid 11961] [client 20.220.13.10:59519] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "abLS4Zudzqsnq3bvtDZz1AAAAUY"]
[Thu Mar 12 22:51:13.737803 2026] [:error] [pid 11953:tid 11963] [client 20.220.13.10:51765] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "abLS4Zudzqsnq3bvtDZz1gAAAUg"]
[Thu Mar 12 22:51:14.207560 2026] [:error] [pid 11986:tid 12022] [client 20.220.13.10:48685] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "abLS4jKqY2w-DVCrxTA9jAAAAcQ"]
[Thu Mar 12 22:51:14.748503 2026] [:error] [pid 11986:tid 12023] [client 20.220.13.10:43764] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/utky.php"] [unique_id "abLS4jKqY2w-DVCrxTA9jQAAAcU"]
[Thu Mar 12 22:51:15.251795 2026] [:error] [pid 51456:tid 51494] [client 20.220.13.10:59037] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/utky.php"] [unique_id "abLS4xXu8LzVixNGr0uJpwAAAEc"]
[Thu Mar 12 22:51:15.684661 2026] [:error] [pid 51456:tid 51502] [client 20.220.13.10:43745] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/utky.php"] [unique_id "abLS4xXu8LzVixNGr0uJqAAAAE8"]
[Thu Mar 12 22:51:16.138425 2026] [:error] [pid 11953:tid 11955] [client 20.220.13.10:43761] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/utky.php"] [unique_id "abLS5Judzqsnq3bvtDZz1wAAAUA"]
[Thu Mar 12 22:51:16.578783 2026] [:error] [pid 51456:tid 51498] [client 20.220.13.10:59473] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "abLS5BXu8LzVixNGr0uJqQAAAEs"]
[Thu Mar 12 22:51:16.999521 2026] [:error] [pid 51456:tid 51493] [client 20.220.13.10:32806] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "abLS5BXu8LzVixNGr0uJqwAAAEY"]
[Thu Mar 12 22:51:17.421366 2026] [:error] [pid 8249:tid 8253] [client 20.220.13.10:48655] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "abLS5SK5dL3-8Jdf0M2TcAAAAQI"]
[Thu Mar 12 22:51:17.842904 2026] [:error] [pid 8249:tid 8254] [client 20.220.13.10:59460] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "abLS5SK5dL3-8Jdf0M2TcQAAAQM"]
[Thu Mar 12 22:51:18.274621 2026] [:error] [pid 20530:tid 20610] [client 20.220.13.10:48674] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gkl.php"] [unique_id "abLS5gkNGxMzPO-s9qcXRAAAA5U"]
[Thu Mar 12 22:51:18.715533 2026] [:error] [pid 11953:tid 11956] [client 20.220.13.10:43746] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gkl.php"] [unique_id "abLS5pudzqsnq3bvtDZz3QAAAUE"]
[Thu Mar 12 22:51:19.124755 2026] [:error] [pid 20531:tid 20634] [client 20.220.13.10:59011] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gkl.php"] [unique_id "abLS5_vw-RvNQd9b3a-31gAAA9I"]
[Thu Mar 12 22:51:19.715366 2026] [:error] [pid 11953:tid 11963] [client 20.220.13.10:43728] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gkl.php"] [unique_id "abLS55udzqsnq3bvtDZz4gAAAUg"]
[Thu Mar 12 22:51:20.315323 2026] [:error] [pid 11953:tid 11966] [client 20.220.13.10:48645] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "abLS6Judzqsnq3bvtDZz5QAAAUs"]
[Thu Mar 12 22:51:20.774766 2026] [:error] [pid 11953:tid 11977] [client 20.220.13.10:59517] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "abLS6Judzqsnq3bvtDZz6AAAAVY"]
[Thu Mar 12 22:51:21.255099 2026] [:error] [pid 51456:tid 51500] [client 20.220.13.10:43345] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "abLS6RXu8LzVixNGr0uJrQAAAE0"]
[Thu Mar 12 22:51:21.696969 2026] [:error] [pid 11953:tid 11972] [client 20.220.13.10:59490] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "abLS6Zudzqsnq3bvtDZz7AAAAVE"]
[Thu Mar 12 22:51:22.135684 2026] [:error] [pid 11986:tid 12042] [client 20.220.13.10:22999] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "abLS6jKqY2w-DVCrxTA9kQAAAdg"]
[Thu Mar 12 22:51:22.697086 2026] [:error] [pid 20530:tid 20613] [client 20.220.13.10:59060] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "abLS6gkNGxMzPO-s9qcXRgAAA5g"]
[Thu Mar 12 22:51:23.120024 2026] [:error] [pid 20531:tid 20627] [client 20.220.13.10:48692] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "abLS6_vw-RvNQd9b3a-31wAAA8s"]
[Thu Mar 12 22:51:23.603625 2026] [:error] [pid 11986:tid 12039] [client 20.220.13.10:59046] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "abLS6zKqY2w-DVCrxTA9lAAAAdU"]
[Thu Mar 12 22:51:24.028026 2026] [:error] [pid 20530:tid 20581] [client 20.220.13.10:48688] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yifsx.php"] [unique_id "abLS7AkNGxMzPO-s9qcXRwAAA4Q"]
[Thu Mar 12 22:51:24.444189 2026] [:error] [pid 11986:tid 12033] [client 20.220.13.10:51756] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yifsx.php"] [unique_id "abLS7DKqY2w-DVCrxTA9mQAAAc8"]
[Thu Mar 12 22:51:24.891333 2026] [:error] [pid 20531:tid 20623] [client 20.220.13.10:43762] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yifsx.php"] [unique_id "abLS7Pvw-RvNQd9b3a-32AAAA8c"]
[Thu Mar 12 22:51:25.353784 2026] [:error] [pid 11986:tid 12028] [client 20.220.13.10:43721] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yifsx.php"] [unique_id "abLS7TKqY2w-DVCrxTA9mwAAAco"]
[Thu Mar 12 22:51:25.911435 2026] [:error] [pid 20529:tid 20597] [client 20.220.13.10:59510] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "abLS7W4BhuYHZriajQ-I9gAAA1Y"]
[Thu Mar 12 22:51:26.440749 2026] [:error] [pid 20467:tid 20479] [client 20.220.13.10:43347] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "abLS7nJ3UvosyIqy8ay09AAAAok"]
[Thu Mar 12 22:51:26.989924 2026] [:error] [pid 51456:tid 51502] [client 20.220.13.10:59063] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "abLS7hXu8LzVixNGr0uJtwAAAE8"]
[Thu Mar 12 22:51:27.475151 2026] [:error] [pid 11986:tid 12032] [client 20.220.13.10:43340] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "abLS7zKqY2w-DVCrxTA9nAAAAc4"]
[Thu Mar 12 22:51:28.026479 2026] [:error] [pid 11986:tid 12027] [client 20.220.13.10:51712] [client 20.220.13.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/app.php"] [unique_id "abLS8DKqY2w-DVCrxTA9nQAAAck"]
[Thu Mar 12 22:51:28.471383 2026] [:error] [pid 11953:tid 11970] [client 20.220.13.10:59063] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "abLS8Judzqsnq3bvtDZz8wAAAU8"]
[Thu Mar 12 22:51:28.962674 2026] [:error] [pid 11953:tid 11960] [client 20.220.13.10:51720] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "abLS8Judzqsnq3bvtDZz9QAAAUU"]
[Thu Mar 12 22:51:29.439320 2026] [:error] [pid 11986:tid 12031] [client 20.220.13.10:43751] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "abLS8TKqY2w-DVCrxTA9nwAAAc0"]
[Thu Mar 12 22:51:29.874838 2026] [:error] [pid 11986:tid 12025] [client 20.220.13.10:51740] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vfr.php"] [unique_id "abLS8TKqY2w-DVCrxTA9ogAAAcc"]
[Thu Mar 12 22:51:30.297399 2026] [:error] [pid 11986:tid 12030] [client 20.220.13.10:59040] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vfr.php"] [unique_id "abLS8jKqY2w-DVCrxTA9pAAAAcw"]
[Thu Mar 12 22:51:30.811364 2026] [:error] [pid 8249:tid 8261] [client 20.220.13.10:43770] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vfr.php"] [unique_id "abLS8iK5dL3-8Jdf0M2TgAAAAQo"]
[Thu Mar 12 22:51:31.487839 2026] [:error] [pid 11953:tid 11963] [client 20.220.13.10:48662] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vfr.php"] [unique_id "abLS85udzqsnq3bvtDZz-AAAAUg"]
[Thu Mar 12 22:51:31.943467 2026] [:error] [pid 11953:tid 11979] [client 20.220.13.10:51742] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "abLS85udzqsnq3bvtDZz-wAAAVg"]
[Thu Mar 12 22:51:32.404178 2026] [:error] [pid 8249:tid 8253] [client 20.220.13.10:48646] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "abLS9CK5dL3-8Jdf0M2TgQAAAQI"]
[Thu Mar 12 22:51:32.846192 2026] [:error] [pid 20467:tid 20494] [client 20.220.13.10:43331] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "abLS9HJ3UvosyIqy8ay0_QAAApg"]
[Thu Mar 12 22:51:33.289203 2026] [:error] [pid 8249:tid 8258] [client 20.220.13.10:48681] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "abLS9SK5dL3-8Jdf0M2TgwAAAQc"]
[Thu Mar 12 22:51:33.755388 2026] [:error] [pid 51457:tid 51537] [client 20.220.13.10:59045] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "abLS9Sjknw2FvT4H3DbXugAAAJc"]
[Thu Mar 12 22:51:34.196518 2026] [:error] [pid 51456:tid 51505] [client 20.220.13.10:48642] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "abLS9hXu8LzVixNGr0uJvwAAAFI"]
[Thu Mar 12 22:51:34.645577 2026] [:error] [pid 8249:tid 8252] [client 20.220.13.10:51754] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "abLS9iK5dL3-8Jdf0M2ThQAAAQE"]
[Thu Mar 12 22:51:35.131081 2026] [:error] [pid 11986:tid 12032] [client 20.220.13.10:48660] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "abLS9zKqY2w-DVCrxTA9rwAAAc4"]
[Thu Mar 12 22:51:35.561973 2026] [:error] [pid 8249:tid 8251] [client 20.220.13.10:59053] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "abLS9yK5dL3-8Jdf0M2TiAAAAQA"]
[Thu Mar 12 22:51:36.033895 2026] [:error] [pid 11953:tid 11963] [client 20.220.13.10:48675] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "abLS-Judzqsnq3bvtDZ0BQAAAUg"]
[Thu Mar 12 22:51:36.460312 2026] [:error] [pid 8249:tid 8267] [client 20.220.13.10:43775] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "abLS-CK5dL3-8Jdf0M2TjAAAARA"]
[Thu Mar 12 22:51:36.913978 2026] [:error] [pid 11953:tid 11970] [client 20.220.13.10:48691] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "abLS-Judzqsnq3bvtDZ0CgAAAU8"]
[Thu Mar 12 22:51:37.402706 2026] [:error] [pid 11953:tid 11961] [client 20.220.13.10:43720] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "abLS-Zudzqsnq3bvtDZ0EAAAAUY"]
[Thu Mar 12 22:51:37.849774 2026] [:error] [pid 8249:tid 8270] [client 20.220.13.10:48693] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "abLS-SK5dL3-8Jdf0M2TjQAAARM"]
[Thu Mar 12 22:51:38.278053 2026] [:error] [pid 8249:tid 8272] [client 20.220.13.10:48699] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "abLS-iK5dL3-8Jdf0M2TkAAAARU"]
[Thu Mar 12 22:51:38.749315 2026] [:error] [pid 51456:tid 51492] [client 20.220.13.10:32816] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "abLS-hXu8LzVixNGr0uJxgAAAEU"]
[Thu Mar 12 22:51:39.193275 2026] [:error] [pid 8249:tid 8261] [client 20.220.13.10:51762] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "abLS-yK5dL3-8Jdf0M2TkgAAAQo"]
[Thu Mar 12 22:51:39.623140 2026] [:error] [pid 20530:tid 20605] [client 20.220.13.10:48696] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "abLS-wkNGxMzPO-s9qcXSwAAA5A"]
[Thu Mar 12 22:51:40.055006 2026] [:error] [pid 11953:tid 11977] [client 20.220.13.10:43342] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "abLS_Judzqsnq3bvtDZ0EwAAAVY"]
[Thu Mar 12 22:51:40.471244 2026] [:error] [pid 11986:tid 12041] [client 20.220.13.10:51729] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "abLS_DKqY2w-DVCrxTA9uQAAAdc"]
[Thu Mar 12 22:51:40.927482 2026] [:error] [pid 8249:tid 8260] [client 20.220.13.10:43741] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "abLS_CK5dL3-8Jdf0M2TmQAAAQk"]
[Thu Mar 12 22:51:41.375545 2026] [:error] [pid 20531:tid 20638] [client 20.220.13.10:51767] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "abLS_fvw-RvNQd9b3a-32wAAA9Y"]
[Thu Mar 12 22:51:41.815475 2026] [:error] [pid 8249:tid 8260] [client 20.220.13.10:59476] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "abLS_SK5dL3-8Jdf0M2ToQAAAQk"]
[Thu Mar 12 22:51:42.500564 2026] [:error] [pid 8249:tid 8264] [client 20.220.13.10:48663] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "abLS_iK5dL3-8Jdf0M2TqAAAAQ0"]
[Thu Mar 12 22:51:42.959953 2026] [:error] [pid 11953:tid 11963] [client 20.220.13.10:43773] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acjsn.php"] [unique_id "abLS_pudzqsnq3bvtDZ0FgAAAUg"]
[Thu Mar 12 22:51:43.398645 2026] [:error] [pid 20530:tid 20571] [client 20.220.13.10:43712] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acjsn.php"] [unique_id "abLS_wkNGxMzPO-s9qcXTQAAA4A"]
[Thu Mar 12 22:51:43.816528 2026] [:error] [pid 11953:tid 11962] [client 20.220.13.10:59052] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acjsn.php"] [unique_id "abLS_5udzqsnq3bvtDZ0HwAAAUc"]
[Thu Mar 12 22:51:44.272955 2026] [:error] [pid 11986:tid 12021] [client 20.220.13.10:51724] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acjsn.php"] [unique_id "abLTADKqY2w-DVCrxTA9vwAAAcM"]
[Thu Mar 12 22:51:44.708855 2026] [:error] [pid 11986:tid 12037] [client 20.220.13.10:43334] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adnks.php"] [unique_id "abLTADKqY2w-DVCrxTA9wQAAAdM"]
[Thu Mar 12 22:51:45.253656 2026] [:error] [pid 11986:tid 12041] [client 20.220.13.10:59472] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adnks.php"] [unique_id "abLTATKqY2w-DVCrxTA9xQAAAdc"]
[Thu Mar 12 22:51:45.714302 2026] [:error] [pid 51456:tid 51498] [client 20.220.13.10:48668] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adnks.php"] [unique_id "abLTARXu8LzVixNGr0uJyQAAAEs"]
[Thu Mar 12 22:51:46.202473 2026] [:error] [pid 11953:tid 11956] [client 20.220.13.10:59032] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adnks.php"] [unique_id "abLTApudzqsnq3bvtDZ0IwAAAUE"]
[Thu Mar 12 22:51:46.623176 2026] [:error] [pid 11953:tid 11970] [client 20.220.13.10:59010] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahiqq.php"] [unique_id "abLTApudzqsnq3bvtDZ0KAAAAU8"]
[Thu Mar 12 22:51:47.097426 2026] [:error] [pid 11953:tid 11968] [client 20.220.13.10:51712] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahiqq.php"] [unique_id "abLTA5udzqsnq3bvtDZ0LAAAAU0"]
[Thu Mar 12 22:51:47.594843 2026] [:error] [pid 20467:tid 20478] [client 20.220.13.10:23339] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahiqq.php"] [unique_id "abLTA3J3UvosyIqy8ay1CQAAAog"]
[Thu Mar 12 22:51:48.081732 2026] [:error] [pid 11953:tid 11959] [client 20.220.13.10:43726] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahiqq.php"] [unique_id "abLTBJudzqsnq3bvtDZ0NQAAAUQ"]
[Thu Mar 12 22:51:48.593339 2026] [:error] [pid 20467:tid 20486] [client 20.220.13.10:32771] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "abLTBHJ3UvosyIqy8ay1CwAAApA"]
[Thu Mar 12 22:51:49.031790 2026] [:error] [pid 20467:tid 20484] [client 20.220.13.10:51744] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "abLTBXJ3UvosyIqy8ay1DQAAAo4"]
[Thu Mar 12 22:51:49.693513 2026] [:error] [pid 8249:tid 8254] [client 20.220.13.10:43370] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "abLTBSK5dL3-8Jdf0M2TsgAAAQM"]
[Thu Mar 12 22:51:50.257575 2026] [:error] [pid 8249:tid 8269] [client 20.220.13.10:43767] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "abLTBiK5dL3-8Jdf0M2TtAAAARI"]
[Thu Mar 12 22:51:51.034307 2026] [:error] [pid 11953:tid 11963] [client 20.220.13.10:48667] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an9.php"] [unique_id "abLTB5udzqsnq3bvtDZ0OwAAAUg"]
[Thu Mar 12 22:51:51.817054 2026] [:error] [pid 8249:tid 8261] [client 20.220.13.10:59461] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an9.php"] [unique_id "abLTByK5dL3-8Jdf0M2TuwAAAQo"]
[Thu Mar 12 22:51:52.281372 2026] [:error] [pid 8249:tid 8251] [client 20.220.13.10:51722] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an9.php"] [unique_id "abLTCCK5dL3-8Jdf0M2TvQAAAQA"]
[Thu Mar 12 22:51:52.879862 2026] [:error] [pid 8249:tid 8254] [client 20.220.13.10:43742] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an9.php"] [unique_id "abLTCCK5dL3-8Jdf0M2TvwAAAQM"]
[Thu Mar 12 22:51:53.583919 2026] [:error] [pid 8249:tid 8259] [client 20.220.13.10:51771] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aqups.php"] [unique_id "abLTCSK5dL3-8Jdf0M2TwQAAAQg"]
[Thu Mar 12 22:51:54.341417 2026] [:error] [pid 20530:tid 20588] [client 20.220.13.10:23346] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aqups.php"] [unique_id "abLTCgkNGxMzPO-s9qcXUwAAA4c"]
[Thu Mar 12 22:51:54.971813 2026] [:error] [pid 20528:tid 20547] [client 20.220.13.10:51747] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aqups.php"] [unique_id "abLTCqnDNsf46-tKxqkcswAAAw0"]
[Thu Mar 12 22:51:56.022588 2026] [:error] [pid 20530:tid 20578] [client 20.220.13.10:59014] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aqups.php"] [unique_id "abLTDAkNGxMzPO-s9qcXVQAAA4M"]
[Thu Mar 12 22:51:56.776503 2026] [:error] [pid 8249:tid 8270] [client 20.220.13.10:43774] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bpltp.php"] [unique_id "abLTDCK5dL3-8Jdf0M2TxQAAARM"]
[Thu Mar 12 22:51:57.550849 2026] [:error] [pid 8249:tid 8261] [client 20.220.13.10:59025] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bpltp.php"] [unique_id "abLTDSK5dL3-8Jdf0M2TxgAAAQo"]
[Thu Mar 12 22:51:58.791070 2026] [:error] [pid 11953:tid 11970] [client 20.220.13.10:59482] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bpltp.php"] [unique_id "abLTDpudzqsnq3bvtDZ0UQAAAU8"]
[Thu Mar 12 22:51:59.964899 2026] [:error] [pid 11953:tid 11964] [client 20.220.13.10:59462] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bpltp.php"] [unique_id "abLTD5udzqsnq3bvtDZ0WQAAAUk"]
[Thu Mar 12 22:52:00.901127 2026] [:error] [pid 51456:tid 51508] [client 20.220.13.10:48645] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp9.php"] [unique_id "abLTEBXu8LzVixNGr0uJzwAAAFU"]
[Thu Mar 12 22:52:01.494117 2026] [:error] [pid 51456:tid 51510] [client 20.220.13.10:43339] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp9.php"] [unique_id "abLTERXu8LzVixNGr0uJ0QAAAFc"]
[Thu Mar 12 22:52:01.941672 2026] [:error] [pid 8249:tid 8270] [client 20.220.13.10:59068] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp9.php"] [unique_id "abLTESK5dL3-8Jdf0M2TzgAAARM"]
[Thu Mar 12 22:52:02.516349 2026] [:error] [pid 20467:tid 20483] [client 20.220.13.10:59467] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp9.php"] [unique_id "abLTEnJ3UvosyIqy8ay1FgAAAo0"]
[Thu Mar 12 22:52:03.783007 2026] [:error] [pid 51457:tid 51514] [client 20.220.13.10:51734] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs9.php"] [unique_id "abLTEyjknw2FvT4H3DbXyAAAAIA"]
[Thu Mar 12 22:52:05.158563 2026] [:error] [pid 51457:tid 51528] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/fs9.php
[Thu Mar 12 22:52:05.388620 2026] [:error] [pid 51457:tid 51526] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/genco.php
[Thu Mar 12 22:52:06.908675 2026] [:error] [pid 51457:tid 51526] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/p23duw.php
[Thu Mar 12 22:52:07.120209 2026] [:error] [pid 51457:tid 51534] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/pu9.php
[Thu Mar 12 22:52:07.344549 2026] [:error] [pid 51457:tid 51525] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/pu8.php
[Thu Mar 12 22:52:07.554580 2026] [:error] [pid 51457:tid 51527] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/aifa.php
[Thu Mar 12 22:52:07.768645 2026] [:error] [pid 51457:tid 51516] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Thu Mar 12 22:52:07.981511 2026] [:error] [pid 51457:tid 51520] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Thu Mar 12 22:52:08.189537 2026] [:error] [pid 51457:tid 51535] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/vaza.php
[Thu Mar 12 22:52:08.396984 2026] [:error] [pid 51457:tid 51524] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Thu Mar 12 22:52:08.610980 2026] [:error] [pid 51457:tid 51537] [client 20.220.13.10:51732] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Thu Mar 12 22:52:09.063019 2026] [:error] [pid 51457:tid 51521] [client 20.220.13.10:51732] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4pocjn.php"] [unique_id "abLTGSjknw2FvT4H3DbX2AAAAIc"]
[Thu Mar 12 22:52:10.258166 2026] [:error] [pid 11953:tid 11963] [client 20.220.13.10:59027] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4pocjn.php"] [unique_id "abLTGpudzqsnq3bvtDZ0dQAAAUg"]
[Thu Mar 12 22:52:11.957337 2026] [:error] [pid 20528:tid 20539] [client 20.220.13.10:32371] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4pocjn.php"] [unique_id "abLTG6nDNsf46-tKxqkctwAAAwU"]
[Thu Mar 12 22:52:13.452982 2026] [:error] [pid 11986:tid 12038] [client 20.220.13.10:32377] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4pocjn.php"] [unique_id "abLTHTKqY2w-DVCrxTA94wAAAdQ"]
[Thu Mar 12 22:52:15.312200 2026] [:error] [pid 11953:tid 11973] [client 20.220.13.10:51764] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vir-v2.php"] [unique_id "abLTH5udzqsnq3bvtDZ0iAAAAVI"]
[Thu Mar 12 22:52:16.481224 2026] [:error] [pid 11953:tid 11964] [client 20.220.13.10:32825] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vir-v2.php"] [unique_id "abLTIJudzqsnq3bvtDZ0jQAAAUk"]
[Thu Mar 12 22:52:17.616016 2026] [:error] [pid 20467:tid 20484] [client 20.220.13.10:43722] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vir-v2.php"] [unique_id "abLTIXJ3UvosyIqy8ay1HQAAAo4"]
[Thu Mar 12 22:52:19.010649 2026] [:error] [pid 11953:tid 11967] [client 20.220.13.10:59513] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vir-v2.php"] [unique_id "abLTI5udzqsnq3bvtDZ0mQAAAUw"]
[Thu Mar 12 22:52:19.921010 2026] [:error] [pid 11953:tid 11962] [client 20.220.13.10:51723] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "abLTI5udzqsnq3bvtDZ0ngAAAUc"]
[Thu Mar 12 22:52:20.967421 2026] [:error] [pid 51456:tid 51509] [client 20.220.13.10:59485] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "abLTJBXu8LzVixNGr0uJ4QAAAFY"]
[Thu Mar 12 22:52:21.990718 2026] [:error] [pid 11953:tid 11972] [client 20.220.13.10:59070] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "abLTJZudzqsnq3bvtDZ0pQAAAVE"]
[Thu Mar 12 22:52:22.747399 2026] [:error] [pid 20467:tid 20489] [client 20.220.13.10:32817] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "abLTJnJ3UvosyIqy8ay1IAAAApM"]
[Thu Mar 12 22:52:23.459270 2026] [:error] [pid 11986:tid 12037] [client 20.220.13.10:59459] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/btx25.php"] [unique_id "abLTJzKqY2w-DVCrxTA99AAAAdM"]
[Thu Mar 12 22:52:24.183583 2026] [:error] [pid 11986:tid 12030] [client 20.220.13.10:23007] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/btx25.php"] [unique_id "abLTKDKqY2w-DVCrxTA99wAAAcw"]
[Thu Mar 12 22:52:24.832425 2026] [:error] [pid 11953:tid 11975] [client 20.220.13.10:51768] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/btx25.php"] [unique_id "abLTKJudzqsnq3bvtDZ0pwAAAVQ"]
[Thu Mar 12 22:52:25.731830 2026] [:error] [pid 51457:tid 51526] [client 20.220.13.10:59514] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/btx25.php"] [unique_id "abLTKSjknw2FvT4H3DbX4QAAAIw"]
[Thu Mar 12 22:52:26.369708 2026] [:error] [pid 11953:tid 11977] [client 20.220.13.10:48669] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "abLTKpudzqsnq3bvtDZ0qQAAAVY"]
[Thu Mar 12 22:52:27.041309 2026] [:error] [pid 20530:tid 20606] [client 20.220.13.10:48652] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "abLTKwkNGxMzPO-s9qcXYgAAA5E"]
[Thu Mar 12 22:52:27.819522 2026] [:error] [pid 20467:tid 20477] [client 20.220.13.10:59054] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "abLTK3J3UvosyIqy8ay1IgAAAoc"]
[Thu Mar 12 22:52:28.416693 2026] [:error] [pid 8249:tid 8272] [client 20.220.13.10:43738] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "abLTLCK5dL3-8Jdf0M2T6QAAARU"]
[Thu Mar 12 22:52:29.164295 2026] [:error] [pid 8249:tid 8255] [client 20.220.13.10:59059] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "abLTLSK5dL3-8Jdf0M2T7gAAAQQ"]
[Thu Mar 12 22:52:29.820673 2026] [:error] [pid 8249:tid 8258] [client 20.220.13.10:43713] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "abLTLSK5dL3-8Jdf0M2T7wAAAQc"]
[Thu Mar 12 22:52:30.446666 2026] [:error] [pid 11953:tid 11957] [client 20.220.13.10:59478] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "abLTLpudzqsnq3bvtDZ0tAAAAUI"]
[Thu Mar 12 22:52:31.106783 2026] [:error] [pid 51457:tid 51531] [client 20.220.13.10:59033] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "abLTLyjknw2FvT4H3DbX5gAAAJE"]
[Thu Mar 12 22:52:31.862034 2026] [:error] [pid 20467:tid 20480] [client 20.220.13.10:48671] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wo.php"] [unique_id "abLTL3J3UvosyIqy8ay1IwAAAoo"]
[Thu Mar 12 22:52:32.314310 2026] [:error] [pid 8249:tid 8265] [client 20.220.13.10:59463] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wo.php"] [unique_id "abLTMCK5dL3-8Jdf0M2T8QAAAQ4"]
[Thu Mar 12 22:52:32.876117 2026] [:error] [pid 8249:tid 8266] [client 20.220.13.10:32379] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wo.php"] [unique_id "abLTMCK5dL3-8Jdf0M2T9AAAAQ8"]
[Thu Mar 12 22:52:33.398162 2026] [:error] [pid 8249:tid 8264] [client 20.220.13.10:59474] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wo.php"] [unique_id "abLTMSK5dL3-8Jdf0M2T-QAAAQ0"]
[Thu Mar 12 22:52:34.004427 2026] [:error] [pid 20467:tid 20475] [client 20.220.13.10:48656] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "abLTMnJ3UvosyIqy8ay1JQAAAoU"]
[Thu Mar 12 22:52:34.621917 2026] [:error] [pid 11986:tid 12025] [client 20.220.13.10:32376] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "abLTMjKqY2w-DVCrxTA-BAAAAcc"]
[Thu Mar 12 22:52:35.452528 2026] [:error] [pid 51456:tid 51488] [client 20.220.13.10:48661] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "abLTMxXu8LzVixNGr0uJ5QAAAEE"]
[Thu Mar 12 22:52:36.015686 2026] [:error] [pid 51456:tid 51490] [client 20.220.13.10:48701] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "abLTNBXu8LzVixNGr0uJ6AAAAEM"]
[Thu Mar 12 22:52:36.586633 2026] [:error] [pid 8249:tid 8264] [client 20.220.13.10:51769] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "abLTNCK5dL3-8Jdf0M2UAQAAAQ0"]
[Thu Mar 12 22:52:37.167258 2026] [:error] [pid 8249:tid 8256] [client 20.220.13.10:32792] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "abLTNSK5dL3-8Jdf0M2UAgAAAQU"]
[Thu Mar 12 22:52:37.679904 2026] [:error] [pid 11953:tid 11974] [client 20.220.13.10:32773] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "abLTNZudzqsnq3bvtDZ0vgAAAVM"]
[Thu Mar 12 22:52:38.463709 2026] [:error] [pid 20530:tid 20600] [client 20.220.13.10:59501] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "abLTNgkNGxMzPO-s9qcXZwAAA40"]
[Thu Mar 12 22:52:38.972562 2026] [:error] [pid 51457:tid 51534] [client 20.220.13.10:32324] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hckpe.php"] [unique_id "abLTNijknw2FvT4H3DbX6wAAAJQ"]
[Thu Mar 12 22:52:39.710509 2026] [:error] [pid 11953:tid 11975] [client 20.220.13.10:32356] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hckpe.php"] [unique_id "abLTN5udzqsnq3bvtDZ0wgAAAVQ"]
[Thu Mar 12 22:52:40.518047 2026] [:error] [pid 20531:tid 20638] [client 20.220.13.10:32820] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hckpe.php"] [unique_id "abLTOPvw-RvNQd9b3a-35gAAA9Y"]
[Thu Mar 12 22:52:41.037958 2026] [:error] [pid 51456:tid 51504] [client 20.220.13.10:59067] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hckpe.php"] [unique_id "abLTORXu8LzVixNGr0uJ7QAAAFE"]
[Thu Mar 12 22:52:41.587853 2026] [:error] [pid 8249:tid 8271] [client 20.220.13.10:59481] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ht.php"] [unique_id "abLTOSK5dL3-8Jdf0M2UBQAAARQ"]
[Thu Mar 12 22:52:42.336501 2026] [:error] [pid 11953:tid 11955] [client 20.220.13.10:43715] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ht.php"] [unique_id "abLTOpudzqsnq3bvtDZ0yAAAAUA"]
[Thu Mar 12 22:52:43.300184 2026] [:error] [pid 51456:tid 51501] [client 20.220.13.10:43724] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ht.php"] [unique_id "abLTOxXu8LzVixNGr0uJ8QAAAE4"]
[Thu Mar 12 22:52:44.075272 2026] [:error] [pid 11953:tid 11965] [client 20.220.13.10:43727] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ht.php"] [unique_id "abLTPJudzqsnq3bvtDZ0ywAAAUo"]
[Thu Mar 12 22:52:44.753278 2026] [:error] [pid 8249:tid 8269] [client 20.220.13.10:43348] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sd.php"] [unique_id "abLTPCK5dL3-8Jdf0M2UBgAAARI"]
[Thu Mar 12 22:52:45.299127 2026] [:error] [pid 11986:tid 12028] [client 20.220.13.10:59504] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sd.php"] [unique_id "abLTPTKqY2w-DVCrxTA-FgAAAco"]
[Thu Mar 12 22:52:46.188981 2026] [:error] [pid 11953:tid 11976] [client 20.220.13.10:23329] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sd.php"] [unique_id "abLTPpudzqsnq3bvtDZ0zQAAAVU"]
[Thu Mar 12 22:52:46.893612 2026] [:error] [pid 11986:tid 12034] [client 20.220.13.10:32381] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sd.php"] [unique_id "abLTPjKqY2w-DVCrxTA-GwAAAdA"]
[Thu Mar 12 22:52:47.554385 2026] [:error] [pid 51457:tid 51531] [client 20.220.13.10:59026] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blog.php"] [unique_id "abLTPyjknw2FvT4H3DbX7wAAAJE"]
[Thu Mar 12 22:52:48.360615 2026] [:error] [pid 11986:tid 12032] [client 20.220.13.10:59456] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blog.php"] [unique_id "abLTQDKqY2w-DVCrxTA-HQAAAc4"]
[Thu Mar 12 22:52:49.119098 2026] [:error] [pid 8249:tid 8258] [client 20.220.13.10:32780] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blog.php"] [unique_id "abLTQSK5dL3-8Jdf0M2UEAAAAQc"]
[Thu Mar 12 22:52:49.801600 2026] [:error] [pid 8249:tid 8256] [client 20.220.13.10:59028] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blog.php"] [unique_id "abLTQSK5dL3-8Jdf0M2UFQAAAQU"]
[Thu Mar 12 22:52:50.481748 2026] [:error] [pid 51457:tid 51538] [client 20.220.13.10:43343] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "abLTQijknw2FvT4H3DbX8QAAAJg"]
[Thu Mar 12 22:52:51.138876 2026] [:error] [pid 20530:tid 20596] [client 20.220.13.10:59488] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "abLTQwkNGxMzPO-s9qcXbQAAA4s"]
[Thu Mar 12 22:52:51.694290 2026] [:error] [pid 11986:tid 12019] [client 20.220.13.10:43743] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "abLTQzKqY2w-DVCrxTA-IwAAAcE"]
[Thu Mar 12 22:52:52.396324 2026] [:error] [pid 8249:tid 8274] [client 20.220.13.10:43349] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "abLTRCK5dL3-8Jdf0M2UIgAAARc"]
[Thu Mar 12 22:52:52.951889 2026] [:error] [pid 8249:tid 8251] [client 20.220.13.10:23319] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abLTRCK5dL3-8Jdf0M2UJgAAAQA"]
[Thu Mar 12 22:52:53.451922 2026] [:error] [pid 8249:tid 8258] [client 20.220.13.10:43375] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abLTRSK5dL3-8Jdf0M2UKQAAAQc"]
[Thu Mar 12 22:52:53.973648 2026] [:error] [pid 8249:tid 8273] [client 20.220.13.10:32813] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abLTRSK5dL3-8Jdf0M2ULwAAARY"]
[Thu Mar 12 22:52:54.457166 2026] [:error] [pid 8249:tid 8269] [client 20.220.13.10:43335] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abLTRiK5dL3-8Jdf0M2UMQAAARI"]
[Thu Mar 12 22:52:54.921023 2026] [:error] [pid 8249:tid 8267] [client 20.220.13.10:48700] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iindv.php"] [unique_id "abLTRiK5dL3-8Jdf0M2UNAAAARA"]
[Thu Mar 12 22:52:55.421957 2026] [:error] [pid 11986:tid 12030] [client 20.220.13.10:22986] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iindv.php"] [unique_id "abLTRzKqY2w-DVCrxTA-JgAAAcw"]
[Thu Mar 12 22:52:55.886926 2026] [:error] [pid 20530:tid 20607] [client 20.220.13.10:51715] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iindv.php"] [unique_id "abLTRwkNGxMzPO-s9qcXbwAAA5I"]
[Thu Mar 12 22:52:56.533267 2026] [:error] [pid 11986:tid 12040] [client 20.220.13.10:23356] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iindv.php"] [unique_id "abLTSDKqY2w-DVCrxTA-KQAAAdY"]
[Thu Mar 12 22:52:57.139549 2026] [:error] [pid 8249:tid 8270] [client 20.220.13.10:43383] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sqaoi.php"] [unique_id "abLTSSK5dL3-8Jdf0M2UOQAAARM"]
[Thu Mar 12 22:52:57.811717 2026] [:error] [pid 8249:tid 8261] [client 20.220.13.10:43733] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sqaoi.php"] [unique_id "abLTSSK5dL3-8Jdf0M2UPAAAAQo"]
[Thu Mar 12 22:52:58.292600 2026] [:error] [pid 20467:tid 20470] [client 20.220.13.10:48676] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sqaoi.php"] [unique_id "abLTSnJ3UvosyIqy8ay1MQAAAoA"]
[Thu Mar 12 22:52:58.779870 2026] [:error] [pid 8249:tid 8255] [client 20.220.13.10:59512] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sqaoi.php"] [unique_id "abLTSiK5dL3-8Jdf0M2UQAAAAQQ"]
[Thu Mar 12 22:52:59.332647 2026] [:error] [pid 8249:tid 8273] [client 20.220.13.10:32827] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abLTSyK5dL3-8Jdf0M2UQwAAARY"]
[Thu Mar 12 22:52:59.869060 2026] [:error] [pid 20467:tid 20477] [client 20.220.13.10:32822] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abLTS3J3UvosyIqy8ay1NQAAAoc"]
[Thu Mar 12 22:53:00.406533 2026] [:error] [pid 20528:tid 20537] [client 20.220.13.10:43749] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abLTTKnDNsf46-tKxqkcwgAAAwM"]
[Thu Mar 12 22:53:00.933110 2026] [:error] [pid 8249:tid 8261] [client 20.220.13.10:51739] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abLTTCK5dL3-8Jdf0M2URQAAAQo"]
[Thu Mar 12 22:53:01.469124 2026] [:error] [pid 8249:tid 8259] [client 20.220.13.10:1737] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "abLTTSK5dL3-8Jdf0M2URgAAAQg"]
[Thu Mar 12 22:53:01.920308 2026] [:error] [pid 11986:tid 12033] [client 20.220.13.10:32378] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "abLTTTKqY2w-DVCrxTA-LgAAAc8"]
[Thu Mar 12 22:53:02.527246 2026] [:error] [pid 20530:tid 20598] [client 20.220.13.10:23334] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "abLTTgkNGxMzPO-s9qcXdAAAA4w"]
[Thu Mar 12 22:53:02.984535 2026] [:error] [pid 11986:tid 12030] [client 20.220.13.10:43716] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "abLTTjKqY2w-DVCrxTA-MgAAAcw"]
[Thu Mar 12 22:53:03.483867 2026] [:error] [pid 20530:tid 20609] [client 20.220.13.10:59010] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs8.php"] [unique_id "abLTTwkNGxMzPO-s9qcXdgAAA5Q"]
[Thu Mar 12 22:53:04.053419 2026] [:error] [pid 51456:tid 51498] [client 20.220.13.10:59017] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs8.php"] [unique_id "abLTUBXu8LzVixNGr0uJ9AAAAEs"]
[Thu Mar 12 22:53:04.649581 2026] [:error] [pid 51456:tid 51500] [client 20.220.13.10:51746] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs8.php"] [unique_id "abLTUBXu8LzVixNGr0uJ-AAAAE0"]
[Thu Mar 12 22:53:05.234989 2026] [:error] [pid 11986:tid 12031] [client 20.220.13.10:43333] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs8.php"] [unique_id "abLTUTKqY2w-DVCrxTA-MwAAAc0"]
[Thu Mar 12 22:53:05.756798 2026] [:error] [pid 20530:tid 20611] [client 20.220.13.10:23017] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "abLTUQkNGxMzPO-s9qcXeAAAA5Y"]
[Thu Mar 12 22:53:06.365393 2026] [:error] [pid 11953:tid 11970] [client 20.220.13.10:48695] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "abLTUpudzqsnq3bvtDZ01gAAAU8"]
[Thu Mar 12 22:53:06.963320 2026] [:error] [pid 11953:tid 11972] [client 20.220.13.10:32345] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "abLTUpudzqsnq3bvtDZ02gAAAVE"]
[Thu Mar 12 22:53:07.640695 2026] [:error] [pid 11953:tid 11957] [client 20.220.13.10:43352] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "abLTU5udzqsnq3bvtDZ03wAAAUI"]
[Thu Mar 12 22:53:08.185036 2026] [:error] [pid 8249:tid 8256] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/24.php
[Thu Mar 12 22:53:08.394576 2026] [:error] [pid 8249:tid 8267] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Mar 12 22:53:08.605522 2026] [:error] [pid 8249:tid 8263] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/zwq13.php
[Thu Mar 12 22:53:08.824461 2026] [:error] [pid 8249:tid 8268] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/wqqs.php
[Thu Mar 12 22:53:09.051855 2026] [:error] [pid 8249:tid 8257] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Thu Mar 12 22:53:09.263528 2026] [:error] [pid 8249:tid 8259] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Thu Mar 12 22:53:09.472816 2026] [:error] [pid 8249:tid 8253] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/ad2.php
[Thu Mar 12 22:53:09.733867 2026] [:error] [pid 8249:tid 8258] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/zz8.php
[Thu Mar 12 22:53:09.965506 2026] [:error] [pid 8249:tid 8252] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Thu Mar 12 22:53:10.181906 2026] [:error] [pid 8249:tid 8275] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/kllib.php
[Thu Mar 12 22:53:10.391073 2026] [:error] [pid 8249:tid 8272] [client 20.220.13.10:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/aki.php
[Thu Mar 12 22:53:10.660328 2026] [:error] [pid 8249:tid 8255] [client 20.220.13.10:51725] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "abLTViK5dL3-8Jdf0M2UWAAAAQQ"]
[Thu Mar 12 22:53:11.164052 2026] [:error] [pid 11986:tid 12036] [client 20.220.13.10:43766] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "abLTVzKqY2w-DVCrxTA-OgAAAdI"]
[Thu Mar 12 22:53:11.670490 2026] [:error] [pid 8249:tid 8267] [client 20.220.13.10:59018] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "abLTVyK5dL3-8Jdf0M2UXQAAARA"]
[Thu Mar 12 22:53:12.203941 2026] [:error] [pid 11953:tid 11964] [client 20.220.13.10:59477] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "abLTWJudzqsnq3bvtDZ06AAAAUk"]
[Thu Mar 12 22:53:12.843849 2026] [:error] [pid 11953:tid 11961] [client 20.220.13.10:32828] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "abLTWJudzqsnq3bvtDZ07gAAAUY"]
[Thu Mar 12 22:53:13.309045 2026] [:error] [pid 20530:tid 20608] [client 20.220.13.10:43760] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "abLTWQkNGxMzPO-s9qcXeQAAA5M"]
[Thu Mar 12 22:53:13.747425 2026] [:error] [pid 51456:tid 51493] [client 20.220.13.10:43740] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "abLTWRXu8LzVixNGr0uJ_AAAAEY"]
[Thu Mar 12 22:53:14.215177 2026] [:error] [pid 11953:tid 11966] [client 20.220.13.10:43757] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "abLTWpudzqsnq3bvtDZ09QAAAUs"]
[Thu Mar 12 22:53:14.714739 2026] [:error] [pid 20528:tid 20553] [client 20.220.13.10:43759] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "abLTWqnDNsf46-tKxqkcxwAAAxM"]
[Thu Mar 12 22:53:15.322905 2026] [:error] [pid 51457:tid 51532] [client 20.220.13.10:23001] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "abLTWyjknw2FvT4H3DbX-gAAAJI"]
[Thu Mar 12 22:53:15.829050 2026] [:error] [pid 20530:tid 20604] [client 20.220.13.10:43365] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "abLTWwkNGxMzPO-s9qcXewAAA48"]
[Thu Mar 12 22:53:16.277333 2026] [:error] [pid 51457:tid 51535] [client 20.220.13.10:48649] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "abLTXCjknw2FvT4H3DbX_QAAAJU"]
[Thu Mar 12 22:53:16.835178 2026] [:error] [pid 20467:tid 20472] [client 20.220.13.10:43735] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "abLTXHJ3UvosyIqy8ay1PwAAAoI"]
[Thu Mar 12 22:53:17.424524 2026] [:error] [pid 20531:tid 20625] [client 20.220.13.10:43714] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "abLTXfvw-RvNQd9b3a-36wAAA8k"]
[Thu Mar 12 22:53:17.902065 2026] [:error] [pid 20467:tid 20483] [client 20.220.13.10:48679] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "abLTXXJ3UvosyIqy8ay1QQAAAo0"]
[Thu Mar 12 22:53:18.458670 2026] [:error] [pid 20467:tid 20482] [client 20.220.13.10:23315] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "abLTXnJ3UvosyIqy8ay1QgAAAow"]
[Thu Mar 12 22:53:19.308059 2026] [:error] [pid 20528:tid 20557] [client 20.220.13.10:32769] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "abLTX6nDNsf46-tKxqkczQAAAxc"]
[Thu Mar 12 22:53:20.054142 2026] [:error] [pid 20528:tid 20536] [client 20.220.13.10:48701] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "abLTYKnDNsf46-tKxqkc0AAAAwI"]
[Thu Mar 12 22:53:20.651337 2026] [:error] [pid 51457:tid 51529] [client 20.220.13.10:43341] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "abLTYCjknw2FvT4H3DbYAQAAAI8"]
[Thu Mar 12 22:53:21.135673 2026] [:error] [pid 51457:tid 51519] [client 20.220.13.10:59015] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "abLTYSjknw2FvT4H3DbYAgAAAIU"]
[Thu Mar 12 22:53:21.584338 2026] [:error] [pid 51456:tid 51497] [client 20.220.13.10:23314] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bwjjt.php"] [unique_id "abLTYRXu8LzVixNGr0uKBAAAAEo"]
[Thu Mar 12 22:53:22.124134 2026] [:error] [pid 51456:tid 51501] [client 20.220.13.10:59055] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bwjjt.php"] [unique_id "abLTYhXu8LzVixNGr0uKBgAAAE4"]
[Thu Mar 12 22:53:22.635324 2026] [:error] [pid 20531:tid 20623] [client 20.220.13.10:59464] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bwjjt.php"] [unique_id "abLTYvvw-RvNQd9b3a-38AAAA8c"]
[Thu Mar 12 22:53:23.102312 2026] [:error] [pid 20467:tid 20490] [client 20.220.13.10:43732] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bwjjt.php"] [unique_id "abLTY3J3UvosyIqy8ay1RwAAApQ"]
[Thu Mar 12 22:53:23.632286 2026] [:error] [pid 20531:tid 20635] [client 20.220.13.10:51749] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "abLTY_vw-RvNQd9b3a-38QAAA9M"]
[Thu Mar 12 22:53:24.226818 2026] [:error] [pid 51456:tid 51492] [client 20.220.13.10:51719] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "abLTZBXu8LzVixNGr0uKCQAAAEU"]
[Thu Mar 12 22:53:24.761697 2026] [:error] [pid 51456:tid 51488] [client 20.220.13.10:23341] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "abLTZBXu8LzVixNGr0uKCgAAAEE"]
[Thu Mar 12 22:53:25.738344 2026] [:error] [pid 51457:tid 51534] [client 20.220.13.10:32352] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "abLTZSjknw2FvT4H3DbYBwAAAJQ"]
[Thu Mar 12 22:53:26.603295 2026] [:error] [pid 8249:tid 8257] [client 20.220.13.10:32810] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "abLTZiK5dL3-8Jdf0M2UYwAAAQY"]
[Thu Mar 12 22:53:27.481992 2026] [:error] [pid 8249:tid 8254] [client 20.220.13.10:43719] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "abLTZyK5dL3-8Jdf0M2UZAAAAQM"]
[Thu Mar 12 22:53:27.987027 2026] [:error] [pid 11953:tid 11977] [client 20.220.13.10:59468] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "abLTZ5udzqsnq3bvtDZ0_AAAAVY"]
[Thu Mar 12 22:53:28.621058 2026] [:error] [pid 20530:tid 20612] [client 20.220.13.10:32784] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "abLTaAkNGxMzPO-s9qcXhgAAA5c"]
[Thu Mar 12 22:53:29.056785 2026] [:error] [pid 20531:tid 20616] [client 20.220.13.10:43384] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "abLTafvw-RvNQd9b3a-39QAAA8A"]
[Thu Mar 12 22:53:29.573007 2026] [:error] [pid 51457:tid 51516] [client 20.220.13.10:43389] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "abLTaSjknw2FvT4H3DbYCQAAAII"]
[Thu Mar 12 22:53:30.085376 2026] [:error] [pid 11953:tid 11970] [client 20.220.13.10:23327] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "abLTapudzqsnq3bvtDZ0_gAAAU8"]
[Thu Mar 12 22:53:30.596736 2026] [:error] [pid 20531:tid 20622] [client 20.220.13.10:59511] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "abLTavvw-RvNQd9b3a-39wAAA8Y"]
[Thu Mar 12 22:53:31.122487 2026] [:error] [pid 20467:tid 20482] [client 20.220.13.10:43771] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "abLTa3J3UvosyIqy8ay1TQAAAow"]
[Thu Mar 12 22:53:31.592181 2026] [:error] [pid 51456:tid 51500] [client 20.220.13.10:59043] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "abLTaxXu8LzVixNGr0uKDQAAAE0"]
[Thu Mar 12 22:53:32.201348 2026] [:error] [pid 51456:tid 51491] [client 20.220.13.10:59071] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "abLTbBXu8LzVixNGr0uKEAAAAEQ"]
[Thu Mar 12 22:53:32.705396 2026] [:error] [pid 51456:tid 51493] [client 20.220.13.10:1730] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "abLTbBXu8LzVixNGr0uKEwAAAEY"]
[Thu Mar 12 22:53:33.213839 2026] [:error] [pid 51456:tid 51487] [client 20.220.13.10:59041] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "abLTbRXu8LzVixNGr0uKGAAAAEA"]
[Thu Mar 12 22:53:33.688492 2026] [:error] [pid 20530:tid 20578] [client 20.220.13.10:32770] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "abLTbQkNGxMzPO-s9qcXjgAAA4M"]
[Thu Mar 12 22:53:34.157385 2026] [:error] [pid 8249:tid 8275] [client 20.220.13.10:59058] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "abLTbiK5dL3-8Jdf0M2UaAAAARg"]
[Thu Mar 12 22:53:34.679600 2026] [:error] [pid 20467:tid 20475] [client 20.220.13.10:23307] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "abLTbnJ3UvosyIqy8ay1UwAAAoU"]
[Thu Mar 12 22:53:35.244617 2026] [:error] [pid 51456:tid 51500] [client 20.220.13.10:48648] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "abLTbxXu8LzVixNGr0uKGwAAAE0"]
[Thu Mar 12 22:53:35.852373 2026] [:error] [pid 20529:tid 20570] [client 20.220.13.10:59483] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "abLTb24BhuYHZriajQ-JGAAAA0c"]
[Thu Mar 12 22:53:36.429574 2026] [:error] [pid 20528:tid 20535] [client 20.220.13.10:1125] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "abLTcKnDNsf46-tKxqkc1wAAAwE"]
[Thu Mar 12 22:53:36.927081 2026] [:error] [pid 8249:tid 8251] [client 20.220.13.10:32330] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "abLTcCK5dL3-8Jdf0M2UbQAAAQA"]
[Thu Mar 12 22:53:37.478909 2026] [:error] [pid 8249:tid 8267] [client 20.220.13.10:59486] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "abLTcSK5dL3-8Jdf0M2UcAAAARA"]
[Thu Mar 12 22:53:37.996657 2026] [:error] [pid 8249:tid 8261] [client 20.220.13.10:43337] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "abLTcSK5dL3-8Jdf0M2UdAAAAQo"]
[Thu Mar 12 22:53:38.588103 2026] [:error] [pid 20467:tid 20474] [client 20.220.13.10:51717] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "abLTcnJ3UvosyIqy8ay1VQAAAoQ"]
[Thu Mar 12 22:53:39.040630 2026] [:error] [pid 51457:tid 51515] [client 20.220.13.10:23309] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "abLTcyjknw2FvT4H3DbYEQAAAIE"]
[Thu Mar 12 22:53:39.522589 2026] [:error] [pid 11986:tid 12035] [client 20.220.13.10:59038] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "abLTczKqY2w-DVCrxTA-PwAAAdE"]
[Thu Mar 12 22:53:39.975466 2026] [:error] [pid 11986:tid 12024] [client 20.220.13.10:32357] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "abLTczKqY2w-DVCrxTA-QgAAAcY"]
[Thu Mar 12 22:53:40.438507 2026] [:error] [pid 20529:tid 20597] [client 20.220.13.10:43755] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "abLTdG4BhuYHZriajQ-JGgAAA1Y"]
[Thu Mar 12 22:53:40.912923 2026] [:error] [pid 8249:tid 8260] [client 20.220.13.10:59509] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "abLTdCK5dL3-8Jdf0M2UdwAAAQk"]
[Thu Mar 12 22:53:41.465072 2026] [:error] [pid 20528:tid 20551] [client 20.220.13.10:1745] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_b001.php"] [unique_id "abLTdanDNsf46-tKxqkc2QAAAxE"]
[Thu Mar 12 22:53:41.989110 2026] [:error] [pid 8249:tid 8252] [client 20.220.13.10:48662] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_b001.php"] [unique_id "abLTdSK5dL3-8Jdf0M2UeQAAAQE"]
[Thu Mar 12 22:53:42.584799 2026] [:error] [pid 20530:tid 20607] [client 20.220.13.10:1101] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_b001.php"] [unique_id "abLTdgkNGxMzPO-s9qcXkgAAA5I"]
[Thu Mar 12 22:53:43.150800 2026] [:error] [pid 20531:tid 20632] [client 20.220.13.10:23023] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_b001.php"] [unique_id "abLTd_vw-RvNQd9b3a-3_AAAA9A"]
[Thu Mar 12 22:53:43.857907 2026] [:error] [pid 11986:tid 12021] [client 20.220.13.10:1673] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_e76a.php"] [unique_id "abLTdzKqY2w-DVCrxTA-RwAAAcM"]
[Thu Mar 12 22:53:44.434716 2026] [:error] [pid 20530:tid 20613] [client 20.220.13.10:43359] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_e76a.php"] [unique_id "abLTeAkNGxMzPO-s9qcXlgAAA5g"]
[Thu Mar 12 22:53:44.954178 2026] [:error] [pid 51456:tid 51487] [client 20.220.13.10:23013] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_e76a.php"] [unique_id "abLTeBXu8LzVixNGr0uKKAAAAEA"]
[Thu Mar 12 22:53:45.513643 2026] [:error] [pid 20530:tid 20588] [client 20.220.13.10:22992] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_e76a.php"] [unique_id "abLTeQkNGxMzPO-s9qcXlwAAA4c"]
[Thu Mar 12 22:53:45.947761 2026] [:error] [pid 20531:tid 20616] [client 20.220.13.10:48684] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_0cc5.php"] [unique_id "abLTefvw-RvNQd9b3a-3_wAAA8A"]
[Thu Mar 12 22:53:46.459548 2026] [:error] [pid 20531:tid 20624] [client 20.220.13.10:1666] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_0cc5.php"] [unique_id "abLTevvw-RvNQd9b3a-4AAAAA8g"]
[Thu Mar 12 22:53:47.257323 2026] [:error] [pid 51457:tid 51515] [client 20.220.13.10:59036] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_0cc5.php"] [unique_id "abLTeyjknw2FvT4H3DbYHwAAAIE"]
[Thu Mar 12 22:53:47.909395 2026] [:error] [pid 51457:tid 51530] [client 20.220.13.10:51714] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/karma_0cc5.php"] [unique_id "abLTeyjknw2FvT4H3DbYIQAAAJA"]
[Thu Mar 12 22:53:48.481559 2026] [:error] [pid 51456:tid 51496] [client 20.220.13.10:32341] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "abLTfBXu8LzVixNGr0uKLQAAAEk"]
[Thu Mar 12 22:53:49.094710 2026] [:error] [pid 11986:tid 12033] [client 20.220.13.10:32796] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "abLTfTKqY2w-DVCrxTA-SwAAAc8"]
[Thu Mar 12 22:53:49.623998 2026] [:error] [pid 51457:tid 51533] [client 20.220.13.10:51727] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "abLTfSjknw2FvT4H3DbYJQAAAJM"]
[Thu Mar 12 22:53:50.094337 2026] [:error] [pid 20467:tid 20483] [client 20.220.13.10:32336] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "abLTfnJ3UvosyIqy8ay1WQAAAo0"]
[Thu Mar 12 22:53:50.571320 2026] [:error] [pid 20467:tid 20484] [client 20.220.13.10:23355] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/image.php"] [unique_id "abLTfnJ3UvosyIqy8ay1WgAAAo4"]
[Thu Mar 12 22:53:51.038902 2026] [:error] [pid 51457:tid 51515] [client 20.220.13.10:59048] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/image.php"] [unique_id "abLTfyjknw2FvT4H3DbYKQAAAIE"]
[Thu Mar 12 22:53:51.720865 2026] [:error] [pid 51457:tid 51534] [client 20.220.13.10:32380] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/image.php"] [unique_id "abLTfyjknw2FvT4H3DbYLAAAAJQ"]
[Thu Mar 12 22:53:52.206224 2026] [:error] [pid 20531:tid 20631] [client 20.220.13.10:51773] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/image.php"] [unique_id "abLTgPvw-RvNQd9b3a-4AgAAA88"]
[Thu Mar 12 22:53:52.648347 2026] [:error] [pid 20531:tid 20627] [client 20.220.13.10:59480] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/receiver.php"] [unique_id "abLTgPvw-RvNQd9b3a-4AwAAA8s"]
[Thu Mar 12 22:53:53.198912 2026] [:error] [pid 11986:tid 12040] [client 20.220.13.10:43756] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/receiver.php"] [unique_id "abLTgTKqY2w-DVCrxTA-VAAAAdY"]
[Thu Mar 12 22:53:53.712087 2026] [:error] [pid 51457:tid 51526] [client 20.220.13.10:23347] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/receiver.php"] [unique_id "abLTgSjknw2FvT4H3DbYMQAAAIw"]
[Thu Mar 12 22:53:54.194293 2026] [:error] [pid 8249:tid 8269] [client 20.220.13.10:32364] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/receiver.php"] [unique_id "abLTgiK5dL3-8Jdf0M2UgQAAARI"]
[Thu Mar 12 22:53:54.717716 2026] [:error] [pid 11953:tid 11968] [client 20.220.13.10:59061] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "abLTgpudzqsnq3bvtDZ1CQAAAU0"]
[Thu Mar 12 22:53:55.167535 2026] [:error] [pid 51457:tid 51537] [client 20.220.13.10:32331] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "abLTgyjknw2FvT4H3DbYNAAAAJc"]
[Thu Mar 12 22:53:55.769792 2026] [:error] [pid 8249:tid 8268] [client 20.220.13.10:43753] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "abLTgyK5dL3-8Jdf0M2UhQAAARE"]
[Thu Mar 12 22:53:56.234868 2026] [:error] [pid 11986:tid 12032] [client 20.220.13.10:32327] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "abLThDKqY2w-DVCrxTA-WAAAAc4"]
[Thu Mar 12 22:53:56.929412 2026] [:error] [pid 11986:tid 12041] [client 20.220.13.10:32793] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "abLThDKqY2w-DVCrxTA-XQAAAdc"]
[Thu Mar 12 22:53:57.390877 2026] [:error] [pid 20467:tid 20487] [client 20.220.13.10:1751] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "abLThXJ3UvosyIqy8ay1XAAAApE"]
[Thu Mar 12 22:53:57.869358 2026] [:error] [pid 51457:tid 51528] [client 20.220.13.10:43768] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "abLThSjknw2FvT4H3DbYOAAAAI4"]
[Thu Mar 12 22:53:58.487497 2026] [:error] [pid 51456:tid 51501] [client 20.220.13.10:48666] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "abLThhXu8LzVixNGr0uKOAAAAE4"]
[Thu Mar 12 22:53:59.014872 2026] [:error] [pid 8249:tid 8254] [client 20.220.13.10:32340] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/temp1.php"] [unique_id "abLThyK5dL3-8Jdf0M2UhgAAAQM"]
[Thu Mar 12 22:53:59.561982 2026] [:error] [pid 11986:tid 12035] [client 20.220.13.10:43769] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/temp1.php"] [unique_id "abLThzKqY2w-DVCrxTA-YQAAAdE"]
[Thu Mar 12 22:54:00.120971 2026] [:error] [pid 20531:tid 20636] [client 20.220.13.10:23343] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/temp1.php"] [unique_id "abLTiPvw-RvNQd9b3a-4BgAAA9Q"]
[Thu Mar 12 22:54:00.597076 2026] [:error] [pid 51457:tid 51519] [client 20.220.13.10:59515] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/temp1.php"] [unique_id "abLTiCjknw2FvT4H3DbYPAAAAIU"]
[Thu Mar 12 22:54:01.042971 2026] [:error] [pid 20529:tid 20584] [client 20.220.13.10:32798] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "abLTiW4BhuYHZriajQ-JHgAAA08"]
[Thu Mar 12 22:54:01.530950 2026] [:error] [pid 20531:tid 20620] [client 20.220.13.10:1552] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "abLTifvw-RvNQd9b3a-4CAAAA8Q"]
[Thu Mar 12 22:54:02.072558 2026] [:error] [pid 11953:tid 11972] [client 20.220.13.10:32322] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "abLTipudzqsnq3bvtDZ1EQAAAVE"]
[Thu Mar 12 22:54:02.522746 2026] [:error] [pid 20531:tid 20619] [client 20.220.13.10:43336] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "abLTivvw-RvNQd9b3a-4CQAAA8M"]
[Thu Mar 12 22:54:03.009639 2026] [:error] [pid 20530:tid 20590] [client 20.220.13.10:48702] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ocdzo.php"] [unique_id "abLTiwkNGxMzPO-s9qcXnQAAA4g"]
[Thu Mar 12 22:54:03.473697 2026] [:error] [pid 11953:tid 11956] [client 20.220.13.10:23322] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ocdzo.php"] [unique_id "abLTi5udzqsnq3bvtDZ1EgAAAUE"]
[Thu Mar 12 22:54:03.914697 2026] [:error] [pid 11986:tid 12039] [client 20.220.13.10:43363] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ocdzo.php"] [unique_id "abLTizKqY2w-DVCrxTA-awAAAdU"]
[Thu Mar 12 22:54:04.502713 2026] [:error] [pid 51457:tid 51530] [client 20.220.13.10:23324] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ocdzo.php"] [unique_id "abLTjCjknw2FvT4H3DbYQAAAAJA"]
[Thu Mar 12 22:54:04.992316 2026] [:error] [pid 20528:tid 20550] [client 20.220.13.10:43350] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yitlu.php"] [unique_id "abLTjKnDNsf46-tKxqkc6AAAAxA"]
[Thu Mar 12 22:54:05.461406 2026] [:error] [pid 8249:tid 8252] [client 20.220.13.10:51735] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yitlu.php"] [unique_id "abLTjSK5dL3-8Jdf0M2UiAAAAQE"]
[Thu Mar 12 22:54:05.913095 2026] [:error] [pid 51457:tid 51515] [client 20.220.13.10:59466] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yitlu.php"] [unique_id "abLTjSjknw2FvT4H3DbYQQAAAIE"]
[Thu Mar 12 22:54:06.376081 2026] [:error] [pid 8249:tid 8256] [client 20.220.13.10:1742] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yitlu.php"] [unique_id "abLTjiK5dL3-8Jdf0M2UjAAAAQU"]
[Thu Mar 12 22:54:06.842888 2026] [:error] [pid 51456:tid 51496] [client 20.220.13.10:32783] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmzrp.php"] [unique_id "abLTjhXu8LzVixNGr0uKPQAAAEk"]
[Thu Mar 12 22:54:07.953157 2026] [:error] [pid 8249:tid 8269] [client 20.220.13.10:32351] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmzrp.php"] [unique_id "abLTjyK5dL3-8Jdf0M2UjwAAARI"]
[Thu Mar 12 22:54:08.493413 2026] [:error] [pid 20531:tid 20629] [client 20.220.13.10:51774] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmzrp.php"] [unique_id "abLTkPvw-RvNQd9b3a-4DQAAA80"]
[Thu Mar 12 22:54:08.917900 2026] [:error] [pid 8249:tid 8260] [client 20.220.13.10:22980] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmzrp.php"] [unique_id "abLTkCK5dL3-8Jdf0M2UlQAAAQk"]
[Thu Mar 12 22:54:09.330926 2026] [:error] [pid 11986:tid 12030] [client 20.220.13.10:32807] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/weoci.php"] [unique_id "abLTkTKqY2w-DVCrxTA-dAAAAcw"]
[Thu Mar 12 22:54:09.764364 2026] [:error] [pid 11986:tid 12035] [client 20.220.13.10:59029] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/weoci.php"] [unique_id "abLTkTKqY2w-DVCrxTA-dQAAAdE"]
[Thu Mar 12 22:54:10.271131 2026] [:error] [pid 51457:tid 51538] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/weoci.php
[Thu Mar 12 22:54:10.543551 2026] [:error] [pid 51457:tid 51525] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/wfsjt.php
[Thu Mar 12 22:54:10.753427 2026] [:error] [pid 51457:tid 51516] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/vhitr.php
[Thu Mar 12 22:54:10.982472 2026] [:error] [pid 51457:tid 51526] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/uvlyi.php
[Thu Mar 12 22:54:11.192289 2026] [:error] [pid 51457:tid 51533] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/tbmfx.php
[Thu Mar 12 22:54:11.468560 2026] [:error] [pid 51457:tid 51519] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/rqiup.php
[Thu Mar 12 22:54:11.707942 2026] [:error] [pid 51457:tid 51535] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/swqjx.php
[Thu Mar 12 22:54:11.921919 2026] [:error] [pid 51457:tid 51537] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/mfv7ys.php
[Thu Mar 12 22:54:12.151005 2026] [:error] [pid 51457:tid 51524] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/jxhre.php
[Thu Mar 12 22:54:13.614353 2026] [:error] [pid 51457:tid 51524] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjne.php
[Thu Mar 12 22:54:13.830271 2026] [:error] [pid 51457:tid 51522] [client 20.220.13.10:1156] File does not exist: /usr/local/apache/htdocs/suspended-page/fvlje.php
[Thu Mar 12 22:54:14.036802 2026] [:error] [pid 51457:tid 51520] [client 20.220.13.10:1156] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cqrrg.php"] [unique_id "abLTlijknw2FvT4H3DbYUgAAAIY"]
[Thu Mar 12 22:54:14.509148 2026] [:error] [pid 11953:tid 11973] [client 20.220.13.10:43772] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cqrrg.php"] [unique_id "abLTlpudzqsnq3bvtDZ1HQAAAVI"]
[Thu Mar 12 22:54:15.154221 2026] [:error] [pid 11953:tid 11968] [client 20.220.13.10:59031] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cqrrg.php"] [unique_id "abLTl5udzqsnq3bvtDZ1IAAAAU0"]
[Thu Mar 12 22:54:15.583992 2026] [:error] [pid 20528:tid 20538] [client 20.220.13.10:23297] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cqrrg.php"] [unique_id "abLTl6nDNsf46-tKxqkc7wAAAwQ"]
[Thu Mar 12 22:54:16.193843 2026] [:error] [pid 11953:tid 11961] [client 20.220.13.10:59457] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/euhpb.php"] [unique_id "abLTmJudzqsnq3bvtDZ1KAAAAUY"]
[Thu Mar 12 22:54:16.689176 2026] [:error] [pid 11953:tid 11975] [client 20.220.13.10:23344] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/euhpb.php"] [unique_id "abLTmJudzqsnq3bvtDZ1LAAAAVQ"]
[Thu Mar 12 22:54:17.100473 2026] [:error] [pid 20531:tid 20638] [client 20.220.13.10:59502] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/euhpb.php"] [unique_id "abLTmfvw-RvNQd9b3a-4EAAAA9Y"]
[Thu Mar 12 22:54:17.559466 2026] [:error] [pid 11953:tid 11962] [client 20.220.13.10:51743] [client 20.220.13.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/euhpb.php"] [unique_id "abLTmZudzqsnq3bvtDZ1MQAAAUc"]
[Thu Mar 12 23:27:25.747862 2026] [:error] [pid 51456:tid 51504] [client 20.151.108.217:63153] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "abLbXRXu8LzVixNGr0uQtQAAAFE"]
[Thu Mar 12 23:27:26.575454 2026] [:error] [pid 11953:tid 11969] [client 20.151.108.217:57450] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "abLbXpudzqsnq3bvtDaFHgAAAU4"]
[Thu Mar 12 23:27:27.404634 2026] [:error] [pid 51457:tid 51528] [client 20.151.108.217:63167] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "abLbXyjknw2FvT4H3DbeBgAAAI4"]
[Thu Mar 12 23:27:28.256575 2026] [:error] [pid 11953:tid 11958] [client 20.151.108.217:63109] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "abLbYJudzqsnq3bvtDaFJgAAAUM"]
[Fri Mar 13 01:49:16.587576 2026] [:error] [pid 48029:tid 48049] [client 20.151.108.217:61590] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 13 01:49:17.006014 2026] [:error] [pid 48029:tid 48048] [client 20.151.108.217:61590] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Mar 13 01:49:17.215528 2026] [:error] [pid 48029:tid 48041] [client 20.151.108.217:61590] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri Mar 13 01:49:17.424403 2026] [:error] [pid 48029:tid 48039] [client 20.151.108.217:61590] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Mar 13 01:49:17.634124 2026] [:error] [pid 48029:tid 48040] [client 20.151.108.217:61590] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Mar 13 01:49:18.057199 2026] [:error] [pid 48029:tid 48043] [client 20.151.108.217:61590] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Fri Mar 13 01:49:18.477760 2026] [:error] [pid 48029:tid 48035] [client 20.151.108.217:61590] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conf.php
[Fri Mar 13 01:49:18.892611 2026] [:error] [pid 48029:tid 48048] [client 20.151.108.217:61590] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abL8nm7cFKMmtdGhPH_L_AAAABE"]
[Fri Mar 13 01:49:19.721610 2026] [:error] [pid 47893:tid 47992] [client 20.151.108.217:40062] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abL8nwYSdu6aqxO_YucmmQAAAJE"]
[Fri Mar 13 01:49:20.552994 2026] [:error] [pid 47893:tid 47980] [client 20.151.108.217:61036] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abL8oAYSdu6aqxO_YucmnAAAAIU"]
[Fri Mar 13 01:49:21.384459 2026] [:error] [pid 56003:tid 56014] [client 20.151.108.217:40761] [client 20.151.108.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abL8oRQtM0oeMdFWe6VxXQAAAMk"]
[Fri Mar 13 02:43:30.815740 2026] [:error] [pid 47892:tid 47964] [client 193.36.225.53:45559] [client 193.36.225.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 193.36.225.53, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abMJUjNdN5Yd7YcKfyUR0wAAAFA"]
[Fri Mar 13 02:43:30.819676 2026] [:error] [pid 47892:tid 47964] [client 193.36.225.53:45559] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 03:17:12.071935 2026] [:error] [pid 47894:tid 48012] [client 20.78.168.104:9445] File does not exist: /usr/local/apache/htdocs/suspended-page/xmr.php
[Fri Mar 13 03:17:12.199012 2026] [:error] [pid 47894:tid 48006] [client 20.78.168.104:9445] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Mar 13 03:17:12.326969 2026] [:error] [pid 47894:tid 48015] [client 20.78.168.104:9445] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 13 03:17:12.452618 2026] [:error] [pid 47894:tid 48020] [client 20.78.168.104:9445] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 13 03:17:12.582501 2026] [:error] [pid 47894:tid 48019] [client 20.78.168.104:9445] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri Mar 13 03:17:12.705831 2026] [:error] [pid 47894:tid 48025] [client 20.78.168.104:9445] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Mar 13 03:17:12.827490 2026] [:error] [pid 47894:tid 48005] [client 20.78.168.104:9445] [client 20.78.168.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "abMROJiuFpRtVNR6uOKabwAAAQM"]
[Fri Mar 13 03:17:13.314535 2026] [:error] [pid 56003:tid 56025] [client 20.78.168.104:7561] [client 20.78.168.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "abMRORQtM0oeMdFWe6WYfQAAANQ"]
[Fri Mar 13 03:17:13.798868 2026] [:error] [pid 47893:tid 47996] [client 20.78.168.104:6388] [client 20.78.168.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "abMROQYSdu6aqxO_Yuc4nQAAAJU"]
[Fri Mar 13 03:17:14.311441 2026] [:error] [pid 47892:tid 47951] [client 20.78.168.104:1893] [client 20.78.168.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "abMROjNdN5Yd7YcKfyUWzQAAAEM"]
[Fri Mar 13 03:32:44.950327 2026] [:error] [pid 58727:tid 58790] [client 20.213.29.93:3591] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 13 03:32:44.968936 2026] [:error] [pid 58727:tid 58796] [client 20.213.29.93:3591] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 13 03:32:45.007223 2026] [:error] [pid 58727:tid 58789] [client 20.213.29.93:3591] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Fri Mar 13 03:32:45.027582 2026] [:error] [pid 58727:tid 58792] [client 20.213.29.93:3591] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 13 03:32:45.065392 2026] [:error] [pid 58727:tid 58795] [client 20.213.29.93:3591] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Fri Mar 13 03:32:45.085799 2026] [:error] [pid 58727:tid 58777] [client 20.213.29.93:3591] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Mar 13 03:32:45.105535 2026] [:error] [pid 58727:tid 58788] [client 20.213.29.93:3591] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Mar 13 03:32:45.170043 2026] [:error] [pid 58727:tid 58797] [client 20.213.29.93:3591] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMU3Wfl4dRIIREhrDky5AAAAFg"]
[Fri Mar 13 03:32:45.267548 2026] [:error] [pid 58726:tid 58751] [client 20.213.29.93:3611] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMU3RkVBswSM_Z9w36TFwAAAAU"]
[Fri Mar 13 03:32:45.333255 2026] [:error] [pid 58726:tid 58758] [client 20.213.29.93:3678] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMU3RkVBswSM_Z9w36TGAAAAAw"]
[Fri Mar 13 03:32:45.438312 2026] [:error] [pid 58728:tid 58820] [client 20.213.29.93:22541] [client 20.213.29.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abMU3eBt0ZA8r3yyRPEQvQAAAJQ"]
[Fri Mar 13 04:44:47.404458 2026] [:error] [pid 61928:tid 61980] [client 211.57.149.147:6294] [client 211.57.149.147] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 211.57.149.147, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abMlvwod66AHekJJZioToAAAAEM"]
[Fri Mar 13 04:44:47.410882 2026] [:error] [pid 61928:tid 61980] [client 211.57.149.147:6294] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 06:38:27.464872 2026] [:error] [pid 55077:tid 55091] [client 194.61.58.197:37594] [client 194.61.58.197] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 194.61.58.197, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abNAY99Ul5ym4M-PlQL6ggAAAUw"]
[Fri Mar 13 06:38:27.470198 2026] [:error] [pid 55077:tid 55091] [client 194.61.58.197:37594] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 07:47:20.741447 2026] [:error] [pid 61929:tid 62026] [client 195.178.110.159:42962] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "abNQiDGGsow2jgUjLtxx1AAAAJY"]
[Fri Mar 13 08:52:24.388477 2026] [:error] [pid 62036:tid 62067] [client 195.178.110.159:56348] [client 195.178.110.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "abNfyLce6g9kILuh_R43ngAAANg"]
[Fri Mar 13 09:23:05.803211 2026] [:error] [pid 61927:tid 61968] [client 136.144.35.39:29787] [client 136.144.35.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.35.39, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abNm-bLkK584eBa2J7XhXgAAABY"]
[Fri Mar 13 09:23:05.813444 2026] [:error] [pid 61927:tid 61968] [client 136.144.35.39:29787] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 09:50:27.432741 2026] [:error] [pid 61928:tid 61984] [client 45.131.195.117:23813] [client 45.131.195.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.117, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abNtYwod66AHekJJZipPpwAAAEc"]
[Fri Mar 13 09:50:27.438603 2026] [:error] [pid 61928:tid 61984] [client 45.131.195.117:23813] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 13 16:22:44.651975 2026] [:error] [pid 55077:tid 55103] [client 81.40.167.118:51825] [client 81.40.167.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.40.167.118, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abPJVN9Ul5ym4M-PlQKukAAAAVg"]
[Fri Mar 13 16:22:44.660134 2026] [:error] [pid 55077:tid 55103] [client 81.40.167.118:51825] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 13 19:49:15.524121 2026] [:error] [pid 9311:tid 9365] [client 106.222.218.99:27744] [client 106.222.218.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.222.218.99, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abP5u1TiCkU4QLmYwPkpLQAAAk4"]
[Fri Mar 13 19:49:15.529715 2026] [:error] [pid 9311:tid 9365] [client 106.222.218.99:27744] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 14 00:17:47.040159 2026] [:error] [pid 60496:tid 60519] [client 20.151.4.179:64272] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Mar 14 00:17:47.251606 2026] [:error] [pid 60496:tid 60527] [client 20.151.4.179:64272] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Mar 14 00:17:47.460876 2026] [:error] [pid 60496:tid 60525] [client 20.151.4.179:64272] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Mar 14 00:17:47.671073 2026] [:error] [pid 60496:tid 60518] [client 20.151.4.179:64272] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 14 00:17:47.879063 2026] [:error] [pid 60496:tid 60526] [client 20.151.4.179:64272] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Mar 14 00:17:48.090181 2026] [:error] [pid 60496:tid 60528] [client 20.151.4.179:64272] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sat Mar 14 00:17:48.299930 2026] [:error] [pid 60496:tid 60517] [client 20.151.4.179:64272] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Mar 14 00:17:48.512029 2026] [:error] [pid 60496:tid 60512] [client 20.151.4.179:64272] File does not exist: /usr/local/apache/htdocs/suspended-page/nux.php
[Sat Mar 14 00:17:48.722981 2026] [:error] [pid 60496:tid 60520] [client 20.151.4.179:64272] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Sat Mar 14 00:17:48.950757 2026] [:error] [pid 60496:tid 60505] [client 20.151.4.179:64272] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Sat Mar 14 00:17:49.165738 2026] [:error] [pid 60496:tid 60521] [client 20.151.4.179:64272] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chati.php"] [unique_id "abQ4rQb67oGiJ3jaL8w7jQAAA1E"]
[Sat Mar 14 00:17:50.048692 2026] [:error] [pid 60497:tid 60536] [client 20.151.4.179:61706] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chati.php"] [unique_id "abQ4rhjNYgapWlkb4ljilAAAA4U"]
[Sat Mar 14 00:17:50.957919 2026] [:error] [pid 9311:tid 9353] [client 20.151.4.179:61699] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chati.php"] [unique_id "abQ4rlTiCkU4QLmYwPlLRgAAAkI"]
[Sat Mar 14 00:17:51.784412 2026] [:error] [pid 60436:tid 60489] [client 20.151.4.179:61711] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chati.php"] [unique_id "abQ4r4I3PEddCArY1Aa-4QAAAxQ"]
[Sat Mar 14 01:53:08.550302 2026] [:error] [pid 47891:tid 47987] [client 20.151.4.179:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Mar 14 01:53:08.759152 2026] [:error] [pid 47891:tid 47988] [client 20.151.4.179:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Mar 14 01:53:08.968067 2026] [:error] [pid 47891:tid 47971] [client 20.151.4.179:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Sat Mar 14 01:53:09.178280 2026] [:error] [pid 47891:tid 47972] [client 20.151.4.179:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Mar 14 01:53:09.387548 2026] [:error] [pid 47891:tid 47984] [client 20.151.4.179:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Mar 14 01:53:09.598096 2026] [:error] [pid 47891:tid 47985] [client 20.151.4.179:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sat Mar 14 01:53:09.808458 2026] [:error] [pid 47891:tid 47970] [client 20.151.4.179:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/y.php
[Sat Mar 14 01:53:10.017622 2026] [:error] [pid 47891:tid 47977] [client 20.151.4.179:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Sat Mar 14 01:53:10.437867 2026] [:error] [pid 47891:tid 47969] [client 20.151.4.179:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 14 01:53:10.647066 2026] [:error] [pid 47891:tid 47967] [client 20.151.4.179:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Mar 14 01:53:10.852624 2026] [:error] [pid 47891:tid 47974] [client 20.151.4.179:40543] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "abRPBvchNnuMqi7I_WECfAAAAIg"]
[Sat Mar 14 01:53:11.684700 2026] [:error] [pid 47891:tid 47986] [client 20.151.4.179:40564] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "abRPB_chNnuMqi7I_WECfgAAAJQ"]
[Sat Mar 14 01:53:12.549566 2026] [:error] [pid 47891:tid 47973] [client 20.151.4.179:40134] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "abRPCPchNnuMqi7I_WEChAAAAIc"]
[Sat Mar 14 01:53:13.379527 2026] [:error] [pid 47891:tid 47984] [client 20.151.4.179:40512] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "abRPCfchNnuMqi7I_WECiAAAAJI"]
[Sat Mar 14 02:28:51.318808 2026] [:error] [pid 48070:tid 48089] [client 4.204.197.4:64236] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Mar 14 02:28:51.536850 2026] [:error] [pid 48070:tid 48080] [client 4.204.197.4:64236] File does not exist: /usr/local/apache/htdocs/suspended-page/packed.php
[Sat Mar 14 02:28:51.754834 2026] [:error] [pid 48070:tid 48086] [client 4.204.197.4:64236] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Mar 14 02:28:51.979544 2026] [:error] [pid 48070:tid 48091] [client 4.204.197.4:64236] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Mar 14 02:28:52.198414 2026] [:error] [pid 48070:tid 48090] [client 4.204.197.4:64236] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Mar 14 02:28:52.407180 2026] [:error] [pid 48070:tid 48092] [client 4.204.197.4:64236] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Mar 14 02:28:52.615754 2026] [:error] [pid 48070:tid 48073] [client 4.204.197.4:64236] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Sat Mar 14 02:28:52.825203 2026] [:error] [pid 48070:tid 48094] [client 4.204.197.4:64236] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Sat Mar 14 02:28:53.042961 2026] [:error] [pid 48070:tid 48093] [client 4.204.197.4:64236] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Mar 14 02:28:53.263999 2026] [:error] [pid 48070:tid 48077] [client 4.204.197.4:64236] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Mar 14 02:28:53.469213 2026] [:error] [pid 48070:tid 48074] [client 4.204.197.4:64236] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "abRXZUIvrhMS5BVHxNk1zAAAAAI"]
[Sat Mar 14 02:28:54.128028 2026] [:error] [pid 47891:tid 47984] [client 4.204.197.4:41765] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "abRXZvchNnuMqi7I_WEWVQAAAJI"]
[Sat Mar 14 02:28:56.336338 2026] [:error] [pid 47891:tid 47983] [client 4.204.197.4:44755] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "abRXaPchNnuMqi7I_WEWXgAAAJE"]
[Sat Mar 14 02:28:57.507538 2026] [:error] [pid 47878:tid 47961] [client 4.204.197.4:58369] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "abRXaX8jymmmpr1jcBe8XwAAAFY"]
[Sat Mar 14 02:28:59.185496 2026] [:error] [pid 48070:tid 48087] [client 4.204.197.4:52798] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "abRXa0IvrhMS5BVHxNk1zQAAAA8"]
[Sat Mar 14 02:29:00.882390 2026] [:error] [pid 48070:tid 48096] [client 4.204.197.4:50486] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "abRXbEIvrhMS5BVHxNk10AAAABg"]
[Sat Mar 14 02:29:02.421104 2026] [:error] [pid 47891:tid 47966] [client 4.204.197.4:44783] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "abRXbvchNnuMqi7I_WEWZQAAAIA"]
[Sat Mar 14 02:29:04.416035 2026] [:error] [pid 47891:tid 47983] [client 4.204.197.4:58417] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "abRXcPchNnuMqi7I_WEWZgAAAJE"]
[Sat Mar 14 02:29:06.272580 2026] [:error] [pid 47905:tid 48015] [client 4.204.197.4:64202] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "abRXchaYZayP4o4wpJc7jgAAAVY"]
[Sat Mar 14 02:29:07.582603 2026] [:error] [pid 47878:tid 47961] [client 4.204.197.4:40690] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "abRXc38jymmmpr1jcBe8bAAAAFY"]
[Sat Mar 14 02:29:09.859922 2026] [:error] [pid 47878:tid 47956] [client 4.204.197.4:50485] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "abRXdX8jymmmpr1jcBe8cwAAAFE"]
[Sat Mar 14 02:29:11.190569 2026] [:error] [pid 47878:tid 47943] [client 4.204.197.4:41780] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "abRXd38jymmmpr1jcBe8dwAAAEQ"]
[Sat Mar 14 02:29:17.222644 2026] [:error] [pid 47878:tid 47948] [client 4.204.197.4:57056] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "abRXfX8jymmmpr1jcBe8ewAAAEk"]
[Sat Mar 14 02:29:23.265244 2026] [:error] [pid 47891:tid 47988] [client 4.204.197.4:40685] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "abRXg_chNnuMqi7I_WEWngAAAJY"]
[Sat Mar 14 02:29:24.430934 2026] [:error] [pid 47878:tid 47947] [client 4.204.197.4:41775] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "abRXhH8jymmmpr1jcBe8igAAAEg"]
[Sat Mar 14 02:29:25.918328 2026] [:error] [pid 47878:tid 47940] [client 4.204.197.4:40659] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "abRXhX8jymmmpr1jcBe8kQAAAEE"]
[Sat Mar 14 02:29:28.026092 2026] [:error] [pid 47878:tid 47947] [client 4.204.197.4:44779] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "abRXiH8jymmmpr1jcBe8lwAAAEg"]
[Sat Mar 14 02:29:29.324205 2026] [:error] [pid 47891:tid 47975] [client 4.204.197.4:44784] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "abRXifchNnuMqi7I_WEWpQAAAIk"]
[Sat Mar 14 02:29:30.355950 2026] [:error] [pid 47878:tid 47958] [client 4.204.197.4:52773] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "abRXin8jymmmpr1jcBe8oAAAAFM"]
[Sat Mar 14 02:29:31.664058 2026] [:error] [pid 48070:tid 48093] [client 4.204.197.4:57054] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "abRXi0IvrhMS5BVHxNk2HAAAABU"]
[Sat Mar 14 02:29:32.353499 2026] [:error] [pid 48070:tid 48083] [client 4.204.197.4:58425] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "abRXjEIvrhMS5BVHxNk2HQAAAAs"]
[Sat Mar 14 02:29:33.508185 2026] [:error] [pid 47891:tid 47971] [client 4.204.197.4:57040] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "abRXjfchNnuMqi7I_WEWrQAAAIU"]
[Sat Mar 14 02:29:34.674595 2026] [:error] [pid 48070:tid 48081] [client 4.204.197.4:52782] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "abRXjkIvrhMS5BVHxNk2IwAAAAk"]
[Sat Mar 14 02:29:35.696083 2026] [:error] [pid 48070:tid 48080] [client 4.204.197.4:52759] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "abRXj0IvrhMS5BVHxNk2KAAAAAg"]
[Sat Mar 14 02:29:36.808308 2026] [:error] [pid 48070:tid 48078] [client 4.204.197.4:57037] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "abRXkEIvrhMS5BVHxNk2MAAAAAY"]
[Sat Mar 14 02:29:38.362063 2026] [:error] [pid 47905:tid 47998] [client 4.204.197.4:44773] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "abRXkhaYZayP4o4wpJc7rQAAAUU"]
[Sat Mar 14 02:29:40.525499 2026] [:error] [pid 48070:tid 48081] [client 4.204.197.4:44757] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "abRXlEIvrhMS5BVHxNk2MQAAAAk"]
[Sat Mar 14 02:29:42.351305 2026] [:error] [pid 47878:tid 47942] [client 4.204.197.4:41735] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "abRXln8jymmmpr1jcBe8rQAAAEM"]
[Sat Mar 14 02:29:43.765742 2026] [:error] [pid 47905:tid 47998] [client 4.204.197.4:44748] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRXlxaYZayP4o4wpJc7ugAAAUU"]
[Sat Mar 14 02:29:46.496649 2026] [:error] [pid 47878:tid 47949] [client 4.204.197.4:40652] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRXmn8jymmmpr1jcBe8sQAAAEo"]
[Sat Mar 14 02:29:47.038014 2026] [:error] [pid 47878:tid 47939] [client 4.204.197.4:64192] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRXm38jymmmpr1jcBe8tAAAAEA"]
[Sat Mar 14 02:29:47.842741 2026] [:error] [pid 48070:tid 48081] [client 4.204.197.4:44796] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "abRXm0IvrhMS5BVHxNk2PQAAAAk"]
[Sat Mar 14 02:29:48.551958 2026] [:error] [pid 48070:tid 48080] [client 4.204.197.4:58378] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "abRXnEIvrhMS5BVHxNk2PwAAAAg"]
[Sat Mar 14 02:29:49.640149 2026] [:error] [pid 47905:tid 48016] [client 4.204.197.4:40661] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "abRXnRaYZayP4o4wpJc7wAAAAVc"]
[Sat Mar 14 02:29:50.831460 2026] [:error] [pid 47905:tid 48012] [client 4.204.197.4:57080] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "abRXnhaYZayP4o4wpJc7wgAAAVM"]
[Sat Mar 14 02:29:51.575147 2026] [:error] [pid 47891:tid 47967] [client 4.204.197.4:38900] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "abRXn_chNnuMqi7I_WEW1AAAAIE"]
[Sat Mar 14 02:29:52.242545 2026] [:error] [pid 47891:tid 47971] [client 4.204.197.4:64195] [client 4.204.197.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/up.php"] [unique_id "abRXoPchNnuMqi7I_WEW2AAAAIU"]
[Sat Mar 14 02:29:53.048140 2026] [:error] [pid 47891:tid 47983] [client 4.204.197.4:58414] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Mar 14 02:29:53.258128 2026] [:error] [pid 47891:tid 47984] [client 4.204.197.4:58414] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Mar 14 03:30:05.392122 2026] [:error] [pid 47878:tid 47956] [client 20.63.80.127:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Mar 14 03:30:05.868773 2026] [:error] [pid 47878:tid 47942] [client 20.63.80.127:64898] [client 20.63.80.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.80.127, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abRlvX8jymmmpr1jcBfKkAAAAEM"]
[Sat Mar 14 03:30:06.082997 2026] [:error] [pid 47878:tid 47955] [client 20.63.80.127:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Sat Mar 14 03:30:07.058454 2026] [:error] [pid 47878:tid 47939] [client 20.63.80.127:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Sat Mar 14 03:30:07.948337 2026] [:error] [pid 47878:tid 47958] [client 20.63.80.127:64898] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Mar 14 03:30:08.196176 2026] [:error] [pid 47878:tid 47950] [client 20.63.80.127:64898] [client 20.63.80.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRlwH8jymmmpr1jcBfKmwAAAEs"]
[Sat Mar 14 03:30:09.439061 2026] [:error] [pid 47891:tid 47985] [client 20.63.80.127:4144] [client 20.63.80.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRlwfchNnuMqi7I_WE5jgAAAJM"]
[Sat Mar 14 03:30:10.557942 2026] [:error] [pid 47878:tid 47960] [client 20.63.80.127:64946] [client 20.63.80.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRlwn8jymmmpr1jcBfKngAAAFU"]
[Sat Mar 14 03:30:11.660993 2026] [:error] [pid 47878:tid 47942] [client 20.63.80.127:64897] [client 20.63.80.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abRlw38jymmmpr1jcBfKoAAAAEM"]
[Sat Mar 14 09:30:56.383484 2026] [:error] [pid 4018:tid 4049] [client 185.137.164.21:27787] [client 185.137.164.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "abS6UAEk1fxdMMkDDaL_2wAAANg"]
[Sun Mar 15 01:44:34.828123 2026] [:error] [pid 19680:tid 19999] [client 106.208.150.245:58065] [client 106.208.150.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.208.150.245, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abWegknhGahR8LEhCX-olAAAAcc"]
[Sun Mar 15 01:44:34.833862 2026] [:error] [pid 19680:tid 19999] [client 106.208.150.245:58065] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 15 06:42:46.953512 2026] [:error] [pid 38536:tid 38572] [client 4.196.164.90:11219] File does not exist: /usr/local/apache/htdocs/suspended-page/xmr.php
[Sun Mar 15 06:42:46.972684 2026] [:error] [pid 38536:tid 38553] [client 4.196.164.90:11219] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sun Mar 15 06:42:46.990923 2026] [:error] [pid 38536:tid 38565] [client 4.196.164.90:11219] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Mar 15 06:42:47.009403 2026] [:error] [pid 38536:tid 38575] [client 4.196.164.90:11219] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Mar 15 06:42:47.028863 2026] [:error] [pid 38536:tid 38559] [client 4.196.164.90:11219] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sun Mar 15 06:42:47.046999 2026] [:error] [pid 38536:tid 38564] [client 4.196.164.90:11219] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Mar 15 06:42:47.062496 2026] [:error] [pid 38536:tid 38558] [client 4.196.164.90:11219] [client 4.196.164.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "abXkZ_pTEqkVJ0rBEWueJAAAAAU"]
[Sun Mar 15 06:42:47.134902 2026] [:error] [pid 38536:tid 38576] [client 4.196.164.90:11715] [client 4.196.164.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "abXkZ_pTEqkVJ0rBEWueJQAAABc"]
[Sun Mar 15 06:42:47.200787 2026] [:error] [pid 38536:tid 38577] [client 4.196.164.90:11218] [client 4.196.164.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "abXkZ_pTEqkVJ0rBEWueJgAAABg"]
[Sun Mar 15 06:42:47.310311 2026] [:error] [pid 9995:tid 10013] [client 4.196.164.90:8815] [client 4.196.164.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "abXkZwa8xkcaSmgTbwgKvwAAAQ8"]
[Sun Mar 15 16:13:18.988840 2026] [:error] [pid 45801:tid 45814] [client 104.234.53.94:49679] [client 104.234.53.94] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.234.53.94, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abZqHoaKHL9CTKoVzTAKZgAAAcs"]
[Sun Mar 15 16:13:18.995402 2026] [:error] [pid 45801:tid 45814] [client 104.234.53.94:49679] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 15 23:11:19.655118 2026] [:error] [pid 45974:tid 45988] [client 5.193.35.26:64158] [client 5.193.35.26] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.193.35.26, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abbMFxWn4R6u72SegejlSAAAAgw"]
[Sun Mar 15 23:11:19.660680 2026] [:error] [pid 45974:tid 45988] [client 5.193.35.26:64158] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 15 23:44:43.772704 2026] [:error] [pid 45801:tid 45825] [client 104.28.214.113:50319] [client 104.28.214.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "abbT64aKHL9CTKoVzTBu4gAAAdY"]
[Mon Mar 16 07:02:26.468943 2026] [:error] [pid 62428:tid 62480] [client 203.188.168.22:22287] [client 203.188.168.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 203.188.168.22, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abc6gqrHSRXFZx1-aIHoDwAAAEs"]
[Mon Mar 16 07:02:26.475201 2026] [:error] [pid 62428:tid 62480] [client 203.188.168.22:22287] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 16 08:19:44.702979 2026] [:error] [pid 62429:tid 62508] [client 178.128.102.180:52697] [client 178.128.102.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "abdMoFewIPukhLCowEH4XgAAAIw"]
[Mon Mar 16 08:19:48.166132 2026] [:error] [pid 12768:tid 12780] [client 178.128.102.180:58941] [client 178.128.102.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abdMpIvjhfol0SJym0_KtAAAAYc"]
[Mon Mar 16 08:19:52.000650 2026] [:error] [pid 62429:tid 62502] [client 178.128.102.180:60534] [client 178.128.102.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/speculative8.php"] [unique_id "abdMp1ewIPukhLCowEH4ZQAAAIY"]
[Mon Mar 16 08:19:53.114216 2026] [:error] [pid 62427:tid 62459] [client 178.128.102.180:62704] [client 178.128.102.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abdMqcUPP8fzo6XzJCUocAAAABI"]
[Mon Mar 16 08:23:32.683640 2026] [:error] [pid 1411:tid 1422] [client 103.65.237.124:52851] [client 103.65.237.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "abdNhNrCV4sh-le3M-2fGwAAAUk"]
[Mon Mar 16 08:23:34.146385 2026] [:error] [pid 62429:tid 62501] [client 103.65.237.124:52894] [client 103.65.237.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.vscode/sftp.json"] [unique_id "abdNhlewIPukhLCowEH5swAAAIU"]
[Mon Mar 16 09:40:22.208741 2026] [:error] [pid 1411:tid 1437] [client 70.187.72.47:55769] [client 70.187.72.47] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 70.187.72.47, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abdfhtrCV4sh-le3M-3I9AAAAVc"]
[Mon Mar 16 09:40:22.218100 2026] [:error] [pid 1411:tid 1437] [client 70.187.72.47:55769] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 16 11:05:10.960059 2026] [:error] [pid 62024:tid 62030] [client 173.239.236.132:51475] [client 173.239.236.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 173.239.236.132, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abdzZok-5rtjYvjqC_o5jAAAAAE"]
[Mon Mar 16 11:05:10.963092 2026] [:error] [pid 62024:tid 62030] [client 173.239.236.132:51475] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 16 11:05:12.069597 2026] [:error] [pid 62024:tid 62042] [client 173.239.236.132:51475] [client 173.239.236.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abdzaIk-5rtjYvjqC_o5wQAAAA0"]
[Mon Mar 16 11:05:12.428554 2026] [:error] [pid 62510:tid 62526] [client 173.239.236.178:45287] [client 173.239.236.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abdzaCE33_T9aKpoDdjpowAAAQ0"]
[Mon Mar 16 11:05:12.680960 2026] [:error] [pid 9249:tid 9266] [client 173.239.236.228:21033] [client 173.239.236.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abdzaAsX15dONR9F2wy3bAAAAUw"]
[Mon Mar 16 19:54:33.181010 2026] [:error] [pid 35838:tid 35844] [client 64.89.163.113:63963] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "abfveRroTe-x3JLtmo6V_gAAAAI"]
[Mon Mar 16 19:54:33.680029 2026] [:error] [pid 39154:tid 39174] [client 64.89.163.113:65289] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "abfveRgq1_qjm7J1LqsiOwAAAVE"]
[Mon Mar 16 19:54:34.195748 2026] [:error] [pid 1871:tid 1894] [client 64.89.163.113:63286] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "abfvejinTnZ8uiUPekE6bAAAAZU"]
[Mon Mar 16 19:54:34.694718 2026] [:error] [pid 35838:tid 35844] [client 64.89.163.113:51406] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "abfvehroTe-x3JLtmo6WMgAAAAI"]
[Mon Mar 16 19:54:35.334049 2026] [:error] [pid 35840:tid 35916] [client 64.89.163.113:64246] [client 64.89.163.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "abfve0JFzfEsmtPx-M0IngAAAJM"]
[Mon Mar 16 21:42:23.822991 2026] [:error] [pid 35840:tid 35901] [client 173.239.224.92:51313] [client 173.239.224.92] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.224.92, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abgIv0JFzfEsmtPx-M0ZwQAAAIQ"]
[Mon Mar 16 21:42:23.826002 2026] [:error] [pid 35840:tid 35901] [client 173.239.224.92:51313] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 17 03:32:32.370974 2026] [:error] [pid 45916:tid 45972] [client 35.237.196.255:51055] [client 35.237.196.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.237.196.255, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abha0LiS53PnClk_C9DEcAAAAEo"]
[Tue Mar 17 03:32:32.375925 2026] [:error] [pid 45916:tid 45972] [client 35.237.196.255:51055] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 03:32:35.601468 2026] [:error] [pid 45916:tid 45966] [client 35.237.196.255:51055] [client 35.237.196.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "abha07iS53PnClk_C9DEhAAAAEQ"]
[Tue Mar 17 03:32:36.259351 2026] [:error] [pid 46020:tid 46027] [client 35.237.196.255:53324] [client 35.237.196.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "abha1H-nCcd9BdzGdLeZcAAAAMU"]
[Tue Mar 17 03:32:37.143073 2026] [:error] [pid 46020:tid 46024] [client 35.237.196.255:53183] [client 35.237.196.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "abha1X-nCcd9BdzGdLeZdQAAAMI"]
[Tue Mar 17 03:32:37.930730 2026] [:error] [pid 46020:tid 46025] [client 35.237.196.255:52766] [client 35.237.196.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "abha1X-nCcd9BdzGdLeZegAAAMM"]
[Tue Mar 17 03:32:38.707204 2026] [:error] [pid 45917:tid 45990] [client 35.237.196.255:52778] [client 35.237.196.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "abha1hMMhmeqL5fT_hdQtQAAAIE"]
[Tue Mar 17 03:32:39.733363 2026] [:error] [pid 45916:tid 45969] [client 35.237.196.255:53900] [client 35.237.196.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "abha17iS53PnClk_C9DEiAAAAEc"]
[Tue Mar 17 03:32:41.108042 2026] [:error] [pid 45916:tid 45971] [client 35.237.196.255:52659] [client 35.237.196.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "abha2biS53PnClk_C9DEjwAAAEk"]
[Tue Mar 17 07:53:38.915246 2026] [:error] [pid 45915:tid 45948] [client 72.146.42.181:58763] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Tue Mar 17 07:53:39.151599 2026] [:error] [pid 45915:tid 45947] [client 72.146.42.181:58763] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Tue Mar 17 07:53:39.387902 2026] [:error] [pid 45915:tid 45934] [client 72.146.42.181:58763] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Tue Mar 17 07:53:39.624714 2026] [:error] [pid 45915:tid 45932] [client 72.146.42.181:58763] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Tue Mar 17 07:53:39.861532 2026] [:error] [pid 45915:tid 45938] [client 72.146.42.181:58763] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Tue Mar 17 07:53:40.096387 2026] [:error] [pid 45915:tid 45935] [client 72.146.42.181:58763] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Tue Mar 17 07:53:40.332890 2026] [:error] [pid 45915:tid 45941] [client 72.146.42.181:58763] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Tue Mar 17 07:53:40.570011 2026] [:error] [pid 45915:tid 45936] [client 72.146.42.181:58763] File does not exist: /usr/local/apache/htdocs/suspended-page/ws75.php
[Tue Mar 17 07:53:40.806021 2026] [:error] [pid 45915:tid 45937] [client 72.146.42.181:58763] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Mar 17 07:53:41.045356 2026] [:error] [pid 45915:tid 45945] [client 72.146.42.181:58763] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Tue Mar 17 07:53:41.278001 2026] [:error] [pid 45915:tid 45950] [client 72.146.42.181:58763] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "abiYBZh7U84ydzcrcncaTwAAABU"]
[Tue Mar 17 07:53:41.743183 2026] [:error] [pid 45917:tid 46008] [client 72.146.42.181:59898] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "abiYBRMMhmeqL5fT_hewxgAAAJM"]
[Tue Mar 17 07:53:42.209642 2026] [:error] [pid 45916:tid 45981] [client 72.146.42.181:59071] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "abiYBriS53PnClk_C9ASCQAAAFM"]
[Tue Mar 17 07:53:42.676674 2026] [:error] [pid 45917:tid 45989] [client 72.146.42.181:59851] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "abiYBhMMhmeqL5fT_hewxwAAAIA"]
[Tue Mar 17 07:53:43.143633 2026] [:error] [pid 45916:tid 45972] [client 72.146.42.181:65147] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "abiYB7iS53PnClk_C9ASDAAAAEo"]
[Tue Mar 17 07:53:43.608664 2026] [:error] [pid 45915:tid 45930] [client 72.146.42.181:54417] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "abiYB5h7U84ydzcrcncaUQAAAAE"]
[Tue Mar 17 07:53:44.074614 2026] [:error] [pid 46020:tid 46041] [client 72.146.42.181:59892] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "abiYCH-nCcd9BdzGdLc_NAAAANM"]
[Tue Mar 17 07:53:44.540756 2026] [:error] [pid 46020:tid 46023] [client 72.146.42.181:65140] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "abiYCH-nCcd9BdzGdLc_NwAAAME"]
[Tue Mar 17 07:53:45.005217 2026] [:error] [pid 22541:tid 22560] [client 72.146.42.181:65121] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "abiYCaS6JNY1-CTsTA8dywAAAQ4"]
[Tue Mar 17 07:53:45.470338 2026] [:error] [pid 22541:tid 22559] [client 72.146.42.181:4484] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "abiYCaS6JNY1-CTsTA8dzQAAAQ0"]
[Tue Mar 17 07:53:45.943311 2026] [:error] [pid 45917:tid 46007] [client 72.146.42.181:58805] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "abiYCRMMhmeqL5fT_hewywAAAJI"]
[Tue Mar 17 07:53:46.408804 2026] [:error] [pid 22541:tid 22553] [client 72.146.42.181:58764] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "abiYCqS6JNY1-CTsTA8d0QAAAQc"]
[Tue Mar 17 07:53:46.874867 2026] [:error] [pid 46020:tid 46040] [client 72.146.42.181:62380] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "abiYCn-nCcd9BdzGdLc_PAAAANI"]
[Tue Mar 17 07:53:47.341695 2026] [:error] [pid 45917:tid 45997] [client 72.146.42.181:54446] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "abiYCxMMhmeqL5fT_hewzAAAAIg"]
[Tue Mar 17 07:53:47.806471 2026] [:error] [pid 45916:tid 45982] [client 72.146.42.181:57259] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "abiYC7iS53PnClk_C9ASDgAAAFQ"]
[Tue Mar 17 07:53:48.272351 2026] [:error] [pid 22541:tid 22550] [client 72.146.42.181:58807] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "abiYDKS6JNY1-CTsTA8d1QAAAQQ"]
[Tue Mar 17 07:53:48.742157 2026] [:error] [pid 45915:tid 45939] [client 72.146.42.181:62382] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "abiYDJh7U84ydzcrcncaVwAAAAo"]
[Tue Mar 17 07:53:49.208942 2026] [:error] [pid 45915:tid 45930] [client 72.146.42.181:54416] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "abiYDZh7U84ydzcrcncaWgAAAAE"]
[Tue Mar 17 07:53:49.674466 2026] [:error] [pid 45915:tid 45943] [client 72.146.42.181:60125] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "abiYDZh7U84ydzcrcncaXAAAAA4"]
[Tue Mar 17 07:53:50.141874 2026] [:error] [pid 45917:tid 46010] [client 72.146.42.181:63864] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "abiYDhMMhmeqL5fT_hew0wAAAJU"]
[Tue Mar 17 07:53:50.607035 2026] [:error] [pid 22541:tid 22566] [client 72.146.42.181:54452] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "abiYDqS6JNY1-CTsTA8d2gAAARQ"]
[Tue Mar 17 07:53:51.073741 2026] [:error] [pid 22541:tid 22568] [client 72.146.42.181:62682] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "abiYD6S6JNY1-CTsTA8d2wAAARY"]
[Tue Mar 17 07:53:51.544377 2026] [:error] [pid 45916:tid 45965] [client 72.146.42.181:63842] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "abiYD7iS53PnClk_C9ASFQAAAEM"]
[Tue Mar 17 07:53:52.012087 2026] [:error] [pid 22541:tid 22560] [client 72.146.42.181:60105] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "abiYEKS6JNY1-CTsTA8d3wAAAQ4"]
[Tue Mar 17 07:53:52.490093 2026] [:error] [pid 22541:tid 22563] [client 72.146.42.181:57275] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "abiYEKS6JNY1-CTsTA8d4AAAARE"]
[Tue Mar 17 07:53:52.956904 2026] [:error] [pid 22541:tid 22559] [client 72.146.42.181:58792] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "abiYEKS6JNY1-CTsTA8d5AAAAQ0"]
[Tue Mar 17 07:53:53.422353 2026] [:error] [pid 22541:tid 22566] [client 72.146.42.181:63809] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "abiYEaS6JNY1-CTsTA8d5QAAARQ"]
[Tue Mar 17 07:53:53.888134 2026] [:error] [pid 45916:tid 45967] [client 72.146.42.181:54429] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "abiYEbiS53PnClk_C9ASGAAAAEU"]
[Tue Mar 17 07:53:54.355834 2026] [:error] [pid 46020:tid 46032] [client 72.146.42.181:63862] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "abiYEn-nCcd9BdzGdLc_RgAAAMo"]
[Tue Mar 17 07:53:54.820814 2026] [:error] [pid 45916:tid 45962] [client 72.146.42.181:58784] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "abiYEriS53PnClk_C9ASGQAAAEA"]
[Tue Mar 17 07:53:55.285963 2026] [:error] [pid 22541:tid 22564] [client 72.146.42.181:54411] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "abiYE6S6JNY1-CTsTA8d6wAAARI"]
[Tue Mar 17 07:53:55.751740 2026] [:error] [pid 22541:tid 22549] [client 72.146.42.181:53901] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "abiYE6S6JNY1-CTsTA8d7gAAAQM"]
[Tue Mar 17 07:53:56.225430 2026] [:error] [pid 45916:tid 45968] [client 72.146.42.181:54413] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "abiYFLiS53PnClk_C9ASHwAAAEY"]
[Tue Mar 17 07:53:56.692433 2026] [:error] [pid 45916:tid 45981] [client 72.146.42.181:62682] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "abiYFLiS53PnClk_C9ASIAAAAFM"]
[Tue Mar 17 07:53:57.157920 2026] [:error] [pid 46020:tid 46042] [client 72.146.42.181:62676] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "abiYFX-nCcd9BdzGdLc_SQAAANQ"]
[Tue Mar 17 07:53:57.627990 2026] [:error] [pid 22541:tid 22566] [client 72.146.42.181:54401] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "abiYFaS6JNY1-CTsTA8d8QAAARQ"]
[Tue Mar 17 07:53:58.093019 2026] [:error] [pid 22541:tid 22551] [client 72.146.42.181:58793] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "abiYFqS6JNY1-CTsTA8d9QAAAQU"]
[Tue Mar 17 07:53:58.557811 2026] [:error] [pid 22541:tid 22548] [client 72.146.42.181:53911] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "abiYFqS6JNY1-CTsTA8d-QAAAQI"]
[Tue Mar 17 07:53:59.025906 2026] [:error] [pid 22541:tid 22550] [client 72.146.42.181:62947] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "abiYF6S6JNY1-CTsTA8d_QAAAQQ"]
[Tue Mar 17 07:53:59.496783 2026] [:error] [pid 46020:tid 46045] [client 72.146.42.181:59070] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "abiYF3-nCcd9BdzGdLc_SwAAANc"]
[Tue Mar 17 07:53:59.963097 2026] [:error] [pid 45917:tid 46001] [client 72.146.42.181:62666] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "abiYFxMMhmeqL5fT_hew2wAAAIw"]
[Tue Mar 17 07:54:00.430805 2026] [:error] [pid 45916:tid 45969] [client 72.146.42.181:58758] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "abiYGLiS53PnClk_C9ASJgAAAEc"]
[Tue Mar 17 07:54:00.896347 2026] [:error] [pid 46020:tid 46027] [client 72.146.42.181:60822] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "abiYGH-nCcd9BdzGdLc_UAAAAMU"]
[Tue Mar 17 07:54:01.362081 2026] [:error] [pid 22541:tid 22548] [client 72.146.42.181:53944] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "abiYGaS6JNY1-CTsTA8d_gAAAQI"]
[Tue Mar 17 07:54:01.827826 2026] [:error] [pid 45917:tid 46003] [client 72.146.42.181:57658] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "abiYGRMMhmeqL5fT_hew3wAAAI4"]
[Tue Mar 17 07:54:02.297219 2026] [:error] [pid 46020:tid 46037] [client 72.146.42.181:53904] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "abiYGn-nCcd9BdzGdLc_UwAAAM8"]
[Tue Mar 17 07:54:02.762999 2026] [:error] [pid 46020:tid 46025] [client 72.146.42.181:62709] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "abiYGn-nCcd9BdzGdLc_VgAAAMM"]
[Tue Mar 17 07:54:03.229673 2026] [:error] [pid 22541:tid 22547] [client 72.146.42.181:62702] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "abiYG6S6JNY1-CTsTA8eAgAAAQE"]
[Tue Mar 17 07:54:03.700412 2026] [:error] [pid 22541:tid 22564] [client 72.146.42.181:57648] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "abiYG6S6JNY1-CTsTA8eBgAAARI"]
[Tue Mar 17 07:54:04.166949 2026] [:error] [pid 45915:tid 45945] [client 72.146.42.181:62938] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "abiYHJh7U84ydzcrcncabQAAABA"]
[Tue Mar 17 07:54:04.632194 2026] [:error] [pid 22541:tid 22565] [client 72.146.42.181:63856] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "abiYHKS6JNY1-CTsTA8eDAAAARM"]
[Tue Mar 17 07:54:05.099664 2026] [:error] [pid 45916:tid 45967] [client 72.146.42.181:60801] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "abiYHbiS53PnClk_C9ASMQAAAEU"]
[Tue Mar 17 07:54:05.566456 2026] [:error] [pid 22541:tid 22570] [client 72.146.42.181:62673] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "abiYHaS6JNY1-CTsTA8eDgAAARg"]
[Tue Mar 17 07:54:06.033282 2026] [:error] [pid 46020:tid 46037] [client 72.146.42.181:57607] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "abiYHn-nCcd9BdzGdLc_XAAAAM8"]
[Tue Mar 17 07:54:06.501335 2026] [:error] [pid 46020:tid 46043] [client 72.146.42.181:63865] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "abiYHn-nCcd9BdzGdLc_YgAAANU"]
[Tue Mar 17 07:54:06.970450 2026] [:error] [pid 45915:tid 45951] [client 72.146.42.181:65214] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "abiYHph7U84ydzcrcncadQAAABY"]
[Tue Mar 17 07:54:07.436522 2026] [:error] [pid 46020:tid 46033] [client 72.146.42.181:62691] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "abiYH3-nCcd9BdzGdLc_aAAAAMs"]
[Tue Mar 17 07:54:07.901425 2026] [:error] [pid 22541:tid 22551] [client 72.146.42.181:4918] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "abiYH6S6JNY1-CTsTA8eEgAAAQU"]
[Tue Mar 17 07:54:08.369879 2026] [:error] [pid 46020:tid 46025] [client 72.146.42.181:62701] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "abiYIH-nCcd9BdzGdLc_bAAAAMM"]
[Tue Mar 17 07:54:08.834942 2026] [:error] [pid 22541:tid 22558] [client 72.146.42.181:53924] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "abiYIKS6JNY1-CTsTA8eFAAAAQw"]
[Tue Mar 17 07:54:09.302652 2026] [:error] [pid 45915:tid 45939] [client 72.146.42.181:65202] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "abiYIZh7U84ydzcrcncadgAAAAo"]
[Tue Mar 17 07:54:09.768175 2026] [:error] [pid 46020:tid 46030] [client 72.146.42.181:4892] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "abiYIX-nCcd9BdzGdLc_bwAAAMg"]
[Tue Mar 17 07:54:10.247028 2026] [:error] [pid 46020:tid 46036] [client 72.146.42.181:56896] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "abiYIn-nCcd9BdzGdLc_cgAAAM4"]
[Tue Mar 17 07:54:10.714205 2026] [:error] [pid 46020:tid 46025] [client 72.146.42.181:4745] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "abiYIn-nCcd9BdzGdLc_dwAAAMM"]
[Tue Mar 17 07:54:11.185512 2026] [:error] [pid 22541:tid 22546] [client 72.146.42.181:56907] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "abiYI6S6JNY1-CTsTA8eJAAAAQA"]
[Tue Mar 17 07:54:11.649918 2026] [:error] [pid 46020:tid 46029] [client 72.146.42.181:56909] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "abiYI3-nCcd9BdzGdLc_iAAAAMc"]
[Tue Mar 17 07:54:12.115549 2026] [:error] [pid 22541:tid 22570] [client 72.146.42.181:53910] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "abiYJKS6JNY1-CTsTA8eJQAAARg"]
[Tue Mar 17 07:54:12.585774 2026] [:error] [pid 22541:tid 22552] [client 72.146.42.181:56931] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "abiYJKS6JNY1-CTsTA8eJgAAAQY"]
[Tue Mar 17 07:54:13.053438 2026] [:error] [pid 46020:tid 46023] [client 72.146.42.181:57619] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "abiYJX-nCcd9BdzGdLc_lAAAAME"]
[Tue Mar 17 07:54:13.528086 2026] [:error] [pid 46020:tid 46032] [client 72.146.42.181:62684] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "abiYJX-nCcd9BdzGdLc_lwAAAMo"]
[Tue Mar 17 07:54:14.038636 2026] [:error] [pid 46020:tid 46035] [client 72.146.42.181:4795] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "abiYJn-nCcd9BdzGdLc_mQAAAM0"]
[Tue Mar 17 07:54:14.507645 2026] [:error] [pid 45915:tid 45942] [client 72.146.42.181:62672] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "abiYJph7U84ydzcrcncaegAAAA0"]
[Tue Mar 17 07:54:14.997794 2026] [:error] [pid 22541:tid 22554] [client 72.146.42.181:4773] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "abiYJqS6JNY1-CTsTA8eLQAAAQg"]
[Tue Mar 17 07:54:15.470052 2026] [:error] [pid 45917:tid 46001] [client 72.146.42.181:53899] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "abiYJxMMhmeqL5fT_hexEQAAAIw"]
[Tue Mar 17 07:54:15.939589 2026] [:error] [pid 45916:tid 45973] [client 72.146.42.181:65207] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "abiYJ7iS53PnClk_C9ASYAAAAEs"]
[Tue Mar 17 07:54:16.423015 2026] [:error] [pid 22541:tid 22546] [client 72.146.42.181:4748] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "abiYKKS6JNY1-CTsTA8eMAAAAQA"]
[Tue Mar 17 07:54:16.893617 2026] [:error] [pid 46020:tid 46034] [client 72.146.42.181:62975] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "abiYKH-nCcd9BdzGdLc_ngAAAMw"]
[Tue Mar 17 07:54:17.367231 2026] [:error] [pid 46020:tid 46036] [client 72.146.42.181:65175] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "abiYKX-nCcd9BdzGdLc_nwAAAM4"]
[Tue Mar 17 07:54:17.853673 2026] [:error] [pid 46020:tid 46027] [client 72.146.42.181:61115] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "abiYKX-nCcd9BdzGdLc_ogAAAMU"]
[Tue Mar 17 07:54:18.339329 2026] [:error] [pid 45916:tid 45974] [client 72.146.42.181:61092] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "abiYKriS53PnClk_C9ASZQAAAEw"]
[Tue Mar 17 07:54:18.847004 2026] [:error] [pid 45916:tid 45965] [client 72.146.42.181:57648] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "abiYKriS53PnClk_C9ASaAAAAEM"]
[Tue Mar 17 07:54:19.328567 2026] [:error] [pid 46020:tid 46045] [client 72.146.42.181:56953] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "abiYK3-nCcd9BdzGdLc_pQAAANc"]
[Tue Mar 17 07:54:19.802899 2026] [:error] [pid 46020:tid 46030] [client 72.146.42.181:61112] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "abiYK3-nCcd9BdzGdLc_pgAAAMg"]
[Tue Mar 17 07:54:20.299054 2026] [:error] [pid 22541:tid 22546] [client 72.146.42.181:57629] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "abiYLKS6JNY1-CTsTA8eOAAAAQA"]
[Tue Mar 17 07:54:20.809978 2026] [:error] [pid 46020:tid 46027] [client 72.146.42.181:62964] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xxw.php"] [unique_id "abiYLH-nCcd9BdzGdLc_qQAAAMU"]
[Tue Mar 17 07:54:21.312983 2026] [:error] [pid 46020:tid 46040] [client 72.146.42.181:56952] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xxw.php"] [unique_id "abiYLX-nCcd9BdzGdLc_rQAAANI"]
[Tue Mar 17 07:54:21.782188 2026] [:error] [pid 46020:tid 46030] [client 72.146.42.181:53916] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xxw.php"] [unique_id "abiYLX-nCcd9BdzGdLc_sAAAAMg"]
[Tue Mar 17 07:54:22.253852 2026] [:error] [pid 46020:tid 46036] [client 72.146.42.181:4905] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xxw.php"] [unique_id "abiYLn-nCcd9BdzGdLc_twAAAM4"]
[Tue Mar 17 07:54:22.720230 2026] [:error] [pid 22541:tid 22562] [client 72.146.42.181:65186] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "abiYLqS6JNY1-CTsTA8ePQAAARA"]
[Tue Mar 17 07:54:23.186807 2026] [:error] [pid 22541:tid 22560] [client 72.146.42.181:65162] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "abiYL6S6JNY1-CTsTA8ePgAAAQ4"]
[Tue Mar 17 07:54:23.652242 2026] [:error] [pid 45916:tid 45972] [client 72.146.42.181:62959] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "abiYL7iS53PnClk_C9AScQAAAEo"]
[Tue Mar 17 07:54:24.146459 2026] [:error] [pid 45915:tid 45942] [client 72.146.42.181:56922] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "abiYMJh7U84ydzcrcncaggAAAA0"]
[Tue Mar 17 07:54:24.616698 2026] [:error] [pid 45915:tid 45945] [client 72.146.42.181:65197] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "abiYMJh7U84ydzcrcncagwAAABA"]
[Tue Mar 17 07:54:25.113960 2026] [:error] [pid 45915:tid 45929] [client 72.146.42.181:65189] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "abiYMZh7U84ydzcrcncaiAAAAAA"]
[Tue Mar 17 07:54:25.612132 2026] [:error] [pid 45916:tid 45969] [client 72.146.42.181:65169] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "abiYMbiS53PnClk_C9ASdgAAAEc"]
[Tue Mar 17 07:54:26.190757 2026] [:error] [pid 45916:tid 45981] [client 72.146.42.181:4991] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "abiYMriS53PnClk_C9ASeQAAAFM"]
[Tue Mar 17 07:54:26.662918 2026] [:error] [pid 46020:tid 46025] [client 72.146.42.181:4928] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "abiYMn-nCcd9BdzGdLc_wQAAAMM"]
[Tue Mar 17 07:54:27.138532 2026] [:error] [pid 45917:tid 46013] [client 72.146.42.181:53909] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "abiYMxMMhmeqL5fT_hexFgAAAJg"]
[Tue Mar 17 07:54:27.653464 2026] [:error] [pid 46020:tid 46023] [client 72.146.42.181:4638] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "abiYM3-nCcd9BdzGdLc_xgAAAME"]
[Tue Mar 17 07:54:28.126744 2026] [:error] [pid 22541:tid 22552] [client 72.146.42.181:4924] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "abiYNKS6JNY1-CTsTA8eRAAAAQY"]
[Tue Mar 17 07:54:28.635372 2026] [:error] [pid 22541:tid 22556] [client 72.146.42.181:56908] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "abiYNKS6JNY1-CTsTA8eSAAAAQo"]
[Tue Mar 17 07:54:29.157477 2026] [:error] [pid 22541:tid 22569] [client 72.146.42.181:56915] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "abiYNaS6JNY1-CTsTA8eSwAAARc"]
[Tue Mar 17 07:54:29.627650 2026] [:error] [pid 45917:tid 45992] [client 72.146.42.181:62936] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "abiYNRMMhmeqL5fT_hexGAAAAIM"]
[Tue Mar 17 07:54:30.094980 2026] [:error] [pid 22541:tid 22566] [client 72.146.42.181:65212] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "abiYNqS6JNY1-CTsTA8eUAAAARQ"]
[Tue Mar 17 07:54:30.564425 2026] [:error] [pid 45917:tid 45996] [client 72.146.42.181:61059] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "abiYNhMMhmeqL5fT_hexGwAAAIc"]
[Tue Mar 17 07:54:31.033063 2026] [:error] [pid 22541:tid 22567] [client 72.146.42.181:4906] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "abiYN6S6JNY1-CTsTA8eVQAAARU"]
[Tue Mar 17 07:54:31.497657 2026] [:error] [pid 46020:tid 46029] [client 72.146.42.181:4605] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "abiYN3-nCcd9BdzGdLc_0AAAAMc"]
[Tue Mar 17 07:54:31.963540 2026] [:error] [pid 45915:tid 45936] [client 72.146.42.181:61104] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "abiYN5h7U84ydzcrcncalQAAAAc"]
[Tue Mar 17 07:54:32.434895 2026] [:error] [pid 22541:tid 22568] [client 72.146.42.181:61113] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "abiYOKS6JNY1-CTsTA8eWQAAARY"]
[Tue Mar 17 07:54:32.930291 2026] [:error] [pid 46020:tid 46029] [client 72.146.42.181:61105] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "abiYOH-nCcd9BdzGdLc_2QAAAMc"]
[Tue Mar 17 07:54:33.419121 2026] [:error] [pid 22541:tid 22553] [client 72.146.42.181:56918] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "abiYOaS6JNY1-CTsTA8eXgAAAQc"]
[Tue Mar 17 07:54:33.899823 2026] [:error] [pid 45917:tid 45997] [client 72.146.42.181:62946] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "abiYORMMhmeqL5fT_hexIwAAAIg"]
[Tue Mar 17 07:54:34.435209 2026] [:error] [pid 45917:tid 45993] [client 72.146.42.181:65154] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "abiYOhMMhmeqL5fT_hexJQAAAIQ"]
[Tue Mar 17 07:54:34.989617 2026] [:error] [pid 22541:tid 22562] [client 72.146.42.181:4883] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "abiYOqS6JNY1-CTsTA8eXwAAARA"]
[Tue Mar 17 07:54:35.456472 2026] [:error] [pid 46020:tid 46028] [client 72.146.42.181:4629] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "abiYO3-nCcd9BdzGdLc_4wAAAMY"]
[Tue Mar 17 07:54:35.982713 2026] [:error] [pid 45917:tid 46003] [client 72.146.42.181:4921] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "abiYOxMMhmeqL5fT_hexLwAAAI4"]
[Tue Mar 17 07:54:36.448063 2026] [:error] [pid 46020:tid 46034] [client 72.146.42.181:4791] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "abiYPH-nCcd9BdzGdLc_6AAAAMw"]
[Tue Mar 17 07:54:36.912670 2026] [:error] [pid 45917:tid 46009] [client 72.146.42.181:4935] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "abiYPBMMhmeqL5fT_hexMQAAAJQ"]
[Tue Mar 17 07:54:37.378554 2026] [:error] [pid 45915:tid 45929] [client 72.146.42.181:65165] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "abiYPZh7U84ydzcrcncalgAAAAA"]
[Tue Mar 17 07:54:37.843618 2026] [:error] [pid 22541:tid 22563] [client 72.146.42.181:62944] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "abiYPaS6JNY1-CTsTA8eZQAAARE"]
[Tue Mar 17 07:54:38.309742 2026] [:error] [pid 45916:tid 45980] [client 72.146.42.181:56949] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "abiYPriS53PnClk_C9ASiQAAAFI"]
[Tue Mar 17 07:54:38.780661 2026] [:error] [pid 46020:tid 46028] [client 72.146.42.181:4799] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "abiYPn-nCcd9BdzGdLc_7QAAAMY"]
[Tue Mar 17 07:54:39.246780 2026] [:error] [pid 46020:tid 46032] [client 72.146.42.181:4958] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "abiYP3-nCcd9BdzGdLc_7gAAAMo"]
[Tue Mar 17 07:54:39.711532 2026] [:error] [pid 22541:tid 22552] [client 72.146.42.181:4746] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "abiYP6S6JNY1-CTsTA8eaAAAAQY"]
[Tue Mar 17 07:54:40.180544 2026] [:error] [pid 22541:tid 22556] [client 72.146.42.181:4769] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/wp-blog.php"] [unique_id "abiYQKS6JNY1-CTsTA8eagAAAQo"]
[Tue Mar 17 07:54:40.645761 2026] [:error] [pid 46020:tid 46025] [client 72.146.42.181:65177] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/wp-blog.php"] [unique_id "abiYQH-nCcd9BdzGdLc_-QAAAMM"]
[Tue Mar 17 07:54:41.358158 2026] [:error] [pid 46020:tid 46038] [client 72.146.42.181:4625] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Tue Mar 17 07:54:41.595398 2026] [:error] [pid 46020:tid 46036] [client 72.146.42.181:4625] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Tue Mar 17 07:54:41.831402 2026] [:error] [pid 46020:tid 46043] [client 72.146.42.181:4625] File does not exist: /usr/local/apache/htdocs/suspended-page/drhunthq.php
[Tue Mar 17 07:54:42.303470 2026] [:error] [pid 46020:tid 46025] [client 72.146.42.181:4625] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Tue Mar 17 07:54:42.539434 2026] [:error] [pid 46020:tid 46046] [client 72.146.42.181:4625] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Tue Mar 17 07:54:42.775279 2026] [:error] [pid 46020:tid 46039] [client 72.146.42.181:4625] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Tue Mar 17 07:54:43.010146 2026] [:error] [pid 46020:tid 46037] [client 72.146.42.181:4625] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Tue Mar 17 07:54:43.249176 2026] [:error] [pid 46020:tid 46045] [client 72.146.42.181:4625] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Tue Mar 17 07:54:43.484980 2026] [:error] [pid 46020:tid 46036] [client 72.146.42.181:4625] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Tue Mar 17 07:54:43.718545 2026] [:error] [pid 46020:tid 46030] [client 72.146.42.181:4625] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "abiYQ3-nCcd9BdzGdLdAHgAAAMg"]
[Tue Mar 17 07:54:44.186930 2026] [:error] [pid 46020:tid 46042] [client 72.146.42.181:61067] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "abiYRH-nCcd9BdzGdLdAIQAAANQ"]
[Tue Mar 17 07:54:44.653056 2026] [:error] [pid 45916:tid 45966] [client 72.146.42.181:4634] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "abiYRLiS53PnClk_C9ASvQAAAEQ"]
[Tue Mar 17 07:54:45.119647 2026] [:error] [pid 22541:tid 22555] [client 72.146.42.181:4649] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "abiYRaS6JNY1-CTsTA8eiQAAAQk"]
[Tue Mar 17 07:54:45.585147 2026] [:error] [pid 45917:tid 45995] [client 72.146.42.181:4612] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "abiYRRMMhmeqL5fT_hexPQAAAIY"]
[Tue Mar 17 07:54:46.054627 2026] [:error] [pid 22541:tid 22553] [client 72.146.42.181:4978] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "abiYRqS6JNY1-CTsTA8ejAAAAQc"]
[Tue Mar 17 07:54:46.521578 2026] [:error] [pid 46020:tid 46036] [client 72.146.42.181:65156] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "abiYRn-nCcd9BdzGdLdAJQAAAM4"]
[Tue Mar 17 07:54:46.989465 2026] [:error] [pid 45915:tid 45950] [client 72.146.42.181:65199] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "abiYRph7U84ydzcrcncapQAAABU"]
[Tue Mar 17 07:54:47.457610 2026] [:error] [pid 46020:tid 46029] [client 72.146.42.181:4754] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "abiYR3-nCcd9BdzGdLdAKwAAAMc"]
[Tue Mar 17 07:54:47.923282 2026] [:error] [pid 45917:tid 46003] [client 72.146.42.181:4771] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "abiYRxMMhmeqL5fT_hexQQAAAI4"]
[Tue Mar 17 07:54:48.388394 2026] [:error] [pid 45915:tid 45935] [client 72.146.42.181:4891] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "abiYSJh7U84ydzcrcncaqQAAAAY"]
[Tue Mar 17 07:54:48.855139 2026] [:error] [pid 45916:tid 45964] [client 72.146.42.181:63869] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "abiYSLiS53PnClk_C9ASwQAAAEI"]
[Tue Mar 17 07:54:49.322382 2026] [:error] [pid 46020:tid 46031] [client 72.146.42.181:56928] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "abiYSX-nCcd9BdzGdLdALwAAAMk"]
[Tue Mar 17 07:54:49.792899 2026] [:error] [pid 45915:tid 45946] [client 72.146.42.181:4641] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "abiYSZh7U84ydzcrcncaqwAAABE"]
[Tue Mar 17 07:54:50.268709 2026] [:error] [pid 22541:tid 22547] [client 72.146.42.181:4749] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "abiYSqS6JNY1-CTsTA8ejwAAAQE"]
[Tue Mar 17 07:54:50.734893 2026] [:error] [pid 46020:tid 46045] [client 72.146.42.181:4339] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "abiYSn-nCcd9BdzGdLdANgAAANc"]
[Tue Mar 17 07:54:51.201064 2026] [:error] [pid 46020:tid 46034] [client 72.146.42.181:4961] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "abiYS3-nCcd9BdzGdLdANwAAAMw"]
[Tue Mar 17 07:54:51.665798 2026] [:error] [pid 45917:tid 45997] [client 72.146.42.181:61076] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "abiYSxMMhmeqL5fT_hexTAAAAIg"]
[Tue Mar 17 07:54:52.136555 2026] [:error] [pid 45917:tid 46005] [client 72.146.42.181:4781] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "abiYTBMMhmeqL5fT_hexTQAAAJA"]
[Tue Mar 17 07:54:52.603643 2026] [:error] [pid 46020:tid 46038] [client 72.146.42.181:61056] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "abiYTH-nCcd9BdzGdLdAPAAAANA"]
[Tue Mar 17 07:54:53.075343 2026] [:error] [pid 22541:tid 22569] [client 72.146.42.181:4621] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "abiYTaS6JNY1-CTsTA8ekQAAARc"]
[Tue Mar 17 07:54:53.540893 2026] [:error] [pid 46020:tid 46029] [client 72.146.42.181:65153] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "abiYTX-nCcd9BdzGdLdAQQAAAMc"]
[Tue Mar 17 07:54:54.005393 2026] [:error] [pid 22541:tid 22567] [client 72.146.42.181:56900] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "abiYTqS6JNY1-CTsTA8elgAAARU"]
[Tue Mar 17 07:54:54.490545 2026] [:error] [pid 45916:tid 45974] [client 72.146.42.181:4593] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "abiYTriS53PnClk_C9ASyAAAAEw"]
[Tue Mar 17 07:54:54.957498 2026] [:error] [pid 22541:tid 22548] [client 72.146.42.181:4571] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "abiYTqS6JNY1-CTsTA8elwAAAQI"]
[Tue Mar 17 07:54:55.423402 2026] [:error] [pid 45916:tid 45976] [client 72.146.42.181:62378] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "abiYT7iS53PnClk_C9ASyQAAAE4"]
[Tue Mar 17 07:54:55.888419 2026] [:error] [pid 46020:tid 46030] [client 72.146.42.181:4579] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "abiYT3-nCcd9BdzGdLdATgAAAMg"]
[Tue Mar 17 07:54:56.354767 2026] [:error] [pid 45917:tid 46002] [client 72.146.42.181:61820] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "abiYUBMMhmeqL5fT_hexUgAAAI0"]
[Tue Mar 17 07:54:56.828551 2026] [:error] [pid 45916:tid 45980] [client 72.146.42.181:64929] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "abiYULiS53PnClk_C9ASywAAAFI"]
[Tue Mar 17 07:54:57.303964 2026] [:error] [pid 45917:tid 45996] [client 72.146.42.181:61762] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "abiYURMMhmeqL5fT_hexVQAAAIc"]
[Tue Mar 17 07:54:57.769271 2026] [:error] [pid 45916:tid 45966] [client 72.146.42.181:4637] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "abiYUbiS53PnClk_C9ASzgAAAEQ"]
[Tue Mar 17 07:54:58.234535 2026] [:error] [pid 45916:tid 45972] [client 72.146.42.181:4551] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "abiYUriS53PnClk_C9AS0AAAAEo"]
[Tue Mar 17 07:54:58.698673 2026] [:error] [pid 22541:tid 22557] [client 72.146.42.181:62921] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "abiYUqS6JNY1-CTsTA8enAAAAQs"]
[Tue Mar 17 07:54:59.170434 2026] [:error] [pid 45917:tid 46006] [client 72.146.42.181:4597] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "abiYUxMMhmeqL5fT_hexVwAAAJE"]
[Tue Mar 17 07:54:59.636274 2026] [:error] [pid 46020:tid 46030] [client 72.146.42.181:64907] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "abiYU3-nCcd9BdzGdLdAUwAAAMg"]
[Tue Mar 17 07:55:00.102759 2026] [:error] [pid 46020:tid 46024] [client 72.146.42.181:4580] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "abiYVH-nCcd9BdzGdLdAVgAAAMI"]
[Tue Mar 17 07:55:00.569928 2026] [:error] [pid 22541:tid 22551] [client 72.146.42.181:57569] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "abiYVKS6JNY1-CTsTA8eogAAAQU"]
[Tue Mar 17 07:55:01.038198 2026] [:error] [pid 46020:tid 46022] [client 72.146.42.181:4624] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "abiYVX-nCcd9BdzGdLdAWgAAAMA"]
[Tue Mar 17 07:55:01.526807 2026] [:error] [pid 46020:tid 46040] [client 72.146.42.181:57588] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "abiYVX-nCcd9BdzGdLdAXAAAANI"]
[Tue Mar 17 07:55:01.992079 2026] [:error] [pid 45916:tid 45981] [client 72.146.42.181:4631] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "abiYVbiS53PnClk_C9AS0gAAAFM"]
[Tue Mar 17 07:55:02.462065 2026] [:error] [pid 45916:tid 45984] [client 72.146.42.181:61063] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "abiYVriS53PnClk_C9AS1AAAAFY"]
[Tue Mar 17 07:55:02.930418 2026] [:error] [pid 45916:tid 45962] [client 72.146.42.181:56082] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "abiYVriS53PnClk_C9AS2AAAAEA"]
[Tue Mar 17 07:55:03.398149 2026] [:error] [pid 22541:tid 22553] [client 72.146.42.181:4644] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "abiYV6S6JNY1-CTsTA8epgAAAQc"]
[Tue Mar 17 07:55:03.865888 2026] [:error] [pid 45917:tid 46009] [client 72.146.42.181:61102] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "abiYVxMMhmeqL5fT_hexXgAAAJQ"]
[Tue Mar 17 07:55:04.337805 2026] [:error] [pid 45917:tid 45997] [client 72.146.42.181:62921] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "abiYWBMMhmeqL5fT_hexXwAAAIg"]
[Tue Mar 17 07:55:04.807409 2026] [:error] [pid 22541:tid 22563] [client 72.146.42.181:57019] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "abiYWKS6JNY1-CTsTA8eqgAAARE"]
[Tue Mar 17 07:55:05.275432 2026] [:error] [pid 45917:tid 46011] [client 72.146.42.181:56994] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "abiYWRMMhmeqL5fT_hexYQAAAJY"]
[Tue Mar 17 07:55:05.740995 2026] [:error] [pid 45917:tid 46013] [client 72.146.42.181:61766] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "abiYWRMMhmeqL5fT_hexYwAAAJg"]
[Tue Mar 17 07:55:06.206718 2026] [:error] [pid 45916:tid 45968] [client 72.146.42.181:61792] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "abiYWriS53PnClk_C9AS4AAAAEY"]
[Tue Mar 17 07:55:06.672039 2026] [:error] [pid 22541:tid 22556] [client 72.146.42.181:62935] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "abiYWqS6JNY1-CTsTA8exAAAAQo"]
[Tue Mar 17 07:55:07.139120 2026] [:error] [pid 45917:tid 46011] [client 72.146.42.181:57560] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "abiYWxMMhmeqL5fT_hexcwAAAJY"]
[Tue Mar 17 07:55:07.603987 2026] [:error] [pid 45915:tid 45951] [client 72.146.42.181:57901] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "abiYW5h7U84ydzcrcncauQAAABY"]
[Tue Mar 17 07:55:08.068899 2026] [:error] [pid 45917:tid 46008] [client 72.146.42.181:56914] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "abiYXBMMhmeqL5fT_hexfAAAAJM"]
[Tue Mar 17 07:55:08.539867 2026] [:error] [pid 45916:tid 45971] [client 72.146.42.181:61766] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "abiYXLiS53PnClk_C9AS5AAAAEk"]
[Tue Mar 17 07:55:09.020448 2026] [:error] [pid 45917:tid 46006] [client 72.146.42.181:56093] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "abiYXRMMhmeqL5fT_hexgAAAAJE"]
[Tue Mar 17 07:55:09.513339 2026] [:error] [pid 45916:tid 45983] [client 72.146.42.181:65176] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "abiYXbiS53PnClk_C9AS6QAAAFU"]
[Tue Mar 17 07:55:09.980225 2026] [:error] [pid 46020:tid 46046] [client 72.146.42.181:4736] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "abiYXX-nCcd9BdzGdLdAZwAAANg"]
[Tue Mar 17 07:55:10.448208 2026] [:error] [pid 46020:tid 46029] [client 72.146.42.181:56125] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "abiYXn-nCcd9BdzGdLdAawAAAMc"]
[Tue Mar 17 07:55:10.922353 2026] [:error] [pid 45916:tid 45975] [client 72.146.42.181:56117] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "abiYXriS53PnClk_C9AS7gAAAE0"]
[Tue Mar 17 07:55:11.402768 2026] [:error] [pid 45916:tid 45971] [client 72.146.42.181:4614] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "abiYX7iS53PnClk_C9AS8AAAAEk"]
[Tue Mar 17 07:55:11.903192 2026] [:error] [pid 45916:tid 45970] [client 72.146.42.181:57013] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "abiYX7iS53PnClk_C9AS8QAAAEg"]
[Tue Mar 17 07:55:12.400968 2026] [:error] [pid 46020:tid 46038] [client 72.146.42.181:63121] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "abiYYH-nCcd9BdzGdLdAcAAAANA"]
[Tue Mar 17 07:55:12.869782 2026] [:error] [pid 45917:tid 46000] [client 72.146.42.181:57014] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "abiYYBMMhmeqL5fT_hexhQAAAIs"]
[Tue Mar 17 07:55:13.352226 2026] [:error] [pid 46020:tid 46030] [client 72.146.42.181:64942] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "abiYYX-nCcd9BdzGdLdAcwAAAMg"]
[Tue Mar 17 07:55:13.861884 2026] [:error] [pid 22541:tid 22546] [client 72.146.42.181:64957] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "abiYYaS6JNY1-CTsTA8e2QAAAQA"]
[Tue Mar 17 07:55:14.327569 2026] [:error] [pid 45917:tid 45999] [client 72.146.42.181:61812] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "abiYYhMMhmeqL5fT_hexigAAAIo"]
[Tue Mar 17 07:55:14.798859 2026] [:error] [pid 46020:tid 46036] [client 72.146.42.181:61788] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "abiYYn-nCcd9BdzGdLdAegAAAM4"]
[Tue Mar 17 07:55:15.323385 2026] [:error] [pid 45917:tid 46008] [client 72.146.42.181:4623] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "abiYYxMMhmeqL5fT_hexjgAAAJM"]
[Tue Mar 17 07:55:15.804536 2026] [:error] [pid 45917:tid 46001] [client 72.146.42.181:61813] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "abiYYxMMhmeqL5fT_hexkQAAAIw"]
[Tue Mar 17 07:55:16.294871 2026] [:error] [pid 46020:tid 46038] [client 72.146.42.181:57598] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "abiYZH-nCcd9BdzGdLdAfgAAANA"]
[Tue Mar 17 07:55:16.768968 2026] [:error] [pid 46020:tid 46033] [client 72.146.42.181:64914] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "abiYZH-nCcd9BdzGdLdAgAAAAMs"]
[Tue Mar 17 07:55:17.241280 2026] [:error] [pid 22541:tid 22562] [client 72.146.42.181:63104] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "abiYZaS6JNY1-CTsTA8e4AAAARA"]
[Tue Mar 17 07:55:17.779145 2026] [:error] [pid 45915:tid 45932] [client 72.146.42.181:63127] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "abiYZZh7U84ydzcrcncavgAAAAM"]
[Tue Mar 17 07:55:18.288832 2026] [:error] [pid 22541:tid 22566] [client 72.146.42.181:4560] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "abiYZqS6JNY1-CTsTA8e5gAAARQ"]
[Tue Mar 17 07:55:18.762322 2026] [:error] [pid 45916:tid 45981] [client 72.146.42.181:57564] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "abiYZriS53PnClk_C9AS-QAAAFM"]
[Tue Mar 17 07:55:19.278150 2026] [:error] [pid 45915:tid 45937] [client 72.146.42.181:64897] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "abiYZ5h7U84ydzcrcncavwAAAAg"]
[Tue Mar 17 07:55:19.772587 2026] [:error] [pid 22541:tid 22553] [client 72.146.42.181:54283] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "abiYZ6S6JNY1-CTsTA8e7gAAAQc"]
[Tue Mar 17 07:55:20.282878 2026] [:error] [pid 45916:tid 45978] [client 72.146.42.181:64938] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "abiYaLiS53PnClk_C9AS-wAAAFA"]
[Tue Mar 17 07:55:20.797635 2026] [:error] [pid 45916:tid 45975] [client 72.146.42.181:56083] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "abiYaLiS53PnClk_C9AS_QAAAE0"]
[Tue Mar 17 07:55:21.300370 2026] [:error] [pid 22541:tid 22550] [client 72.146.42.181:63107] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "abiYaaS6JNY1-CTsTA8e9wAAAQQ"]
[Tue Mar 17 07:55:21.800678 2026] [:error] [pid 46020:tid 46028] [client 72.146.42.181:57894] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "abiYaX-nCcd9BdzGdLdAiQAAAMY"]
[Tue Mar 17 07:55:22.331280 2026] [:error] [pid 45917:tid 46007] [client 72.146.42.181:64948] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "abiYahMMhmeqL5fT_hexmwAAAJI"]
[Tue Mar 17 07:55:22.831979 2026] [:error] [pid 46020:tid 46037] [client 72.146.42.181:61081] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "abiYan-nCcd9BdzGdLdAjQAAAM8"]
[Tue Mar 17 07:55:23.378600 2026] [:error] [pid 46020:tid 46038] [client 72.146.42.181:54319] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "abiYa3-nCcd9BdzGdLdAjgAAANA"]
[Tue Mar 17 07:55:23.891650 2026] [:error] [pid 46020:tid 46033] [client 72.146.42.181:56072] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws60.php"] [unique_id "abiYa3-nCcd9BdzGdLdAkAAAAMs"]
[Tue Mar 17 07:55:24.438962 2026] [:error] [pid 45916:tid 45965] [client 72.146.42.181:63653] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws60.php"] [unique_id "abiYbLiS53PnClk_C9ATAAAAAEM"]
[Tue Mar 17 07:55:24.956360 2026] [:error] [pid 45916:tid 45978] [client 72.146.42.181:54281] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws60.php"] [unique_id "abiYbLiS53PnClk_C9ATBgAAAFA"]
[Tue Mar 17 07:55:25.543300 2026] [:error] [pid 22541:tid 22560] [client 72.146.42.181:63667] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws60.php"] [unique_id "abiYbaS6JNY1-CTsTA8fBAAAAQ4"]
[Tue Mar 17 07:55:26.029331 2026] [:error] [pid 22541:tid 22553] [client 72.146.42.181:54325] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "abiYbqS6JNY1-CTsTA8fCAAAAQc"]
[Tue Mar 17 07:55:26.552163 2026] [:error] [pid 22541:tid 22564] [client 72.146.42.181:63664] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "abiYbqS6JNY1-CTsTA8fCwAAARI"]
[Tue Mar 17 07:55:27.100460 2026] [:error] [pid 46020:tid 46033] [client 72.146.42.181:54285] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "abiYb3-nCcd9BdzGdLdAmgAAAMs"]
[Tue Mar 17 07:55:27.613015 2026] [:error] [pid 46020:tid 46024] [client 72.146.42.181:56107] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "abiYb3-nCcd9BdzGdLdAngAAAMI"]
[Tue Mar 17 07:55:28.311597 2026] [:error] [pid 22541:tid 22560] [client 72.146.42.181:61023] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "abiYcKS6JNY1-CTsTA8fDwAAAQ4"]
[Tue Mar 17 07:55:28.955835 2026] [:error] [pid 45915:tid 45941] [client 72.146.42.181:54833] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "abiYcJh7U84ydzcrcncaxQAAAAw"]
[Tue Mar 17 07:55:29.487498 2026] [:error] [pid 45915:tid 45944] [client 72.146.42.181:63637] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "abiYcZh7U84ydzcrcncaxwAAAA8"]
[Tue Mar 17 07:55:30.087085 2026] [:error] [pid 45915:tid 45932] [client 72.146.42.181:54838] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "abiYcph7U84ydzcrcncayQAAAAM"]
[Tue Mar 17 07:55:30.715436 2026] [:error] [pid 45916:tid 45978] [client 72.146.42.181:63162] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "abiYcriS53PnClk_C9ATEAAAAFA"]
[Tue Mar 17 07:55:31.263790 2026] [:error] [pid 46020:tid 46039] [client 72.146.42.181:61007] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "abiYc3-nCcd9BdzGdLdApgAAANE"]
[Tue Mar 17 07:55:31.758937 2026] [:error] [pid 46020:tid 46043] [client 72.146.42.181:57882] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "abiYc3-nCcd9BdzGdLdAqQAAANU"]
[Tue Mar 17 07:55:32.353830 2026] [:error] [pid 45915:tid 45933] [client 72.146.42.181:63613] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "abiYdJh7U84ydzcrcncazQAAAAQ"]
[Tue Mar 17 07:55:32.851537 2026] [:error] [pid 46020:tid 46033] [client 72.146.42.181:56064] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "abiYdH-nCcd9BdzGdLdAsgAAAMs"]
[Tue Mar 17 07:55:33.385619 2026] [:error] [pid 45915:tid 45939] [client 72.146.42.181:54290] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "abiYdZh7U84ydzcrcnca0QAAAAo"]
[Tue Mar 17 07:55:33.964631 2026] [:error] [pid 45917:tid 45995] [client 72.146.42.181:54308] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "abiYdRMMhmeqL5fT_hexrAAAAIY"]
[Tue Mar 17 07:55:34.508301 2026] [:error] [pid 45916:tid 45969] [client 72.146.42.181:63107] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "abiYdriS53PnClk_C9ATFAAAAEc"]
[Tue Mar 17 07:55:35.066665 2026] [:error] [pid 45917:tid 45999] [client 72.146.42.181:63673] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "abiYdxMMhmeqL5fT_hexsQAAAIo"]
[Tue Mar 17 07:55:35.570790 2026] [:error] [pid 45917:tid 46004] [client 72.146.42.181:56067] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "abiYdxMMhmeqL5fT_hexswAAAI8"]
[Tue Mar 17 07:55:36.091854 2026] [:error] [pid 45917:tid 46005] [client 72.146.42.181:56989] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "abiYeBMMhmeqL5fT_hextgAAAJA"]
[Tue Mar 17 07:55:36.631060 2026] [:error] [pid 45917:tid 46009] [client 72.146.42.181:54275] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "abiYeBMMhmeqL5fT_hexuwAAAJQ"]
[Tue Mar 17 07:55:37.154850 2026] [:error] [pid 45916:tid 45972] [client 72.146.42.181:57903] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "abiYebiS53PnClk_C9ATFgAAAEo"]
[Tue Mar 17 07:55:37.761366 2026] [:error] [pid 45916:tid 45968] [client 72.146.42.181:63660] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "abiYebiS53PnClk_C9ATFwAAAEY"]
[Tue Mar 17 07:55:38.290452 2026] [:error] [pid 45917:tid 45997] [client 72.146.42.181:56960] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "abiYehMMhmeqL5fT_hexxgAAAIg"]
[Tue Mar 17 07:55:38.859307 2026] [:error] [pid 45916:tid 45978] [client 72.146.42.181:57877] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "abiYeriS53PnClk_C9ATGQAAAFA"]
[Tue Mar 17 07:55:39.374615 2026] [:error] [pid 46020:tid 46037] [client 72.146.42.181:63132] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "abiYe3-nCcd9BdzGdLdAuwAAAM8"]
[Tue Mar 17 07:55:39.941684 2026] [:error] [pid 22541:tid 22564] [client 72.146.42.181:61044] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "abiYe6S6JNY1-CTsTA8fJQAAARI"]
[Tue Mar 17 07:55:40.498477 2026] [:error] [pid 22541:tid 22570] [client 72.146.42.181:56126] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "abiYfKS6JNY1-CTsTA8fKAAAARg"]
[Tue Mar 17 07:55:41.003537 2026] [:error] [pid 45916:tid 45975] [client 72.146.42.181:57000] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "abiYfbiS53PnClk_C9ATGwAAAE0"]
[Tue Mar 17 07:55:41.591183 2026] [:error] [pid 45917:tid 46004] [client 72.146.42.181:64909] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "abiYfRMMhmeqL5fT_hexygAAAI8"]
[Tue Mar 17 07:55:42.161221 2026] [:error] [pid 46020:tid 46030] [client 72.146.42.181:56079] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "abiYfn-nCcd9BdzGdLdAwQAAAMg"]
[Tue Mar 17 07:55:42.691627 2026] [:error] [pid 46020:tid 46041] [client 72.146.42.181:54289] [client 72.146.42.181] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "abiYfn-nCcd9BdzGdLdAwgAAANM"]
[Tue Mar 17 07:55:43.232716 2026] [:error] [pid 45917:tid 45995] [client 72.146.42.181:56126] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Tue Mar 17 07:55:43.467461 2026] [:error] [pid 45917:tid 46013] [client 72.146.42.181:56126] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Tue Mar 17 07:55:43.705264 2026] [:error] [pid 45917:tid 46002] [client 72.146.42.181:56126] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Tue Mar 17 07:55:43.943393 2026] [:error] [pid 45917:tid 46005] [client 72.146.42.181:56126] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Tue Mar 17 07:55:44.179622 2026] [:error] [pid 45917:tid 45989] [client 72.146.42.181:56126] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue Mar 17 07:55:44.416058 2026] [:error] [pid 45917:tid 45995] [client 72.146.42.181:56126] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue Mar 17 07:55:44.659286 2026] [:error] [pid 45917:tid 45998] [client 72.146.42.181:56126] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Tue Mar 17 07:56:12.463589 2026] [:error] [pid 22541:tid 22548] [client 185.223.152.127:49545] [client 185.223.152.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.127, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abiYnKS6JNY1-CTsTA8fowAAAQI"]
[Tue Mar 17 07:56:12.467168 2026] [:error] [pid 22541:tid 22548] [client 185.223.152.127:49545] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 17 14:13:16.078565 2026] [:error] [pid 45916:tid 45978] [client 145.224.72.178:62806] [client 145.224.72.178] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 145.224.72.178, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abjw_LiS53PnClk_C9D5EAAAAFA"]
[Tue Mar 17 14:13:16.094332 2026] [:error] [pid 45916:tid 45978] [client 145.224.72.178:62806] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 14:14:24.134918 2026] [:error] [pid 45915:tid 45935] [client 49.145.0.98:10371] [client 49.145.0.98] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.145.0.98, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abjxQJh7U84ydzcrcnfLBgAAAAY"]
[Tue Mar 17 14:14:24.140977 2026] [:error] [pid 45915:tid 45935] [client 49.145.0.98:10371] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 18:15:40.050189 2026] [:error] [pid 45915:tid 45943] [client 112.198.160.30:14472] [client 112.198.160.30] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.198.160.30, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abkpzJh7U84ydzcrcndPJQAAAA4"]
[Tue Mar 17 18:15:40.055937 2026] [:error] [pid 45915:tid 45943] [client 112.198.160.30:14472] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 18:49:10.071860 2026] [:error] [pid 45916:tid 45965] [client 89.153.88.166:60308] [client 89.153.88.166] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.153.88.166, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abkxpriS53PnClk_C9B8lAAAAEM"]
[Tue Mar 17 18:49:10.078359 2026] [:error] [pid 45916:tid 45965] [client 89.153.88.166:60308] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 23:33:21.330335 2026] [:error] [pid 22541:tid 22547] [client 103.159.78.209:59906] [client 103.159.78.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.159.78.209, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abl0QaS6JNY1-CTsTA9iqAAAAQE"]
[Tue Mar 17 23:33:21.337001 2026] [:error] [pid 22541:tid 22547] [client 103.159.78.209:59906] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 17 23:53:09.722116 2026] [:error] [pid 45915:tid 45932] [client 161.30.10.244:47124] [client 161.30.10.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 161.30.10.244, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abl45Zh7U84ydzcrcnfZHgAAAAM"]
[Tue Mar 17 23:53:09.794053 2026] [:error] [pid 45915:tid 45932] [client 161.30.10.244:47124] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 18 03:14:29.538556 2026] [:error] [pid 40716:tid 41032] [client 20.39.61.185:60263] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Mar 18 03:14:29.762220 2026] [:error] [pid 40716:tid 41045] [client 20.39.61.185:60263] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Mar 18 03:14:30.213370 2026] [:error] [pid 40716:tid 41041] [client 20.39.61.185:60263] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Wed Mar 18 03:14:30.615129 2026] [:error] [pid 40716:tid 41022] [client 20.39.61.185:60263] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Mar 18 03:14:31.218559 2026] [:error] [pid 40716:tid 41027] [client 20.39.61.185:60263] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed Mar 18 03:14:31.508851 2026] [:error] [pid 40716:tid 41039] [client 20.39.61.185:60263] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Mar 18 03:14:31.733507 2026] [:error] [pid 40716:tid 41030] [client 20.39.61.185:60263] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed Mar 18 03:14:32.276753 2026] [:error] [pid 40716:tid 41025] [client 20.39.61.185:60263] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmoGBR6i4ByUuhUBASg5QAAAEQ"]
[Wed Mar 18 03:14:37.973012 2026] [:error] [pid 40716:tid 41030] [client 20.39.61.185:55300] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmoHRR6i4ByUuhUBASg-AAAAEk"]
[Wed Mar 18 03:14:43.052564 2026] [:error] [pid 40716:tid 41035] [client 20.39.61.185:55347] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmoIxR6i4ByUuhUBAShBQAAAE4"]
[Wed Mar 18 06:08:02.841968 2026] [:error] [pid 44966:tid 45047] [client 98.159.37.38:58725] [client 98.159.37.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 98.159.37.38, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abnQwrHml2_01Zq4-129xgAAAIo"]
[Wed Mar 18 06:08:02.846449 2026] [:error] [pid 44966:tid 45047] [client 98.159.37.38:58725] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 18 08:13:18.372050 2026] [:error] [pid 45069:tid 45077] [client 20.2.90.103:39112] [client 20.2.90.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "abnuHjNzUMBULZVa94we7wAAAMY"]
[Wed Mar 18 13:51:46.482125 2026] [:error] [pid 20667:tid 20673] [client 120.62.84.33:44857] [client 120.62.84.33] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.62.84.33, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abo9cpgyfQyvBhzza_06KQAAAYQ"]
[Wed Mar 18 13:51:46.490002 2026] [:error] [pid 20667:tid 20673] [client 120.62.84.33:44857] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 18 21:05:21.711962 2026] [:error] [pid 53755:tid 53759] [client 87.252.103.230:62399] [client 87.252.103.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 87.252.103.230, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abqjEaqw5ZSRshmIhWlJ9gAAAUI"]
[Wed Mar 18 21:05:21.716704 2026] [:error] [pid 53755:tid 53759] [client 87.252.103.230:62399] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 18 23:11:23.410827 2026] [:error] [pid 42870:tid 42887] [client 20.120.18.145:63963] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Mar 18 23:11:23.627546 2026] [:error] [pid 42870:tid 42893] [client 20.120.18.145:63963] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Mar 18 23:11:24.162780 2026] [:error] [pid 42870:tid 42886] [client 20.120.18.145:63963] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Wed Mar 18 23:11:24.419302 2026] [:error] [pid 42870:tid 42905] [client 20.120.18.145:63963] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Mar 18 23:11:24.890092 2026] [:error] [pid 42870:tid 42889] [client 20.120.18.145:63963] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed Mar 18 23:11:25.101286 2026] [:error] [pid 42870:tid 42907] [client 20.120.18.145:63963] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Mar 18 23:11:25.390302 2026] [:error] [pid 42870:tid 42908] [client 20.120.18.145:63963] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed Mar 18 23:11:25.810295 2026] [:error] [pid 42870:tid 42904] [client 20.120.18.145:63963] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrAnZ6axlAooiuYyUxUOAAAABM"]
[Wed Mar 18 23:11:29.111517 2026] [:error] [pid 53755:tid 53765] [client 20.120.18.145:6434] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrAoaqw5ZSRshmIhWmPqAAAAUg"]
[Wed Mar 18 23:11:35.432983 2026] [:error] [pid 53755:tid 53781] [client 20.120.18.145:6497] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abrAp6qw5ZSRshmIhWmPtgAAAVg"]
[Thu Mar 19 06:31:07.156302 2026] [:error] [pid 31205:tid 31238] [client 31.171.130.32:35921] [client 31.171.130.32] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.32, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "absnq1u5gZKGrGz5P1H5agAAAVU"]
[Thu Mar 19 06:31:07.162444 2026] [:error] [pid 31205:tid 31238] [client 31.171.130.32:35921] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 19 09:59:39.958953 2026] [:error] [pid 23988:tid 24015] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Thu Mar 19 09:59:40.538605 2026] [:error] [pid 23988:tid 24007] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Mar 19 09:59:41.028966 2026] [:error] [pid 23988:tid 24015] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Mar 19 09:59:41.513800 2026] [:error] [pid 23988:tid 24007] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Mar 19 09:59:42.044962 2026] [:error] [pid 23988:tid 24007] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Mar 19 09:59:42.997071 2026] [:error] [pid 23988:tid 24007] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Mar 19 09:59:43.213644 2026] [:error] [pid 23988:tid 24007] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Mar 19 09:59:43.471073 2026] [:error] [pid 23988:tid 24007] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Mar 19 09:59:44.028038 2026] [:error] [pid 23988:tid 24008] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Mar 19 09:59:44.576512 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Mar 19 09:59:44.890865 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Mar 19 09:59:45.185616 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Mar 19 09:59:45.441404 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Mar 19 09:59:45.689153 2026] [:error] [pid 23988:tid 24004] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Mar 19 09:59:45.985637 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Mar 19 09:59:46.274490 2026] [:error] [pid 23988:tid 24004] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Mar 19 09:59:46.518404 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Mar 19 09:59:46.780196 2026] [:error] [pid 23988:tid 23991] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Mar 19 09:59:47.081718 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Mar 19 09:59:47.340329 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Mar 19 09:59:47.616882 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Mar 19 09:59:47.884370 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Mar 19 09:59:48.175672 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Mar 19 09:59:48.797327 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Mar 19 09:59:49.025717 2026] [:error] [pid 23988:tid 23992] [client 209.87.169.38:49239] [client 209.87.169.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "abtYlWnlkSPXj2matr0uggAAAME"]
[Thu Mar 19 09:59:49.500124 2026] [:error] [pid 31313:tid 31372] [client 209.87.169.229:46597] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Mar 19 09:59:49.772125 2026] [:error] [pid 31313:tid 31362] [client 209.87.169.229:46597] [client 209.87.169.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "abtYlQ9HuAbqf2tZOycgkQAAAcE"]
[Thu Mar 19 09:59:50.256941 2026] [:error] [pid 24925:tid 24939] [client 209.87.169.36:30281] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Mar 19 09:59:50.534834 2026] [:error] [pid 24925:tid 24951] [client 209.87.169.36:30281] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Mar 19 09:59:50.783958 2026] [:error] [pid 24925:tid 24932] [client 209.87.169.36:30281] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Mar 19 09:59:51.063778 2026] [:error] [pid 24925:tid 24951] [client 209.87.169.36:30281] [client 209.87.169.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "abtYl_UZEHbnUgjEbWM-0gAAAZY"]
[Thu Mar 19 09:59:51.576039 2026] [:error] [pid 31313:tid 31372] [client 209.87.169.237:42729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Mar 19 09:59:51.824788 2026] [:error] [pid 31313:tid 31382] [client 209.87.169.237:42729] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Mar 19 09:59:52.078558 2026] [:error] [pid 31313:tid 31371] [client 209.87.169.237:42729] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Mar 19 09:59:52.343290 2026] [:error] [pid 31313:tid 31371] [client 209.87.169.237:42729] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Mar 19 09:59:52.601544 2026] [:error] [pid 31313:tid 31382] [client 209.87.169.237:42729] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Mar 19 09:59:53.169348 2026] [:error] [pid 24971:tid 24998] [client 209.87.169.219:50097] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Mar 19 09:59:54.171903 2026] [:error] [pid 23882:tid 23920] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Mar 19 09:59:54.830471 2026] [:error] [pid 23882:tid 23920] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Mar 19 09:59:55.111750 2026] [:error] [pid 23882:tid 23909] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Mar 19 09:59:55.377742 2026] [:error] [pid 23882:tid 23912] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Mar 19 09:59:55.674714 2026] [:error] [pid 23882:tid 23916] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Mar 19 09:59:55.946716 2026] [:error] [pid 23882:tid 23909] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Mar 19 09:59:56.209614 2026] [:error] [pid 23882:tid 23912] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Mar 19 09:59:56.496012 2026] [:error] [pid 23882:tid 23916] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Mar 19 09:59:56.744453 2026] [:error] [pid 23882:tid 23909] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Mar 19 09:59:57.020357 2026] [:error] [pid 23882:tid 23907] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Mar 19 09:59:57.290521 2026] [:error] [pid 23882:tid 23924] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Mar 19 09:59:57.602967 2026] [:error] [pid 23882:tid 23918] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Mar 19 09:59:57.862482 2026] [:error] [pid 23882:tid 23916] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Mar 19 09:59:58.755321 2026] [:error] [pid 23882:tid 23916] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Mar 19 09:59:59.033540 2026] [:error] [pid 23882:tid 23908] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Mar 19 09:59:59.288881 2026] [:error] [pid 23882:tid 23917] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Mar 19 09:59:59.555698 2026] [:error] [pid 23882:tid 23904] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Mar 19 09:59:59.840559 2026] [:error] [pid 23882:tid 23908] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Mar 19 10:00:00.083099 2026] [:error] [pid 23882:tid 23907] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Mar 19 10:00:00.588146 2026] [:error] [pid 23882:tid 23918] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Mar 19 10:00:00.904949 2026] [:error] [pid 23882:tid 23908] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Mar 19 10:00:01.468782 2026] [:error] [pid 23882:tid 23908] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Mar 19 10:00:01.780210 2026] [:error] [pid 23882:tid 23916] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Mar 19 10:00:02.313947 2026] [:error] [pid 23882:tid 23924] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Thu Mar 19 10:00:02.740260 2026] [:error] [pid 23882:tid 23917] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Mar 19 10:00:03.193178 2026] [:error] [pid 23882:tid 23905] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Mar 19 10:00:03.589441 2026] [:error] [pid 23882:tid 23917] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Mar 19 10:00:03.973994 2026] [:error] [pid 23882:tid 23904] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Mar 19 10:00:04.286578 2026] [:error] [pid 23882:tid 23919] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Mar 19 10:00:04.638764 2026] [:error] [pid 23882:tid 23916] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Mar 19 10:00:04.962680 2026] [:error] [pid 23882:tid 23906] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Mar 19 10:00:05.354796 2026] [:error] [pid 23882:tid 23912] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Mar 19 10:00:05.691796 2026] [:error] [pid 23882:tid 23920] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Mar 19 10:00:05.990820 2026] [:error] [pid 23882:tid 23918] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Mar 19 10:00:06.319899 2026] [:error] [pid 23882:tid 23924] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Mar 19 10:00:06.629649 2026] [:error] [pid 23882:tid 23919] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Mar 19 10:00:06.870023 2026] [:error] [pid 23882:tid 23916] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Mar 19 10:00:07.200784 2026] [:error] [pid 23882:tid 23906] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Mar 19 10:00:07.511072 2026] [:error] [pid 23882:tid 23912] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Mar 19 10:00:07.814668 2026] [:error] [pid 23882:tid 23917] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Mar 19 10:00:08.099967 2026] [:error] [pid 23882:tid 23905] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Mar 19 10:00:08.386102 2026] [:error] [pid 23882:tid 23915] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Mar 19 10:00:08.690679 2026] [:error] [pid 23882:tid 23919] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Mar 19 10:00:09.008833 2026] [:error] [pid 23882:tid 23916] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Mar 19 10:00:09.292788 2026] [:error] [pid 23882:tid 23924] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Mar 19 10:00:09.585522 2026] [:error] [pid 23882:tid 23905] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Mar 19 10:00:09.885111 2026] [:error] [pid 23882:tid 23908] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Mar 19 10:00:10.210675 2026] [:error] [pid 23882:tid 23914] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Mar 19 10:00:10.507590 2026] [:error] [pid 23882:tid 23907] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Mar 19 10:00:10.800132 2026] [:error] [pid 23882:tid 23923] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Mar 19 10:00:11.054712 2026] [:error] [pid 23882:tid 23905] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Mar 19 10:00:11.358140 2026] [:error] [pid 23882:tid 23903] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Mar 19 10:00:11.678938 2026] [:error] [pid 23882:tid 23919] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Mar 19 10:00:12.165344 2026] [:error] [pid 23882:tid 23918] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Mar 19 10:00:12.435454 2026] [:error] [pid 23882:tid 23912] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Mar 19 10:00:12.740116 2026] [:error] [pid 23882:tid 23903] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Mar 19 10:00:13.047205 2026] [:error] [pid 23882:tid 23924] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Mar 19 10:00:13.310550 2026] [:error] [pid 23882:tid 23914] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Mar 19 10:00:13.585005 2026] [:error] [pid 23882:tid 23918] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Mar 19 10:00:13.850767 2026] [:error] [pid 23882:tid 23915] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Mar 19 10:00:14.145968 2026] [:error] [pid 23882:tid 23914] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Mar 19 10:00:14.414043 2026] [:error] [pid 23882:tid 23918] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Mar 19 10:00:14.678557 2026] [:error] [pid 23882:tid 23909] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Mar 19 10:00:14.960586 2026] [:error] [pid 23882:tid 23917] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Mar 19 10:00:15.212038 2026] [:error] [pid 23882:tid 23914] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Mar 19 10:00:15.704297 2026] [:error] [pid 23882:tid 23914] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Mar 19 10:00:16.008561 2026] [:error] [pid 23882:tid 23917] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Mar 19 10:00:16.245021 2026] [:error] [pid 23882:tid 23907] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Mar 19 10:00:17.413505 2026] [:error] [pid 23882:tid 23907] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Mar 19 10:00:17.668149 2026] [:error] [pid 23882:tid 23925] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Mar 19 10:00:17.913214 2026] [:error] [pid 23882:tid 23913] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Mar 19 10:00:18.218671 2026] [:error] [pid 23882:tid 23924] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Mar 19 10:00:18.490729 2026] [:error] [pid 23882:tid 23907] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Mar 19 10:00:18.754249 2026] [:error] [pid 23882:tid 23925] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Mar 19 10:00:19.074137 2026] [:error] [pid 23882:tid 23904] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Mar 19 10:00:22.568981 2026] [:error] [pid 23882:tid 23904] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Thu Mar 19 10:00:22.815005 2026] [:error] [pid 23882:tid 23914] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Mar 19 10:00:23.103964 2026] [:error] [pid 23882:tid 23907] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Mar 19 10:00:23.347905 2026] [:error] [pid 23882:tid 23925] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Mar 19 10:00:23.611951 2026] [:error] [pid 23882:tid 23904] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Mar 19 10:00:23.895348 2026] [:error] [pid 23882:tid 23917] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Mar 19 10:00:24.129861 2026] [:error] [pid 23882:tid 23918] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Mar 19 10:00:24.368835 2026] [:error] [pid 23882:tid 23909] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Mar 19 10:00:24.627080 2026] [:error] [pid 23882:tid 23903] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Mar 19 10:00:24.862473 2026] [:error] [pid 23882:tid 23918] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Mar 19 10:00:25.092364 2026] [:error] [pid 23882:tid 23909] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Mar 19 10:00:25.369426 2026] [:error] [pid 23882:tid 23913] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Mar 19 10:00:25.639345 2026] [:error] [pid 23882:tid 23918] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Mar 19 10:00:25.876254 2026] [:error] [pid 23882:tid 23909] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Mar 19 10:00:26.141986 2026] [:error] [pid 23882:tid 23923] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Mar 19 10:00:26.378412 2026] [:error] [pid 23882:tid 23913] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Mar 19 10:00:26.623436 2026] [:error] [pid 23882:tid 23907] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Mar 19 10:00:26.895293 2026] [:error] [pid 23882:tid 23904] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Mar 19 10:00:27.159849 2026] [:error] [pid 23882:tid 23925] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Mar 19 10:00:27.414317 2026] [:error] [pid 23882:tid 23914] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Mar 19 10:00:27.693521 2026] [:error] [pid 23882:tid 23904] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Mar 19 10:00:27.932955 2026] [:error] [pid 23882:tid 23918] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Mar 19 10:00:28.285161 2026] [:error] [pid 23882:tid 23907] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Mar 19 10:00:28.543882 2026] [:error] [pid 23882:tid 23923] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Mar 19 10:00:28.823086 2026] [:error] [pid 23882:tid 23917] [client 209.87.169.208:51935] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Mar 19 10:00:29.368253 2026] [:error] [pid 23988:tid 24013] [client 209.87.169.242:20999] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Thu Mar 19 10:00:29.631173 2026] [:error] [pid 23988:tid 23991] [client 209.87.169.242:20999] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Mar 19 10:00:29.916157 2026] [:error] [pid 23988:tid 24002] [client 209.87.169.242:20999] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Mar 19 10:00:30.428313 2026] [:error] [pid 23988:tid 23991] [client 209.87.169.242:20999] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Mar 19 10:00:33.790204 2026] [:error] [pid 23988:tid 24006] [client 209.87.169.242:20999] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Thu Mar 19 10:00:34.051589 2026] [:error] [pid 23988:tid 24000] [client 209.87.169.242:20999] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Thu Mar 19 10:00:34.288482 2026] [:error] [pid 23988:tid 24012] [client 209.87.169.242:20999] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Mar 19 10:00:38.926841 2026] [:error] [pid 23988:tid 24014] [client 209.87.169.242:20999] [client 209.87.169.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "abtYxmnlkSPXj2matr0wJAAAANc"]
[Thu Mar 19 10:00:42.089626 2026] [:error] [pid 23988:tid 24002] [client 209.87.169.44:39853] [client 209.87.169.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "abtYymnlkSPXj2matr0wPwAAAMs"]
[Thu Mar 19 10:00:43.580918 2026] [:error] [pid 24925:tid 24944] [client 209.87.169.231:27777] [client 209.87.169.231] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "abtYy_UZEHbnUgjEbWM_3wAAAY8"]
[Thu Mar 19 10:00:45.127647 2026] [:error] [pid 31447:tid 31463] [client 209.87.169.73:23341] [client 209.87.169.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abtYzRmVNRDSLnGvghihAgAAAgg"]
[Thu Mar 19 10:00:47.318431 2026] [:error] [pid 32226:tid 32229] [client 209.87.169.57:58095] [client 209.87.169.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "abtYz7Bb58lgPwqxC6rNCAAAAwE"]
[Thu Mar 19 10:00:47.883467 2026] [:error] [pid 23988:tid 24002] [client 209.87.169.232:25201] [client 209.87.169.232] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "abtYz2nlkSPXj2matr0wagAAAMs"]
[Thu Mar 19 10:00:48.349364 2026] [:error] [pid 25044:tid 25055] [client 209.87.169.42:35221] [client 209.87.169.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "abtY0NUUDKsY7wMywpo0igAAAsc"]
[Thu Mar 19 10:00:48.911878 2026] [:error] [pid 24971:tid 24986] [client 209.87.169.46:48485] [client 209.87.169.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "abtY0PUcWA7YXQC7dRvNhwAAAks"]
[Thu Mar 19 10:00:50.491429 2026] [:error] [pid 31313:tid 31366] [client 209.87.169.244:46041] [client 209.87.169.244] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "abtY0g9HuAbqf2tZOychXQAAAcU"]
[Thu Mar 19 10:00:51.680250 2026] [:error] [pid 25179:tid 25205] [client 209.87.169.57:35431] [client 209.87.169.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "abtY02FzmTtmuBLc_LZTdwAAA5g"]
[Thu Mar 19 10:00:53.285350 2026] [:error] [pid 24971:tid 24994] [client 209.87.169.60:57127] [client 209.87.169.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "abtY1fUcWA7YXQC7dRvN2AAAAlM"]
[Thu Mar 19 10:00:54.033844 2026] [:error] [pid 25135:tid 25150] [client 209.87.169.55:60881] [client 209.87.169.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "abtY1qKtE0dzgMctjFWO2gAAA00"]
[Thu Mar 19 10:00:54.508065 2026] [:error] [pid 24971:tid 24991] [client 209.87.169.73:20435] [client 209.87.169.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "abtY1vUcWA7YXQC7dRvN8wAAAlA"]
[Thu Mar 19 10:00:57.042652 2026] [:error] [pid 31735:tid 31750] [client 209.87.169.33:32503] [client 209.87.169.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "abtY2X-gyQbRQWJYccxGCgAAAos"]
[Thu Mar 19 10:00:57.520069 2026] [:error] [pid 24925:tid 24946] [client 209.87.169.31:26839] [client 209.87.169.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "abtY2fUZEHbnUgjEbWNALAAAAZE"]
[Thu Mar 19 10:00:58.261146 2026] [:error] [pid 23988:tid 24015] [client 209.87.169.250:32123] [client 209.87.169.250] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "abtY2mnlkSPXj2matr0wfAAAANg"]
[Thu Mar 19 10:01:00.273383 2026] [:error] [pid 25179:tid 25182] [client 209.87.169.208:46113] [client 209.87.169.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "abtY3GFzmTtmuBLc_LZT7gAAA4E"]
[Thu Mar 19 10:01:01.356335 2026] [:error] [pid 25179:tid 25189] [client 209.87.169.234:35791] [client 209.87.169.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "abtY3WFzmTtmuBLc_LZT_gAAA4g"]
[Thu Mar 19 10:01:03.883308 2026] [:error] [pid 25179:tid 25186] [client 185.198.240.24:32305] [client 185.198.240.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "abtY32FzmTtmuBLc_LZUFgAAA4U"]
[Thu Mar 19 10:01:04.648551 2026] [:error] [pid 31205:tid 31234] [client 209.87.169.247:31875] [client 209.87.169.247] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "abtY4Fu5gZKGrGz5P1FSPgAAAVE"]
[Thu Mar 19 10:01:06.537531 2026] [:error] [pid 25179:tid 25186] [client 209.87.169.36:37599] [client 209.87.169.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "abtY4mFzmTtmuBLc_LZUNwAAA4U"]
[Thu Mar 19 10:01:14.869517 2026] [:error] [pid 31447:tid 31475] [client 209.87.169.207:33953] [client 209.87.169.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "abtY6hmVNRDSLnGvghih6QAAAhQ"]
[Thu Mar 19 10:01:16.175311 2026] [:error] [pid 25044:tid 25050] [client 209.87.169.39:62077] [client 209.87.169.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "abtY7NUUDKsY7wMywpo1WQAAAsI"]
[Thu Mar 19 10:01:17.003779 2026] [:error] [pid 31205:tid 31237] [client 209.87.169.40:21921] [client 209.87.169.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "abtY7Vu5gZKGrGz5P1FSSgAAAVQ"]
[Thu Mar 19 10:01:34.571850 2026] [:error] [pid 23883:tid 23935] [client 209.87.169.236:43039] [client 209.87.169.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/admin.php"] [unique_id "abtY_tNi-EnEAH4abz2T2gAAAEY"]
[Thu Mar 19 10:04:30.401425 2026] [autoindex:error] [pid 24925:tid 24949] [client 209.87.169.70:63861] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Mar 19 10:04:35.747465 2026] [:error] [pid 24925:tid 24953] [client 209.87.169.70:63861] [client 209.87.169.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-doft/"] [unique_id "abtZs_UZEHbnUgjEbWNFEwAAAZg"]
[Thu Mar 19 12:54:12.867502 2026] [:error] [pid 25269:tid 25276] [client 154.16.49.101:6413] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "abuBdMU9ntriqNcU-b7DYQAAA8Q"]
[Thu Mar 19 12:54:13.360502 2026] [:error] [pid 24925:tid 24937] [client 154.16.49.101:6581] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "abuBdfUZEHbnUgjEbWNmuwAAAYg"]
[Thu Mar 19 12:54:13.852849 2026] [:error] [pid 23882:tid 23913] [client 154.16.49.101:6734] [client 154.16.49.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feed/"] [unique_id "abuBdbWnClbtbN12M7-UHAAAAAs"]
[Thu Mar 19 13:12:37.599669 2026] [:error] [pid 23882:tid 23924] [client 112.133.255.160:12221] [client 112.133.255.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 112.133.255.160, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "abuFxbWnClbtbN12M7-gjAAAABY"]
[Thu Mar 19 13:12:37.604711 2026] [:error] [pid 23882:tid 23924] [client 112.133.255.160:12221] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 19 20:24:15.279985 2026] [:error] [pid 1397:tid 1404] [client 185.198.240.241:45521] [client 185.198.240.241] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.198.240.241, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abvq73ptc6vBjy-kgOMV2wAAAsU"]
[Thu Mar 19 20:24:15.284706 2026] [:error] [pid 1397:tid 1404] [client 185.198.240.241:45521] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 20 01:14:32.022151 2026] [:error] [pid 46264:tid 46294] [client 209.97.171.56:61685] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "abwu-Ip3TruHFmWOt5HWzgAAAAs"]
[Fri Mar 20 01:14:32.575777 2026] [:error] [pid 46125:tid 46215] [client 209.97.171.56:55973] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "abwu-GgN4lI6NHeckY5cSwAAAIM"]
[Fri Mar 20 02:22:45.295623 2026] [:error] [pid 46126:tid 46218] [client 4.205.31.173:6577] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Mar 20 02:22:45.712412 2026] [:error] [pid 46126:tid 46246] [client 4.205.31.173:6577] [client 4.205.31.173] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 4.205.31.173, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abw-9aQ44YePbsZz3j7fQQAAARI"]
[Fri Mar 20 02:22:45.928687 2026] [:error] [pid 46126:tid 46228] [client 4.205.31.173:6577] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Fri Mar 20 02:22:46.876878 2026] [:error] [pid 46126:tid 46250] [client 4.205.31.173:6577] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Fri Mar 20 02:22:47.516958 2026] [:error] [pid 46126:tid 46214] [client 4.205.31.173:6577] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Fri Mar 20 02:22:47.721713 2026] [:error] [pid 46126:tid 46231] [client 4.205.31.173:6577] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abw-96Q44YePbsZz3j7fTQAAAQo"]
[Fri Mar 20 02:22:51.215387 2026] [:error] [pid 46124:tid 46183] [client 4.205.31.173:6574] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abw--0zMrlLOY6zyCjKQugAAAEM"]
[Fri Mar 20 02:22:53.443866 2026] [:error] [pid 11258:tid 11281] [client 4.205.31.173:6268] [client 4.205.31.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abw-_ZPHb95f6xzHJOc0iQAAANU"]
[Fri Mar 20 03:01:19.825302 2026] [:error] [pid 11258:tid 11266] [client 45.131.195.9:61395] [client 45.131.195.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.131.195.9, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "abxH_5PHb95f6xzHJOdIbQAAAMY"]
[Fri Mar 20 03:01:19.829288 2026] [:error] [pid 11258:tid 11266] [client 45.131.195.9:61395] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri Mar 20 06:54:35.293917 2026] [:error] [pid 55301:tid 55368] [client 20.104.104.81:14669] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Mar 20 06:54:35.569845 2026] [:error] [pid 55301:tid 55392] [client 20.104.104.81:14669] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Mar 20 06:54:35.784568 2026] [:error] [pid 55301:tid 55379] [client 20.104.104.81:14669] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Mar 20 06:54:35.994853 2026] [:error] [pid 55301:tid 55385] [client 20.104.104.81:14669] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 20 06:54:36.205278 2026] [:error] [pid 55301:tid 55371] [client 20.104.104.81:14669] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 20 06:54:36.416892 2026] [:error] [pid 55301:tid 55367] [client 20.104.104.81:14669] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 20 06:54:36.852030 2026] [:error] [pid 55301:tid 55369] [client 20.104.104.81:14669] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Mar 20 06:54:37.123523 2026] [:error] [pid 55301:tid 55390] [client 20.104.104.81:14669] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri Mar 20 06:54:37.430826 2026] [:error] [pid 55301:tid 55383] [client 20.104.104.81:14669] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Mar 20 06:54:37.730017 2026] [:error] [pid 55301:tid 55397] [client 20.104.104.81:14669] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Mar 20 06:54:37.993206 2026] [:error] [pid 55301:tid 55379] [client 20.104.104.81:14669] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "abx-rcKP1x4sgmjd3xRiDAAAAow"]
[Fri Mar 20 06:54:39.945848 2026] [:error] [pid 55206:tid 55230] [client 20.104.104.81:14396] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "abx-r3Uc_Wl5viVmsDwjcAAAAVY"]
[Fri Mar 20 06:54:40.978065 2026] [:error] [pid 55301:tid 55362] [client 20.104.104.81:14397] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "abx-sMKP1x4sgmjd3xRiGAAAAoA"]
[Fri Mar 20 06:54:45.088786 2026] [:error] [pid 55299:tid 55309] [client 20.104.104.81:14668] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "abx-tfoGhbNgkNIkZwl6PAAAAgQ"]
[Fri Mar 20 07:02:02.512716 2026] [:error] [pid 43163:tid 43179] [client 20.104.104.81:13037] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "abyAap_n4JP_ko9XUswVGAAAAQw"]
[Fri Mar 20 07:02:05.578582 2026] [:error] [pid 55301:tid 55390] [client 20.104.104.81:13040] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "abyAbcKP1x4sgmjd3xRmCgAAApE"]
[Fri Mar 20 07:02:07.458189 2026] [:error] [pid 55301:tid 55405] [client 20.104.104.81:13027] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "abyAb8KP1x4sgmjd3xRmDgAAApg"]
[Fri Mar 20 07:02:09.217819 2026] [:error] [pid 55239:tid 55297] [client 20.104.104.81:13020] [client 20.104.104.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "abyAcaycM6mGWSmcyoLxdQAAAdg"]
[Fri Mar 20 10:51:40.614921 2026] [:error] [pid 49080:tid 49104] [client 20.244.119.191:5713] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Mar 20 10:51:41.871277 2026] [:error] [pid 49080:tid 49105] [client 20.244.119.191:5713] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Fri Mar 20 10:51:43.551693 2026] [:error] [pid 49080:tid 49102] [client 20.244.119.191:5713] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Mar 20 10:51:43.707047 2026] [:error] [pid 49080:tid 49088] [client 20.244.119.191:5713] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Mar 20 10:51:43.855205 2026] [:error] [pid 49080:tid 49100] [client 20.244.119.191:5713] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Mar 20 10:51:44.326390 2026] [:error] [pid 49080:tid 49103] [client 20.244.119.191:5713] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Mar 20 10:51:44.502311 2026] [:error] [pid 49080:tid 49098] [client 20.244.119.191:5713] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Fri Mar 20 10:51:44.668698 2026] [:error] [pid 49080:tid 49106] [client 20.244.119.191:5713] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Mar 20 10:51:44.852453 2026] [:error] [pid 49080:tid 49092] [client 20.244.119.191:5713] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Mar 20 10:51:45.012430 2026] [:error] [pid 49080:tid 49104] [client 20.244.119.191:5713] [client 20.244.119.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/"] [unique_id "aby2QYk5CHi4V0A3ttj6fAAAAFI"]
[Fri Mar 20 10:51:45.733653 2026] [:error] [pid 49170:tid 49188] [client 20.244.119.191:5737] [client 20.244.119.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/"] [unique_id "aby2Qc-c8ctLVDCqUJXI6QAAAA4"]
[Fri Mar 20 10:51:46.440297 2026] [:error] [pid 51714:tid 51729] [client 20.244.119.191:1930] [client 20.244.119.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/"] [unique_id "aby2QjWI82pxvQ0gkss-UQAAAI0"]
[Fri Mar 20 10:51:47.114031 2026] [:error] [pid 49081:tid 49118] [client 20.244.119.191:5730] [client 20.244.119.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/"] [unique_id "aby2Qxo1LBAUhfhYPR1DtgAAAQM"]
[Fri Mar 20 17:50:28.331436 2026] [:error] [pid 49080:tid 49094] [client 103.69.29.164:54916] [client 103.69.29.164] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.69.29.164, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ab0YZIk5CHi4V0A3ttjOJgAAAEg"]
[Fri Mar 20 17:50:28.336352 2026] [:error] [pid 49080:tid 49094] [client 103.69.29.164:54916] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 20 20:13:29.938180 2026] [:error] [pid 49081:tid 49118] [client 216.24.212.74:30747] [client 216.24.212.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.24.212.74, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ab056Ro1LBAUhfhYPR2MzgAAAQM"]
[Fri Mar 20 20:13:29.942020 2026] [:error] [pid 49081:tid 49118] [client 216.24.212.74:30747] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat Mar 21 00:42:43.338713 2026] [:error] [pid 62754:tid 62826] [client 81.159.102.237:61142] [client 81.159.102.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 81.159.102.237, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ab15AxwXN_jHGJ5L7yFGhAAAAAs"]
[Sat Mar 21 00:42:43.344373 2026] [:error] [pid 62754:tid 62826] [client 81.159.102.237:61142] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 21 00:43:16.546486 2026] [:error] [pid 62754:tid 62839] [client 65.21.28.211:55262] [client 65.21.28.211] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.21.28.211, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ab15JBwXN_jHGJ5L7yFGwAAAABg"]
[Sat Mar 21 00:43:16.552053 2026] [:error] [pid 62754:tid 62839] [client 65.21.28.211:55262] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 21 00:45:27.464958 2026] [:error] [pid 62754:tid 62836] [client 191.37.93.111:50758] [client 191.37.93.111] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 191.37.93.111, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ab15pxwXN_jHGJ5L7yFHzQAAABU"]
[Sat Mar 21 00:45:27.469810 2026] [:error] [pid 62754:tid 62836] [client 191.37.93.111:50758] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 21 14:35:08.974435 2026] [:error] [pid 42886:tid 42909] [client 104.28.163.82:40639] [client 104.28.163.82] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ab48HF452dC6nbNWav0zIAAAAxU"]
[Sat Mar 21 17:10:04.424534 2026] [:error] [pid 33584:tid 33610] [client 37.131.43.224:14074] [client 37.131.43.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.131.43.224, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ab5gbOATEQBBo5z2HkmAXgAAAdg"]
[Sat Mar 21 17:10:04.429347 2026] [:error] [pid 33584:tid 33610] [client 37.131.43.224:14074] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 22 08:12:59.774405 2026] [:error] [pid 40039:tid 40042] [client 196.178.47.253:59716] [client 196.178.47.253] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 196.178.47.253, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ab80Cx3aDgUJfBYishlVdgAAAQE"]
[Sun Mar 22 08:13:00.091339 2026] [:error] [pid 40039:tid 40042] [client 196.178.47.253:59716] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 22 08:44:22.514755 2026] [:error] [pid 51468:tid 51499] [client 52.138.39.105:65089] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sun Mar 22 08:44:22.725723 2026] [:error] [pid 51468:tid 51495] [client 52.138.39.105:65089] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sun Mar 22 08:44:22.934570 2026] [:error] [pid 51468:tid 51488] [client 52.138.39.105:65089] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun Mar 22 08:44:23.145512 2026] [:error] [pid 51468:tid 51487] [client 52.138.39.105:65089] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Sun Mar 22 08:44:23.354984 2026] [:error] [pid 51468:tid 51484] [client 52.138.39.105:65089] File does not exist: /usr/local/apache/htdocs/suspended-page/tx78.php
[Sun Mar 22 08:44:23.915453 2026] [:error] [pid 51468:tid 51479] [client 52.138.39.105:65089] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Sun Mar 22 08:44:24.124527 2026] [:error] [pid 51468:tid 51489] [client 52.138.39.105:65089] File does not exist: /usr/local/apache/htdocs/suspended-page/wa.php
[Sun Mar 22 08:44:24.542445 2026] [:error] [pid 51468:tid 51494] [client 52.138.39.105:65089] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sun Mar 22 08:44:24.957109 2026] [:error] [pid 51468:tid 51497] [client 52.138.39.105:65089] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab87aE2TppSvA8W5CBTjWgAAANU"]
[Sun Mar 22 08:44:25.903296 2026] [:error] [pid 51361:tid 51372] [client 52.138.39.105:65105] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab87aRXYUsdvKC9YWpVQRQAAAAE"]
[Sun Mar 22 08:44:26.727307 2026] [:error] [pid 51361:tid 51374] [client 52.138.39.105:65103] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab87ahXYUsdvKC9YWpVQRwAAAAM"]
[Sun Mar 22 08:44:27.551387 2026] [:error] [pid 40039:tid 40054] [client 52.138.39.105:3111] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab87ax3aDgUJfBYishlrDgAAAQ0"]
[Sun Mar 22 12:42:00.774372 2026] [:error] [pid 40039:tid 40051] [client 84.0.73.95:62717] [client 84.0.73.95] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 84.0.73.95, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ab9zGB3aDgUJfBYishkO4gAAAQo"]
[Sun Mar 22 12:42:00.782829 2026] [:error] [pid 40039:tid 40051] [client 84.0.73.95:62717] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 22 12:44:08.323630 2026] [:error] [pid 51361:tid 51376] [client 62.122.136.105:60270] [client 62.122.136.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 62.122.136.105, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ab9zmBXYUsdvKC9YWpWBDgAAAAU"]
[Sun Mar 22 12:44:08.328864 2026] [:error] [pid 51361:tid 51376] [client 62.122.136.105:60270] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 01:36:40.516600 2026] [:error] [pid 20574:tid 20590] [client 138.204.24.151:10625] [client 138.204.24.151] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.204.24.151, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acAoqNdMXEnEZrwyzJkF0gAAAAE"]
[Mon Mar 23 01:36:40.521760 2026] [:error] [pid 20574:tid 20590] [client 138.204.24.151:10625] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 03:22:02.561166 2026] [:error] [pid 20856:tid 20938] [client 27.34.111.194:23420] [client 27.34.111.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 27.34.111.194, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acBBWsxFtXFVNE-X2-K9jgAAANM"]
[Mon Mar 23 03:22:02.567704 2026] [:error] [pid 20856:tid 20938] [client 27.34.111.194:23420] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 05:11:35.896654 2026] [:error] [pid 57265:tid 57289] [client 20.163.240.53:59890] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Mar 23 05:11:36.316316 2026] [:error] [pid 57265:tid 57281] [client 20.163.240.53:59890] [client 20.163.240.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.163.240.53, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acBbCGNLjPJJkhuqCsiijQAAAQ4"]
[Mon Mar 23 05:11:36.531066 2026] [:error] [pid 57265:tid 57286] [client 20.163.240.53:59890] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Mon Mar 23 05:11:37.378481 2026] [:error] [pid 57265:tid 57268] [client 20.163.240.53:59890] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Mon Mar 23 05:11:38.015327 2026] [:error] [pid 57265:tid 57285] [client 20.163.240.53:59890] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Mon Mar 23 05:11:38.223115 2026] [:error] [pid 57265:tid 57282] [client 20.163.240.53:59890] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBbCmNLjPJJkhuqCsiinQAAAQ8"]
[Mon Mar 23 05:11:39.074778 2026] [:error] [pid 57265:tid 57279] [client 20.163.240.53:50527] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBbC2NLjPJJkhuqCsiioAAAAQw"]
[Mon Mar 23 05:11:39.910167 2026] [:error] [pid 23441:tid 23509] [client 20.163.240.53:59850] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBbCxq7S-oOqSXZEr5MkAAAAIY"]
[Mon Mar 23 05:11:40.803051 2026] [:error] [pid 23539:tid 23564] [client 20.163.240.53:52280] [client 20.163.240.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acBbDH7Dh3qWGSpIAZU1yAAAANA"]
[Mon Mar 23 06:38:12.923457 2026] [:error] [pid 23441:tid 23519] [client 85.8.130.47:55243] [client 85.8.130.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 85.8.130.47, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "acBvVBq7S-oOqSXZEr5ixwAAAJA"]
[Mon Mar 23 06:38:12.927853 2026] [:error] [pid 23441:tid 23519] [client 85.8.130.47:55243] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Mon Mar 23 13:03:07.040376 2026] [:error] [pid 23441:tid 23507] [client 160.20.41.72:62451] [client 160.20.41.72] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.20.41.72, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acDJixq7S-oOqSXZEr6j7wAAAIQ"]
[Mon Mar 23 13:03:07.046141 2026] [:error] [pid 23441:tid 23507] [client 160.20.41.72:62451] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 23 17:28:04.536766 2026] [:error] [pid 57265:tid 57285] [client 20.63.98.227:20818] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Mar 23 17:28:06.306230 2026] [:error] [pid 57265:tid 57278] [client 20.63.98.227:20818] [client 20.63.98.227] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.98.227, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acEHpmNLjPJJkhuqCsgVFAAAAQs"]
[Mon Mar 23 17:28:06.522133 2026] [:error] [pid 57265:tid 57291] [client 20.63.98.227:20818] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-corn-sample.php
[Mon Mar 23 17:28:07.364002 2026] [:error] [pid 57265:tid 57275] [client 20.63.98.227:20818] File does not exist: /usr/local/apache/htdocs/suspended-page/server.php
[Mon Mar 23 17:28:07.998541 2026] [:error] [pid 57265:tid 57268] [client 20.63.98.227:20818] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Mon Mar 23 17:28:08.204280 2026] [:error] [pid 57265:tid 57281] [client 20.63.98.227:20818] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEHqGNLjPJJkhuqCsgVHQAAAQ4"]
[Mon Mar 23 17:28:09.030937 2026] [:error] [pid 23440:tid 23479] [client 20.63.98.227:20801] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEHqT49_8n8h_ttcUoqPAAAAEM"]
[Mon Mar 23 17:28:09.855121 2026] [:error] [pid 57265:tid 57283] [client 20.63.98.227:20809] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEHqWNLjPJJkhuqCsgVIQAAARA"]
[Mon Mar 23 17:28:10.680366 2026] [:error] [pid 14573:tid 14580] [client 20.63.98.227:21125] [client 20.63.98.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acEHqu-oSmHn3q4_J1GoWwAAAUU"]
[Mon Mar 23 21:32:32.822933 2026] [:error] [pid 38306:tid 38328] [client 158.94.208.241:36406] [client 158.94.208.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "acFA8DkL8qwu-hHc6BikMwAAARQ"]
[Mon Mar 23 22:22:07.112967 2026] [:error] [pid 38177:tid 38236] [client 158.94.208.241:51922] [client 158.94.208.241] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "acFMj3sYW-_HCI66Mun8qAAAAFU"]
[Mon Mar 23 23:06:32.812714 2026] [:error] [pid 38306:tid 38314] [client 20.123.7.214:22848] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Mon Mar 23 23:06:33.066726 2026] [:error] [pid 38306:tid 38308] [client 20.123.7.214:22848] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Mon Mar 23 23:06:33.321056 2026] [:error] [pid 38306:tid 38310] [client 20.123.7.214:22848] File does not exist: /usr/local/apache/htdocs/suspended-page/8xyz.php
[Mon Mar 23 23:06:33.580636 2026] [:error] [pid 38306:tid 38324] [client 20.123.7.214:22848] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Mon Mar 23 23:06:33.842213 2026] [:error] [pid 38306:tid 38312] [client 20.123.7.214:22848] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi.php
[Mon Mar 23 23:06:34.097548 2026] [:error] [pid 38306:tid 38327] [client 20.123.7.214:22848] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Mon Mar 23 23:06:34.351723 2026] [:error] [pid 38306:tid 38313] [client 20.123.7.214:22848] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ssfc.php
[Mon Mar 23 23:06:34.607515 2026] [:error] [pid 38306:tid 38314] [client 20.123.7.214:22848] File does not exist: /usr/local/apache/htdocs/suspended-page/ws75.php
[Mon Mar 23 23:06:34.860989 2026] [:error] [pid 38306:tid 38310] [client 20.123.7.214:22848] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Mon Mar 23 23:06:35.113384 2026] [:error] [pid 38306:tid 38316] [client 20.123.7.214:22848] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Mon Mar 23 23:06:35.364064 2026] [:error] [pid 38306:tid 38324] [client 20.123.7.214:22848] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/000.php"] [unique_id "acFW-zkL8qwu-hHc6BjJuQAAARA"]
[Mon Mar 23 23:06:35.893560 2026] [:error] [pid 38276:tid 38281] [client 20.123.7.214:22907] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/000.php"] [unique_id "acFW-5oKGiI-a7oME3IRdgAAAMI"]
[Mon Mar 23 23:06:36.483406 2026] [:error] [pid 38276:tid 38303] [client 20.123.7.214:22854] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/000.php"] [unique_id "acFW_JoKGiI-a7oME3IRdwAAANg"]
[Mon Mar 23 23:06:37.033682 2026] [:error] [pid 38306:tid 38315] [client 20.123.7.214:22883] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/000.php"] [unique_id "acFW_TkL8qwu-hHc6BjJxAAAAQc"]
[Mon Mar 23 23:06:37.555164 2026] [:error] [pid 38276:tid 38298] [client 20.123.7.214:22893] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w3lls.php"] [unique_id "acFW_ZoKGiI-a7oME3IReQAAANM"]
[Mon Mar 23 23:06:38.057848 2026] [:error] [pid 38176:tid 38195] [client 20.123.7.214:22866] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w3lls.php"] [unique_id "acFW_ktG4qlh1gvNjuJcQQAAAAg"]
[Mon Mar 23 23:06:38.596881 2026] [:error] [pid 38276:tid 38296] [client 20.123.7.214:22882] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w3lls.php"] [unique_id "acFW_poKGiI-a7oME3IRfAAAANE"]
[Mon Mar 23 23:06:39.102637 2026] [:error] [pid 38306:tid 38319] [client 20.123.7.214:22804] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w3lls.php"] [unique_id "acFW_zkL8qwu-hHc6BjJ0QAAAQs"]
[Mon Mar 23 23:06:39.606550 2026] [:error] [pid 38177:tid 38221] [client 20.123.7.214:22874] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acFW_3sYW-_HCI66MukEYAAAAEY"]
[Mon Mar 23 23:06:40.171745 2026] [:error] [pid 38306:tid 38324] [client 20.123.7.214:22799] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acFXADkL8qwu-hHc6BjJ2QAAARA"]
[Mon Mar 23 23:06:40.693008 2026] [:error] [pid 38177:tid 38236] [client 20.123.7.214:22885] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acFXAHsYW-_HCI66MukEYQAAAFU"]
[Mon Mar 23 23:06:42.031263 2026] [:error] [pid 38306:tid 38319] [client 20.123.7.214:22855] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acFXAjkL8qwu-hHc6BjJ4QAAAQs"]
[Mon Mar 23 23:06:42.607865 2026] [:error] [pid 52341:tid 52355] [client 20.123.7.214:22857] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "acFXAqPKTBDR2u47Gb0S8wAAAUw"]
[Mon Mar 23 23:06:43.108996 2026] [:error] [pid 38276:tid 38286] [client 20.123.7.214:22863] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "acFXA5oKGiI-a7oME3IRgAAAAMc"]
[Mon Mar 23 23:06:44.437046 2026] [:error] [pid 52341:tid 52367] [client 20.123.7.214:22813] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "acFXBKPKTBDR2u47Gb0S9wAAAVg"]
[Mon Mar 23 23:06:44.946991 2026] [:error] [pid 38276:tid 38281] [client 20.123.7.214:22853] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "acFXBJoKGiI-a7oME3IRggAAAMI"]
[Mon Mar 23 23:06:45.452105 2026] [:error] [pid 38306:tid 38308] [client 20.123.7.214:22897] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acFXBTkL8qwu-hHc6BjJ4wAAAQA"]
[Mon Mar 23 23:06:45.965909 2026] [:error] [pid 38178:tid 38248] [client 20.123.7.214:22797] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acFXBQ0axWfXsVvR9udWJgAAAIY"]
[Mon Mar 23 23:06:46.469637 2026] [:error] [pid 38276:tid 38279] [client 20.123.7.214:22881] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acFXBpoKGiI-a7oME3IRgwAAAMA"]
[Mon Mar 23 23:06:46.973400 2026] [:error] [pid 38176:tid 38203] [client 20.123.7.214:22869] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acFXBktG4qlh1gvNjuJcSgAAABA"]
[Mon Mar 23 23:06:47.491810 2026] [:error] [pid 38276:tid 38288] [client 20.123.7.214:4057] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "acFXB5oKGiI-a7oME3IRhgAAAMk"]
[Mon Mar 23 23:06:49.010558 2026] [:error] [pid 38306:tid 38332] [client 20.123.7.214:22814] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "acFXCTkL8qwu-hHc6BjJ5AAAARg"]
[Mon Mar 23 23:06:49.517623 2026] [:error] [pid 38177:tid 38231] [client 20.123.7.214:22815] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "acFXCXsYW-_HCI66MukEawAAAFA"]
[Mon Mar 23 23:06:50.025530 2026] [:error] [pid 38177:tid 38239] [client 20.123.7.214:22790] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "acFXCnsYW-_HCI66MukEbAAAAFg"]
[Mon Mar 23 23:06:50.546986 2026] [:error] [pid 38176:tid 38202] [client 20.123.7.214:22875] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wwx.php"] [unique_id "acFXCktG4qlh1gvNjuJcTwAAAA8"]
[Mon Mar 23 23:06:51.089025 2026] [:error] [pid 38306:tid 38324] [client 20.123.7.214:22849] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wwx.php"] [unique_id "acFXCzkL8qwu-hHc6BjJ5gAAARA"]
[Mon Mar 23 23:06:51.640190 2026] [:error] [pid 38178:tid 38243] [client 20.123.7.214:22789] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wwx.php"] [unique_id "acFXCw0axWfXsVvR9udWLgAAAIE"]
[Mon Mar 23 23:06:52.165961 2026] [:error] [pid 38176:tid 38188] [client 20.123.7.214:22850] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wwx.php"] [unique_id "acFXDEtG4qlh1gvNjuJcUwAAAAE"]
[Mon Mar 23 23:06:52.691587 2026] [:error] [pid 38177:tid 38235] [client 20.123.7.214:22812] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "acFXDHsYW-_HCI66MukEcQAAAFQ"]
[Mon Mar 23 23:06:53.223772 2026] [:error] [pid 38177:tid 38227] [client 20.123.7.214:22794] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "acFXDXsYW-_HCI66MukEdQAAAEw"]
[Mon Mar 23 23:06:53.804195 2026] [:error] [pid 38276:tid 38287] [client 20.123.7.214:22816] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "acFXDZoKGiI-a7oME3IRiwAAAMg"]
[Mon Mar 23 23:06:54.370407 2026] [:error] [pid 38276:tid 38291] [client 20.123.7.214:22796] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "acFXDpoKGiI-a7oME3IRjgAAAMw"]
[Mon Mar 23 23:06:54.908876 2026] [:error] [pid 52341:tid 52345] [client 20.123.7.214:22860] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acFXDqPKTBDR2u47Gb0S-QAAAUI"]
[Mon Mar 23 23:06:55.433416 2026] [:error] [pid 38178:tid 38252] [client 20.123.7.214:22793] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acFXDw0axWfXsVvR9udWLwAAAIo"]
[Mon Mar 23 23:06:55.937977 2026] [:error] [pid 38276:tid 38283] [client 20.123.7.214:22805] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acFXD5oKGiI-a7oME3IRjwAAAMQ"]
[Mon Mar 23 23:06:56.457409 2026] [:error] [pid 38176:tid 38206] [client 20.123.7.214:22806] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acFXEEtG4qlh1gvNjuJcXQAAABM"]
[Mon Mar 23 23:06:56.992378 2026] [:error] [pid 52341:tid 52349] [client 20.123.7.214:22791] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "acFXEKPKTBDR2u47Gb0S_AAAAUY"]
[Mon Mar 23 23:06:57.535163 2026] [:error] [pid 52341:tid 52361] [client 20.123.7.214:22880] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "acFXEaPKTBDR2u47Gb0S_wAAAVI"]
[Mon Mar 23 23:07:00.495195 2026] [:error] [pid 38178:tid 38251] [client 20.123.7.214:22904] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "acFXFA0axWfXsVvR9udWNwAAAIk"]
[Mon Mar 23 23:07:01.006001 2026] [:error] [pid 38306:tid 38327] [client 20.123.7.214:22895] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "acFXFTkL8qwu-hHc6BjJ7AAAARM"]
[Mon Mar 23 23:07:01.514813 2026] [:error] [pid 38178:tid 38249] [client 20.123.7.214:22910] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "acFXFQ0axWfXsVvR9udWOAAAAIc"]
[Mon Mar 23 23:07:02.103082 2026] [:error] [pid 38178:tid 38256] [client 20.123.7.214:22786] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "acFXFg0axWfXsVvR9udWOgAAAI4"]
[Mon Mar 23 23:07:02.643842 2026] [:error] [pid 38306:tid 38310] [client 20.123.7.214:22800] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "acFXFjkL8qwu-hHc6BjJ8QAAAQI"]
[Mon Mar 23 23:07:04.159546 2026] [:error] [pid 38178:tid 38255] [client 20.123.7.214:22909] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "acFXGA0axWfXsVvR9udWPQAAAI0"]
[Mon Mar 23 23:07:04.690729 2026] [:error] [pid 38176:tid 38197] [client 20.123.7.214:22821] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acFXGEtG4qlh1gvNjuJcYQAAAAo"]
[Mon Mar 23 23:07:05.287064 2026] [:error] [pid 38276:tid 38297] [client 20.123.7.214:22831] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acFXGZoKGiI-a7oME3IRlQAAANI"]
[Mon Mar 23 23:07:05.804412 2026] [:error] [pid 38178:tid 38265] [client 20.123.7.214:22787] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acFXGQ0axWfXsVvR9udWPwAAAJc"]
[Mon Mar 23 23:07:06.339940 2026] [:error] [pid 38276:tid 38295] [client 20.123.7.214:22798] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acFXGpoKGiI-a7oME3IRlwAAANA"]
[Mon Mar 23 23:07:07.232729 2026] [:error] [pid 38177:tid 38229] [client 20.123.7.214:22803] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "acFXG3sYW-_HCI66MukEhAAAAE4"]
[Mon Mar 23 23:07:14.801855 2026] [:error] [pid 38176:tid 38194] [client 20.123.7.214:22833] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "acFXIktG4qlh1gvNjuJcagAAAAc"]
[Mon Mar 23 23:07:15.322096 2026] [:error] [pid 38276:tid 38281] [client 20.123.7.214:22896] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "acFXI5oKGiI-a7oME3IRngAAAMI"]
[Mon Mar 23 23:07:17.955222 2026] [:error] [pid 38306:tid 38331] [client 20.123.7.214:22843] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "acFXJTkL8qwu-hHc6BjJ-wAAARc"]
[Mon Mar 23 23:07:18.463977 2026] [:error] [pid 52341:tid 52347] [client 20.123.7.214:22792] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acFXJqPKTBDR2u47Gb0THwAAAUQ"]
[Mon Mar 23 23:07:19.006783 2026] [:error] [pid 52341:tid 52345] [client 20.123.7.214:22841] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acFXJ6PKTBDR2u47Gb0TIQAAAUI"]
[Mon Mar 23 23:07:19.549863 2026] [:error] [pid 38306:tid 38319] [client 20.123.7.214:22809] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acFXJzkL8qwu-hHc6BjJ_QAAAQs"]
[Mon Mar 23 23:07:20.086515 2026] [:error] [pid 38276:tid 38296] [client 20.123.7.214:22906] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acFXKJoKGiI-a7oME3IRpAAAANE"]
[Mon Mar 23 23:07:20.648924 2026] [:error] [pid 38176:tid 38190] [client 20.123.7.214:22785] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hehe.php"] [unique_id "acFXKEtG4qlh1gvNjuJcegAAAAM"]
[Mon Mar 23 23:07:21.169403 2026] [:error] [pid 38276:tid 38300] [client 20.123.7.214:22822] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hehe.php"] [unique_id "acFXKZoKGiI-a7oME3IRpQAAANU"]
[Mon Mar 23 23:07:21.676103 2026] [:error] [pid 38276:tid 38287] [client 20.123.7.214:22785] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hehe.php"] [unique_id "acFXKZoKGiI-a7oME3IRpgAAAMg"]
[Mon Mar 23 23:07:23.064963 2026] [:error] [pid 38306:tid 38315] [client 20.123.7.214:22861] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hehe.php"] [unique_id "acFXKzkL8qwu-hHc6BjKAAAAAQc"]
[Mon Mar 23 23:07:23.578992 2026] [:error] [pid 38176:tid 38199] [client 20.123.7.214:22903] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acFXK0tG4qlh1gvNjuJcggAAAAw"]
[Mon Mar 23 23:07:24.145362 2026] [:error] [pid 38178:tid 38249] [client 20.123.7.214:22901] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acFXLA0axWfXsVvR9udWUQAAAIc"]
[Mon Mar 23 23:07:24.661914 2026] [:error] [pid 38276:tid 38279] [client 20.123.7.214:22807] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acFXLJoKGiI-a7oME3IRrAAAAMA"]
[Mon Mar 23 23:07:25.191569 2026] [:error] [pid 52341:tid 52361] [client 20.123.7.214:22811] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acFXLaPKTBDR2u47Gb0TJQAAAVI"]
[Mon Mar 23 23:07:25.746325 2026] [:error] [pid 38276:tid 38294] [client 20.123.7.214:4032] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "acFXLZoKGiI-a7oME3IRrwAAAM8"]
[Mon Mar 23 23:07:29.268065 2026] [:error] [pid 38176:tid 38211] [client 20.123.7.214:4041] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "acFXMUtG4qlh1gvNjuJciwAAABg"]
[Mon Mar 23 23:07:29.798792 2026] [:error] [pid 52341:tid 52360] [client 20.123.7.214:4033] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "acFXMaPKTBDR2u47Gb0TMAAAAVE"]
[Mon Mar 23 23:07:30.310384 2026] [:error] [pid 38177:tid 38237] [client 20.123.7.214:22827] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "acFXMnsYW-_HCI66MukElgAAAFY"]
[Mon Mar 23 23:07:30.856410 2026] [:error] [pid 38177:tid 38226] [client 20.123.7.214:22832] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acFXMnsYW-_HCI66MukEmAAAAEs"]
[Mon Mar 23 23:07:31.466745 2026] [:error] [pid 38177:tid 38230] [client 20.123.7.214:4049] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acFXM3sYW-_HCI66MukEmwAAAE8"]
[Mon Mar 23 23:07:31.972023 2026] [:error] [pid 38176:tid 38193] [client 20.123.7.214:22905] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acFXM0tG4qlh1gvNjuJckwAAAAY"]
[Mon Mar 23 23:07:32.502160 2026] [:error] [pid 38276:tid 38300] [client 20.123.7.214:22856] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acFXNJoKGiI-a7oME3IRtAAAANU"]
[Mon Mar 23 23:07:33.041908 2026] [:error] [pid 38178:tid 38243] [client 20.123.7.214:22837] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "acFXNQ0axWfXsVvR9udWZAAAAIE"]
[Mon Mar 23 23:07:34.159478 2026] [:error] [pid 38176:tid 38199] [client 20.123.7.214:4048] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "acFXNktG4qlh1gvNjuJclwAAAAw"]
[Mon Mar 23 23:07:36.988909 2026] [:error] [pid 38276:tid 38290] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Mon Mar 23 23:07:37.300521 2026] [:error] [pid 38276:tid 38292] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Mon Mar 23 23:07:37.553092 2026] [:error] [pid 38276:tid 38301] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Mon Mar 23 23:07:37.812359 2026] [:error] [pid 38276:tid 38281] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Mon Mar 23 23:07:38.067987 2026] [:error] [pid 38276:tid 38294] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Mon Mar 23 23:07:38.325056 2026] [:error] [pid 38276:tid 38295] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Mon Mar 23 23:07:38.579436 2026] [:error] [pid 38276:tid 38282] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-104.php
[Mon Mar 23 23:07:38.834453 2026] [:error] [pid 38276:tid 38284] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Mon Mar 23 23:07:39.095342 2026] [:error] [pid 38276:tid 38301] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Mon Mar 23 23:07:39.370180 2026] [:error] [pid 38276:tid 38281] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Mon Mar 23 23:07:40.209931 2026] [:error] [pid 38276:tid 38297] [client 20.123.7.214:22872] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Mon Mar 23 23:07:40.462036 2026] [:error] [pid 38276:tid 38285] [client 20.123.7.214:22872] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acFXPJoKGiI-a7oME3IR0AAAAMY"]
[Mon Mar 23 23:07:41.036437 2026] [:error] [pid 38176:tid 38196] [client 20.123.7.214:22886] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acFXPUtG4qlh1gvNjuJcsQAAAAk"]
[Mon Mar 23 23:07:41.578459 2026] [:error] [pid 52341:tid 52366] [client 20.123.7.214:4045] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acFXPaPKTBDR2u47Gb0TOgAAAVc"]
[Mon Mar 23 23:07:42.119597 2026] [:error] [pid 38177:tid 38219] [client 20.123.7.214:22871] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acFXPnsYW-_HCI66MukErQAAAEQ"]
[Mon Mar 23 23:07:42.710981 2026] [:error] [pid 38177:tid 38222] [client 20.123.7.214:4061] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "acFXPnsYW-_HCI66MukErgAAAEc"]
[Mon Mar 23 23:07:43.232843 2026] [:error] [pid 52341:tid 52359] [client 20.123.7.214:22784] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "acFXP6PKTBDR2u47Gb0TQAAAAVA"]
[Mon Mar 23 23:07:43.753466 2026] [:error] [pid 38177:tid 38237] [client 20.123.7.214:22898] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "acFXP3sYW-_HCI66MukEsQAAAFY"]
[Mon Mar 23 23:07:44.259114 2026] [:error] [pid 52341:tid 52349] [client 20.123.7.214:22868] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "acFXQKPKTBDR2u47Gb0TRgAAAUY"]
[Mon Mar 23 23:07:44.794017 2026] [:error] [pid 52341:tid 52362] [client 20.123.7.214:22810] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acFXQKPKTBDR2u47Gb0TSgAAAVM"]
[Mon Mar 23 23:07:45.325157 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:4052] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acFXQaPKTBDR2u47Gb0TTgAAAUM"]
[Mon Mar 23 23:07:45.837114 2026] [:error] [pid 38306:tid 38309] [client 20.123.7.214:22873] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acFXQTkL8qwu-hHc6BjKCgAAAQE"]
[Mon Mar 23 23:07:46.339037 2026] [:error] [pid 52341:tid 52355] [client 20.123.7.214:22808] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acFXQqPKTBDR2u47Gb0TVgAAAUw"]
[Mon Mar 23 23:07:46.850767 2026] [:error] [pid 52341:tid 52360] [client 20.123.7.214:3974] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acFXQqPKTBDR2u47Gb0TWQAAAVE"]
[Mon Mar 23 23:07:47.376761 2026] [:error] [pid 38306:tid 38322] [client 20.123.7.214:4054] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acFXQzkL8qwu-hHc6BjKDAAAAQ4"]
[Mon Mar 23 23:07:47.921513 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:4094] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acFXQ6PKTBDR2u47Gb0TXgAAAU4"]
[Mon Mar 23 23:07:48.432922 2026] [:error] [pid 38178:tid 38246] [client 20.123.7.214:4064] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acFXRA0axWfXsVvR9udWcgAAAIQ"]
[Mon Mar 23 23:07:48.982782 2026] [:error] [pid 38276:tid 38299] [client 20.123.7.214:22802] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acFXRJoKGiI-a7oME3IR1wAAANQ"]
[Mon Mar 23 23:07:49.508863 2026] [:error] [pid 38176:tid 38204] [client 20.123.7.214:4092] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acFXRUtG4qlh1gvNjuJcwQAAABE"]
[Mon Mar 23 23:07:57.081608 2026] [:error] [pid 52341:tid 52356] [client 20.123.7.214:22911] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acFXTaPKTBDR2u47Gb0ThQAAAU0"]
[Mon Mar 23 23:07:57.613973 2026] [:error] [pid 38176:tid 38206] [client 20.123.7.214:22847] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acFXTUtG4qlh1gvNjuJc0QAAABM"]
[Mon Mar 23 23:07:59.226654 2026] [:error] [pid 52341:tid 52356] [client 20.123.7.214:22825] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acFXT6PKTBDR2u47Gb0TkQAAAU0"]
[Mon Mar 23 23:07:59.742768 2026] [:error] [pid 38178:tid 38242] [client 20.123.7.214:22817] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acFXTw0axWfXsVvR9udWeQAAAIA"]
[Mon Mar 23 23:08:00.248654 2026] [:error] [pid 38178:tid 38259] [client 20.123.7.214:22876] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acFXUA0axWfXsVvR9udWewAAAJE"]
[Mon Mar 23 23:08:00.780578 2026] [:error] [pid 38176:tid 38187] [client 20.123.7.214:4043] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acFXUEtG4qlh1gvNjuJc0gAAAAA"]
[Mon Mar 23 23:08:01.292604 2026] [:error] [pid 38176:tid 38209] [client 20.123.7.214:22867] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "acFXUUtG4qlh1gvNjuJc0wAAABY"]
[Mon Mar 23 23:08:01.850792 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:4074] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "acFXUaPKTBDR2u47Gb0TlgAAAUM"]
[Mon Mar 23 23:08:04.126390 2026] [:error] [pid 38276:tid 38286] [client 20.123.7.214:22801] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "acFXVJoKGiI-a7oME3ISBQAAAMc"]
[Mon Mar 23 23:08:04.661923 2026] [:error] [pid 52341:tid 52349] [client 20.123.7.214:4040] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "acFXVKPKTBDR2u47Gb0TogAAAUY"]
[Mon Mar 23 23:08:05.168291 2026] [:error] [pid 38306:tid 38311] [client 20.123.7.214:4036] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acFXVTkL8qwu-hHc6BjKHgAAAQM"]
[Mon Mar 23 23:08:05.690325 2026] [:error] [pid 38178:tid 38246] [client 20.123.7.214:4086] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acFXVQ0axWfXsVvR9udWgQAAAIQ"]
[Mon Mar 23 23:08:06.237180 2026] [:error] [pid 38306:tid 38326] [client 20.123.7.214:22838] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acFXVjkL8qwu-hHc6BjKIAAAARI"]
[Mon Mar 23 23:08:06.785677 2026] [:error] [pid 52341:tid 52359] [client 20.123.7.214:22864] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acFXVqPKTBDR2u47Gb0TowAAAVA"]
[Mon Mar 23 23:08:08.373522 2026] [:error] [pid 38177:tid 38218] [client 20.123.7.214:22900] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "acFXWHsYW-_HCI66MukExAAAAEM"]
[Mon Mar 23 23:08:08.895199 2026] [:error] [pid 52341:tid 52343] [client 20.123.7.214:22894] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "acFXWKPKTBDR2u47Gb0TpgAAAUA"]
[Mon Mar 23 23:08:09.421824 2026] [:error] [pid 52341:tid 52360] [client 20.123.7.214:22891] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "acFXWaPKTBDR2u47Gb0TqgAAAVE"]
[Mon Mar 23 23:08:09.925845 2026] [:error] [pid 38276:tid 38293] [client 20.123.7.214:22830] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "acFXWZoKGiI-a7oME3ISEAAAAM4"]
[Mon Mar 23 23:08:10.435845 2026] [:error] [pid 38178:tid 38262] [client 20.123.7.214:22842] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acFXWg0axWfXsVvR9udWhQAAAJQ"]
[Mon Mar 23 23:08:10.939150 2026] [:error] [pid 38178:tid 38266] [client 20.123.7.214:4038] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acFXWg0axWfXsVvR9udWhgAAAJg"]
[Mon Mar 23 23:08:11.444147 2026] [:error] [pid 38176:tid 38189] [client 20.123.7.214:22795] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acFXW0tG4qlh1gvNjuJc2gAAAAI"]
[Mon Mar 23 23:08:11.948364 2026] [:error] [pid 38176:tid 38206] [client 20.123.7.214:3926] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acFXW0tG4qlh1gvNjuJc3QAAABM"]
[Mon Mar 23 23:08:12.472948 2026] [:error] [pid 52341:tid 52343] [client 20.123.7.214:22828] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "acFXXKPKTBDR2u47Gb0TtQAAAUA"]
[Mon Mar 23 23:08:12.985502 2026] [:error] [pid 38176:tid 38190] [client 20.123.7.214:22836] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "acFXXEtG4qlh1gvNjuJc4gAAAAM"]
[Mon Mar 23 23:08:13.580603 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:22889] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "acFXXaPKTBDR2u47Gb0TuwAAAUM"]
[Mon Mar 23 23:08:15.126771 2026] [:error] [pid 38306:tid 38320] [client 20.123.7.214:4069] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "acFXXzkL8qwu-hHc6BjKNAAAAQw"]
[Mon Mar 23 23:08:15.637877 2026] [:error] [pid 38306:tid 38315] [client 20.123.7.214:22840] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "acFXXzkL8qwu-hHc6BjKOAAAAQc"]
[Mon Mar 23 23:08:16.143347 2026] [:error] [pid 38306:tid 38329] [client 20.123.7.214:3984] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "acFXYDkL8qwu-hHc6BjKOQAAARU"]
[Mon Mar 23 23:08:17.255620 2026] [:error] [pid 38178:tid 38253] [client 20.123.7.214:4093] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "acFXYQ0axWfXsVvR9udWkAAAAIs"]
[Mon Mar 23 23:08:17.769693 2026] [:error] [pid 52341:tid 52344] [client 20.123.7.214:4014] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "acFXYaPKTBDR2u47Gb0TwgAAAUE"]
[Mon Mar 23 23:08:18.875315 2026] [:error] [pid 52341:tid 52347] [client 20.123.7.214:4042] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxw.php"] [unique_id "acFXYqPKTBDR2u47Gb0TxgAAAUQ"]
[Mon Mar 23 23:08:20.088358 2026] [:error] [pid 52341:tid 52348] [client 20.123.7.214:3972] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxw.php"] [unique_id "acFXZKPKTBDR2u47Gb0TzwAAAUU"]
[Mon Mar 23 23:08:20.596695 2026] [:error] [pid 38178:tid 38251] [client 20.123.7.214:3968] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxw.php"] [unique_id "acFXZA0axWfXsVvR9udWmAAAAIk"]
[Mon Mar 23 23:08:21.119480 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:22820] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxw.php"] [unique_id "acFXZaPKTBDR2u47Gb0T1gAAAUM"]
[Mon Mar 23 23:08:21.671094 2026] [:error] [pid 38177:tid 38222] [client 20.123.7.214:3980] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "acFXZXsYW-_HCI66MukEyQAAAEc"]
[Mon Mar 23 23:08:22.220618 2026] [:error] [pid 52341:tid 52361] [client 20.123.7.214:3996] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "acFXZqPKTBDR2u47Gb0T2gAAAVI"]
[Mon Mar 23 23:08:23.381642 2026] [:error] [pid 52341:tid 52366] [client 20.123.7.214:3992] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "acFXZ6PKTBDR2u47Gb0T4wAAAVc"]
[Mon Mar 23 23:08:23.898496 2026] [:error] [pid 38176:tid 38201] [client 20.123.7.214:22877] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "acFXZ0tG4qlh1gvNjuJc6wAAAA4"]
[Mon Mar 23 23:08:24.466478 2026] [:error] [pid 38176:tid 38191] [client 20.123.7.214:3995] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acFXaEtG4qlh1gvNjuJc8wAAAAQ"]
[Mon Mar 23 23:08:24.985165 2026] [:error] [pid 52341:tid 52351] [client 20.123.7.214:3976] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acFXaKPKTBDR2u47Gb0T6QAAAUg"]
[Mon Mar 23 23:08:25.503533 2026] [:error] [pid 38306:tid 38331] [client 20.123.7.214:4005] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acFXaTkL8qwu-hHc6BjKQAAAARc"]
[Mon Mar 23 23:08:26.061617 2026] [:error] [pid 38276:tid 38292] [client 20.123.7.214:22788] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acFXapoKGiI-a7oME3ISFgAAAM0"]
[Mon Mar 23 23:08:26.626027 2026] [:error] [pid 38306:tid 38324] [client 20.123.7.214:22884] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acFXajkL8qwu-hHc6BjKRQAAARA"]
[Mon Mar 23 23:08:27.133518 2026] [:error] [pid 52341:tid 52353] [client 20.123.7.214:22852] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acFXa6PKTBDR2u47Gb0T8QAAAUo"]
[Mon Mar 23 23:08:27.649573 2026] [:error] [pid 38178:tid 38252] [client 20.123.7.214:22829] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acFXaw0axWfXsVvR9udWmgAAAIo"]
[Mon Mar 23 23:08:28.199570 2026] [:error] [pid 38178:tid 38255] [client 20.123.7.214:22835] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acFXbA0axWfXsVvR9udWnAAAAI0"]
[Mon Mar 23 23:08:28.701576 2026] [:error] [pid 38178:tid 38257] [client 20.123.7.214:3977] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acFXbA0axWfXsVvR9udWnQAAAI8"]
[Mon Mar 23 23:08:29.226399 2026] [:error] [pid 38177:tid 38220] [client 20.123.7.214:22819] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acFXbXsYW-_HCI66MukE0AAAAEU"]
[Mon Mar 23 23:08:29.755766 2026] [:error] [pid 38176:tid 38200] [client 20.123.7.214:22824] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acFXbUtG4qlh1gvNjuJc-QAAAA0"]
[Mon Mar 23 23:08:30.258169 2026] [:error] [pid 38177:tid 38230] [client 20.123.7.214:22870] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acFXbnsYW-_HCI66MukE0QAAAE8"]
[Mon Mar 23 23:08:30.813125 2026] [:error] [pid 38178:tid 38262] [client 20.123.7.214:4062] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acFXbg0axWfXsVvR9udWoAAAAJQ"]
[Mon Mar 23 23:08:32.339900 2026] [:error] [pid 38177:tid 38234] [client 20.123.7.214:4078] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acFXcHsYW-_HCI66MukE0gAAAFM"]
[Mon Mar 23 23:08:33.440533 2026] [:error] [pid 52341:tid 52355] [client 20.123.7.214:4059] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acFXcaPKTBDR2u47Gb0UBQAAAUw"]
[Mon Mar 23 23:08:33.952715 2026] [:error] [pid 38276:tid 38290] [client 20.123.7.214:4068] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acFXcZoKGiI-a7oME3ISIQAAAMs"]
[Mon Mar 23 23:08:34.463036 2026] [:error] [pid 38276:tid 38281] [client 20.123.7.214:4003] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/varb.php"] [unique_id "acFXcpoKGiI-a7oME3ISJAAAAMI"]
[Mon Mar 23 23:08:34.981313 2026] [:error] [pid 38276:tid 38279] [client 20.123.7.214:22865] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/varb.php"] [unique_id "acFXcpoKGiI-a7oME3ISKAAAAMA"]
[Mon Mar 23 23:08:35.491073 2026] [:error] [pid 38176:tid 38202] [client 20.123.7.214:3921] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/varb.php"] [unique_id "acFXc0tG4qlh1gvNjuJdAQAAAA8"]
[Mon Mar 23 23:08:36.055625 2026] [:error] [pid 52341:tid 52354] [client 20.123.7.214:22851] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/varb.php"] [unique_id "acFXdKPKTBDR2u47Gb0UCQAAAUs"]
[Mon Mar 23 23:08:36.581274 2026] [:error] [pid 38178:tid 38264] [client 20.123.7.214:3986] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "acFXdA0axWfXsVvR9udWpgAAAJY"]
[Mon Mar 23 23:08:37.109697 2026] [:error] [pid 38306:tid 38331] [client 20.123.7.214:4039] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "acFXdTkL8qwu-hHc6BjKTgAAARc"]
[Mon Mar 23 23:08:37.651749 2026] [:error] [pid 38176:tid 38198] [client 20.123.7.214:22834] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "acFXdUtG4qlh1gvNjuJdAwAAAAs"]
[Mon Mar 23 23:08:38.182115 2026] [:error] [pid 38176:tid 38194] [client 20.123.7.214:4035] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "acFXdktG4qlh1gvNjuJdBgAAAAc"]
[Mon Mar 23 23:08:38.710790 2026] [:error] [pid 38176:tid 38208] [client 20.123.7.214:22878] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acFXdktG4qlh1gvNjuJdCAAAABU"]
[Mon Mar 23 23:08:39.220019 2026] [:error] [pid 38276:tid 38288] [client 20.123.7.214:3990] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acFXd5oKGiI-a7oME3ISLQAAAMk"]
[Mon Mar 23 23:08:39.746998 2026] [:error] [pid 38177:tid 38224] [client 20.123.7.214:4017] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acFXd3sYW-_HCI66MukE1gAAAEk"]
[Mon Mar 23 23:08:40.260285 2026] [:error] [pid 38177:tid 38232] [client 20.123.7.214:22844] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Mon Mar 23 23:08:40.514156 2026] [:error] [pid 38177:tid 38228] [client 20.123.7.214:22844] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Mon Mar 23 23:08:40.784961 2026] [:error] [pid 38177:tid 38215] [client 20.123.7.214:22844] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Mon Mar 23 23:08:41.039740 2026] [:error] [pid 38177:tid 38237] [client 20.123.7.214:22844] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Mon Mar 23 23:08:41.296196 2026] [:error] [pid 38177:tid 38233] [client 20.123.7.214:22844] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Mon Mar 23 23:08:42.158809 2026] [:error] [pid 38177:tid 38239] [client 20.123.7.214:22844] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Mon Mar 23 23:08:42.412612 2026] [:error] [pid 38177:tid 38236] [client 20.123.7.214:22844] File does not exist: /usr/local/apache/htdocs/suspended-page/lm15.php
[Mon Mar 23 23:08:42.950753 2026] [:error] [pid 38177:tid 38216] [client 20.123.7.214:22844] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Mon Mar 23 23:08:43.214164 2026] [:error] [pid 38177:tid 38230] [client 20.123.7.214:22844] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Mon Mar 23 23:08:43.470491 2026] [:error] [pid 38177:tid 38234] [client 20.123.7.214:22844] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Mon Mar 23 23:08:43.721194 2026] [:error] [pid 38177:tid 38217] [client 20.123.7.214:22844] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "acFXe3sYW-_HCI66MukE5gAAAEI"]
[Mon Mar 23 23:08:44.223521 2026] [:error] [pid 52341:tid 52359] [client 20.123.7.214:4037] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "acFXfKPKTBDR2u47Gb0UFQAAAVA"]
[Mon Mar 23 23:08:45.336247 2026] [:error] [pid 38178:tid 38261] [client 20.123.7.214:4025] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "acFXfQ0axWfXsVvR9udWqwAAAJM"]
[Mon Mar 23 23:08:46.441740 2026] [:error] [pid 52341:tid 52365] [client 20.123.7.214:4051] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "acFXfqPKTBDR2u47Gb0UGwAAAVY"]
[Mon Mar 23 23:08:46.943466 2026] [:error] [pid 38306:tid 38323] [client 20.123.7.214:4053] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acFXfjkL8qwu-hHc6BjKWgAAAQ8"]
[Mon Mar 23 23:08:47.447661 2026] [:error] [pid 52341:tid 52345] [client 20.123.7.214:4060] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acFXf6PKTBDR2u47Gb0UIQAAAUI"]
[Mon Mar 23 23:08:47.973052 2026] [:error] [pid 52341:tid 52366] [client 20.123.7.214:22862] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acFXf6PKTBDR2u47Gb0UJAAAAVc"]
[Mon Mar 23 23:08:48.479512 2026] [:error] [pid 52341:tid 52347] [client 20.123.7.214:3931] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acFXgKPKTBDR2u47Gb0UKAAAAUQ"]
[Mon Mar 23 23:08:48.991831 2026] [:error] [pid 52341:tid 52352] [client 20.123.7.214:4001] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "acFXgKPKTBDR2u47Gb0ULAAAAUk"]
[Mon Mar 23 23:08:49.511990 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:3969] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "acFXgaPKTBDR2u47Gb0ULwAAAU4"]
[Mon Mar 23 23:08:50.030399 2026] [:error] [pid 38306:tid 38328] [client 20.123.7.214:4016] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "acFXgjkL8qwu-hHc6BjKZAAAARQ"]
[Mon Mar 23 23:08:50.534535 2026] [:error] [pid 38176:tid 38206] [client 20.123.7.214:3971] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "acFXgktG4qlh1gvNjuJdGgAAABM"]
[Mon Mar 23 23:08:51.041652 2026] [:error] [pid 38176:tid 38196] [client 20.123.7.214:4073] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "acFXg0tG4qlh1gvNjuJdGwAAAAk"]
[Mon Mar 23 23:08:51.547810 2026] [:error] [pid 52341:tid 52352] [client 20.123.7.214:4087] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "acFXg6PKTBDR2u47Gb0UNQAAAUk"]
[Mon Mar 23 23:08:52.626977 2026] [:error] [pid 52341:tid 52354] [client 20.123.7.214:22846] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "acFXhKPKTBDR2u47Gb0UPAAAAUs"]
[Mon Mar 23 23:08:53.178447 2026] [:error] [pid 38276:tid 38280] [client 20.123.7.214:22890] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "acFXhZoKGiI-a7oME3ISOAAAAME"]
[Mon Mar 23 23:08:53.725686 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:3988] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5b9ac.php"] [unique_id "acFXhaPKTBDR2u47Gb0UQAAAAUM"]
[Mon Mar 23 23:08:54.228249 2026] [:error] [pid 38176:tid 38193] [client 20.123.7.214:3981] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5b9ac.php"] [unique_id "acFXhktG4qlh1gvNjuJdHgAAAAY"]
[Mon Mar 23 23:08:54.733986 2026] [:error] [pid 38178:tid 38253] [client 20.123.7.214:4076] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5b9ac.php"] [unique_id "acFXhg0axWfXsVvR9udWrAAAAIs"]
[Mon Mar 23 23:08:55.271460 2026] [:error] [pid 52341:tid 52348] [client 20.123.7.214:4081] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5b9ac.php"] [unique_id "acFXh6PKTBDR2u47Gb0URAAAAUU"]
[Mon Mar 23 23:08:55.869799 2026] [:error] [pid 38177:tid 38232] [client 20.123.7.214:4079] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/okxh.php"] [unique_id "acFXh3sYW-_HCI66MukE6gAAAFE"]
[Mon Mar 23 23:08:56.379728 2026] [:error] [pid 38176:tid 38211] [client 20.123.7.214:3906] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/okxh.php"] [unique_id "acFXiEtG4qlh1gvNjuJdIQAAABg"]
[Mon Mar 23 23:08:56.890402 2026] [:error] [pid 38178:tid 38266] [client 20.123.7.214:4004] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/okxh.php"] [unique_id "acFXiA0axWfXsVvR9udWrgAAAJg"]
[Mon Mar 23 23:08:57.399477 2026] [:error] [pid 38176:tid 38210] [client 20.123.7.214:4070] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/okxh.php"] [unique_id "acFXiUtG4qlh1gvNjuJdIgAAABc"]
[Mon Mar 23 23:08:57.935455 2026] [:error] [pid 38177:tid 38233] [client 20.123.7.214:22818] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "acFXiXsYW-_HCI66MukE7gAAAFI"]
[Mon Mar 23 23:08:58.444326 2026] [:error] [pid 38176:tid 38199] [client 20.123.7.214:4013] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "acFXiktG4qlh1gvNjuJdIwAAAAw"]
[Mon Mar 23 23:08:58.964548 2026] [:error] [pid 38176:tid 38190] [client 20.123.7.214:3979] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "acFXiktG4qlh1gvNjuJdJgAAAAM"]
[Mon Mar 23 23:08:59.482953 2026] [:error] [pid 38178:tid 38263] [client 20.123.7.214:3973] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "acFXiw0axWfXsVvR9udWswAAAJU"]
[Mon Mar 23 23:09:01.027414 2026] [:error] [pid 38177:tid 38238] [client 20.123.7.214:4075] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acFXjXsYW-_HCI66MukE8QAAAFc"]
[Mon Mar 23 23:09:01.535960 2026] [:error] [pid 38176:tid 38188] [client 20.123.7.214:3932] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acFXjUtG4qlh1gvNjuJdKQAAAAE"]
[Mon Mar 23 23:09:02.139193 2026] [:error] [pid 38306:tid 38332] [client 20.123.7.214:4058] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acFXjjkL8qwu-hHc6BjKgAAAARg"]
[Mon Mar 23 23:09:02.692294 2026] [:error] [pid 38306:tid 38317] [client 20.123.7.214:3978] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acFXjjkL8qwu-hHc6BjKhAAAAQk"]
[Mon Mar 23 23:09:03.313782 2026] [:error] [pid 38306:tid 38308] [client 20.123.7.214:3997] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "acFXjzkL8qwu-hHc6BjKiAAAAQA"]
[Mon Mar 23 23:09:03.899464 2026] [:error] [pid 38306:tid 38313] [client 20.123.7.214:4090] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "acFXjzkL8qwu-hHc6BjKjAAAAQU"]
[Mon Mar 23 23:09:04.447608 2026] [:error] [pid 52341:tid 52367] [client 20.123.7.214:22902] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "acFXkKPKTBDR2u47Gb0UZgAAAVg"]
[Mon Mar 23 23:09:04.973581 2026] [:error] [pid 38178:tid 38253] [client 20.123.7.214:3917] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "acFXkA0axWfXsVvR9udWuwAAAIs"]
[Mon Mar 23 23:09:08.500104 2026] [:error] [pid 38178:tid 38262] [client 20.123.7.214:3993] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acFXlA0axWfXsVvR9udWvgAAAJQ"]
[Mon Mar 23 23:09:09.011300 2026] [:error] [pid 38306:tid 38328] [client 20.123.7.214:4066] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acFXlTkL8qwu-hHc6BjKmQAAARQ"]
[Mon Mar 23 23:09:09.535049 2026] [:error] [pid 38306:tid 38332] [client 20.123.7.214:4018] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acFXlTkL8qwu-hHc6BjKnAAAARg"]
[Mon Mar 23 23:09:10.069091 2026] [:error] [pid 38306:tid 38330] [client 20.123.7.214:4077] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acFXljkL8qwu-hHc6BjKowAAARY"]
[Mon Mar 23 23:09:10.679442 2026] [:error] [pid 38306:tid 38315] [client 20.123.7.214:4056] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acFXljkL8qwu-hHc6BjKqAAAAQc"]
[Mon Mar 23 23:09:11.213610 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:22899] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acFXl6PKTBDR2u47Gb0UdgAAAUM"]
[Mon Mar 23 23:09:11.717106 2026] [:error] [pid 52341:tid 52351] [client 20.123.7.214:3842] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acFXl6PKTBDR2u47Gb0UegAAAUg"]
[Mon Mar 23 23:09:12.243093 2026] [:error] [pid 38176:tid 38197] [client 20.123.7.214:3994] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acFXmEtG4qlh1gvNjuJdNwAAAAo"]
[Mon Mar 23 23:09:12.745369 2026] [:error] [pid 38176:tid 38203] [client 20.123.7.214:4007] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "acFXmEtG4qlh1gvNjuJdOAAAABA"]
[Mon Mar 23 23:09:13.279474 2026] [:error] [pid 38177:tid 38239] [client 20.123.7.214:4050] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "acFXmXsYW-_HCI66MukE_QAAAFg"]
[Mon Mar 23 23:09:13.803255 2026] [:error] [pid 38306:tid 38311] [client 20.123.7.214:4019] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "acFXmTkL8qwu-hHc6BjKsQAAAQM"]
[Mon Mar 23 23:09:14.331130 2026] [:error] [pid 38176:tid 38204] [client 20.123.7.214:22812] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "acFXmktG4qlh1gvNjuJdOgAAABE"]
[Mon Mar 23 23:09:14.847719 2026] [:error] [pid 52341:tid 52350] [client 20.123.7.214:3928] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acFXmqPKTBDR2u47Gb0UgQAAAUc"]
[Mon Mar 23 23:09:15.363383 2026] [:error] [pid 52341:tid 52353] [client 20.123.7.214:3852] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acFXm6PKTBDR2u47Gb0UhAAAAUo"]
[Mon Mar 23 23:09:16.902332 2026] [:error] [pid 38177:tid 38229] [client 20.123.7.214:3960] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acFXnHsYW-_HCI66MukFAQAAAE4"]
[Mon Mar 23 23:09:17.408186 2026] [:error] [pid 52341:tid 52364] [client 20.123.7.214:3933] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acFXnaPKTBDR2u47Gb0UiwAAAVU"]
[Mon Mar 23 23:09:18.021532 2026] [:error] [pid 38306:tid 38327] [client 20.123.7.214:22859] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/index.php"] [unique_id "acFXnjkL8qwu-hHc6BjKvQAAARM"]
[Mon Mar 23 23:09:18.541772 2026] [:error] [pid 38177:tid 38224] [client 20.123.7.214:3975] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/index.php"] [unique_id "acFXnnsYW-_HCI66MukFAgAAAEk"]
[Mon Mar 23 23:09:19.062579 2026] [:error] [pid 38178:tid 38254] [client 20.123.7.214:22845] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/index.php"] [unique_id "acFXnw0axWfXsVvR9udWwgAAAIw"]
[Mon Mar 23 23:09:19.590738 2026] [:error] [pid 38176:tid 38202] [client 20.123.7.214:4091] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/index.php"] [unique_id "acFXn0tG4qlh1gvNjuJdQwAAAA8"]
[Mon Mar 23 23:09:20.108420 2026] [:error] [pid 38176:tid 38188] [client 20.123.7.214:3930] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acFXoEtG4qlh1gvNjuJdRgAAAAE"]
[Mon Mar 23 23:09:20.622820 2026] [:error] [pid 38306:tid 38324] [client 20.123.7.214:22888] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acFXoDkL8qwu-hHc6BjKwAAAARA"]
[Mon Mar 23 23:09:21.750872 2026] [:error] [pid 38178:tid 38252] [client 20.123.7.214:4006] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acFXoQ0axWfXsVvR9udWxQAAAIo"]
[Mon Mar 23 23:09:22.281348 2026] [:error] [pid 38178:tid 38248] [client 20.123.7.214:3940] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acFXog0axWfXsVvR9udWyQAAAIY"]
[Mon Mar 23 23:09:22.863413 2026] [:error] [pid 52341:tid 52354] [client 20.123.7.214:4085] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acFXoqPKTBDR2u47Gb0UkQAAAUs"]
[Mon Mar 23 23:09:23.392985 2026] [:error] [pid 38306:tid 38322] [client 20.123.7.214:4071] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acFXozkL8qwu-hHc6BjKxQAAAQ4"]
[Mon Mar 23 23:09:23.923708 2026] [:error] [pid 52341:tid 52349] [client 20.123.7.214:3904] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acFXo6PKTBDR2u47Gb0UkgAAAUY"]
[Mon Mar 23 23:09:24.448729 2026] [:error] [pid 38276:tid 38282] [client 20.123.7.214:22892] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acFXpJoKGiI-a7oME3ISRwAAAMM"]
[Mon Mar 23 23:09:24.980791 2026] [:error] [pid 38276:tid 38281] [client 20.123.7.214:22879] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acFXpJoKGiI-a7oME3ISSAAAAMI"]
[Mon Mar 23 23:09:25.506874 2026] [:error] [pid 38177:tid 38232] [client 20.123.7.214:3985] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acFXpXsYW-_HCI66MukFBgAAAFE"]
[Mon Mar 23 23:09:26.018857 2026] [:error] [pid 52341:tid 52366] [client 20.123.7.214:4008] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acFXpqPKTBDR2u47Gb0UlgAAAVc"]
[Mon Mar 23 23:09:26.537576 2026] [:error] [pid 38177:tid 38219] [client 20.123.7.214:4055] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acFXpnsYW-_HCI66MukFCAAAAEQ"]
[Mon Mar 23 23:09:27.044364 2026] [:error] [pid 38306:tid 38321] [client 20.123.7.214:22839] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "acFXpzkL8qwu-hHc6BjKzQAAAQ0"]
[Mon Mar 23 23:09:27.561104 2026] [:error] [pid 38306:tid 38328] [client 20.123.7.214:4080] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "acFXpzkL8qwu-hHc6BjKzwAAARQ"]
[Mon Mar 23 23:09:28.076606 2026] [:error] [pid 38177:tid 38239] [client 20.123.7.214:3944] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "acFXqHsYW-_HCI66MukFCwAAAFg"]
[Mon Mar 23 23:09:28.577936 2026] [:error] [pid 52341:tid 52355] [client 20.123.7.214:3875] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "acFXqKPKTBDR2u47Gb0UmgAAAUw"]
[Mon Mar 23 23:09:29.100605 2026] [:error] [pid 38176:tid 38206] [client 20.123.7.214:3927] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "acFXqUtG4qlh1gvNjuJdVgAAABM"]
[Mon Mar 23 23:09:29.634729 2026] [:error] [pid 38176:tid 38211] [client 20.123.7.214:22858] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "acFXqUtG4qlh1gvNjuJdWgAAABg"]
[Mon Mar 23 23:09:30.230067 2026] [:error] [pid 38178:tid 38257] [client 20.123.7.214:4072] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "acFXqg0axWfXsVvR9udW0wAAAI8"]
[Mon Mar 23 23:09:30.734514 2026] [:error] [pid 38178:tid 38255] [client 20.123.7.214:4088] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "acFXqg0axWfXsVvR9udW1wAAAI0"]
[Mon Mar 23 23:09:31.265866 2026] [:error] [pid 52341:tid 52367] [client 20.123.7.214:4067] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/55b76.php"] [unique_id "acFXq6PKTBDR2u47Gb0UnAAAAVg"]
[Mon Mar 23 23:09:31.771693 2026] [:error] [pid 38176:tid 38188] [client 20.123.7.214:3943] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/55b76.php"] [unique_id "acFXq0tG4qlh1gvNjuJdZQAAAAE"]
[Mon Mar 23 23:09:32.302602 2026] [:error] [pid 38178:tid 38265] [client 20.123.7.214:4021] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/55b76.php"] [unique_id "acFXrA0axWfXsVvR9udW2AAAAJc"]
[Mon Mar 23 23:09:32.858734 2026] [:error] [pid 38306:tid 38330] [client 20.123.7.214:4083] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/55b76.php"] [unique_id "acFXrDkL8qwu-hHc6BjK1QAAARY"]
[Mon Mar 23 23:09:33.474541 2026] [:error] [pid 38178:tid 38243] [client 20.123.7.214:3983] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acFXrQ0axWfXsVvR9udW2gAAAIE"]
[Mon Mar 23 23:09:33.985212 2026] [:error] [pid 38306:tid 38309] [client 20.123.7.214:4028] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acFXrTkL8qwu-hHc6BjK2QAAAQE"]
[Mon Mar 23 23:09:34.517320 2026] [:error] [pid 38306:tid 38312] [client 20.123.7.214:3915] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acFXrjkL8qwu-hHc6BjK2gAAAQQ"]
[Mon Mar 23 23:09:35.019924 2026] [:error] [pid 52341:tid 52343] [client 20.123.7.214:3914] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acFXr6PKTBDR2u47Gb0UpwAAAUA"]
[Mon Mar 23 23:09:35.607113 2026] [:error] [pid 38176:tid 38203] [client 20.123.7.214:3958] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acFXr0tG4qlh1gvNjuJdaQAAABA"]
[Mon Mar 23 23:09:36.120427 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:3844] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acFXsKPKTBDR2u47Gb0UqQAAAU4"]
[Mon Mar 23 23:09:36.692107 2026] [:error] [pid 38176:tid 38209] [client 20.123.7.214:3851] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acFXsEtG4qlh1gvNjuJdagAAABY"]
[Mon Mar 23 23:09:37.206891 2026] [:error] [pid 38276:tid 38303] [client 20.123.7.214:3938] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acFXsZoKGiI-a7oME3ISSgAAANg"]
[Mon Mar 23 23:09:38.328301 2026] [:error] [pid 38178:tid 38260] [client 20.123.7.214:3897] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acFXsg0axWfXsVvR9udW2wAAAJI"]
[Mon Mar 23 23:09:38.838786 2026] [:error] [pid 38178:tid 38247] [client 20.123.7.214:3843] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acFXsg0axWfXsVvR9udW3QAAAIU"]
[Mon Mar 23 23:09:39.354540 2026] [:error] [pid 38176:tid 38210] [client 20.123.7.214:4011] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acFXs0tG4qlh1gvNjuJdcAAAABc"]
[Mon Mar 23 23:09:39.921336 2026] [:error] [pid 38306:tid 38321] [client 20.123.7.214:3854] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acFXszkL8qwu-hHc6BjK6QAAAQ0"]
[Mon Mar 23 23:09:40.425701 2026] [:error] [pid 38306:tid 38323] [client 20.123.7.214:3929] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "acFXtDkL8qwu-hHc6BjK7QAAAQ8"]
[Mon Mar 23 23:09:41.514965 2026] [:error] [pid 38306:tid 38321] [client 20.123.7.214:4095] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "acFXtTkL8qwu-hHc6BjK9QAAAQ0"]
[Mon Mar 23 23:09:42.047116 2026] [:error] [pid 38306:tid 38327] [client 20.123.7.214:3924] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "acFXtjkL8qwu-hHc6BjK-QAAARM"]
[Mon Mar 23 23:09:42.586324 2026] [:error] [pid 38306:tid 38309] [client 20.123.7.214:4065] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "acFXtjkL8qwu-hHc6BjK_gAAAQE"]
[Mon Mar 23 23:09:43.092666 2026] [:error] [pid 38176:tid 38190] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Mar 23 23:09:43.352549 2026] [:error] [pid 38176:tid 38188] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/drhunthq.php
[Mon Mar 23 23:09:43.606793 2026] [:error] [pid 38176:tid 38189] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/a5e0a.php
[Mon Mar 23 23:09:43.864596 2026] [:error] [pid 38176:tid 38197] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Mon Mar 23 23:09:44.123906 2026] [:error] [pid 38176:tid 38195] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/gfd.php
[Mon Mar 23 23:09:44.379805 2026] [:error] [pid 38176:tid 38203] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Mon Mar 23 23:09:44.633944 2026] [:error] [pid 38176:tid 38209] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Mon Mar 23 23:09:45.422197 2026] [:error] [pid 38176:tid 38201] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Mon Mar 23 23:09:45.675457 2026] [:error] [pid 38176:tid 38200] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Mar 23 23:09:45.929658 2026] [:error] [pid 38176:tid 38205] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Mon Mar 23 23:09:46.183251 2026] [:error] [pid 38176:tid 38208] [client 20.123.7.214:22826] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Mon Mar 23 23:09:46.444305 2026] [:error] [pid 38176:tid 38202] [client 20.123.7.214:22826] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acFXuktG4qlh1gvNjuJdhAAAAA8"]
[Mon Mar 23 23:09:47.000310 2026] [:error] [pid 38177:tid 38228] [client 20.123.7.214:3998] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acFXunsYW-_HCI66MukFEwAAAE0"]
[Mon Mar 23 23:09:47.511708 2026] [:error] [pid 38176:tid 38189] [client 20.123.7.214:3963] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acFXu0tG4qlh1gvNjuJdhwAAAAI"]
[Mon Mar 23 23:09:48.038773 2026] [:error] [pid 38176:tid 38206] [client 20.123.7.214:3934] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acFXvEtG4qlh1gvNjuJdiAAAABM"]
[Mon Mar 23 23:09:48.547593 2026] [:error] [pid 38176:tid 38209] [client 20.123.7.214:4063] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acFXvEtG4qlh1gvNjuJdigAAABY"]
[Mon Mar 23 23:09:50.097025 2026] [:error] [pid 38176:tid 38194] [client 20.123.7.214:3982] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acFXvktG4qlh1gvNjuJdjgAAAAc"]
[Mon Mar 23 23:09:50.602916 2026] [:error] [pid 38176:tid 38198] [client 20.123.7.214:3989] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acFXvktG4qlh1gvNjuJdjwAAAAs"]
[Mon Mar 23 23:09:51.194188 2026] [:error] [pid 52341:tid 52345] [client 20.123.7.214:4084] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acFXv6PKTBDR2u47Gb0UvQAAAUI"]
[Mon Mar 23 23:09:51.724003 2026] [:error] [pid 38178:tid 38244] [client 20.123.7.214:4012] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acFXvw0axWfXsVvR9udW5AAAAII"]
[Mon Mar 23 23:09:52.275005 2026] [:error] [pid 38178:tid 38260] [client 20.123.7.214:4024] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acFXwA0axWfXsVvR9udW6QAAAJI"]
[Mon Mar 23 23:09:52.787682 2026] [:error] [pid 38178:tid 38252] [client 20.123.7.214:3947] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acFXwA0axWfXsVvR9udW7QAAAIo"]
[Mon Mar 23 23:09:54.099884 2026] [:error] [pid 52341:tid 52344] [client 20.123.7.214:4044] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acFXwqPKTBDR2u47Gb0UwAAAAUE"]
[Mon Mar 23 23:09:54.604098 2026] [:error] [pid 38176:tid 38207] [client 20.123.7.214:3856] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acFXwktG4qlh1gvNjuJdlAAAABQ"]
[Mon Mar 23 23:09:55.120359 2026] [:error] [pid 52341:tid 52360] [client 20.123.7.214:3953] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acFXw6PKTBDR2u47Gb0UxAAAAVE"]
[Mon Mar 23 23:09:55.634505 2026] [:error] [pid 38176:tid 38187] [client 20.123.7.214:3957] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acFXw0tG4qlh1gvNjuJdlQAAAAA"]
[Mon Mar 23 23:09:56.146874 2026] [:error] [pid 38176:tid 38197] [client 20.123.7.214:4046] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acFXxEtG4qlh1gvNjuJdlwAAAAo"]
[Mon Mar 23 23:09:56.650638 2026] [:error] [pid 38176:tid 38209] [client 20.123.7.214:4082] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acFXxEtG4qlh1gvNjuJdmQAAABY"]
[Mon Mar 23 23:10:00.194359 2026] [:error] [pid 38276:tid 38303] [client 20.123.7.214:3918] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acFXyJoKGiI-a7oME3ISdAAAANg"]
[Mon Mar 23 23:10:00.718429 2026] [:error] [pid 38178:tid 38249] [client 20.123.7.214:3951] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acFXyA0axWfXsVvR9udW-QAAAIc"]
[Mon Mar 23 23:10:01.242916 2026] [:error] [pid 38178:tid 38253] [client 20.123.7.214:3849] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acFXyQ0axWfXsVvR9udW_AAAAIs"]
[Mon Mar 23 23:10:01.788552 2026] [:error] [pid 38177:tid 38223] [client 20.123.7.214:3905] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acFXyXsYW-_HCI66MukFHAAAAEg"]
[Mon Mar 23 23:10:02.315148 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:22908] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acFXyqPKTBDR2u47Gb0U2AAAAU4"]
[Mon Mar 23 23:10:02.849149 2026] [:error] [pid 38176:tid 38195] [client 20.123.7.214:3912] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acFXyktG4qlh1gvNjuJdnAAAAAg"]
[Mon Mar 23 23:10:03.372866 2026] [:error] [pid 52341:tid 52366] [client 20.123.7.214:3955] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acFXy6PKTBDR2u47Gb0U3gAAAVc"]
[Mon Mar 23 23:10:03.896723 2026] [:error] [pid 52341:tid 52365] [client 20.123.7.214:3967] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acFXy6PKTBDR2u47Gb0U4wAAAVY"]
[Mon Mar 23 23:10:05.461443 2026] [:error] [pid 52341:tid 52352] [client 20.123.7.214:4055] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acFXzaPKTBDR2u47Gb0U8QAAAUk"]
[Mon Mar 23 23:10:05.977373 2026] [:error] [pid 38276:tid 38279] [client 20.123.7.214:4079] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acFXzZoKGiI-a7oME3ISgwAAAMA"]
[Mon Mar 23 23:10:06.564285 2026] [:error] [pid 38176:tid 38201] [client 20.123.7.214:3902] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acFXzktG4qlh1gvNjuJdnwAAAA4"]
[Mon Mar 23 23:10:07.072331 2026] [:error] [pid 52341:tid 52361] [client 20.123.7.214:4089] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acFXz6PKTBDR2u47Gb0U9gAAAVI"]
[Mon Mar 23 23:10:07.717407 2026] [:error] [pid 52341:tid 52353] [client 20.123.7.214:3946] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acFXz6PKTBDR2u47Gb0U_AAAAUo"]
[Mon Mar 23 23:10:08.262043 2026] [:error] [pid 52341:tid 52347] [client 20.123.7.214:3910] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acFX0KPKTBDR2u47Gb0VAAAAAUQ"]
[Mon Mar 23 23:10:08.797042 2026] [:error] [pid 52341:tid 52360] [client 20.123.7.214:3941] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acFX0KPKTBDR2u47Gb0VBwAAAVE"]
[Mon Mar 23 23:10:09.335613 2026] [:error] [pid 52341:tid 52366] [client 20.123.7.214:3847] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/56c53.php"] [unique_id "acFX0aPKTBDR2u47Gb0VDQAAAVc"]
[Mon Mar 23 23:10:09.842818 2026] [:error] [pid 38176:tid 38197] [client 20.123.7.214:3883] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/56c53.php"] [unique_id "acFX0UtG4qlh1gvNjuJdqAAAAAo"]
[Mon Mar 23 23:10:10.356082 2026] [:error] [pid 38176:tid 38198] [client 20.123.7.214:3865] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/56c53.php"] [unique_id "acFX0ktG4qlh1gvNjuJdrQAAAAs"]
[Mon Mar 23 23:10:10.878760 2026] [:error] [pid 38177:tid 38226] [client 20.123.7.214:3896] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/56c53.php"] [unique_id "acFX0nsYW-_HCI66MukFJQAAAEs"]
[Mon Mar 23 23:10:11.414614 2026] [:error] [pid 38306:tid 38330] [client 20.123.7.214:3817] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "acFX0zkL8qwu-hHc6BjLHwAAARY"]
[Mon Mar 23 23:10:12.066400 2026] [:error] [pid 38276:tid 38298] [client 20.123.7.214:3970] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "acFX1JoKGiI-a7oME3ISiQAAANM"]
[Mon Mar 23 23:10:12.603568 2026] [:error] [pid 38177:tid 38225] [client 20.123.7.214:3861] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "acFX1HsYW-_HCI66MukFKAAAAEo"]
[Mon Mar 23 23:10:13.128829 2026] [:error] [pid 38276:tid 38283] [client 20.123.7.214:3907] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "acFX1ZoKGiI-a7oME3ISjAAAAMQ"]
[Mon Mar 23 23:10:13.631545 2026] [:error] [pid 52341:tid 52350] [client 20.123.7.214:4002] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/144.php"] [unique_id "acFX1aPKTBDR2u47Gb0VHAAAAUc"]
[Mon Mar 23 23:10:14.151902 2026] [:error] [pid 52341:tid 52361] [client 20.123.7.214:3949] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/144.php"] [unique_id "acFX1qPKTBDR2u47Gb0VIAAAAVI"]
[Mon Mar 23 23:10:14.780345 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:4020] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/144.php"] [unique_id "acFX1qPKTBDR2u47Gb0VIwAAAUM"]
[Mon Mar 23 23:10:15.307770 2026] [:error] [pid 38176:tid 38194] [client 20.123.7.214:3887] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/144.php"] [unique_id "acFX10tG4qlh1gvNjuJduQAAAAc"]
[Mon Mar 23 23:10:15.868333 2026] [:error] [pid 38306:tid 38310] [client 20.123.7.214:3935] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clss.php"] [unique_id "acFX1zkL8qwu-hHc6BjLJwAAAQI"]
[Mon Mar 23 23:10:16.375797 2026] [:error] [pid 38276:tid 38296] [client 20.123.7.214:3920] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clss.php"] [unique_id "acFX2JoKGiI-a7oME3ISkAAAANE"]
[Mon Mar 23 23:10:16.887961 2026] [:error] [pid 52341:tid 52355] [client 20.123.7.214:4010] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clss.php"] [unique_id "acFX2KPKTBDR2u47Gb0VKwAAAUw"]
[Mon Mar 23 23:10:17.454866 2026] [:error] [pid 52341:tid 52346] [client 20.123.7.214:3913] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clss.php"] [unique_id "acFX2aPKTBDR2u47Gb0VLQAAAUM"]
[Mon Mar 23 23:10:20.978665 2026] [:error] [pid 52341:tid 52363] [client 20.123.7.214:4022] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "acFX3KPKTBDR2u47Gb0VNAAAAVQ"]
[Mon Mar 23 23:10:21.494387 2026] [:error] [pid 52341:tid 52350] [client 20.123.7.214:3964] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "acFX3aPKTBDR2u47Gb0VNgAAAUc"]
[Mon Mar 23 23:10:22.003882 2026] [:error] [pid 38178:tid 38248] [client 20.123.7.214:3874] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "acFX3g0axWfXsVvR9udXBAAAAIY"]
[Mon Mar 23 23:10:22.513446 2026] [:error] [pid 38178:tid 38253] [client 20.123.7.214:3962] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "acFX3g0axWfXsVvR9udXCAAAAIs"]
[Mon Mar 23 23:10:23.045732 2026] [:error] [pid 38176:tid 38196] [client 20.123.7.214:4009] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "acFX30tG4qlh1gvNjuJdwgAAAAk"]
[Mon Mar 23 23:10:23.592001 2026] [:error] [pid 38176:tid 38198] [client 20.123.7.214:4015] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "acFX30tG4qlh1gvNjuJdxgAAAAs"]
[Mon Mar 23 23:10:24.214214 2026] [:error] [pid 52341:tid 52366] [client 20.123.7.214:3999] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "acFX4KPKTBDR2u47Gb0VQQAAAVc"]
[Mon Mar 23 23:10:24.750742 2026] [:error] [pid 38306:tid 38325] [client 20.123.7.214:3911] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "acFX4DkL8qwu-hHc6BjLPAAAARE"]
[Mon Mar 23 23:10:26.338349 2026] [:error] [pid 52341:tid 52362] [client 20.123.7.214:4027] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maul.php"] [unique_id "acFX4qPKTBDR2u47Gb0VRwAAAVM"]
[Mon Mar 23 23:10:26.883626 2026] [:error] [pid 52341:tid 52357] [client 20.123.7.214:3810] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maul.php"] [unique_id "acFX4qPKTBDR2u47Gb0VSgAAAU4"]
[Mon Mar 23 23:10:27.415614 2026] [:error] [pid 38276:tid 38288] [client 20.123.7.214:3965] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maul.php"] [unique_id "acFX45oKGiI-a7oME3ISoQAAAMk"]
[Mon Mar 23 23:10:27.940958 2026] [:error] [pid 52341:tid 52365] [client 20.123.7.214:3863] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maul.php"] [unique_id "acFX46PKTBDR2u47Gb0VUwAAAVY"]
[Mon Mar 23 23:10:28.482648 2026] [:error] [pid 38276:tid 38298] [client 20.123.7.214:4042] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/wp-blog.php"] [unique_id "acFX5JoKGiI-a7oME3ISpAAAANM"]
[Mon Mar 23 23:10:28.997158 2026] [:error] [pid 38276:tid 38299] [client 20.123.7.214:3864] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/wp-blog.php"] [unique_id "acFX5JoKGiI-a7oME3ISpgAAANQ"]
[Mon Mar 23 23:10:29.541197 2026] [:error] [pid 52341:tid 52354] [client 20.123.7.214:3893] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/wp-blog.php"] [unique_id "acFX5aPKTBDR2u47Gb0VXQAAAUs"]
[Mon Mar 23 23:10:30.089787 2026] [:error] [pid 38306:tid 38315] [client 20.123.7.214:22823] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/wp-blog.php"] [unique_id "acFX5jkL8qwu-hHc6BjLTgAAAQc"]
[Mon Mar 23 23:10:30.602756 2026] [:error] [pid 52341:tid 52361] [client 20.123.7.214:3808] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFX5qPKTBDR2u47Gb0VYQAAAVI"]
[Mon Mar 23 23:10:31.190266 2026] [:error] [pid 38178:tid 38264] [client 20.123.7.214:3954] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFX5w0axWfXsVvR9udXEgAAAJY"]
[Mon Mar 23 23:10:31.694507 2026] [:error] [pid 52341:tid 52353] [client 20.123.7.214:3859] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFX56PKTBDR2u47Gb0VZAAAAUo"]
[Mon Mar 23 23:10:32.218502 2026] [:error] [pid 38177:tid 38230] [client 20.123.7.214:3850] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "acFX6HsYW-_HCI66MukFNgAAAE8"]
[Mon Mar 23 23:10:32.734435 2026] [:error] [pid 38177:tid 38216] [client 20.123.7.214:3741] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/callback.php"] [unique_id "acFX6HsYW-_HCI66MukFOQAAAEE"]
[Mon Mar 23 23:10:33.269971 2026] [:error] [pid 38276:tid 38294] [client 20.123.7.214:3956] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/callback.php"] [unique_id "acFX6ZoKGiI-a7oME3ISqgAAAM8"]
[Mon Mar 23 23:10:33.794217 2026] [:error] [pid 38176:tid 38202] [client 20.123.7.214:3786] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/callback.php"] [unique_id "acFX6UtG4qlh1gvNjuJdzAAAAA8"]
[Mon Mar 23 23:10:34.301873 2026] [:error] [pid 38177:tid 38229] [client 20.123.7.214:3898] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/callback.php"] [unique_id "acFX6nsYW-_HCI66MukFOwAAAE4"]
[Mon Mar 23 23:10:34.829561 2026] [:error] [pid 38178:tid 38244] [client 20.123.7.214:3868] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "acFX6g0axWfXsVvR9udXGQAAAII"]
[Mon Mar 23 23:10:35.358699 2026] [:error] [pid 38306:tid 38323] [client 20.123.7.214:3892] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "acFX6zkL8qwu-hHc6BjLWAAAAQ8"]
[Mon Mar 23 23:10:35.866782 2026] [:error] [pid 38176:tid 38204] [client 20.123.7.214:3939] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "acFX60tG4qlh1gvNjuJd0wAAABE"]
[Mon Mar 23 23:10:37.415773 2026] [:error] [pid 38177:tid 38234] [client 20.123.7.214:3802] [client 20.123.7.214] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "acFX7XsYW-_HCI66MukFPwAAAFM"]
[Tue Mar 24 02:30:04.014443 2026] [:error] [pid 31798:tid 31814] [client 40.85.222.197:36815] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Tue Mar 24 02:30:04.222941 2026] [:error] [pid 31798:tid 31816] [client 40.85.222.197:36815] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Tue Mar 24 02:30:04.433483 2026] [:error] [pid 31798:tid 31801] [client 40.85.222.197:36815] File does not exist: /usr/local/apache/htdocs/suspended-page/sty.php
[Tue Mar 24 02:30:04.642709 2026] [:error] [pid 31798:tid 31803] [client 40.85.222.197:36815] File does not exist: /usr/local/apache/htdocs/suspended-page/xxxx.php
[Tue Mar 24 02:30:04.852408 2026] [:error] [pid 31798:tid 31809] [client 40.85.222.197:36815] File does not exist: /usr/local/apache/htdocs/suspended-page/h.php
[Tue Mar 24 02:30:05.061156 2026] [:error] [pid 31798:tid 31800] [client 40.85.222.197:36815] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Tue Mar 24 02:30:05.271369 2026] [:error] [pid 31798:tid 31817] [client 40.85.222.197:36815] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Tue Mar 24 02:30:05.481847 2026] [:error] [pid 31798:tid 31810] [client 40.85.222.197:36815] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Tue Mar 24 02:30:05.691372 2026] [:error] [pid 31798:tid 31822] [client 40.85.222.197:36815] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Tue Mar 24 02:30:05.899860 2026] [:error] [pid 31798:tid 31824] [client 40.85.222.197:36815] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Tue Mar 24 02:30:06.106110 2026] [:error] [pid 31798:tid 31801] [client 40.85.222.197:36815] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acGGrndtW_1bksndFbZZKAAAAAE"]
[Tue Mar 24 02:30:06.519249 2026] [:error] [pid 56238:tid 56370] [client 40.85.222.197:36753] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acGGrlSqceFAZRgPDq6-2AAAANY"]
[Tue Mar 24 02:30:06.929951 2026] [:error] [pid 56237:tid 56322] [client 40.85.222.197:36836] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acGGrgymO0MnzQb90MM_aQAAAIE"]
[Tue Mar 24 02:30:07.340887 2026] [:error] [pid 56435:tid 56516] [client 40.85.222.197:36851] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acGGr8rwr-l5A-s9ryClnAAAAQ8"]
[Tue Mar 24 02:30:07.754107 2026] [:error] [pid 56236:tid 56300] [client 40.85.222.197:36818] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/path.php"] [unique_id "acGGr3apFgYp0uZ8twA16gAAAEc"]
[Tue Mar 24 02:30:08.166949 2026] [:error] [pid 56236:tid 56308] [client 40.85.222.197:36828] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/path.php"] [unique_id "acGGsHapFgYp0uZ8twA17QAAAE8"]
[Tue Mar 24 02:30:08.579004 2026] [:error] [pid 56435:tid 56525] [client 40.85.222.197:36841] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/path.php"] [unique_id "acGGsMrwr-l5A-s9ryCloAAAARg"]
[Tue Mar 24 02:30:08.991475 2026] [:error] [pid 31798:tid 31823] [client 40.85.222.197:36861] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/path.php"] [unique_id "acGGsHdtW_1bksndFbZZOQAAABc"]
[Tue Mar 24 02:30:09.402688 2026] [:error] [pid 31798:tid 31801] [client 40.85.222.197:36750] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdf.php"] [unique_id "acGGsXdtW_1bksndFbZZOgAAAAE"]
[Tue Mar 24 02:30:09.815129 2026] [:error] [pid 56435:tid 56513] [client 40.85.222.197:36827] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdf.php"] [unique_id "acGGscrwr-l5A-s9ryClpAAAAQw"]
[Tue Mar 24 02:30:10.233707 2026] [:error] [pid 56237:tid 56334] [client 40.85.222.197:36823] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdf.php"] [unique_id "acGGsgymO0MnzQb90MM_bwAAAI0"]
[Tue Mar 24 02:30:10.646155 2026] [:error] [pid 56237:tid 56340] [client 40.85.222.197:36809] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdf.php"] [unique_id "acGGsgymO0MnzQb90MM_cwAAAJM"]
[Tue Mar 24 02:30:11.059596 2026] [:error] [pid 56237:tid 56325] [client 40.85.222.197:36822] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fleen.php"] [unique_id "acGGswymO0MnzQb90MM_dAAAAIQ"]
[Tue Mar 24 02:30:11.472633 2026] [:error] [pid 31798:tid 31813] [client 40.85.222.197:36856] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fleen.php"] [unique_id "acGGs3dtW_1bksndFbZZPwAAAA0"]
[Tue Mar 24 02:30:11.885275 2026] [:error] [pid 56435:tid 56511] [client 40.85.222.197:36824] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fleen.php"] [unique_id "acGGs8rwr-l5A-s9ryClqAAAAQs"]
[Tue Mar 24 02:30:12.297817 2026] [:error] [pid 56435:tid 56521] [client 40.85.222.197:36831] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fleen.php"] [unique_id "acGGtMrwr-l5A-s9ryClqgAAARQ"]
[Tue Mar 24 02:30:12.710751 2026] [:error] [pid 56435:tid 56513] [client 40.85.222.197:36737] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tem.php"] [unique_id "acGGtMrwr-l5A-s9ryClrQAAAQw"]
[Tue Mar 24 02:30:13.131213 2026] [:error] [pid 31798:tid 31813] [client 40.85.222.197:36845] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tem.php"] [unique_id "acGGtXdtW_1bksndFbZZSQAAAA0"]
[Tue Mar 24 02:30:13.544536 2026] [:error] [pid 31798:tid 31815] [client 40.85.222.197:36862] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tem.php"] [unique_id "acGGtXdtW_1bksndFbZZUAAAAA8"]
[Tue Mar 24 02:30:13.956155 2026] [:error] [pid 56435:tid 56523] [client 40.85.222.197:36805] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tem.php"] [unique_id "acGGtcrwr-l5A-s9ryClugAAARY"]
[Tue Mar 24 02:30:14.368551 2026] [:error] [pid 31798:tid 31803] [client 40.85.222.197:36804] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av6m.php"] [unique_id "acGGtndtW_1bksndFbZZVwAAAAM"]
[Tue Mar 24 02:30:14.793359 2026] [:error] [pid 56435:tid 56502] [client 40.85.222.197:36849] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av6m.php"] [unique_id "acGGtsrwr-l5A-s9ryClwwAAAQM"]
[Tue Mar 24 02:30:15.206153 2026] [:error] [pid 56435:tid 56510] [client 40.85.222.197:36738] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av6m.php"] [unique_id "acGGt8rwr-l5A-s9ryClyQAAAQo"]
[Tue Mar 24 02:30:15.619309 2026] [:error] [pid 56238:tid 56359] [client 40.85.222.197:36812] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av6m.php"] [unique_id "acGGt1SqceFAZRgPDq6-7QAAAMs"]
[Tue Mar 24 02:30:16.032407 2026] [:error] [pid 31798:tid 31815] [client 40.85.222.197:36835] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autogooey.php"] [unique_id "acGGuHdtW_1bksndFbZZXwAAAA8"]
[Tue Mar 24 02:30:16.445363 2026] [:error] [pid 31798:tid 31820] [client 40.85.222.197:36843] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autogooey.php"] [unique_id "acGGuHdtW_1bksndFbZZYwAAABQ"]
[Tue Mar 24 02:30:16.889347 2026] [:error] [pid 31798:tid 31809] [client 40.85.222.197:36848] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autogooey.php"] [unique_id "acGGuHdtW_1bksndFbZZZQAAAAk"]
[Tue Mar 24 02:30:17.298945 2026] [:error] [pid 56237:tid 56331] [client 40.85.222.197:36787] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autogooey.php"] [unique_id "acGGuQymO0MnzQb90MM_lQAAAIo"]
[Tue Mar 24 02:30:17.710527 2026] [:error] [pid 56435:tid 56509] [client 40.85.222.197:36830] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/btx25.php"] [unique_id "acGGucrwr-l5A-s9ryCl0QAAAQk"]
[Tue Mar 24 02:30:18.145727 2026] [:error] [pid 56238:tid 56350] [client 40.85.222.197:36855] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/btx25.php"] [unique_id "acGGulSqceFAZRgPDq6-8AAAAMI"]
[Tue Mar 24 02:30:18.557676 2026] [:error] [pid 31798:tid 31813] [client 40.85.222.197:36844] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/btx25.php"] [unique_id "acGGundtW_1bksndFbZZbwAAAA0"]
[Tue Mar 24 02:30:18.970645 2026] [:error] [pid 56236:tid 56313] [client 40.85.222.197:36686] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/btx25.php"] [unique_id "acGGunapFgYp0uZ8twA1-QAAAFQ"]
[Tue Mar 24 02:30:19.381767 2026] [:error] [pid 56237:tid 56326] [client 40.85.222.197:36778] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mga.php"] [unique_id "acGGuwymO0MnzQb90MM_lgAAAIU"]
[Tue Mar 24 02:30:19.792584 2026] [:error] [pid 56236:tid 56295] [client 40.85.222.197:36814] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mga.php"] [unique_id "acGGu3apFgYp0uZ8twA1_QAAAEI"]
[Tue Mar 24 02:30:20.206920 2026] [:error] [pid 56435:tid 56514] [client 40.85.222.197:36846] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mga.php"] [unique_id "acGGvMrwr-l5A-s9ryCl1gAAAQ0"]
[Tue Mar 24 02:30:20.619200 2026] [:error] [pid 31798:tid 31807] [client 40.85.222.197:36754] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mga.php"] [unique_id "acGGvHdtW_1bksndFbZZfAAAAAc"]
[Tue Mar 24 02:30:21.032515 2026] [:error] [pid 31798:tid 31801] [client 40.85.222.197:36756] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "acGGvXdtW_1bksndFbZZfQAAAAE"]
[Tue Mar 24 02:30:21.444223 2026] [:error] [pid 31798:tid 31804] [client 40.85.222.197:36772] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "acGGvXdtW_1bksndFbZZgQAAAAQ"]
[Tue Mar 24 02:30:21.856040 2026] [:error] [pid 31798:tid 31817] [client 40.85.222.197:36692] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "acGGvXdtW_1bksndFbZZhgAAABE"]
[Tue Mar 24 02:30:22.268914 2026] [:error] [pid 31798:tid 31801] [client 40.85.222.197:36833] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "acGGvndtW_1bksndFbZZjAAAAAE"]
[Tue Mar 24 02:30:22.689463 2026] [:error] [pid 56237:tid 56323] [client 40.85.222.197:36810] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/agg.php"] [unique_id "acGGvgymO0MnzQb90MM_nwAAAII"]
[Tue Mar 24 02:30:23.101847 2026] [:error] [pid 31798:tid 31806] [client 40.85.222.197:36847] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/agg.php"] [unique_id "acGGv3dtW_1bksndFbZZkAAAAAY"]
[Tue Mar 24 02:30:23.512063 2026] [:error] [pid 31798:tid 31805] [client 40.85.222.197:36837] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/agg.php"] [unique_id "acGGv3dtW_1bksndFbZZkgAAAAU"]
[Tue Mar 24 02:30:23.922973 2026] [:error] [pid 31798:tid 31820] [client 40.85.222.197:36758] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/agg.php"] [unique_id "acGGv3dtW_1bksndFbZZlQAAABQ"]
[Tue Mar 24 02:30:24.334092 2026] [:error] [pid 31798:tid 31815] [client 40.85.222.197:36829] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "acGGwHdtW_1bksndFbZZmAAAAA8"]
[Tue Mar 24 02:30:24.747304 2026] [:error] [pid 56238:tid 56352] [client 40.85.222.197:36742] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "acGGwFSqceFAZRgPDq6-9QAAAMQ"]
[Tue Mar 24 02:30:25.158041 2026] [:error] [pid 31798:tid 31810] [client 40.85.222.197:36825] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "acGGwXdtW_1bksndFbZZmgAAAAo"]
[Tue Mar 24 02:30:25.567594 2026] [:error] [pid 56236:tid 56296] [client 40.85.222.197:36775] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "acGGwXapFgYp0uZ8twA2AAAAAEM"]
[Tue Mar 24 02:30:25.985081 2026] [:error] [pid 56236:tid 56310] [client 40.85.222.197:36813] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsvvs.php"] [unique_id "acGGwXapFgYp0uZ8twA2BQAAAFE"]
[Tue Mar 24 02:30:26.396946 2026] [:error] [pid 31798:tid 31808] [client 40.85.222.197:36800] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsvvs.php"] [unique_id "acGGwndtW_1bksndFbZZnAAAAAg"]
[Tue Mar 24 02:30:26.811420 2026] [:error] [pid 31798:tid 31824] [client 40.85.222.197:36743] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsvvs.php"] [unique_id "acGGwndtW_1bksndFbZZngAAABg"]
[Tue Mar 24 02:30:27.224211 2026] [:error] [pid 56237:tid 56336] [client 40.85.222.197:36765] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsvvs.php"] [unique_id "acGGwwymO0MnzQb90MM_qgAAAI8"]
[Tue Mar 24 02:30:27.633054 2026] [:error] [pid 31798:tid 31818] [client 40.85.222.197:36755] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "acGGw3dtW_1bksndFbZZpgAAABI"]
[Tue Mar 24 02:30:28.046773 2026] [:error] [pid 31798:tid 31804] [client 40.85.222.197:36699] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "acGGxHdtW_1bksndFbZZqgAAAAQ"]
[Tue Mar 24 02:30:28.477148 2026] [:error] [pid 56435:tid 56511] [client 40.85.222.197:36741] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "acGGxMrwr-l5A-s9ryCl2gAAAQs"]
[Tue Mar 24 02:30:28.888760 2026] [:error] [pid 31798:tid 31814] [client 40.85.222.197:36744] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "acGGxHdtW_1bksndFbZZsAAAAA4"]
[Tue Mar 24 02:30:29.299182 2026] [:error] [pid 31798:tid 31811] [client 40.85.222.197:36783] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acGGxXdtW_1bksndFbZZtAAAAAs"]
[Tue Mar 24 02:30:29.710042 2026] [:error] [pid 31798:tid 31803] [client 40.85.222.197:36679] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acGGxXdtW_1bksndFbZZtwAAAAM"]
[Tue Mar 24 02:30:30.121623 2026] [:error] [pid 56435:tid 56517] [client 40.85.222.197:36700] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acGGxsrwr-l5A-s9ryCl2wAAARA"]
[Tue Mar 24 02:30:30.535410 2026] [:error] [pid 56238:tid 56359] [client 40.85.222.197:36863] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acGGxlSqceFAZRgPDq6_BwAAAMs"]
[Tue Mar 24 02:30:30.947425 2026] [:error] [pid 31798:tid 31819] [client 40.85.222.197:36850] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acGGxndtW_1bksndFbZZuQAAABM"]
[Tue Mar 24 02:30:31.358568 2026] [:error] [pid 56238:tid 56356] [client 40.85.222.197:36842] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acGGx1SqceFAZRgPDq6_CgAAAMg"]
[Tue Mar 24 02:30:31.779768 2026] [:error] [pid 56435:tid 56499] [client 40.85.222.197:36748] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acGGx8rwr-l5A-s9ryCl3AAAAQA"]
[Tue Mar 24 02:30:32.200937 2026] [:error] [pid 56236:tid 56296] [client 40.85.222.197:36816] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acGGyHapFgYp0uZ8twA2EQAAAEM"]
[Tue Mar 24 02:30:32.611326 2026] [:error] [pid 56236:tid 56294] [client 40.85.222.197:36779] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "acGGyHapFgYp0uZ8twA2EgAAAEE"]
[Tue Mar 24 02:30:33.022433 2026] [:error] [pid 56236:tid 56307] [client 40.85.222.197:36819] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "acGGyXapFgYp0uZ8twA2FAAAAE4"]
[Tue Mar 24 02:30:33.432934 2026] [:error] [pid 56435:tid 56518] [client 40.85.222.197:36860] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "acGGycrwr-l5A-s9ryCl4gAAARE"]
[Tue Mar 24 02:30:33.843870 2026] [:error] [pid 56236:tid 56299] [client 40.85.222.197:36736] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "acGGyXapFgYp0uZ8twA2GgAAAEY"]
[Tue Mar 24 02:30:34.257306 2026] [:error] [pid 56238:tid 56369] [client 40.85.222.197:36746] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acGGylSqceFAZRgPDq6_DAAAANU"]
[Tue Mar 24 02:30:34.670848 2026] [:error] [pid 56236:tid 56306] [client 40.85.222.197:36627] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acGGynapFgYp0uZ8twA2HgAAAE0"]
[Tue Mar 24 02:30:35.083428 2026] [:error] [pid 56238:tid 56354] [client 40.85.222.197:36676] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acGGy1SqceFAZRgPDq6_DwAAAMY"]
[Tue Mar 24 02:30:35.494361 2026] [:error] [pid 56238:tid 56359] [client 40.85.222.197:36811] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acGGy1SqceFAZRgPDq6_FAAAAMs"]
[Tue Mar 24 02:30:35.905171 2026] [:error] [pid 56435:tid 56503] [client 40.85.222.197:36674] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acGGy8rwr-l5A-s9ryCl4wAAAQQ"]
[Tue Mar 24 02:30:36.314626 2026] [:error] [pid 56435:tid 56524] [client 40.85.222.197:36796] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acGGzMrwr-l5A-s9ryCl5AAAARc"]
[Tue Mar 24 02:30:36.724708 2026] [:error] [pid 31798:tid 31812] [client 40.85.222.197:36797] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acGGzHdtW_1bksndFbZZxgAAAAw"]
[Tue Mar 24 02:30:37.135459 2026] [:error] [pid 31798:tid 31819] [client 40.85.222.197:36747] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acGGzXdtW_1bksndFbZZxwAAABM"]
[Tue Mar 24 02:30:37.546318 2026] [:error] [pid 31798:tid 31808] [client 40.85.222.197:36764] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "acGGzXdtW_1bksndFbZZyQAAAAg"]
[Tue Mar 24 02:30:37.955834 2026] [:error] [pid 31798:tid 31822] [client 40.85.222.197:36696] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "acGGzXdtW_1bksndFbZZygAAABY"]
[Tue Mar 24 02:30:38.366906 2026] [:error] [pid 56435:tid 56511] [client 40.85.222.197:36839] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "acGGzsrwr-l5A-s9ryCl7AAAAQs"]
[Tue Mar 24 02:30:38.777444 2026] [:error] [pid 56435:tid 56499] [client 40.85.222.197:36820] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "acGGzsrwr-l5A-s9ryCl7wAAAQA"]
[Tue Mar 24 02:30:39.189614 2026] [:error] [pid 56435:tid 56513] [client 40.85.222.197:36801] [client 40.85.222.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acGGz8rwr-l5A-s9ryCl8AAAAQw"]
[Tue Mar 24 02:30:39.600367 2026] [:error] [pid 56435:tid 56502] [client 40.85.222.197:36609] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acGGz8rwr-l5A-s9ryCl9AAAAQM"]
[Tue Mar 24 02:30:40.010677 2026] [:error] [pid 56435:tid 56501] [client 40.85.222.197:36749] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acGG0Mrwr-l5A-s9ryCl-AAAAQI"]
[Tue Mar 24 02:30:40.422938 2026] [:error] [pid 56236:tid 56304] [client 40.85.222.197:36767] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acGG0HapFgYp0uZ8twA2IQAAAEs"]
[Tue Mar 24 02:30:40.844744 2026] [:error] [pid 56435:tid 56523] [client 40.85.222.197:36745] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acGG0Mrwr-l5A-s9ryCl_QAAARY"]
[Tue Mar 24 02:30:41.257699 2026] [:error] [pid 56435:tid 56524] [client 40.85.222.197:36774] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acGG0crwr-l5A-s9ryCmAQAAARc"]
[Tue Mar 24 02:30:41.668214 2026] [:error] [pid 56237:tid 56328] [client 40.85.222.197:36781] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acGG0QymO0MnzQb90MM_vQAAAIc"]
[Tue Mar 24 02:30:42.079876 2026] [:error] [pid 56435:tid 56518] [client 40.85.222.197:36724] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acGG0srwr-l5A-s9ryCmBwAAARE"]
[Tue Mar 24 02:30:42.492421 2026] [:error] [pid 56238:tid 56355] [client 40.85.222.197:36785] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/css/index.php"] [unique_id "acGG0lSqceFAZRgPDq6_HgAAAMc"]
[Tue Mar 24 02:30:42.916586 2026] [:error] [pid 56236:tid 56302] [client 40.85.222.197:36752] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/css/index.php"] [unique_id "acGG0napFgYp0uZ8twA2JAAAAEk"]
[Tue Mar 24 02:30:43.327789 2026] [:error] [pid 56237:tid 56337] [client 40.85.222.197:36858] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/css/index.php"] [unique_id "acGG0wymO0MnzQb90MM_wAAAAJA"]
[Tue Mar 24 02:30:43.737499 2026] [:error] [pid 56236:tid 56293] [client 40.85.222.197:36777] [client 40.85.222.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/css/index.php"] [unique_id "acGG03apFgYp0uZ8twA2JwAAAEA"]
[Tue Mar 24 04:30:25.112621 2026] [:error] [pid 3031:tid 3076] [client 173.239.218.212:52443] [client 173.239.218.212] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acGi4aJBKytnG47nuibA3gAAAEA"]
[Tue Mar 24 09:02:44.738041 2026] [:error] [pid 3032:tid 3108] [client 185.223.152.139:39743] [client 185.223.152.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.139, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "acHitCa_-JXXD03-JNz39wAAAIU"]
[Tue Mar 24 09:02:44.741183 2026] [:error] [pid 3032:tid 3108] [client 185.223.152.139:39743] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Mar 24 10:17:17.272147 2026] [:error] [pid 3137:tid 3143] [client 180.232.163.170:62529] [client 180.232.163.170] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.232.163.170, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acH0LZdZesutm6dfYM9yUgAAAMQ"]
[Tue Mar 24 10:17:17.279972 2026] [:error] [pid 3137:tid 3143] [client 180.232.163.170:62529] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 13:04:30.303566 2026] [:error] [pid 64198:tid 64220] [client 186.247.17.110:50843] [client 186.247.17.110] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.247.17.110, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acIbXnVzJqf6OS_oSZ3k4AAAAVQ"]
[Tue Mar 24 13:04:30.309199 2026] [:error] [pid 64198:tid 64220] [client 186.247.17.110:50843] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 16:20:08.899797 2026] [:error] [pid 48219:tid 48283] [client 216.81.245.214:47682] [client 216.81.245.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "acJJOChf3b4R_lAIyv9DdQAAAgI"]
[Tue Mar 24 17:45:54.464654 2026] [:error] [pid 38767:tid 38792] [client 5.152.112.188:49380] [client 5.152.112.188] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.152.112.188, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acJdUvwkUqN4GJAI5oXW7QAAARY"]
[Tue Mar 24 17:45:54.470573 2026] [:error] [pid 38767:tid 38792] [client 5.152.112.188:49380] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Mar 24 23:56:40.672748 2026] [:error] [pid 48219:tid 48304] [client 103.211.132.99:39686] [client 103.211.132.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.211.132.99, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acK0OChf3b4R_lAIyv-s4AAAAhc"]
[Tue Mar 24 23:56:43.140433 2026] [:error] [pid 48219:tid 48304] [client 103.211.132.99:39686] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 01:14:30.137068 2026] [:error] [pid 20371:tid 20381] [client 89.251.0.139:56723] [client 89.251.0.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.139, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "acLGdub25OL4yTv2fF96zQAAAQg"]
[Wed Mar 25 01:14:30.140962 2026] [:error] [pid 20371:tid 20381] [client 89.251.0.139:56723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 25 05:34:32.269660 2026] [:error] [pid 47989:tid 48002] [client 148.72.173.218:52685] [client 148.72.173.218] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 148.72.173.218, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "acMDaCWKdJMhIccROjlhMgAAAUs"]
[Wed Mar 25 05:34:32.269757 2026] [:error] [pid 47989:tid 48002] [client 148.72.173.218:52685] [client 148.72.173.218] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 148.72.173.218 on wp-login.php, counter = 49"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "acMDaCWKdJMhIccROjlhMgAAAUs"]
[Wed Mar 25 11:40:42.005980 2026] [:error] [pid 892:tid 920] [client 52.236.56.26:41315] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Mar 25 11:40:42.261019 2026] [:error] [pid 892:tid 902] [client 52.236.56.26:41315] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Wed Mar 25 11:40:42.513958 2026] [:error] [pid 892:tid 918] [client 52.236.56.26:41315] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Wed Mar 25 11:40:43.235731 2026] [:error] [pid 892:tid 896] [client 52.236.56.26:41315] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Mar 25 11:40:43.514927 2026] [:error] [pid 892:tid 908] [client 52.236.56.26:41315] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed Mar 25 11:40:43.768701 2026] [:error] [pid 892:tid 909] [client 52.236.56.26:41315] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Wed Mar 25 11:40:44.040992 2026] [:error] [pid 892:tid 901] [client 52.236.56.26:41315] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Wed Mar 25 11:40:44.294081 2026] [:error] [pid 892:tid 922] [client 52.236.56.26:41315] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Mar 25 11:40:44.547767 2026] [:error] [pid 892:tid 895] [client 52.236.56.26:41315] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Wed Mar 25 11:40:44.802124 2026] [:error] [pid 892:tid 917] [client 52.236.56.26:41315] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Wed Mar 25 11:40:45.079702 2026] [:error] [pid 892:tid 910] [client 52.236.56.26:41315] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acNZPST_G8WMU3T3yxp8JQAAAMw"]
[Wed Mar 25 11:40:48.050429 2026] [:error] [pid 47946:tid 47965] [client 52.236.56.26:43909] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acNZQDipQTqBMSeKYhdhMwAAARE"]
[Wed Mar 25 11:40:50.453514 2026] [:error] [pid 25967:tid 25995] [client 52.236.56.26:25302] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acNZQvg8Qtq7ZM4mSFmNEAAAA1c"]
[Wed Mar 25 11:40:53.559111 2026] [:error] [pid 892:tid 902] [client 52.236.56.26:57539] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acNZRST_G8WMU3T3yxp8KwAAAMU"]
[Wed Mar 25 11:40:54.838471 2026] [:error] [pid 25969:tid 26031] [client 52.236.56.26:50962] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "acNZRhd3aEUmOfdKja_M9AAAA8U"]
[Wed Mar 25 11:40:56.088154 2026] [:error] [pid 26321:tid 26346] [client 52.236.56.26:43954] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "acNZSPKO65qqGZCSPZrUmgAAAgY"]
[Wed Mar 25 11:40:56.904424 2026] [:error] [pid 47989:tid 48006] [client 52.236.56.26:52260] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "acNZSCWKdJMhIccROjkElQAAAU8"]
[Wed Mar 25 11:40:58.025159 2026] [:error] [pid 892:tid 910] [client 52.236.56.26:53393] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "acNZSiT_G8WMU3T3yxp8MAAAAMw"]
[Wed Mar 25 11:40:58.620854 2026] [:error] [pid 892:tid 921] [client 52.236.56.26:62998] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acNZSiT_G8WMU3T3yxp8NAAAANY"]
[Wed Mar 25 11:40:59.346207 2026] [:error] [pid 26449:tid 26473] [client 52.236.56.26:25297] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acNZS9pZ2T15NDqzAjEp7QAAAlQ"]
[Wed Mar 25 11:41:00.027096 2026] [:error] [pid 26449:tid 26477] [client 52.236.56.26:24814] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acNZTNpZ2T15NDqzAjEp8AAAAlg"]
[Wed Mar 25 11:41:00.729180 2026] [:error] [pid 892:tid 922] [client 52.236.56.26:52250] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acNZTCT_G8WMU3T3yxp8PAAAANc"]
[Wed Mar 25 11:41:01.423115 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:27328] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acNZTSWKdJMhIccROjkEnAAAAUE"]
[Wed Mar 25 11:41:02.008523 2026] [:error] [pid 892:tid 911] [client 52.236.56.26:30116] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acNZTiT_G8WMU3T3yxp8QQAAAM0"]
[Wed Mar 25 11:41:02.807983 2026] [:error] [pid 25875:tid 25903] [client 52.236.56.26:35009] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acNZThJ38QkS3Nyfshx2kwAAApY"]
[Wed Mar 25 11:41:03.435548 2026] [:error] [pid 25969:tid 26032] [client 52.236.56.26:51054] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acNZTxd3aEUmOfdKja_NAQAAA8Y"]
[Wed Mar 25 11:41:04.072799 2026] [:error] [pid 25969:tid 26029] [client 52.236.56.26:51035] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acNZUBd3aEUmOfdKja_NBAAAA8M"]
[Wed Mar 25 11:41:04.732861 2026] [:error] [pid 25875:tid 25901] [client 52.236.56.26:35036] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acNZUBJ38QkS3Nyfshx2lQAAApQ"]
[Wed Mar 25 11:41:05.290398 2026] [:error] [pid 25875:tid 25899] [client 52.236.56.26:50997] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acNZURJ38QkS3Nyfshx2mgAAApI"]
[Wed Mar 25 11:41:05.894779 2026] [:error] [pid 47946:tid 47955] [client 52.236.56.26:24804] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acNZUTipQTqBMSeKYhdhPQAAAQc"]
[Wed Mar 25 11:41:06.431802 2026] [:error] [pid 26321:tid 26357] [client 52.236.56.26:24777] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acNZUvKO65qqGZCSPZrUpwAAAhA"]
[Wed Mar 25 11:41:07.311751 2026] [:error] [pid 26449:tid 26476] [client 52.236.56.26:57038] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acNZU9pZ2T15NDqzAjEp9QAAAlc"]
[Wed Mar 25 11:41:07.941510 2026] [:error] [pid 47989:tid 48004] [client 52.236.56.26:25330] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acNZUyWKdJMhIccROjkEngAAAU0"]
[Wed Mar 25 11:41:08.610725 2026] [:error] [pid 25967:tid 25986] [client 52.236.56.26:53428] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acNZVPg8Qtq7ZM4mSFmNIAAAA04"]
[Wed Mar 25 11:41:09.184405 2026] [:error] [pid 892:tid 919] [client 52.236.56.26:52232] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acNZVST_G8WMU3T3yxp8TAAAANQ"]
[Wed Mar 25 11:41:09.802076 2026] [:error] [pid 26269:tid 26279] [client 52.236.56.26:53434] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acNZVUn7e-ZQbaIs7qyQhgAAAYM"]
[Wed Mar 25 11:41:10.446028 2026] [:error] [pid 26449:tid 26469] [client 52.236.56.26:24818] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acNZVtpZ2T15NDqzAjEp_wAAAlA"]
[Wed Mar 25 11:41:11.036915 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:57575] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acNZVyWKdJMhIccROjkEogAAAVM"]
[Wed Mar 25 11:41:11.828584 2026] [:error] [pid 47989:tid 48011] [client 52.236.56.26:60918] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acNZVyWKdJMhIccROjkEpgAAAVQ"]
[Wed Mar 25 11:41:12.613611 2026] [:error] [pid 25969:tid 26050] [client 52.236.56.26:30140] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acNZWBd3aEUmOfdKja_NHQAAA9g"]
[Wed Mar 25 11:41:13.528044 2026] [:error] [pid 25967:tid 25974] [client 52.236.56.26:50968] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acNZWfg8Qtq7ZM4mSFmNIQAAA0I"]
[Wed Mar 25 11:41:14.344176 2026] [:error] [pid 25875:tid 25896] [client 52.236.56.26:56000] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acNZWhJ38QkS3Nyfshx2qQAAAo8"]
[Wed Mar 25 11:41:15.014386 2026] [:error] [pid 892:tid 912] [client 52.236.56.26:57590] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "acNZWyT_G8WMU3T3yxp8WwAAAM4"]
[Wed Mar 25 11:41:16.080428 2026] [:error] [pid 26269:tid 26281] [client 52.236.56.26:34486] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "acNZXEn7e-ZQbaIs7qyQiAAAAYU"]
[Wed Mar 25 11:41:16.795658 2026] [:error] [pid 892:tid 922] [client 52.236.56.26:27343] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "acNZXCT_G8WMU3T3yxp8YgAAANc"]
[Wed Mar 25 11:41:17.518664 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:2183] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "acNZXSWKdJMhIccROjkEqAAAAUE"]
[Wed Mar 25 11:41:18.104190 2026] [:error] [pid 25967:tid 25995] [client 52.236.56.26:21315] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "acNZXvg8Qtq7ZM4mSFmNJQAAA1c"]
[Wed Mar 25 11:41:19.073829 2026] [:error] [pid 892:tid 911] [client 52.236.56.26:53427] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "acNZXyT_G8WMU3T3yxp8cwAAAM0"]
[Wed Mar 25 11:41:19.657440 2026] [:error] [pid 47989:tid 48002] [client 52.236.56.26:50972] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "acNZXyWKdJMhIccROjkEqwAAAUs"]
[Wed Mar 25 11:41:20.493270 2026] [:error] [pid 892:tid 910] [client 52.236.56.26:19441] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "acNZYCT_G8WMU3T3yxp8fgAAAMw"]
[Wed Mar 25 11:41:21.161555 2026] [:error] [pid 25969:tid 26028] [client 52.236.56.26:57547] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNZYRd3aEUmOfdKja_NKQAAA8I"]
[Wed Mar 25 11:41:21.752070 2026] [:error] [pid 25969:tid 26034] [client 52.236.56.26:41902] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNZYRd3aEUmOfdKja_NKwAAA8g"]
[Wed Mar 25 11:41:22.560070 2026] [:error] [pid 25967:tid 25993] [client 52.236.56.26:19409] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNZYvg8Qtq7ZM4mSFmNLgAAA1U"]
[Wed Mar 25 11:41:23.530694 2026] [:error] [pid 26449:tid 26463] [client 52.236.56.26:28561] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acNZY9pZ2T15NDqzAjEqCQAAAko"]
[Wed Mar 25 11:41:24.240404 2026] [:error] [pid 892:tid 923] [client 52.236.56.26:10019] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acNZZCT_G8WMU3T3yxp8jQAAANg"]
[Wed Mar 25 11:41:24.960579 2026] [:error] [pid 25969:tid 26032] [client 52.236.56.26:10018] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acNZZBd3aEUmOfdKja_NMwAAA8Y"]
[Wed Mar 25 11:41:25.812611 2026] [:error] [pid 26449:tid 26461] [client 52.236.56.26:41954] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acNZZdpZ2T15NDqzAjEqDQAAAkg"]
[Wed Mar 25 11:41:26.413440 2026] [:error] [pid 25969:tid 26036] [client 52.236.56.26:44614] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acNZZhd3aEUmOfdKja_NNAAAA8o"]
[Wed Mar 25 11:41:27.015446 2026] [:error] [pid 47946:tid 47969] [client 52.236.56.26:61246] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acNZZzipQTqBMSeKYhdhSQAAARU"]
[Wed Mar 25 11:41:27.614991 2026] [:error] [pid 25969:tid 26031] [client 52.236.56.26:44625] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acNZZxd3aEUmOfdKja_NNwAAA8U"]
[Wed Mar 25 11:41:28.274541 2026] [:error] [pid 26321:tid 26348] [client 52.236.56.26:36960] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acNZaPKO65qqGZCSPZrUvAAAAgc"]
[Wed Mar 25 11:41:29.009902 2026] [:error] [pid 892:tid 906] [client 52.236.56.26:41917] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acNZaST_G8WMU3T3yxp80wAAAMg"]
[Wed Mar 25 11:41:29.675908 2026] [:error] [pid 47946:tid 47955] [client 52.236.56.26:61187] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acNZaTipQTqBMSeKYhdhSwAAAQc"]
[Wed Mar 25 11:41:30.361607 2026] [:error] [pid 47989:tid 47998] [client 52.236.56.26:10036] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acNZaiWKdJMhIccROjkEsQAAAUc"]
[Wed Mar 25 11:41:31.147947 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:62700] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acNZayWKdJMhIccROjkEtwAAAUE"]
[Wed Mar 25 11:41:31.814249 2026] [:error] [pid 47989:tid 48005] [client 52.236.56.26:58466] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acNZayWKdJMhIccROjkEwAAAAU4"]
[Wed Mar 25 11:41:32.677716 2026] [:error] [pid 26321:tid 26354] [client 52.236.56.26:58471] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "acNZbPKO65qqGZCSPZrUywAAAg0"]
[Wed Mar 25 11:41:33.273704 2026] [:error] [pid 26321:tid 26343] [client 52.236.56.26:9986] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "acNZbfKO65qqGZCSPZrUzgAAAgQ"]
[Wed Mar 25 11:41:34.286117 2026] [:error] [pid 25967:tid 25985] [client 52.236.56.26:62707] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "acNZbvg8Qtq7ZM4mSFmNNQAAA00"]
[Wed Mar 25 11:41:35.353044 2026] [:error] [pid 26321:tid 26353] [client 52.236.56.26:62183] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "acNZb_KO65qqGZCSPZrU1AAAAgw"]
[Wed Mar 25 11:41:36.062480 2026] [:error] [pid 26321:tid 26356] [client 52.236.56.26:10035] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acNZcPKO65qqGZCSPZrU2wAAAg8"]
[Wed Mar 25 11:41:37.065226 2026] [:error] [pid 25969:tid 26027] [client 52.236.56.26:61229] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acNZcRd3aEUmOfdKja_NPgAAA8E"]
[Wed Mar 25 11:41:38.221683 2026] [:error] [pid 25967:tid 25987] [client 52.236.56.26:41922] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acNZcvg8Qtq7ZM4mSFmNNwAAA08"]
[Wed Mar 25 11:41:39.007344 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:31989] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acNZcyWKdJMhIccROjkEzQAAAVM"]
[Wed Mar 25 11:41:40.294230 2026] [:error] [pid 892:tid 905] [client 52.236.56.26:62174] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acNZdCT_G8WMU3T3yxp83wAAAMc"]
[Wed Mar 25 11:41:41.124623 2026] [:error] [pid 892:tid 894] [client 52.236.56.26:62665] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acNZdST_G8WMU3T3yxp85AAAAMA"]
[Wed Mar 25 11:41:42.497872 2026] [:error] [pid 25969:tid 26038] [client 52.236.56.26:36980] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acNZdhd3aEUmOfdKja_NWAAAA8w"]
[Wed Mar 25 11:41:44.098425 2026] [:error] [pid 47989:tid 47996] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Wed Mar 25 11:41:44.405450 2026] [:error] [pid 47989:tid 48010] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Wed Mar 25 11:41:44.686814 2026] [:error] [pid 47989:tid 47995] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Wed Mar 25 11:41:44.982519 2026] [:error] [pid 47989:tid 47994] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Wed Mar 25 11:41:45.251414 2026] [:error] [pid 47989:tid 48011] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Wed Mar 25 11:41:45.584040 2026] [:error] [pid 47989:tid 48003] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Wed Mar 25 11:41:45.854385 2026] [:error] [pid 47989:tid 48013] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Wed Mar 25 11:41:46.150954 2026] [:error] [pid 47989:tid 48007] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Wed Mar 25 11:41:46.438065 2026] [:error] [pid 47989:tid 47992] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Mar 25 11:41:46.706594 2026] [:error] [pid 47989:tid 48014] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Wed Mar 25 11:41:46.988332 2026] [:error] [pid 47989:tid 48012] [client 52.236.56.26:31951] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Wed Mar 25 11:41:47.273677 2026] [:error] [pid 47989:tid 48000] [client 52.236.56.26:31951] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "acNZeyWKdJMhIccROjkE7QAAAUk"]
[Wed Mar 25 11:41:48.501363 2026] [:error] [pid 892:tid 894] [client 52.236.56.26:31333] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "acNZfCT_G8WMU3T3yxp9AAAAAMA"]
[Wed Mar 25 11:41:49.554475 2026] [:error] [pid 892:tid 904] [client 52.236.56.26:20294] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "acNZfST_G8WMU3T3yxp9BQAAAMY"]
[Wed Mar 25 11:41:50.666668 2026] [:error] [pid 47946:tid 47965] [client 52.236.56.26:38787] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "acNZfjipQTqBMSeKYhdhTwAAARE"]
[Wed Mar 25 11:41:51.390614 2026] [:error] [pid 26449:tid 26463] [client 52.236.56.26:38836] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acNZf9pZ2T15NDqzAjEqIgAAAko"]
[Wed Mar 25 11:41:52.187172 2026] [:error] [pid 25969:tid 26049] [client 52.236.56.26:39994] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acNZgBd3aEUmOfdKja_NaAAAA9c"]
[Wed Mar 25 11:41:53.102789 2026] [:error] [pid 25875:tid 25905] [client 52.236.56.26:49130] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acNZgRJ38QkS3Nyfshx2ygAAApg"]
[Wed Mar 25 11:41:53.624612 2026] [:error] [pid 26269:tid 26285] [client 52.236.56.26:18396] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acNZgUn7e-ZQbaIs7qyQmAAAAYk"]
[Wed Mar 25 11:41:54.719817 2026] [:error] [pid 756:tid 865] [client 52.236.56.26:40813] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acNZgjOaW6oylMIDBCQARwAAAI0"]
[Wed Mar 25 11:41:55.623304 2026] [:error] [pid 26449:tid 26466] [client 52.236.56.26:20763] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acNZg9pZ2T15NDqzAjEqKAAAAk0"]
[Wed Mar 25 11:41:56.410487 2026] [:error] [pid 47989:tid 48002] [client 52.236.56.26:51646] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acNZhCWKdJMhIccROjkE7gAAAUs"]
[Wed Mar 25 11:41:57.442266 2026] [:error] [pid 25969:tid 26036] [client 52.236.56.26:23704] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acNZhRd3aEUmOfdKja_NbAAAA8o"]
[Wed Mar 25 11:41:58.504498 2026] [:error] [pid 47989:tid 47991] [client 52.236.56.26:22306] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acNZhiWKdJMhIccROjkE8AAAAUA"]
[Wed Mar 25 11:41:59.637876 2026] [:error] [pid 47946:tid 47964] [client 52.236.56.26:61257] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acNZhzipQTqBMSeKYhdhXAAAARA"]
[Wed Mar 25 11:42:00.309999 2026] [:error] [pid 25969:tid 26044] [client 52.236.56.26:33238] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acNZiBd3aEUmOfdKja_NdwAAA9I"]
[Wed Mar 25 11:42:00.961818 2026] [:error] [pid 756:tid 860] [client 52.236.56.26:21811] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acNZiDOaW6oylMIDBCQASwAAAIg"]
[Wed Mar 25 11:42:01.766483 2026] [:error] [pid 47989:tid 48001] [client 52.236.56.26:61297] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "acNZiSWKdJMhIccROjkE9wAAAUo"]
[Wed Mar 25 11:42:02.942874 2026] [:error] [pid 26449:tid 26463] [client 52.236.56.26:18821] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "acNZitpZ2T15NDqzAjEqLgAAAko"]
[Wed Mar 25 11:42:03.603302 2026] [:error] [pid 26321:tid 26352] [client 52.236.56.26:50517] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "acNZi_KO65qqGZCSPZrU-gAAAgs"]
[Wed Mar 25 11:42:04.256350 2026] [:error] [pid 26321:tid 26358] [client 52.236.56.26:33154] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "acNZjPKO65qqGZCSPZrU_QAAAhE"]
[Wed Mar 25 11:42:05.368694 2026] [:error] [pid 756:tid 875] [client 52.236.56.26:2664] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acNZjTOaW6oylMIDBCQATQAAAJc"]
[Wed Mar 25 11:42:06.139090 2026] [:error] [pid 25967:tid 25980] [client 52.236.56.26:31285] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acNZjvg8Qtq7ZM4mSFmNSAAAA0g"]
[Wed Mar 25 11:42:06.825993 2026] [:error] [pid 25967:tid 25992] [client 52.236.56.26:29177] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acNZjvg8Qtq7ZM4mSFmNSwAAA1Q"]
[Wed Mar 25 11:42:07.506415 2026] [:error] [pid 25875:tid 25884] [client 52.236.56.26:46412] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acNZjxJ38QkS3Nyfshx22gAAAoM"]
[Wed Mar 25 11:42:08.125336 2026] [:error] [pid 25967:tid 25982] [client 52.236.56.26:23329] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "acNZkPg8Qtq7ZM4mSFmNTgAAA0o"]
[Wed Mar 25 11:42:08.649899 2026] [:error] [pid 25967:tid 25996] [client 52.236.56.26:40400] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "acNZkPg8Qtq7ZM4mSFmNUAAAA1g"]
[Wed Mar 25 11:42:09.273071 2026] [:error] [pid 26321:tid 26346] [client 52.236.56.26:46422] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "acNZkfKO65qqGZCSPZrVFAAAAgY"]
[Wed Mar 25 11:42:09.866188 2026] [:error] [pid 25967:tid 25983] [client 52.236.56.26:34963] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "acNZkfg8Qtq7ZM4mSFmNVQAAA0s"]
[Wed Mar 25 11:42:10.546384 2026] [:error] [pid 25969:tid 26045] [client 52.236.56.26:2884] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acNZkhd3aEUmOfdKja_NeAAAA9M"]
[Wed Mar 25 11:42:11.259403 2026] [:error] [pid 26449:tid 26457] [client 52.236.56.26:19719] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acNZk9pZ2T15NDqzAjEqNgAAAkQ"]
[Wed Mar 25 11:42:11.882499 2026] [:error] [pid 25967:tid 25992] [client 52.236.56.26:2739] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acNZk_g8Qtq7ZM4mSFmNWAAAA1Q"]
[Wed Mar 25 11:42:12.489674 2026] [:error] [pid 26449:tid 26470] [client 52.236.56.26:2895] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acNZlNpZ2T15NDqzAjEqOAAAAlE"]
[Wed Mar 25 11:42:13.061642 2026] [:error] [pid 25969:tid 26036] [client 52.236.56.26:2916] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acNZlRd3aEUmOfdKja_NggAAA8o"]
[Wed Mar 25 11:42:13.802163 2026] [:error] [pid 25969:tid 26035] [client 52.236.56.26:18307] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acNZlRd3aEUmOfdKja_NiAAAA8k"]
[Wed Mar 25 11:42:14.326782 2026] [:error] [pid 25969:tid 26036] [client 52.236.56.26:28224] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acNZlhd3aEUmOfdKja_NjgAAA8o"]
[Wed Mar 25 11:42:15.107562 2026] [:error] [pid 25875:tid 25898] [client 52.236.56.26:36248] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acNZlxJ38QkS3Nyfshx23AAAApE"]
[Wed Mar 25 11:42:15.818610 2026] [:error] [pid 47946:tid 47965] [client 52.236.56.26:2866] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acNZlzipQTqBMSeKYhdhXwAAARE"]
[Wed Mar 25 11:42:16.536609 2026] [:error] [pid 25967:tid 25987] [client 52.236.56.26:51702] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acNZmPg8Qtq7ZM4mSFmNXAAAA08"]
[Wed Mar 25 11:42:17.144132 2026] [:error] [pid 26321:tid 26342] [client 52.236.56.26:27861] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acNZmfKO65qqGZCSPZrVJAAAAgM"]
[Wed Mar 25 11:42:18.313127 2026] [:error] [pid 892:tid 922] [client 52.236.56.26:46071] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acNZmiT_G8WMU3T3yxp9GQAAANc"]
[Wed Mar 25 11:42:19.026346 2026] [:error] [pid 892:tid 894] [client 52.236.56.26:18928] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "acNZmyT_G8WMU3T3yxp9HgAAAMA"]
[Wed Mar 25 11:42:19.666008 2026] [:error] [pid 26321:tid 26340] [client 52.236.56.26:46030] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "acNZm_KO65qqGZCSPZrVLQAAAgE"]
[Wed Mar 25 11:42:20.259896 2026] [:error] [pid 25969:tid 26028] [client 52.236.56.26:60377] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "acNZnBd3aEUmOfdKja_NlAAAA8I"]
[Wed Mar 25 11:42:20.896799 2026] [:error] [pid 25969:tid 26026] [client 52.236.56.26:26337] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "acNZnBd3aEUmOfdKja_NlwAAA8A"]
[Wed Mar 25 11:42:21.654701 2026] [:error] [pid 47989:tid 47998] [client 52.236.56.26:38877] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "acNZnSWKdJMhIccROjkFBAAAAUc"]
[Wed Mar 25 11:42:22.270706 2026] [:error] [pid 47989:tid 48004] [client 52.236.56.26:60362] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "acNZniWKdJMhIccROjkFBQAAAU0"]
[Wed Mar 25 11:42:22.796391 2026] [:error] [pid 25969:tid 26039] [client 52.236.56.26:18317] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "acNZnhd3aEUmOfdKja_NoAAAA80"]
[Wed Mar 25 11:42:23.340424 2026] [:error] [pid 25969:tid 26026] [client 52.236.56.26:35680] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "acNZnxd3aEUmOfdKja_NogAAA8A"]
[Wed Mar 25 11:42:23.886775 2026] [:error] [pid 25969:tid 26035] [client 52.236.56.26:18895] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "acNZnxd3aEUmOfdKja_NpQAAA8k"]
[Wed Mar 25 11:42:24.638667 2026] [:error] [pid 26269:tid 26291] [client 52.236.56.26:35695] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "acNZoEn7e-ZQbaIs7qyQqQAAAY8"]
[Wed Mar 25 11:42:25.265762 2026] [:error] [pid 47989:tid 47996] [client 52.236.56.26:38867] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "acNZoSWKdJMhIccROjkFCwAAAUU"]
[Wed Mar 25 11:42:25.926070 2026] [:error] [pid 25969:tid 26043] [client 52.236.56.26:35678] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "acNZoRd3aEUmOfdKja_NrQAAA9E"]
[Wed Mar 25 11:42:26.556392 2026] [:error] [pid 892:tid 917] [client 52.236.56.26:35671] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acNZoiT_G8WMU3T3yxp9JwAAANI"]
[Wed Mar 25 11:42:27.116898 2026] [:error] [pid 25969:tid 26035] [client 52.236.56.26:35676] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acNZoxd3aEUmOfdKja_NrwAAA8k"]
[Wed Mar 25 11:42:27.872443 2026] [:error] [pid 892:tid 895] [client 52.236.56.26:38880] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acNZoyT_G8WMU3T3yxp9LQAAAME"]
[Wed Mar 25 11:42:28.527703 2026] [:error] [pid 892:tid 906] [client 52.236.56.26:60833] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acNZpCT_G8WMU3T3yxp9NAAAAMg"]
[Wed Mar 25 11:42:29.315158 2026] [:error] [pid 892:tid 918] [client 52.236.56.26:26873] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acNZpST_G8WMU3T3yxp9OwAAANM"]
[Wed Mar 25 11:42:29.981050 2026] [:error] [pid 25969:tid 26040] [client 52.236.56.26:56967] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acNZpRd3aEUmOfdKja_NsgAAA84"]
[Wed Mar 25 11:42:30.637711 2026] [:error] [pid 26321:tid 26359] [client 52.236.56.26:60831] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acNZpvKO65qqGZCSPZrVOAAAAhI"]
[Wed Mar 25 11:42:31.287914 2026] [:error] [pid 892:tid 904] [client 52.236.56.26:2879] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acNZpyT_G8WMU3T3yxp9QwAAAMY"]
[Wed Mar 25 11:42:31.836853 2026] [:error] [pid 892:tid 914] [client 52.236.56.26:23803] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acNZpyT_G8WMU3T3yxp9RgAAANA"]
[Wed Mar 25 11:42:32.448494 2026] [:error] [pid 25969:tid 26034] [client 52.236.56.26:40323] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acNZqBd3aEUmOfdKja_NtAAAA8g"]
[Wed Mar 25 11:42:33.006512 2026] [:error] [pid 892:tid 908] [client 52.236.56.26:26342] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acNZqST_G8WMU3T3yxp9TAAAAMo"]
[Wed Mar 25 11:42:33.630595 2026] [:error] [pid 892:tid 917] [client 52.236.56.26:21254] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acNZqST_G8WMU3T3yxp9UwAAANI"]
[Wed Mar 25 11:42:34.415484 2026] [:error] [pid 25969:tid 26036] [client 52.236.56.26:40328] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acNZqhd3aEUmOfdKja_NtQAAA8o"]
[Wed Mar 25 11:42:34.935771 2026] [:error] [pid 892:tid 896] [client 52.236.56.26:30180] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acNZqiT_G8WMU3T3yxp9XwAAAMI"]
[Wed Mar 25 11:42:35.634528 2026] [:error] [pid 26321:tid 26346] [client 52.236.56.26:26336] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acNZq_KO65qqGZCSPZrVPwAAAgY"]
[Wed Mar 25 11:42:36.257408 2026] [:error] [pid 26321:tid 26343] [client 52.236.56.26:56960] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acNZrPKO65qqGZCSPZrVQAAAAgQ"]
[Wed Mar 25 11:42:37.285541 2026] [:error] [pid 892:tid 911] [client 52.236.56.26:57000] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "acNZrST_G8WMU3T3yxp9bQAAAM0"]
[Wed Mar 25 11:42:38.020120 2026] [:error] [pid 26321:tid 26357] [client 52.236.56.26:21306] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "acNZrvKO65qqGZCSPZrVSwAAAhA"]
[Wed Mar 25 11:42:38.547230 2026] [:error] [pid 892:tid 907] [client 52.236.56.26:34500] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "acNZriT_G8WMU3T3yxp9cQAAAMk"]
[Wed Mar 25 11:42:39.075959 2026] [:error] [pid 892:tid 906] [client 52.236.56.26:34528] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "acNZryT_G8WMU3T3yxp9dgAAAMg"]
[Wed Mar 25 11:42:39.703807 2026] [:error] [pid 26449:tid 26473] [client 52.236.56.26:38871] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acNZr9pZ2T15NDqzAjEqUAAAAlQ"]
[Wed Mar 25 11:42:40.297680 2026] [:error] [pid 47989:tid 48013] [client 52.236.56.26:34513] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acNZsCWKdJMhIccROjkFFwAAAVY"]
[Wed Mar 25 11:42:41.024569 2026] [:error] [pid 892:tid 909] [client 52.236.56.26:30173] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acNZsST_G8WMU3T3yxp9ewAAAMs"]
[Wed Mar 25 11:42:41.911566 2026] [:error] [pid 47989:tid 48007] [client 52.236.56.26:30197] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acNZsSWKdJMhIccROjkFGwAAAVA"]
[Wed Mar 25 11:42:42.746875 2026] [:error] [pid 25969:tid 26033] [client 52.236.56.26:30202] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acNZshd3aEUmOfdKja_NvgAAA8c"]
[Wed Mar 25 11:42:43.355792 2026] [:error] [pid 25969:tid 26041] [client 52.236.56.26:38906] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acNZsxd3aEUmOfdKja_NwwAAA88"]
[Wed Mar 25 11:42:44.101433 2026] [:error] [pid 892:tid 912] [client 52.236.56.26:38900] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acNZtCT_G8WMU3T3yxp9iwAAAM4"]
[Wed Mar 25 11:42:44.623110 2026] [:error] [pid 25969:tid 26036] [client 52.236.56.26:60411] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acNZtBd3aEUmOfdKja_NxQAAA8o"]
[Wed Mar 25 11:42:45.895269 2026] [:error] [pid 25875:tid 25895] [client 52.236.56.26:26879] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "acNZtRJ38QkS3Nyfshx24QAAAo4"]
[Wed Mar 25 11:42:46.863228 2026] [:error] [pid 26269:tid 26285] [client 52.236.56.26:2427] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Wed Mar 25 11:42:47.145705 2026] [:error] [pid 26269:tid 26286] [client 52.236.56.26:2427] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Wed Mar 25 11:42:47.423551 2026] [:error] [pid 26269:tid 26278] [client 52.236.56.26:2427] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Wed Mar 25 11:42:47.699998 2026] [:error] [pid 26269:tid 26284] [client 52.236.56.26:2427] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Wed Mar 25 11:42:47.980595 2026] [:error] [pid 26269:tid 26300] [client 52.236.56.26:2427] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Wed Mar 25 11:42:48.253684 2026] [:error] [pid 26269:tid 26282] [client 52.236.56.26:2427] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acNZuEn7e-ZQbaIs7qyQuAAAAYY"]
[Wed Mar 25 11:42:48.884411 2026] [:error] [pid 25967:tid 25978] [client 52.236.56.26:34534] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acNZuPg8Qtq7ZM4mSFmNZwAAA0Y"]
[Wed Mar 25 11:42:49.650806 2026] [:error] [pid 892:tid 899] [client 52.236.56.26:17344] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acNZuST_G8WMU3T3yxp9mgAAAMM"]
[Wed Mar 25 11:42:50.501830 2026] [:error] [pid 25969:tid 26031] [client 52.236.56.26:57017] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acNZuhd3aEUmOfdKja_N0QAAA8U"]
[Wed Mar 25 11:42:51.105808 2026] [:error] [pid 892:tid 921] [client 52.236.56.26:26843] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "acNZuyT_G8WMU3T3yxp9pwAAANY"]
[Wed Mar 25 11:42:52.081839 2026] [:error] [pid 892:tid 915] [client 52.236.56.26:52876] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "acNZvCT_G8WMU3T3yxp9rgAAANE"]
[Wed Mar 25 11:42:52.743453 2026] [:error] [pid 892:tid 896] [client 52.236.56.26:38864] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "acNZvCT_G8WMU3T3yxp9swAAAMI"]
[Wed Mar 25 11:42:53.562387 2026] [:error] [pid 26321:tid 26349] [client 52.236.56.26:17405] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/44.php"] [unique_id "acNZvfKO65qqGZCSPZrVYgAAAgg"]
[Wed Mar 25 11:42:54.259764 2026] [:error] [pid 892:tid 919] [client 52.236.56.26:30200] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acNZviT_G8WMU3T3yxp9tgAAANQ"]
[Wed Mar 25 11:42:54.850259 2026] [:error] [pid 26321:tid 26340] [client 52.236.56.26:26832] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acNZvvKO65qqGZCSPZrVZwAAAgE"]
[Wed Mar 25 11:42:55.531985 2026] [:error] [pid 892:tid 909] [client 52.236.56.26:56978] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acNZvyT_G8WMU3T3yxp9uQAAAMs"]
[Wed Mar 25 11:42:56.310534 2026] [:error] [pid 25969:tid 26032] [client 52.236.56.26:18939] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acNZwBd3aEUmOfdKja_N1wAAA8Y"]
[Wed Mar 25 11:42:56.900938 2026] [:error] [pid 26269:tid 26291] [client 52.236.56.26:46040] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acNZwEn7e-ZQbaIs7qyQugAAAY8"]
[Wed Mar 25 11:42:57.594160 2026] [:error] [pid 25875:tid 25888] [client 52.236.56.26:18344] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acNZwRJ38QkS3Nyfshx25AAAAoc"]
[Wed Mar 25 11:42:58.277001 2026] [:error] [pid 26269:tid 26295] [client 52.236.56.26:46036] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acNZwkn7e-ZQbaIs7qyQwQAAAZM"]
[Wed Mar 25 11:42:58.902374 2026] [:error] [pid 26321:tid 26361] [client 52.236.56.26:26821] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acNZwvKO65qqGZCSPZrVbAAAAhQ"]
[Wed Mar 25 11:42:59.669704 2026] [:error] [pid 26269:tid 26280] [client 52.236.56.26:40332] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "acNZw0n7e-ZQbaIs7qyQzAAAAYQ"]
[Wed Mar 25 11:43:00.390502 2026] [:error] [pid 26269:tid 26297] [client 52.236.56.26:40352] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "acNZxEn7e-ZQbaIs7qyQ0QAAAZU"]
[Wed Mar 25 11:43:01.049036 2026] [:error] [pid 25969:tid 26049] [client 52.236.56.26:26818] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "acNZxRd3aEUmOfdKja_N3wAAA9c"]
[Wed Mar 25 11:43:01.837891 2026] [:error] [pid 25967:tid 25996] [client 52.236.56.26:60802] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "acNZxfg8Qtq7ZM4mSFmNaAAAA1g"]
[Wed Mar 25 11:43:02.423498 2026] [:error] [pid 47989:tid 47995] [client 52.236.56.26:61661] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acNZxiWKdJMhIccROjkFPwAAAUQ"]
[Wed Mar 25 11:43:03.235828 2026] [:error] [pid 25875:tid 25897] [client 52.236.56.26:57011] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acNZxxJ38QkS3Nyfshx26QAAApA"]
[Wed Mar 25 11:43:03.965732 2026] [:error] [pid 47989:tid 47991] [client 52.236.56.26:56455] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acNZxyWKdJMhIccROjkFQwAAAUA"]
[Wed Mar 25 11:43:04.873872 2026] [:error] [pid 47989:tid 48008] [client 52.236.56.26:46052] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acNZyCWKdJMhIccROjkFRQAAAVE"]
[Wed Mar 25 11:43:10.473810 2026] [:error] [pid 892:tid 899] [client 52.236.56.26:61664] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acNZziT_G8WMU3T3yxp94gAAAMM"]
[Wed Mar 25 11:43:11.154550 2026] [:error] [pid 892:tid 909] [client 52.236.56.26:35681] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acNZzyT_G8WMU3T3yxp95gAAAMs"]
[Wed Mar 25 11:43:12.005640 2026] [:error] [pid 892:tid 911] [client 52.236.56.26:61684] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acNZ0CT_G8WMU3T3yxp96wAAAM0"]
[Wed Mar 25 11:43:12.664355 2026] [:error] [pid 892:tid 909] [client 52.236.56.26:51663] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acNZ0CT_G8WMU3T3yxp98gAAAMs"]
[Wed Mar 25 11:43:13.581534 2026] [:error] [pid 26321:tid 26355] [client 52.236.56.26:28252] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acNZ0fKO65qqGZCSPZrVeQAAAg4"]
[Wed Mar 25 11:43:14.186625 2026] [:error] [pid 26321:tid 26357] [client 52.236.56.26:3022] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acNZ0vKO65qqGZCSPZrVegAAAhA"]
[Wed Mar 25 11:43:14.747095 2026] [:error] [pid 26321:tid 26351] [client 52.236.56.26:32553] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acNZ0vKO65qqGZCSPZrVfQAAAgo"]
[Wed Mar 25 11:43:15.351280 2026] [:error] [pid 892:tid 921] [client 52.236.56.26:33810] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acNZ0yT_G8WMU3T3yxp9_wAAANY"]
[Wed Mar 25 11:43:16.044861 2026] [:error] [pid 26449:tid 26454] [client 52.236.56.26:29107] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acNZ1NpZ2T15NDqzAjEqZAAAAkE"]
[Wed Mar 25 11:43:16.720698 2026] [:error] [pid 25967:tid 25987] [client 52.236.56.26:56477] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acNZ1Pg8Qtq7ZM4mSFmNdAAAA08"]
[Wed Mar 25 11:43:17.572784 2026] [:error] [pid 26269:tid 26300] [client 52.236.56.26:26264] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acNZ1Un7e-ZQbaIs7qyQ2QAAAZg"]
[Wed Mar 25 11:43:18.391816 2026] [:error] [pid 26449:tid 26469] [client 52.236.56.26:46403] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acNZ1tpZ2T15NDqzAjEqaQAAAlA"]
[Wed Mar 25 11:43:19.075693 2026] [:error] [pid 892:tid 919] [client 52.236.56.26:50550] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acNZ1yT_G8WMU3T3yxp-CQAAANQ"]
[Wed Mar 25 11:43:19.918086 2026] [:error] [pid 892:tid 909] [client 52.236.56.26:46445] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acNZ1yT_G8WMU3T3yxp-DAAAAMs"]
[Wed Mar 25 11:43:20.558422 2026] [:error] [pid 47989:tid 48013] [client 52.236.56.26:57529] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acNZ2CWKdJMhIccROjkFTgAAAVY"]
[Wed Mar 25 11:43:21.332920 2026] [:error] [pid 25967:tid 25980] [client 52.236.56.26:46452] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acNZ2fg8Qtq7ZM4mSFmNegAAA0g"]
[Wed Mar 25 11:43:22.483473 2026] [:error] [pid 25969:tid 26044] [client 52.236.56.26:50540] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acNZ2hd3aEUmOfdKja_N7wAAA9I"]
[Wed Mar 25 11:43:23.693041 2026] [:error] [pid 25969:tid 26031] [client 52.236.56.26:65339] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acNZ2xd3aEUmOfdKja_N8QAAA8U"]
[Wed Mar 25 11:43:25.447823 2026] [:error] [pid 25969:tid 26033] [client 52.236.56.26:2686] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acNZ3Rd3aEUmOfdKja_N9AAAA8c"]
[Wed Mar 25 11:43:26.763171 2026] [:error] [pid 26449:tid 26472] [client 52.236.56.26:40769] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acNZ3tpZ2T15NDqzAjEqcgAAAlM"]
[Wed Mar 25 11:43:28.985632 2026] [:error] [pid 892:tid 920] [client 52.236.56.26:44643] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "acNZ4CT_G8WMU3T3yxp-JAAAANU"]
[Wed Mar 25 11:43:30.767946 2026] [:error] [pid 892:tid 915] [client 52.236.56.26:28554] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "acNZ4iT_G8WMU3T3yxp-LQAAANE"]
[Wed Mar 25 11:43:32.247472 2026] [:error] [pid 892:tid 923] [client 52.236.56.26:2225] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "acNZ5CT_G8WMU3T3yxp-OQAAANg"]
[Wed Mar 25 11:43:33.034005 2026] [:error] [pid 26449:tid 26476] [client 52.236.56.26:19427] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "acNZ5dpZ2T15NDqzAjEqkQAAAlc"]
[Wed Mar 25 11:43:33.736817 2026] [:error] [pid 26449:tid 26473] [client 52.236.56.26:61228] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acNZ5dpZ2T15NDqzAjEqkwAAAlQ"]
[Wed Mar 25 11:43:34.634635 2026] [:error] [pid 892:tid 896] [client 52.236.56.26:34437] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acNZ5iT_G8WMU3T3yxp-QwAAAMI"]
[Wed Mar 25 11:43:35.344087 2026] [:error] [pid 47989:tid 48014] [client 52.236.56.26:2187] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acNZ5yWKdJMhIccROjkFWAAAAVc"]
[Wed Mar 25 11:43:36.062852 2026] [:error] [pid 26321:tid 26363] [client 52.236.56.26:19426] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acNZ6PKO65qqGZCSPZrVlwAAAhY"]
[Wed Mar 25 11:43:36.881504 2026] [:error] [pid 25967:tid 25986] [client 52.236.56.26:44615] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "acNZ6Pg8Qtq7ZM4mSFmNhAAAA04"]
[Wed Mar 25 11:43:37.576057 2026] [:error] [pid 26269:tid 26281] [client 52.236.56.26:58436] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "acNZ6Un7e-ZQbaIs7qyQ6gAAAYU"]
[Wed Mar 25 11:43:38.353250 2026] [:error] [pid 26321:tid 26348] [client 52.236.56.26:19396] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "acNZ6vKO65qqGZCSPZrVmwAAAgc"]
[Wed Mar 25 11:43:38.922344 2026] [:error] [pid 26321:tid 26344] [client 52.236.56.26:52242] [client 52.236.56.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "acNZ6vKO65qqGZCSPZrVoAAAAgU"]
[Wed Mar 25 11:47:08.302949 2026] [:error] [pid 26321:tid 26351] [client 173.239.240.130:54261] [client 173.239.240.130] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.239.240.130, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "acNavPKO65qqGZCSPZrW2AAAAgo"]
[Wed Mar 25 11:47:08.306904 2026] [:error] [pid 26321:tid 26351] [client 173.239.240.130:54261] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Mar 25 15:43:44.532357 2026] [:error] [pid 26321:tid 26348] [client 134.0.190.176:62420] [client 134.0.190.176] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 134.0.190.176, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acOSMPKO65qqGZCSPZoSWwAAAgc"]
[Wed Mar 25 15:43:44.537689 2026] [:error] [pid 26321:tid 26348] [client 134.0.190.176:62420] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Mar 25 16:58:55.832859 2026] [:error] [pid 47989:tid 47998] [client 158.158.96.10:5923] File does not exist: /usr/local/apache/htdocs/suspended-page/classgoto24.php
[Wed Mar 25 16:58:56.092947 2026] [:error] [pid 47989:tid 48015] [client 158.158.96.10:5923] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Wed Mar 25 16:58:56.349742 2026] [:error] [pid 47989:tid 47994] [client 158.158.96.10:5923] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Wed Mar 25 16:58:56.607691 2026] [:error] [pid 47989:tid 48011] [client 158.158.96.10:5923] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Wed Mar 25 16:58:56.850398 2026] [:error] [pid 47989:tid 48002] [client 158.158.96.10:5923] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Wed Mar 25 16:58:57.093852 2026] [:error] [pid 47989:tid 48005] [client 158.158.96.10:5923] File does not exist: /usr/local/apache/htdocs/suspended-page/h02ugyh.php
[Wed Mar 25 16:58:57.337149 2026] [:error] [pid 47989:tid 47992] [client 158.158.96.10:5923] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Wed Mar 25 16:58:57.579845 2026] [:error] [pid 47989:tid 48014] [client 158.158.96.10:5923] File does not exist: /usr/local/apache/htdocs/suspended-page/ws47.php
[Wed Mar 25 16:58:57.822510 2026] [:error] [pid 47989:tid 48010] [client 158.158.96.10:5923] File does not exist: /usr/local/apache/htdocs/suspended-page/vvvb.php
[Wed Mar 25 16:58:58.070362 2026] [:error] [pid 47989:tid 48008] [client 158.158.96.10:5923] File does not exist: /usr/local/apache/htdocs/suspended-page/x12.php
[Wed Mar 25 16:58:58.310669 2026] [:error] [pid 47989:tid 47991] [client 158.158.96.10:5923] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zcsu.php"] [unique_id "acOj0iWKdJMhIccROjl-_AAAAUA"]
[Wed Mar 25 16:58:58.857368 2026] [:error] [pid 47989:tid 48003] [client 158.158.96.10:5920] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zcsu.php"] [unique_id "acOj0iWKdJMhIccROjl-_gAAAUw"]
[Wed Mar 25 16:58:59.404875 2026] [:error] [pid 25967:tid 25981] [client 158.158.96.10:57138] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zcsu.php"] [unique_id "acOj0_g8Qtq7ZM4mSFkW6gAAA0k"]
[Wed Mar 25 16:58:59.951487 2026] [:error] [pid 47989:tid 48000] [client 158.158.96.10:44360] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zcsu.php"] [unique_id "acOj0yWKdJMhIccROjl_AAAAAUk"]
[Wed Mar 25 16:59:00.478758 2026] [:error] [pid 25967:tid 25990] [client 158.158.96.10:61766] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acOj1Pg8Qtq7ZM4mSFkW7AAAA1I"]
[Wed Mar 25 16:59:01.036187 2026] [:error] [pid 26321:tid 26353] [client 158.158.96.10:61800] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acOj1fKO65qqGZCSPZoivwAAAgw"]
[Wed Mar 25 16:59:01.590409 2026] [:error] [pid 25967:tid 25978] [client 158.158.96.10:61777] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acOj1fg8Qtq7ZM4mSFkW7QAAA0Y"]
[Wed Mar 25 16:59:02.140975 2026] [:error] [pid 25967:tid 25988] [client 158.158.96.10:5411] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acOj1vg8Qtq7ZM4mSFkW7wAAA1A"]
[Wed Mar 25 16:59:02.799176 2026] [:error] [pid 25967:tid 25985] [client 158.158.96.10:49625] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acOj1vg8Qtq7ZM4mSFkW8QAAA00"]
[Wed Mar 25 16:59:03.364520 2026] [:error] [pid 25967:tid 25991] [client 158.158.96.10:5927] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acOj1_g8Qtq7ZM4mSFkW9AAAA1M"]
[Wed Mar 25 16:59:03.913318 2026] [:error] [pid 47989:tid 48009] [client 158.158.96.10:64979] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acOj1yWKdJMhIccROjl_AgAAAVI"]
[Wed Mar 25 16:59:04.562352 2026] [:error] [pid 25875:tid 25904] [client 158.158.96.10:60445] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acOj2BJ38QkS3NyfshzGnAAAApc"]
[Wed Mar 25 16:59:05.136134 2026] [:error] [pid 26269:tid 26283] [client 158.158.96.10:5438] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acOj2Un7e-ZQbaIs7qyryQAAAYc"]
[Wed Mar 25 16:59:05.708498 2026] [:error] [pid 47946:tid 47972] [client 158.158.96.10:65019] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acOj2TipQTqBMSeKYhd5IQAAARg"]
[Wed Mar 25 16:59:06.402003 2026] [:error] [pid 25967:tid 25980] [client 158.158.96.10:61653] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acOj2vg8Qtq7ZM4mSFkW9wAAA0g"]
[Wed Mar 25 16:59:06.932164 2026] [:error] [pid 26269:tid 26287] [client 158.158.96.10:38128] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acOj2kn7e-ZQbaIs7qyrywAAAYs"]
[Wed Mar 25 16:59:07.552682 2026] [:error] [pid 26449:tid 26477] [client 158.158.96.10:65012] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acOj29pZ2T15NDqzAjFhaAAAAlg"]
[Wed Mar 25 16:59:08.102477 2026] [:error] [pid 26321:tid 26351] [client 158.158.96.10:60452] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acOj3PKO65qqGZCSPZoiwQAAAgo"]
[Wed Mar 25 16:59:09.144333 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:65021] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acOj3SWKdJMhIccROjl_AwAAAU0"]
[Wed Mar 25 16:59:10.065949 2026] [:error] [pid 25875:tid 25902] [client 158.158.96.10:38090] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acOj3hJ38QkS3NyfshzGnQAAApU"]
[Wed Mar 25 16:59:10.748819 2026] [:error] [pid 25875:tid 25889] [client 158.158.96.10:39401] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acOj3hJ38QkS3NyfshzGngAAAog"]
[Wed Mar 25 16:59:11.336673 2026] [:error] [pid 892:tid 923] [client 158.158.96.10:50719] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acOj3yT_G8WMU3T3yxq9xgAAANg"]
[Wed Mar 25 16:59:11.946570 2026] [:error] [pid 25967:tid 25983] [client 158.158.96.10:65032] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acOj3_g8Qtq7ZM4mSFkXAQAAA0s"]
[Wed Mar 25 16:59:12.568787 2026] [:error] [pid 25967:tid 25992] [client 158.158.96.10:61779] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acOj4Pg8Qtq7ZM4mSFkXBAAAA1Q"]
[Wed Mar 25 16:59:13.084941 2026] [:error] [pid 25967:tid 25974] [client 158.158.96.10:39389] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOj4fg8Qtq7ZM4mSFkXCAAAA0I"]
[Wed Mar 25 16:59:13.637252 2026] [:error] [pid 26449:tid 26469] [client 158.158.96.10:39415] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOj4dpZ2T15NDqzAjFhawAAAlA"]
[Wed Mar 25 16:59:14.243800 2026] [:error] [pid 25967:tid 25990] [client 158.158.96.10:64201] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOj4vg8Qtq7ZM4mSFkXCgAAA1I"]
[Wed Mar 25 16:59:14.901011 2026] [:error] [pid 25967:tid 25975] [client 158.158.96.10:61776] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acOj4vg8Qtq7ZM4mSFkXDQAAA0M"]
[Wed Mar 25 16:59:15.547422 2026] [:error] [pid 25967:tid 25974] [client 158.158.96.10:38113] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "acOj4_g8Qtq7ZM4mSFkXEgAAA0I"]
[Wed Mar 25 16:59:16.119879 2026] [:error] [pid 26269:tid 26297] [client 158.158.96.10:49638] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "acOj5En7e-ZQbaIs7qyrzQAAAZU"]
[Wed Mar 25 16:59:16.647363 2026] [:error] [pid 25969:tid 26046] [client 158.158.96.10:49656] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "acOj5Bd3aEUmOfdKja_4rQAAA9Q"]
[Wed Mar 25 16:59:17.324740 2026] [:error] [pid 25875:tid 25891] [client 158.158.96.10:60466] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "acOj5RJ38QkS3NyfshzGoQAAAoo"]
[Wed Mar 25 16:59:17.982467 2026] [:error] [pid 47989:tid 48014] [client 158.158.96.10:39369] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acOj5SWKdJMhIccROjl_CwAAAVc"]
[Wed Mar 25 16:59:18.728845 2026] [:error] [pid 47989:tid 48008] [client 158.158.96.10:41637] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acOj5iWKdJMhIccROjl_OAAAAVE"]
[Wed Mar 25 16:59:19.428170 2026] [:error] [pid 25967:tid 25975] [client 158.158.96.10:39374] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acOj5_g8Qtq7ZM4mSFkXGwAAA0M"]
[Wed Mar 25 16:59:20.041823 2026] [:error] [pid 26449:tid 26472] [client 158.158.96.10:49607] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acOj6NpZ2T15NDqzAjFhcAAAAlM"]
[Wed Mar 25 16:59:20.628229 2026] [:error] [pid 25875:tid 25900] [client 158.158.96.10:39410] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acOj6BJ38QkS3NyfshzGpQAAApM"]
[Wed Mar 25 16:59:21.226851 2026] [:error] [pid 25875:tid 25892] [client 158.158.96.10:64228] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acOj6RJ38QkS3NyfshzGpwAAAos"]
[Wed Mar 25 16:59:21.744947 2026] [:error] [pid 25969:tid 26032] [client 158.158.96.10:5944] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acOj6Rd3aEUmOfdKja_4sQAAA8Y"]
[Wed Mar 25 16:59:22.415869 2026] [:error] [pid 25875:tid 25883] [client 158.158.96.10:5401] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acOj6hJ38QkS3NyfshzGqAAAAoI"]
[Wed Mar 25 16:59:22.985793 2026] [:error] [pid 25875:tid 25898] [client 158.158.96.10:61673] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "acOj6hJ38QkS3NyfshzGqwAAApE"]
[Wed Mar 25 16:59:23.582111 2026] [:error] [pid 25875:tid 25888] [client 158.158.96.10:39416] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "acOj6xJ38QkS3NyfshzGrQAAAoc"]
[Wed Mar 25 16:59:24.341526 2026] [:error] [pid 26449:tid 26474] [client 158.158.96.10:57584] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "acOj7NpZ2T15NDqzAjFhfAAAAlU"]
[Wed Mar 25 16:59:24.925072 2026] [:error] [pid 26321:tid 26343] [client 158.158.96.10:39408] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "acOj7PKO65qqGZCSPZoi-AAAAgQ"]
[Wed Mar 25 16:59:25.681759 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:61679] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acOj7SWKdJMhIccROjl_ZAAAAUQ"]
[Wed Mar 25 16:59:26.474310 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:51604] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acOj7iWKdJMhIccROjl_aAAAAU0"]
[Wed Mar 25 16:59:27.219292 2026] [:error] [pid 47989:tid 48014] [client 158.158.96.10:49621] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acOj7yWKdJMhIccROjl_cAAAAVc"]
[Wed Mar 25 16:59:27.918329 2026] [:error] [pid 47989:tid 47991] [client 158.158.96.10:64983] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acOj7yWKdJMhIccROjl_dAAAAUA"]
[Wed Mar 25 16:59:28.560742 2026] [:error] [pid 25969:tid 26049] [client 158.158.96.10:51636] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "acOj8Bd3aEUmOfdKja_4tQAAA9c"]
[Wed Mar 25 16:59:29.182705 2026] [:error] [pid 47989:tid 48005] [client 158.158.96.10:61781] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "acOj8SWKdJMhIccROjl_egAAAU4"]
[Wed Mar 25 16:59:29.735244 2026] [:error] [pid 25875:tid 25893] [client 158.158.96.10:64995] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "acOj8RJ38QkS3NyfshzGsQAAAow"]
[Wed Mar 25 16:59:30.261273 2026] [:error] [pid 47989:tid 47998] [client 158.158.96.10:51631] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "acOj8iWKdJMhIccROjl_fAAAAUc"]
[Wed Mar 25 16:59:30.777265 2026] [:error] [pid 25875:tid 25881] [client 158.158.96.10:39387] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acOj8hJ38QkS3NyfshzGtwAAAoA"]
[Wed Mar 25 16:59:31.337728 2026] [:error] [pid 25875:tid 25884] [client 158.158.96.10:39369] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acOj8xJ38QkS3NyfshzGugAAAoM"]
[Wed Mar 25 16:59:31.958259 2026] [:error] [pid 25875:tid 25905] [client 158.158.96.10:50737] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acOj8xJ38QkS3NyfshzGvgAAApg"]
[Wed Mar 25 16:59:32.457446 2026] [:error] [pid 25875:tid 25904] [client 158.158.96.10:5413] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acOj9BJ38QkS3NyfshzGwAAAApc"]
[Wed Mar 25 16:59:33.000866 2026] [:error] [pid 25875:tid 25891] [client 158.158.96.10:50750] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "acOj9BJ38QkS3NyfshzGxAAAAoo"]
[Wed Mar 25 16:59:33.561940 2026] [:error] [pid 25875:tid 25903] [client 158.158.96.10:53122] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "acOj9RJ38QkS3NyfshzGxQAAApY"]
[Wed Mar 25 16:59:34.151795 2026] [:error] [pid 25875:tid 25886] [client 158.158.96.10:57573] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "acOj9hJ38QkS3NyfshzGxwAAAoU"]
[Wed Mar 25 16:59:34.754918 2026] [:error] [pid 25875:tid 25899] [client 158.158.96.10:65013] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "acOj9hJ38QkS3NyfshzGyAAAApI"]
[Wed Mar 25 16:59:35.348952 2026] [:error] [pid 47989:tid 47997] [client 158.158.96.10:61669] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "acOj9yWKdJMhIccROjl_hwAAAUY"]
[Wed Mar 25 16:59:35.872707 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:49614] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "acOj9yWKdJMhIccROjl_iQAAAUQ"]
[Wed Mar 25 16:59:36.370675 2026] [:error] [pid 47989:tid 48007] [client 158.158.96.10:39378] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "acOj-CWKdJMhIccROjl_iwAAAVA"]
[Wed Mar 25 16:59:36.921900 2026] [:error] [pid 25967:tid 25992] [client 158.158.96.10:60448] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "acOj-Pg8Qtq7ZM4mSFkXHgAAA1Q"]
[Wed Mar 25 16:59:37.424986 2026] [:error] [pid 26321:tid 26361] [client 158.158.96.10:61643] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feokc.php"] [unique_id "acOj-fKO65qqGZCSPZoi-wAAAhQ"]
[Wed Mar 25 16:59:37.963401 2026] [:error] [pid 892:tid 919] [client 158.158.96.10:57542] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feokc.php"] [unique_id "acOj-ST_G8WMU3T3yxq9zQAAANQ"]
[Wed Mar 25 16:59:38.541575 2026] [:error] [pid 892:tid 894] [client 158.158.96.10:39381] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feokc.php"] [unique_id "acOj-iT_G8WMU3T3yxq9zgAAAMA"]
[Wed Mar 25 16:59:39.085845 2026] [:error] [pid 25967:tid 25976] [client 158.158.96.10:54792] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feokc.php"] [unique_id "acOj-_g8Qtq7ZM4mSFkXHwAAA0Q"]
[Wed Mar 25 16:59:39.630680 2026] [:error] [pid 756:tid 867] [client 158.158.96.10:61684] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acOj-zOaW6oylMIDBCQUgwAAAI8"]
[Wed Mar 25 16:59:40.250891 2026] [:error] [pid 47989:tid 47992] [client 158.158.96.10:65064] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acOj_CWKdJMhIccROjl_kAAAAUE"]
[Wed Mar 25 16:59:40.781014 2026] [:error] [pid 47989:tid 48012] [client 158.158.96.10:65049] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acOj_CWKdJMhIccROjl_lgAAAVU"]
[Wed Mar 25 16:59:41.359584 2026] [:error] [pid 47989:tid 47991] [client 158.158.96.10:61761] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acOj_SWKdJMhIccROjl_mgAAAUA"]
[Wed Mar 25 16:59:41.880442 2026] [:error] [pid 47989:tid 48003] [client 158.158.96.10:65059] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acOj_SWKdJMhIccROjl_mwAAAUw"]
[Wed Mar 25 16:59:42.391522 2026] [:error] [pid 25875:tid 25905] [client 158.158.96.10:49611] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acOj_hJ38QkS3NyfshzGzgAAApg"]
[Wed Mar 25 16:59:42.956898 2026] [:error] [pid 25875:tid 25902] [client 158.158.96.10:60473] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acOj_hJ38QkS3NyfshzG0QAAApU"]
[Wed Mar 25 16:59:43.558651 2026] [:error] [pid 25875:tid 25901] [client 158.158.96.10:60420] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acOj_xJ38QkS3NyfshzG0wAAApQ"]
[Wed Mar 25 16:59:44.119218 2026] [:error] [pid 25969:tid 26031] [client 158.158.96.10:49616] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "acOkABd3aEUmOfdKja_4twAAA8U"]
[Wed Mar 25 16:59:44.670014 2026] [:error] [pid 25969:tid 26029] [client 158.158.96.10:61671] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "acOkABd3aEUmOfdKja_4uQAAA8M"]
[Wed Mar 25 16:59:45.197690 2026] [:error] [pid 47946:tid 47965] [client 158.158.96.10:61655] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "acOkATipQTqBMSeKYhd5JQAAARE"]
[Wed Mar 25 16:59:45.806089 2026] [:error] [pid 25969:tid 26046] [client 158.158.96.10:51622] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "acOkARd3aEUmOfdKja_4vAAAA9Q"]
[Wed Mar 25 16:59:46.309077 2026] [:error] [pid 25875:tid 25893] [client 158.158.96.10:50721] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acOkAhJ38QkS3NyfshzG1gAAAow"]
[Wed Mar 25 16:59:46.864514 2026] [:error] [pid 25875:tid 25900] [client 158.158.96.10:39412] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acOkAhJ38QkS3NyfshzG2AAAApM"]
[Wed Mar 25 16:59:47.410624 2026] [:error] [pid 25875:tid 25895] [client 158.158.96.10:63789] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acOkAxJ38QkS3NyfshzG3AAAAo4"]
[Wed Mar 25 16:59:48.010958 2026] [:error] [pid 25875:tid 25903] [client 158.158.96.10:51597] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acOkBBJ38QkS3NyfshzG3wAAApY"]
[Wed Mar 25 16:59:48.546521 2026] [:error] [pid 47989:tid 48006] [client 158.158.96.10:65062] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "acOkBCWKdJMhIccROjl_pAAAAU8"]
[Wed Mar 25 16:59:49.174383 2026] [:error] [pid 47989:tid 47997] [client 158.158.96.10:60447] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "acOkBSWKdJMhIccROjl_pwAAAUY"]
[Wed Mar 25 16:59:49.832792 2026] [:error] [pid 47989:tid 48001] [client 158.158.96.10:64975] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "acOkBSWKdJMhIccROjl_qAAAAUo"]
[Wed Mar 25 16:59:50.364641 2026] [:error] [pid 25967:tid 25994] [client 158.158.96.10:61789] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "acOkBvg8Qtq7ZM4mSFkXIwAAA1Y"]
[Wed Mar 25 16:59:50.886157 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:61668] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acOkBiWKdJMhIccROjl_rQAAAU0"]
[Wed Mar 25 16:59:51.394619 2026] [:error] [pid 47989:tid 47994] [client 158.158.96.10:61678] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acOkByWKdJMhIccROjl_rwAAAUM"]
[Wed Mar 25 16:59:52.016682 2026] [:error] [pid 47989:tid 48012] [client 158.158.96.10:57555] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acOkCCWKdJMhIccROjl_sQAAAVU"]
[Wed Mar 25 16:59:52.626710 2026] [:error] [pid 25875:tid 25883] [client 158.158.96.10:39360] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acOkCBJ38QkS3NyfshzG4wAAAoI"]
[Wed Mar 25 16:59:53.243720 2026] [:error] [pid 47989:tid 47997] [client 158.158.96.10:64966] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acOkCSWKdJMhIccROjl_tgAAAUY"]
[Wed Mar 25 16:59:53.814143 2026] [:error] [pid 47989:tid 48009] [client 158.158.96.10:65024] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acOkCSWKdJMhIccROjl_uAAAAVI"]
[Wed Mar 25 16:59:54.359420 2026] [:error] [pid 47989:tid 48001] [client 158.158.96.10:61810] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acOkCiWKdJMhIccROjl_uQAAAUo"]
[Wed Mar 25 16:59:55.019143 2026] [:error] [pid 47989:tid 47993] [client 158.158.96.10:53129] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acOkCyWKdJMhIccROjl_uwAAAUI"]
[Wed Mar 25 16:59:55.612829 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:49604] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "acOkCyWKdJMhIccROjl_vAAAAU0"]
[Wed Mar 25 16:59:56.175686 2026] [:error] [pid 47989:tid 47998] [client 158.158.96.10:49643] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "acOkDCWKdJMhIccROjl_vwAAAUc"]
[Wed Mar 25 16:59:56.676304 2026] [:error] [pid 47989:tid 48012] [client 158.158.96.10:64976] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "acOkDCWKdJMhIccROjl_wgAAAVU"]
[Wed Mar 25 16:59:57.280296 2026] [:error] [pid 25967:tid 25986] [client 158.158.96.10:53147] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "acOkDfg8Qtq7ZM4mSFkXJwAAA04"]
[Wed Mar 25 16:59:57.788469 2026] [:error] [pid 25967:tid 25985] [client 158.158.96.10:50747] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "acOkDfg8Qtq7ZM4mSFkXKQAAA00"]
[Wed Mar 25 16:59:58.329449 2026] [:error] [pid 47989:tid 48007] [client 158.158.96.10:63799] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Wed Mar 25 16:59:58.578740 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:63799] [client 158.158.96.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/app.php"] [unique_id "acOkDiWKdJMhIccROjl_zQAAAU0"]
[Wed Mar 25 16:59:59.164879 2026] [:error] [pid 47989:tid 48010] [client 158.158.96.10:50708] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Wed Mar 25 16:59:59.418558 2026] [:error] [pid 47989:tid 48000] [client 158.158.96.10:50708] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Wed Mar 25 16:59:59.662798 2026] [:error] [pid 47989:tid 48003] [client 158.158.96.10:50708] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Wed Mar 25 16:59:59.908751 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:50708] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Wed Mar 25 17:00:01.494305 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:50708] File does not exist: /usr/local/apache/htdocs/suspended-page/aapig.php
[Wed Mar 25 17:00:01.737035 2026] [:error] [pid 47989:tid 48013] [client 158.158.96.10:50708] File does not exist: /usr/local/apache/htdocs/suspended-page/com.php
[Wed Mar 25 17:00:01.978254 2026] [:error] [pid 47989:tid 48000] [client 158.158.96.10:50708] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Wed Mar 25 17:00:02.226449 2026] [:error] [pid 47989:tid 47991] [client 158.158.96.10:50708] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Wed Mar 25 17:00:02.482471 2026] [:error] [pid 47989:tid 47999] [client 158.158.96.10:50708] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Wed Mar 25 17:00:02.730630 2026] [:error] [pid 47989:tid 48002] [client 158.158.96.10:50708] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Wed Mar 25 17:00:02.983550 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:50708] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "acOkEiWKdJMhIccROjl_7AAAAUQ"]
[Wed Mar 25 17:00:03.526550 2026] [:error] [pid 47989:tid 47994] [client 158.158.96.10:51606] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "acOkEyWKdJMhIccROjl_8AAAAUM"]
[Wed Mar 25 17:00:04.080458 2026] [:error] [pid 47946:tid 47959] [client 158.158.96.10:54841] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "acOkFDipQTqBMSeKYhd5JwAAAQs"]
[Wed Mar 25 17:00:04.607714 2026] [:error] [pid 47989:tid 48006] [client 158.158.96.10:39421] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "acOkFCWKdJMhIccROjl_8QAAAU8"]
[Wed Mar 25 17:00:05.163630 2026] [:error] [pid 25875:tid 25903] [client 158.158.96.10:60467] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acOkFRJ38QkS3NyfshzG6AAAApY"]
[Wed Mar 25 17:00:05.671172 2026] [:error] [pid 756:tid 866] [client 158.158.96.10:65047] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acOkFTOaW6oylMIDBCQUhwAAAI4"]
[Wed Mar 25 17:00:06.299577 2026] [:error] [pid 25875:tid 25894] [client 158.158.96.10:50738] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acOkFhJ38QkS3NyfshzG6gAAAo0"]
[Wed Mar 25 17:00:06.841808 2026] [:error] [pid 25875:tid 25886] [client 158.158.96.10:54826] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acOkFhJ38QkS3NyfshzG7AAAAoU"]
[Wed Mar 25 17:00:07.356712 2026] [:error] [pid 892:tid 911] [client 158.158.96.10:51625] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "acOkFyT_G8WMU3T3yxq90AAAAM0"]
[Wed Mar 25 17:00:07.947358 2026] [:error] [pid 47989:tid 47991] [client 158.158.96.10:57560] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "acOkFyWKdJMhIccROjl_8wAAAUA"]
[Wed Mar 25 17:00:08.444836 2026] [:error] [pid 47989:tid 47999] [client 158.158.96.10:55344] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "acOkGCWKdJMhIccROjl_9AAAAUg"]
[Wed Mar 25 17:00:08.938640 2026] [:error] [pid 47989:tid 47992] [client 158.158.96.10:63777] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "acOkGCWKdJMhIccROjl_9gAAAUE"]
[Wed Mar 25 17:00:09.459559 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:42128] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acOkGSWKdJMhIccROjl_-AAAAUQ"]
[Wed Mar 25 17:00:10.014996 2026] [:error] [pid 47989:tid 47998] [client 158.158.96.10:64978] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acOkGiWKdJMhIccROjl_-gAAAUc"]
[Wed Mar 25 17:00:10.526959 2026] [:error] [pid 47989:tid 48013] [client 158.158.96.10:57598] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acOkGiWKdJMhIccROjl__QAAAVY"]
[Wed Mar 25 17:00:11.025051 2026] [:error] [pid 25969:tid 26040] [client 158.158.96.10:46873] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acOkGxd3aEUmOfdKja_4wAAAA84"]
[Wed Mar 25 17:00:11.532930 2026] [:error] [pid 25969:tid 26027] [client 158.158.96.10:46896] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "acOkGxd3aEUmOfdKja_4wQAAA8E"]
[Wed Mar 25 17:00:12.040836 2026] [:error] [pid 25967:tid 25978] [client 158.158.96.10:38663] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "acOkHPg8Qtq7ZM4mSFkXNQAAA0Y"]
[Wed Mar 25 17:00:12.556109 2026] [:error] [pid 47989:tid 48008] [client 158.158.96.10:49108] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "acOkHCWKdJMhIccROjmAAgAAAVE"]
[Wed Mar 25 17:00:13.104253 2026] [:error] [pid 756:tid 872] [client 158.158.96.10:61177] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "acOkHTOaW6oylMIDBCQUiQAAAJQ"]
[Wed Mar 25 17:00:13.622161 2026] [:error] [pid 47989:tid 48003] [client 158.158.96.10:55323] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "acOkHSWKdJMhIccROjmABAAAAUw"]
[Wed Mar 25 17:00:14.140301 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:55334] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "acOkHiWKdJMhIccROjmABgAAAUQ"]
[Wed Mar 25 17:00:14.689502 2026] [:error] [pid 25969:tid 26030] [client 158.158.96.10:59052] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "acOkHhd3aEUmOfdKja_4xAAAA8Q"]
[Wed Mar 25 17:00:15.177546 2026] [:error] [pid 47989:tid 48012] [client 158.158.96.10:42135] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "acOkHyWKdJMhIccROjmABwAAAVU"]
[Wed Mar 25 17:00:15.695293 2026] [:error] [pid 756:tid 874] [client 158.158.96.10:59057] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acOkHzOaW6oylMIDBCQUjAAAAJY"]
[Wed Mar 25 17:00:16.235657 2026] [:error] [pid 25967:tid 25982] [client 158.158.96.10:38698] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acOkIPg8Qtq7ZM4mSFkXOAAAA0o"]
[Wed Mar 25 17:00:16.735587 2026] [:error] [pid 26449:tid 26463] [client 158.158.96.10:38671] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acOkINpZ2T15NDqzAjFhggAAAko"]
[Wed Mar 25 17:00:17.279815 2026] [:error] [pid 26449:tid 26456] [client 158.158.96.10:32773] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acOkIdpZ2T15NDqzAjFhhQAAAkM"]
[Wed Mar 25 17:00:17.785591 2026] [:error] [pid 26449:tid 26477] [client 158.158.96.10:49141] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "acOkIdpZ2T15NDqzAjFhiQAAAlg"]
[Wed Mar 25 17:00:18.385670 2026] [:error] [pid 26449:tid 26470] [client 158.158.96.10:60690] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "acOkItpZ2T15NDqzAjFhigAAAlE"]
[Wed Mar 25 17:00:18.920804 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:46863] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "acOkIiWKdJMhIccROjmACQAAAU0"]
[Wed Mar 25 17:00:19.446357 2026] [:error] [pid 892:tid 906] [client 158.158.96.10:55301] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "acOkIyT_G8WMU3T3yxq90QAAAMg"]
[Wed Mar 25 17:00:20.019612 2026] [:error] [pid 47989:tid 48008] [client 158.158.96.10:32781] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acOkJCWKdJMhIccROjmADwAAAVE"]
[Wed Mar 25 17:00:20.576110 2026] [:error] [pid 25967:tid 25976] [client 158.158.96.10:38675] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acOkJPg8Qtq7ZM4mSFkXOQAAA0Q"]
[Wed Mar 25 17:00:21.120906 2026] [:error] [pid 26449:tid 26461] [client 158.158.96.10:61136] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acOkJdpZ2T15NDqzAjFhjQAAAkg"]
[Wed Mar 25 17:00:21.623590 2026] [:error] [pid 25967:tid 25994] [client 158.158.96.10:43216] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acOkJfg8Qtq7ZM4mSFkXOwAAA1Y"]
[Wed Mar 25 17:00:22.124706 2026] [:error] [pid 25967:tid 25979] [client 158.158.96.10:49104] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acOkJvg8Qtq7ZM4mSFkXPAAAA0c"]
[Wed Mar 25 17:00:22.660960 2026] [:error] [pid 26269:tid 26282] [client 158.158.96.10:61151] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acOkJkn7e-ZQbaIs7qyr6gAAAYY"]
[Wed Mar 25 17:00:23.186803 2026] [:error] [pid 26449:tid 26466] [client 158.158.96.10:46890] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acOkJ9pZ2T15NDqzAjFhjwAAAk0"]
[Wed Mar 25 17:00:23.790019 2026] [:error] [pid 26449:tid 26457] [client 158.158.96.10:45934] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acOkJ9pZ2T15NDqzAjFhkAAAAkQ"]
[Wed Mar 25 17:00:24.281890 2026] [:error] [pid 47989:tid 48007] [client 158.158.96.10:50127] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acOkKCWKdJMhIccROjmAEgAAAVA"]
[Wed Mar 25 17:00:24.817128 2026] [:error] [pid 25967:tid 25989] [client 158.158.96.10:32795] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acOkKPg8Qtq7ZM4mSFkXQQAAA1E"]
[Wed Mar 25 17:00:25.344913 2026] [:error] [pid 47989:tid 48011] [client 158.158.96.10:46911] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acOkKSWKdJMhIccROjmAFAAAAVQ"]
[Wed Mar 25 17:00:25.888775 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:45944] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acOkKSWKdJMhIccROjmAFgAAAU0"]
[Wed Mar 25 17:00:26.438480 2026] [:error] [pid 26449:tid 26469] [client 158.158.96.10:46398] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bo.php"] [unique_id "acOkKtpZ2T15NDqzAjFhlQAAAlA"]
[Wed Mar 25 17:00:27.039837 2026] [:error] [pid 25875:tid 25901] [client 158.158.96.10:64317] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bo.php"] [unique_id "acOkKxJ38QkS3NyfshzG-QAAApQ"]
[Wed Mar 25 17:00:27.546452 2026] [:error] [pid 25875:tid 25900] [client 158.158.96.10:64045] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bo.php"] [unique_id "acOkKxJ38QkS3NyfshzHAQAAApM"]
[Wed Mar 25 17:00:28.123836 2026] [:error] [pid 26449:tid 26460] [client 158.158.96.10:37328] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bo.php"] [unique_id "acOkLNpZ2T15NDqzAjFhlgAAAkc"]
[Wed Mar 25 17:00:28.667740 2026] [:error] [pid 25875:tid 25887] [client 158.158.96.10:45930] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "acOkLBJ38QkS3NyfshzHDgAAAoY"]
[Wed Mar 25 17:00:29.219086 2026] [:error] [pid 25875:tid 25900] [client 158.158.96.10:45906] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "acOkLRJ38QkS3NyfshzHEQAAApM"]
[Wed Mar 25 17:00:29.736518 2026] [:error] [pid 25875:tid 25885] [client 158.158.96.10:36678] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "acOkLRJ38QkS3NyfshzHEwAAAoQ"]
[Wed Mar 25 17:00:30.266888 2026] [:error] [pid 25875:tid 25899] [client 158.158.96.10:63206] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "acOkLhJ38QkS3NyfshzHFgAAApI"]
[Wed Mar 25 17:00:30.771590 2026] [:error] [pid 25875:tid 25881] [client 158.158.96.10:43184] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acOkLhJ38QkS3NyfshzHGQAAAoA"]
[Wed Mar 25 17:00:31.318316 2026] [:error] [pid 25875:tid 25896] [client 158.158.96.10:33532] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acOkLxJ38QkS3NyfshzHHgAAAo8"]
[Wed Mar 25 17:00:31.810045 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:36724] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acOkLyWKdJMhIccROjmAIwAAAUQ"]
[Wed Mar 25 17:00:32.362846 2026] [:error] [pid 25875:tid 25892] [client 158.158.96.10:33484] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acOkMBJ38QkS3NyfshzHJAAAAos"]
[Wed Mar 25 17:00:32.903945 2026] [:error] [pid 25875:tid 25904] [client 158.158.96.10:5516] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "acOkMBJ38QkS3NyfshzHJwAAApc"]
[Wed Mar 25 17:00:33.397627 2026] [:error] [pid 25967:tid 25983] [client 158.158.96.10:52080] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "acOkMfg8Qtq7ZM4mSFkXRQAAA0s"]
[Wed Mar 25 17:00:33.933923 2026] [:error] [pid 47989:tid 48009] [client 158.158.96.10:61084] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "acOkMSWKdJMhIccROjmAKQAAAVI"]
[Wed Mar 25 17:00:34.467454 2026] [:error] [pid 47989:tid 48010] [client 158.158.96.10:41210] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "acOkMiWKdJMhIccROjmALgAAAVM"]
[Wed Mar 25 17:00:35.022899 2026] [:error] [pid 26269:tid 26293] [client 158.158.96.10:33481] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "acOkM0n7e-ZQbaIs7qyr7AAAAZE"]
[Wed Mar 25 17:00:35.606071 2026] [:error] [pid 892:tid 923] [client 158.158.96.10:63173] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "acOkMyT_G8WMU3T3yxq92AAAANg"]
[Wed Mar 25 17:00:36.110548 2026] [:error] [pid 25967:tid 25973] [client 158.158.96.10:52085] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "acOkNPg8Qtq7ZM4mSFkXSwAAA0E"]
[Wed Mar 25 17:00:36.622899 2026] [:error] [pid 25967:tid 25984] [client 158.158.96.10:34731] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "acOkNPg8Qtq7ZM4mSFkXTgAAA0w"]
[Wed Mar 25 17:00:37.263839 2026] [:error] [pid 25967:tid 25978] [client 158.158.96.10:41214] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acOkNfg8Qtq7ZM4mSFkXUwAAA0Y"]
[Wed Mar 25 17:00:37.856467 2026] [:error] [pid 892:tid 896] [client 158.158.96.10:63847] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acOkNST_G8WMU3T3yxq92QAAAMI"]
[Wed Mar 25 17:00:38.422699 2026] [:error] [pid 25967:tid 25993] [client 158.158.96.10:57484] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acOkNvg8Qtq7ZM4mSFkXWQAAA1U"]
[Wed Mar 25 17:00:38.993171 2026] [:error] [pid 26449:tid 26459] [client 158.158.96.10:63693] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acOkNtpZ2T15NDqzAjFhngAAAkY"]
[Wed Mar 25 17:00:39.506032 2026] [:error] [pid 25969:tid 26043] [client 158.158.96.10:63835] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acOkNxd3aEUmOfdKja_4yAAAA9E"]
[Wed Mar 25 17:00:40.052365 2026] [:error] [pid 25967:tid 25973] [client 158.158.96.10:36033] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acOkOPg8Qtq7ZM4mSFkXXQAAA0E"]
[Wed Mar 25 17:00:40.678016 2026] [:error] [pid 26269:tid 26299] [client 158.158.96.10:59115] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acOkOEn7e-ZQbaIs7qyr7QAAAZc"]
[Wed Mar 25 17:00:41.422354 2026] [:error] [pid 25967:tid 25994] [client 158.158.96.10:49542] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acOkOfg8Qtq7ZM4mSFkXYAAAA1Y"]
[Wed Mar 25 17:00:41.981496 2026] [:error] [pid 892:tid 918] [client 158.158.96.10:6101] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acOkOST_G8WMU3T3yxq92wAAANM"]
[Wed Mar 25 17:00:42.604016 2026] [:error] [pid 892:tid 909] [client 158.158.96.10:63836] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acOkOiT_G8WMU3T3yxq93gAAAMs"]
[Wed Mar 25 17:00:43.165319 2026] [:error] [pid 47989:tid 48013] [client 158.158.96.10:63871] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acOkOyWKdJMhIccROjmAOAAAAVY"]
[Wed Mar 25 17:00:43.709575 2026] [:error] [pid 25969:tid 26038] [client 158.158.96.10:63269] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acOkOxd3aEUmOfdKja_4ygAAA8w"]
[Wed Mar 25 17:00:44.585714 2026] [:error] [pid 26321:tid 26364] [client 158.158.96.10:47413] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acOkPPKO65qqGZCSPZojDQAAAhc"]
[Wed Mar 25 17:00:45.190846 2026] [:error] [pid 47946:tid 47950] [client 158.158.96.10:57488] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acOkPTipQTqBMSeKYhd5KwAAAQI"]
[Wed Mar 25 17:00:45.835583 2026] [:error] [pid 47989:tid 47993] [client 158.158.96.10:63861] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acOkPSWKdJMhIccROjmAOwAAAUI"]
[Wed Mar 25 17:00:46.565784 2026] [:error] [pid 47989:tid 48003] [client 158.158.96.10:47415] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acOkPiWKdJMhIccROjmAPQAAAUw"]
[Wed Mar 25 17:00:47.233528 2026] [:error] [pid 47989:tid 47995] [client 158.158.96.10:60766] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "acOkPyWKdJMhIccROjmAPgAAAUQ"]
[Wed Mar 25 17:00:47.777661 2026] [:error] [pid 47989:tid 47999] [client 158.158.96.10:37287] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "acOkPyWKdJMhIccROjmAQwAAAUg"]
[Wed Mar 25 17:00:48.373731 2026] [:error] [pid 26449:tid 26465] [client 158.158.96.10:47398] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "acOkQNpZ2T15NDqzAjFhoQAAAkw"]
[Wed Mar 25 17:00:48.936157 2026] [:error] [pid 26321:tid 26356] [client 158.158.96.10:47381] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "acOkQPKO65qqGZCSPZojDwAAAg8"]
[Wed Mar 25 17:00:49.561543 2026] [:error] [pid 26321:tid 26342] [client 158.158.96.10:5358] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "acOkQfKO65qqGZCSPZojEgAAAgM"]
[Wed Mar 25 17:00:50.242297 2026] [:error] [pid 26449:tid 26456] [client 158.158.96.10:37277] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "acOkQtpZ2T15NDqzAjFhowAAAkM"]
[Wed Mar 25 17:00:50.767391 2026] [:error] [pid 47946:tid 47956] [client 158.158.96.10:49583] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "acOkQjipQTqBMSeKYhd5LAAAAQg"]
[Wed Mar 25 17:00:51.313649 2026] [:error] [pid 26449:tid 26464] [client 158.158.96.10:5315] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "acOkQ9pZ2T15NDqzAjFhpgAAAks"]
[Wed Mar 25 17:00:51.951505 2026] [:error] [pid 26449:tid 26454] [client 158.158.96.10:65021] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "acOkQ9pZ2T15NDqzAjFhqQAAAkE"]
[Wed Mar 25 17:00:52.477036 2026] [:error] [pid 25967:tid 25985] [client 158.158.96.10:42814] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "acOkRPg8Qtq7ZM4mSFkXdQAAA00"]
[Wed Mar 25 17:00:53.100779 2026] [:error] [pid 25967:tid 25996] [client 158.158.96.10:47361] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "acOkRfg8Qtq7ZM4mSFkXdgAAA1g"]
[Wed Mar 25 17:00:53.602213 2026] [:error] [pid 26449:tid 26463] [client 158.158.96.10:5367] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "acOkRdpZ2T15NDqzAjFhrQAAAko"]
[Wed Mar 25 17:00:55.661998 2026] [:error] [pid 26269:tid 26286] [client 158.158.96.10:63831] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acOkR0n7e-ZQbaIs7qyr8gAAAYo"]
[Wed Mar 25 17:00:56.468585 2026] [:error] [pid 892:tid 913] [client 158.158.96.10:47410] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acOkSCT_G8WMU3T3yxq95wAAAM8"]
[Wed Mar 25 17:00:57.085743 2026] [:error] [pid 47946:tid 47964] [client 158.158.96.10:47420] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acOkSTipQTqBMSeKYhd5LQAAARA"]
[Wed Mar 25 17:00:57.761582 2026] [:error] [pid 47946:tid 47961] [client 158.158.96.10:42809] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acOkSTipQTqBMSeKYhd5LgAAAQ0"]
[Wed Mar 25 17:00:58.973440 2026] [:error] [pid 26269:tid 26279] [client 158.158.96.10:63238] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "acOkSkn7e-ZQbaIs7qyr8wAAAYM"]
[Wed Mar 25 17:00:59.664220 2026] [:error] [pid 25969:tid 26042] [client 158.158.96.10:63682] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "acOkSxd3aEUmOfdKja_40AAAA9A"]
[Wed Mar 25 17:01:00.515232 2026] [:error] [pid 25967:tid 25991] [client 158.158.96.10:62954] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "acOkTPg8Qtq7ZM4mSFkXeAAAA1M"]
[Wed Mar 25 17:01:01.082645 2026] [:error] [pid 25967:tid 25987] [client 158.158.96.10:63714] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "acOkTfg8Qtq7ZM4mSFkXeQAAA08"]
[Wed Mar 25 17:01:01.847576 2026] [:error] [pid 25967:tid 25972] [client 158.158.96.10:63426] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "acOkTfg8Qtq7ZM4mSFkXegAAA0A"]
[Wed Mar 25 17:01:03.109965 2026] [:error] [pid 47989:tid 48001] [client 158.158.96.10:37264] File does not exist: /usr/local/apache/htdocs/suspended-page/fyiiz.php
[Wed Mar 25 17:01:03.352005 2026] [:error] [pid 47989:tid 48005] [client 158.158.96.10:37264] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Wed Mar 25 17:01:03.594164 2026] [:error] [pid 47989:tid 47998] [client 158.158.96.10:37264] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Wed Mar 25 17:01:05.131155 2026] [:error] [pid 47989:tid 47998] [client 158.158.96.10:37264] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Wed Mar 25 17:01:05.631498 2026] [:error] [pid 47989:tid 48011] [client 158.158.96.10:37264] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Wed Mar 25 17:01:05.874165 2026] [:error] [pid 47989:tid 48007] [client 158.158.96.10:37264] File does not exist: /usr/local/apache/htdocs/suspended-page/to.php
[Wed Mar 25 17:01:06.116590 2026] [:error] [pid 47989:tid 48009] [client 158.158.96.10:37264] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Wed Mar 25 17:01:06.358948 2026] [:error] [pid 47989:tid 47991] [client 158.158.96.10:37264] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Wed Mar 25 17:01:06.600698 2026] [:error] [pid 47989:tid 48008] [client 158.158.96.10:37264] File does not exist: /usr/local/apache/htdocs/suspended-page/filesss.php
[Wed Mar 25 17:01:06.841315 2026] [:error] [pid 47989:tid 47993] [client 158.158.96.10:37264] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acOkUiWKdJMhIccROjmAXAAAAUI"]
[Wed Mar 25 17:01:07.516748 2026] [:error] [pid 25967:tid 25973] [client 158.158.96.10:63460] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acOkU_g8Qtq7ZM4mSFkXfQAAA0E"]
[Wed Mar 25 17:01:08.402025 2026] [:error] [pid 47989:tid 48002] [client 158.158.96.10:39988] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acOkVCWKdJMhIccROjmAXgAAAUs"]
[Wed Mar 25 17:01:09.383575 2026] [:error] [pid 25967:tid 25989] [client 158.158.96.10:63471] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acOkVfg8Qtq7ZM4mSFkXgAAAA1E"]
[Wed Mar 25 17:01:09.946104 2026] [:error] [pid 25875:tid 25882] [client 158.158.96.10:63440] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acOkVRJ38QkS3NyfshzHNgAAAoE"]
[Wed Mar 25 17:01:10.676653 2026] [:error] [pid 25969:tid 26050] [client 158.158.96.10:5338] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acOkVhd3aEUmOfdKja_41QAAA9g"]
[Wed Mar 25 17:01:11.311869 2026] [:error] [pid 892:tid 914] [client 158.158.96.10:5864] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acOkVyT_G8WMU3T3yxq96gAAANA"]
[Wed Mar 25 17:01:11.867282 2026] [:error] [pid 25875:tid 25887] [client 158.158.96.10:63241] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acOkVxJ38QkS3NyfshzHNwAAAoY"]
[Wed Mar 25 17:01:12.477001 2026] [:error] [pid 26321:tid 26354] [client 158.158.96.10:46914] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acOkWPKO65qqGZCSPZojFQAAAg0"]
[Wed Mar 25 17:01:13.253907 2026] [:error] [pid 25969:tid 26043] [client 158.158.96.10:62961] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acOkWRd3aEUmOfdKja_41gAAA9E"]
[Wed Mar 25 17:01:13.863608 2026] [:error] [pid 26321:tid 26361] [client 158.158.96.10:36650] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acOkWfKO65qqGZCSPZojFwAAAhQ"]
[Wed Mar 25 17:01:14.500791 2026] [:error] [pid 25967:tid 25977] [client 158.158.96.10:5352] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acOkWvg8Qtq7ZM4mSFkXhAAAA0U"]
[Wed Mar 25 17:01:15.111916 2026] [:error] [pid 25969:tid 26045] [client 158.158.96.10:5877] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "acOkWxd3aEUmOfdKja_41wAAA9M"]
[Wed Mar 25 17:01:15.786326 2026] [:error] [pid 47989:tid 48009] [client 158.158.96.10:56663] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "acOkWyWKdJMhIccROjmAZgAAAVI"]
[Wed Mar 25 17:01:16.542867 2026] [:error] [pid 26269:tid 26289] [client 158.158.96.10:63265] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "acOkXEn7e-ZQbaIs7qyr9gAAAY0"]
[Wed Mar 25 17:01:17.329310 2026] [:error] [pid 25967:tid 25972] [client 158.158.96.10:57490] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "acOkXfg8Qtq7ZM4mSFkXhgAAA0A"]
[Wed Mar 25 17:01:18.144881 2026] [:error] [pid 892:tid 919] [client 158.158.96.10:36633] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "acOkXiT_G8WMU3T3yxq97QAAANQ"]
[Wed Mar 25 17:01:18.811665 2026] [:error] [pid 47989:tid 48013] [client 158.158.96.10:63243] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "acOkXiWKdJMhIccROjmAaAAAAVY"]
[Wed Mar 25 17:01:19.557958 2026] [:error] [pid 47989:tid 48002] [client 158.158.96.10:38071] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "acOkXyWKdJMhIccROjmAbQAAAUs"]
[Wed Mar 25 17:01:20.225629 2026] [:error] [pid 47989:tid 48004] [client 158.158.96.10:47360] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "acOkYCWKdJMhIccROjmAbwAAAU0"]
[Wed Mar 25 17:01:20.850955 2026] [:error] [pid 25967:tid 25992] [client 158.158.96.10:45389] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "acOkYPg8Qtq7ZM4mSFkXoQAAA1Q"]
[Wed Mar 25 17:01:21.401642 2026] [:error] [pid 26449:tid 26473] [client 158.158.96.10:45393] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "acOkYdpZ2T15NDqzAjFhswAAAlQ"]
[Wed Mar 25 17:01:22.062550 2026] [:error] [pid 26449:tid 26471] [client 158.158.96.10:37270] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "acOkYtpZ2T15NDqzAjFhtQAAAlI"]
[Wed Mar 25 17:01:22.720594 2026] [:error] [pid 47989:tid 48001] [client 158.158.96.10:5865] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "acOkYiWKdJMhIccROjmAmwAAAUo"]
[Wed Mar 25 17:01:23.324586 2026] [:error] [pid 25875:tid 25892] [client 158.158.96.10:47418] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cord.php"] [unique_id "acOkYxJ38QkS3NyfshzHPAAAAos"]
[Wed Mar 25 17:01:24.022739 2026] [:error] [pid 47989:tid 48015] [client 158.158.96.10:46962] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cord.php"] [unique_id "acOkZCWKdJMhIccROjmAoQAAAVg"]
[Wed Mar 25 17:01:24.562414 2026] [:error] [pid 47989:tid 48012] [client 158.158.96.10:63478] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cord.php"] [unique_id "acOkZCWKdJMhIccROjmAogAAAVU"]
[Wed Mar 25 17:01:25.122761 2026] [:error] [pid 26269:tid 26290] [client 158.158.96.10:45398] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cord.php"] [unique_id "acOkZUn7e-ZQbaIs7qyr-wAAAY4"]
[Wed Mar 25 17:01:25.769771 2026] [:error] [pid 25875:tid 25903] [client 158.158.96.10:36618] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shlo.php"] [unique_id "acOkZRJ38QkS3NyfshzHQQAAApY"]
[Wed Mar 25 17:01:26.298583 2026] [:error] [pid 47946:tid 47949] [client 158.158.96.10:5851] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shlo.php"] [unique_id "acOkZjipQTqBMSeKYhd5NAAAAQE"]
[Wed Mar 25 17:01:27.033676 2026] [:error] [pid 47946:tid 47959] [client 158.158.96.10:65435] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shlo.php"] [unique_id "acOkZzipQTqBMSeKYhd5NQAAAQs"]
[Wed Mar 25 17:01:27.574142 2026] [:error] [pid 25875:tid 25881] [client 158.158.96.10:56688] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shlo.php"] [unique_id "acOkZxJ38QkS3NyfshzHRAAAAoA"]
[Wed Mar 25 17:01:28.112146 2026] [:error] [pid 26449:tid 26461] [client 158.158.96.10:56699] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "acOkaNpZ2T15NDqzAjFhuAAAAkg"]
[Wed Mar 25 17:01:28.621520 2026] [:error] [pid 25967:tid 25976] [client 158.158.96.10:62974] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "acOkaPg8Qtq7ZM4mSFkYFAAAA0Q"]
[Wed Mar 25 17:01:29.229401 2026] [:error] [pid 26269:tid 26284] [client 158.158.96.10:37289] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "acOkaUn7e-ZQbaIs7qyr_QAAAYg"]
[Wed Mar 25 17:01:29.843218 2026] [:error] [pid 26269:tid 26279] [client 158.158.96.10:63472] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "acOkaUn7e-ZQbaIs7qysAAAAAYM"]
[Wed Mar 25 17:01:30.460056 2026] [:error] [pid 26321:tid 26350] [client 158.158.96.10:56702] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acOkavKO65qqGZCSPZojLgAAAgk"]
[Wed Mar 25 17:01:30.969084 2026] [:error] [pid 47989:tid 47991] [client 158.158.96.10:65411] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acOkaiWKdJMhIccROjmArAAAAUA"]
[Wed Mar 25 17:01:31.625186 2026] [:error] [pid 47989:tid 48013] [client 158.158.96.10:5833] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acOkayWKdJMhIccROjmArQAAAVY"]
[Wed Mar 25 17:01:32.192690 2026] [:error] [pid 47989:tid 48003] [client 158.158.96.10:62960] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acOkbCWKdJMhIccROjmAsQAAAUw"]
[Wed Mar 25 17:01:32.767010 2026] [:error] [pid 47989:tid 48001] [client 158.158.96.10:63266] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "acOkbCWKdJMhIccROjmAtAAAAUo"]
[Wed Mar 25 17:01:33.423661 2026] [:error] [pid 47946:tid 47955] [client 158.158.96.10:46939] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "acOkbTipQTqBMSeKYhd5OQAAAQc"]
[Wed Mar 25 17:01:33.910787 2026] [:error] [pid 756:tid 858] [client 158.158.96.10:54872] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "acOkbTOaW6oylMIDBCQUvgAAAIY"]
[Wed Mar 25 17:01:34.616757 2026] [:error] [pid 26321:tid 26352] [client 158.158.96.10:6080] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "acOkbvKO65qqGZCSPZojMwAAAgs"]
[Wed Mar 25 17:01:35.177694 2026] [:error] [pid 26321:tid 26339] [client 158.158.96.10:56685] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "acOkb_KO65qqGZCSPZojNgAAAgA"]
[Wed Mar 25 17:01:35.763217 2026] [:error] [pid 47989:tid 47993] [client 158.158.96.10:39950] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "acOkbyWKdJMhIccROjmAtwAAAUI"]
[Wed Mar 25 17:01:36.371910 2026] [:error] [pid 47946:tid 47964] [client 158.158.96.10:63451] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "acOkcDipQTqBMSeKYhd5OwAAARA"]
[Wed Mar 25 17:01:36.977615 2026] [:error] [pid 26321:tid 26360] [client 158.158.96.10:45436] [client 158.158.96.10] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "acOkcPKO65qqGZCSPZojPAAAAhM"]
[Wed Mar 25 18:14:36.485438 2026] [:error] [pid 47989:tid 47994] [client 72.146.6.194:40387] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acO1jCWKdJMhIccROjmoWgAAAUM"]
[Wed Mar 25 18:14:36.956943 2026] [:error] [pid 47946:tid 47966] [client 72.146.6.194:25525] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acO1jDipQTqBMSeKYhd-qgAAARI"]
[Wed Mar 25 18:14:37.421117 2026] [:error] [pid 26449:tid 26468] [client 72.146.6.194:28406] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acO1jdpZ2T15NDqzAjFs_QAAAk8"]
[Wed Mar 25 18:14:37.910942 2026] [:error] [pid 26449:tid 26456] [client 72.146.6.194:37326] [client 72.146.6.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acO1jdpZ2T15NDqzAjFtAQAAAkM"]
[Wed Mar 25 19:04:01.388463 2026] [:error] [pid 47989:tid 48009] [client 20.220.197.73:42478] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 25"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acPBISWKdJMhIccROjnLCAAAAVI"]
[Wed Mar 25 19:04:02.221585 2026] [:error] [pid 25875:tid 25904] [client 20.220.197.73:42461] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 25"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "acPBIhJ38QkS3NyfshzsRgAAApc"]
[Wed Mar 25 19:04:03.052514 2026] [:error] [pid 47946:tid 47968] [client 20.220.197.73:42469] [client 20.220.197.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.220.197.73, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acPBIzipQTqBMSeKYheBzgAAARQ"]
[Wed Mar 25 19:04:03.052566 2026] [:error] [pid 47946:tid 47968] [client 20.220.197.73:42469] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "acPBIzipQTqBMSeKYheBzgAAARQ"]
[Wed Mar 25 19:04:03.906146 2026] [:error] [pid 25967:tid 25990] [client 20.220.197.73:42434] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-corn-sample.php"] [unique_id "acPBI_g8Qtq7ZM4mSFlMNwAAA1I"]
[Wed Mar 25 19:04:04.729817 2026] [:error] [pid 47989:tid 48003] [client 20.220.197.73:42485] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "acPBJCWKdJMhIccROjnLDgAAAUw"]
[Wed Mar 25 19:04:05.553405 2026] [:error] [pid 26449:tid 26466] [client 20.220.197.73:42492] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "acPBJdpZ2T15NDqzAjF2KQAAAk0"]
[Wed Mar 25 19:04:06.390354 2026] [:error] [pid 26321:tid 26340] [client 20.220.197.73:42448] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "acPBJvKO65qqGZCSPZpBGQAAAgE"]
[Wed Mar 25 19:04:07.214691 2026] [:error] [pid 26269:tid 26285] [client 20.220.197.73:42438] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/server.php"] [unique_id "acPBJ0n7e-ZQbaIs7qy3dwAAAYk"]
[Wed Mar 25 19:04:08.039908 2026] [:error] [pid 25875:tid 25896] [client 20.220.197.73:42493] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "acPBKBJ38QkS3NyfshzsTQAAAo8"]
[Wed Mar 25 19:04:08.868297 2026] [:error] [pid 47989:tid 48001] [client 20.220.197.73:42446] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/"] [unique_id "acPBKCWKdJMhIccROjnLHAAAAUo"]
[Wed Mar 25 19:04:09.700302 2026] [:error] [pid 26449:tid 26455] [client 20.220.197.73:42385] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wso.php"] [unique_id "acPBKdpZ2T15NDqzAjF2LAAAAkI"]
[Wed Mar 25 19:04:10.524283 2026] [:error] [pid 47989:tid 48009] [client 20.220.197.73:42451] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "acPBKiWKdJMhIccROjnLIQAAAVI"]
[Wed Mar 25 19:04:11.347495 2026] [:error] [pid 25967:tid 25991] [client 20.220.197.73:42455] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-file.php"] [unique_id "acPBK_g8Qtq7ZM4mSFlMOQAAA1M"]
[Wed Mar 25 19:04:12.172644 2026] [:error] [pid 26321:tid 26355] [client 20.220.197.73:42487] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "acPBLPKO65qqGZCSPZpBHQAAAg4"]
[Wed Mar 25 19:04:13.021686 2026] [:error] [pid 25875:tid 25886] [client 20.220.197.73:42447] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wk/index.php"] [unique_id "acPBLRJ38QkS3NyfshzsUwAAAoU"]
[Wed Mar 25 19:04:13.861023 2026] [:error] [pid 25875:tid 25892] [client 20.220.197.73:42465] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "acPBLRJ38QkS3NyfshzsVgAAAos"]
[Wed Mar 25 19:04:14.708678 2026] [:error] [pid 47989:tid 48014] [client 20.220.197.73:42384] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "acPBLiWKdJMhIccROjnLLAAAAVc"]
[Wed Mar 25 19:04:15.534809 2026] [:error] [pid 25875:tid 25887] [client 20.220.197.73:42444] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "acPBLxJ38QkS3NyfshzsXQAAAoY"]
[Wed Mar 25 19:04:16.362259 2026] [:error] [pid 25875:tid 25884] [client 20.220.197.73:42483] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/xmrlpc.php"] [unique_id "acPBMBJ38QkS3NyfshzsXwAAAoM"]
[Wed Mar 25 19:04:17.186878 2026] [:error] [pid 47989:tid 47992] [client 20.220.197.73:42450] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acPBMSWKdJMhIccROjnLNQAAAUE"]
[Wed Mar 25 19:04:18.021721 2026] [:error] [pid 47989:tid 48001] [client 20.220.197.73:42495] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/file.php"] [unique_id "acPBMiWKdJMhIccROjnLOAAAAUo"]
[Wed Mar 25 19:04:18.851946 2026] [:error] [pid 25875:tid 25892] [client 20.220.197.73:42486] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "acPBMhJ38QkS3NyfshzsYgAAAos"]
[Wed Mar 25 19:04:19.681731 2026] [:error] [pid 892:tid 911] [client 20.220.197.73:42460] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "acPBMyT_G8WMU3T3yxrOVAAAAM0"]
[Wed Mar 25 19:04:20.505388 2026] [:error] [pid 47946:tid 47965] [client 20.220.197.73:42369] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "acPBNDipQTqBMSeKYheB1AAAARE"]
[Wed Mar 25 19:04:21.350137 2026] [:error] [pid 25967:tid 25996] [client 20.220.197.73:42387] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 26"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/et-cache/"] [unique_id "acPBNfg8Qtq7ZM4mSFlMRwAAA1g"]
[Wed Mar 25 19:04:22.174261 2026] [:error] [pid 25967:tid 25993] [client 20.220.197.73:42491] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "acPBNvg8Qtq7ZM4mSFlMSgAAA1U"]
[Wed Mar 25 19:04:22.998883 2026] [:error] [pid 25967:tid 25980] [client 20.220.197.73:42466] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "acPBNvg8Qtq7ZM4mSFlMTAAAA0g"]
[Wed Mar 25 19:04:23.847813 2026] [:error] [pid 47989:tid 48009] [client 20.220.197.73:42463] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "acPBNyWKdJMhIccROjnLSAAAAVI"]
[Wed Mar 25 19:04:24.675190 2026] [:error] [pid 47989:tid 48005] [client 20.220.197.73:42470] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "acPBOCWKdJMhIccROjnLUAAAAU4"]
[Wed Mar 25 19:04:25.499517 2026] [:error] [pid 26321:tid 26356] [client 20.220.197.73:42490] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "acPBOfKO65qqGZCSPZpBJgAAAg8"]
[Wed Mar 25 19:04:26.328330 2026] [:error] [pid 47989:tid 48013] [client 20.220.197.73:42479] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "acPBOiWKdJMhIccROjnLUwAAAVY"]
[Wed Mar 25 19:04:27.188824 2026] [:error] [pid 25967:tid 25994] [client 20.220.197.73:42420] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "acPBO_g8Qtq7ZM4mSFlMUgAAA1Y"]
[Wed Mar 25 19:04:28.012021 2026] [:error] [pid 47989:tid 48011] [client 20.220.197.73:42564] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acPBPCWKdJMhIccROjnLWQAAAVQ"]
[Wed Mar 25 19:04:28.836837 2026] [:error] [pid 47989:tid 48013] [client 20.220.197.73:42475] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "acPBPCWKdJMhIccROjnLXwAAAVY"]
[Wed Mar 25 19:04:29.680660 2026] [:error] [pid 47989:tid 48011] [client 20.220.197.73:42476] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/buy.php"] [unique_id "acPBPSWKdJMhIccROjnLZwAAAVQ"]
[Wed Mar 25 19:04:30.509779 2026] [:error] [pid 892:tid 919] [client 20.220.197.73:42368] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "acPBPiT_G8WMU3T3yxrOWAAAANQ"]
[Wed Mar 25 19:04:31.366765 2026] [:error] [pid 25967:tid 25989] [client 20.220.197.73:42569] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "acPBP_g8Qtq7ZM4mSFlMVwAAA1E"]
[Wed Mar 25 19:04:32.199490 2026] [:error] [pid 47989:tid 47995] [client 20.220.197.73:42471] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/about.PHP"] [unique_id "acPBQCWKdJMhIccROjnLbAAAAUQ"]
[Wed Mar 25 19:04:33.024732 2026] [:error] [pid 25967:tid 25985] [client 20.220.197.73:42383] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acPBQfg8Qtq7ZM4mSFlMXAAAA00"]
[Wed Mar 25 19:04:33.853134 2026] [:error] [pid 25967:tid 25989] [client 20.220.197.73:42382] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "acPBQfg8Qtq7ZM4mSFlMZAAAA1E"]
[Wed Mar 25 19:04:34.683395 2026] [:error] [pid 47989:tid 48013] [client 20.220.197.73:42404] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/edit.php"] [unique_id "acPBQiWKdJMhIccROjnLcwAAAVY"]
[Wed Mar 25 19:04:35.523864 2026] [:error] [pid 47989:tid 48012] [client 20.220.197.73:42395] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "acPBQyWKdJMhIccROjnLewAAAVU"]
[Wed Mar 25 19:04:36.356764 2026] [:error] [pid 47989:tid 47998] [client 20.220.197.73:42445] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/index.php"] [unique_id "acPBRCWKdJMhIccROjnLhAAAAUc"]
[Wed Mar 25 19:04:37.218159 2026] [:error] [pid 26321:tid 26341] [client 20.220.197.73:42378] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acPBRfKO65qqGZCSPZpBOAAAAgI"]
[Wed Mar 25 19:04:38.044653 2026] [:error] [pid 25969:tid 26037] [client 20.220.197.73:42418] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "acPBRhd3aEUmOfdKja8GaQAAA8s"]
[Wed Mar 25 19:04:38.866701 2026] [:error] [pid 26269:tid 26296] [client 20.220.197.73:42435] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "acPBRkn7e-ZQbaIs7qy3fAAAAZQ"]
[Wed Mar 25 19:04:39.695582 2026] [:error] [pid 25967:tid 25975] [client 20.220.197.73:42405] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "acPBR_g8Qtq7ZM4mSFlMZgAAA0M"]
[Wed Mar 25 19:04:40.523392 2026] [:error] [pid 47989:tid 48007] [client 20.220.197.73:42480] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cron.php"] [unique_id "acPBSCWKdJMhIccROjnLoAAAAVA"]
[Wed Mar 25 19:04:41.349949 2026] [:error] [pid 47989:tid 48010] [client 20.220.197.73:42397] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "acPBSSWKdJMhIccROjnLqQAAAVM"]
[Wed Mar 25 19:04:42.191640 2026] [:error] [pid 25967:tid 25991] [client 20.220.197.73:42422] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "acPBSvg8Qtq7ZM4mSFlMagAAA1M"]
[Wed Mar 25 19:04:43.036099 2026] [:error] [pid 26321:tid 26355] [client 20.220.197.73:42386] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/1.php"] [unique_id "acPBS_KO65qqGZCSPZpBOQAAAg4"]
[Wed Mar 25 19:04:43.861808 2026] [:error] [pid 25967:tid 25992] [client 20.220.197.73:42376] [client 20.220.197.73] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.220.197.73 on wp-login.php, counter = 27"] [hostname "nextspaceconsulting.com.au"] [uri "/images/index.php"] [unique_id "acPBS_g8Qtq7ZM4mSFlMbQAAA1Q"]
[Wed Mar 25 22:56:20.424115 2026] [:error] [pid 25967:tid 25980] [client 117.206.170.61:61135] [client 117.206.170.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 117.206.170.61, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acP3lPg8Qtq7ZM4mSFmOUgAAA0g"]
[Wed Mar 25 22:56:20.429287 2026] [:error] [pid 25967:tid 25980] [client 117.206.170.61:61135] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 01:56:14.108622 2026] [:error] [pid 32829:tid 32848] [client 144.225.147.5:47546] File does not exist: /usr/local/apache/htdocs/suspended-page/contact.php
[Thu Mar 26 05:22:40.167653 2026] [:error] [pid 60829:tid 60834] [client 92.242.249.19:43579] [client 92.242.249.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.242.249.19, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acRSIPTdjHKeZokybaS4HgAAAQM"]
[Thu Mar 26 05:22:40.172744 2026] [:error] [pid 60829:tid 60834] [client 92.242.249.19:43579] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 05:48:12.024472 2026] [:error] [pid 60829:tid 60850] [client 82.16.126.8:63854] [client 82.16.126.8] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 82.16.126.8, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acRYHPTdjHKeZokybaTNcwAAARM"]
[Thu Mar 26 05:48:12.032793 2026] [:error] [pid 60829:tid 60850] [client 82.16.126.8:63854] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 05:51:03.311039 2026] [:error] [pid 19711:tid 19771] [client 103.105.210.74:61349] [client 103.105.210.74] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.105.210.74, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acRYx2j3l1y81GYfluQe3AAAAFY"]
[Thu Mar 26 05:51:03.316756 2026] [:error] [pid 19711:tid 19771] [client 103.105.210.74:61349] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 05:56:46.575543 2026] [:error] [pid 60829:tid 60851] [client 156.155.19.233:59171] [client 156.155.19.233] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 156.155.19.233, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acRaHvTdjHKeZokybaTUYgAAARQ"]
[Thu Mar 26 05:56:46.580368 2026] [:error] [pid 60829:tid 60851] [client 156.155.19.233:59171] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 07:12:51.661701 2026] [:error] [pid 19712:tid 19776] [client 192.3.207.218:56389] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/artisan"] [unique_id "acRr89WhKhRNqm23vFPd6QAAAIA"]
[Thu Mar 26 07:12:52.087404 2026] [:error] [pid 19711:tid 19751] [client 192.3.207.218:56899] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/artisan"] [unique_id "acRr9Gj3l1y81GYfluRJWwAAAEI"]
[Thu Mar 26 07:12:53.196277 2026] [:error] [pid 19818:tid 19827] [client 192.3.207.218:57295] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/artisan"] [unique_id "acRr9czaSnm3d1BeM5WNlwAAAMc"]
[Thu Mar 26 07:12:53.618797 2026] [:error] [pid 60829:tid 60846] [client 192.3.207.218:57850] [client 192.3.207.218] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/artisan"] [unique_id "acRr9fTdjHKeZokybaQpnwAAAQ8"]
[Thu Mar 26 07:12:54.473121 2026] [:error] [pid 19710:tid 19745] [client 192.3.207.218:58175] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "acRr9gVEWP8Ar68Njk6pHwAAABc"]
[Thu Mar 26 07:12:54.892005 2026] [:error] [pid 19710:tid 19725] [client 192.3.207.218:58853] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "acRr9gVEWP8Ar68Njk6pOQAAAAM"]
[Thu Mar 26 07:12:55.784995 2026] [:error] [pid 31780:tid 31832] [client 192.3.207.218:59245] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "acRr95JDwZsy5O4ZXEiUVQAAAgs"]
[Thu Mar 26 07:12:56.209998 2026] [:error] [pid 31778:tid 31808] [client 192.3.207.218:60213] [client 192.3.207.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "acRr-A3kybI2o-xasmA3JAAAAc8"]
[Thu Mar 26 13:59:02.290012 2026] [:error] [pid 19818:tid 19832] [client 185.223.152.121:42387] [client 185.223.152.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.223.152.121, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "acTLJszaSnm3d1BeM5VhawAAAMw"]
[Thu Mar 26 13:59:02.293764 2026] [:error] [pid 19818:tid 19832] [client 185.223.152.121:42387] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Mar 26 17:03:09.662523 2026] [:error] [pid 31670:tid 31685] [client 20.250.3.85:38582] File does not exist: /usr/local/apache/htdocs/suspended-page/classgoto24.php
[Thu Mar 26 17:03:09.923076 2026] [:error] [pid 31670:tid 31689] [client 20.250.3.85:38582] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Thu Mar 26 17:03:10.162931 2026] [:error] [pid 31670:tid 31674] [client 20.250.3.85:38582] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Mar 26 17:03:10.466709 2026] [:error] [pid 31670:tid 31672] [client 20.250.3.85:38582] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Thu Mar 26 17:03:10.705239 2026] [:error] [pid 31670:tid 31686] [client 20.250.3.85:38582] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Mar 26 17:03:10.944024 2026] [:error] [pid 31670:tid 31692] [client 20.250.3.85:38582] File does not exist: /usr/local/apache/htdocs/suspended-page/h02ugyh.php
[Thu Mar 26 17:03:11.294519 2026] [:error] [pid 31670:tid 31685] [client 20.250.3.85:38582] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu Mar 26 17:03:11.627575 2026] [:error] [pid 31670:tid 31677] [client 20.250.3.85:38582] File does not exist: /usr/local/apache/htdocs/suspended-page/ws47.php
[Thu Mar 26 17:03:11.866828 2026] [:error] [pid 31670:tid 31695] [client 20.250.3.85:38582] File does not exist: /usr/local/apache/htdocs/suspended-page/vvvb.php
[Thu Mar 26 17:03:12.183755 2026] [:error] [pid 31670:tid 31680] [client 20.250.3.85:38582] File does not exist: /usr/local/apache/htdocs/suspended-page/x12.php
[Thu Mar 26 17:03:12.463108 2026] [:error] [pid 31670:tid 31678] [client 20.250.3.85:38582] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zcsu.php"] [unique_id "acT2UDXVthXxCnWjOTROJgAAAUY"]
[Thu Mar 26 17:03:13.362978 2026] [:error] [pid 19711:tid 19755] [client 20.250.3.85:18132] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zcsu.php"] [unique_id "acT2UWj3l1y81GYfluSEzwAAAEY"]
[Thu Mar 26 17:03:13.977680 2026] [:error] [pid 19711:tid 19773] [client 20.250.3.85:18361] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zcsu.php"] [unique_id "acT2UWj3l1y81GYfluSE0AAAAFg"]
[Thu Mar 26 17:03:14.794999 2026] [:error] [pid 31717:tid 31728] [client 20.250.3.85:38546] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zcsu.php"] [unique_id "acT2Ur-SCF7YDISDX4_RBAAAAYY"]
[Thu Mar 26 17:03:15.577557 2026] [:error] [pid 31670:tid 31673] [client 20.250.3.85:29467] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acT2UzXVthXxCnWjOTROKAAAAUE"]
[Thu Mar 26 17:03:16.632099 2026] [:error] [pid 31670:tid 31693] [client 20.250.3.85:36173] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acT2VDXVthXxCnWjOTROLwAAAVU"]
[Thu Mar 26 17:03:17.851127 2026] [:error] [pid 31780:tid 31821] [client 20.250.3.85:20104] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acT2VZJDwZsy5O4ZXEh43AAAAgE"]
[Thu Mar 26 17:03:18.920817 2026] [:error] [pid 31670:tid 31695] [client 20.250.3.85:29445] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acT2VjXVthXxCnWjOTRONwAAAVc"]
[Thu Mar 26 17:03:19.568869 2026] [:error] [pid 31778:tid 31813] [client 20.250.3.85:17663] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acT2Vw3kybI2o-xasmDiPgAAAdQ"]
[Thu Mar 26 17:03:21.134721 2026] [:error] [pid 31778:tid 31800] [client 20.250.3.85:39979] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acT2WQ3kybI2o-xasmDiSgAAAcc"]
[Thu Mar 26 17:03:22.298154 2026] [:error] [pid 31778:tid 31802] [client 20.250.3.85:1342] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acT2Wg3kybI2o-xasmDiTgAAAck"]
[Thu Mar 26 17:03:23.533222 2026] [:error] [pid 19710:tid 19722] [client 20.250.3.85:50506] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acT2WwVEWP8Ar68Njk7xrgAAAAA"]
[Thu Mar 26 17:03:24.244084 2026] [:error] [pid 60829:tid 60831] [client 20.250.3.85:17600] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acT2XPTdjHKeZokybaSmnwAAAQA"]
[Thu Mar 26 17:03:25.705665 2026] [:error] [pid 19818:tid 19840] [client 20.250.3.85:18131] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acT2XczaSnm3d1BeM5XPrAAAANQ"]
[Thu Mar 26 17:03:26.574280 2026] [:error] [pid 19712:tid 19799] [client 20.250.3.85:29460] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acT2XtWhKhRNqm23vFMR1gAAAJc"]
[Thu Mar 26 17:03:28.158615 2026] [:error] [pid 19818:tid 19822] [client 20.250.3.85:15020] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acT2YMzaSnm3d1BeM5XPsgAAAMI"]
[Thu Mar 26 17:03:30.925173 2026] [:error] [pid 31778:tid 31804] [client 20.250.3.85:12144] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acT2Yg3kybI2o-xasmDiWAAAAcs"]
[Thu Mar 26 17:03:31.782268 2026] [:error] [pid 19711:tid 19765] [client 20.250.3.85:23927] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acT2Y2j3l1y81GYfluSE9QAAAFA"]
[Thu Mar 26 17:03:32.860438 2026] [:error] [pid 31780:tid 31836] [client 20.250.3.85:29038] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acT2ZJJDwZsy5O4ZXEh47QAAAg8"]
[Thu Mar 26 17:03:34.009692 2026] [:error] [pid 31670:tid 31681] [client 20.250.3.85:39938] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acT2ZjXVthXxCnWjOTRORwAAAUk"]
[Thu Mar 26 17:03:34.793260 2026] [:error] [pid 31670:tid 31680] [client 20.250.3.85:31559] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acT2ZjXVthXxCnWjOTROTAAAAUg"]
[Thu Mar 26 17:03:35.538326 2026] [:error] [pid 31780:tid 31842] [client 20.250.3.85:18594] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acT2Z5JDwZsy5O4ZXEh48gAAAhU"]
[Thu Mar 26 17:03:36.145120 2026] [:error] [pid 19818:tid 19833] [client 20.250.3.85:12140] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acT2aMzaSnm3d1BeM5XPvwAAAM0"]
[Thu Mar 26 17:03:37.046964 2026] [:error] [pid 31670:tid 31685] [client 20.250.3.85:23923] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acT2aTXVthXxCnWjOTROUQAAAU0"]
[Thu Mar 26 17:03:39.354835 2026] [:error] [pid 19712:tid 19791] [client 20.250.3.85:22824] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acT2a9WhKhRNqm23vFMSNwAAAI8"]
[Thu Mar 26 17:03:40.470580 2026] [:error] [pid 31780:tid 31834] [client 20.250.3.85:50518] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acT2bJJDwZsy5O4ZXEh4-QAAAg0"]
[Thu Mar 26 17:03:41.770170 2026] [:error] [pid 60829:tid 60836] [client 20.250.3.85:26845] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acT2bfTdjHKeZokybaSmpwAAAQU"]
[Thu Mar 26 17:03:44.804847 2026] [:error] [pid 60829:tid 60840] [client 20.250.3.85:1283] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "acT2cPTdjHKeZokybaSmtAAAAQk"]
[Thu Mar 26 17:03:45.938875 2026] [:error] [pid 19818:tid 19821] [client 20.250.3.85:9259] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "acT2cczaSnm3d1BeM5XPywAAAME"]
[Thu Mar 26 17:03:46.623784 2026] [:error] [pid 31670:tid 31690] [client 20.250.3.85:38108] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "acT2cjXVthXxCnWjOTROawAAAVI"]
[Thu Mar 26 17:03:48.848501 2026] [:error] [pid 31780:tid 31826] [client 20.250.3.85:14024] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "acT2dJJDwZsy5O4ZXEh4_QAAAgY"]
[Thu Mar 26 17:03:49.772377 2026] [:error] [pid 31670:tid 31681] [client 20.250.3.85:13498] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "acT2dTXVthXxCnWjOTROggAAAUk"]
[Thu Mar 26 17:03:50.800812 2026] [:error] [pid 31717:tid 31727] [client 20.250.3.85:9245] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acT2dr-SCF7YDISDX4_RFgAAAYU"]
[Thu Mar 26 17:03:51.581903 2026] [:error] [pid 31670:tid 31685] [client 20.250.3.85:19339] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acT2dzXVthXxCnWjOTROjQAAAU0"]
[Thu Mar 26 17:03:52.582937 2026] [:error] [pid 31780:tid 31840] [client 20.250.3.85:1403] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acT2eJJDwZsy5O4ZXEh5AAAAAhM"]
[Thu Mar 26 17:03:53.442489 2026] [:error] [pid 31778:tid 31800] [client 20.250.3.85:19083] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acT2eQ3kybI2o-xasmDiZwAAAcc"]
[Thu Mar 26 17:03:54.123703 2026] [:error] [pid 31780:tid 31836] [client 20.250.3.85:23932] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acT2epJDwZsy5O4ZXEh5AQAAAg8"]
[Thu Mar 26 17:03:55.234487 2026] [:error] [pid 31670:tid 31687] [client 20.250.3.85:38083] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acT2ezXVthXxCnWjOTROpQAAAU8"]
[Thu Mar 26 17:03:57.909931 2026] [:error] [pid 31780:tid 31842] [client 20.250.3.85:15569] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acT2fZJDwZsy5O4ZXEh5BQAAAhU"]
[Thu Mar 26 17:03:59.147395 2026] [:error] [pid 31780:tid 31832] [client 20.250.3.85:29020] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acT2f5JDwZsy5O4ZXEh5CAAAAgs"]
[Thu Mar 26 17:04:00.366058 2026] [:error] [pid 19818:tid 19820] [client 20.250.3.85:25881] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "acT2gMzaSnm3d1BeM5XP4QAAAMA"]
[Thu Mar 26 17:04:01.524426 2026] [:error] [pid 60829:tid 60848] [client 20.250.3.85:1398] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "acT2gfTdjHKeZokybaSmuAAAARE"]
[Thu Mar 26 17:04:03.175743 2026] [:error] [pid 19818:tid 19844] [client 20.250.3.85:40402] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "acT2g8zaSnm3d1BeM5XP5QAAANg"]
[Thu Mar 26 17:04:04.349544 2026] [:error] [pid 31670:tid 31692] [client 20.250.3.85:14065] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "acT2hDXVthXxCnWjOTRPEAAAAVQ"]
[Thu Mar 26 17:04:05.184863 2026] [:error] [pid 31670:tid 31694] [client 20.250.3.85:19099] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acT2hTXVthXxCnWjOTRPGAAAAVY"]
[Thu Mar 26 17:04:06.021784 2026] [:error] [pid 19711:tid 19767] [client 20.250.3.85:38114] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acT2hmj3l1y81GYfluSE_AAAAFI"]
[Thu Mar 26 17:04:07.282686 2026] [:error] [pid 31780:tid 31825] [client 20.250.3.85:38623] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acT2h5JDwZsy5O4ZXEh5FAAAAgU"]
[Thu Mar 26 17:04:08.069427 2026] [:error] [pid 31780:tid 31831] [client 20.250.3.85:13795] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "acT2iJJDwZsy5O4ZXEh5GAAAAgo"]
[Thu Mar 26 17:04:09.163163 2026] [:error] [pid 31780:tid 31821] [client 20.250.3.85:35637] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "acT2iZJDwZsy5O4ZXEh5HAAAAgE"]
[Thu Mar 26 17:04:09.806702 2026] [:error] [pid 31780:tid 31841] [client 20.250.3.85:31586] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "acT2iZJDwZsy5O4ZXEh5IQAAAhQ"]
[Thu Mar 26 17:04:10.483787 2026] [:error] [pid 31780:tid 31832] [client 20.250.3.85:26842] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "acT2ipJDwZsy5O4ZXEh5JQAAAgs"]
[Thu Mar 26 17:04:11.124615 2026] [:error] [pid 19818:tid 19834] [client 20.250.3.85:15590] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "acT2i8zaSnm3d1BeM5XP8QAAAM4"]
[Thu Mar 26 17:04:11.828357 2026] [:error] [pid 31670:tid 31687] [client 20.250.3.85:38595] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acT2izXVthXxCnWjOTRPJAAAAU8"]
[Thu Mar 26 17:04:12.479190 2026] [:error] [pid 31778:tid 31811] [client 20.250.3.85:25871] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Thu Mar 26 17:04:12.856352 2026] [:error] [pid 31778:tid 31806] [client 20.250.3.85:25871] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Thu Mar 26 17:04:13.132867 2026] [:error] [pid 31778:tid 31794] [client 20.250.3.85:25871] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Thu Mar 26 17:04:13.373963 2026] [:error] [pid 31778:tid 31803] [client 20.250.3.85:25871] File does not exist: /usr/local/apache/htdocs/suspended-page/feokc.php
[Thu Mar 26 17:04:13.651339 2026] [:error] [pid 31778:tid 31817] [client 20.250.3.85:25871] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Thu Mar 26 17:04:14.310710 2026] [:error] [pid 31778:tid 31802] [client 20.250.3.85:25871] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Thu Mar 26 17:04:14.848567 2026] [:error] [pid 31778:tid 31808] [client 20.250.3.85:25871] File does not exist: /usr/local/apache/htdocs/suspended-page/24.php
[Thu Mar 26 17:04:15.090194 2026] [:error] [pid 31778:tid 31812] [client 20.250.3.85:25871] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Thu Mar 26 17:04:15.459206 2026] [:error] [pid 31778:tid 31798] [client 20.250.3.85:25871] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu Mar 26 17:04:15.837595 2026] [:error] [pid 31778:tid 31813] [client 20.250.3.85:25871] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "acT2jw3kybI2o-xasmDi0QAAAdQ"]
[Thu Mar 26 17:04:16.609242 2026] [:error] [pid 19711:tid 19751] [client 20.250.3.85:19441] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "acT2kGj3l1y81GYfluSFBAAAAEI"]
[Thu Mar 26 17:04:17.851867 2026] [:error] [pid 31670:tid 31696] [client 20.250.3.85:9278] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "acT2kTXVthXxCnWjOTRPLAAAAVg"]
[Thu Mar 26 17:04:19.219914 2026] [:error] [pid 19711:tid 19755] [client 20.250.3.85:25879] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "acT2k2j3l1y81GYfluSFBwAAAEY"]
[Thu Mar 26 17:04:20.140126 2026] [:error] [pid 31670:tid 31679] [client 20.250.3.85:26872] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "acT2lDXVthXxCnWjOTRPMgAAAUc"]
[Thu Mar 26 17:04:20.984502 2026] [:error] [pid 31670:tid 31687] [client 20.250.3.85:31555] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "acT2lDXVthXxCnWjOTRPNgAAAU8"]
[Thu Mar 26 17:04:22.461640 2026] [:error] [pid 31780:tid 31836] [client 20.250.3.85:49128] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "acT2lpJDwZsy5O4ZXEh5LgAAAg8"]
[Thu Mar 26 17:04:23.563633 2026] [:error] [pid 19711:tid 19754] [client 20.250.3.85:31581] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "acT2l2j3l1y81GYfluSFDgAAAEU"]
[Thu Mar 26 17:04:24.405423 2026] [:error] [pid 19712:tid 19795] [client 20.250.3.85:32631] [client 20.250.3.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/app.php"] [unique_id "acT2mNWhKhRNqm23vFMSQAAAAJM"]
[Thu Mar 26 17:04:25.771680 2026] [:error] [pid 19818:tid 19823] [client 20.250.3.85:8245] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aee.php"] [unique_id "acT2mczaSnm3d1BeM5XQDQAAAMM"]
[Thu Mar 26 17:04:26.710204 2026] [:error] [pid 31778:tid 31795] [client 20.250.3.85:58344] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aee.php"] [unique_id "acT2mg3kybI2o-xasmDi3gAAAcI"]
[Thu Mar 26 17:04:29.687841 2026] [:error] [pid 31717:tid 31723] [client 20.250.3.85:19444] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aee.php"] [unique_id "acT2nb-SCF7YDISDX4_RLwAAAYE"]
[Thu Mar 26 17:04:30.575017 2026] [:error] [pid 19711:tid 19765] [client 20.250.3.85:12828] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aee.php"] [unique_id "acT2nmj3l1y81GYfluSFFgAAAFA"]
[Thu Mar 26 17:04:32.098853 2026] [:error] [pid 31780:tid 31823] [client 20.250.3.85:1359] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "acT2oJJDwZsy5O4ZXEh5QAAAAgM"]
[Thu Mar 26 17:04:33.163143 2026] [:error] [pid 31780:tid 31825] [client 20.250.3.85:36481] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "acT2oZJDwZsy5O4ZXEh5RAAAAgU"]
[Thu Mar 26 17:04:34.176668 2026] [:error] [pid 31780:tid 31833] [client 20.250.3.85:49104] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "acT2opJDwZsy5O4ZXEh5WgAAAgw"]
[Thu Mar 26 17:04:35.163312 2026] [:error] [pid 31670:tid 31682] [client 20.250.3.85:31556] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "acT2ozXVthXxCnWjOTRPWgAAAUo"]
[Thu Mar 26 17:04:36.539260 2026] [:error] [pid 31670:tid 31684] [client 20.250.3.85:1380] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acT2pDXVthXxCnWjOTRPYQAAAUw"]
[Thu Mar 26 17:04:38.269996 2026] [:error] [pid 19712:tid 19790] [client 20.250.3.85:13794] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acT2ptWhKhRNqm23vFMSQQAAAI4"]
[Thu Mar 26 17:04:39.059602 2026] [:error] [pid 31780:tid 31837] [client 20.250.3.85:32633] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acT2p5JDwZsy5O4ZXEh5bwAAAhA"]
[Thu Mar 26 17:04:40.075633 2026] [:error] [pid 31717:tid 31746] [client 20.250.3.85:25889] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acT2qL-SCF7YDISDX4_RNwAAAZg"]
[Thu Mar 26 17:04:41.349391 2026] [:error] [pid 31717:tid 31724] [client 20.250.3.85:8243] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acT2qb-SCF7YDISDX4_RQQAAAYI"]
[Thu Mar 26 17:04:41.983575 2026] [:error] [pid 31717:tid 31723] [client 20.250.3.85:1917] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acT2qb-SCF7YDISDX4_RRgAAAYE"]
[Thu Mar 26 17:04:43.350069 2026] [:error] [pid 19818:tid 19822] [client 20.250.3.85:36500] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acT2q8zaSnm3d1BeM5XQFgAAAMI"]
[Thu Mar 26 17:04:45.006511 2026] [:error] [pid 31778:tid 31795] [client 20.250.3.85:8236] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acT2rQ3kybI2o-xasmDi9gAAAcI"]
[Thu Mar 26 17:04:45.803248 2026] [:error] [pid 19712:tid 19777] [client 20.250.3.85:12816] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "acT2rdWhKhRNqm23vFMSQwAAAIE"]
[Thu Mar 26 17:04:46.990577 2026] [:error] [pid 31670:tid 31694] [client 20.250.3.85:35614] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "acT2rjXVthXxCnWjOTRPdgAAAVY"]
[Thu Mar 26 17:04:47.682327 2026] [:error] [pid 31717:tid 31745] [client 20.250.3.85:8507] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "acT2r7-SCF7YDISDX4_RSwAAAZc"]
[Thu Mar 26 17:04:48.581979 2026] [:error] [pid 31670:tid 31683] [client 20.250.3.85:26827] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "acT2sDXVthXxCnWjOTRPeQAAAUs"]
[Thu Mar 26 17:04:49.440080 2026] [:error] [pid 19818:tid 19828] [client 20.250.3.85:8235] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "acT2sczaSnm3d1BeM5XQIwAAAMg"]
[Thu Mar 26 17:04:50.512716 2026] [:error] [pid 31778:tid 31811] [client 20.250.3.85:41907] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "acT2sg3kybI2o-xasmDi_QAAAdI"]
[Thu Mar 26 17:04:52.185318 2026] [:error] [pid 19818:tid 19842] [client 20.250.3.85:15613] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "acT2tMzaSnm3d1BeM5XQKAAAANY"]
[Thu Mar 26 17:04:54.511260 2026] [:error] [pid 31717:tid 31731] [client 20.250.3.85:13554] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "acT2tr-SCF7YDISDX4_RWgAAAYk"]
[Thu Mar 26 17:04:56.126704 2026] [:error] [pid 31778:tid 31807] [client 20.250.3.85:27961] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "acT2uA3kybI2o-xasmDjBQAAAc4"]
[Thu Mar 26 17:04:56.993104 2026] [:error] [pid 31780:tid 31835] [client 20.250.3.85:32622] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "acT2uJJDwZsy5O4ZXEh5hAAAAg4"]
[Thu Mar 26 17:04:58.368797 2026] [:error] [pid 31670:tid 31672] [client 20.250.3.85:8509] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "acT2ujXVthXxCnWjOTRPggAAAUA"]
[Thu Mar 26 17:04:59.118628 2026] [:error] [pid 31670:tid 31681] [client 20.250.3.85:16275] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "acT2uzXVthXxCnWjOTRPhQAAAUk"]
[Thu Mar 26 17:05:00.694006 2026] [:error] [pid 31780:tid 31830] [client 20.250.3.85:38062] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acT2vJJDwZsy5O4ZXEh5lAAAAgk"]
[Thu Mar 26 17:05:03.451876 2026] [:error] [pid 19712:tid 19791] [client 20.250.3.85:32606] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acT2v9WhKhRNqm23vFMSVwAAAI8"]
[Thu Mar 26 17:05:04.298345 2026] [:error] [pid 60829:tid 60832] [client 20.250.3.85:41895] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acT2wPTdjHKeZokybaSmzgAAAQE"]
[Thu Mar 26 17:05:07.310945 2026] [:error] [pid 19818:tid 19821] [client 20.250.3.85:16317] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acT2w8zaSnm3d1BeM5XQRAAAAME"]
[Thu Mar 26 17:05:10.574462 2026] [:error] [pid 31780:tid 31832] [client 20.250.3.85:38045] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "acT2xpJDwZsy5O4ZXEh5oQAAAgs"]
[Thu Mar 26 17:05:33.675440 2026] [:error] [pid 31717:tid 31742] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Thu Mar 26 17:05:34.110536 2026] [:error] [pid 31717:tid 31731] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Thu Mar 26 17:05:34.349650 2026] [:error] [pid 31717:tid 31735] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Mar 26 17:05:34.622229 2026] [:error] [pid 31717:tid 31738] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Thu Mar 26 17:05:34.895999 2026] [:error] [pid 31717:tid 31726] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Thu Mar 26 17:05:35.266272 2026] [:error] [pid 31717:tid 31746] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Thu Mar 26 17:05:35.738960 2026] [:error] [pid 31717:tid 31745] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Mar 26 17:05:35.977821 2026] [:error] [pid 31717:tid 31723] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Thu Mar 26 17:05:36.216553 2026] [:error] [pid 31717:tid 31736] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Thu Mar 26 17:05:36.487532 2026] [:error] [pid 31717:tid 31728] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/awh.php
[Thu Mar 26 17:05:36.749063 2026] [:error] [pid 31717:tid 31732] [client 20.250.3.85:38017] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Thu Mar 26 17:05:37.063880 2026] [:error] [pid 31717:tid 31744] [client 20.250.3.85:38017] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acT24b-SCF7YDISDX4_RhwAAAZY"]
[Thu Mar 26 17:05:38.162580 2026] [:error] [pid 31670:tid 31691] [client 20.250.3.85:27511] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acT24jXVthXxCnWjOTRP6wAAAVM"]
[Thu Mar 26 17:05:39.194343 2026] [:error] [pid 19818:tid 19831] [client 20.250.3.85:12392] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acT248zaSnm3d1BeM5XQbQAAAMs"]
[Thu Mar 26 17:05:40.618596 2026] [:error] [pid 19712:tid 19785] [client 20.250.3.85:40345] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acT25NWhKhRNqm23vFMSYQAAAIk"]
[Thu Mar 26 17:05:41.712801 2026] [:error] [pid 31670:tid 31676] [client 20.250.3.85:10600] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bo.php"] [unique_id "acT25TXVthXxCnWjOTRP9gAAAUQ"]
[Thu Mar 26 17:05:42.743296 2026] [:error] [pid 31780:tid 31827] [client 20.250.3.85:35088] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bo.php"] [unique_id "acT25pJDwZsy5O4ZXEh5rQAAAgc"]
[Thu Mar 26 17:05:43.340792 2026] [:error] [pid 31670:tid 31696] [client 20.250.3.85:32027] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bo.php"] [unique_id "acT25zXVthXxCnWjOTRP_AAAAVg"]
[Thu Mar 26 17:05:44.897844 2026] [:error] [pid 31670:tid 31680] [client 20.250.3.85:12372] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bo.php"] [unique_id "acT26DXVthXxCnWjOTRQAQAAAUg"]
[Thu Mar 26 17:05:46.075307 2026] [:error] [pid 19711:tid 19756] [client 20.250.3.85:12395] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "acT26mj3l1y81GYfluSFQwAAAEc"]
[Thu Mar 26 17:05:46.953204 2026] [:error] [pid 31780:tid 31841] [client 20.250.3.85:11099] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "acT26pJDwZsy5O4ZXEh5swAAAhQ"]
[Thu Mar 26 17:05:47.897127 2026] [:error] [pid 19712:tid 19796] [client 20.250.3.85:19648] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "acT269WhKhRNqm23vFMSYgAAAJQ"]
[Thu Mar 26 17:05:51.800279 2026] [:error] [pid 19711:tid 19753] [client 20.250.3.85:23347] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "acT272j3l1y81GYfluSFRgAAAEQ"]
[Thu Mar 26 17:05:52.924917 2026] [:error] [pid 31778:tid 31798] [client 20.250.3.85:23297] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acT28A3kybI2o-xasmDjSAAAAcU"]
[Thu Mar 26 17:05:54.404402 2026] [:error] [pid 19711:tid 19755] [client 20.250.3.85:32615] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acT28mj3l1y81GYfluSFSAAAAEY"]
[Thu Mar 26 17:05:56.685138 2026] [:error] [pid 31778:tid 31801] [client 20.250.3.85:38595] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acT29A3kybI2o-xasmDjSwAAAcg"]
[Thu Mar 26 17:05:57.827999 2026] [:error] [pid 19818:tid 19838] [client 20.250.3.85:15056] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "acT29czaSnm3d1BeM5XQgAAAANI"]
[Thu Mar 26 17:05:58.576736 2026] [:error] [pid 19711:tid 19757] [client 20.250.3.85:2018] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "acT29mj3l1y81GYfluSFTgAAAEg"]
[Thu Mar 26 17:05:59.618503 2026] [:error] [pid 19712:tid 19788] [client 20.250.3.85:12359] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "acT299WhKhRNqm23vFMSaQAAAIw"]
[Thu Mar 26 17:06:00.555170 2026] [:error] [pid 31778:tid 31803] [client 20.250.3.85:32048] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "acT2-A3kybI2o-xasmDjUgAAAco"]
[Thu Mar 26 17:06:02.504247 2026] [:error] [pid 31780:tid 31823] [client 20.250.3.85:41189] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "acT2-pJDwZsy5O4ZXEh5vwAAAgM"]
[Thu Mar 26 17:06:03.108676 2026] [:error] [pid 19818:tid 19836] [client 20.250.3.85:50492] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "acT2-8zaSnm3d1BeM5XQjQAAANA"]
[Thu Mar 26 17:06:04.002679 2026] [:error] [pid 19712:tid 19789] [client 20.250.3.85:40346] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "acT2_NWhKhRNqm23vFMScQAAAI0"]
[Thu Mar 26 17:06:04.987764 2026] [:error] [pid 31780:tid 31845] [client 20.250.3.85:41176] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "acT2_JJDwZsy5O4ZXEh5ygAAAhg"]
[Thu Mar 26 17:06:06.008627 2026] [:error] [pid 31717:tid 31744] [client 20.250.3.85:36132] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gm.php"] [unique_id "acT2_r-SCF7YDISDX4_RlgAAAZY"]
[Thu Mar 26 17:06:06.691855 2026] [:error] [pid 31778:tid 31793] [client 20.250.3.85:41874] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acT2_g3kybI2o-xasmDjYwAAAcA"]
[Thu Mar 26 17:06:07.409121 2026] [:error] [pid 31717:tid 31722] [client 20.250.3.85:50446] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acT2_7-SCF7YDISDX4_RmwAAAYA"]
[Thu Mar 26 17:06:08.350053 2026] [:error] [pid 31670:tid 31683] [client 20.250.3.85:1106] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acT3ADXVthXxCnWjOTRQLAAAAUs"]
[Thu Mar 26 17:06:09.156398 2026] [:error] [pid 31670:tid 31680] [client 20.250.3.85:9942] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acT3ATXVthXxCnWjOTRQMQAAAUg"]
[Thu Mar 26 17:06:09.865672 2026] [:error] [pid 19818:tid 19821] [client 20.250.3.85:18624] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acT3AczaSnm3d1BeM5XQkAAAAME"]
[Thu Mar 26 17:06:11.195711 2026] [:error] [pid 31717:tid 31742] [client 20.250.3.85:24416] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acT3A7-SCF7YDISDX4_RoQAAAZQ"]
[Thu Mar 26 17:06:12.024916 2026] [:error] [pid 31670:tid 31686] [client 20.250.3.85:7745] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acT3BDXVthXxCnWjOTRQPgAAAU4"]
[Thu Mar 26 17:06:13.007274 2026] [:error] [pid 19710:tid 19743] [client 20.250.3.85:1990] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acT3BQVEWP8Ar68Njk7yDgAAABU"]
[Thu Mar 26 17:06:13.706942 2026] [:error] [pid 31780:tid 31841] [client 20.250.3.85:36152] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acT3BZJDwZsy5O4ZXEh50wAAAhQ"]
[Thu Mar 26 17:06:14.421888 2026] [:error] [pid 31670:tid 31672] [client 20.250.3.85:1134] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acT3BjXVthXxCnWjOTRQQgAAAUA"]
[Thu Mar 26 17:06:15.592356 2026] [:error] [pid 19818:tid 19842] [client 20.250.3.85:41120] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acT3B8zaSnm3d1BeM5XQmgAAANY"]
[Thu Mar 26 17:06:17.882677 2026] [:error] [pid 31780:tid 31834] [client 20.250.3.85:58282] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acT3CZJDwZsy5O4ZXEh51gAAAg0"]
[Thu Mar 26 17:06:18.660111 2026] [:error] [pid 31717:tid 31728] [client 20.250.3.85:1610] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acT3Cr-SCF7YDISDX4_RpAAAAYY"]
[Thu Mar 26 17:06:19.438031 2026] [:error] [pid 19818:tid 19827] [client 20.250.3.85:1657] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acT3C8zaSnm3d1BeM5XQoQAAAMc"]
[Thu Mar 26 17:06:20.549282 2026] [:error] [pid 19818:tid 19837] [client 20.250.3.85:24418] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acT3DMzaSnm3d1BeM5XQrAAAANE"]
[Thu Mar 26 17:06:21.289370 2026] [:error] [pid 31780:tid 31821] [client 20.250.3.85:39666] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "acT3DZJDwZsy5O4ZXEh52QAAAgE"]
[Thu Mar 26 17:06:22.066443 2026] [:error] [pid 31717:tid 31722] [client 20.250.3.85:58288] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "acT3Dr-SCF7YDISDX4_RpgAAAYA"]
[Thu Mar 26 17:06:22.787089 2026] [:error] [pid 31717:tid 31735] [client 20.250.3.85:39648] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "acT3Dr-SCF7YDISDX4_RqAAAAY0"]
[Thu Mar 26 17:06:23.478214 2026] [:error] [pid 31670:tid 31674] [client 20.250.3.85:25948] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "acT3DzXVthXxCnWjOTRQTAAAAUI"]
[Thu Mar 26 17:06:24.431906 2026] [:error] [pid 31670:tid 31688] [client 20.250.3.85:25920] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "acT3EDXVthXxCnWjOTRQVAAAAVA"]
[Thu Mar 26 17:06:25.272701 2026] [:error] [pid 31717:tid 31745] [client 20.250.3.85:7796] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "acT3Eb-SCF7YDISDX4_RqwAAAZc"]
[Thu Mar 26 17:06:26.161734 2026] [:error] [pid 19818:tid 19830] [client 20.250.3.85:25416] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "acT3EszaSnm3d1BeM5XQuAAAAMo"]
[Thu Mar 26 17:06:26.993678 2026] [:error] [pid 31780:tid 31823] [client 20.250.3.85:21883] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "acT3EpJDwZsy5O4ZXEh54gAAAgM"]
[Thu Mar 26 17:06:27.790671 2026] [:error] [pid 31670:tid 31673] [client 20.250.3.85:38874] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "acT3EzXVthXxCnWjOTRQXAAAAUE"]
[Thu Mar 26 17:06:28.460641 2026] [:error] [pid 31780:tid 31836] [client 20.250.3.85:1592] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "acT3FJJDwZsy5O4ZXEh54wAAAg8"]
[Thu Mar 26 17:06:29.122016 2026] [:error] [pid 60829:tid 60841] [client 20.250.3.85:20763] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "acT3FfTdjHKeZokybaSm7AAAAQo"]
[Thu Mar 26 17:06:30.536456 2026] [:error] [pid 31778:tid 31795] [client 20.250.3.85:11785] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "acT3Fg3kybI2o-xasmDjjwAAAcI"]
[Thu Mar 26 17:06:32.387374 2026] [:error] [pid 19711:tid 19760] [client 20.250.3.85:25451] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "acT3GGj3l1y81GYfluSFXAAAAEs"]
[Thu Mar 26 17:06:33.525066 2026] [:error] [pid 31778:tid 31810] [client 20.250.3.85:9008] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acT3GQ3kybI2o-xasmDjlAAAAdE"]
[Thu Mar 26 17:06:34.521929 2026] [:error] [pid 19818:tid 19828] [client 20.250.3.85:40050] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acT3GszaSnm3d1BeM5XQygAAAMg"]
[Thu Mar 26 17:06:35.148273 2026] [:error] [pid 31780:tid 31831] [client 20.250.3.85:9003] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acT3G5JDwZsy5O4ZXEh6cQAAAgo"]
[Thu Mar 26 17:06:35.912797 2026] [:error] [pid 31670:tid 31689] [client 20.250.3.85:40368] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acT3GzXVthXxCnWjOTRQYgAAAVE"]
[Thu Mar 26 17:06:37.225720 2026] [:error] [pid 31778:tid 31816] [client 20.250.3.85:36123] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Thu Mar 26 17:06:37.745050 2026] [:error] [pid 31778:tid 31798] [client 20.250.3.85:36123] File does not exist: /usr/local/apache/htdocs/suspended-page/fyiiz.php
[Thu Mar 26 17:06:38.028888 2026] [:error] [pid 31778:tid 31795] [client 20.250.3.85:36123] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Thu Mar 26 17:06:38.438326 2026] [:error] [pid 31778:tid 31796] [client 20.250.3.85:36123] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Thu Mar 26 17:06:38.766276 2026] [:error] [pid 31778:tid 31799] [client 20.250.3.85:36123] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Thu Mar 26 17:06:39.326714 2026] [:error] [pid 31778:tid 31817] [client 20.250.3.85:36123] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Mar 26 17:06:39.657026 2026] [:error] [pid 31778:tid 31804] [client 20.250.3.85:36123] File does not exist: /usr/local/apache/htdocs/suspended-page/to.php
[Thu Mar 26 17:06:40.090656 2026] [:error] [pid 31778:tid 31797] [client 20.250.3.85:36123] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Thu Mar 26 17:06:40.331658 2026] [:error] [pid 31778:tid 31802] [client 20.250.3.85:36123] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Thu Mar 26 17:06:40.623703 2026] [:error] [pid 31778:tid 31810] [client 20.250.3.85:36123] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filesss.php"] [unique_id "acT3IA3kybI2o-xasmDjowAAAdE"]
[Thu Mar 26 17:06:41.999835 2026] [:error] [pid 31670:tid 31690] [client 20.250.3.85:19169] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filesss.php"] [unique_id "acT3ITXVthXxCnWjOTRQaAAAAVI"]
[Thu Mar 26 17:06:43.447394 2026] [:error] [pid 60829:tid 60836] [client 20.250.3.85:36117] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filesss.php"] [unique_id "acT3I_TdjHKeZokybaSnIwAAAQU"]
[Thu Mar 26 17:06:44.157336 2026] [:error] [pid 31778:tid 31802] [client 20.250.3.85:7805] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filesss.php"] [unique_id "acT3JA3kybI2o-xasmDjrwAAAck"]
[Thu Mar 26 17:06:45.110725 2026] [:error] [pid 19818:tid 19821] [client 20.250.3.85:40060] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acT3JczaSnm3d1BeM5XQ2gAAAME"]
[Thu Mar 26 17:06:45.800135 2026] [:error] [pid 31778:tid 31794] [client 20.250.3.85:21837] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acT3JQ3kybI2o-xasmDjtQAAAcE"]
[Thu Mar 26 17:06:47.431469 2026] [:error] [pid 60829:tid 60844] [client 20.250.3.85:36153] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acT3J_TdjHKeZokybaSnJwAAAQ0"]
[Thu Mar 26 17:06:48.108808 2026] [:error] [pid 31670:tid 31684] [client 20.250.3.85:20766] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acT3KDXVthXxCnWjOTRQdwAAAUw"]
[Thu Mar 26 17:06:48.898690 2026] [:error] [pid 19818:tid 19822] [client 20.250.3.85:19168] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acT3KMzaSnm3d1BeM5XQ3QAAAMI"]
[Thu Mar 26 17:06:49.827128 2026] [:error] [pid 31780:tid 31834] [client 20.250.3.85:36140] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acT3KZJDwZsy5O4ZXEh6iAAAAg0"]
[Thu Mar 26 17:06:50.549477 2026] [:error] [pid 31780:tid 31839] [client 20.250.3.85:9975] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acT3KpJDwZsy5O4ZXEh6iwAAAhI"]
[Thu Mar 26 17:06:51.370456 2026] [:error] [pid 31778:tid 31795] [client 20.250.3.85:33105] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acT3Kw3kybI2o-xasmDjvAAAAcI"]
[Thu Mar 26 17:06:52.012632 2026] [:error] [pid 31780:tid 31844] [client 20.250.3.85:40043] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acT3LJJDwZsy5O4ZXEh6kgAAAhc"]
[Thu Mar 26 17:06:53.395560 2026] [:error] [pid 31670:tid 31687] [client 20.250.3.85:39673] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acT3LTXVthXxCnWjOTRQhQAAAU8"]
[Thu Mar 26 17:06:54.517832 2026] [:error] [pid 19711:tid 19771] [client 20.250.3.85:39248] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acT3Lmj3l1y81GYfluSFZQAAAFY"]
[Thu Mar 26 17:06:55.955008 2026] [:error] [pid 31780:tid 31830] [client 20.250.3.85:25420] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acT3L5JDwZsy5O4ZXEh6nAAAAgk"]
[Thu Mar 26 17:06:57.082767 2026] [:error] [pid 31670:tid 31682] [client 20.250.3.85:25414] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "acT3MTXVthXxCnWjOTRQlAAAAUo"]
[Thu Mar 26 17:06:58.340710 2026] [:error] [pid 31670:tid 31693] [client 20.250.3.85:20750] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "acT3MjXVthXxCnWjOTRQmwAAAVU"]
[Thu Mar 26 17:06:59.700728 2026] [:error] [pid 31670:tid 31681] [client 20.250.3.85:22280] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "acT3MzXVthXxCnWjOTRQpAAAAUk"]
[Thu Mar 26 17:07:00.584085 2026] [:error] [pid 31717:tid 31722] [client 20.250.3.85:33143] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "acT3NL-SCF7YDISDX4_RvAAAAYA"]
[Thu Mar 26 17:07:01.892198 2026] [:error] [pid 19818:tid 19825] [client 20.250.3.85:8544] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "acT3NczaSnm3d1BeM5XQ7gAAAMU"]
[Thu Mar 26 17:07:04.217263 2026] [:error] [pid 60829:tid 60844] [client 20.250.3.85:22326] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "acT3OPTdjHKeZokybaSnLwAAAQ0"]
[Thu Mar 26 17:07:05.415319 2026] [:error] [pid 19712:tid 19787] [client 20.250.3.85:11533] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "acT3OdWhKhRNqm23vFMSfAAAAIs"]
[Thu Mar 26 17:07:06.139596 2026] [:error] [pid 31717:tid 31742] [client 20.250.3.85:22310] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "acT3Or-SCF7YDISDX4_RvwAAAZQ"]
[Thu Mar 26 17:07:07.141965 2026] [:error] [pid 31778:tid 31802] [client 20.250.3.85:19184] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "acT3Ow3kybI2o-xasmDjyAAAAck"]
[Thu Mar 26 17:07:08.108491 2026] [:error] [pid 19710:tid 19734] [client 20.250.3.85:35145] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "acT3PAVEWP8Ar68Njk7yLQAAAAw"]
[Thu Mar 26 17:07:08.816021 2026] [:error] [pid 31778:tid 31801] [client 20.250.3.85:9062] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "acT3PA3kybI2o-xasmDjzAAAAcg"]
[Thu Mar 26 17:07:09.642915 2026] [:error] [pid 19818:tid 19829] [client 20.250.3.85:14784] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "acT3PczaSnm3d1BeM5XQ-wAAAMk"]
[Thu Mar 26 17:07:10.304305 2026] [:error] [pid 31778:tid 31794] [client 20.250.3.85:22306] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cord.php"] [unique_id "acT3Pg3kybI2o-xasmDjzgAAAcE"]
[Thu Mar 26 17:07:10.927796 2026] [:error] [pid 31670:tid 31672] [client 20.250.3.85:11540] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cord.php"] [unique_id "acT3PjXVthXxCnWjOTRQwQAAAUA"]
[Thu Mar 26 17:07:11.634302 2026] [:error] [pid 31778:tid 31813] [client 20.250.3.85:1413] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cord.php"] [unique_id "acT3Pw3kybI2o-xasmDj0QAAAdQ"]
[Thu Mar 26 17:07:12.406788 2026] [:error] [pid 19818:tid 19836] [client 20.250.3.85:1770] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cord.php"] [unique_id "acT3QMzaSnm3d1BeM5XQ_AAAANA"]
[Thu Mar 26 17:07:13.086046 2026] [:error] [pid 31717:tid 31741] [client 20.250.3.85:1158] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shlo.php"] [unique_id "acT3Qb-SCF7YDISDX4_RxQAAAZM"]
[Thu Mar 26 17:07:13.728741 2026] [:error] [pid 31778:tid 31815] [client 20.250.3.85:44128] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shlo.php"] [unique_id "acT3QQ3kybI2o-xasmDj2QAAAdY"]
[Thu Mar 26 17:07:14.490339 2026] [:error] [pid 31780:tid 31833] [client 20.250.3.85:33050] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shlo.php"] [unique_id "acT3QpJDwZsy5O4ZXEh6ugAAAgw"]
[Thu Mar 26 17:07:15.521853 2026] [:error] [pid 31778:tid 31794] [client 20.250.3.85:22279] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shlo.php"] [unique_id "acT3Qw3kybI2o-xasmDj2gAAAcE"]
[Thu Mar 26 17:07:16.244122 2026] [:error] [pid 31778:tid 31809] [client 20.250.3.85:12066] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "acT3RA3kybI2o-xasmDj3AAAAdA"]
[Thu Mar 26 17:07:17.023468 2026] [:error] [pid 19818:tid 19838] [client 20.250.3.85:16820] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "acT3RczaSnm3d1BeM5XRBAAAANI"]
[Thu Mar 26 17:07:17.623902 2026] [:error] [pid 19818:tid 19823] [client 20.250.3.85:40050] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "acT3RczaSnm3d1BeM5XRCgAAAMM"]
[Thu Mar 26 17:07:18.363964 2026] [:error] [pid 19818:tid 19837] [client 20.250.3.85:14277] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "acT3RszaSnm3d1BeM5XRDQAAANE"]
[Thu Mar 26 17:07:19.357225 2026] [:error] [pid 60829:tid 60836] [client 20.250.3.85:1203] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acT3R_TdjHKeZokybaSnOwAAAQU"]
[Thu Mar 26 17:07:20.045478 2026] [:error] [pid 19710:tid 19723] [client 20.250.3.85:9903] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acT3SAVEWP8Ar68Njk7yMAAAAAE"]
[Thu Mar 26 17:07:21.055896 2026] [:error] [pid 31780:tid 31834] [client 20.250.3.85:1031] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acT3SZJDwZsy5O4ZXEh6xwAAAg0"]
[Thu Mar 26 17:07:21.750879 2026] [:error] [pid 31670:tid 31692] [client 20.250.3.85:11549] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acT3STXVthXxCnWjOTRQywAAAVQ"]
[Thu Mar 26 17:07:22.634570 2026] [:error] [pid 31670:tid 31696] [client 20.250.3.85:12057] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "acT3SjXVthXxCnWjOTRQ0wAAAVg"]
[Thu Mar 26 17:07:23.392044 2026] [:error] [pid 19712:tid 19789] [client 20.250.3.85:38833] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "acT3S9WhKhRNqm23vFMSgAAAAI0"]
[Thu Mar 26 17:07:24.229341 2026] [:error] [pid 31778:tid 31806] [client 20.250.3.85:9051] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "acT3TA3kybI2o-xasmDj4QAAAc0"]
[Thu Mar 26 17:07:24.917765 2026] [:error] [pid 19818:tid 19838] [client 20.250.3.85:37644] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/juuuu.php"] [unique_id "acT3TMzaSnm3d1BeM5XRFwAAANI"]
[Thu Mar 26 17:07:25.976861 2026] [:error] [pid 19818:tid 19827] [client 20.250.3.85:9050] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "acT3TczaSnm3d1BeM5XRHgAAAMc"]
[Thu Mar 26 17:07:26.811319 2026] [:error] [pid 31670:tid 31679] [client 20.250.3.85:16849] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "acT3TjXVthXxCnWjOTRQ2QAAAUc"]
[Thu Mar 26 17:07:27.592508 2026] [:error] [pid 31670:tid 31689] [client 20.250.3.85:35166] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "acT3TzXVthXxCnWjOTRQ3QAAAVE"]
[Thu Mar 26 17:07:28.420643 2026] [:error] [pid 60829:tid 60851] [client 20.250.3.85:18936] [client 20.250.3.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "acT3UPTdjHKeZokybaSnPwAAARQ"]
[Thu Mar 26 20:22:01.351621 2026] [:error] [pid 19711:tid 19770] [client 103.203.46.132:50671] [client 103.203.46.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.203.46.132, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acUk6Wj3l1y81GYfluSbdwAAAFU"]
[Thu Mar 26 20:22:01.358917 2026] [:error] [pid 19711:tid 19770] [client 103.203.46.132:50671] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 20:40:18.117514 2026] [:error] [pid 31670:tid 31683] [client 103.247.120.55:53730] [client 103.247.120.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.247.120.55, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acUpMjXVthXxCnWjOTS-VQAAAUs"]
[Thu Mar 26 20:40:18.123333 2026] [:error] [pid 31670:tid 31683] [client 103.247.120.55:53730] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Mar 26 20:41:32.566547 2026] [:error] [pid 31670:tid 31691] [client 103.225.244.101:19621] [client 103.225.244.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.225.244.101, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acUpfDXVthXxCnWjOTS-wAAAAVM"]
[Thu Mar 26 20:41:32.571009 2026] [:error] [pid 31670:tid 31691] [client 103.225.244.101:19621] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 27 01:37:51.099931 2026] [:error] [pid 44058:tid 44083] [client 185.169.4.152:65437] [client 185.169.4.152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "acVu7-qp9u5CVRGdZPH_cwAAAJc"]
[Fri Mar 27 01:37:51.830822 2026] [:error] [pid 62147:tid 62463] [client 185.169.4.152:51729] [client 185.169.4.152] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.vscode/sftp.json"] [unique_id "acVu7xPjxn06mcLazN5_9gAAAAM"]
[Fri Mar 27 01:57:12.054191 2026] [:error] [pid 62551:tid 62569] [client 152.59.184.3:53005] [client 152.59.184.3] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 152.59.184.3, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acVzeIQvFHgfE1g4p7CXMAAAAc8"]
[Fri Mar 27 01:57:12.058966 2026] [:error] [pid 62551:tid 62569] [client 152.59.184.3:53005] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 27 10:52:34.703115 2026] [:error] [pid 27743:tid 27769] [client 186.179.146.195:58027] [client 186.179.146.195] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.179.146.195, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acXw8iA46UYYLqzw99ArcQAAAAU"]
[Fri Mar 27 10:52:34.718448 2026] [:error] [pid 27743:tid 27769] [client 186.179.146.195:58027] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Mar 27 16:04:48.786820 2026] [:error] [pid 4341:tid 4362] [client 217.216.37.53:54218] [client 217.216.37.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "acY6IOKJWrNB5dMlERFDRwAAAZM"]
[Fri Mar 27 16:04:48.998896 2026] [:error] [pid 27750:tid 27827] [client 217.216.37.53:59877] [client 217.216.37.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acY6IIaSil5rd17ieLzAbwAAAIk"]
[Fri Mar 27 16:04:49.210932 2026] [:error] [pid 4293:tid 4308] [client 217.216.37.53:54380] [client 217.216.37.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/media/system/js/core.js"] [unique_id "acY6IZLjeJUC3OKtEx_dgwAAAU0"]
[Fri Mar 27 16:32:13.257878 2026] [:error] [pid 4293:tid 4310] [client 45.168.88.179:26864] [client 45.168.88.179] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.168.88.179, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acZAjZLjeJUC3OKtEx_vtQAAAU8"]
[Fri Mar 27 16:32:13.263156 2026] [:error] [pid 4293:tid 4310] [client 45.168.88.179:26864] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 02:43:29.778510 2026] [:error] [pid 11768:tid 11784] [client 189.130.240.27:44046] [client 189.130.240.27] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 189.130.240.27, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acbP0cLK0swIwlw7rFbaFAAAAQw"]
[Sat Mar 28 02:43:29.783554 2026] [:error] [pid 11768:tid 11784] [client 189.130.240.27:44046] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 07:14:56.510315 2026] [:error] [pid 64861:tid 64957] [client 20.53.228.80:5165] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Mar 28 07:14:56.551461 2026] [:error] [pid 64861:tid 64943] [client 20.53.228.80:5165] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Mar 28 07:14:56.627247 2026] [:error] [pid 64861:tid 64941] [client 20.53.228.80:5165] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Mar 28 07:14:56.699859 2026] [:error] [pid 64861:tid 64953] [client 20.53.228.80:5165] File does not exist: /usr/local/apache/htdocs/suspended-page/akc.php
[Sat Mar 28 07:14:56.718197 2026] [:error] [pid 64861:tid 64948] [client 20.53.228.80:5165] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Sat Mar 28 07:14:56.737785 2026] [:error] [pid 64861:tid 64954] [client 20.53.228.80:5165] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Mar 28 07:14:56.759175 2026] [:error] [pid 64861:tid 64935] [client 20.53.228.80:5165] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Mar 28 07:14:56.774854 2026] [:error] [pid 64861:tid 64952] [client 20.53.228.80:5165] [client 20.53.228.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "accPcOxK22_lUN2kvnVb9AAAAJE"]
[Sat Mar 28 07:14:56.890370 2026] [:error] [pid 64861:tid 64940] [client 20.53.228.80:10698] [client 20.53.228.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "accPcOxK22_lUN2kvnVb9QAAAIU"]
[Sat Mar 28 07:14:56.982228 2026] [:error] [pid 43547:tid 43563] [client 20.53.228.80:11271] [client 20.53.228.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "accPcD4ZEfdetXP-9aCxGAAAAg4"]
[Sat Mar 28 07:14:57.117203 2026] [:error] [pid 43547:tid 43552] [client 20.53.228.80:5147] [client 20.53.228.80] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "accPcT4ZEfdetXP-9aCxGgAAAgM"]
[Sat Mar 28 09:25:47.854924 2026] [:error] [pid 43547:tid 43552] [client 2.58.56.116:54475] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "accuGz4ZEfdetXP-9aC8_AAAAgM"]
[Sat Mar 28 09:25:48.353407 2026] [:error] [pid 64859:tid 64889] [client 2.58.56.116:55072] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "accuHG3qEBHXq3rHdBm46gAAAAg"]
[Sat Mar 28 09:25:48.851351 2026] [:error] [pid 64859:tid 64898] [client 2.58.56.116:55472] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "accuHG3qEBHXq3rHdBm5BgAAABE"]
[Sat Mar 28 09:25:49.350297 2026] [:error] [pid 43547:tid 43553] [client 2.58.56.116:55967] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "accuHT4ZEfdetXP-9aC9JAAAAgQ"]
[Sat Mar 28 09:25:49.854957 2026] [:error] [pid 43579:tid 43632] [client 2.58.56.116:56264] [client 2.58.56.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "accuHSRqN4JVI8gB7AmleQAAApg"]
[Sat Mar 28 13:08:11.940807 2026] [:error] [pid 43578:tid 43594] [client 182.8.228.127:18123] [client 182.8.228.127] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.8.228.127, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acdiO3NG2YdGm41aN8JocgAAAk0"]
[Sat Mar 28 13:08:11.945821 2026] [:error] [pid 43578:tid 43594] [client 182.8.228.127:18123] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 13:08:15.481639 2026] [:error] [pid 43578:tid 43593] [client 106.213.86.99:16842] [client 106.213.86.99] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.213.86.99, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acdiP3NG2YdGm41aN8JofAAAAkw"]
[Sat Mar 28 13:08:15.486375 2026] [:error] [pid 43578:tid 43593] [client 106.213.86.99:16842] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 18:15:15.308132 2026] [:error] [pid 64861:tid 64945] [client 160.179.151.243:58104] [client 160.179.151.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 160.179.151.243, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aceqM-xK22_lUN2kvnUiWgAAAIo"]
[Sat Mar 28 18:15:15.312880 2026] [:error] [pid 64861:tid 64945] [client 160.179.151.243:58104] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 18:16:58.041178 2026] [:error] [pid 43578:tid 43601] [client 109.69.0.203:50527] [client 109.69.0.203] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 109.69.0.203, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aceqmnNG2YdGm41aN8LOqwAAAlQ"]
[Sat Mar 28 18:16:58.046309 2026] [:error] [pid 43578:tid 43601] [client 109.69.0.203:50527] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Mar 28 23:37:47.577269 2026] [:error] [pid 64860:tid 64931] [client 71.172.26.220:59770] [client 71.172.26.220] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 71.172.26.220, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acf1yxkU3N0pg_4aEL-8KAAAAFc"]
[Sat Mar 28 23:37:47.582198 2026] [:error] [pid 64860:tid 64931] [client 71.172.26.220:59770] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 29 03:00:50.293508 2026] [:error] [pid 39429:tid 39486] [client 57.154.25.166:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Sun Mar 29 03:00:50.458163 2026] [:error] [pid 39429:tid 39498] [client 57.154.25.166:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/xc0252.php
[Sun Mar 29 03:00:50.619739 2026] [:error] [pid 39429:tid 39501] [client 57.154.25.166:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Sun Mar 29 03:00:50.782654 2026] [:error] [pid 39429:tid 39510] [client 57.154.25.166:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Mar 29 03:00:50.944386 2026] [:error] [pid 39429:tid 39502] [client 57.154.25.166:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sun Mar 29 03:00:51.105095 2026] [:error] [pid 39429:tid 39490] [client 57.154.25.166:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sun Mar 29 03:00:51.265502 2026] [:error] [pid 39429:tid 39489] [client 57.154.25.166:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/ws47.php
[Sun Mar 29 03:00:51.425796 2026] [:error] [pid 39429:tid 39497] [client 57.154.25.166:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/vvvb.php
[Sun Mar 29 03:00:51.588109 2026] [:error] [pid 39429:tid 39492] [client 57.154.25.166:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/x12.php
[Sun Mar 29 03:00:51.748763 2026] [:error] [pid 39429:tid 39506] [client 57.154.25.166:36186] File does not exist: /usr/local/apache/htdocs/suspended-page/zcsu.php
[Sun Mar 29 03:00:51.906717 2026] [:error] [pid 39429:tid 39493] [client 57.154.25.166:36186] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acglY08pSj6sqgZaItnyNgAAAIc"]
[Sun Mar 29 03:00:52.229664 2026] [:error] [pid 11588:tid 11596] [client 57.154.25.166:38979] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acglZAhH5525WHuzKfpsSQAAAUY"]
[Sun Mar 29 03:00:52.554150 2026] [:error] [pid 11588:tid 11594] [client 57.154.25.166:38987] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acglZAhH5525WHuzKfpsSwAAAUQ"]
[Sun Mar 29 03:00:52.878527 2026] [:error] [pid 11588:tid 11601] [client 57.154.25.166:39025] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acglZAhH5525WHuzKfpsTQAAAUs"]
[Sun Mar 29 03:00:53.196206 2026] [:error] [pid 60346:tid 60351] [client 57.154.25.166:38976] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acglZXVrXSgLxlxLi9BXZgAAAQA"]
[Sun Mar 29 03:00:53.513783 2026] [:error] [pid 11588:tid 11612] [client 57.154.25.166:39010] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acglZQhH5525WHuzKfpsUQAAAVY"]
[Sun Mar 29 03:00:53.832706 2026] [:error] [pid 11588:tid 11596] [client 57.154.25.166:38988] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acglZQhH5525WHuzKfpsUwAAAUY"]
[Sun Mar 29 03:00:54.146899 2026] [:error] [pid 11588:tid 11607] [client 57.154.25.166:39019] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cxs.php"] [unique_id "acglZghH5525WHuzKfpsVwAAAVE"]
[Sun Mar 29 03:00:54.465657 2026] [:error] [pid 39427:tid 39454] [client 57.154.25.166:36555] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acglZlvLf0RDUqcYq-ZepAAAABY"]
[Sun Mar 29 03:00:54.781692 2026] [:error] [pid 39427:tid 39447] [client 57.154.25.166:38993] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acglZlvLf0RDUqcYq-ZepQAAAA8"]
[Sun Mar 29 03:00:55.098183 2026] [:error] [pid 39427:tid 39448] [client 57.154.25.166:36162] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acglZ1vLf0RDUqcYq-ZepgAAABA"]
[Sun Mar 29 03:00:55.433701 2026] [:error] [pid 11588:tid 11602] [client 57.154.25.166:39008] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acglZwhH5525WHuzKfpsXAAAAUw"]
[Sun Mar 29 03:00:55.753159 2026] [:error] [pid 39428:tid 39470] [client 57.154.25.166:29266] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acglZ6XMrozFMIaP8nINUAAAAEs"]
[Sun Mar 29 03:00:56.072530 2026] [:error] [pid 60346:tid 60365] [client 57.154.25.166:36200] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acglaHVrXSgLxlxLi9BXawAAAQ4"]
[Sun Mar 29 03:00:56.392320 2026] [:error] [pid 39427:tid 39441] [client 57.154.25.166:36176] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acglaFvLf0RDUqcYq-ZerAAAAAk"]
[Sun Mar 29 03:00:56.726081 2026] [:error] [pid 39427:tid 39450] [client 57.154.25.166:36170] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acglaFvLf0RDUqcYq-ZesQAAABI"]
[Sun Mar 29 03:00:57.066541 2026] [:error] [pid 60346:tid 60371] [client 57.154.25.166:36161] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "acglaXVrXSgLxlxLi9BXbgAAARQ"]
[Sun Mar 29 03:00:57.393788 2026] [:error] [pid 60346:tid 60352] [client 57.154.25.166:36182] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "acglaXVrXSgLxlxLi9BXcgAAAQE"]
[Sun Mar 29 03:00:57.714185 2026] [:error] [pid 60346:tid 60357] [client 57.154.25.166:36196] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "acglaXVrXSgLxlxLi9BXdQAAAQY"]
[Sun Mar 29 03:00:58.044218 2026] [:error] [pid 60346:tid 60370] [client 57.154.25.166:36193] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "acglanVrXSgLxlxLi9BXfgAAARM"]
[Sun Mar 29 03:00:58.370070 2026] [:error] [pid 39429:tid 39509] [client 57.154.25.166:36182] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zz8.php"] [unique_id "acglak8pSj6sqgZaItnyOgAAAJc"]
[Sun Mar 29 03:00:58.687595 2026] [:error] [pid 11588:tid 11595] [client 57.154.25.166:39031] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zz8.php"] [unique_id "acglaghH5525WHuzKfpsYAAAAUU"]
[Sun Mar 29 03:00:59.010828 2026] [:error] [pid 60346:tid 60369] [client 57.154.25.166:39017] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zz8.php"] [unique_id "acgla3VrXSgLxlxLi9BXhQAAARI"]
[Sun Mar 29 03:00:59.366428 2026] [:error] [pid 39427:tid 39435] [client 57.154.25.166:36160] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zz8.php"] [unique_id "acgla1vLf0RDUqcYq-ZeugAAAAM"]
[Sun Mar 29 03:00:59.696348 2026] [:error] [pid 60346:tid 60359] [client 57.154.25.166:36199] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feokc.php"] [unique_id "acgla3VrXSgLxlxLi9BXigAAAQg"]
[Sun Mar 29 03:01:00.042962 2026] [:error] [pid 60346:tid 60372] [client 57.154.25.166:39023] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feokc.php"] [unique_id "acglbHVrXSgLxlxLi9BXiwAAARU"]
[Sun Mar 29 03:01:00.487773 2026] [:error] [pid 39427:tid 39445] [client 57.154.25.166:38994] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feokc.php"] [unique_id "acglbFvLf0RDUqcYq-ZevQAAAA0"]
[Sun Mar 29 03:01:00.828100 2026] [:error] [pid 11588:tid 11613] [client 57.154.25.166:36189] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feokc.php"] [unique_id "acglbAhH5525WHuzKfpsYgAAAVc"]
[Sun Mar 29 03:01:01.147147 2026] [:error] [pid 39427:tid 39451] [client 57.154.25.166:36218] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "acglbVvLf0RDUqcYq-ZevwAAABM"]
[Sun Mar 29 03:01:01.464934 2026] [:error] [pid 11588:tid 11590] [client 57.154.25.166:38981] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "acglbQhH5525WHuzKfpsZAAAAUA"]
[Sun Mar 29 03:01:01.798058 2026] [:error] [pid 39427:tid 39444] [client 57.154.25.166:36167] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "acglbVvLf0RDUqcYq-ZewQAAAAw"]
[Sun Mar 29 03:01:02.138271 2026] [:error] [pid 39429:tid 39488] [client 57.154.25.166:36213] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "acglbk8pSj6sqgZaItnyQgAAAII"]
[Sun Mar 29 03:01:02.464691 2026] [:error] [pid 60346:tid 60363] [client 57.154.25.166:39022] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpmini.php"] [unique_id "acglbnVrXSgLxlxLi9BXkAAAAQw"]
[Sun Mar 29 03:01:02.788458 2026] [:error] [pid 11588:tid 11600] [client 57.154.25.166:36583] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpmini.php"] [unique_id "acglbghH5525WHuzKfpsaAAAAUo"]
[Sun Mar 29 03:01:03.121919 2026] [:error] [pid 39427:tid 39432] [client 57.154.25.166:39033] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpmini.php"] [unique_id "acglb1vLf0RDUqcYq-ZewwAAAAA"]
[Sun Mar 29 03:01:03.456321 2026] [:error] [pid 39514:tid 39537] [client 57.154.25.166:39030] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpmini.php"] [unique_id "acglbykUyvlQod6qQu229QAAAMw"]
[Sun Mar 29 03:01:03.787738 2026] [:error] [pid 39427:tid 39435] [client 57.154.25.166:36558] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an7.php"] [unique_id "acglb1vLf0RDUqcYq-ZexAAAAAM"]
[Sun Mar 29 03:01:04.109722 2026] [:error] [pid 60346:tid 60360] [client 57.154.25.166:39003] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an7.php"] [unique_id "acglcHVrXSgLxlxLi9BXlQAAAQk"]
[Sun Mar 29 03:01:04.443548 2026] [:error] [pid 39427:tid 39438] [client 57.154.25.166:36188] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an7.php"] [unique_id "acglcFvLf0RDUqcYq-ZexQAAAAY"]
[Sun Mar 29 03:01:04.760701 2026] [:error] [pid 39427:tid 39454] [client 57.154.25.166:36190] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/an7.php"] [unique_id "acglcFvLf0RDUqcYq-ZexwAAABY"]
[Sun Mar 29 03:01:05.126346 2026] [:error] [pid 60346:tid 60364] [client 57.154.25.166:38978] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tbute.php"] [unique_id "acglcXVrXSgLxlxLi9BXnAAAAQ0"]
[Sun Mar 29 03:01:05.501733 2026] [:error] [pid 60346:tid 60360] [client 57.154.25.166:39018] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tbute.php"] [unique_id "acglcXVrXSgLxlxLi9BXnQAAAQk"]
[Sun Mar 29 03:01:05.832672 2026] [:error] [pid 39427:tid 39451] [client 57.154.25.166:36223] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tbute.php"] [unique_id "acglcVvLf0RDUqcYq-ZeygAAABM"]
[Sun Mar 29 03:01:06.152369 2026] [:error] [pid 39427:tid 39436] [client 57.154.25.166:36221] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tbute.php"] [unique_id "acglclvLf0RDUqcYq-ZeywAAAAQ"]
[Sun Mar 29 03:01:06.497571 2026] [:error] [pid 39427:tid 39450] [client 57.154.25.166:38977] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rovoj.php"] [unique_id "acglclvLf0RDUqcYq-ZezQAAABI"]
[Sun Mar 29 03:01:06.856605 2026] [:error] [pid 39514:tid 39527] [client 57.154.25.166:36214] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rovoj.php"] [unique_id "acglcikUyvlQod6qQu22-AAAAMI"]
[Sun Mar 29 03:01:07.184152 2026] [:error] [pid 11588:tid 11607] [client 57.154.25.166:36212] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rovoj.php"] [unique_id "acglcwhH5525WHuzKfpsbQAAAVE"]
[Sun Mar 29 03:01:07.549970 2026] [:error] [pid 11588:tid 11598] [client 57.154.25.166:36175] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rovoj.php"] [unique_id "acglcwhH5525WHuzKfpsbwAAAUg"]
[Sun Mar 29 03:01:07.887014 2026] [:error] [pid 39427:tid 39437] [client 57.154.25.166:36551] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r3grt7.php"] [unique_id "acglc1vLf0RDUqcYq-Ze0QAAAAU"]
[Sun Mar 29 03:01:08.209703 2026] [:error] [pid 39427:tid 39455] [client 57.154.25.166:36210] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r3grt7.php"] [unique_id "acgldFvLf0RDUqcYq-Ze0wAAABc"]
[Sun Mar 29 03:01:08.566082 2026] [:error] [pid 39514:tid 39524] [client 57.154.25.166:38983] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r3grt7.php"] [unique_id "acgldCkUyvlQod6qQu22_AAAAMA"]
[Sun Mar 29 03:01:08.892623 2026] [:error] [pid 39427:tid 39434] [client 57.154.25.166:36179] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r3grt7.php"] [unique_id "acgldFvLf0RDUqcYq-Ze1gAAAAI"]
[Sun Mar 29 03:01:09.220704 2026] [:error] [pid 11588:tid 11608] [client 57.154.25.166:39011] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phina.php"] [unique_id "acgldQhH5525WHuzKfpscgAAAVI"]
[Sun Mar 29 03:01:09.540157 2026] [:error] [pid 60346:tid 60365] [client 57.154.25.166:39038] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phina.php"] [unique_id "acgldXVrXSgLxlxLi9BXogAAAQ4"]
[Sun Mar 29 03:01:09.911340 2026] [:error] [pid 60346:tid 60362] [client 57.154.25.166:39015] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phina.php"] [unique_id "acgldXVrXSgLxlxLi9BXpgAAAQs"]
[Sun Mar 29 03:01:10.248822 2026] [:error] [pid 60346:tid 60366] [client 57.154.25.166:38989] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phina.php"] [unique_id "acgldnVrXSgLxlxLi9BXpwAAAQ8"]
[Sun Mar 29 03:01:10.566842 2026] [:error] [pid 60346:tid 60359] [client 57.154.25.166:36602] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acgldnVrXSgLxlxLi9BXqQAAAQg"]
[Sun Mar 29 03:01:10.963922 2026] [:error] [pid 11588:tid 11607] [client 57.154.25.166:36211] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acgldghH5525WHuzKfpseAAAAVE"]
[Sun Mar 29 03:01:11.300050 2026] [:error] [pid 11588:tid 11598] [client 57.154.25.166:39009] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acgldwhH5525WHuzKfpseQAAAUg"]
[Sun Mar 29 03:01:11.643446 2026] [:error] [pid 11588:tid 11613] [client 57.154.25.166:39034] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acgldwhH5525WHuzKfpsfAAAAVc"]
[Sun Mar 29 03:01:11.994550 2026] [:error] [pid 60346:tid 60372] [client 57.154.25.166:36172] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs6.php"] [unique_id "acgld3VrXSgLxlxLi9BXrAAAARU"]
[Sun Mar 29 03:01:12.365619 2026] [:error] [pid 60346:tid 60365] [client 57.154.25.166:36560] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs6.php"] [unique_id "acgleHVrXSgLxlxLi9BXrQAAAQ4"]
[Sun Mar 29 03:01:12.695522 2026] [:error] [pid 11588:tid 11604] [client 57.154.25.166:36556] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs6.php"] [unique_id "acgleAhH5525WHuzKfpsgAAAAU4"]
[Sun Mar 29 03:01:13.185788 2026] [:error] [pid 11588:tid 11590] [client 57.154.25.166:36198] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs6.php"] [unique_id "acgleQhH5525WHuzKfpsggAAAUA"]
[Sun Mar 29 03:01:13.506665 2026] [:error] [pid 11588:tid 11600] [client 57.154.25.166:39016] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs7.php"] [unique_id "acgleQhH5525WHuzKfpshAAAAUo"]
[Sun Mar 29 03:01:13.827247 2026] [:error] [pid 39427:tid 39455] [client 57.154.25.166:36208] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs7.php"] [unique_id "acgleVvLf0RDUqcYq-Ze2QAAABc"]
[Sun Mar 29 03:01:14.145326 2026] [:error] [pid 11588:tid 11607] [client 57.154.25.166:38991] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs7.php"] [unique_id "acgleghH5525WHuzKfpshgAAAVE"]
[Sun Mar 29 03:01:14.464303 2026] [:error] [pid 11588:tid 11611] [client 57.154.25.166:39006] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs7.php"] [unique_id "acgleghH5525WHuzKfpsiAAAAVU"]
[Sun Mar 29 03:01:14.797666 2026] [:error] [pid 39427:tid 39451] [client 57.154.25.166:36184] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kbfr.php"] [unique_id "acglelvLf0RDUqcYq-Ze3QAAABM"]
[Sun Mar 29 03:01:15.198825 2026] [:error] [pid 39427:tid 39445] [client 57.154.25.166:36206] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kbfr.php"] [unique_id "acgle1vLf0RDUqcYq-Ze3wAAAA0"]
[Sun Mar 29 03:01:15.538817 2026] [:error] [pid 39427:tid 39436] [client 57.154.25.166:36219] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kbfr.php"] [unique_id "acgle1vLf0RDUqcYq-Ze4gAAAAQ"]
[Sun Mar 29 03:01:15.903013 2026] [:error] [pid 39429:tid 39498] [client 57.154.25.166:38999] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kbfr.php"] [unique_id "acgle08pSj6sqgZaItnyTwAAAIw"]
[Sun Mar 29 03:01:16.260942 2026] [:error] [pid 11588:tid 11594] [client 57.154.25.166:36195] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/595.php"] [unique_id "acglfAhH5525WHuzKfpsiwAAAUQ"]
[Sun Mar 29 03:01:16.580572 2026] [:error] [pid 39429:tid 39493] [client 57.154.25.166:36163] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/595.php"] [unique_id "acglfE8pSj6sqgZaItnyUQAAAIc"]
[Sun Mar 29 03:01:16.955151 2026] [:error] [pid 39429:tid 39497] [client 57.154.25.166:36568] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/595.php"] [unique_id "acglfE8pSj6sqgZaItnyUwAAAIs"]
[Sun Mar 29 03:01:17.293330 2026] [:error] [pid 39429:tid 39508] [client 57.154.25.166:36595] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/595.php"] [unique_id "acglfU8pSj6sqgZaItnyVwAAAJY"]
[Sun Mar 29 03:01:17.611083 2026] [:error] [pid 39429:tid 39499] [client 57.154.25.166:36222] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acglfU8pSj6sqgZaItnyWgAAAI0"]
[Sun Mar 29 03:01:17.983377 2026] [:error] [pid 39427:tid 39433] [client 57.154.25.166:36194] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acglfVvLf0RDUqcYq-Ze5QAAAAE"]
[Sun Mar 29 03:01:18.306517 2026] [:error] [pid 39514:tid 39537] [client 57.154.25.166:36168] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acglfikUyvlQod6qQu22_QAAAMw"]
[Sun Mar 29 03:01:18.639336 2026] [:error] [pid 39429:tid 39504] [client 57.154.25.166:36187] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "acglfk8pSj6sqgZaItnyWwAAAJI"]
[Sun Mar 29 03:01:18.979937 2026] [:error] [pid 39428:tid 39463] [client 57.154.25.166:39032] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gk.php"] [unique_id "acglfqXMrozFMIaP8nINWAAAAEQ"]
[Sun Mar 29 03:01:19.309062 2026] [:error] [pid 11588:tid 11596] [client 57.154.25.166:29293] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gk.php"] [unique_id "acglfwhH5525WHuzKfpsmAAAAUY"]
[Sun Mar 29 03:01:19.652735 2026] [:error] [pid 60346:tid 60368] [client 57.154.25.166:36217] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gk.php"] [unique_id "acglf3VrXSgLxlxLi9BXtwAAARE"]
[Sun Mar 29 03:01:19.972732 2026] [:error] [pid 11588:tid 11601] [client 57.154.25.166:39024] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gk.php"] [unique_id "acglfwhH5525WHuzKfpsmgAAAUs"]
[Sun Mar 29 03:01:20.298706 2026] [:error] [pid 11588:tid 11600] [client 57.154.25.166:38982] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acglgAhH5525WHuzKfpsnQAAAUo"]
[Sun Mar 29 03:01:20.617342 2026] [:error] [pid 11588:tid 11603] [client 57.154.25.166:29279] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acglgAhH5525WHuzKfpsoAAAAU0"]
[Sun Mar 29 03:01:20.934482 2026] [:error] [pid 11588:tid 11594] [client 57.154.25.166:36549] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acglgAhH5525WHuzKfpsogAAAUQ"]
[Sun Mar 29 03:01:21.321746 2026] [:error] [pid 39429:tid 39503] [client 57.154.25.166:36178] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acglgU8pSj6sqgZaItnyXQAAAJE"]
[Sun Mar 29 03:01:21.694371 2026] [:error] [pid 39429:tid 39491] [client 57.154.25.166:29289] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "acglgU8pSj6sqgZaItnyXgAAAIU"]
[Sun Mar 29 03:01:22.137083 2026] [:error] [pid 39429:tid 39505] [client 57.154.25.166:29264] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "acglgk8pSj6sqgZaItnyXwAAAJM"]
[Sun Mar 29 03:01:22.472522 2026] [:error] [pid 11588:tid 11604] [client 57.154.25.166:36216] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "acglgghH5525WHuzKfpspQAAAU4"]
[Sun Mar 29 03:01:22.809089 2026] [:error] [pid 39428:tid 39470] [client 57.154.25.166:36197] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "acglgqXMrozFMIaP8nINWwAAAEs"]
[Sun Mar 29 03:01:23.191332 2026] [:error] [pid 60346:tid 60375] [client 57.154.25.166:36563] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acglg3VrXSgLxlxLi9BXvAAAARg"]
[Sun Mar 29 03:01:23.606303 2026] [:error] [pid 11588:tid 11594] [client 57.154.25.166:29302] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acglgwhH5525WHuzKfpsqwAAAUQ"]
[Sun Mar 29 03:01:23.940117 2026] [:error] [pid 39429:tid 39488] [client 57.154.25.166:39028] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acglg08pSj6sqgZaItnyYgAAAII"]
[Sun Mar 29 03:01:24.266186 2026] [:error] [pid 11588:tid 11604] [client 57.154.25.166:39012] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acglhAhH5525WHuzKfpsrwAAAU4"]
[Sun Mar 29 03:01:24.611696 2026] [:error] [pid 39429:tid 39495] [client 57.154.25.166:39005] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws79.php"] [unique_id "acglhE8pSj6sqgZaItnyYwAAAIk"]
[Sun Mar 29 03:01:25.031390 2026] [:error] [pid 11588:tid 11614] [client 57.154.25.166:36596] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws79.php"] [unique_id "acglhQhH5525WHuzKfpssAAAAVg"]
[Sun Mar 29 03:01:25.375585 2026] [:error] [pid 11588:tid 11594] [client 57.154.25.166:29254] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws79.php"] [unique_id "acglhQhH5525WHuzKfpsswAAAUQ"]
[Sun Mar 29 03:01:25.702753 2026] [:error] [pid 39427:tid 39433] [client 57.154.25.166:36569] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws79.php"] [unique_id "acglhVvLf0RDUqcYq-Ze7wAAAAE"]
[Sun Mar 29 03:01:26.031682 2026] [:error] [pid 39427:tid 39455] [client 57.154.25.166:39001] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "acglhlvLf0RDUqcYq-Ze8AAAABc"]
[Sun Mar 29 03:01:26.400482 2026] [:error] [pid 60346:tid 60374] [client 57.154.25.166:36579] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "acglhnVrXSgLxlxLi9BXvwAAARc"]
[Sun Mar 29 03:01:26.758211 2026] [:error] [pid 39427:tid 39456] [client 57.154.25.166:38980] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "acglhlvLf0RDUqcYq-Ze8wAAABg"]
[Sun Mar 29 03:01:27.109453 2026] [:error] [pid 39428:tid 39480] [client 57.154.25.166:36185] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "acglh6XMrozFMIaP8nINXAAAAFU"]
[Sun Mar 29 03:01:27.426743 2026] [:error] [pid 11588:tid 11592] [client 57.154.25.166:29288] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws50.php"] [unique_id "acglhwhH5525WHuzKfpsuwAAAUI"]
[Sun Mar 29 03:01:27.788952 2026] [:error] [pid 39429:tid 39503] [client 57.154.25.166:36604] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws50.php"] [unique_id "acglh08pSj6sqgZaItnyZgAAAJE"]
[Sun Mar 29 03:01:28.212476 2026] [:error] [pid 60346:tid 60369] [client 57.154.25.166:39000] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws50.php"] [unique_id "acgliHVrXSgLxlxLi9BXwAAAARI"]
[Sun Mar 29 03:01:28.541937 2026] [:error] [pid 39427:tid 39444] [client 57.154.25.166:36203] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws50.php"] [unique_id "acgliFvLf0RDUqcYq-Ze9wAAAAw"]
[Sun Mar 29 03:01:28.899621 2026] [:error] [pid 39429:tid 39490] [client 57.154.25.166:36581] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws44.php"] [unique_id "acgliE8pSj6sqgZaItnyagAAAIQ"]
[Sun Mar 29 03:01:29.270829 2026] [:error] [pid 39427:tid 39450] [client 57.154.25.166:36564] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws44.php"] [unique_id "acgliVvLf0RDUqcYq-Ze-AAAABI"]
[Sun Mar 29 03:01:29.673044 2026] [:error] [pid 60346:tid 60366] [client 57.154.25.166:29263] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws44.php"] [unique_id "acgliXVrXSgLxlxLi9BXwwAAAQ8"]
[Sun Mar 29 03:01:30.023293 2026] [:error] [pid 39429:tid 39489] [client 57.154.25.166:36215] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws44.php"] [unique_id "acglik8pSj6sqgZaItnybAAAAIM"]
[Sun Mar 29 03:01:30.517338 2026] [:error] [pid 11588:tid 11604] [client 57.154.25.166:36565] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws43.php"] [unique_id "acglighH5525WHuzKfpswwAAAU4"]
[Sun Mar 29 03:01:31.249700 2026] [:error] [pid 11588:tid 11607] [client 57.154.25.166:36576] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws43.php"] [unique_id "acgliwhH5525WHuzKfpsyAAAAVE"]
[Sun Mar 29 03:01:31.578664 2026] [:error] [pid 11588:tid 11602] [client 57.154.25.166:36173] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws43.php"] [unique_id "acgliwhH5525WHuzKfpsywAAAUw"]
[Sun Mar 29 03:01:31.900378 2026] [:error] [pid 11588:tid 11596] [client 57.154.25.166:36192] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws43.php"] [unique_id "acgliwhH5525WHuzKfpszQAAAUY"]
[Sun Mar 29 03:01:32.242918 2026] [:error] [pid 11588:tid 11610] [client 57.154.25.166:39007] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acgljAhH5525WHuzKfpszgAAAVQ"]
[Sun Mar 29 03:01:32.571723 2026] [:error] [pid 60346:tid 60375] [client 57.154.25.166:28179] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acgljHVrXSgLxlxLi9BXxwAAARg"]
[Sun Mar 29 03:01:32.886833 2026] [:error] [pid 60346:tid 60371] [client 57.154.25.166:39020] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acgljHVrXSgLxlxLi9BXyQAAARQ"]
[Sun Mar 29 03:01:33.210030 2026] [:error] [pid 60346:tid 60364] [client 57.154.25.166:36559] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acgljXVrXSgLxlxLi9BXywAAAQ0"]
[Sun Mar 29 03:01:33.553135 2026] [:error] [pid 60346:tid 60362] [client 57.154.25.166:36582] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws40.php"] [unique_id "acgljXVrXSgLxlxLi9BXzgAAAQs"]
[Sun Mar 29 03:01:33.883354 2026] [:error] [pid 39514:tid 39531] [client 57.154.25.166:29272] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws40.php"] [unique_id "acgljSkUyvlQod6qQu23BAAAAMY"]
[Sun Mar 29 03:01:34.199616 2026] [:error] [pid 60346:tid 60360] [client 57.154.25.166:36204] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws40.php"] [unique_id "acgljnVrXSgLxlxLi9BX0AAAAQk"]
[Sun Mar 29 03:01:34.518813 2026] [:error] [pid 39429:tid 39499] [client 57.154.25.166:36571] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws40.php"] [unique_id "acgljk8pSj6sqgZaItnycgAAAI0"]
[Sun Mar 29 03:01:34.900616 2026] [:error] [pid 11588:tid 11603] [client 57.154.25.166:28210] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws36.php"] [unique_id "acgljghH5525WHuzKfps1QAAAU0"]
[Sun Mar 29 03:01:35.226550 2026] [:error] [pid 60346:tid 60355] [client 57.154.25.166:36594] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws36.php"] [unique_id "acglj3VrXSgLxlxLi9BX0gAAAQQ"]
[Sun Mar 29 03:01:35.546961 2026] [:error] [pid 39429:tid 39494] [client 57.154.25.166:36592] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws36.php"] [unique_id "acglj08pSj6sqgZaItnydAAAAIg"]
[Sun Mar 29 03:01:35.872507 2026] [:error] [pid 60346:tid 60353] [client 57.154.25.166:36561] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws36.php"] [unique_id "acglj3VrXSgLxlxLi9BX0wAAAQI"]
[Sun Mar 29 03:01:36.217274 2026] [:error] [pid 11588:tid 11608] [client 57.154.25.166:39014] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vwxbi.php"] [unique_id "acglkAhH5525WHuzKfps1gAAAVI"]
[Sun Mar 29 03:01:36.554498 2026] [:error] [pid 11588:tid 11595] [client 57.154.25.166:29270] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vwxbi.php"] [unique_id "acglkAhH5525WHuzKfps2AAAAUU"]
[Sun Mar 29 03:01:36.886334 2026] [:error] [pid 39514:tid 39542] [client 57.154.25.166:29280] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vwxbi.php"] [unique_id "acglkCkUyvlQod6qQu23DgAAANE"]
[Sun Mar 29 03:01:37.209545 2026] [:error] [pid 60346:tid 60358] [client 57.154.25.166:29269] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vwxbi.php"] [unique_id "acglkXVrXSgLxlxLi9BX1QAAAQc"]
[Sun Mar 29 03:01:37.533166 2026] [:error] [pid 39428:tid 39474] [client 57.154.25.166:29249] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellerr.php"] [unique_id "acglkaXMrozFMIaP8nINZQAAAE8"]
[Sun Mar 29 03:01:37.888263 2026] [:error] [pid 60346:tid 60354] [client 57.154.25.166:36220] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellerr.php"] [unique_id "acglkXVrXSgLxlxLi9BX2gAAAQM"]
[Sun Mar 29 03:01:38.207938 2026] [:error] [pid 39514:tid 39524] [client 57.154.25.166:29305] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellerr.php"] [unique_id "acglkikUyvlQod6qQu23EAAAAMA"]
[Sun Mar 29 03:01:38.530196 2026] [:error] [pid 60346:tid 60362] [client 57.154.25.166:39035] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellerr.php"] [unique_id "acglknVrXSgLxlxLi9BX3QAAAQs"]
[Sun Mar 29 03:01:38.902294 2026] [:error] [pid 11588:tid 11608] [client 57.154.25.166:36180] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acglkghH5525WHuzKfps4AAAAVI"]
[Sun Mar 29 03:01:39.334723 2026] [:error] [pid 11588:tid 11601] [client 57.154.25.166:29296] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acglkwhH5525WHuzKfps4QAAAUs"]
[Sun Mar 29 03:01:39.662151 2026] [:error] [pid 60346:tid 60356] [client 57.154.25.166:36601] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acglk3VrXSgLxlxLi9BX4wAAAQU"]
[Sun Mar 29 03:01:39.991913 2026] [:error] [pid 39514:tid 39537] [client 57.154.25.166:29300] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acglkykUyvlQod6qQu23EgAAAMw"]
[Sun Mar 29 03:01:40.306227 2026] [:error] [pid 60346:tid 60352] [client 57.154.25.166:38996] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cvz.php"] [unique_id "acgllHVrXSgLxlxLi9BX5AAAAQE"]
[Sun Mar 29 03:01:40.659672 2026] [:error] [pid 39427:tid 39450] [client 57.154.25.166:36174] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cvz.php"] [unique_id "acgllFvLf0RDUqcYq-ZfBgAAABI"]
[Sun Mar 29 03:01:40.996066 2026] [:error] [pid 60346:tid 60354] [client 57.154.25.166:36562] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cvz.php"] [unique_id "acgllHVrXSgLxlxLi9BX5QAAAQM"]
[Sun Mar 29 03:01:41.350408 2026] [:error] [pid 39427:tid 39441] [client 57.154.25.166:36593] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cvz.php"] [unique_id "acgllVvLf0RDUqcYq-ZfCAAAAAk"]
[Sun Mar 29 03:01:41.736718 2026] [:error] [pid 60346:tid 60360] [client 57.154.25.166:28218] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acgllXVrXSgLxlxLi9BX6wAAAQk"]
[Sun Mar 29 03:01:42.122547 2026] [:error] [pid 60346:tid 60351] [client 57.154.25.166:36578] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acgllnVrXSgLxlxLi9BX7wAAAQA"]
[Sun Mar 29 03:01:42.516720 2026] [:error] [pid 60346:tid 60366] [client 57.154.25.166:38997] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acgllnVrXSgLxlxLi9BX8wAAAQ8"]
[Sun Mar 29 03:01:42.895616 2026] [:error] [pid 60346:tid 60372] [client 57.154.25.166:28220] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acgllnVrXSgLxlxLi9BX9QAAARU"]
[Sun Mar 29 03:01:43.232101 2026] [:error] [pid 11588:tid 11605] [client 57.154.25.166:29257] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aee.php"] [unique_id "acgllwhH5525WHuzKfps6QAAAU8"]
[Sun Mar 29 03:01:43.563823 2026] [:error] [pid 11588:tid 11591] [client 57.154.25.166:29256] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aee.php"] [unique_id "acgllwhH5525WHuzKfps6wAAAUE"]
[Sun Mar 29 03:01:43.878802 2026] [:error] [pid 11588:tid 11601] [client 57.154.25.166:36183] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aee.php"] [unique_id "acgllwhH5525WHuzKfps7QAAAUs"]
[Sun Mar 29 03:01:44.490092 2026] [:error] [pid 39429:tid 39509] [client 57.154.25.166:29278] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aee.php"] [unique_id "acglmE8pSj6sqgZaItnyeQAAAJc"]
[Sun Mar 29 03:01:45.266217 2026] [:error] [pid 60346:tid 60375] [client 57.154.25.166:28204] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sweg.php"] [unique_id "acglmXVrXSgLxlxLi9BX_wAAARg"]
[Sun Mar 29 03:01:45.605511 2026] [:error] [pid 11588:tid 11610] [client 57.154.25.166:36201] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sweg.php"] [unique_id "acglmQhH5525WHuzKfps-AAAAVQ"]
[Sun Mar 29 03:01:46.114947 2026] [:error] [pid 60346:tid 60361] [client 57.154.25.166:36546] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sweg.php"] [unique_id "acglmnVrXSgLxlxLi9BYAAAAAQo"]
[Sun Mar 29 03:01:46.462045 2026] [:error] [pid 11588:tid 11600] [client 57.154.25.166:36575] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sweg.php"] [unique_id "acglmghH5525WHuzKfps_QAAAUo"]
[Sun Mar 29 03:01:46.979884 2026] [:error] [pid 60346:tid 60373] [client 57.154.25.166:36597] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "acglmnVrXSgLxlxLi9BYAwAAARY"]
[Sun Mar 29 03:01:47.324000 2026] [:error] [pid 39429:tid 39510] [client 57.154.25.166:36584] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "acglm08pSj6sqgZaItnygAAAAJg"]
[Sun Mar 29 03:01:47.776634 2026] [:error] [pid 39429:tid 39499] [client 57.154.25.166:36605] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "acglm08pSj6sqgZaItnygwAAAI0"]
[Sun Mar 29 03:01:48.206229 2026] [:error] [pid 11588:tid 11591] [client 57.154.25.166:29303] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "acglnAhH5525WHuzKfptAgAAAUE"]
[Sun Mar 29 03:01:48.538334 2026] [:error] [pid 11588:tid 11596] [client 57.154.25.166:36600] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "acglnAhH5525WHuzKfptBAAAAUY"]
[Sun Mar 29 03:01:48.886200 2026] [:error] [pid 11588:tid 11593] [client 57.154.25.166:38986] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "acglnAhH5525WHuzKfptBQAAAUM"]
[Sun Mar 29 03:01:49.261312 2026] [:error] [pid 39427:tid 39453] [client 57.154.25.166:28177] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "acglnVvLf0RDUqcYq-ZfEgAAABU"]
[Sun Mar 29 03:01:49.623360 2026] [:error] [pid 39429:tid 39508] [client 57.154.25.166:38992] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "acglnU8pSj6sqgZaItnyhgAAAJY"]
[Sun Mar 29 03:01:50.009244 2026] [:error] [pid 39428:tid 39468] [client 57.154.25.166:39013] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eee.php"] [unique_id "acglnqXMrozFMIaP8nINZwAAAEk"]
[Sun Mar 29 03:01:50.337586 2026] [:error] [pid 39428:tid 39465] [client 57.154.25.166:28174] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eee.php"] [unique_id "acglnqXMrozFMIaP8nINaAAAAEY"]
[Sun Mar 29 03:01:51.355393 2026] [:error] [pid 39427:tid 39440] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/eee.php
[Sun Mar 29 03:01:51.514823 2026] [:error] [pid 39427:tid 39449] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Sun Mar 29 03:01:51.676091 2026] [:error] [pid 39427:tid 39453] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/xda.php
[Sun Mar 29 03:01:51.836491 2026] [:error] [pid 39427:tid 39435] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/roter.php
[Sun Mar 29 03:01:52.003206 2026] [:error] [pid 39427:tid 39455] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/size.php
[Sun Mar 29 03:01:52.163734 2026] [:error] [pid 39427:tid 39445] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/save.php
[Sun Mar 29 03:01:52.324171 2026] [:error] [pid 39427:tid 39452] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sun Mar 29 03:01:52.484146 2026] [:error] [pid 39427:tid 39439] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/n1GiO.php
[Sun Mar 29 03:01:52.644710 2026] [:error] [pid 39427:tid 39442] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/pLdK1.php
[Sun Mar 29 03:01:52.838874 2026] [:error] [pid 39427:tid 39456] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/llb1J.php
[Sun Mar 29 03:01:53.031917 2026] [:error] [pid 39427:tid 39451] [client 57.154.25.166:28216] File does not exist: /usr/local/apache/htdocs/suspended-page/jeZDu.php
[Sun Mar 29 03:01:53.198915 2026] [:error] [pid 39427:tid 39434] [client 57.154.25.166:28216] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "acgloVvLf0RDUqcYq-ZfKgAAAAI"]
[Sun Mar 29 03:01:53.513599 2026] [:error] [pid 39429:tid 39506] [client 57.154.25.166:36166] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "acgloU8pSj6sqgZaItnyiwAAAJQ"]
[Sun Mar 29 03:01:53.889999 2026] [:error] [pid 39429:tid 39499] [client 57.154.25.166:39026] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "acgloU8pSj6sqgZaItnyjQAAAI0"]
[Sun Mar 29 03:01:54.256275 2026] [:error] [pid 11588:tid 11603] [client 57.154.25.166:29268] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "acgloghH5525WHuzKfptFwAAAU0"]
[Sun Mar 29 03:01:54.663641 2026] [:error] [pid 11588:tid 11614] [client 57.154.25.166:29291] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bfuKK.php"] [unique_id "acgloghH5525WHuzKfptGwAAAVg"]
[Sun Mar 29 03:01:54.991713 2026] [:error] [pid 39427:tid 39455] [client 57.154.25.166:36553] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bfuKK.php"] [unique_id "acglolvLf0RDUqcYq-ZfLQAAABc"]
[Sun Mar 29 03:01:55.319857 2026] [:error] [pid 39429:tid 39502] [client 57.154.25.166:29294] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bfuKK.php"] [unique_id "acglo08pSj6sqgZaItnyjwAAAJA"]
[Sun Mar 29 03:01:55.635982 2026] [:error] [pid 39514:tid 39531] [client 57.154.25.166:29251] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bfuKK.php"] [unique_id "acgloykUyvlQod6qQu23GgAAAMY"]
[Sun Mar 29 03:01:55.969892 2026] [:error] [pid 39429:tid 39508] [client 57.154.25.166:36164] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/OpVq6.php"] [unique_id "acglo08pSj6sqgZaItnykAAAAJY"]
[Sun Mar 29 03:01:56.288956 2026] [:error] [pid 39428:tid 39482] [client 57.154.25.166:29258] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/OpVq6.php"] [unique_id "acglpKXMrozFMIaP8nINawAAAFc"]
[Sun Mar 29 03:01:56.607988 2026] [:error] [pid 39428:tid 39464] [client 57.154.25.166:36557] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/OpVq6.php"] [unique_id "acglpKXMrozFMIaP8nINbgAAAEU"]
[Sun Mar 29 03:01:56.929314 2026] [:error] [pid 39428:tid 39462] [client 57.154.25.166:28166] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/OpVq6.php"] [unique_id "acglpKXMrozFMIaP8nINbwAAAEM"]
[Sun Mar 29 03:01:57.246585 2026] [:error] [pid 60346:tid 60354] [client 57.154.25.166:38995] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Q73BO.php"] [unique_id "acglpXVrXSgLxlxLi9BYDwAAAQM"]
[Sun Mar 29 03:01:57.599325 2026] [:error] [pid 39427:tid 39454] [client 57.154.25.166:28164] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Q73BO.php"] [unique_id "acglpVvLf0RDUqcYq-ZfLwAAABY"]
[Sun Mar 29 03:01:57.926531 2026] [:error] [pid 60346:tid 60370] [client 57.154.25.166:18693] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Q73BO.php"] [unique_id "acglpXVrXSgLxlxLi9BYEgAAARM"]
[Sun Mar 29 03:01:58.253085 2026] [:error] [pid 60346:tid 60362] [client 57.154.25.166:36585] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Q73BO.php"] [unique_id "acglpnVrXSgLxlxLi9BYFQAAAQs"]
[Sun Mar 29 03:01:58.576506 2026] [:error] [pid 39427:tid 39456] [client 57.154.25.166:39002] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rmpoa.php"] [unique_id "acglplvLf0RDUqcYq-ZfNgAAABg"]
[Sun Mar 29 03:01:58.909976 2026] [:error] [pid 11588:tid 11602] [client 57.154.25.166:28180] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rmpoa.php"] [unique_id "acglpghH5525WHuzKfptIAAAAUw"]
[Sun Mar 29 03:02:00.117694 2026] [:error] [pid 39428:tid 39459] [client 57.154.25.166:29248] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rmpoa.php"] [unique_id "acglqKXMrozFMIaP8nINcwAAAEA"]
[Sun Mar 29 03:02:00.486552 2026] [:error] [pid 39427:tid 39436] [client 57.154.25.166:29253] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rmpoa.php"] [unique_id "acglqFvLf0RDUqcYq-ZfOAAAAAQ"]
[Sun Mar 29 03:02:00.814141 2026] [:error] [pid 60346:tid 60357] [client 57.154.25.166:39027] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acglqHVrXSgLxlxLi9BYHwAAAQY"]
[Sun Mar 29 03:02:01.140551 2026] [:error] [pid 60346:tid 60362] [client 57.154.25.166:39037] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acglqXVrXSgLxlxLi9BYIgAAAQs"]
[Sun Mar 29 03:02:01.525668 2026] [:error] [pid 60346:tid 60364] [client 57.154.25.166:39027] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acglqXVrXSgLxlxLi9BYJgAAAQ0"]
[Sun Mar 29 03:02:01.851839 2026] [:error] [pid 60346:tid 60365] [client 57.154.25.166:36205] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acglqXVrXSgLxlxLi9BYJwAAAQ4"]
[Sun Mar 29 03:02:02.171179 2026] [:error] [pid 39428:tid 39477] [client 57.154.25.166:29306] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acglqqXMrozFMIaP8nINdQAAAFI"]
[Sun Mar 29 03:02:02.531094 2026] [:error] [pid 11588:tid 11598] [client 57.154.25.166:29283] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acglqghH5525WHuzKfptKQAAAUg"]
[Sun Mar 29 03:02:02.878726 2026] [:error] [pid 11588:tid 11593] [client 57.154.25.166:36177] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acglqghH5525WHuzKfptKwAAAUM"]
[Sun Mar 29 03:02:03.200144 2026] [:error] [pid 39514:tid 39544] [client 57.154.25.166:38998] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acglqykUyvlQod6qQu23HQAAANM"]
[Sun Mar 29 03:02:03.518825 2026] [:error] [pid 11588:tid 11601] [client 57.154.25.166:36606] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acglqwhH5525WHuzKfptLAAAAUs"]
[Sun Mar 29 03:02:03.844469 2026] [:error] [pid 39428:tid 39459] [client 57.154.25.166:29259] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acglq6XMrozFMIaP8nINegAAAEA"]
[Sun Mar 29 03:02:04.164583 2026] [:error] [pid 60346:tid 60355] [client 57.154.25.166:28190] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acglrHVrXSgLxlxLi9BYKQAAAQQ"]
[Sun Mar 29 03:02:04.486345 2026] [:error] [pid 60346:tid 60370] [client 57.154.25.166:29274] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acglrHVrXSgLxlxLi9BYKgAAARM"]
[Sun Mar 29 03:02:04.799056 2026] [:error] [pid 11588:tid 11606] [client 57.154.25.166:36209] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acglrAhH5525WHuzKfptMAAAAVA"]
[Sun Mar 29 03:02:05.145750 2026] [:error] [pid 11588:tid 11609] [client 57.154.25.166:28167] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acglrQhH5525WHuzKfptMwAAAVM"]
[Sun Mar 29 03:02:05.463270 2026] [:error] [pid 60346:tid 60352] [client 57.154.25.166:36547] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acglrXVrXSgLxlxLi9BYLQAAAQE"]
[Sun Mar 29 03:02:05.778723 2026] [:error] [pid 60346:tid 60351] [client 57.154.25.166:36207] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acglrXVrXSgLxlxLi9BYLgAAAQA"]
[Sun Mar 29 03:02:06.097397 2026] [:error] [pid 39428:tid 39478] [client 57.154.25.166:28202] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "acglrqXMrozFMIaP8nINfAAAAFM"]
[Sun Mar 29 03:02:06.419915 2026] [:error] [pid 60346:tid 60363] [client 57.154.25.166:29286] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "acglrnVrXSgLxlxLi9BYMwAAAQw"]
[Sun Mar 29 03:02:06.764014 2026] [:error] [pid 11588:tid 11597] [client 57.154.25.166:28219] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "acglrghH5525WHuzKfptNwAAAUc"]
[Sun Mar 29 03:02:07.098562 2026] [:error] [pid 39514:tid 39530] [client 57.154.25.166:18704] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "acglrykUyvlQod6qQu23IgAAAMU"]
[Sun Mar 29 03:02:07.415982 2026] [:error] [pid 39514:tid 39549] [client 57.154.25.166:29304] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acglrykUyvlQod6qQu23IwAAANc"]
[Sun Mar 29 03:02:07.754947 2026] [:error] [pid 39429:tid 39493] [client 57.154.25.166:28173] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acglr08pSj6sqgZaItnypAAAAIc"]
[Sun Mar 29 03:02:08.094963 2026] [:error] [pid 60346:tid 60366] [client 57.154.25.166:28187] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acglsHVrXSgLxlxLi9BYNQAAAQ8"]
[Sun Mar 29 03:02:08.423544 2026] [:error] [pid 11588:tid 11603] [client 57.154.25.166:29307] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acglsAhH5525WHuzKfptPwAAAU0"]
[Sun Mar 29 03:02:08.739017 2026] [:error] [pid 39428:tid 39483] [client 57.154.25.166:29267] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "acglsKXMrozFMIaP8nINfgAAAFg"]
[Sun Mar 29 03:02:09.071376 2026] [:error] [pid 39428:tid 39471] [client 57.154.25.166:29260] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "acglsaXMrozFMIaP8nINgAAAAEw"]
[Sun Mar 29 03:02:09.404558 2026] [:error] [pid 39429:tid 39503] [client 57.154.25.166:36191] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "acglsU8pSj6sqgZaItnypgAAAJE"]
[Sun Mar 29 03:02:09.725669 2026] [:error] [pid 11588:tid 11607] [client 57.154.25.166:28162] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "acglsQhH5525WHuzKfptRQAAAVE"]
[Sun Mar 29 03:02:10.050636 2026] [:error] [pid 39429:tid 39510] [client 57.154.25.166:36598] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acglsk8pSj6sqgZaItnypwAAAJg"]
[Sun Mar 29 03:02:10.399436 2026] [:error] [pid 11588:tid 11613] [client 57.154.25.166:36169] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acglsghH5525WHuzKfptSQAAAVc"]
[Sun Mar 29 03:02:10.727984 2026] [:error] [pid 39427:tid 39433] [client 57.154.25.166:28172] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acglslvLf0RDUqcYq-ZfQQAAAAE"]
[Sun Mar 29 03:02:11.047950 2026] [:error] [pid 11588:tid 11593] [client 57.154.25.166:28222] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acglswhH5525WHuzKfptTQAAAUM"]
[Sun Mar 29 03:02:11.427371 2026] [:error] [pid 11588:tid 11610] [client 57.154.25.166:28197] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acglswhH5525WHuzKfptTwAAAVQ"]
[Sun Mar 29 03:02:11.757832 2026] [:error] [pid 39427:tid 39450] [client 57.154.25.166:29287] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acgls1vLf0RDUqcYq-ZfRgAAABI"]
[Sun Mar 29 03:02:12.170857 2026] [:error] [pid 39428:tid 39466] [client 57.154.25.166:28171] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acgltKXMrozFMIaP8nINhAAAAEc"]
[Sun Mar 29 03:02:12.491333 2026] [:error] [pid 11588:tid 11600] [client 57.154.25.166:36607] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acgltAhH5525WHuzKfptUwAAAUo"]
[Sun Mar 29 03:02:12.823616 2026] [:error] [pid 39427:tid 39448] [client 57.154.25.166:18697] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "acgltFvLf0RDUqcYq-ZfTAAAABA"]
[Sun Mar 29 03:02:13.162922 2026] [:error] [pid 11588:tid 11613] [client 57.154.25.166:16418] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "acgltQhH5525WHuzKfptVQAAAVc"]
[Sun Mar 29 03:02:13.482598 2026] [:error] [pid 39429:tid 39499] [client 57.154.25.166:36580] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "acgltU8pSj6sqgZaItnyqgAAAI0"]
[Sun Mar 29 03:02:13.805034 2026] [:error] [pid 60346:tid 60355] [client 57.154.25.166:28182] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "acgltXVrXSgLxlxLi9BYNwAAAQQ"]
[Sun Mar 29 03:02:14.120917 2026] [:error] [pid 39429:tid 39486] [client 57.154.25.166:38990] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acgltk8pSj6sqgZaItnyrQAAAIA"]
[Sun Mar 29 03:02:14.438698 2026] [:error] [pid 60346:tid 60364] [client 57.154.25.166:18708] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acgltnVrXSgLxlxLi9BYOgAAAQ0"]
[Sun Mar 29 03:02:14.817033 2026] [:error] [pid 60346:tid 60375] [client 57.154.25.166:18732] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acgltnVrXSgLxlxLi9BYPwAAARg"]
[Sun Mar 29 03:02:15.188765 2026] [:error] [pid 39514:tid 39549] [client 57.154.25.166:29255] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acgltykUyvlQod6qQu23KwAAANc"]
[Sun Mar 29 03:02:15.557875 2026] [:error] [pid 11588:tid 11590] [client 57.154.25.166:28198] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acgltwhH5525WHuzKfptWAAAAUA"]
[Sun Mar 29 03:02:15.895632 2026] [:error] [pid 60346:tid 60359] [client 57.154.25.166:39004] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acglt3VrXSgLxlxLi9BYRwAAAQg"]
[Sun Mar 29 03:02:16.216505 2026] [:error] [pid 11588:tid 11608] [client 57.154.25.166:28175] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acgluAhH5525WHuzKfptXQAAAVI"]
[Sun Mar 29 03:02:16.539777 2026] [:error] [pid 39427:tid 39454] [client 57.154.25.166:29284] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acgluFvLf0RDUqcYq-ZfUgAAABY"]
[Sun Mar 29 03:02:16.874865 2026] [:error] [pid 39514:tid 39540] [client 57.154.25.166:29295] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccu.php"] [unique_id "acgluCkUyvlQod6qQu23LAAAAM8"]
[Sun Mar 29 03:02:17.202783 2026] [:error] [pid 39429:tid 39509] [client 57.154.25.166:29301] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccu.php"] [unique_id "acgluU8pSj6sqgZaItnyrwAAAJc"]
[Sun Mar 29 03:02:18.336770 2026] [:error] [pid 39427:tid 39440] [client 57.154.25.166:18730] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccu.php"] [unique_id "acglulvLf0RDUqcYq-ZfVgAAAAg"]
[Sun Mar 29 03:02:18.666149 2026] [:error] [pid 11588:tid 11593] [client 57.154.25.166:29285] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccu.php"] [unique_id "acglughH5525WHuzKfptYgAAAUM"]
[Sun Mar 29 03:02:19.053931 2026] [:error] [pid 39427:tid 39446] [client 57.154.25.166:18735] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acglu1vLf0RDUqcYq-ZfVwAAAA4"]
[Sun Mar 29 03:02:19.376613 2026] [:error] [pid 60346:tid 60368] [client 57.154.25.166:36586] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acglu3VrXSgLxlxLi9BYSwAAARE"]
[Sun Mar 29 03:02:19.733982 2026] [:error] [pid 60346:tid 60372] [client 57.154.25.166:29265] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acglu3VrXSgLxlxLi9BYTAAAARU"]
[Sun Mar 29 03:02:20.090109 2026] [:error] [pid 39427:tid 39437] [client 57.154.25.166:28206] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acglvFvLf0RDUqcYq-ZfWQAAAAU"]
[Sun Mar 29 03:02:20.491789 2026] [:error] [pid 60346:tid 60357] [client 57.154.25.166:36181] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acglvHVrXSgLxlxLi9BYTgAAAQY"]
[Sun Mar 29 03:02:20.853977 2026] [:error] [pid 39428:tid 39482] [client 57.154.25.166:29310] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acglvKXMrozFMIaP8nINiwAAAFc"]
[Sun Mar 29 03:02:21.379991 2026] [:error] [pid 39428:tid 39474] [client 57.154.25.166:28207] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acglvaXMrozFMIaP8nINjQAAAE8"]
[Sun Mar 29 03:02:22.166957 2026] [:error] [pid 39514:tid 39542] [client 57.154.25.166:36590] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acglvikUyvlQod6qQu23NQAAANE"]
[Sun Mar 29 03:02:22.494302 2026] [:error] [pid 39429:tid 39502] [client 57.154.25.166:36587] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dragonshell.php"] [unique_id "acglvk8pSj6sqgZaItnyuwAAAJA"]
[Sun Mar 29 03:02:22.862904 2026] [:error] [pid 39429:tid 39491] [client 57.154.25.166:38984] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dragonshell.php"] [unique_id "acglvk8pSj6sqgZaItnyvAAAAIU"]
[Sun Mar 29 03:02:23.191011 2026] [:error] [pid 39427:tid 39452] [client 57.154.25.166:39029] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dragonshell.php"] [unique_id "acglv1vLf0RDUqcYq-ZfYAAAABQ"]
[Sun Mar 29 03:02:23.557364 2026] [:error] [pid 39427:tid 39455] [client 57.154.25.166:28170] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dragonshell.php"] [unique_id "acglv1vLf0RDUqcYq-ZfYQAAABc"]
[Sun Mar 29 03:02:23.881726 2026] [:error] [pid 11588:tid 11591] [client 57.154.25.166:36552] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acglvwhH5525WHuzKfptbAAAAUE"]
[Sun Mar 29 03:02:24.252857 2026] [:error] [pid 11588:tid 11608] [client 57.154.25.166:36554] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acglwAhH5525WHuzKfptcQAAAVI"]
[Sun Mar 29 03:02:24.633388 2026] [:error] [pid 11588:tid 11601] [client 57.154.25.166:28169] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acglwAhH5525WHuzKfptcwAAAUs"]
[Sun Mar 29 03:02:24.962613 2026] [:error] [pid 11588:tid 11602] [client 57.154.25.166:39021] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acglwAhH5525WHuzKfptdQAAAUw"]
[Sun Mar 29 03:02:25.280512 2026] [:error] [pid 39429:tid 39508] [client 57.154.25.166:18712] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/caiij.php"] [unique_id "acglwU8pSj6sqgZaItnyvwAAAJY"]
[Sun Mar 29 03:02:25.616762 2026] [:error] [pid 39429:tid 39489] [client 57.154.25.166:28185] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/caiij.php"] [unique_id "acglwU8pSj6sqgZaItnywQAAAIM"]
[Sun Mar 29 03:02:25.942498 2026] [:error] [pid 39429:tid 39507] [client 57.154.25.166:18703] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/caiij.php"] [unique_id "acglwU8pSj6sqgZaItnywgAAAJU"]
[Sun Mar 29 03:02:26.264647 2026] [:error] [pid 39429:tid 39499] [client 57.154.25.166:36573] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/caiij.php"] [unique_id "acglwk8pSj6sqgZaItnywwAAAI0"]
[Sun Mar 29 03:02:26.648030 2026] [:error] [pid 11588:tid 11604] [client 57.154.25.166:28183] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gel4y.php"] [unique_id "acglwghH5525WHuzKfptfQAAAU4"]
[Sun Mar 29 03:02:26.983504 2026] [:error] [pid 60346:tid 60351] [client 57.154.25.166:29311] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gel4y.php"] [unique_id "acglwnVrXSgLxlxLi9BYVQAAAQA"]
[Sun Mar 29 03:02:27.308462 2026] [:error] [pid 39427:tid 39450] [client 57.154.25.166:29275] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gel4y.php"] [unique_id "acglw1vLf0RDUqcYq-ZfZwAAABI"]
[Sun Mar 29 03:02:27.665059 2026] [:error] [pid 11588:tid 11602] [client 57.154.25.166:36591] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gel4y.php"] [unique_id "acglwwhH5525WHuzKfptgQAAAUw"]
[Sun Mar 29 03:02:28.045727 2026] [:error] [pid 39428:tid 39460] [client 57.154.25.166:36574] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uxijj.php"] [unique_id "acglxKXMrozFMIaP8nINlAAAAEE"]
[Sun Mar 29 03:02:28.369584 2026] [:error] [pid 11588:tid 11598] [client 57.154.25.166:18707] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uxijj.php"] [unique_id "acglxAhH5525WHuzKfpthQAAAUg"]
[Sun Mar 29 03:02:28.697200 2026] [:error] [pid 11588:tid 11595] [client 57.154.25.166:39039] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uxijj.php"] [unique_id "acglxAhH5525WHuzKfptiAAAAUU"]
[Sun Mar 29 03:02:29.026696 2026] [:error] [pid 39514:tid 39525] [client 57.154.25.166:36599] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uxijj.php"] [unique_id "acglxSkUyvlQod6qQu23PAAAAME"]
[Sun Mar 29 03:02:29.416494 2026] [:error] [pid 39427:tid 39432] [client 57.154.25.166:18744] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rkiea.php"] [unique_id "acglxVvLf0RDUqcYq-ZfaQAAAAA"]
[Sun Mar 29 03:02:29.752557 2026] [:error] [pid 11588:tid 11601] [client 57.154.25.166:28176] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rkiea.php"] [unique_id "acglxQhH5525WHuzKfptigAAAUs"]
[Sun Mar 29 03:02:30.083443 2026] [:error] [pid 39429:tid 39507] [client 57.154.25.166:18701] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rkiea.php"] [unique_id "acglxk8pSj6sqgZaItnyzwAAAJU"]
[Sun Mar 29 03:02:30.499465 2026] [:error] [pid 39429:tid 39491] [client 57.154.25.166:28203] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rkiea.php"] [unique_id "acglxk8pSj6sqgZaItny0QAAAIU"]
[Sun Mar 29 03:02:30.819486 2026] [:error] [pid 39428:tid 39464] [client 57.154.25.166:29290] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/resp.php"] [unique_id "acglxqXMrozFMIaP8nINlwAAAEU"]
[Sun Mar 29 03:02:31.157380 2026] [:error] [pid 60346:tid 60369] [client 57.154.25.166:28195] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/resp.php"] [unique_id "acglx3VrXSgLxlxLi9BYWgAAARI"]
[Sun Mar 29 03:02:31.477470 2026] [:error] [pid 11588:tid 11599] [client 57.154.25.166:18738] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/resp.php"] [unique_id "acglxwhH5525WHuzKfptkAAAAUk"]
[Sun Mar 29 03:02:31.794691 2026] [:error] [pid 39427:tid 39451] [client 57.154.25.166:36545] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/resp.php"] [unique_id "acglx1vLf0RDUqcYq-ZfbQAAABM"]
[Sun Mar 29 03:02:32.110564 2026] [:error] [pid 39427:tid 39447] [client 57.154.25.166:28209] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lanou.php"] [unique_id "acglyFvLf0RDUqcYq-ZfbwAAAA8"]
[Sun Mar 29 03:02:32.457501 2026] [:error] [pid 11588:tid 11597] [client 57.154.25.166:16420] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lanou.php"] [unique_id "acglyAhH5525WHuzKfptlAAAAUc"]
[Sun Mar 29 03:02:32.807868 2026] [:error] [pid 60346:tid 60361] [client 57.154.25.166:18747] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lanou.php"] [unique_id "acglyHVrXSgLxlxLi9BYXwAAAQo"]
[Sun Mar 29 03:02:33.133138 2026] [:error] [pid 60346:tid 60359] [client 57.154.25.166:28193] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lanou.php"] [unique_id "acglyXVrXSgLxlxLi9BYYwAAAQg"]
[Sun Mar 29 03:02:33.455648 2026] [:error] [pid 60346:tid 60356] [client 57.154.25.166:18710] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eursi.php"] [unique_id "acglyXVrXSgLxlxLi9BYZQAAAQU"]
[Sun Mar 29 03:02:33.813250 2026] [:error] [pid 11588:tid 11612] [client 57.154.25.166:16384] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eursi.php"] [unique_id "acglyQhH5525WHuzKfptlQAAAVY"]
[Sun Mar 29 03:02:34.197808 2026] [:error] [pid 60346:tid 60353] [client 57.154.25.166:29282] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eursi.php"] [unique_id "acglynVrXSgLxlxLi9BYbgAAAQI"]
[Sun Mar 29 03:02:34.527517 2026] [:error] [pid 11588:tid 11596] [client 57.154.25.166:28178] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eursi.php"] [unique_id "acglyghH5525WHuzKfptlgAAAUY"]
[Sun Mar 29 03:02:34.851604 2026] [:error] [pid 11588:tid 11605] [client 57.154.25.166:16390] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pas2.php"] [unique_id "acglyghH5525WHuzKfptmAAAAU8"]
[Sun Mar 29 03:02:35.170082 2026] [:error] [pid 39427:tid 39445] [client 57.154.25.166:28194] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pas2.php"] [unique_id "acgly1vLf0RDUqcYq-ZfcAAAAA0"]
[Sun Mar 29 03:02:35.492888 2026] [:error] [pid 11588:tid 11601] [client 57.154.25.166:18714] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pas2.php"] [unique_id "acglywhH5525WHuzKfptmwAAAUs"]
[Sun Mar 29 03:02:35.826419 2026] [:error] [pid 11588:tid 11594] [client 57.154.25.166:36588] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pas2.php"] [unique_id "acglywhH5525WHuzKfptoAAAAUQ"]
[Sun Mar 29 03:02:36.168072 2026] [:error] [pid 11588:tid 11595] [client 57.154.25.166:29250] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/schal.php"] [unique_id "acglzAhH5525WHuzKfptpAAAAUU"]
[Sun Mar 29 03:02:36.484665 2026] [:error] [pid 11588:tid 11614] [client 57.154.25.166:16401] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/schal.php"] [unique_id "acglzAhH5525WHuzKfptqAAAAVg"]
[Sun Mar 29 03:02:36.800651 2026] [:error] [pid 39428:tid 39461] [client 57.154.25.166:18740] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/schal.php"] [unique_id "acglzKXMrozFMIaP8nINmwAAAEI"]
[Sun Mar 29 03:02:37.136549 2026] [:error] [pid 39514:tid 39536] [client 57.154.25.166:28205] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/schal.php"] [unique_id "acglzSkUyvlQod6qQu23QwAAAMs"]
[Sun Mar 29 03:02:37.457971 2026] [:error] [pid 11588:tid 11607] [client 57.154.25.166:18745] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xex.php"] [unique_id "acglzQhH5525WHuzKfptrQAAAVE"]
[Sun Mar 29 03:02:37.774332 2026] [:error] [pid 39428:tid 39472] [client 57.154.25.166:16396] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xex.php"] [unique_id "acglzaXMrozFMIaP8nINnQAAAE0"]
[Sun Mar 29 03:02:38.093905 2026] [:error] [pid 39429:tid 39504] [client 57.154.25.166:18709] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xex.php"] [unique_id "acglzk8pSj6sqgZaItny2AAAAJI"]
[Sun Mar 29 03:02:38.420068 2026] [:error] [pid 39429:tid 39492] [client 57.154.25.166:28217] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xex.php"] [unique_id "acglzk8pSj6sqgZaItny2QAAAIY"]
[Sun Mar 29 03:02:38.737519 2026] [:error] [pid 39427:tid 39456] [client 57.154.25.166:36566] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acglzlvLf0RDUqcYq-ZfcwAAABg"]
[Sun Mar 29 03:02:39.062951 2026] [:error] [pid 39427:tid 39440] [client 57.154.25.166:36565] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acglz1vLf0RDUqcYq-ZfdAAAAAg"]
[Sun Mar 29 03:02:39.404437 2026] [:error] [pid 39429:tid 39496] [client 57.154.25.166:28184] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acglz08pSj6sqgZaItny2wAAAIo"]
[Sun Mar 29 03:02:39.726996 2026] [:error] [pid 39427:tid 39446] [client 57.154.25.166:36603] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acglz1vLf0RDUqcYq-ZfdQAAAA4"]
[Sun Mar 29 03:02:40.054879 2026] [:error] [pid 39427:tid 39438] [client 57.154.25.166:28192] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acgl0FvLf0RDUqcYq-ZfdwAAAAY"]
[Sun Mar 29 03:02:40.376171 2026] [:error] [pid 60346:tid 60359] [client 57.154.25.166:28186] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acgl0HVrXSgLxlxLi9BYcQAAAQg"]
[Sun Mar 29 03:02:40.711112 2026] [:error] [pid 39428:tid 39460] [client 57.154.25.166:16393] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acgl0KXMrozFMIaP8nINoAAAAEE"]
[Sun Mar 29 03:02:42.915426 2026] [:error] [pid 60346:tid 60373] [client 57.154.25.166:29298] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acgl0nVrXSgLxlxLi9BYdwAAARY"]
[Sun Mar 29 03:02:43.279120 2026] [:error] [pid 11588:tid 11611] [client 57.154.25.166:16407] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dtyh.php"] [unique_id "acgl0whH5525WHuzKfpttQAAAVU"]
[Sun Mar 29 03:02:43.666474 2026] [:error] [pid 60346:tid 60375] [client 57.154.25.166:36165] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dtyh.php"] [unique_id "acgl03VrXSgLxlxLi9BYeAAAARg"]
[Sun Mar 29 03:02:44.062302 2026] [:error] [pid 60346:tid 60367] [client 57.154.25.166:36572] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dtyh.php"] [unique_id "acgl1HVrXSgLxlxLi9BYeQAAARA"]
[Sun Mar 29 03:02:44.670061 2026] [:error] [pid 11588:tid 11596] [client 57.154.25.166:18717] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dtyh.php"] [unique_id "acgl1AhH5525WHuzKfpttwAAAUY"]
[Sun Mar 29 03:02:45.086684 2026] [:error] [pid 11588:tid 11602] [client 57.154.25.166:18711] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wta.php"] [unique_id "acgl1QhH5525WHuzKfptuQAAAUw"]
[Sun Mar 29 03:02:45.777486 2026] [:error] [pid 11588:tid 11606] [client 57.154.25.166:36567] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wta.php"] [unique_id "acgl1QhH5525WHuzKfptvwAAAVA"]
[Sun Mar 29 03:02:46.593316 2026] [:error] [pid 60346:tid 60352] [client 57.154.25.166:18723] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wta.php"] [unique_id "acgl1nVrXSgLxlxLi9BYfwAAAQE"]
[Sun Mar 29 03:02:47.814271 2026] [:error] [pid 39514:tid 39531] [client 57.154.25.166:18688] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wta.php"] [unique_id "acgl1ykUyvlQod6qQu23SQAAAMY"]
[Sun Mar 29 03:02:48.128575 2026] [:error] [pid 39428:tid 39483] [client 57.154.25.166:36577] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acgl2KXMrozFMIaP8nINpQAAAFg"]
[Sun Mar 29 03:02:49.743927 2026] [:error] [pid 39427:tid 39450] [client 57.154.25.166:18728] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acgl2VvLf0RDUqcYq-ZfhQAAABI"]
[Sun Mar 29 03:02:50.438726 2026] [:error] [pid 39428:tid 39467] [client 57.154.25.166:16433] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acgl2qXMrozFMIaP8nINpwAAAEg"]
[Sun Mar 29 03:02:50.772635 2026] [:error] [pid 60346:tid 60361] [client 57.154.25.166:28221] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acgl2nVrXSgLxlxLi9BYiAAAAQo"]
[Sun Mar 29 03:02:51.214497 2026] [:error] [pid 39428:tid 39468] [client 57.154.25.166:18713] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acgl26XMrozFMIaP8nINqQAAAEk"]
[Sun Mar 29 03:02:51.820186 2026] [:error] [pid 39429:tid 39497] [client 57.154.25.166:28189] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acgl208pSj6sqgZaItny6QAAAIs"]
[Sun Mar 29 03:02:52.239128 2026] [:error] [pid 39429:tid 39502] [client 57.154.25.166:36589] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acgl3E8pSj6sqgZaItny6gAAAJA"]
[Sun Mar 29 03:02:52.702853 2026] [:error] [pid 39429:tid 39501] [client 57.154.25.166:28199] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acgl3E8pSj6sqgZaItny6wAAAI8"]
[Sun Mar 29 03:02:53.068810 2026] [:error] [pid 60346:tid 60372] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sun Mar 29 03:02:53.274198 2026] [:error] [pid 60346:tid 60362] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sun Mar 29 03:02:53.468430 2026] [:error] [pid 60346:tid 60375] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sun Mar 29 03:02:53.629057 2026] [:error] [pid 60346:tid 60368] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sun Mar 29 03:02:53.787154 2026] [:error] [pid 60346:tid 60354] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sun Mar 29 03:02:53.990670 2026] [:error] [pid 60346:tid 60367] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/bywaf.php
[Sun Mar 29 03:02:54.357773 2026] [:error] [pid 60346:tid 60370] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-true.php
[Sun Mar 29 03:02:54.567907 2026] [:error] [pid 60346:tid 60365] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/byp8.php
[Sun Mar 29 03:02:54.730590 2026] [:error] [pid 60346:tid 60374] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/tx88.php
[Sun Mar 29 03:02:54.894453 2026] [:error] [pid 60346:tid 60360] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Sun Mar 29 03:02:55.216601 2026] [:error] [pid 60346:tid 60352] [client 57.154.25.166:29261] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Sun Mar 29 03:02:55.383607 2026] [:error] [pid 60346:tid 60351] [client 57.154.25.166:29261] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acgl33VrXSgLxlxLi9BYmgAAAQA"]
[Sun Mar 29 03:02:55.824965 2026] [:error] [pid 39514:tid 39532] [client 57.154.25.166:28214] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acgl3ykUyvlQod6qQu23UgAAAMc"]
[Sun Mar 29 03:02:56.808809 2026] [:error] [pid 39428:tid 39471] [client 57.154.25.166:18722] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acgl4KXMrozFMIaP8nINsQAAAEw"]
[Sun Mar 29 03:02:57.726990 2026] [:error] [pid 60346:tid 60367] [client 57.154.25.166:18695] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acgl4XVrXSgLxlxLi9BYnQAAARA"]
[Sun Mar 29 03:02:58.179727 2026] [:error] [pid 39427:tid 39448] [client 57.154.25.166:29309] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/utky.php"] [unique_id "acgl4lvLf0RDUqcYq-ZfjAAAABA"]
[Sun Mar 29 03:02:58.548371 2026] [:error] [pid 60346:tid 60352] [client 57.154.25.166:16386] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/utky.php"] [unique_id "acgl4nVrXSgLxlxLi9BYogAAAQE"]
[Sun Mar 29 03:02:58.878366 2026] [:error] [pid 60346:tid 60351] [client 57.154.25.166:16415] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/utky.php"] [unique_id "acgl4nVrXSgLxlxLi9BYpAAAAQA"]
[Sun Mar 29 03:02:59.285573 2026] [:error] [pid 60346:tid 60373] [client 57.154.25.166:18725] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/utky.php"] [unique_id "acgl43VrXSgLxlxLi9BYpQAAARY"]
[Sun Mar 29 03:03:00.124619 2026] [:error] [pid 39427:tid 39447] [client 57.154.25.166:18702] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uang.php"] [unique_id "acgl5FvLf0RDUqcYq-ZfmAAAAA8"]
[Sun Mar 29 03:03:00.897067 2026] [:error] [pid 39428:tid 39481] [client 57.154.25.166:29271] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uang.php"] [unique_id "acgl5KXMrozFMIaP8nINswAAAFY"]
[Sun Mar 29 03:03:01.247337 2026] [:error] [pid 39428:tid 39468] [client 57.154.25.166:18720] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uang.php"] [unique_id "acgl5aXMrozFMIaP8nINtAAAAEk"]
[Sun Mar 29 03:03:01.590355 2026] [:error] [pid 39428:tid 39460] [client 57.154.25.166:16430] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uang.php"] [unique_id "acgl5aXMrozFMIaP8nINtgAAAEE"]
[Sun Mar 29 03:03:02.011879 2026] [:error] [pid 11588:tid 11600] [client 57.154.25.166:18729] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acgl5ghH5525WHuzKfpt0AAAAUo"]
[Sun Mar 29 03:03:02.444376 2026] [:error] [pid 11588:tid 11592] [client 57.154.25.166:16422] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acgl5ghH5525WHuzKfpt0wAAAUI"]
[Sun Mar 29 03:03:02.818982 2026] [:error] [pid 60346:tid 60375] [client 57.154.25.166:28160] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acgl5nVrXSgLxlxLi9BYpgAAARg"]
[Sun Mar 29 03:03:03.155690 2026] [:error] [pid 39427:tid 39438] [client 57.154.25.166:28168] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acgl51vLf0RDUqcYq-ZfpAAAAAY"]
[Sun Mar 29 03:03:03.523199 2026] [:error] [pid 11588:tid 11599] [client 57.154.25.166:23648] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acgl5whH5525WHuzKfpt2wAAAUk"]
[Sun Mar 29 03:03:03.882626 2026] [:error] [pid 11588:tid 11593] [client 57.154.25.166:23665] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acgl5whH5525WHuzKfpt3AAAAUM"]
[Sun Mar 29 03:03:04.205826 2026] [:error] [pid 39429:tid 39505] [client 57.154.25.166:28191] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acgl6E8pSj6sqgZaItny8gAAAJM"]
[Sun Mar 29 03:03:04.552502 2026] [:error] [pid 11588:tid 11608] [client 57.154.25.166:28215] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acgl6AhH5525WHuzKfpt3QAAAVI"]
[Sun Mar 29 03:03:04.874780 2026] [:error] [pid 11588:tid 11613] [client 57.154.25.166:29297] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acgl6AhH5525WHuzKfpt4AAAAVc"]
[Sun Mar 29 03:03:05.210779 2026] [:error] [pid 39428:tid 39470] [client 57.154.25.166:16434] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acgl6aXMrozFMIaP8nINugAAAEs"]
[Sun Mar 29 03:03:05.595122 2026] [:error] [pid 11588:tid 11601] [client 57.154.25.166:18689] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acgl6QhH5525WHuzKfpt5AAAAUs"]
[Sun Mar 29 03:03:06.534741 2026] [:error] [pid 11588:tid 11613] [client 57.154.25.166:23628] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acgl6ghH5525WHuzKfpt7AAAAVc"]
[Sun Mar 29 03:03:11.847542 2026] [:error] [pid 60346:tid 60370] [client 57.154.25.166:29262] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ticket.php"] [unique_id "acgl73VrXSgLxlxLi9BYtAAAARM"]
[Sun Mar 29 03:03:12.189102 2026] [:error] [pid 39514:tid 39538] [client 57.154.25.166:18751] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ticket.php"] [unique_id "acgl8CkUyvlQod6qQu23XwAAAM0"]
[Sun Mar 29 03:03:12.535694 2026] [:error] [pid 11588:tid 11610] [client 57.154.25.166:16416] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ticket.php"] [unique_id "acgl8AhH5525WHuzKfpt_QAAAVQ"]
[Sun Mar 29 03:03:13.188995 2026] [:error] [pid 11588:tid 11597] [client 57.154.25.166:36548] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ticket.php"] [unique_id "acgl8QhH5525WHuzKfpuAgAAAUc"]
[Sun Mar 29 03:03:13.678939 2026] [:error] [pid 11588:tid 11614] [client 57.154.25.166:16389] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "acgl8QhH5525WHuzKfpuBgAAAVg"]
[Sun Mar 29 03:03:14.111961 2026] [:error] [pid 11588:tid 11590] [client 57.154.25.166:28208] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "acgl8ghH5525WHuzKfpuCQAAAUA"]
[Sun Mar 29 03:03:14.495897 2026] [:error] [pid 11588:tid 11607] [client 57.154.25.166:16385] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "acgl8ghH5525WHuzKfpuDgAAAVE"]
[Sun Mar 29 03:03:14.840761 2026] [:error] [pid 11588:tid 11596] [client 57.154.25.166:29276] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "acgl8ghH5525WHuzKfpuEgAAAUY"]
[Sun Mar 29 03:03:15.262085 2026] [:error] [pid 39514:tid 39536] [client 57.154.25.166:28211] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpwer1.php"] [unique_id "acgl8ykUyvlQod6qQu23YAAAAMs"]
[Sun Mar 29 03:03:15.678230 2026] [:error] [pid 39429:tid 39502] [client 57.154.25.166:16388] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpwer1.php"] [unique_id "acgl808pSj6sqgZaItny-wAAAJA"]
[Sun Mar 29 03:03:16.014906 2026] [:error] [pid 39429:tid 39504] [client 57.154.25.166:18716] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpwer1.php"] [unique_id "acgl9E8pSj6sqgZaItny_gAAAJI"]
[Sun Mar 29 03:03:16.400383 2026] [:error] [pid 11588:tid 11611] [client 57.154.25.166:29252] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpwer1.php"] [unique_id "acgl9AhH5525WHuzKfpuGwAAAVU"]
[Sun Mar 29 03:03:16.866149 2026] [:error] [pid 11588:tid 11596] [client 57.154.25.166:18696] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acgl9AhH5525WHuzKfpuHQAAAUY"]
[Sun Mar 29 03:03:19.723656 2026] [:error] [pid 11588:tid 11610] [client 57.154.25.166:23661] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acgl9whH5525WHuzKfpuPgAAAVQ"]
[Sun Mar 29 03:03:20.075062 2026] [:error] [pid 39429:tid 39506] [client 57.154.25.166:16414] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acgl-E8pSj6sqgZaItnzAgAAAJQ"]
[Sun Mar 29 03:03:20.412776 2026] [:error] [pid 11588:tid 11593] [client 57.154.25.166:28223] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acgl-AhH5525WHuzKfpuRAAAAUM"]
[Sun Mar 29 03:03:20.742956 2026] [:error] [pid 11588:tid 11608] [client 57.154.25.166:16432] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdone1.php"] [unique_id "acgl-AhH5525WHuzKfpuSAAAAVI"]
[Sun Mar 29 03:03:21.182517 2026] [:error] [pid 11588:tid 11602] [client 57.154.25.166:16398] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdone1.php"] [unique_id "acgl-QhH5525WHuzKfpuSwAAAUw"]
[Sun Mar 29 03:03:21.510838 2026] [:error] [pid 11588:tid 11611] [client 57.154.25.166:16431] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdone1.php"] [unique_id "acgl-QhH5525WHuzKfpuTgAAAVU"]
[Sun Mar 29 03:03:21.851485 2026] [:error] [pid 11588:tid 11608] [client 57.154.25.166:18718] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdone1.php"] [unique_id "acgl-QhH5525WHuzKfpuVQAAAVI"]
[Sun Mar 29 03:03:22.175542 2026] [:error] [pid 11588:tid 11610] [client 57.154.25.166:28200] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpass.php"] [unique_id "acgl-ghH5525WHuzKfpuWAAAAVQ"]
[Sun Mar 29 03:03:22.540829 2026] [:error] [pid 60346:tid 60365] [client 57.154.25.166:16411] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpass.php"] [unique_id "acgl-nVrXSgLxlxLi9BYwAAAAQ4"]
[Sun Mar 29 03:03:23.867175 2026] [:error] [pid 11588:tid 11595] [client 57.154.25.166:18749] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpass.php"] [unique_id "acgl-whH5525WHuzKfpuZQAAAUU"]
[Sun Mar 29 03:03:24.189844 2026] [:error] [pid 39514:tid 39532] [client 57.154.25.166:18742] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpass.php"] [unique_id "acgl_CkUyvlQod6qQu23ZQAAAMc"]
[Sun Mar 29 03:03:24.505962 2026] [:error] [pid 11588:tid 11610] [client 57.154.25.166:29292] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acgl_AhH5525WHuzKfpubAAAAVQ"]
[Sun Mar 29 03:03:24.854572 2026] [:error] [pid 11588:tid 11613] [client 57.154.25.166:18736] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acgl_AhH5525WHuzKfpucgAAAVc"]
[Sun Mar 29 03:03:25.244179 2026] [:error] [pid 60346:tid 60356] [client 57.154.25.166:16435] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acgl_XVrXSgLxlxLi9BYxwAAAQU"]
[Sun Mar 29 03:03:25.655146 2026] [:error] [pid 60346:tid 60359] [client 57.154.25.166:29277] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acgl_XVrXSgLxlxLi9BYywAAAQg"]
[Sun Mar 29 03:03:26.170457 2026] [:error] [pid 39428:tid 39462] [client 57.154.25.166:18750] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acgl_qXMrozFMIaP8nINywAAAEM"]
[Sun Mar 29 03:03:26.506943 2026] [:error] [pid 39428:tid 39474] [client 57.154.25.166:23666] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acgl_qXMrozFMIaP8nINzAAAAE8"]
[Sun Mar 29 03:03:26.827876 2026] [:error] [pid 60346:tid 60365] [client 57.154.25.166:16439] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acgl_nVrXSgLxlxLi9BY0gAAAQ4"]
[Sun Mar 29 03:03:27.229633 2026] [:error] [pid 39428:tid 39459] [client 57.154.25.166:16399] [client 57.154.25.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acgl_6XMrozFMIaP8nIN0QAAAEA"]
[Sun Mar 29 04:58:13.427037 2026] [:error] [pid 1524:tid 1543] [client 185.194.178.64:53657] [client 185.194.178.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.64, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "achA5VoaWSl2asqQCh8KygAAAQw"]
[Sun Mar 29 04:58:13.430924 2026] [:error] [pid 1524:tid 1543] [client 185.194.178.64:53657] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Mar 29 08:36:40.698622 2026] [:error] [pid 23250:tid 23271] [client 93.86.49.182:12665] [client 93.86.49.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 93.86.49.182, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ach0GJxrpj-dQjy1cvpcHgAAAlM"]
[Sun Mar 29 08:36:40.703431 2026] [:error] [pid 23250:tid 23271] [client 93.86.49.182:12665] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 29 12:22:49.560390 2026] [:error] [pid 32359:tid 32378] [client 103.157.105.24:38333] [client 103.157.105.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.157.105.24, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acipGQMb8G3UzfQP3Wj3QQAAANE"]
[Sun Mar 29 12:22:49.567826 2026] [:error] [pid 32359:tid 32378] [client 103.157.105.24:38333] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Mar 29 22:09:26.084638 2026] [:error] [pid 32257:tid 32320] [client 51.103.28.129:33324] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sun Mar 29 22:09:27.280752 2026] [:error] [pid 32257:tid 32328] [client 51.103.28.129:33324] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ackylyE3TArOFrUtgWo8yAAAAIo"]
[Sun Mar 29 22:09:27.799367 2026] [:error] [pid 32255:tid 32296] [client 51.103.28.129:34623] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Sun Mar 29 22:09:28.045354 2026] [:error] [pid 32255:tid 32291] [client 51.103.28.129:34623] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun Mar 29 22:09:28.286458 2026] [:error] [pid 32255:tid 32292] [client 51.103.28.129:34623] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sun Mar 29 22:09:28.526023 2026] [:error] [pid 32255:tid 32314] [client 51.103.28.129:34623] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Mar 29 22:09:28.799709 2026] [:error] [pid 32255:tid 32298] [client 51.103.28.129:34623] File does not exist: /usr/local/apache/htdocs/suspended-page/file15.php
[Sun Mar 29 22:09:29.056610 2026] [:error] [pid 32255:tid 32311] [client 51.103.28.129:34623] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "ackymWnfn-AtRoMbquz0UwAAAFQ"]
[Sun Mar 29 22:09:29.608930 2026] [:error] [pid 23167:tid 23179] [client 51.103.28.129:35341] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "ackymRIAHJCFaHff3_fD9wAAAck"]
[Sun Mar 29 22:09:30.160943 2026] [:error] [pid 23284:tid 23305] [client 51.103.28.129:36104] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "ackymozBujdPHsq7wySp0AAAApM"]
[Sun Mar 29 22:09:30.702562 2026] [:error] [pid 32255:tid 32312] [client 51.103.28.129:35541] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "ackymmnfn-AtRoMbquz0WAAAAFU"]
[Sun Mar 29 22:09:31.227709 2026] [:error] [pid 32255:tid 32300] [client 51.103.28.129:35527] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ackym2nfn-AtRoMbquz0WwAAAEk"]
[Sun Mar 29 22:09:31.797343 2026] [:error] [pid 32257:tid 32342] [client 51.103.28.129:34097] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ackymyE3TArOFrUtgWo8zgAAAJg"]
[Sun Mar 29 22:09:32.411289 2026] [:error] [pid 32255:tid 32298] [client 51.103.28.129:36795] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ackynGnfn-AtRoMbquz0YgAAAEc"]
[Sun Mar 29 22:09:32.980671 2026] [:error] [pid 32255:tid 32313] [client 51.103.28.129:36127] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ackynGnfn-AtRoMbquz0ZgAAAFY"]
[Sun Mar 29 22:09:33.477577 2026] [:error] [pid 32255:tid 32296] [client 51.103.28.129:36129] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ackynWnfn-AtRoMbquz0bgAAAEU"]
[Sun Mar 29 22:09:34.045582 2026] [:error] [pid 32255:tid 32306] [client 51.103.28.129:36788] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ackynmnfn-AtRoMbquz0cQAAAE8"]
[Sun Mar 29 22:09:34.554474 2026] [:error] [pid 32257:tid 32319] [client 51.103.28.129:34612] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ackyniE3TArOFrUtgWo80wAAAIE"]
[Sun Mar 29 22:09:35.125583 2026] [:error] [pid 23137:tid 23146] [client 51.103.28.129:36067] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ackynxaWQa7LdZ_qGFb9JAAAAYc"]
[Sun Mar 29 22:09:35.687693 2026] [:error] [pid 23167:tid 23182] [client 51.103.28.129:33315] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ackynxIAHJCFaHff3_fD_AAAAcw"]
[Sun Mar 29 22:09:36.250979 2026] [:error] [pid 23250:tid 23265] [client 51.103.28.129:34562] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ackyoJxrpj-dQjy1cvoHegAAAk0"]
[Sun Mar 29 22:09:36.754824 2026] [:error] [pid 23250:tid 23266] [client 51.103.28.129:36749] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ackyoJxrpj-dQjy1cvoHfAAAAk4"]
[Sun Mar 29 22:09:37.326583 2026] [:error] [pid 23284:tid 23286] [client 51.103.28.129:36707] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ackyoYzBujdPHsq7wySp2wAAAoA"]
[Sun Mar 29 22:09:37.855932 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:34037] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ackyoYzBujdPHsq7wySp3wAAAos"]
[Sun Mar 29 22:09:38.390123 2026] [:error] [pid 23284:tid 23306] [client 51.103.28.129:34631] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ackyoozBujdPHsq7wySp5AAAApQ"]
[Sun Mar 29 22:09:38.945077 2026] [:error] [pid 23284:tid 23289] [client 51.103.28.129:34079] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ackyoozBujdPHsq7wySp6gAAAoM"]
[Sun Mar 29 22:09:39.519267 2026] [:error] [pid 32257:tid 32325] [client 51.103.28.129:34101] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ackyoyE3TArOFrUtgWo82AAAAIc"]
[Sun Mar 29 22:09:40.063312 2026] [:error] [pid 23167:tid 23193] [client 51.103.28.129:36135] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hly.php"] [unique_id "ackypBIAHJCFaHff3_fEAwAAAdc"]
[Sun Mar 29 22:09:40.707873 2026] [:error] [pid 32359:tid 32366] [client 51.103.28.129:33475] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hly.php"] [unique_id "ackypAMb8G3UzfQP3WgxPwAAAMU"]
[Sun Mar 29 22:09:41.206018 2026] [:error] [pid 32359:tid 32364] [client 51.103.28.129:34658] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hly.php"] [unique_id "ackypQMb8G3UzfQP3WgxQAAAAMM"]
[Sun Mar 29 22:09:41.911922 2026] [:error] [pid 23284:tid 23299] [client 51.103.28.129:33326] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hly.php"] [unique_id "ackypYzBujdPHsq7wySqCwAAAo0"]
[Sun Mar 29 22:09:42.460772 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:34570] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackypozBujdPHsq7wySqDQAAApc"]
[Sun Mar 29 22:09:42.991384 2026] [:error] [pid 23284:tid 23289] [client 51.103.28.129:33508] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackypozBujdPHsq7wySqDgAAAoM"]
[Sun Mar 29 22:09:43.537063 2026] [:error] [pid 32359:tid 32383] [client 51.103.28.129:36711] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackypwMb8G3UzfQP3WgxRAAAANY"]
[Sun Mar 29 22:09:44.063217 2026] [:error] [pid 23284:tid 23302] [client 51.103.28.129:34635] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "ackyqIzBujdPHsq7wySqEQAAApA"]
[Sun Mar 29 22:09:44.669198 2026] [:error] [pid 8818:tid 8823] [client 51.103.28.129:34603] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "ackyqCCDvotZNSF0FBrihAAAAUE"]
[Sun Mar 29 22:09:45.237382 2026] [:error] [pid 23167:tid 23173] [client 51.103.28.129:36681] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "ackyqRIAHJCFaHff3_fEDwAAAcM"]
[Sun Mar 29 22:09:45.732788 2026] [:error] [pid 32257:tid 32334] [client 51.103.28.129:36719] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "ackyqSE3TArOFrUtgWo87gAAAJA"]
[Sun Mar 29 22:09:46.319812 2026] [:error] [pid 32257:tid 32326] [client 51.103.28.129:34659] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "ackyqiE3TArOFrUtgWo88gAAAIg"]
[Sun Mar 29 22:09:46.870850 2026] [:error] [pid 32255:tid 32295] [client 51.103.28.129:36727] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tajj.php"] [unique_id "ackyqmnfn-AtRoMbquz0egAAAEQ"]
[Sun Mar 29 22:09:47.385365 2026] [:error] [pid 8818:tid 8826] [client 51.103.28.129:36679] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tajj.php"] [unique_id "ackyqyCDvotZNSF0FBrihgAAAUQ"]
[Sun Mar 29 22:09:47.892731 2026] [:error] [pid 32255:tid 32310] [client 51.103.28.129:34576] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tajj.php"] [unique_id "ackyq2nfn-AtRoMbquz0fAAAAFM"]
[Sun Mar 29 22:09:48.451723 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:34050] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tajj.php"] [unique_id "ackyrCE3TArOFrUtgWo89wAAAIw"]
[Sun Mar 29 22:09:48.942648 2026] [:error] [pid 32255:tid 32293] [client 51.103.28.129:36036] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "ackyrGnfn-AtRoMbquz0ggAAAEI"]
[Sun Mar 29 22:09:49.434921 2026] [:error] [pid 32257:tid 32319] [client 51.103.28.129:33496] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "ackyrSE3TArOFrUtgWo8-gAAAIE"]
[Sun Mar 29 22:09:49.958263 2026] [:error] [pid 23284:tid 23286] [client 51.103.28.129:35574] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "ackyrYzBujdPHsq7wySqFAAAAoA"]
[Sun Mar 29 22:09:50.744444 2026] [:error] [pid 32255:tid 32297] [client 51.103.28.129:34012] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "ackyrmnfn-AtRoMbquz0hAAAAEY"]
[Sun Mar 29 22:09:51.413161 2026] [:error] [pid 32255:tid 32298] [client 51.103.28.129:37258] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "ackyr2nfn-AtRoMbquz0iAAAAEc"]
[Sun Mar 29 22:09:51.995784 2026] [:error] [pid 23284:tid 23288] [client 51.103.28.129:34038] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "ackyr4zBujdPHsq7wySqIAAAAoI"]
[Sun Mar 29 22:09:52.574773 2026] [:error] [pid 23284:tid 23303] [client 51.103.28.129:36140] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "ackysIzBujdPHsq7wySqJAAAApE"]
[Sun Mar 29 22:09:53.049544 2026] [:error] [pid 32255:tid 32311] [client 51.103.28.129:34618] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "ackysWnfn-AtRoMbquz0igAAAFQ"]
[Sun Mar 29 22:09:53.594426 2026] [:error] [pid 32255:tid 32300] [client 51.103.28.129:34665] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ackysWnfn-AtRoMbquz0jAAAAEk"]
[Sun Mar 29 22:09:54.205600 2026] [:error] [pid 23168:tid 23217] [client 51.103.28.129:36144] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ackysmP8p0yRL8ot_2-hMAAAAhQ"]
[Sun Mar 29 22:09:54.733689 2026] [:error] [pid 23284:tid 23292] [client 51.103.28.129:34585] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ackysozBujdPHsq7wySqKwAAAoY"]
[Sun Mar 29 22:09:55.316876 2026] [:error] [pid 23284:tid 23305] [client 51.103.28.129:35369] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ackys4zBujdPHsq7wySqLwAAApM"]
[Sun Mar 29 22:09:55.926869 2026] [:error] [pid 32257:tid 32319] [client 51.103.28.129:37303] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-2.php"] [unique_id "ackysyE3TArOFrUtgWo9AQAAAIE"]
[Sun Mar 29 22:09:56.484550 2026] [:error] [pid 32257:tid 32342] [client 51.103.28.129:36790] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-2.php"] [unique_id "ackytCE3TArOFrUtgWo9CAAAAJg"]
[Sun Mar 29 22:09:57.025774 2026] [:error] [pid 23137:tid 23155] [client 51.103.28.129:37206] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-2.php"] [unique_id "ackytRaWQa7LdZ_qGFb9LgAAAZA"]
[Sun Mar 29 22:09:57.566860 2026] [:error] [pid 23167:tid 23184] [client 51.103.28.129:36704] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-2.php"] [unique_id "ackytRIAHJCFaHff3_fEFgAAAc4"]
[Sun Mar 29 22:09:58.252718 2026] [:error] [pid 23284:tid 23300] [client 51.103.28.129:35554] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackytozBujdPHsq7wySqOQAAAo4"]
[Sun Mar 29 22:09:58.802206 2026] [:error] [pid 23168:tid 23207] [client 51.103.28.129:35358] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackytmP8p0yRL8ot_2-hOAAAAgo"]
[Sun Mar 29 22:09:59.338287 2026] [:error] [pid 23284:tid 23310] [client 51.103.28.129:33506] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackyt4zBujdPHsq7wySqPQAAApg"]
[Sun Mar 29 22:09:59.852137 2026] [:error] [pid 23284:tid 23293] [client 51.103.28.129:36071] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ackyt4zBujdPHsq7wySqQQAAAoc"]
[Sun Mar 29 22:10:00.407926 2026] [:error] [pid 23167:tid 23193] [client 51.103.28.129:34065] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "ackyuBIAHJCFaHff3_fEGAAAAdc"]
[Sun Mar 29 22:10:00.941545 2026] [:error] [pid 23137:tid 23146] [client 51.103.28.129:35335] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "ackyuBaWQa7LdZ_qGFb9MQAAAYc"]
[Sun Mar 29 22:10:01.422629 2026] [:error] [pid 32255:tid 32297] [client 51.103.28.129:36692] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "ackyuWnfn-AtRoMbquz0nwAAAEY"]
[Sun Mar 29 22:10:01.939279 2026] [:error] [pid 32254:tid 32276] [client 51.103.28.129:34596] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "ackyuaug2IHuyGgCTn9eQQAAAAw"]
[Sun Mar 29 22:10:02.464440 2026] [:error] [pid 32257:tid 32335] [client 51.103.28.129:34627] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "ackyuiE3TArOFrUtgWo9FAAAAJE"]
[Sun Mar 29 22:10:02.985447 2026] [:error] [pid 23284:tid 23293] [client 51.103.28.129:37276] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "ackyuozBujdPHsq7wySqSQAAAoc"]
[Sun Mar 29 22:10:03.495245 2026] [:error] [pid 32255:tid 32307] [client 51.103.28.129:36035] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "ackyu2nfn-AtRoMbquz0pAAAAFA"]
[Sun Mar 29 22:10:03.994942 2026] [:error] [pid 23167:tid 23185] [client 51.103.28.129:34577] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "ackyuxIAHJCFaHff3_fEGwAAAc8"]
[Sun Mar 29 22:10:04.534084 2026] [:error] [pid 32255:tid 32293] [client 51.103.28.129:34029] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ackyvGnfn-AtRoMbquz0pgAAAEI"]
[Sun Mar 29 22:10:05.091482 2026] [:error] [pid 23168:tid 23204] [client 51.103.28.129:36125] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ackyvWP8p0yRL8ot_2-hQQAAAgc"]
[Sun Mar 29 22:10:05.616046 2026] [:error] [pid 32255:tid 32292] [client 51.103.28.129:36736] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ackyvWnfn-AtRoMbquz0qQAAAEE"]
[Sun Mar 29 22:10:06.147797 2026] [:error] [pid 32254:tid 32266] [client 51.103.28.129:34675] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ackyvqug2IHuyGgCTn9eQwAAAAI"]
[Sun Mar 29 22:10:06.672542 2026] [:error] [pid 23250:tid 23268] [client 51.103.28.129:36703] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ackyvpxrpj-dQjy1cvoHkQAAAlA"]
[Sun Mar 29 22:10:07.148537 2026] [:error] [pid 23167:tid 23187] [client 51.103.28.129:35533] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ackyvxIAHJCFaHff3_fEIgAAAdE"]
[Sun Mar 29 22:10:07.654243 2026] [:error] [pid 23250:tid 23262] [client 51.103.28.129:31208] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ackyv5xrpj-dQjy1cvoHkgAAAko"]
[Sun Mar 29 22:10:08.220828 2026] [:error] [pid 32255:tid 32307] [client 51.103.28.129:36680] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ackywGnfn-AtRoMbquz0sAAAAFA"]
[Sun Mar 29 22:10:08.735536 2026] [:error] [pid 32359:tid 32366] [client 51.103.28.129:34061] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ackywAMb8G3UzfQP3WgxSQAAAMU"]
[Sun Mar 29 22:10:09.297176 2026] [:error] [pid 32359:tid 32364] [client 51.103.28.129:36693] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ackywQMb8G3UzfQP3WgxSgAAAMM"]
[Sun Mar 29 22:10:09.838236 2026] [:error] [pid 23137:tid 23151] [client 51.103.28.129:35546] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ackywRaWQa7LdZ_qGFb9OwAAAYw"]
[Sun Mar 29 22:10:10.357109 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:33334] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ackywiE3TArOFrUtgWo9HgAAAIw"]
[Sun Mar 29 22:10:10.883761 2026] [:error] [pid 8818:tid 8844] [client 51.103.28.129:34674] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "ackywiCDvotZNSF0FBrijwAAAVY"]
[Sun Mar 29 22:10:11.463369 2026] [:error] [pid 32255:tid 32295] [client 51.103.28.129:36050] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "ackyw2nfn-AtRoMbquz0tAAAAEQ"]
[Sun Mar 29 22:10:11.990209 2026] [:error] [pid 23250:tid 23271] [client 51.103.28.129:36785] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "ackyw5xrpj-dQjy1cvoHnAAAAlM"]
[Sun Mar 29 22:10:12.557697 2026] [:error] [pid 32359:tid 32385] [client 51.103.28.129:37213] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "ackyxAMb8G3UzfQP3WgxTAAAANg"]
[Sun Mar 29 22:10:13.061984 2026] [:error] [pid 23284:tid 23305] [client 51.103.28.129:36032] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "ackyxYzBujdPHsq7wySqUQAAApM"]
[Sun Mar 29 22:10:13.592762 2026] [:error] [pid 23284:tid 23286] [client 51.103.28.129:34643] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "ackyxYzBujdPHsq7wySqUwAAAoA"]
[Sun Mar 29 22:10:14.108405 2026] [:error] [pid 32359:tid 32361] [client 51.103.28.129:36062] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "ackyxgMb8G3UzfQP3WgxTgAAAMA"]
[Sun Mar 29 22:10:14.682453 2026] [:error] [pid 32254:tid 32283] [client 51.103.28.129:36708] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "ackyxqug2IHuyGgCTn9eRwAAABM"]
[Sun Mar 29 22:10:15.166789 2026] [:error] [pid 23168:tid 23205] [client 51.103.28.129:36038] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ackyx2P8p0yRL8ot_2-hSQAAAgg"]
[Sun Mar 29 22:10:15.709358 2026] [:error] [pid 23250:tid 23262] [client 51.103.28.129:34040] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ackyx5xrpj-dQjy1cvoHpAAAAko"]
[Sun Mar 29 22:10:16.274098 2026] [:error] [pid 23168:tid 23220] [client 51.103.28.129:37283] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ackyyGP8p0yRL8ot_2-hTQAAAhc"]
[Sun Mar 29 22:10:16.801845 2026] [:error] [pid 23284:tid 23300] [client 51.103.28.129:36042] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ackyyIzBujdPHsq7wySqWgAAAo4"]
[Sun Mar 29 22:10:17.310722 2026] [:error] [pid 23168:tid 23210] [client 51.103.28.129:36699] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ackyyWP8p0yRL8ot_2-hUwAAAg0"]
[Sun Mar 29 22:10:17.850229 2026] [:error] [pid 32255:tid 32313] [client 51.103.28.129:36092] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "ackyyWnfn-AtRoMbquz0uQAAAFY"]
[Sun Mar 29 22:10:18.429386 2026] [:error] [pid 32257:tid 32341] [client 51.103.28.129:34641] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ackyyiE3TArOFrUtgWo9IAAAAJc"]
[Sun Mar 29 22:10:18.951941 2026] [:error] [pid 32255:tid 32293] [client 51.103.28.129:36776] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ackyymnfn-AtRoMbquz0vgAAAEI"]
[Sun Mar 29 22:10:19.463982 2026] [:error] [pid 23250:tid 23265] [client 51.103.28.129:37184] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ackyy5xrpj-dQjy1cvoHqgAAAk0"]
[Sun Mar 29 22:10:19.943137 2026] [:error] [pid 23137:tid 23142] [client 51.103.28.129:37235] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ackyyxaWQa7LdZ_qGFb9SQAAAYM"]
[Sun Mar 29 22:10:20.466373 2026] [:error] [pid 23284:tid 23292] [client 51.103.28.129:34660] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ackyzIzBujdPHsq7wySqXgAAAoY"]
[Sun Mar 29 22:10:21.058843 2026] [:error] [pid 23284:tid 23286] [client 51.103.28.129:36033] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ackyzYzBujdPHsq7wySqYAAAAoA"]
[Sun Mar 29 22:10:21.700319 2026] [:error] [pid 23284:tid 23302] [client 51.103.28.129:36780] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ackyzYzBujdPHsq7wySqZwAAApA"]
[Sun Mar 29 22:10:22.399095 2026] [:error] [pid 32359:tid 32369] [client 51.103.28.129:38009] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ackyzgMb8G3UzfQP3WgxVAAAAMg"]
[Sun Mar 29 22:10:23.096813 2026] [:error] [pid 32255:tid 32308] [client 51.103.28.129:35558] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "ackyz2nfn-AtRoMbquz0yAAAAFE"]
[Sun Mar 29 22:10:23.747433 2026] [:error] [pid 8818:tid 8838] [client 51.103.28.129:36112] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "ackyzyCDvotZNSF0FBrioQAAAVA"]
[Sun Mar 29 22:10:24.461377 2026] [:error] [pid 32255:tid 32299] [client 51.103.28.129:34591] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x0x.php"] [unique_id "acky0Gnfn-AtRoMbquz0ygAAAEg"]
[Sun Mar 29 22:10:25.150378 2026] [:error] [pid 32254:tid 32267] [client 51.103.28.129:36086] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x0x.php"] [unique_id "acky0aug2IHuyGgCTn9eUQAAAAM"]
[Sun Mar 29 22:10:25.804259 2026] [:error] [pid 32254:tid 32264] [client 51.103.28.129:38057] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x0x.php"] [unique_id "acky0aug2IHuyGgCTn9eUgAAAAA"]
[Sun Mar 29 22:10:26.375056 2026] [:error] [pid 32257:tid 32324] [client 51.103.28.129:37311] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x0x.php"] [unique_id "acky0iE3TArOFrUtgWo9JAAAAIY"]
[Sun Mar 29 22:10:26.987657 2026] [:error] [pid 32255:tid 32308] [client 51.103.28.129:32335] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfile.php"] [unique_id "acky0mnfn-AtRoMbquz00gAAAFE"]
[Sun Mar 29 22:10:27.557295 2026] [:error] [pid 23168:tid 23202] [client 51.103.28.129:35582] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfile.php"] [unique_id "acky02P8p0yRL8ot_2-hYAAAAgU"]
[Sun Mar 29 22:10:28.047456 2026] [:error] [pid 23284:tid 23305] [client 51.103.28.129:37969] File does not exist: /usr/local/apache/htdocs/suspended-page/gfile.php
[Sun Mar 29 22:10:28.287775 2026] [:error] [pid 23284:tid 23295] [client 51.103.28.129:37969] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-freya.php
[Sun Mar 29 22:10:28.523636 2026] [:error] [pid 23284:tid 23287] [client 51.103.28.129:37969] [client 51.103.28.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "acky1IzBujdPHsq7wySqcgAAAoE"]
[Sun Mar 29 22:10:29.024501 2026] [:error] [pid 32255:tid 32304] [client 51.103.28.129:34648] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sun Mar 29 22:10:29.264030 2026] [:error] [pid 32255:tid 32301] [client 51.103.28.129:34648] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Sun Mar 29 22:10:29.501952 2026] [:error] [pid 32255:tid 32305] [client 51.103.28.129:34648] File does not exist: /usr/local/apache/htdocs/suspended-page/X7x.php
[Sun Mar 29 22:10:29.738969 2026] [:error] [pid 32255:tid 32293] [client 51.103.28.129:34648] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Sun Mar 29 22:10:29.990249 2026] [:error] [pid 32255:tid 32306] [client 51.103.28.129:34648] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Sun Mar 29 22:10:30.243861 2026] [:error] [pid 32255:tid 32311] [client 51.103.28.129:34648] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sun Mar 29 22:10:30.482438 2026] [:error] [pid 32255:tid 32310] [client 51.103.28.129:34648] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sun Mar 29 22:10:30.737686 2026] [:error] [pid 32255:tid 32297] [client 51.103.28.129:34648] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sun Mar 29 22:10:30.992064 2026] [:error] [pid 32255:tid 32300] [client 51.103.28.129:34648] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Sun Mar 29 22:10:31.227294 2026] [:error] [pid 32255:tid 32292] [client 51.103.28.129:34648] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/O-Simple.php"] [unique_id "acky12nfn-AtRoMbquz04QAAAEE"]
[Sun Mar 29 22:10:31.772304 2026] [:error] [pid 23137:tid 23158] [client 51.103.28.129:37188] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/O-Simple.php"] [unique_id "acky1xaWQa7LdZ_qGFb9UgAAAZM"]
[Sun Mar 29 22:10:32.333475 2026] [:error] [pid 23168:tid 23216] [client 51.103.28.129:36684] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/O-Simple.php"] [unique_id "acky2GP8p0yRL8ot_2-hbQAAAhM"]
[Sun Mar 29 22:10:32.865526 2026] [:error] [pid 23137:tid 23155] [client 51.103.28.129:35348] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/O-Simple.php"] [unique_id "acky2BaWQa7LdZ_qGFb9VQAAAZA"]
[Sun Mar 29 22:10:33.380386 2026] [:error] [pid 23250:tid 23256] [client 51.103.28.129:35578] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-.php"] [unique_id "acky2Zxrpj-dQjy1cvoHtwAAAkQ"]
[Sun Mar 29 22:10:33.893991 2026] [:error] [pid 23167:tid 23171] [client 51.103.28.129:36097] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-.php"] [unique_id "acky2RIAHJCFaHff3_fELgAAAcE"]
[Sun Mar 29 22:10:34.411446 2026] [:error] [pid 23168:tid 23208] [client 51.103.28.129:35520] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-.php"] [unique_id "acky2mP8p0yRL8ot_2-hbwAAAgs"]
[Sun Mar 29 22:10:34.962338 2026] [:error] [pid 23167:tid 23176] [client 51.103.28.129:31781] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-.php"] [unique_id "acky2hIAHJCFaHff3_fEMgAAAcY"]
[Sun Mar 29 22:10:35.499007 2026] [:error] [pid 23168:tid 23220] [client 51.103.28.129:37296] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "acky22P8p0yRL8ot_2-hcwAAAhc"]
[Sun Mar 29 22:10:36.148798 2026] [:error] [pid 32254:tid 32272] [client 51.103.28.129:36761] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "acky3Kug2IHuyGgCTn9eVgAAAAg"]
[Sun Mar 29 22:10:36.678176 2026] [:error] [pid 23168:tid 23207] [client 51.103.28.129:34684] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "acky3GP8p0yRL8ot_2-heAAAAgo"]
[Sun Mar 29 22:10:37.222541 2026] [:error] [pid 23167:tid 23179] [client 51.103.28.129:37973] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "acky3RIAHJCFaHff3_fENQAAAck"]
[Sun Mar 29 22:10:37.742152 2026] [:error] [pid 32254:tid 32270] [client 51.103.28.129:37997] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "acky3aug2IHuyGgCTn9eWQAAAAY"]
[Sun Mar 29 22:10:38.358574 2026] [:error] [pid 32257:tid 32328] [client 51.103.28.129:31724] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "acky3iE3TArOFrUtgWo9MwAAAIo"]
[Sun Mar 29 22:10:38.839250 2026] [:error] [pid 32254:tid 32284] [client 51.103.28.129:36069] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "acky3qug2IHuyGgCTn9eWwAAABQ"]
[Sun Mar 29 22:10:39.370445 2026] [:error] [pid 32254:tid 32265] [client 51.103.28.129:35580] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ee.php"] [unique_id "acky36ug2IHuyGgCTn9eXAAAAAE"]
[Sun Mar 29 22:10:39.858718 2026] [:error] [pid 23137:tid 23143] [client 51.103.28.129:38063] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/epinyins.php"] [unique_id "acky3xaWQa7LdZ_qGFb9WgAAAYQ"]
[Sun Mar 29 22:10:40.355423 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:37272] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/epinyins.php"] [unique_id "acky4CE3TArOFrUtgWo9PQAAAIA"]
[Sun Mar 29 22:10:40.848665 2026] [:error] [pid 23284:tid 23310] [client 51.103.28.129:36688] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/epinyins.php"] [unique_id "acky4IzBujdPHsq7wySqkwAAApg"]
[Sun Mar 29 22:10:41.389559 2026] [:error] [pid 32255:tid 32292] [client 51.103.28.129:37263] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/epinyins.php"] [unique_id "acky4Wnfn-AtRoMbquz06QAAAEE"]
[Sun Mar 29 22:10:41.899344 2026] [:error] [pid 8818:tid 8834] [client 51.103.28.129:35349] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/i1.php"] [unique_id "acky4SCDvotZNSF0FBripwAAAUw"]
[Sun Mar 29 22:10:42.458569 2026] [:error] [pid 23137:tid 23157] [client 51.103.28.129:37228] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/i1.php"] [unique_id "acky4haWQa7LdZ_qGFb9XQAAAZI"]
[Sun Mar 29 22:10:42.960064 2026] [:error] [pid 32359:tid 32384] [client 51.103.28.129:34605] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/i1.php"] [unique_id "acky4gMb8G3UzfQP3WgxXgAAANc"]
[Sun Mar 29 22:10:43.534421 2026] [:error] [pid 23167:tid 23193] [client 51.103.28.129:34632] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/i1.php"] [unique_id "acky4xIAHJCFaHff3_fEOwAAAdc"]
[Sun Mar 29 22:10:44.104141 2026] [:error] [pid 23168:tid 23205] [client 51.103.28.129:36719] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vv.php"] [unique_id "acky5GP8p0yRL8ot_2-hfQAAAgg"]
[Sun Mar 29 22:10:44.619922 2026] [:error] [pid 23168:tid 23217] [client 51.103.28.129:37279] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vv.php"] [unique_id "acky5GP8p0yRL8ot_2-hfwAAAhQ"]
[Sun Mar 29 22:10:45.239503 2026] [:error] [pid 23284:tid 23301] [client 51.103.28.129:35355] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vv.php"] [unique_id "acky5YzBujdPHsq7wySqnwAAAo8"]
[Sun Mar 29 22:10:45.836873 2026] [:error] [pid 8818:tid 8823] [client 51.103.28.129:36109] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vv.php"] [unique_id "acky5SCDvotZNSF0FBriqQAAAUE"]
[Sun Mar 29 22:10:47.158054 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:34594] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oo.php"] [unique_id "acky54zBujdPHsq7wySqrAAAAow"]
[Sun Mar 29 22:10:47.768804 2026] [:error] [pid 23284:tid 23286] [client 51.103.28.129:35545] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oo.php"] [unique_id "acky54zBujdPHsq7wySqsAAAAoA"]
[Sun Mar 29 22:10:48.294027 2026] [:error] [pid 23284:tid 23290] [client 51.103.28.129:36045] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oo.php"] [unique_id "acky6IzBujdPHsq7wySqtAAAAoQ"]
[Sun Mar 29 22:10:48.861034 2026] [:error] [pid 32359:tid 32368] [client 51.103.28.129:34051] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oo.php"] [unique_id "acky6AMb8G3UzfQP3WgxYAAAAMc"]
[Sun Mar 29 22:10:49.390915 2026] [:error] [pid 23168:tid 23204] [client 51.103.28.129:35537] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk.php"] [unique_id "acky6WP8p0yRL8ot_2-hggAAAgc"]
[Sun Mar 29 22:10:49.866408 2026] [:error] [pid 32257:tid 32339] [client 51.103.28.129:34589] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk.php"] [unique_id "acky6SE3TArOFrUtgWo9RgAAAJU"]
[Sun Mar 29 22:10:50.388770 2026] [:error] [pid 23284:tid 23290] [client 51.103.28.129:36726] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk.php"] [unique_id "acky6ozBujdPHsq7wySqwgAAAoQ"]
[Sun Mar 29 22:10:50.898773 2026] [:error] [pid 23137:tid 23163] [client 51.103.28.129:31805] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk.php"] [unique_id "acky6haWQa7LdZ_qGFb9ZgAAAZg"]
[Sun Mar 29 22:10:51.395508 2026] [:error] [pid 32257:tid 32336] [client 51.103.28.129:35549] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "acky6yE3TArOFrUtgWo9RwAAAJI"]
[Sun Mar 29 22:10:52.034307 2026] [:error] [pid 23284:tid 23293] [client 51.103.28.129:35567] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "acky7IzBujdPHsq7wySq1wAAAoc"]
[Sun Mar 29 22:10:52.863487 2026] [:error] [pid 32359:tid 32379] [client 51.103.28.129:37216] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "acky7AMb8G3UzfQP3WgxZAAAANI"]
[Sun Mar 29 22:10:53.497479 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:35333] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "acky7YzBujdPHsq7wySq4QAAApc"]
[Sun Mar 29 22:10:54.128929 2026] [:error] [pid 23284:tid 23295] [client 51.103.28.129:37223] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acky7ozBujdPHsq7wySq6gAAAok"]
[Sun Mar 29 22:10:54.777931 2026] [:error] [pid 23167:tid 23172] [client 51.103.28.129:38054] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acky7hIAHJCFaHff3_fERQAAAcI"]
[Sun Mar 29 22:10:55.408082 2026] [:error] [pid 23284:tid 23301] [client 51.103.28.129:37201] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acky74zBujdPHsq7wySq9gAAAo8"]
[Sun Mar 29 22:10:55.894818 2026] [:error] [pid 23168:tid 23205] [client 51.103.28.129:36114] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acky72P8p0yRL8ot_2-hiAAAAgg"]
[Sun Mar 29 22:10:56.460260 2026] [:error] [pid 23167:tid 23185] [client 51.103.28.129:37265] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acky8BIAHJCFaHff3_fESgAAAc8"]
[Sun Mar 29 22:10:56.955348 2026] [:error] [pid 23167:tid 23194] [client 51.103.28.129:34075] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acky8BIAHJCFaHff3_fETAAAAdg"]
[Sun Mar 29 22:10:57.529726 2026] [:error] [pid 8818:tid 8828] [client 51.103.28.129:35560] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acky8SCDvotZNSF0FBriqwAAAUY"]
[Sun Mar 29 22:10:58.025153 2026] [:error] [pid 32255:tid 32296] [client 51.103.28.129:35569] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acky8mnfn-AtRoMbquz07wAAAEU"]
[Sun Mar 29 22:10:58.633291 2026] [:error] [pid 23167:tid 23188] [client 51.103.28.129:35532] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "acky8hIAHJCFaHff3_fEUQAAAdI"]
[Sun Mar 29 22:10:59.260739 2026] [:error] [pid 23168:tid 23200] [client 51.103.28.129:36678] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "acky82P8p0yRL8ot_2-hjQAAAgM"]
[Sun Mar 29 22:10:59.752740 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:37309] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "acky8yE3TArOFrUtgWo9SgAAAIw"]
[Sun Mar 29 22:11:00.262574 2026] [:error] [pid 23168:tid 23207] [client 51.103.28.129:35525] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "acky9GP8p0yRL8ot_2-hjwAAAgo"]
[Sun Mar 29 22:11:00.775849 2026] [:error] [pid 32359:tid 32371] [client 51.103.28.129:36690] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acky9AMb8G3UzfQP3WgxbAAAAMo"]
[Sun Mar 29 22:11:01.322652 2026] [:error] [pid 32359:tid 32363] [client 51.103.28.129:36735] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acky9QMb8G3UzfQP3WgxbgAAAMI"]
[Sun Mar 29 22:11:01.817066 2026] [:error] [pid 23284:tid 23289] [client 51.103.28.129:38520] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acky9YzBujdPHsq7wySrGQAAAoM"]
[Sun Mar 29 22:11:02.310057 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:37274] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acky9ozBujdPHsq7wySrHQAAAos"]
[Sun Mar 29 22:11:02.857064 2026] [:error] [pid 23137:tid 23154] [client 51.103.28.129:36075] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acky9haWQa7LdZ_qGFb9bgAAAY8"]
[Sun Mar 29 22:11:03.464880 2026] [:error] [pid 23168:tid 23197] [client 51.103.28.129:37994] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acky92P8p0yRL8ot_2-hlAAAAgA"]
[Sun Mar 29 22:11:03.993885 2026] [:error] [pid 32257:tid 32322] [client 51.103.28.129:35535] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acky9yE3TArOFrUtgWo9TgAAAIQ"]
[Sun Mar 29 22:11:04.509697 2026] [:error] [pid 23167:tid 23170] [client 51.103.28.129:38286] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acky-BIAHJCFaHff3_fEVAAAAcA"]
[Sun Mar 29 22:11:05.040339 2026] [:error] [pid 23284:tid 23299] [client 51.103.28.129:37240] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "acky-YzBujdPHsq7wySrKAAAAo0"]
[Sun Mar 29 22:11:05.563325 2026] [:error] [pid 23284:tid 23302] [client 51.103.28.129:38500] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "acky-YzBujdPHsq7wySrKgAAApA"]
[Sun Mar 29 22:11:06.080682 2026] [:error] [pid 32359:tid 32364] [client 51.103.28.129:37283] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "acky-gMb8G3UzfQP3WgxcAAAAMM"]
[Sun Mar 29 22:11:06.590830 2026] [:error] [pid 32255:tid 32313] [client 51.103.28.129:38317] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "acky-mnfn-AtRoMbquz09QAAAFY"]
[Sun Mar 29 22:11:07.135999 2026] [:error] [pid 32257:tid 32333] [client 51.103.28.129:38329] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "acky-yE3TArOFrUtgWo9VgAAAI8"]
[Sun Mar 29 22:11:07.615072 2026] [:error] [pid 23137:tid 23139] [client 51.103.28.129:37298] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "acky-xaWQa7LdZ_qGFb9cQAAAYA"]
[Sun Mar 29 22:11:08.131030 2026] [:error] [pid 32257:tid 32323] [client 51.103.28.129:36724] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "acky_CE3TArOFrUtgWo9VwAAAIU"]
[Sun Mar 29 22:11:08.722694 2026] [:error] [pid 32359:tid 32361] [client 51.103.28.129:36037] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "acky_AMb8G3UzfQP3WgxcwAAAMA"]
[Sun Mar 29 22:11:09.224365 2026] [:error] [pid 32359:tid 32383] [client 51.103.28.129:35381] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acky_QMb8G3UzfQP3WgxdAAAANY"]
[Sun Mar 29 22:11:09.731633 2026] [:error] [pid 23167:tid 23180] [client 51.103.28.129:38283] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acky_RIAHJCFaHff3_fEWwAAAco"]
[Sun Mar 29 22:11:10.265549 2026] [:error] [pid 23167:tid 23183] [client 51.103.28.129:36770] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acky_hIAHJCFaHff3_fEXQAAAc0"]
[Sun Mar 29 22:11:10.769286 2026] [:error] [pid 23137:tid 23151] [client 51.103.28.129:36758] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acky_haWQa7LdZ_qGFb9dAAAAYw"]
[Sun Mar 29 22:11:11.251180 2026] [:error] [pid 32254:tid 32277] [client 51.103.28.129:38063] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "acky_6ug2IHuyGgCTn9ecwAAAA0"]
[Sun Mar 29 22:11:11.841616 2026] [:error] [pid 32255:tid 32310] [client 51.103.28.129:38061] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "acky_2nfn-AtRoMbquz0-wAAAFM"]
[Sun Mar 29 22:11:12.407228 2026] [:error] [pid 32255:tid 32295] [client 51.103.28.129:37301] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ackzAGnfn-AtRoMbquz0_AAAAEQ"]
[Sun Mar 29 22:11:12.921525 2026] [:error] [pid 32254:tid 32272] [client 51.103.28.129:31680] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ackzAKug2IHuyGgCTn9edwAAAAg"]
[Sun Mar 29 22:11:14.055525 2026] [:error] [pid 23284:tid 23295] [client 51.103.28.129:38017] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat.php"] [unique_id "ackzAozBujdPHsq7wySrMwAAAok"]
[Sun Mar 29 22:11:14.647578 2026] [:error] [pid 32255:tid 32300] [client 51.103.28.129:36760] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat.php"] [unique_id "ackzAmnfn-AtRoMbquz0_wAAAEk"]
[Sun Mar 29 22:11:15.232477 2026] [:error] [pid 23284:tid 23304] [client 51.103.28.129:37210] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat.php"] [unique_id "ackzA4zBujdPHsq7wySrPAAAApI"]
[Sun Mar 29 22:11:15.824423 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:37990] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat.php"] [unique_id "ackzA4zBujdPHsq7wySrQAAAAos"]
[Sun Mar 29 22:11:16.333369 2026] [:error] [pid 32255:tid 32303] [client 51.103.28.129:34629] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ackzBGnfn-AtRoMbquz1AwAAAEw"]
[Sun Mar 29 22:11:16.897316 2026] [:error] [pid 23284:tid 23286] [client 51.103.28.129:38044] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ackzBIzBujdPHsq7wySrRQAAAoA"]
[Sun Mar 29 22:11:17.486871 2026] [:error] [pid 23284:tid 23288] [client 51.103.28.129:38293] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ackzBYzBujdPHsq7wySrSAAAAoI"]
[Sun Mar 29 22:11:18.121063 2026] [:error] [pid 23168:tid 23215] [client 51.103.28.129:37984] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ackzBmP8p0yRL8ot_2-hnwAAAhI"]
[Sun Mar 29 22:11:18.622005 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:35353] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "ackzBozBujdPHsq7wySrTAAAAos"]
[Sun Mar 29 22:11:19.122038 2026] [:error] [pid 23284:tid 23301] [client 51.103.28.129:35550] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "ackzB4zBujdPHsq7wySrUAAAAo8"]
[Sun Mar 29 22:11:19.660493 2026] [:error] [pid 32257:tid 32326] [client 51.103.28.129:36056] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "ackzByE3TArOFrUtgWo9XwAAAIg"]
[Sun Mar 29 22:11:20.141943 2026] [:error] [pid 23284:tid 23290] [client 51.103.28.129:35338] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "ackzCIzBujdPHsq7wySrVAAAAoQ"]
[Sun Mar 29 22:11:20.709916 2026] [:error] [pid 32257:tid 32336] [client 51.103.28.129:38516] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "ackzCCE3TArOFrUtgWo9YgAAAJI"]
[Sun Mar 29 22:11:21.233582 2026] [:error] [pid 23250:tid 23268] [client 51.103.28.129:33499] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "ackzCZxrpj-dQjy1cvoHxAAAAlA"]
[Sun Mar 29 22:11:21.811598 2026] [:error] [pid 23284:tid 23303] [client 51.103.28.129:37262] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "ackzCYzBujdPHsq7wySrWQAAApE"]
[Sun Mar 29 22:11:22.606682 2026] [:error] [pid 23167:tid 23190] [client 51.103.28.129:37259] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "ackzChIAHJCFaHff3_fEbAAAAdQ"]
[Sun Mar 29 22:11:23.221049 2026] [:error] [pid 23167:tid 23171] [client 51.103.28.129:38079] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "ackzCxIAHJCFaHff3_fEbwAAAcE"]
[Sun Mar 29 22:11:23.955701 2026] [:error] [pid 23250:tid 23259] [client 51.103.28.129:38921] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "ackzC5xrpj-dQjy1cvoHxwAAAkc"]
[Sun Mar 29 22:11:24.822469 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:38079] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "ackzDIzBujdPHsq7wySrYAAAApc"]
[Sun Mar 29 22:11:25.332435 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:38016] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "ackzDSE3TArOFrUtgWo9bAAAAIA"]
[Sun Mar 29 22:11:25.909634 2026] [:error] [pid 23284:tid 23295] [client 51.103.28.129:38047] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ackzDYzBujdPHsq7wySrYgAAAok"]
[Sun Mar 29 22:11:26.553678 2026] [:error] [pid 32257:tid 32338] [client 51.103.28.129:38077] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ackzDiE3TArOFrUtgWo9cwAAAJQ"]
[Sun Mar 29 22:11:27.251296 2026] [:error] [pid 32257:tid 32328] [client 51.103.28.129:37234] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ackzDyE3TArOFrUtgWo9eAAAAIo"]
[Sun Mar 29 22:11:27.800482 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:36781] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ackzD4zBujdPHsq7wySrZgAAAow"]
[Sun Mar 29 22:11:28.440910 2026] [:error] [pid 23284:tid 23308] [client 51.103.28.129:37194] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ackzEIzBujdPHsq7wySraAAAApY"]
[Sun Mar 29 22:11:29.085088 2026] [:error] [pid 23284:tid 23294] [client 51.103.28.129:35355] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ackzEYzBujdPHsq7wySrawAAAog"]
[Sun Mar 29 22:11:29.984158 2026] [:error] [pid 32255:tid 32297] [client 51.103.28.129:36046] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ackzEWnfn-AtRoMbquz1HQAAAEY"]
[Sun Mar 29 22:11:30.473860 2026] [:error] [pid 32255:tid 32308] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sun Mar 29 22:11:30.711904 2026] [:error] [pid 32255:tid 32303] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sun Mar 29 22:11:30.950544 2026] [:error] [pid 32255:tid 32306] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/htdocs/suspended-page/xc.php
[Sun Mar 29 22:11:31.193045 2026] [:error] [pid 32255:tid 32299] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Sun Mar 29 22:11:31.471406 2026] [:error] [pid 32255:tid 32293] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Sun Mar 29 22:11:31.709680 2026] [:error] [pid 32255:tid 32291] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sun Mar 29 22:11:31.947491 2026] [:error] [pid 32255:tid 32315] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Sun Mar 29 22:11:32.187887 2026] [:error] [pid 32255:tid 32296] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/htdocs/suspended-page/ut.php
[Sun Mar 29 22:11:32.440614 2026] [:error] [pid 32255:tid 32309] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Sun Mar 29 22:11:32.690393 2026] [:error] [pid 32255:tid 32302] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Sun Mar 29 22:11:32.981080 2026] [:error] [pid 32255:tid 32306] [client 51.103.28.129:39125] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Sun Mar 29 22:11:33.217085 2026] [:error] [pid 32255:tid 32313] [client 51.103.28.129:39125] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file52.php"] [unique_id "ackzFWnfn-AtRoMbquz1OAAAAFY"]
[Sun Mar 29 22:11:33.756818 2026] [:error] [pid 23137:tid 23162] [client 51.103.28.129:34052] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file52.php"] [unique_id "ackzFRaWQa7LdZ_qGFb9dwAAAZc"]
[Sun Mar 29 22:11:34.281008 2026] [:error] [pid 23250:tid 23274] [client 51.103.28.129:36087] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file52.php"] [unique_id "ackzFpxrpj-dQjy1cvoHygAAAlY"]
[Sun Mar 29 22:11:34.850893 2026] [:error] [pid 23168:tid 23202] [client 51.103.28.129:36052] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file52.php"] [unique_id "ackzFmP8p0yRL8ot_2-hsgAAAgU"]
[Sun Mar 29 22:11:35.351267 2026] [:error] [pid 32257:tid 32326] [client 51.103.28.129:36074] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zde.php"] [unique_id "ackzFyE3TArOFrUtgWo9lgAAAIg"]
[Sun Mar 29 22:11:35.926554 2026] [:error] [pid 32257:tid 32323] [client 51.103.28.129:39109] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zde.php"] [unique_id "ackzFyE3TArOFrUtgWo9oQAAAIU"]
[Sun Mar 29 22:11:36.498094 2026] [:error] [pid 23167:tid 23172] [client 51.103.28.129:38306] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zde.php"] [unique_id "ackzGBIAHJCFaHff3_fEewAAAcI"]
[Sun Mar 29 22:11:36.998127 2026] [:error] [pid 23284:tid 23290] [client 51.103.28.129:36762] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zde.php"] [unique_id "ackzGIzBujdPHsq7wySrfAAAAoQ"]
[Sun Mar 29 22:11:37.668977 2026] [:error] [pid 23168:tid 23206] [client 51.103.28.129:39140] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpo.php"] [unique_id "ackzGWP8p0yRL8ot_2-htQAAAgk"]
[Sun Mar 29 22:11:38.240635 2026] [:error] [pid 23284:tid 23289] [client 51.103.28.129:35362] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpo.php"] [unique_id "ackzGozBujdPHsq7wySrfgAAAoM"]
[Sun Mar 29 22:11:38.874145 2026] [:error] [pid 23284:tid 23294] [client 51.103.28.129:38038] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpo.php"] [unique_id "ackzGozBujdPHsq7wySrggAAAog"]
[Sun Mar 29 22:11:39.514976 2026] [:error] [pid 32255:tid 32298] [client 51.103.28.129:39138] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpo.php"] [unique_id "ackzG2nfn-AtRoMbquz1QAAAAEc"]
[Sun Mar 29 22:11:40.470255 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:38031] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ackzHIzBujdPHsq7wySrigAAAow"]
[Sun Mar 29 22:11:41.151179 2026] [:error] [pid 23137:tid 23145] [client 51.103.28.129:37284] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ackzHRaWQa7LdZ_qGFb9egAAAYY"]
[Sun Mar 29 22:11:42.130198 2026] [:error] [pid 32255:tid 32306] [client 51.103.28.129:37260] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ackzHmnfn-AtRoMbquz1SQAAAE8"]
[Sun Mar 29 22:11:42.791566 2026] [:error] [pid 32359:tid 32362] [client 51.103.28.129:38300] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ackzHgMb8G3UzfQP3WgxegAAAME"]
[Sun Mar 29 22:11:43.390248 2026] [:error] [pid 32257:tid 32339] [client 51.103.28.129:36119] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "ackzHyE3TArOFrUtgWo9ugAAAJU"]
[Sun Mar 29 22:11:44.534877 2026] [:error] [pid 32255:tid 32291] [client 51.103.28.129:37227] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "ackzIGnfn-AtRoMbquz1TQAAAEA"]
[Sun Mar 29 22:11:45.492304 2026] [:error] [pid 23284:tid 23304] [client 51.103.28.129:38332] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "ackzIYzBujdPHsq7wySrnQAAApI"]
[Sun Mar 29 22:11:46.125701 2026] [:error] [pid 23284:tid 23300] [client 51.103.28.129:38912] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "ackzIozBujdPHsq7wySrowAAAo4"]
[Sun Mar 29 22:11:46.949950 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:36759] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "ackzIozBujdPHsq7wySrrwAAAow"]
[Sun Mar 29 22:11:47.669212 2026] [:error] [pid 23137:tid 23156] [client 51.103.28.129:38053] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "ackzIxaWQa7LdZ_qGFb9gwAAAZE"]
[Sun Mar 29 22:11:48.411652 2026] [:error] [pid 8818:tid 8843] [client 51.103.28.129:37992] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "ackzJCCDvotZNSF0FBri0AAAAVU"]
[Sun Mar 29 22:11:49.124031 2026] [:error] [pid 32255:tid 32306] [client 51.103.28.129:38967] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filer.php"] [unique_id "ackzJWnfn-AtRoMbquz1UQAAAE8"]
[Sun Mar 29 22:11:50.030839 2026] [:error] [pid 23284:tid 23296] [client 51.103.28.129:39154] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "ackzJozBujdPHsq7wySrwwAAAoo"]
[Sun Mar 29 22:11:50.957342 2026] [:error] [pid 23284:tid 23309] [client 51.103.28.129:36713] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "ackzJozBujdPHsq7wySryQAAApc"]
[Sun Mar 29 22:11:52.563843 2026] [:error] [pid 32255:tid 32311] [client 51.103.28.129:38970] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "ackzKGnfn-AtRoMbquz1VQAAAFQ"]
[Sun Mar 29 22:11:53.324272 2026] [:error] [pid 23284:tid 23291] [client 51.103.28.129:39146] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lites.php"] [unique_id "ackzKYzBujdPHsq7wySrzgAAAoU"]
[Sun Mar 29 22:11:54.194987 2026] [:error] [pid 8818:tid 8835] [client 51.103.28.129:39116] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ackzKiCDvotZNSF0FBri4gAAAU0"]
[Sun Mar 29 22:11:54.875120 2026] [:error] [pid 23284:tid 23301] [client 51.103.28.129:39639] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ackzKozBujdPHsq7wySrzwAAAo8"]
[Sun Mar 29 22:11:56.213496 2026] [:error] [pid 23284:tid 23310] [client 51.103.28.129:39113] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ackzLIzBujdPHsq7wySr0QAAApg"]
[Sun Mar 29 22:11:56.986869 2026] [:error] [pid 32359:tid 32368] [client 51.103.28.129:39461] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ackzLAMb8G3UzfQP3WgxgAAAAMc"]
[Sun Mar 29 22:11:58.064680 2026] [:error] [pid 23168:tid 23200] [client 51.103.28.129:39105] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ackzLmP8p0yRL8ot_2-hxQAAAgM"]
[Sun Mar 29 22:11:59.134047 2026] [:error] [pid 32255:tid 32294] [client 51.103.28.129:30443] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ackzL2nfn-AtRoMbquz1XAAAAEM"]
[Sun Mar 29 22:11:59.690442 2026] [:error] [pid 32255:tid 32297] [client 51.103.28.129:38962] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ackzL2nfn-AtRoMbquz1YAAAAEY"]
[Sun Mar 29 22:12:00.516542 2026] [:error] [pid 32257:tid 32325] [client 51.103.28.129:34565] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ackzMCE3TArOFrUtgWo91AAAAIc"]
[Sun Mar 29 22:12:01.875320 2026] [:error] [pid 23137:tid 23154] [client 51.103.28.129:39427] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/main.php"] [unique_id "ackzMRaWQa7LdZ_qGFb9kwAAAY8"]
[Sun Mar 29 22:12:02.423259 2026] [:error] [pid 8818:tid 8830] [client 51.103.28.129:36737] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/main.php"] [unique_id "ackzMiCDvotZNSF0FBri7AAAAUg"]
[Sun Mar 29 22:12:03.123042 2026] [:error] [pid 23168:tid 23211] [client 51.103.28.129:36734] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/main.php"] [unique_id "ackzM2P8p0yRL8ot_2-hygAAAg4"]
[Sun Mar 29 22:12:03.921001 2026] [:error] [pid 23284:tid 23303] [client 51.103.28.129:39161] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/main.php"] [unique_id "ackzM4zBujdPHsq7wySr4wAAApE"]
[Sun Mar 29 22:12:05.350109 2026] [:error] [pid 32359:tid 32362] [client 51.103.28.129:39437] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "ackzNQMb8G3UzfQP3WgxhQAAAME"]
[Sun Mar 29 22:12:06.410353 2026] [:error] [pid 32257:tid 32322] [client 51.103.28.129:37232] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "ackzNiE3TArOFrUtgWo93gAAAIQ"]
[Sun Mar 29 22:12:07.489270 2026] [:error] [pid 32255:tid 32297] [client 51.103.28.129:39655] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "ackzN2nfn-AtRoMbquz1gwAAAEY"]
[Sun Mar 29 22:12:08.142182 2026] [:error] [pid 23284:tid 23304] [client 51.103.28.129:38272] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "ackzOIzBujdPHsq7wySr5QAAApI"]
[Sun Mar 29 22:12:09.927554 2026] [:error] [pid 23284:tid 23296] [client 51.103.28.129:39163] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filename.php"] [unique_id "ackzOYzBujdPHsq7wySr7wAAAoo"]
[Sun Mar 29 22:12:10.498062 2026] [:error] [pid 23168:tid 23206] [client 51.103.28.129:38950] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filename.php"] [unique_id "ackzOmP8p0yRL8ot_2-h3gAAAgk"]
[Sun Mar 29 22:12:11.305611 2026] [:error] [pid 8818:tid 8828] [client 51.103.28.129:37233] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filename.php"] [unique_id "ackzOyCDvotZNSF0FBri_QAAAUY"]
[Sun Mar 29 22:12:11.956096 2026] [:error] [pid 32257:tid 32338] [client 51.103.28.129:39445] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filename.php"] [unique_id "ackzOyE3TArOFrUtgWo97AAAAJQ"]
[Sun Mar 29 22:12:12.669019 2026] [:error] [pid 32255:tid 32309] [client 51.103.28.129:36794] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "ackzPGnfn-AtRoMbquz1pgAAAFI"]
[Sun Mar 29 22:12:13.238164 2026] [:error] [pid 32255:tid 32304] [client 51.103.28.129:36744] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "ackzPWnfn-AtRoMbquz1rAAAAE0"]
[Sun Mar 29 22:12:18.242773 2026] [:error] [pid 32255:tid 32308] [client 51.103.28.129:35547] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "ackzQmnfn-AtRoMbquz10gAAAFE"]
[Sun Mar 29 22:12:19.040451 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:39141] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "ackzQ4zBujdPHsq7wySsIgAAAos"]
[Sun Mar 29 22:12:19.749267 2026] [:error] [pid 32359:tid 32371] [client 51.103.28.129:34646] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackzQwMb8G3UzfQP3WgxjAAAAMo"]
[Sun Mar 29 22:12:20.338672 2026] [:error] [pid 23284:tid 23305] [client 51.103.28.129:39637] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackzRIzBujdPHsq7wySsMAAAApM"]
[Sun Mar 29 22:12:21.012419 2026] [:error] [pid 23168:tid 23215] [client 51.103.28.129:39643] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackzRWP8p0yRL8ot_2-h6wAAAhI"]
[Sun Mar 29 22:12:21.623952 2026] [:error] [pid 23168:tid 23197] [client 51.103.28.129:37278] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "ackzRWP8p0yRL8ot_2-h7QAAAgA"]
[Sun Mar 29 22:12:22.144505 2026] [:error] [pid 23168:tid 23200] [client 51.103.28.129:39439] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ackzRmP8p0yRL8ot_2-h9AAAAgM"]
[Sun Mar 29 22:12:23.160801 2026] [:error] [pid 8818:tid 8841] [client 51.103.28.129:39166] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ackzRyCDvotZNSF0FBrjEwAAAVM"]
[Sun Mar 29 22:12:24.237696 2026] [:error] [pid 32257:tid 32342] [client 51.103.28.129:39620] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ackzSCE3TArOFrUtgWo-DgAAAJg"]
[Sun Mar 29 22:12:24.963206 2026] [:error] [pid 32255:tid 32315] [client 51.103.28.129:38287] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ackzSGnfn-AtRoMbquz18gAAAFg"]
[Sun Mar 29 22:12:25.572742 2026] [:error] [pid 23284:tid 23300] [client 51.103.28.129:39677] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ackzSYzBujdPHsq7wySsPAAAAo4"]
[Sun Mar 29 22:12:26.811381 2026] [:error] [pid 32257:tid 32337] [client 51.103.28.129:38043] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ackzSiE3TArOFrUtgWo-HQAAAJM"]
[Sun Mar 29 22:12:27.339199 2026] [:error] [pid 32257:tid 32333] [client 51.103.28.129:39469] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ackzSyE3TArOFrUtgWo-IAAAAI8"]
[Sun Mar 29 22:12:28.325049 2026] [:error] [pid 32255:tid 32293] [client 51.103.28.129:36753] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ackzTGnfn-AtRoMbquz2BwAAAEI"]
[Sun Mar 29 22:12:29.005498 2026] [:error] [pid 32257:tid 32328] [client 51.103.28.129:38934] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "ackzTSE3TArOFrUtgWo-KgAAAIo"]
[Sun Mar 29 22:12:29.603991 2026] [:error] [pid 23284:tid 23289] [client 51.103.28.129:40285] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "ackzTYzBujdPHsq7wySsTAAAAoM"]
[Sun Mar 29 22:12:30.141808 2026] [:error] [pid 32255:tid 32303] [client 51.103.28.129:37218] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "ackzTmnfn-AtRoMbquz2CQAAAEw"]
[Sun Mar 29 22:12:30.733217 2026] [:error] [pid 32257:tid 32318] [client 51.103.28.129:36783] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "ackzTiE3TArOFrUtgWo-OwAAAIA"]
[Sun Mar 29 22:12:31.411848 2026] [:error] [pid 8818:tid 8829] [client 51.103.28.129:39157] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "ackzTyCDvotZNSF0FBrjIQAAAUc"]
[Sun Mar 29 22:12:32.158550 2026] [:error] [pid 32359:tid 32385] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Sun Mar 29 22:12:32.419786 2026] [:error] [pid 32359:tid 32371] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mt.php
[Sun Mar 29 22:12:32.657397 2026] [:error] [pid 32359:tid 32369] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/shout.php
[Sun Mar 29 22:12:32.909753 2026] [:error] [pid 32359:tid 32376] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/zews.php
[Sun Mar 29 22:12:33.177938 2026] [:error] [pid 32359:tid 32379] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sun Mar 29 22:12:33.487400 2026] [:error] [pid 32359:tid 32370] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/lite.php
[Sun Mar 29 22:12:33.725417 2026] [:error] [pid 32359:tid 32381] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sun Mar 29 22:12:34.210265 2026] [:error] [pid 32359:tid 32378] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sun Mar 29 22:12:34.485099 2026] [:error] [pid 32359:tid 32385] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sun Mar 29 22:12:34.724426 2026] [:error] [pid 32359:tid 32365] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Sun Mar 29 22:12:35.058422 2026] [:error] [pid 32359:tid 32383] [client 51.103.28.129:37241] File does not exist: /usr/local/apache/htdocs/suspended-page/13k.php
[Sun Mar 29 22:12:35.318494 2026] [:error] [pid 32359:tid 32377] [client 51.103.28.129:37241] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ackzUwMb8G3UzfQP3WgxqAAAANA"]
[Sun Mar 29 22:12:36.045577 2026] [:error] [pid 32257:tid 32321] [client 51.103.28.129:39664] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ackzVCE3TArOFrUtgWo-WwAAAIM"]
[Sun Mar 29 22:12:36.636523 2026] [:error] [pid 23168:tid 23209] [client 51.103.28.129:37187] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ackzVGP8p0yRL8ot_2-iCwAAAgw"]
[Sun Mar 29 22:12:37.334007 2026] [:error] [pid 32255:tid 32302] [client 51.103.28.129:37186] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ackzVWnfn-AtRoMbquz2GQAAAEs"]
[Sun Mar 29 22:12:38.004022 2026] [:error] [pid 32257:tid 32339] [client 51.103.28.129:38505] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackzViE3TArOFrUtgWo-cQAAAJU"]
[Sun Mar 29 22:12:38.601559 2026] [:error] [pid 32257:tid 32342] [client 51.103.28.129:34680] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackzViE3TArOFrUtgWo-eQAAAJg"]
[Sun Mar 29 22:12:39.287321 2026] [:error] [pid 8818:tid 8825] [client 51.103.28.129:38309] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackzVyCDvotZNSF0FBrjKQAAAUM"]
[Sun Mar 29 22:12:39.971035 2026] [:error] [pid 23250:tid 23260] [client 51.103.28.129:40262] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ackzV5xrpj-dQjy1cvoH7AAAAkg"]
[Sun Mar 29 22:12:40.624371 2026] [:error] [pid 32255:tid 32294] [client 51.103.28.129:38290] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xx.php"] [unique_id "ackzWGnfn-AtRoMbquz2IAAAAEM"]
[Sun Mar 29 22:12:41.492859 2026] [:error] [pid 23137:tid 23143] [client 51.103.28.129:37219] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xx.php"] [unique_id "ackzWRaWQa7LdZ_qGFb9qAAAAYQ"]
[Sun Mar 29 22:12:42.000647 2026] [:error] [pid 23168:tid 23218] [client 51.103.28.129:38045] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xx.php"] [unique_id "ackzWWP8p0yRL8ot_2-iIAAAAhU"]
[Sun Mar 29 22:12:42.611899 2026] [:error] [pid 8818:tid 8837] [client 51.103.28.129:38915] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xx.php"] [unique_id "ackzWiCDvotZNSF0FBrjLQAAAU8"]
[Sun Mar 29 22:12:43.352375 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:40197] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "ackzWyE3TArOFrUtgWo-hQAAAIw"]
[Sun Mar 29 22:12:43.909736 2026] [:error] [pid 23284:tid 23300] [client 51.103.28.129:40236] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "ackzW4zBujdPHsq7wySscgAAAo4"]
[Sun Mar 29 22:12:44.718708 2026] [:error] [pid 32255:tid 32305] [client 51.103.28.129:39151] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "ackzXGnfn-AtRoMbquz2LgAAAE4"]
[Sun Mar 29 22:12:45.358888 2026] [:error] [pid 23167:tid 23186] [client 51.103.28.129:40209] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "ackzXRIAHJCFaHff3_fErgAAAdA"]
[Sun Mar 29 22:12:45.851788 2026] [:error] [pid 32257:tid 32331] [client 51.103.28.129:38064] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ackzXSE3TArOFrUtgWo-iQAAAI0"]
[Sun Mar 29 22:12:46.465296 2026] [:error] [pid 23284:tid 23296] [client 51.103.28.129:38940] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ackzXozBujdPHsq7wySsggAAAoo"]
[Sun Mar 29 22:12:47.116480 2026] [:error] [pid 32254:tid 32276] [client 51.103.28.129:38036] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ackzX6ug2IHuyGgCTn9emQAAAAw"]
[Sun Mar 29 22:12:47.885715 2026] [:error] [pid 23284:tid 23308] [client 51.103.28.129:40256] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ackzX4zBujdPHsq7wySshwAAApY"]
[Sun Mar 29 22:12:48.689010 2026] [:error] [pid 23284:tid 23292] [client 51.103.28.129:39628] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abe.php"] [unique_id "ackzYIzBujdPHsq7wySsjAAAAoY"]
[Sun Mar 29 22:12:49.721026 2026] [:error] [pid 32254:tid 32277] [client 51.103.28.129:37306] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abe.php"] [unique_id "ackzYaug2IHuyGgCTn9enwAAAA0"]
[Sun Mar 29 22:12:50.242534 2026] [:error] [pid 23250:tid 23264] [client 51.103.28.129:39162] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abe.php"] [unique_id "ackzYpxrpj-dQjy1cvoH-AAAAkw"]
[Sun Mar 29 22:12:50.929689 2026] [:error] [pid 23284:tid 23295] [client 51.103.28.129:40284] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abe.php"] [unique_id "ackzYozBujdPHsq7wySskwAAAok"]
[Sun Mar 29 22:12:51.602012 2026] [:error] [pid 23250:tid 23269] [client 51.103.28.129:35575] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "ackzY5xrpj-dQjy1cvoH-QAAAlE"]
[Sun Mar 29 22:12:52.456547 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:36779] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "ackzZIzBujdPHsq7wySsmQAAAos"]
[Sun Mar 29 22:12:53.194617 2026] [:error] [pid 23167:tid 23187] [client 51.103.28.129:38029] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "ackzZRIAHJCFaHff3_fEuwAAAdE"]
[Sun Mar 29 22:12:54.032095 2026] [:error] [pid 32359:tid 32368] [client 51.103.28.129:37964] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "ackzZgMb8G3UzfQP3WgxqQAAAMc"]
[Sun Mar 29 22:12:54.867406 2026] [:error] [pid 8818:tid 8832] [client 51.103.28.129:36754] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "ackzZiCDvotZNSF0FBrjOAAAAUo"]
[Sun Mar 29 22:12:55.657323 2026] [:error] [pid 23168:tid 23219] [client 51.103.28.129:37293] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "ackzZ2P8p0yRL8ot_2-iOAAAAhY"]
[Sun Mar 29 22:12:56.304942 2026] [:error] [pid 23137:tid 23158] [client 51.103.28.129:40304] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "ackzaBaWQa7LdZ_qGFb9rQAAAZM"]
[Sun Mar 29 22:12:57.245304 2026] [:error] [pid 23168:tid 23200] [client 51.103.28.129:40203] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "ackzaWP8p0yRL8ot_2-iPQAAAgM"]
[Sun Mar 29 22:12:58.013225 2026] [:error] [pid 23167:tid 23194] [client 51.103.28.129:38941] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelay.php"] [unique_id "ackzahIAHJCFaHff3_fEvQAAAdg"]
[Sun Mar 29 22:12:58.939526 2026] [:error] [pid 23284:tid 23305] [client 51.103.28.129:37217] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelay.php"] [unique_id "ackzaozBujdPHsq7wySspgAAApM"]
[Sun Mar 29 22:13:00.037809 2026] [:error] [pid 23284:tid 23300] [client 51.103.28.129:40299] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelay.php"] [unique_id "ackzbIzBujdPHsq7wySssgAAAo4"]
[Sun Mar 29 22:13:00.996663 2026] [:error] [pid 23168:tid 23215] [client 51.103.28.129:39139] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelay.php"] [unique_id "ackzbGP8p0yRL8ot_2-iSwAAAhI"]
[Sun Mar 29 22:13:01.664045 2026] [:error] [pid 23284:tid 23298] [client 51.103.28.129:38930] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "ackzbYzBujdPHsq7wySsvQAAAow"]
[Sun Mar 29 22:13:02.369611 2026] [:error] [pid 32257:tid 32330] [client 51.103.28.129:37207] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "ackzbiE3TArOFrUtgWo-qgAAAIw"]
[Sun Mar 29 22:13:03.177809 2026] [:error] [pid 23284:tid 23310] [client 51.103.28.129:37955] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "ackzb4zBujdPHsq7wySswgAAApg"]
[Sun Mar 29 22:13:04.047454 2026] [:error] [pid 23284:tid 23296] [client 51.103.28.129:38932] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "ackzcIzBujdPHsq7wySs0AAAAoo"]
[Sun Mar 29 22:13:05.097789 2026] [:error] [pid 23284:tid 23306] [client 51.103.28.129:40211] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "ackzcYzBujdPHsq7wySs3gAAApQ"]
[Sun Mar 29 22:13:05.697356 2026] [:error] [pid 23284:tid 23305] [client 51.103.28.129:41669] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "ackzcYzBujdPHsq7wySs5QAAApM"]
[Sun Mar 29 22:13:06.290648 2026] [:error] [pid 32257:tid 32333] [client 51.103.28.129:40255] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "ackzciE3TArOFrUtgWo-sQAAAI8"]
[Sun Mar 29 22:13:08.125535 2026] [:error] [pid 23168:tid 23216] [client 51.103.28.129:39449] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "ackzdGP8p0yRL8ot_2-iWAAAAhM"]
[Sun Mar 29 22:13:08.661728 2026] [:error] [pid 23167:tid 23178] [client 51.103.28.129:40242] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ackzdBIAHJCFaHff3_fExgAAAcg"]
[Sun Mar 29 22:13:09.580848 2026] [:error] [pid 23284:tid 23308] [client 51.103.28.129:38011] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ackzdYzBujdPHsq7wySs8gAAApY"]
[Sun Mar 29 22:13:10.311573 2026] [:error] [pid 32359:tid 32362] [client 51.103.28.129:38321] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ackzdgMb8G3UzfQP3WgxrwAAAME"]
[Sun Mar 29 22:13:10.860539 2026] [:error] [pid 23167:tid 23187] [client 51.103.28.129:38056] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ackzdhIAHJCFaHff3_fEygAAAdE"]
[Sun Mar 29 22:13:11.470930 2026] [:error] [pid 23137:tid 23158] [client 51.103.28.129:41709] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsvvs.php"] [unique_id "ackzdxaWQa7LdZ_qGFb9vAAAAZM"]
[Sun Mar 29 22:13:12.143252 2026] [:error] [pid 32254:tid 32264] [client 51.103.28.129:38003] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsvvs.php"] [unique_id "ackzeKug2IHuyGgCTn9eqwAAAAA"]
[Sun Mar 29 22:13:12.768426 2026] [:error] [pid 23168:tid 23215] [client 51.103.28.129:39625] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsvvs.php"] [unique_id "ackzeGP8p0yRL8ot_2-iZwAAAhI"]
[Sun Mar 29 22:13:13.307264 2026] [:error] [pid 23284:tid 23303] [client 51.103.28.129:41760] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsvvs.php"] [unique_id "ackzeYzBujdPHsq7wySs-gAAApE"]
[Sun Mar 29 22:13:13.813764 2026] [:error] [pid 23284:tid 23294] [client 51.103.28.129:38296] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vbbn.php"] [unique_id "ackzeYzBujdPHsq7wyStAwAAAog"]
[Sun Mar 29 22:13:14.541722 2026] [:error] [pid 23284:tid 23297] [client 51.103.28.129:38947] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vbbn.php"] [unique_id "ackzeozBujdPHsq7wyStCQAAAos"]
[Sun Mar 29 22:13:15.196043 2026] [:error] [pid 23284:tid 23308] [client 51.103.28.129:36714] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vbbn.php"] [unique_id "ackze4zBujdPHsq7wyStFAAAApY"]
[Sun Mar 29 22:13:15.706027 2026] [:error] [pid 32257:tid 32325] [client 51.103.28.129:37968] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vbbn.php"] [unique_id "ackzeyE3TArOFrUtgWo-ugAAAIc"]
[Sun Mar 29 22:13:16.294782 2026] [:error] [pid 23284:tid 23305] [client 51.103.28.129:40198] [client 51.103.28.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shoyo.php"] [unique_id "ackzfIzBujdPHsq7wyStIQAAApM"]
[Sun Mar 29 23:18:02.313118 2026] [:error] [pid 32257:tid 32328] [client 45.226.78.216:32609] [client 45.226.78.216] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.226.78.216, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aclCqiE3TArOFrUtgWplOQAAAIo"]
[Sun Mar 29 23:18:02.321012 2026] [:error] [pid 32257:tid 32328] [client 45.226.78.216:32609] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 30 04:11:25.367851 2026] [:error] [pid 55884:tid 55961] [client 20.226.46.201:10228] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Mon Mar 30 04:11:25.680016 2026] [:error] [pid 55884:tid 55965] [client 20.226.46.201:10228] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Mon Mar 30 04:11:26.304382 2026] [:error] [pid 55884:tid 55956] [client 20.226.46.201:10228] File does not exist: /usr/local/apache/htdocs/suspended-page/ad1.php
[Mon Mar 30 04:11:26.616355 2026] [:error] [pid 55884:tid 55960] [client 20.226.46.201:10228] File does not exist: /usr/local/apache/htdocs/suspended-page/wefile.php
[Mon Mar 30 04:11:26.928698 2026] [:error] [pid 55884:tid 55969] [client 20.226.46.201:10228] File does not exist: /usr/local/apache/htdocs/suspended-page/tanjiro.php
[Mon Mar 30 04:11:27.240684 2026] [:error] [pid 55884:tid 55977] [client 20.226.46.201:10228] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Mon Mar 30 04:11:28.519140 2026] [:error] [pid 55884:tid 55977] [client 20.226.46.201:10228] File does not exist: /usr/local/apache/htdocs/suspended-page/file22.php
[Mon Mar 30 04:11:28.832213 2026] [:error] [pid 55884:tid 55973] [client 20.226.46.201:10228] File does not exist: /usr/local/apache/htdocs/suspended-page/inwp.php
[Mon Mar 30 04:11:29.145422 2026] [:error] [pid 55884:tid 55972] [client 20.226.46.201:10228] File does not exist: /usr/local/apache/htdocs/suspended-page/ca4.php
[Mon Mar 30 04:11:29.454585 2026] [:error] [pid 55884:tid 55967] [client 20.226.46.201:10228] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nz.php"] [unique_id "acmHcTjuYLVkve3VbhxtXQAAAQ4"]
[Mon Mar 30 04:11:30.072531 2026] [:error] [pid 4040:tid 4111] [client 20.226.46.201:10200] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nz.php"] [unique_id "acmHcgxlbJV8kpOpFvZD6AAAAIM"]
[Mon Mar 30 04:11:30.696938 2026] [:error] [pid 4040:tid 4116] [client 20.226.46.201:10560] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nz.php"] [unique_id "acmHcgxlbJV8kpOpFvZD7AAAAIg"]
[Mon Mar 30 04:11:31.313301 2026] [:error] [pid 4033:tid 4076] [client 20.226.46.201:10571] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nz.php"] [unique_id "acmHc6nf-DXI9VblHi0vCQAAABc"]
[Mon Mar 30 04:11:31.929798 2026] [:error] [pid 4040:tid 4130] [client 20.226.46.201:10230] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnn_.php"] [unique_id "acmHcwxlbJV8kpOpFvZD7wAAAJY"]
[Mon Mar 30 04:11:32.548035 2026] [:error] [pid 4034:tid 4090] [client 20.226.46.201:10567] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnn_.php"] [unique_id "acmHdLfAq8eF_uU4gu2JrAAAAEk"]
[Mon Mar 30 04:11:33.164061 2026] [:error] [pid 4033:tid 4067] [client 20.226.46.201:10233] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnn_.php"] [unique_id "acmHdanf-DXI9VblHi0vEAAAAA4"]
[Mon Mar 30 04:11:33.781777 2026] [:error] [pid 4033:tid 4076] [client 20.226.46.201:10195] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnn_.php"] [unique_id "acmHdanf-DXI9VblHi0vGAAAABc"]
[Mon Mar 30 04:11:34.401352 2026] [:error] [pid 4033:tid 4073] [client 20.226.46.201:10177] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/anz.php"] [unique_id "acmHdqnf-DXI9VblHi0vGwAAABQ"]
[Mon Mar 30 04:11:35.024110 2026] [:error] [pid 55884:tid 55967] [client 20.226.46.201:10181] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/anz.php"] [unique_id "acmHdzjuYLVkve3VbhxtfQAAAQ4"]
[Mon Mar 30 04:11:35.640553 2026] [:error] [pid 4033:tid 4077] [client 20.226.46.201:10238] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/anz.php"] [unique_id "acmHd6nf-DXI9VblHi0vHwAAABg"]
[Mon Mar 30 04:11:36.257869 2026] [:error] [pid 4033:tid 4072] [client 20.226.46.201:10221] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/anz.php"] [unique_id "acmHeKnf-DXI9VblHi0vIwAAABM"]
[Mon Mar 30 04:11:36.874166 2026] [:error] [pid 4033:tid 4071] [client 20.226.46.201:10575] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acmHeKnf-DXI9VblHi0vKgAAABI"]
[Mon Mar 30 04:11:37.489943 2026] [:error] [pid 4033:tid 4069] [client 20.226.46.201:10214] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acmHeanf-DXI9VblHi0vLQAAABA"]
[Mon Mar 30 04:11:38.109589 2026] [:error] [pid 4033:tid 4058] [client 20.226.46.201:10223] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acmHeqnf-DXI9VblHi0vLwAAAAU"]
[Mon Mar 30 04:11:38.726347 2026] [:error] [pid 55884:tid 55974] [client 20.226.46.201:10201] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "acmHejjuYLVkve3VbhxtkgAAARU"]
[Mon Mar 30 04:11:39.347226 2026] [:error] [pid 4033:tid 4068] [client 20.226.46.201:10563] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file66.php"] [unique_id "acmHe6nf-DXI9VblHi0vNwAAAA8"]
[Mon Mar 30 04:11:39.962041 2026] [:error] [pid 55884:tid 55973] [client 20.226.46.201:10602] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file66.php"] [unique_id "acmHezjuYLVkve3VbhxtngAAARQ"]
[Mon Mar 30 04:11:40.578287 2026] [:error] [pid 4034:tid 4096] [client 20.226.46.201:10212] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file66.php"] [unique_id "acmHfLfAq8eF_uU4gu2JrwAAAE8"]
[Mon Mar 30 04:11:41.194716 2026] [:error] [pid 4034:tid 4105] [client 20.226.46.201:10579] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file66.php"] [unique_id "acmHfbfAq8eF_uU4gu2JsQAAAFg"]
[Mon Mar 30 04:11:41.812120 2026] [:error] [pid 4139:tid 4168] [client 20.226.46.201:10580] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kure.php"] [unique_id "acmHfYYyhg47TZoaP9L5wgAAANU"]
[Mon Mar 30 04:11:42.429351 2026] [:error] [pid 4033:tid 4074] [client 20.226.46.201:10227] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kure.php"] [unique_id "acmHfqnf-DXI9VblHi0vQgAAABU"]
[Mon Mar 30 04:11:43.047695 2026] [:error] [pid 4040:tid 4122] [client 20.226.46.201:10207] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kure.php"] [unique_id "acmHfwxlbJV8kpOpFvZD9AAAAI4"]
[Mon Mar 30 04:11:43.664497 2026] [:error] [pid 4033:tid 4055] [client 20.226.46.201:10593] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kure.php"] [unique_id "acmHf6nf-DXI9VblHi0vSgAAAAI"]
[Mon Mar 30 04:11:44.282357 2026] [:error] [pid 4033:tid 4069] [client 20.226.46.201:10217] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blnux.php"] [unique_id "acmHgKnf-DXI9VblHi0vUQAAABA"]
[Mon Mar 30 04:11:44.899658 2026] [:error] [pid 4033:tid 4063] [client 20.226.46.201:10570] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blnux.php"] [unique_id "acmHgKnf-DXI9VblHi0vVgAAAAo"]
[Mon Mar 30 04:11:45.516608 2026] [:error] [pid 4033:tid 4069] [client 20.226.46.201:10203] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blnux.php"] [unique_id "acmHganf-DXI9VblHi0vWgAAABA"]
[Mon Mar 30 04:11:46.133824 2026] [:error] [pid 4033:tid 4076] [client 20.226.46.201:10222] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blnux.php"] [unique_id "acmHgqnf-DXI9VblHi0vXgAAABc"]
[Mon Mar 30 04:11:46.749625 2026] [:error] [pid 4034:tid 4083] [client 20.226.46.201:10231] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gaje.php"] [unique_id "acmHgrfAq8eF_uU4gu2JtwAAAEI"]
[Mon Mar 30 04:11:47.374119 2026] [:error] [pid 4033:tid 4063] [client 20.226.46.201:10219] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gaje.php"] [unique_id "acmHg6nf-DXI9VblHi0vYwAAAAo"]
[Mon Mar 30 04:11:47.988633 2026] [:error] [pid 4139:tid 4152] [client 20.226.46.201:10208] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gaje.php"] [unique_id "acmHg4Yyhg47TZoaP9L5yQAAAMU"]
[Mon Mar 30 04:11:48.603486 2026] [:error] [pid 55884:tid 55972] [client 20.226.46.201:10179] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gaje.php"] [unique_id "acmHhDjuYLVkve3VbhxtwwAAARM"]
[Mon Mar 30 04:11:49.219052 2026] [:error] [pid 4034:tid 4098] [client 20.226.46.201:10610] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/msy.php"] [unique_id "acmHhbfAq8eF_uU4gu2JuQAAAFE"]
[Mon Mar 30 04:11:49.834615 2026] [:error] [pid 4139:tid 4154] [client 20.226.46.201:10506] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/msy.php"] [unique_id "acmHhYYyhg47TZoaP9L5zQAAAMc"]
[Mon Mar 30 04:11:50.453035 2026] [:error] [pid 4139:tid 4168] [client 20.226.46.201:10188] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/msy.php"] [unique_id "acmHhoYyhg47TZoaP9L5zwAAANU"]
[Mon Mar 30 04:11:51.070508 2026] [:error] [pid 4033:tid 4075] [client 20.226.46.201:10215] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/msy.php"] [unique_id "acmHh6nf-DXI9VblHi0vbQAAABY"]
[Mon Mar 30 04:11:51.687429 2026] [:error] [pid 4139:tid 4159] [client 20.226.46.201:10192] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fgd.php"] [unique_id "acmHh4Yyhg47TZoaP9L50wAAAMw"]
[Mon Mar 30 04:11:52.304394 2026] [:error] [pid 4139:tid 4153] [client 20.226.46.201:10182] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fgd.php"] [unique_id "acmHiIYyhg47TZoaP9L51QAAAMY"]
[Mon Mar 30 04:11:52.920400 2026] [:error] [pid 4033:tid 4066] [client 20.226.46.201:10224] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fgd.php"] [unique_id "acmHiKnf-DXI9VblHi0vcwAAAA0"]
[Mon Mar 30 04:11:53.536977 2026] [:error] [pid 4033:tid 4065] [client 20.226.46.201:10526] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fgd.php"] [unique_id "acmHianf-DXI9VblHi0vegAAAAw"]
[Mon Mar 30 04:11:54.152331 2026] [:error] [pid 4033:tid 4071] [client 20.226.46.201:10189] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/X7T6.php"] [unique_id "acmHiqnf-DXI9VblHi0vewAAABI"]
[Mon Mar 30 04:11:54.771647 2026] [:error] [pid 4034:tid 4101] [client 20.226.46.201:10604] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/X7T6.php"] [unique_id "acmHirfAq8eF_uU4gu2JwAAAAFQ"]
[Mon Mar 30 04:11:55.392307 2026] [:error] [pid 4033:tid 4064] [client 20.226.46.201:10202] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/X7T6.php"] [unique_id "acmHi6nf-DXI9VblHi0vgwAAAAs"]
[Mon Mar 30 04:11:56.009816 2026] [:error] [pid 4033:tid 4055] [client 20.226.46.201:10178] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/X7T6.php"] [unique_id "acmHjKnf-DXI9VblHi0vhAAAAAI"]
[Mon Mar 30 04:11:56.631373 2026] [:error] [pid 55884:tid 55965] [client 20.226.46.201:10198] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alog.php"] [unique_id "acmHjDjuYLVkve3Vbhxt1AAAAQw"]
[Mon Mar 30 04:11:57.248416 2026] [:error] [pid 4139:tid 4158] [client 20.226.46.201:10622] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alog.php"] [unique_id "acmHjYYyhg47TZoaP9L54QAAAMs"]
[Mon Mar 30 04:11:57.865165 2026] [:error] [pid 4139:tid 4169] [client 20.226.46.201:10186] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alog.php"] [unique_id "acmHjYYyhg47TZoaP9L55gAAANY"]
[Mon Mar 30 04:11:58.482527 2026] [:error] [pid 4034:tid 4090] [client 20.226.46.201:10577] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alog.php"] [unique_id "acmHjrfAq8eF_uU4gu2JxQAAAEk"]
[Mon Mar 30 04:11:59.099558 2026] [:error] [pid 55884:tid 55962] [client 20.226.46.201:10183] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "acmHjzjuYLVkve3Vbhxt1wAAAQk"]
[Mon Mar 30 04:11:59.716782 2026] [:error] [pid 4033:tid 4054] [client 20.226.46.201:10239] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "acmHj6nf-DXI9VblHi0viAAAAAE"]
[Mon Mar 30 04:12:00.336004 2026] [:error] [pid 4040:tid 4116] [client 20.226.46.201:10596] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "acmHkAxlbJV8kpOpFvZEFAAAAIg"]
[Mon Mar 30 04:12:00.957392 2026] [:error] [pid 4139:tid 4154] [client 20.226.46.201:10606] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "acmHkIYyhg47TZoaP9L56wAAAMc"]
[Mon Mar 30 04:12:01.581844 2026] [:error] [pid 4034:tid 4091] [client 20.226.46.201:10229] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ztv.php"] [unique_id "acmHkbfAq8eF_uU4gu2JzgAAAEo"]
[Mon Mar 30 04:12:02.199848 2026] [:error] [pid 55884:tid 55958] [client 20.226.46.201:10503] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ztv.php"] [unique_id "acmHkjjuYLVkve3Vbhxt2wAAAQU"]
[Mon Mar 30 04:12:02.817138 2026] [:error] [pid 55884:tid 55965] [client 20.226.46.201:10180] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ztv.php"] [unique_id "acmHkjjuYLVkve3Vbhxt3gAAAQw"]
[Mon Mar 30 04:12:03.435678 2026] [:error] [pid 4139:tid 4166] [client 20.226.46.201:10211] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ztv.php"] [unique_id "acmHk4Yyhg47TZoaP9L59AAAANM"]
[Mon Mar 30 04:12:04.054810 2026] [:error] [pid 4139:tid 4165] [client 20.226.46.201:10574] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Rk41.php"] [unique_id "acmHlIYyhg47TZoaP9L5-AAAANI"]
[Mon Mar 30 04:12:04.672285 2026] [:error] [pid 55884:tid 55976] [client 20.226.46.201:10578] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Rk41.php"] [unique_id "acmHlDjuYLVkve3Vbhxt4gAAARc"]
[Mon Mar 30 04:12:05.292946 2026] [:error] [pid 4034:tid 4085] [client 20.226.46.201:10213] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Rk41.php"] [unique_id "acmHlbfAq8eF_uU4gu2J1AAAAEQ"]
[Mon Mar 30 04:12:05.909232 2026] [:error] [pid 4034:tid 4083] [client 20.226.46.201:10568] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Rk41.php"] [unique_id "acmHlbfAq8eF_uU4gu2J2AAAAEI"]
[Mon Mar 30 04:12:06.527662 2026] [:error] [pid 4034:tid 4092] [client 20.226.46.201:10598] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acmHlrfAq8eF_uU4gu2J2gAAAEs"]
[Mon Mar 30 04:12:07.152272 2026] [:error] [pid 4033:tid 4068] [client 20.226.46.201:10564] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acmHl6nf-DXI9VblHi0viwAAAA8"]
[Mon Mar 30 04:12:07.769754 2026] [:error] [pid 4033:tid 4071] [client 20.226.46.201:10232] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acmHl6nf-DXI9VblHi0vjQAAABI"]
[Mon Mar 30 04:12:08.387144 2026] [:error] [pid 4040:tid 4120] [client 20.226.46.201:10609] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "acmHmAxlbJV8kpOpFvZEFwAAAIw"]
[Mon Mar 30 04:12:09.004268 2026] [:error] [pid 4033:tid 4074] [client 20.226.46.201:10237] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "acmHmanf-DXI9VblHi0vkgAAABU"]
[Mon Mar 30 04:12:09.622170 2026] [:error] [pid 4040:tid 4118] [client 20.226.46.201:10508] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "acmHmQxlbJV8kpOpFvZEGgAAAIo"]
[Mon Mar 30 04:12:10.238517 2026] [:error] [pid 55884:tid 55961] [client 20.226.46.201:10220] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "acmHmjjuYLVkve3Vbhxt6AAAAQg"]
[Mon Mar 30 04:12:10.854944 2026] [:error] [pid 4139:tid 4149] [client 20.226.46.201:10507] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/fm.php"] [unique_id "acmHmoYyhg47TZoaP9L6BwAAAMI"]
[Mon Mar 30 04:12:11.475078 2026] [:error] [pid 4139:tid 4169] [client 20.226.46.201:10176] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acmHm4Yyhg47TZoaP9L6CgAAANY"]
[Mon Mar 30 04:12:12.100799 2026] [:error] [pid 4040:tid 4109] [client 20.226.46.201:10583] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acmHnAxlbJV8kpOpFvZEHgAAAIE"]
[Mon Mar 30 04:12:12.717275 2026] [:error] [pid 55884:tid 55958] [client 20.226.46.201:10585] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acmHnDjuYLVkve3Vbhxt8gAAAQU"]
[Mon Mar 30 04:12:13.336515 2026] [:error] [pid 4139:tid 4147] [client 20.226.46.201:10590] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/astra/inc/ki1k.php"] [unique_id "acmHnYYyhg47TZoaP9L6DwAAAMA"]
[Mon Mar 30 04:12:13.953036 2026] [:error] [pid 4040:tid 4124] [client 20.226.46.201:10584] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acmHnQxlbJV8kpOpFvZEIAAAAJA"]
[Mon Mar 30 04:12:14.570117 2026] [:error] [pid 55884:tid 55967] [client 20.226.46.201:10210] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acmHnjjuYLVkve3Vbhxt-wAAAQ4"]
[Mon Mar 30 04:12:15.187544 2026] [:error] [pid 4040:tid 4122] [client 20.226.46.201:10185] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acmHnwxlbJV8kpOpFvZEIgAAAI4"]
[Mon Mar 30 04:12:15.805569 2026] [:error] [pid 55884:tid 55977] [client 20.226.46.201:10191] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/WordPress/wp-admin/includes/zmFM.php"] [unique_id "acmHnzjuYLVkve3Vbhxt_gAAARg"]
[Mon Mar 30 04:12:16.427194 2026] [:error] [pid 55884:tid 55976] [client 20.226.46.201:10194] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "acmHoDjuYLVkve3VbhxuAQAAARc"]
[Mon Mar 30 04:12:17.044374 2026] [:error] [pid 4040:tid 4130] [client 20.226.46.201:10184] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "acmHoQxlbJV8kpOpFvZEJgAAAJY"]
[Mon Mar 30 04:12:17.662781 2026] [:error] [pid 4040:tid 4123] [client 20.226.46.201:10569] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "acmHoQxlbJV8kpOpFvZEKAAAAI8"]
[Mon Mar 30 04:12:18.280604 2026] [:error] [pid 4040:tid 4128] [client 20.226.46.201:10616] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "acmHogxlbJV8kpOpFvZEKwAAAJQ"]
[Mon Mar 30 04:12:18.903021 2026] [:error] [pid 4040:tid 4125] [client 20.226.46.201:10199] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ty.php"] [unique_id "acmHogxlbJV8kpOpFvZELAAAAJE"]
[Mon Mar 30 04:12:19.522105 2026] [:error] [pid 4040:tid 4124] [client 20.226.46.201:10591] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ty.php"] [unique_id "acmHowxlbJV8kpOpFvZELgAAAJA"]
[Mon Mar 30 04:12:20.140540 2026] [:error] [pid 4040:tid 4122] [client 20.226.46.201:10515] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ty.php"] [unique_id "acmHpAxlbJV8kpOpFvZEMQAAAI4"]
[Mon Mar 30 04:12:20.757183 2026] [:error] [pid 4034:tid 4094] [client 20.226.46.201:10226] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ty.php"] [unique_id "acmHpLfAq8eF_uU4gu2J-gAAAE0"]
[Mon Mar 30 04:12:21.373205 2026] [:error] [pid 4033:tid 4057] [client 20.226.46.201:10225] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acmHpanf-DXI9VblHi0vpgAAAAQ"]
[Mon Mar 30 04:12:21.989850 2026] [:error] [pid 55884:tid 55962] [client 20.226.46.201:10611] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acmHpTjuYLVkve3VbhxuDwAAAQk"]
[Mon Mar 30 04:12:22.611164 2026] [:error] [pid 55884:tid 55965] [client 20.226.46.201:10592] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acmHpjjuYLVkve3VbhxuEQAAAQw"]
[Mon Mar 30 04:12:23.229123 2026] [:error] [pid 55884:tid 55971] [client 20.226.46.201:10617] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/cay-van-phong/filemanager.php"] [unique_id "acmHpzjuYLVkve3VbhxuEgAAARI"]
[Mon Mar 30 04:12:23.844841 2026] [:error] [pid 4033:tid 4057] [client 20.226.46.201:10605] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "acmHp6nf-DXI9VblHi0vsAAAAAQ"]
[Mon Mar 30 04:12:24.462729 2026] [:error] [pid 55884:tid 55966] [client 20.226.46.201:10615] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acmHqDjuYLVkve3VbhxuEwAAAQ0"]
[Mon Mar 30 04:12:25.093130 2026] [:error] [pid 55884:tid 55956] [client 20.226.46.201:10619] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acmHqTjuYLVkve3VbhxuFQAAAQM"]
[Mon Mar 30 04:12:25.710773 2026] [:error] [pid 4033:tid 4069] [client 20.226.46.201:10561] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acmHqanf-DXI9VblHi0vugAAABA"]
[Mon Mar 30 04:12:26.328481 2026] [:error] [pid 4040:tid 4122] [client 20.226.46.201:10555] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/seoplugins/index.php"] [unique_id "acmHqgxlbJV8kpOpFvZENgAAAI4"]
[Mon Mar 30 04:12:26.948437 2026] [:error] [pid 4033:tid 4066] [client 20.226.46.201:10576] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ini.php"] [unique_id "acmHqqnf-DXI9VblHi0vvQAAAA0"]
[Mon Mar 30 04:12:27.569770 2026] [:error] [pid 4033:tid 4056] [client 20.226.46.201:10562] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ini.php"] [unique_id "acmHq6nf-DXI9VblHi0vvgAAAAM"]
[Mon Mar 30 04:12:28.187615 2026] [:error] [pid 4139:tid 4167] [client 20.226.46.201:10513] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ini.php"] [unique_id "acmHrIYyhg47TZoaP9L6FQAAANQ"]
[Mon Mar 30 04:12:28.803914 2026] [:error] [pid 4139:tid 4150] [client 20.226.46.201:10534] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ini.php"] [unique_id "acmHrIYyhg47TZoaP9L6FgAAAMM"]
[Mon Mar 30 04:12:30.367489 2026] [:error] [pid 55884:tid 55955] [client 20.226.46.201:10522] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon Mar 30 04:12:30.679563 2026] [:error] [pid 55884:tid 55964] [client 20.226.46.201:10522] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Mon Mar 30 04:12:31.617725 2026] [:error] [pid 55884:tid 55960] [client 20.226.46.201:10522] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Mon Mar 30 04:12:31.926423 2026] [:error] [pid 55884:tid 55958] [client 20.226.46.201:10522] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "acmHrzjuYLVkve3VbhxuJwAAAQU"]
[Mon Mar 30 04:12:32.551401 2026] [:error] [pid 4033:tid 4065] [client 20.226.46.201:10586] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "acmHsKnf-DXI9VblHi0vzgAAAAw"]
[Mon Mar 30 04:12:33.171149 2026] [:error] [pid 4040:tid 4119] [client 20.226.46.201:10197] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "acmHsQxlbJV8kpOpFvZEPwAAAIs"]
[Mon Mar 30 04:12:34.725146 2026] [:error] [pid 4040:tid 4121] [client 20.226.46.201:10517] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acmHsgxlbJV8kpOpFvZERAAAAI0"]
[Mon Mar 30 04:12:35.341661 2026] [:error] [pid 55884:tid 55955] [client 20.226.46.201:10468] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acmHszjuYLVkve3VbhxuLgAAAQI"]
[Mon Mar 30 04:12:35.956890 2026] [:error] [pid 55884:tid 55954] [client 20.226.46.201:10497] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acmHszjuYLVkve3VbhxuMgAAAQE"]
[Mon Mar 30 04:12:36.577862 2026] [:error] [pid 55884:tid 55968] [client 20.226.46.201:10525] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acmHtDjuYLVkve3VbhxuNQAAAQ8"]
[Mon Mar 30 04:12:37.194646 2026] [:error] [pid 55884:tid 55961] [client 20.226.46.201:10587] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acmHtTjuYLVkve3VbhxuOAAAAQg"]
[Mon Mar 30 04:12:37.810600 2026] [:error] [pid 4139:tid 4161] [client 20.226.46.201:10600] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acmHtYYyhg47TZoaP9L6HAAAAM4"]
[Mon Mar 30 04:12:38.427282 2026] [:error] [pid 55884:tid 55975] [client 20.226.46.201:10520] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acmHtjjuYLVkve3VbhxuOwAAARY"]
[Mon Mar 30 04:12:39.045716 2026] [:error] [pid 4139:tid 4167] [client 20.226.46.201:10599] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acmHt4Yyhg47TZoaP9L6IgAAANQ"]
[Mon Mar 30 04:12:39.663981 2026] [:error] [pid 4033:tid 4067] [client 20.226.46.201:10552] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "acmHt6nf-DXI9VblHi0v2wAAAA4"]
[Mon Mar 30 04:12:40.280646 2026] [:error] [pid 55884:tid 55969] [client 20.226.46.201:10511] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "acmHuDjuYLVkve3VbhxuQAAAARA"]
[Mon Mar 30 04:12:40.896312 2026] [:error] [pid 4040:tid 4122] [client 20.226.46.201:10209] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "acmHuAxlbJV8kpOpFvZETwAAAI4"]
[Mon Mar 30 04:12:41.512539 2026] [:error] [pid 4040:tid 4132] [client 20.226.46.201:10614] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "acmHuQxlbJV8kpOpFvZEUAAAAJg"]
[Mon Mar 30 04:12:42.128409 2026] [:error] [pid 55884:tid 55964] [client 20.226.46.201:10471] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acmHujjuYLVkve3VbhxuRQAAAQs"]
[Mon Mar 30 04:12:42.745919 2026] [:error] [pid 4033:tid 4060] [client 20.226.46.201:10496] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acmHuqnf-DXI9VblHi0v4gAAAAc"]
[Mon Mar 30 04:12:43.362630 2026] [:error] [pid 55884:tid 55977] [client 20.226.46.201:10536] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acmHuzjuYLVkve3VbhxuSgAAARg"]
[Mon Mar 30 04:12:43.982507 2026] [:error] [pid 4033:tid 4067] [client 20.226.46.201:10589] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acmHu6nf-DXI9VblHi0v5QAAAA4"]
[Mon Mar 30 04:12:44.599404 2026] [:error] [pid 4139:tid 4166] [client 20.226.46.201:10572] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acmHvIYyhg47TZoaP9L6JQAAANM"]
[Mon Mar 30 04:12:45.216901 2026] [:error] [pid 4033:tid 4056] [client 20.226.46.201:10502] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acmHvanf-DXI9VblHi0v6wAAAAM"]
[Mon Mar 30 04:12:45.833279 2026] [:error] [pid 4033:tid 4077] [client 20.226.46.201:10501] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acmHvanf-DXI9VblHi0v7gAAABg"]
[Mon Mar 30 04:12:46.452002 2026] [:error] [pid 4033:tid 4053] [client 20.226.46.201:10569] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acmHvqnf-DXI9VblHi0v8QAAAAA"]
[Mon Mar 30 04:12:47.070140 2026] [:error] [pid 4033:tid 4067] [client 20.226.46.201:10603] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acmHv6nf-DXI9VblHi0v8gAAAA4"]
[Mon Mar 30 04:12:47.690084 2026] [:error] [pid 4034:tid 4088] [client 20.226.46.201:10204] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acmHv7fAq8eF_uU4gu2J_wAAAEc"]
[Mon Mar 30 04:12:48.309331 2026] [:error] [pid 4033:tid 4063] [client 20.226.46.201:10512] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acmHwKnf-DXI9VblHi0v9AAAAAo"]
[Mon Mar 30 04:12:48.925049 2026] [:error] [pid 4033:tid 4065] [client 20.226.46.201:10439] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acmHwKnf-DXI9VblHi0v9wAAAAw"]
[Mon Mar 30 04:12:49.541440 2026] [:error] [pid 4034:tid 4098] [client 20.226.46.201:10556] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/Response/wp-login.php"] [unique_id "acmHwbfAq8eF_uU4gu2KAwAAAFE"]
[Mon Mar 30 04:12:50.160663 2026] [:error] [pid 4139:tid 4151] [client 20.226.46.201:10530] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acmHwoYyhg47TZoaP9L6LQAAAMQ"]
[Mon Mar 30 04:12:50.777616 2026] [:error] [pid 4033:tid 4060] [client 20.226.46.201:10435] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acmHwqnf-DXI9VblHi0v_AAAAAc"]
[Mon Mar 30 04:12:51.394697 2026] [:error] [pid 4034:tid 4102] [client 20.226.46.201:10543] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/coffee/alfa-rex.php"] [unique_id "acmHw7fAq8eF_uU4gu2KCAAAAFU"]
[Mon Mar 30 04:12:52.013682 2026] [:error] [pid 55884:tid 55969] [client 20.226.46.201:10608] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acmHxDjuYLVkve3VbhxuTAAAARA"]
[Mon Mar 30 04:12:52.633557 2026] [:error] [pid 4033:tid 4064] [client 20.226.46.201:10588] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/src/alfa-rex.php"] [unique_id "acmHxKnf-DXI9VblHi0v_wAAAAs"]
[Mon Mar 30 04:12:53.252733 2026] [:error] [pid 4033:tid 4069] [client 20.226.46.201:10190] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acmHxanf-DXI9VblHi0wBAAAABA"]
[Mon Mar 30 04:12:53.868960 2026] [:error] [pid 4034:tid 4081] [client 20.226.46.201:10216] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acmHxbfAq8eF_uU4gu2KDQAAAEA"]
[Mon Mar 30 04:12:54.486401 2026] [:error] [pid 4034:tid 4086] [client 20.226.46.201:10433] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acmHxrfAq8eF_uU4gu2KEAAAAEU"]
[Mon Mar 30 04:12:55.103879 2026] [:error] [pid 4034:tid 4090] [client 20.226.46.201:10521] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acmHx7fAq8eF_uU4gu2KEwAAAEk"]
[Mon Mar 30 04:12:55.721605 2026] [:error] [pid 4034:tid 4105] [client 20.226.46.201:10205] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acmHx7fAq8eF_uU4gu2KFAAAAFg"]
[Mon Mar 30 04:12:56.337452 2026] [:error] [pid 55884:tid 55968] [client 20.226.46.201:10532] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acmHyDjuYLVkve3VbhxuWQAAAQ8"]
[Mon Mar 30 04:12:56.953339 2026] [:error] [pid 4139:tid 4151] [client 20.226.46.201:10607] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-mail.php/wp-includes/ID3/wp-mail.php"] [unique_id "acmHyIYyhg47TZoaP9L6NQAAAMQ"]
[Mon Mar 30 04:12:57.570349 2026] [:error] [pid 4033:tid 4057] [client 20.226.46.201:10594] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acmHyanf-DXI9VblHi0wDQAAAAQ"]
[Mon Mar 30 04:12:58.200858 2026] [:error] [pid 4033:tid 4075] [client 20.226.46.201:10235] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acmHyqnf-DXI9VblHi0wEQAAABY"]
[Mon Mar 30 04:12:58.817360 2026] [:error] [pid 4040:tid 4118] [client 20.226.46.201:10234] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acmHygxlbJV8kpOpFvZEYgAAAIo"]
[Mon Mar 30 04:12:59.433906 2026] [:error] [pid 4033:tid 4070] [client 20.226.46.201:10540] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acmHy6nf-DXI9VblHi0wHAAAABE"]
[Mon Mar 30 04:13:00.050949 2026] [:error] [pid 4033:tid 4058] [client 20.226.46.201:10549] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acmHzKnf-DXI9VblHi0wIgAAAAU"]
[Mon Mar 30 04:13:00.673796 2026] [:error] [pid 4033:tid 4075] [client 20.226.46.201:10557] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acmHzKnf-DXI9VblHi0wLAAAABY"]
[Mon Mar 30 04:13:01.295156 2026] [:error] [pid 4034:tid 4086] [client 20.226.46.201:10473] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acmHzbfAq8eF_uU4gu2KFwAAAEU"]
[Mon Mar 30 04:13:01.911304 2026] [:error] [pid 4033:tid 4076] [client 20.226.46.201:10547] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acmHzanf-DXI9VblHi0wPgAAABc"]
[Mon Mar 30 04:13:02.532598 2026] [:error] [pid 4139:tid 4161] [client 20.226.46.201:10565] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/css/xp.php"] [unique_id "acmHzoYyhg47TZoaP9L6PgAAAM4"]
[Mon Mar 30 04:13:03.151964 2026] [:error] [pid 4139:tid 4166] [client 20.226.46.201:10444] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/css/xp.php"] [unique_id "acmHz4Yyhg47TZoaP9L6QQAAANM"]
[Mon Mar 30 04:13:03.768692 2026] [:error] [pid 4034:tid 4087] [client 20.226.46.201:10206] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/css/xp.php"] [unique_id "acmHz7fAq8eF_uU4gu2KGQAAAEY"]
[Mon Mar 30 04:13:04.387667 2026] [:error] [pid 4034:tid 4102] [client 20.226.46.201:10445] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/css/xp.php"] [unique_id "acmH0LfAq8eF_uU4gu2KHQAAAFU"]
[Mon Mar 30 04:13:05.004721 2026] [:error] [pid 4139:tid 4164] [client 20.226.46.201:10612] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "acmH0YYyhg47TZoaP9L6RwAAANE"]
[Mon Mar 30 04:13:05.624715 2026] [:error] [pid 4034:tid 4089] [client 20.226.46.201:10504] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acmH0bfAq8eF_uU4gu2KHgAAAEg"]
[Mon Mar 30 04:13:06.240737 2026] [:error] [pid 55884:tid 55970] [client 20.226.46.201:10463] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acmH0jjuYLVkve3VbhxuYgAAARE"]
[Mon Mar 30 04:13:06.856678 2026] [:error] [pid 4040:tid 4121] [client 20.226.46.201:10595] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "acmH0gxlbJV8kpOpFvZEZQAAAI0"]
[Mon Mar 30 04:13:07.473789 2026] [:error] [pid 4139:tid 4149] [client 20.226.46.201:10545] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acmH04Yyhg47TZoaP9L6TAAAAMI"]
[Mon Mar 30 04:13:08.094766 2026] [:error] [pid 4139:tid 4155] [client 20.226.46.201:10548] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acmH1IYyhg47TZoaP9L6TgAAAMg"]
[Mon Mar 30 04:13:08.713099 2026] [:error] [pid 4033:tid 4070] [client 20.226.46.201:10505] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acmH1Knf-DXI9VblHi0wbgAAABE"]
[Mon Mar 30 04:13:09.331611 2026] [:error] [pid 4033:tid 4055] [client 20.226.46.201:10527] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/chosen.php"] [unique_id "acmH1anf-DXI9VblHi0wdwAAAAI"]
[Mon Mar 30 04:13:09.950913 2026] [:error] [pid 4139:tid 4158] [client 20.226.46.201:10523] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acmH1YYyhg47TZoaP9L6UAAAAMs"]
[Mon Mar 30 04:13:10.570223 2026] [:error] [pid 55884:tid 55962] [client 20.226.46.201:10488] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Content/Type/wp-login.php"] [unique_id "acmH1jjuYLVkve3VbhxuawAAAQk"]
[Mon Mar 30 04:13:11.187558 2026] [:error] [pid 4033:tid 4053] [client 20.226.46.201:10449] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/style.php"] [unique_id "acmH16nf-DXI9VblHi0whQAAAAA"]
[Mon Mar 30 04:13:11.803741 2026] [:error] [pid 4033:tid 4055] [client 20.226.46.201:10551] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/style.php"] [unique_id "acmH16nf-DXI9VblHi0wiwAAAAI"]
[Mon Mar 30 04:13:12.420935 2026] [:error] [pid 4139:tid 4152] [client 20.226.46.201:10514] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/style.php"] [unique_id "acmH2IYyhg47TZoaP9L6VQAAAMU"]
[Mon Mar 30 04:13:13.043569 2026] [:error] [pid 4034:tid 4102] [client 20.226.46.201:10377] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acmH2bfAq8eF_uU4gu2KJwAAAFU"]
[Mon Mar 30 04:13:13.660542 2026] [:error] [pid 4034:tid 4081] [client 20.226.46.201:10492] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acmH2bfAq8eF_uU4gu2KKQAAAEA"]
[Mon Mar 30 04:13:14.280782 2026] [:error] [pid 55884:tid 55955] [client 20.226.46.201:10613] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acmH2jjuYLVkve3VbhxucwAAAQI"]
[Mon Mar 30 04:13:14.913135 2026] [:error] [pid 4033:tid 4060] [client 20.226.46.201:10537] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acmH2qnf-DXI9VblHi0wpAAAAAc"]
[Mon Mar 30 04:13:15.545517 2026] [:error] [pid 4033:tid 4056] [client 20.226.46.201:10541] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "acmH26nf-DXI9VblHi0wrAAAAAM"]
[Mon Mar 30 04:13:16.161749 2026] [:error] [pid 4139:tid 4155] [client 20.226.46.201:10510] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "acmH3IYyhg47TZoaP9L6VwAAAMg"]
[Mon Mar 30 04:13:16.777708 2026] [:error] [pid 4040:tid 4108] [client 20.226.46.201:10573] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "acmH3AxlbJV8kpOpFvZEcQAAAIA"]
[Mon Mar 30 04:13:17.393459 2026] [:error] [pid 4033:tid 4077] [client 20.226.46.201:10544] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "acmH3anf-DXI9VblHi0wwAAAABg"]
[Mon Mar 30 04:13:18.026509 2026] [:error] [pid 4040:tid 4113] [client 20.226.46.201:10455] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acmH3gxlbJV8kpOpFvZEdQAAAIU"]
[Mon Mar 30 04:13:18.648250 2026] [:error] [pid 4040:tid 4122] [client 20.226.46.201:10236] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acmH3gxlbJV8kpOpFvZEdgAAAI4"]
[Mon Mar 30 04:13:19.264712 2026] [:error] [pid 4040:tid 4116] [client 20.226.46.201:10498] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acmH3wxlbJV8kpOpFvZEdwAAAIg"]
[Mon Mar 30 04:13:19.880629 2026] [:error] [pid 55884:tid 55962] [client 20.226.46.201:10546] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acmH3zjuYLVkve3VbhxugAAAAQk"]
[Mon Mar 30 04:13:20.501985 2026] [:error] [pid 4033:tid 4071] [client 20.226.46.201:10618] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acmH4Knf-DXI9VblHi0w1QAAABI"]
[Mon Mar 30 04:13:21.120483 2026] [:error] [pid 4033:tid 4068] [client 20.226.46.201:10478] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acmH4anf-DXI9VblHi0w2wAAAA8"]
[Mon Mar 30 04:13:21.736779 2026] [:error] [pid 4040:tid 4109] [client 20.226.46.201:10448] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "acmH4QxlbJV8kpOpFvZEegAAAIE"]
[Mon Mar 30 04:13:22.354523 2026] [:error] [pid 4040:tid 4114] [client 20.226.46.201:10533] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "acmH4gxlbJV8kpOpFvZEfgAAAIY"]
[Mon Mar 30 04:13:22.972450 2026] [:error] [pid 55884:tid 55956] [client 20.226.46.201:10477] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "acmH4jjuYLVkve3VbhxukAAAAQM"]
[Mon Mar 30 04:13:23.591200 2026] [:error] [pid 4033:tid 4074] [client 20.226.46.201:10484] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "acmH46nf-DXI9VblHi0w4QAAABU"]
[Mon Mar 30 04:13:24.210699 2026] [:error] [pid 4139:tid 4167] [client 20.226.46.201:10528] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acmH5IYyhg47TZoaP9L6YAAAANQ"]
[Mon Mar 30 04:13:24.828753 2026] [:error] [pid 4033:tid 4067] [client 20.226.46.201:10539] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acmH5Knf-DXI9VblHi0w6QAAAA4"]
[Mon Mar 30 04:13:25.445956 2026] [:error] [pid 4033:tid 4054] [client 20.226.46.201:10621] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acmH5anf-DXI9VblHi0w7gAAAAE"]
[Mon Mar 30 04:13:26.071316 2026] [:error] [pid 4139:tid 4169] [client 20.226.46.201:10472] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "acmH5oYyhg47TZoaP9L6ZgAAANY"]
[Mon Mar 30 04:13:26.689073 2026] [:error] [pid 4139:tid 4166] [client 20.226.46.201:10499] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acmH5oYyhg47TZoaP9L6agAAANM"]
[Mon Mar 30 04:13:27.305236 2026] [:error] [pid 4033:tid 4066] [client 20.226.46.201:10446] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acmH56nf-DXI9VblHi0w8gAAAA0"]
[Mon Mar 30 04:13:27.921799 2026] [:error] [pid 55884:tid 55962] [client 20.226.46.201:10389] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acmH5zjuYLVkve3VbhxumAAAAQk"]
[Mon Mar 30 04:13:28.541632 2026] [:error] [pid 4040:tid 4130] [client 20.226.46.201:10582] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acmH6AxlbJV8kpOpFvZEhAAAAJY"]
[Mon Mar 30 04:13:29.161214 2026] [:error] [pid 4034:tid 4082] [client 20.226.46.201:10481] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acmH6bfAq8eF_uU4gu2KNQAAAEE"]
[Mon Mar 30 04:13:29.779655 2026] [:error] [pid 55884:tid 55973] [client 20.226.46.201:10518] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acmH6TjuYLVkve3VbhxunAAAARQ"]
[Mon Mar 30 04:13:30.398704 2026] [:error] [pid 4034:tid 4081] [client 20.226.46.201:10370] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acmH6rfAq8eF_uU4gu2KOAAAAEA"]
[Mon Mar 30 04:13:31.025802 2026] [:error] [pid 4040:tid 4125] [client 20.226.46.201:10386] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/wp-admin.php"] [unique_id "acmH6wxlbJV8kpOpFvZEiwAAAJE"]
[Mon Mar 30 04:13:31.646532 2026] [:error] [pid 4040:tid 4118] [client 20.226.46.201:10453] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acmH6wxlbJV8kpOpFvZEjQAAAIo"]
[Mon Mar 30 04:13:32.265789 2026] [:error] [pid 4040:tid 4128] [client 20.226.46.201:10465] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acmH7AxlbJV8kpOpFvZEjwAAAJQ"]
[Mon Mar 30 04:13:32.892417 2026] [:error] [pid 4033:tid 4059] [client 20.226.46.201:10390] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acmH7Knf-DXI9VblHi0w_QAAAAY"]
[Mon Mar 30 04:13:33.526494 2026] [:error] [pid 4033:tid 4065] [client 20.226.46.201:10454] [client 20.226.46.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acmH7anf-DXI9VblHi0xAgAAAAw"]
[Mon Mar 30 04:13:34.454616 2026] [:error] [pid 55884:tid 55965] [client 20.226.46.201:10509] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Content/Type/alfa-rex.php"] [unique_id "acmH7jjuYLVkve3VbhxupQAAAQw"]
[Mon Mar 30 04:13:35.392272 2026] [:error] [pid 4034:tid 4092] [client 20.226.46.201:10474] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Mon Mar 30 04:13:36.013501 2026] [:error] [pid 4034:tid 4102] [client 20.226.46.201:10474] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acmH8LfAq8eF_uU4gu2KRgAAAFU"]
[Mon Mar 30 04:13:36.639111 2026] [:error] [pid 4033:tid 4066] [client 20.226.46.201:10597] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Mon Mar 30 04:13:36.948136 2026] [:error] [pid 4033:tid 4055] [client 20.226.46.201:10597] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "acmH8Knf-DXI9VblHi0xGAAAAAI"]
[Mon Mar 30 04:13:37.881835 2026] [:error] [pid 55884:tid 55964] [client 20.226.46.201:10559] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "acmH8TjuYLVkve3VbhxurAAAAQs"]
[Mon Mar 30 04:13:40.763109 2026] [:error] [pid 4139:tid 4147] [client 20.226.46.201:10467] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "acmH9IYyhg47TZoaP9L6fwAAAMA"]
[Mon Mar 30 04:13:41.695808 2026] [:error] [pid 55884:tid 55955] [client 20.226.46.201:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/user.php
[Mon Mar 30 04:13:42.361052 2026] [:error] [pid 55884:tid 55955] [client 20.226.46.201:10381] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon Mar 30 04:13:42.669912 2026] [:error] [pid 55884:tid 55965] [client 20.226.46.201:10381] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "acmH9jjuYLVkve3VbhxuzAAAAQw"]
[Mon Mar 30 04:13:43.289249 2026] [:error] [pid 4034:tid 4090] [client 20.226.46.201:10440] [client 20.226.46.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/wp-login.php"] [unique_id "acmH97fAq8eF_uU4gu2KSwAAAEk"]
[Mon Mar 30 07:32:59.329740 2026] [:error] [pid 16267:tid 16286] [client 185.198.240.66:46563] [client 185.198.240.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "acm2qxqiE8Iq9ozpWXGwtQAAAs0"]
[Mon Mar 30 13:44:08.887384 2026] [:error] [pid 35343:tid 35358] [client 104.168.126.136:26722] [client 104.168.126.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "acoNqKP5HurqmbvwN-K7LAAAAA0"]
[Mon Mar 30 17:27:57.471037 2026] [:error] [pid 41941:tid 41958] [client 172.213.0.0:60356] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Mon Mar 30 17:27:57.729396 2026] [:error] [pid 41941:tid 41944] [client 172.213.0.0:60356] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Mon Mar 30 17:27:57.966150 2026] [:error] [pid 41941:tid 41962] [client 172.213.0.0:60356] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Mon Mar 30 17:27:58.320317 2026] [:error] [pid 41941:tid 41963] [client 172.213.0.0:60356] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Mon Mar 30 17:27:58.721450 2026] [:error] [pid 41941:tid 41957] [client 172.213.0.0:60356] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Mon Mar 30 17:27:58.981392 2026] [:error] [pid 41941:tid 41943] [client 172.213.0.0:60356] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Mon Mar 30 17:27:59.219346 2026] [:error] [pid 41941:tid 41958] [client 172.213.0.0:60356] File does not exist: /usr/local/apache/htdocs/suspended-page/h2.php
[Mon Mar 30 17:27:59.486194 2026] [:error] [pid 41941:tid 41951] [client 172.213.0.0:60356] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Mon Mar 30 17:27:59.759838 2026] [:error] [pid 41941:tid 41967] [client 172.213.0.0:60356] File does not exist: /usr/local/apache/htdocs/suspended-page/144.php
[Mon Mar 30 17:28:00.002670 2026] [:error] [pid 41941:tid 41965] [client 172.213.0.0:60356] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Mon Mar 30 17:28:00.269822 2026] [:error] [pid 41941:tid 41963] [client 172.213.0.0:60356] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "acpCICB2g7BNCXGBOJNCkAAAARQ"]
[Mon Mar 30 17:28:00.955788 2026] [:error] [pid 35250:tid 35323] [client 172.213.0.0:14861] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "acpCIIaKM1MR6zcp2YM5TAAAAMw"]
[Mon Mar 30 17:28:02.602412 2026] [:error] [pid 41941:tid 41967] [client 172.213.0.0:15135] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "acpCIiB2g7BNCXGBOJNCmAAAARg"]
[Mon Mar 30 17:28:03.279595 2026] [:error] [pid 35343:tid 35364] [client 172.213.0.0:11648] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "acpCI6P5HurqmbvwN-IKAgAAABM"]
[Mon Mar 30 17:28:04.456715 2026] [:error] [pid 41941:tid 41951] [client 172.213.0.0:60925] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acpCJCB2g7BNCXGBOJNCnAAAAQg"]
[Mon Mar 30 17:28:05.196322 2026] [:error] [pid 35249:tid 35300] [client 172.213.0.0:40517] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acpCJSqCKiTq85d6rgBHsQAAAJA"]
[Mon Mar 30 17:28:05.905671 2026] [:error] [pid 35343:tid 35359] [client 172.213.0.0:8770] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acpCJaP5HurqmbvwN-IKBgAAAA4"]
[Mon Mar 30 17:28:06.708565 2026] [:error] [pid 35249:tid 35295] [client 172.213.0.0:61812] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "acpCJiqCKiTq85d6rgBHtAAAAIs"]
[Mon Mar 30 17:28:07.325350 2026] [:error] [pid 51065:tid 51078] [client 172.213.0.0:57939] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "acpCJ3Mr8wtZeHSSB7Ir0AAAAcs"]
[Mon Mar 30 17:28:08.054531 2026] [:error] [pid 51065:tid 51085] [client 172.213.0.0:9140] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "acpCKHMr8wtZeHSSB7Ir1AAAAdI"]
[Mon Mar 30 17:28:08.661130 2026] [:error] [pid 35343:tid 35348] [client 172.213.0.0:51376] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "acpCKKP5HurqmbvwN-IKCQAAAAM"]
[Mon Mar 30 17:28:09.705557 2026] [:error] [pid 35250:tid 35326] [client 172.213.0.0:33382] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "acpCKYaKM1MR6zcp2YM5VAAAAM8"]
[Mon Mar 30 17:28:10.780077 2026] [:error] [pid 35343:tid 35350] [client 172.213.0.0:51374] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "acpCKqP5HurqmbvwN-IKDQAAAAU"]
[Mon Mar 30 17:28:11.932305 2026] [:error] [pid 51065:tid 51086] [client 172.213.0.0:39206] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "acpCK3Mr8wtZeHSSB7Ir1wAAAdM"]
[Mon Mar 30 17:28:12.797633 2026] [:error] [pid 51065:tid 51069] [client 172.213.0.0:15184] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "acpCLHMr8wtZeHSSB7Ir2gAAAcI"]
[Mon Mar 30 17:28:13.653531 2026] [:error] [pid 41941:tid 41943] [client 172.213.0.0:1636] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "acpCLSB2g7BNCXGBOJNCogAAAQA"]
[Mon Mar 30 17:28:15.315942 2026] [:error] [pid 41941:tid 41947] [client 172.213.0.0:41876] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acpCLyB2g7BNCXGBOJNCqgAAAQQ"]
[Mon Mar 30 17:28:16.194950 2026] [:error] [pid 41941:tid 41954] [client 172.213.0.0:39220] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acpCMCB2g7BNCXGBOJNCqwAAAQs"]
[Mon Mar 30 17:28:17.601199 2026] [:error] [pid 51065:tid 51084] [client 172.213.0.0:9065] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acpCMXMr8wtZeHSSB7Ir4AAAAdE"]
[Mon Mar 30 17:28:18.393718 2026] [:error] [pid 41941:tid 41963] [client 172.213.0.0:17119] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "acpCMiB2g7BNCXGBOJNCswAAARQ"]
[Mon Mar 30 17:28:19.523350 2026] [:error] [pid 35248:tid 35262] [client 172.213.0.0:9723] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acpCM73igMCgAQPFS_9siQAAAEg"]
[Mon Mar 30 17:28:20.269583 2026] [:error] [pid 35249:tid 35308] [client 172.213.0.0:45179] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acpCNCqCKiTq85d6rgBHtgAAAJg"]
[Mon Mar 30 17:28:21.288058 2026] [:error] [pid 35250:tid 35329] [client 172.213.0.0:9077] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acpCNYaKM1MR6zcp2YM5ZgAAANI"]
[Mon Mar 30 17:28:21.950122 2026] [:error] [pid 35250:tid 35315] [client 172.213.0.0:7718] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "acpCNYaKM1MR6zcp2YM5aQAAAMQ"]
[Mon Mar 30 17:28:23.468358 2026] [:error] [pid 35250:tid 35324] [client 172.213.0.0:38642] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "acpCN4aKM1MR6zcp2YM5bgAAAM0"]
[Mon Mar 30 17:28:24.207420 2026] [:error] [pid 35250:tid 35325] [client 172.213.0.0:47195] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "acpCOIaKM1MR6zcp2YM5cwAAAM4"]
[Mon Mar 30 17:28:25.281762 2026] [:error] [pid 35343:tid 35362] [client 172.213.0.0:53304] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "acpCOaP5HurqmbvwN-IKGAAAABE"]
[Mon Mar 30 17:28:26.883427 2026] [:error] [pid 35343:tid 35364] [client 172.213.0.0:56838] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "acpCOqP5HurqmbvwN-IKIAAAABM"]
[Mon Mar 30 17:28:28.185414 2026] [:error] [pid 35250:tid 35327] [client 172.213.0.0:25999] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "acpCPIaKM1MR6zcp2YM5jQAAANA"]
[Mon Mar 30 17:28:29.743289 2026] [:error] [pid 41941:tid 41967] [client 172.213.0.0:1325] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "acpCPSB2g7BNCXGBOJNCuwAAARg"]
[Mon Mar 30 17:28:30.776246 2026] [:error] [pid 41941:tid 41956] [client 172.213.0.0:33879] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "acpCPiB2g7BNCXGBOJNCxQAAAQ0"]
[Mon Mar 30 17:28:31.514706 2026] [:error] [pid 51065:tid 51068] [client 172.213.0.0:16724] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "acpCP3Mr8wtZeHSSB7Ir9gAAAcE"]
[Mon Mar 30 17:28:32.694808 2026] [:error] [pid 41941:tid 41959] [client 172.213.0.0:22363] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2ksm17n.php"] [unique_id "acpCQCB2g7BNCXGBOJNCyQAAARA"]
[Mon Mar 30 17:28:35.844178 2026] [:error] [pid 41941:tid 41948] [client 172.213.0.0:31486] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2ksm17n.php"] [unique_id "acpCQyB2g7BNCXGBOJNC3wAAAQU"]
[Mon Mar 30 17:28:37.391514 2026] [:error] [pid 35250:tid 35330] [client 172.213.0.0:8204] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2ksm17n.php"] [unique_id "acpCRYaKM1MR6zcp2YM5nAAAANM"]
[Mon Mar 30 17:28:38.151795 2026] [:error] [pid 41941:tid 41947] [client 172.213.0.0:9391] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2ksm17n.php"] [unique_id "acpCRiB2g7BNCXGBOJNC6gAAAQQ"]
[Mon Mar 30 17:28:39.300812 2026] [:error] [pid 35343:tid 35369] [client 172.213.0.0:59764] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "acpCR6P5HurqmbvwN-IKLQAAABg"]
[Mon Mar 30 17:28:40.441822 2026] [:error] [pid 35343:tid 35359] [client 172.213.0.0:9381] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "acpCSKP5HurqmbvwN-IKMgAAAA4"]
[Mon Mar 30 17:28:41.376158 2026] [:error] [pid 35250:tid 35318] [client 172.213.0.0:59714] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "acpCSYaKM1MR6zcp2YM5ogAAAMc"]
[Mon Mar 30 17:28:42.107650 2026] [:error] [pid 50663:tid 50675] [client 172.213.0.0:31443] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "acpCSm28b9DKIAMEdfACLwAAAYo"]
[Mon Mar 30 17:28:42.764313 2026] [:error] [pid 50663:tid 50681] [client 172.213.0.0:12022] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "acpCSm28b9DKIAMEdfACMAAAAZA"]
[Mon Mar 30 17:28:43.580219 2026] [:error] [pid 51065:tid 51086] [client 172.213.0.0:18598] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "acpCS3Mr8wtZeHSSB7Ir_QAAAdM"]
[Mon Mar 30 17:28:44.339324 2026] [:error] [pid 41941:tid 41955] [client 172.213.0.0:41448] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "acpCTCB2g7BNCXGBOJNC-QAAAQw"]
[Mon Mar 30 17:28:45.272956 2026] [:error] [pid 41941:tid 41963] [client 172.213.0.0:11236] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "acpCTSB2g7BNCXGBOJNC_gAAARQ"]
[Mon Mar 30 17:28:45.967569 2026] [:error] [pid 41941:tid 41945] [client 172.213.0.0:20028] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acpCTSB2g7BNCXGBOJNDAwAAAQI"]
[Mon Mar 30 17:28:46.810914 2026] [:error] [pid 64743:tid 64745] [client 172.213.0.0:14625] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acpCTizmpVL6Ubzil4iR9gAAAUA"]
[Mon Mar 30 17:28:47.581910 2026] [:error] [pid 41941:tid 41956] [client 172.213.0.0:15395] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acpCTyB2g7BNCXGBOJNDCwAAAQ0"]
[Mon Mar 30 17:28:48.669530 2026] [:error] [pid 41941:tid 41962] [client 172.213.0.0:59822] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "acpCUCB2g7BNCXGBOJNDDQAAARM"]
[Mon Mar 30 17:28:49.467378 2026] [:error] [pid 41941:tid 41951] [client 172.213.0.0:63861] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acpCUSB2g7BNCXGBOJNDEAAAAQg"]
[Mon Mar 30 17:28:50.302650 2026] [:error] [pid 35343:tid 35355] [client 172.213.0.0:25251] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acpCUqP5HurqmbvwN-IKPgAAAAo"]
[Mon Mar 30 17:28:51.044804 2026] [:error] [pid 35343:tid 35363] [client 172.213.0.0:26059] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acpCU6P5HurqmbvwN-IKPwAAABI"]
[Mon Mar 30 17:28:51.815887 2026] [:error] [pid 35343:tid 35354] [client 172.213.0.0:13125] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "acpCU6P5HurqmbvwN-IKQwAAAAk"]
[Mon Mar 30 17:28:52.764760 2026] [:error] [pid 35248:tid 35263] [client 172.213.0.0:28324] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acpCVL3igMCgAQPFS_9skAAAAEk"]
[Mon Mar 30 17:28:53.681461 2026] [:error] [pid 35343:tid 35359] [client 172.213.0.0:15372] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acpCVaP5HurqmbvwN-IKSAAAAA4"]
[Mon Mar 30 17:28:54.351653 2026] [:error] [pid 35249:tid 35285] [client 172.213.0.0:17813] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acpCViqCKiTq85d6rgBHxgAAAIE"]
[Mon Mar 30 17:28:55.261441 2026] [:error] [pid 35343:tid 35353] [client 172.213.0.0:17830] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acpCV6P5HurqmbvwN-IKSgAAAAg"]
[Mon Mar 30 17:28:56.171443 2026] [:error] [pid 64743:tid 64769] [client 172.213.0.0:18616] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acpCWCzmpVL6Ubzil4iR_AAAAVg"]
[Mon Mar 30 17:28:56.927506 2026] [:error] [pid 41941:tid 41960] [client 172.213.0.0:25230] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acpCWCB2g7BNCXGBOJNDFQAAARE"]
[Mon Mar 30 17:28:57.705530 2026] [:error] [pid 35343:tid 35351] [client 172.213.0.0:51985] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acpCWaP5HurqmbvwN-IKSwAAAAY"]
[Mon Mar 30 17:28:58.384275 2026] [:error] [pid 35343:tid 35367] [client 172.213.0.0:63905] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acpCWqP5HurqmbvwN-IKTQAAABY"]
[Mon Mar 30 17:28:59.385825 2026] [:error] [pid 41941:tid 41946] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Mon Mar 30 17:28:59.622955 2026] [:error] [pid 41941:tid 41948] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Mon Mar 30 17:28:59.860728 2026] [:error] [pid 41941:tid 41944] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Mon Mar 30 17:29:00.471842 2026] [:error] [pid 41941:tid 41965] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Mon Mar 30 17:29:00.709983 2026] [:error] [pid 41941:tid 41966] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/56c53.php
[Mon Mar 30 17:29:00.961611 2026] [:error] [pid 41941:tid 41945] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon Mar 30 17:29:01.197740 2026] [:error] [pid 41941:tid 41943] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Mon Mar 30 17:29:01.436756 2026] [:error] [pid 41941:tid 41967] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Mon Mar 30 17:29:01.690162 2026] [:error] [pid 41941:tid 41953] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Mon Mar 30 17:29:01.930116 2026] [:error] [pid 41941:tid 41964] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/5b9ac.php
[Mon Mar 30 17:29:03.372160 2026] [:error] [pid 41941:tid 41964] [client 172.213.0.0:22586] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Mon Mar 30 17:29:03.605652 2026] [:error] [pid 41941:tid 41949] [client 172.213.0.0:22586] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acpCXyB2g7BNCXGBOJNDJgAAAQY"]
[Mon Mar 30 17:29:04.239243 2026] [:error] [pid 35248:tid 35275] [client 172.213.0.0:10190] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acpCYL3igMCgAQPFS_9soAAAAFU"]
[Mon Mar 30 17:29:04.855330 2026] [:error] [pid 35343:tid 35355] [client 172.213.0.0:23371] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acpCYKP5HurqmbvwN-IKVgAAAAo"]
[Mon Mar 30 17:29:05.533067 2026] [:error] [pid 35343:tid 35349] [client 172.213.0.0:23387] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acpCYaP5HurqmbvwN-IKWAAAAAQ"]
[Mon Mar 30 17:29:06.113703 2026] [:error] [pid 64743:tid 64769] [client 172.213.0.0:23349] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "acpCYizmpVL6Ubzil4iSBQAAAVg"]
[Mon Mar 30 17:29:06.773104 2026] [:error] [pid 64743:tid 64752] [client 172.213.0.0:13155] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "acpCYizmpVL6Ubzil4iSCAAAAUc"]
[Mon Mar 30 17:29:07.357357 2026] [:error] [pid 64743:tid 64750] [client 172.213.0.0:9879] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "acpCYyzmpVL6Ubzil4iSCwAAAUU"]
[Mon Mar 30 17:29:07.911528 2026] [:error] [pid 41941:tid 41951] [client 172.213.0.0:23352] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "acpCYyB2g7BNCXGBOJNDKgAAAQg"]
[Mon Mar 30 17:29:08.848516 2026] [:error] [pid 50663:tid 50682] [client 172.213.0.0:10969] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acpCZG28b9DKIAMEdfACQAAAAZE"]
[Mon Mar 30 17:29:09.881061 2026] [:error] [pid 51065:tid 51091] [client 172.213.0.0:13870] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acpCZXMr8wtZeHSSB7IsFAAAAdg"]
[Mon Mar 30 17:29:10.925244 2026] [:error] [pid 50663:tid 50689] [client 172.213.0.0:22306] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acpCZm28b9DKIAMEdfACRAAAAZg"]
[Mon Mar 30 17:29:11.563986 2026] [:error] [pid 50663:tid 50674] [client 172.213.0.0:10221] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx78.php"] [unique_id "acpCZ228b9DKIAMEdfACRwAAAYk"]
[Mon Mar 30 17:29:12.135321 2026] [:error] [pid 50663:tid 50687] [client 172.213.0.0:13179] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "acpCaG28b9DKIAMEdfACSgAAAZY"]
[Mon Mar 30 17:29:12.906148 2026] [:error] [pid 64743:tid 64752] [client 172.213.0.0:21156] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "acpCaCzmpVL6Ubzil4iSDgAAAUc"]
[Mon Mar 30 17:29:13.973196 2026] [:error] [pid 51065:tid 51089] [client 172.213.0.0:23403] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "acpCaXMr8wtZeHSSB7IsHgAAAdY"]
[Mon Mar 30 17:29:14.643006 2026] [:error] [pid 41941:tid 41950] [client 172.213.0.0:43851] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "acpCaiB2g7BNCXGBOJNDNQAAAQc"]
[Mon Mar 30 17:29:15.302710 2026] [:error] [pid 41941:tid 41945] [client 172.213.0.0:28993] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acpCayB2g7BNCXGBOJNDOQAAAQI"]
[Mon Mar 30 17:29:16.036579 2026] [:error] [pid 41941:tid 41952] [client 172.213.0.0:41356] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acpCbCB2g7BNCXGBOJNDQAAAAQk"]
[Mon Mar 30 17:29:16.586861 2026] [:error] [pid 41941:tid 41966] [client 172.213.0.0:22955] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acpCbCB2g7BNCXGBOJNDRgAAARc"]
[Mon Mar 30 17:29:17.103818 2026] [:error] [pid 41941:tid 41952] [client 172.213.0.0:41958] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acpCbSB2g7BNCXGBOJNDSQAAAQk"]
[Mon Mar 30 17:29:17.717204 2026] [:error] [pid 41941:tid 41958] [client 172.213.0.0:26503] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acpCbSB2g7BNCXGBOJNDTQAAAQ8"]
[Mon Mar 30 17:29:18.374335 2026] [:error] [pid 41941:tid 41959] [client 172.213.0.0:41953] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acpCbiB2g7BNCXGBOJNDUQAAARA"]
[Mon Mar 30 17:29:18.920385 2026] [:error] [pid 35250:tid 35314] [client 172.213.0.0:23309] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acpCboaKM1MR6zcp2YM5wQAAAMM"]
[Mon Mar 30 17:29:19.429083 2026] [:error] [pid 51065:tid 51067] [client 172.213.0.0:29050] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acpCb3Mr8wtZeHSSB7IsJwAAAcA"]
[Mon Mar 30 17:29:19.929379 2026] [:error] [pid 35250:tid 35317] [client 172.213.0.0:10181] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acpCb4aKM1MR6zcp2YM5xAAAAMY"]
[Mon Mar 30 17:29:20.580030 2026] [:error] [pid 51065:tid 51084] [client 172.213.0.0:35175] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acpCcHMr8wtZeHSSB7IsLAAAAdE"]
[Mon Mar 30 17:29:21.403399 2026] [:error] [pid 35250:tid 35323] [client 172.213.0.0:15537] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acpCcYaKM1MR6zcp2YM5xwAAAMw"]
[Mon Mar 30 17:29:22.102704 2026] [:error] [pid 51065:tid 51085] [client 172.213.0.0:29023] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acpCcnMr8wtZeHSSB7IsMgAAAdI"]
[Mon Mar 30 17:29:23.168644 2026] [:error] [pid 64743:tid 64766] [client 172.213.0.0:19351] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acpCcyzmpVL6Ubzil4iSEAAAAVU"]
[Mon Mar 30 17:29:25.424512 2026] [:error] [pid 51065:tid 51087] [client 172.213.0.0:26586] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acpCdXMr8wtZeHSSB7IsNgAAAdQ"]
[Mon Mar 30 17:29:26.089314 2026] [:error] [pid 41941:tid 41955] [client 172.213.0.0:43890] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acpCdiB2g7BNCXGBOJNDZgAAAQw"]
[Mon Mar 30 17:29:26.703912 2026] [:error] [pid 51065:tid 51074] [client 172.213.0.0:14431] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "acpCdnMr8wtZeHSSB7IsOgAAAcc"]
[Mon Mar 30 17:29:27.488003 2026] [:error] [pid 41941:tid 41950] [client 172.213.0.0:17492] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acpCdyB2g7BNCXGBOJNDbQAAAQc"]
[Mon Mar 30 17:29:28.425985 2026] [:error] [pid 35343:tid 35359] [client 172.213.0.0:19432] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acpCeKP5HurqmbvwN-IKYQAAAA4"]
[Mon Mar 30 17:29:29.172305 2026] [:error] [pid 51065:tid 51088] [client 172.213.0.0:41364] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acpCeXMr8wtZeHSSB7IsPgAAAdU"]
[Mon Mar 30 17:29:29.966434 2026] [:error] [pid 41941:tid 41953] [client 172.213.0.0:41976] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acpCeSB2g7BNCXGBOJNDdgAAAQo"]
[Mon Mar 30 17:29:32.533005 2026] [:error] [pid 51065:tid 51081] [client 172.213.0.0:43863] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acpCfHMr8wtZeHSSB7IsRAAAAc4"]
[Mon Mar 30 17:29:33.479789 2026] [:error] [pid 51065:tid 51082] [client 172.213.0.0:15506] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acpCfXMr8wtZeHSSB7IsRgAAAc8"]
[Mon Mar 30 17:29:34.756301 2026] [:error] [pid 35248:tid 35262] [client 172.213.0.0:62815] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acpCfr3igMCgAQPFS_9sqwAAAEg"]
[Mon Mar 30 17:29:36.037679 2026] [:error] [pid 50663:tid 50681] [client 172.213.0.0:44591] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acpCgG28b9DKIAMEdfACWQAAAZA"]
[Mon Mar 30 17:29:36.896888 2026] [:error] [pid 35250:tid 35314] [client 172.213.0.0:30259] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acpCgIaKM1MR6zcp2YM51wAAAMM"]
[Mon Mar 30 17:29:37.805668 2026] [:error] [pid 41941:tid 41958] [client 172.213.0.0:24906] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acpCgSB2g7BNCXGBOJNDfQAAAQ8"]
[Mon Mar 30 17:29:38.639136 2026] [:error] [pid 35250:tid 35312] [client 172.213.0.0:20448] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acpCgoaKM1MR6zcp2YM53QAAAME"]
[Mon Mar 30 17:29:39.469769 2026] [:error] [pid 41941:tid 41959] [client 172.213.0.0:32041] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "acpCgyB2g7BNCXGBOJNDgAAAARA"]
[Mon Mar 30 17:29:40.094844 2026] [:error] [pid 50663:tid 50668] [client 172.213.0.0:35075] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "acpChG28b9DKIAMEdfACXQAAAYM"]
[Mon Mar 30 17:29:41.115272 2026] [:error] [pid 35343:tid 35347] [client 172.213.0.0:1252] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "acpChaP5HurqmbvwN-IKdwAAAAI"]
[Mon Mar 30 17:29:41.844726 2026] [:error] [pid 51065:tid 51073] [client 172.213.0.0:19374] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "acpChXMr8wtZeHSSB7IsUAAAAcY"]
[Mon Mar 30 17:29:42.705460 2026] [:error] [pid 35250:tid 35333] [client 172.213.0.0:1218] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "acpChoaKM1MR6zcp2YM55AAAANY"]
[Mon Mar 30 17:29:44.785345 2026] [:error] [pid 35343:tid 35353] [client 172.213.0.0:19388] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfd.php"] [unique_id "acpCiKP5HurqmbvwN-IKgAAAAAg"]
[Mon Mar 30 17:29:45.775639 2026] [:error] [pid 50663:tid 50687] [client 172.213.0.0:35781] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfd.php"] [unique_id "acpCiW28b9DKIAMEdfACZAAAAZY"]
[Mon Mar 30 17:29:46.593166 2026] [:error] [pid 35343:tid 35354] [client 172.213.0.0:35116] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfd.php"] [unique_id "acpCiqP5HurqmbvwN-IKhAAAAAk"]
[Mon Mar 30 17:29:47.481987 2026] [:error] [pid 51065:tid 51091] [client 172.213.0.0:41956] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfd.php"] [unique_id "acpCi3Mr8wtZeHSSB7IsVgAAAdg"]
[Mon Mar 30 17:29:48.777106 2026] [:error] [pid 50663:tid 50686] [client 172.213.0.0:7755] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "acpCjG28b9DKIAMEdfACZwAAAZU"]
[Mon Mar 30 17:29:50.927431 2026] [:error] [pid 51065:tid 51077] [client 172.213.0.0:14461] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "acpCjnMr8wtZeHSSB7IsXgAAAco"]
[Mon Mar 30 17:29:52.240917 2026] [:error] [pid 51065:tid 51069] [client 172.213.0.0:19352] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "acpCkHMr8wtZeHSSB7IsaAAAAcI"]
[Mon Mar 30 17:29:53.721750 2026] [:error] [pid 41941:tid 41947] [client 172.213.0.0:35111] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "acpCkSB2g7BNCXGBOJNDkgAAAQQ"]
[Mon Mar 30 17:29:55.824058 2026] [:error] [pid 51065:tid 51075] [client 172.213.0.0:18272] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acpCk3Mr8wtZeHSSB7IsbgAAAcg"]
[Mon Mar 30 17:29:57.613736 2026] [:error] [pid 50663:tid 50676] [client 172.213.0.0:20467] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acpClW28b9DKIAMEdfACcAAAAYs"]
[Mon Mar 30 17:29:58.478126 2026] [:error] [pid 35249:tid 35301] [client 172.213.0.0:8996] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acpCliqCKiTq85d6rgBH1QAAAJE"]
[Mon Mar 30 17:29:59.133325 2026] [:error] [pid 50663:tid 50689] [client 172.213.0.0:18267] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amp.php"] [unique_id "acpCl228b9DKIAMEdfACcwAAAZg"]
[Mon Mar 30 17:29:59.896505 2026] [:error] [pid 41941:tid 41959] [client 172.213.0.0:7198] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws75.php"] [unique_id "acpClyB2g7BNCXGBOJNDowAAARA"]
[Mon Mar 30 17:30:01.277888 2026] [:error] [pid 50663:tid 50681] [client 172.213.0.0:1783] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws75.php"] [unique_id "acpCmW28b9DKIAMEdfACdwAAAZA"]
[Mon Mar 30 17:30:02.244625 2026] [:error] [pid 35249:tid 35286] [client 172.213.0.0:7194] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws75.php"] [unique_id "acpCmiqCKiTq85d6rgBH2AAAAII"]
[Mon Mar 30 17:30:02.800966 2026] [:error] [pid 50663:tid 50686] [client 172.213.0.0:24951] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws75.php"] [unique_id "acpCmm28b9DKIAMEdfACfQAAAZU"]
[Mon Mar 30 17:30:03.708315 2026] [:error] [pid 41941:tid 41952] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Mon Mar 30 17:30:03.943797 2026] [:error] [pid 41941:tid 41966] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/maul.php
[Mon Mar 30 17:30:04.338259 2026] [:error] [pid 41941:tid 41946] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/lowpr.php
[Mon Mar 30 17:30:04.574787 2026] [:error] [pid 41941:tid 41948] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Mon Mar 30 17:30:05.032787 2026] [:error] [pid 41941:tid 41953] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Mon Mar 30 17:30:05.365163 2026] [:error] [pid 41941:tid 41956] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Mon Mar 30 17:30:05.636513 2026] [:error] [pid 41941:tid 41955] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Mon Mar 30 17:30:05.873106 2026] [:error] [pid 41941:tid 41964] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Mon Mar 30 17:30:06.154282 2026] [:error] [pid 41941:tid 41967] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Mon Mar 30 17:30:06.402022 2026] [:error] [pid 41941:tid 41966] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Mon Mar 30 17:30:06.642801 2026] [:error] [pid 41941:tid 41947] [client 172.213.0.0:35083] File does not exist: /usr/local/apache/htdocs/suspended-page/ne2026.php
[Mon Mar 30 17:30:06.875864 2026] [:error] [pid 41941:tid 41959] [client 172.213.0.0:35083] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws73.php"] [unique_id "acpCniB2g7BNCXGBOJNDwgAAARA"]
[Mon Mar 30 17:30:08.325112 2026] [:error] [pid 41941:tid 41946] [client 172.213.0.0:18290] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws73.php"] [unique_id "acpCoCB2g7BNCXGBOJNDwwAAAQM"]
[Mon Mar 30 17:30:09.092287 2026] [:error] [pid 41941:tid 41950] [client 172.213.0.0:7773] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws73.php"] [unique_id "acpCoSB2g7BNCXGBOJNDxQAAAQc"]
[Mon Mar 30 17:30:09.695379 2026] [:error] [pid 41941:tid 41955] [client 172.213.0.0:35150] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws73.php"] [unique_id "acpCoSB2g7BNCXGBOJNDyQAAAQw"]
[Mon Mar 30 17:30:10.390117 2026] [:error] [pid 51065:tid 51070] [client 172.213.0.0:39922] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "acpConMr8wtZeHSSB7IsdQAAAcM"]
[Mon Mar 30 17:30:11.225410 2026] [:error] [pid 41941:tid 41949] [client 172.213.0.0:28938] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "acpCoyB2g7BNCXGBOJNDzgAAAQY"]
[Mon Mar 30 17:30:11.920514 2026] [:error] [pid 41941:tid 41955] [client 172.213.0.0:18657] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "acpCoyB2g7BNCXGBOJND1AAAAQw"]
[Mon Mar 30 17:30:12.454641 2026] [:error] [pid 41941:tid 41945] [client 172.213.0.0:14456] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "acpCpCB2g7BNCXGBOJND1gAAAQI"]
[Mon Mar 30 17:30:13.162807 2026] [:error] [pid 35250:tid 35323] [client 172.213.0.0:28976] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/baixy.php"] [unique_id "acpCpYaKM1MR6zcp2YM58AAAAMw"]
[Mon Mar 30 17:30:13.918232 2026] [:error] [pid 50663:tid 50679] [client 172.213.0.0:8968] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/baixy.php"] [unique_id "acpCpW28b9DKIAMEdfACigAAAY4"]
[Mon Mar 30 17:30:14.652637 2026] [:error] [pid 35250:tid 35332] [client 172.213.0.0:7203] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/baixy.php"] [unique_id "acpCpoaKM1MR6zcp2YM59gAAANU"]
[Mon Mar 30 17:30:45.860415 2026] [:error] [pid 35250:tid 35315] [client 172.213.0.0:12716] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acpCxYaKM1MR6zcp2YM6JQAAAMQ"]
[Mon Mar 30 17:30:46.562801 2026] [:error] [pid 35343:tid 35348] [client 172.213.0.0:24944] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acpCxqP5HurqmbvwN-IKzAAAAAM"]
[Mon Mar 30 17:30:47.667654 2026] [:error] [pid 50663:tid 50674] [client 172.213.0.0:57389] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acpCx228b9DKIAMEdfAClgAAAYk"]
[Mon Mar 30 17:30:48.386568 2026] [:error] [pid 35343:tid 35347] [client 172.213.0.0:28955] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "acpCyKP5HurqmbvwN-IK0gAAAAI"]
[Mon Mar 30 17:30:50.044776 2026] [:error] [pid 41941:tid 41963] [client 172.213.0.0:19774] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acpCyiB2g7BNCXGBOJNETgAAARQ"]
[Mon Mar 30 17:30:51.692835 2026] [:error] [pid 41941:tid 41960] [client 172.213.0.0:25282] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acpCyyB2g7BNCXGBOJNEWgAAARE"]
[Mon Mar 30 17:30:52.960986 2026] [:error] [pid 35248:tid 35271] [client 172.213.0.0:21977] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acpCzL3igMCgAQPFS_9sxQAAAFE"]
[Mon Mar 30 17:30:53.861320 2026] [:error] [pid 35250:tid 35331] [client 172.213.0.0:14433] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "acpCzYaKM1MR6zcp2YM6LgAAANQ"]
[Mon Mar 30 17:30:55.187621 2026] [:error] [pid 35250:tid 35318] [client 172.213.0.0:12683] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acpCz4aKM1MR6zcp2YM6OwAAAMc"]
[Mon Mar 30 17:30:55.924472 2026] [:error] [pid 35250:tid 35333] [client 172.213.0.0:50562] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acpCz4aKM1MR6zcp2YM6QAAAANY"]
[Mon Mar 30 17:30:57.227077 2026] [:error] [pid 51065:tid 51078] [client 172.213.0.0:1045] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acpC0XMr8wtZeHSSB7IsiwAAAcs"]
[Mon Mar 30 17:30:58.804832 2026] [:error] [pid 51065:tid 51076] [client 172.213.0.0:19763] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acpC0nMr8wtZeHSSB7IsjgAAAck"]
[Mon Mar 30 17:30:59.753618 2026] [:error] [pid 35248:tid 35275] [client 172.213.0.0:14933] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "acpC073igMCgAQPFS_9szQAAAFU"]
[Mon Mar 30 17:31:00.880168 2026] [:error] [pid 51065:tid 51070] [client 172.213.0.0:8025] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "acpC1HMr8wtZeHSSB7IskQAAAcM"]
[Mon Mar 30 17:31:01.565534 2026] [:error] [pid 64743:tid 64753] [client 172.213.0.0:50651] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "acpC1SzmpVL6Ubzil4iSNgAAAUg"]
[Mon Mar 30 17:31:02.315076 2026] [:error] [pid 35343:tid 35363] [client 172.213.0.0:18626] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "acpC1qP5HurqmbvwN-IK2wAAABI"]
[Mon Mar 30 17:31:03.218141 2026] [:error] [pid 35250:tid 35330] [client 172.213.0.0:12782] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5e0a.php"] [unique_id "acpC14aKM1MR6zcp2YM6RgAAANM"]
[Mon Mar 30 17:31:04.032641 2026] [:error] [pid 35250:tid 35328] [client 172.213.0.0:13576] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5e0a.php"] [unique_id "acpC2IaKM1MR6zcp2YM6SgAAANE"]
[Mon Mar 30 17:31:04.764733 2026] [:error] [pid 50663:tid 50675] [client 172.213.0.0:22306] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5e0a.php"] [unique_id "acpC2G28b9DKIAMEdfACoAAAAYo"]
[Mon Mar 30 17:31:05.464601 2026] [:error] [pid 35250:tid 35318] [client 172.213.0.0:38531] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5e0a.php"] [unique_id "acpC2YaKM1MR6zcp2YM6SwAAAMc"]
[Mon Mar 30 17:31:06.148045 2026] [:error] [pid 41941:tid 41966] [client 172.213.0.0:13366] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Mon Mar 30 17:31:06.385373 2026] [:error] [pid 41941:tid 41948] [client 172.213.0.0:13366] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Mon Mar 30 17:31:06.661544 2026] [:error] [pid 41941:tid 41959] [client 172.213.0.0:13366] File does not exist: /usr/local/apache/htdocs/suspended-page/55b76.php
[Mon Mar 30 17:31:06.897668 2026] [:error] [pid 41941:tid 41956] [client 172.213.0.0:13366] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Mon Mar 30 17:31:07.133620 2026] [:error] [pid 41941:tid 41951] [client 172.213.0.0:13366] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Mon Mar 30 17:31:08.798418 2026] [:error] [pid 41941:tid 41953] [client 172.213.0.0:13366] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Mon Mar 30 17:31:09.034840 2026] [:error] [pid 41941:tid 41955] [client 172.213.0.0:13366] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Mon Mar 30 17:31:09.275830 2026] [:error] [pid 41941:tid 41944] [client 172.213.0.0:13366] File does not exist: /usr/local/apache/htdocs/suspended-page/drhunthq.php
[Mon Mar 30 17:31:09.748721 2026] [:error] [pid 41941:tid 41956] [client 172.213.0.0:13366] File does not exist: /usr/local/apache/htdocs/suspended-page/xxw.php
[Mon Mar 30 17:31:09.985277 2026] [:error] [pid 41941:tid 41962] [client 172.213.0.0:13366] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Mon Mar 30 17:31:10.218438 2026] [:error] [pid 41941:tid 41958] [client 172.213.0.0:13366] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "acpC3iB2g7BNCXGBOJNEiQAAAQ8"]
[Mon Mar 30 17:31:10.887294 2026] [:error] [pid 41941:tid 41957] [client 172.213.0.0:17084] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "acpC3iB2g7BNCXGBOJNEjgAAAQ4"]
[Mon Mar 30 17:31:11.406982 2026] [:error] [pid 41941:tid 41963] [client 172.213.0.0:1974] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "acpC3yB2g7BNCXGBOJNEkwAAARQ"]
[Mon Mar 30 17:31:11.933526 2026] [:error] [pid 41941:tid 41958] [client 172.213.0.0:25319] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "acpC3yB2g7BNCXGBOJNElgAAAQ8"]
[Mon Mar 30 17:31:12.436990 2026] [:error] [pid 50663:tid 50665] [client 172.213.0.0:1965] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lm15.php"] [unique_id "acpC4G28b9DKIAMEdfACowAAAYA"]
[Mon Mar 30 17:31:12.995291 2026] [:error] [pid 41941:tid 41953] [client 172.213.0.0:28360] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lm15.php"] [unique_id "acpC4CB2g7BNCXGBOJNElwAAAQo"]
[Mon Mar 30 17:31:13.566758 2026] [:error] [pid 41941:tid 41955] [client 172.213.0.0:1931] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lm15.php"] [unique_id "acpC4SB2g7BNCXGBOJNEmQAAAQw"]
[Mon Mar 30 17:31:14.308585 2026] [:error] [pid 41941:tid 41946] [client 172.213.0.0:33834] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lm15.php"] [unique_id "acpC4iB2g7BNCXGBOJNEnQAAAQM"]
[Mon Mar 30 17:31:14.840562 2026] [:error] [pid 35250:tid 35323] [client 172.213.0.0:13608] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/green.php"] [unique_id "acpC4oaKM1MR6zcp2YM6WwAAAMw"]
[Mon Mar 30 17:31:15.607669 2026] [:error] [pid 41941:tid 41965] [client 172.213.0.0:50667] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/green.php"] [unique_id "acpC4yB2g7BNCXGBOJNEnwAAARY"]
[Mon Mar 30 17:31:16.776052 2026] [:error] [pid 35249:tid 35288] [client 172.213.0.0:28369] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/green.php"] [unique_id "acpC5CqCKiTq85d6rgBH7wAAAIQ"]
[Mon Mar 30 17:31:17.448276 2026] [:error] [pid 50663:tid 50680] [client 172.213.0.0:32108] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/green.php"] [unique_id "acpC5W28b9DKIAMEdfACqAAAAY8"]
[Mon Mar 30 17:31:18.419837 2026] [:error] [pid 51065:tid 51076] [client 172.213.0.0:32125] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acpC5nMr8wtZeHSSB7IsowAAAck"]
[Mon Mar 30 17:31:19.345142 2026] [:error] [pid 35343:tid 35360] [client 172.213.0.0:1925] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acpC56P5HurqmbvwN-IK5QAAAA8"]
[Mon Mar 30 17:31:20.146699 2026] [:error] [pid 41941:tid 41951] [client 172.213.0.0:32098] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acpC6CB2g7BNCXGBOJNEowAAAQg"]
[Mon Mar 30 17:31:21.131180 2026] [:error] [pid 35249:tid 35299] [client 172.213.0.0:56827] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acpC6SqCKiTq85d6rgBH8QAAAI8"]
[Mon Mar 30 17:31:21.834960 2026] [:error] [pid 41941:tid 41958] [client 172.213.0.0:17031] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acpC6SB2g7BNCXGBOJNEpQAAAQ8"]
[Mon Mar 30 17:31:22.779930 2026] [:error] [pid 41941:tid 41957] [client 172.213.0.0:12180] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acpC6iB2g7BNCXGBOJNEqgAAAQ4"]
[Mon Mar 30 17:31:23.397995 2026] [:error] [pid 35343:tid 35353] [client 172.213.0.0:56802] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acpC66P5HurqmbvwN-IK7QAAAAg"]
[Mon Mar 30 17:31:24.006313 2026] [:error] [pid 35250:tid 35319] [client 172.213.0.0:58636] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acpC7IaKM1MR6zcp2YM6ZQAAAMg"]
[Mon Mar 30 17:31:24.530733 2026] [:error] [pid 64743:tid 64751] [client 172.213.0.0:22600] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acpC7CzmpVL6Ubzil4iSRAAAAUY"]
[Mon Mar 30 17:31:25.604661 2026] [:error] [pid 64743:tid 64749] [client 172.213.0.0:12742] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acpC7SzmpVL6Ubzil4iSSAAAAUQ"]
[Mon Mar 30 17:31:26.230598 2026] [:error] [pid 64743:tid 64754] [client 172.213.0.0:20759] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acpC7izmpVL6Ubzil4iSSgAAAUk"]
[Mon Mar 30 17:31:26.848120 2026] [:error] [pid 35250:tid 35325] [client 172.213.0.0:10677] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "acpC7oaKM1MR6zcp2YM6awAAAM4"]
[Mon Mar 30 17:31:27.719292 2026] [:error] [pid 41941:tid 41950] [client 172.213.0.0:9620] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acpC7yB2g7BNCXGBOJNEsAAAAQc"]
[Mon Mar 30 17:31:28.485587 2026] [:error] [pid 35250:tid 35332] [client 172.213.0.0:22602] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acpC8IaKM1MR6zcp2YM6bwAAANU"]
[Mon Mar 30 17:31:29.273265 2026] [:error] [pid 41941:tid 41956] [client 172.213.0.0:21521] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acpC8SB2g7BNCXGBOJNEuAAAAQ0"]
[Mon Mar 30 17:31:29.954602 2026] [:error] [pid 35248:tid 35268] [client 172.213.0.0:10679] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acpC8b3igMCgAQPFS_9s4wAAAE4"]
[Mon Mar 30 17:31:30.718984 2026] [:error] [pid 41941:tid 41957] [client 172.213.0.0:9602] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acpC8iB2g7BNCXGBOJNEvAAAAQ4"]
[Mon Mar 30 17:31:31.417067 2026] [:error] [pid 41941:tid 41962] [client 172.213.0.0:12177] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acpC8yB2g7BNCXGBOJNEwAAAARM"]
[Mon Mar 30 17:31:32.437577 2026] [:error] [pid 35248:tid 35269] [client 172.213.0.0:22617] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acpC9L3igMCgAQPFS_9s5gAAAE8"]
[Mon Mar 30 17:31:33.032162 2026] [:error] [pid 41941:tid 41955] [client 172.213.0.0:25297] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "acpC9SB2g7BNCXGBOJNEzAAAAQw"]
[Mon Mar 30 17:31:33.636142 2026] [:error] [pid 41941:tid 41954] [client 172.213.0.0:11397] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clss.php"] [unique_id "acpC9SB2g7BNCXGBOJNEzwAAAQs"]
[Mon Mar 30 17:31:35.731822 2026] [:error] [pid 35250:tid 35317] [client 172.213.0.0:13634] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clss.php"] [unique_id "acpC94aKM1MR6zcp2YM6dgAAAMY"]
[Mon Mar 30 17:31:36.674315 2026] [:error] [pid 35250:tid 35332] [client 172.213.0.0:21543] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clss.php"] [unique_id "acpC-IaKM1MR6zcp2YM6eQAAANU"]
[Mon Mar 30 17:31:37.774295 2026] [:error] [pid 35343:tid 35359] [client 172.213.0.0:9622] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clss.php"] [unique_id "acpC-aP5HurqmbvwN-IK8gAAAA4"]
[Mon Mar 30 17:31:38.597128 2026] [:error] [pid 41941:tid 41960] [client 172.213.0.0:37920] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "acpC-iB2g7BNCXGBOJNE7QAAARE"]
[Mon Mar 30 17:31:39.514924 2026] [:error] [pid 35250:tid 35334] [client 172.213.0.0:32092] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "acpC-4aKM1MR6zcp2YM6fgAAANc"]
[Mon Mar 30 17:31:40.254281 2026] [:error] [pid 35250:tid 35328] [client 172.213.0.0:21519] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "acpC_IaKM1MR6zcp2YM6gwAAANE"]
[Mon Mar 30 17:31:40.862625 2026] [:error] [pid 41941:tid 41959] [client 172.213.0.0:34434] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "acpC_CB2g7BNCXGBOJNE8wAAARA"]
[Mon Mar 30 17:31:41.598375 2026] [:error] [pid 35250:tid 35313] [client 172.213.0.0:34483] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acpC_YaKM1MR6zcp2YM6hwAAAMI"]
[Mon Mar 30 17:31:42.371760 2026] [:error] [pid 41941:tid 41954] [client 172.213.0.0:10628] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acpC_iB2g7BNCXGBOJNE-QAAAQs"]
[Mon Mar 30 17:31:43.237636 2026] [:error] [pid 64743:tid 64758] [client 172.213.0.0:15457] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acpC_yzmpVL6Ubzil4iSTwAAAU0"]
[Mon Mar 30 17:31:44.323861 2026] [:error] [pid 50663:tid 50669] [client 172.213.0.0:58675] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acpDAG28b9DKIAMEdfACrAAAAYQ"]
[Mon Mar 30 17:31:45.122322 2026] [:error] [pid 35250:tid 35326] [client 172.213.0.0:15450] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acpDAYaKM1MR6zcp2YM6jAAAAM8"]
[Mon Mar 30 17:31:45.729829 2026] [:error] [pid 35250:tid 35335] [client 172.213.0.0:1897] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acpDAYaKM1MR6zcp2YM6kAAAANg"]
[Mon Mar 30 17:31:46.602225 2026] [:error] [pid 35250:tid 35320] [client 172.213.0.0:10706] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acpDAoaKM1MR6zcp2YM6lAAAAMk"]
[Mon Mar 30 17:31:47.600524 2026] [:error] [pid 35250:tid 35334] [client 172.213.0.0:12237] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "acpDA4aKM1MR6zcp2YM6nAAAANc"]
[Mon Mar 30 17:31:48.347606 2026] [:error] [pid 35250:tid 35313] [client 172.213.0.0:34480] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acpDBIaKM1MR6zcp2YM6oAAAAMI"]
[Mon Mar 30 17:31:49.693243 2026] [:error] [pid 35250:tid 35329] [client 172.213.0.0:1531] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acpDBYaKM1MR6zcp2YM6qAAAANI"]
[Mon Mar 30 17:31:50.433767 2026] [:error] [pid 35250:tid 35320] [client 172.213.0.0:36371] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acpDBoaKM1MR6zcp2YM6rgAAAMk"]
[Mon Mar 30 17:31:51.860572 2026] [:error] [pid 64743:tid 64756] [client 172.213.0.0:1891] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acpDByzmpVL6Ubzil4iSUwAAAUs"]
[Mon Mar 30 17:31:52.816643 2026] [:error] [pid 50663:tid 50683] [client 172.213.0.0:33343] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "acpDCG28b9DKIAMEdfACuAAAAZI"]
[Mon Mar 30 17:31:53.439242 2026] [:error] [pid 50663:tid 50671] [client 172.213.0.0:60980] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "acpDCW28b9DKIAMEdfACugAAAYY"]
[Mon Mar 30 17:31:54.593572 2026] [:error] [pid 35250:tid 35323] [client 172.213.0.0:36384] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "acpDCoaKM1MR6zcp2YM6xAAAAMw"]
[Mon Mar 30 17:31:55.625003 2026] [:error] [pid 35250:tid 35315] [client 172.213.0.0:1875] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ajax.php"] [unique_id "acpDC4aKM1MR6zcp2YM6zgAAAMQ"]
[Mon Mar 30 17:31:57.379756 2026] [:error] [pid 35343:tid 35366] [client 172.213.0.0:34444] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "acpDDaP5HurqmbvwN-ILBQAAABU"]
[Mon Mar 30 17:31:58.101331 2026] [:error] [pid 51065:tid 51074] [client 172.213.0.0:27054] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "acpDDnMr8wtZeHSSB7IsuQAAAcc"]
[Mon Mar 30 17:31:58.939605 2026] [:error] [pid 51065:tid 51078] [client 172.213.0.0:60977] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "acpDDnMr8wtZeHSSB7IsvAAAAcs"]
[Mon Mar 30 17:31:59.680819 2026] [:error] [pid 51065:tid 51091] [client 172.213.0.0:11444] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "acpDD3Mr8wtZeHSSB7IsvwAAAdg"]
[Mon Mar 30 17:32:00.694802 2026] [:error] [pid 41941:tid 41962] [client 172.213.0.0:15454] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acpDECB2g7BNCXGBOJNFBwAAARM"]
[Mon Mar 30 17:32:01.406600 2026] [:error] [pid 41941:tid 41952] [client 172.213.0.0:19049] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acpDESB2g7BNCXGBOJNFCgAAAQk"]
[Mon Mar 30 17:32:02.036189 2026] [:error] [pid 41941:tid 41947] [client 172.213.0.0:11455] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acpDEiB2g7BNCXGBOJNFDwAAAQQ"]
[Mon Mar 30 17:32:02.652890 2026] [:error] [pid 35343:tid 35347] [client 172.213.0.0:19061] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acpDEqP5HurqmbvwN-ILDAAAAAI"]
[Mon Mar 30 17:32:03.269541 2026] [:error] [pid 35250:tid 35313] [client 172.213.0.0:1505] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acpDE4aKM1MR6zcp2YM61gAAAMI"]
[Mon Mar 30 17:32:03.862165 2026] [:error] [pid 35343:tid 35364] [client 172.213.0.0:37472] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acpDE6P5HurqmbvwN-ILDgAAABM"]
[Mon Mar 30 17:32:05.116261 2026] [:error] [pid 35250:tid 35326] [client 172.213.0.0:19028] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acpDFYaKM1MR6zcp2YM63AAAAM8"]
[Mon Mar 30 17:32:06.033772 2026] [:error] [pid 35249:tid 35302] [client 172.213.0.0:52087] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acpDFiqCKiTq85d6rgBH_QAAAJI"]
[Mon Mar 30 17:32:06.890072 2026] [:error] [pid 35249:tid 35294] [client 172.213.0.0:27052] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "acpDFiqCKiTq85d6rgBIAQAAAIo"]
[Mon Mar 30 17:32:08.575816 2026] [:error] [pid 51065:tid 51085] [client 172.213.0.0:60952] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "acpDGHMr8wtZeHSSB7IszQAAAdI"]
[Mon Mar 30 17:32:09.408919 2026] [:error] [pid 41941:tid 41963] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Mon Mar 30 17:32:09.674311 2026] [:error] [pid 41941:tid 41950] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Mon Mar 30 17:32:09.935210 2026] [:error] [pid 41941:tid 41951] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Mon Mar 30 17:32:10.171841 2026] [:error] [pid 41941:tid 41957] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Mon Mar 30 17:32:10.485798 2026] [:error] [pid 41941:tid 41948] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Mon Mar 30 17:32:10.761395 2026] [:error] [pid 41941:tid 41965] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Mon Mar 30 17:32:11.073910 2026] [:error] [pid 41941:tid 41943] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/okxh.php
[Mon Mar 30 17:32:11.345776 2026] [:error] [pid 41941:tid 41966] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Mon Mar 30 17:32:11.581338 2026] [:error] [pid 41941:tid 41964] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-104.php
[Mon Mar 30 17:32:11.906106 2026] [:error] [pid 41941:tid 41962] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Mon Mar 30 17:32:12.145737 2026] [:error] [pid 41941:tid 41961] [client 172.213.0.0:26618] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Mon Mar 30 17:32:12.492762 2026] [:error] [pid 41941:tid 41960] [client 172.213.0.0:26618] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acpDHCB2g7BNCXGBOJNFMQAAARE"]
[Mon Mar 30 17:32:13.648708 2026] [:error] [pid 35248:tid 35275] [client 172.213.0.0:25645] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acpDHb3igMCgAQPFS_9s8AAAAFU"]
[Mon Mar 30 17:32:14.309258 2026] [:error] [pid 35250:tid 35333] [client 172.213.0.0:25629] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acpDHoaKM1MR6zcp2YM65AAAANY"]
[Mon Mar 30 17:32:15.263796 2026] [:error] [pid 35250:tid 35321] [client 172.213.0.0:19832] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acpDH4aKM1MR6zcp2YM65gAAAMo"]
[Mon Mar 30 17:32:15.956903 2026] [:error] [pid 35343:tid 35347] [client 172.213.0.0:23787] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "acpDH6P5HurqmbvwN-ILFwAAAAI"]
[Mon Mar 30 17:32:16.634383 2026] [:error] [pid 51065:tid 51086] [client 172.213.0.0:12898] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "acpDIHMr8wtZeHSSB7Is1QAAAdM"]
[Mon Mar 30 17:32:17.263552 2026] [:error] [pid 41941:tid 41961] [client 172.213.0.0:23025] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "acpDISB2g7BNCXGBOJNFNgAAARI"]
[Mon Mar 30 17:32:18.022572 2026] [:error] [pid 41941:tid 41946] [client 172.213.0.0:60413] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "acpDIiB2g7BNCXGBOJNFOAAAAQM"]
[Mon Mar 30 17:32:18.642743 2026] [:error] [pid 35249:tid 35308] [client 172.213.0.0:9162] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xfun.php"] [unique_id "acpDIiqCKiTq85d6rgBIEAAAAJg"]
[Mon Mar 30 17:32:19.657840 2026] [:error] [pid 35248:tid 35268] [client 172.213.0.0:34511] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xfun.php"] [unique_id "acpDI73igMCgAQPFS_9s9QAAAE4"]
[Mon Mar 30 17:32:20.672547 2026] [:error] [pid 35249:tid 35305] [client 172.213.0.0:28976] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xfun.php"] [unique_id "acpDJCqCKiTq85d6rgBIFQAAAJU"]
[Mon Mar 30 17:32:21.309848 2026] [:error] [pid 35343:tid 35352] [client 172.213.0.0:1561] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xfun.php"] [unique_id "acpDJaP5HurqmbvwN-ILHQAAAAc"]
[Mon Mar 30 17:32:22.036697 2026] [:error] [pid 35250:tid 35326] [client 172.213.0.0:34507] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bjfl.php"] [unique_id "acpDJoaKM1MR6zcp2YM68AAAAM8"]
[Mon Mar 30 17:32:22.966837 2026] [:error] [pid 50663:tid 50676] [client 172.213.0.0:14876] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bjfl.php"] [unique_id "acpDJm28b9DKIAMEdfACwwAAAYs"]
[Mon Mar 30 17:32:23.744068 2026] [:error] [pid 51065:tid 51084] [client 172.213.0.0:17141] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bjfl.php"] [unique_id "acpDJ3Mr8wtZeHSSB7Is2QAAAdE"]
[Mon Mar 30 17:32:24.437033 2026] [:error] [pid 35343:tid 35363] [client 172.213.0.0:12868] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bjfl.php"] [unique_id "acpDKKP5HurqmbvwN-ILJgAAABI"]
[Mon Mar 30 17:32:25.305909 2026] [:error] [pid 50663:tid 50684] [client 172.213.0.0:47162] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acpDKW28b9DKIAMEdfACxgAAAZM"]
[Mon Mar 30 17:32:25.995841 2026] [:error] [pid 35343:tid 35360] [client 172.213.0.0:9692] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acpDKaP5HurqmbvwN-ILLAAAAA8"]
[Mon Mar 30 17:32:26.674048 2026] [:error] [pid 41941:tid 41953] [client 172.213.0.0:60366] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acpDKiB2g7BNCXGBOJNFUAAAAQo"]
[Mon Mar 30 17:32:27.332548 2026] [:error] [pid 41941:tid 41958] [client 172.213.0.0:9700] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/155.php"] [unique_id "acpDKyB2g7BNCXGBOJNFUgAAAQ8"]
[Mon Mar 30 17:32:27.833197 2026] [:error] [pid 41941:tid 41966] [client 172.213.0.0:10131] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "acpDKyB2g7BNCXGBOJNFXQAAARc"]
[Mon Mar 30 17:32:28.610128 2026] [:error] [pid 35248:tid 35262] [client 172.213.0.0:12825] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "acpDLL3igMCgAQPFS_9s9wAAAEg"]
[Mon Mar 30 17:32:29.419734 2026] [:error] [pid 51065:tid 51074] [client 172.213.0.0:23692] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "acpDLXMr8wtZeHSSB7Is5AAAAcc"]
[Mon Mar 30 17:32:30.254087 2026] [:error] [pid 35343:tid 35363] [client 172.213.0.0:41903] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "acpDLqP5HurqmbvwN-ILOAAAABI"]
[Mon Mar 30 17:32:31.534268 2026] [:error] [pid 35343:tid 35367] [client 172.213.0.0:30326] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "acpDL6P5HurqmbvwN-ILOwAAABY"]
[Mon Mar 30 17:32:32.572185 2026] [:error] [pid 35248:tid 35261] [client 172.213.0.0:17114] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "acpDML3igMCgAQPFS_9s-wAAAEc"]
[Mon Mar 30 17:32:33.440716 2026] [:error] [pid 51065:tid 51085] [client 172.213.0.0:41885] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "acpDMXMr8wtZeHSSB7Is7QAAAdI"]
[Mon Mar 30 17:32:34.385676 2026] [:error] [pid 41941:tid 41945] [client 172.213.0.0:9145] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "acpDMiB2g7BNCXGBOJNFdwAAAQI"]
[Mon Mar 30 17:32:35.489315 2026] [:error] [pid 35343:tid 35366] [client 172.213.0.0:40455] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acpDM6P5HurqmbvwN-ILQAAAABU"]
[Mon Mar 30 17:32:36.260857 2026] [:error] [pid 35249:tid 35305] [client 172.213.0.0:44645] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acpDNCqCKiTq85d6rgBIIgAAAJU"]
[Mon Mar 30 17:32:37.050694 2026] [:error] [pid 35343:tid 35350] [client 172.213.0.0:7697] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acpDNaP5HurqmbvwN-ILQgAAAAU"]
[Mon Mar 30 17:32:38.053211 2026] [:error] [pid 41941:tid 41954] [client 172.213.0.0:60908] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws49.php"] [unique_id "acpDNiB2g7BNCXGBOJNFfQAAAQs"]
[Mon Mar 30 17:32:38.812378 2026] [:error] [pid 51065:tid 51069] [client 172.213.0.0:36467] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acpDNnMr8wtZeHSSB7Is8gAAAcI"]
[Mon Mar 30 17:32:39.603017 2026] [:error] [pid 51065:tid 51090] [client 172.213.0.0:36428] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acpDN3Mr8wtZeHSSB7Is9QAAAdc"]
[Mon Mar 30 17:32:40.525674 2026] [:error] [pid 41941:tid 41951] [client 172.213.0.0:56858] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acpDOCB2g7BNCXGBOJNFhAAAAQg"]
[Mon Mar 30 17:32:41.440326 2026] [:error] [pid 35343:tid 35358] [client 172.213.0.0:17449] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "acpDOaP5HurqmbvwN-ILRgAAAA0"]
[Mon Mar 30 17:32:42.307635 2026] [:error] [pid 51065:tid 51085] [client 172.213.0.0:41356] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww.php"] [unique_id "acpDOnMr8wtZeHSSB7Is_QAAAdI"]
[Mon Mar 30 17:32:42.920218 2026] [:error] [pid 35250:tid 35327] [client 172.213.0.0:36460] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww.php"] [unique_id "acpDOoaKM1MR6zcp2YM7AQAAANA"]
[Mon Mar 30 17:32:55.551647 2026] [:error] [pid 41941:tid 41948] [client 172.213.0.0:22374] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww.php"] [unique_id "acpDRyB2g7BNCXGBOJNFnwAAAQU"]
[Mon Mar 30 17:33:01.216078 2026] [:error] [pid 41941:tid 41963] [client 172.213.0.0:11255] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "acpDTSB2g7BNCXGBOJNFqwAAARQ"]
[Mon Mar 30 17:33:01.818599 2026] [:error] [pid 35250:tid 35321] [client 172.213.0.0:11980] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "acpDTYaKM1MR6zcp2YM7PQAAAMo"]
[Mon Mar 30 17:33:02.581521 2026] [:error] [pid 41941:tid 41956] [client 172.213.0.0:29588] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "acpDTiB2g7BNCXGBOJNFsQAAAQ0"]
[Mon Mar 30 17:33:03.493352 2026] [:error] [pid 35250:tid 35328] [client 172.213.0.0:29600] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "acpDT4aKM1MR6zcp2YM7QAAAANE"]
[Mon Mar 30 17:33:04.859448 2026] [:error] [pid 51065:tid 51083] [client 172.213.0.0:31416] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acpDUHMr8wtZeHSSB7ItBAAAAdA"]
[Mon Mar 30 17:33:05.522554 2026] [:error] [pid 50663:tid 50681] [client 172.213.0.0:62861] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acpDUW28b9DKIAMEdfAC2wAAAZA"]
[Mon Mar 30 17:33:06.262138 2026] [:error] [pid 35250:tid 35333] [client 172.213.0.0:8573] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acpDUoaKM1MR6zcp2YM7RAAAANY"]
[Mon Mar 30 17:33:07.261152 2026] [:error] [pid 41941:tid 41954] [client 172.213.0.0:11992] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "acpDUyB2g7BNCXGBOJNFuwAAAQs"]
[Mon Mar 30 17:33:07.850056 2026] [:error] [pid 41941:tid 41946] [client 172.213.0.0:59268] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acpDUyB2g7BNCXGBOJNFvgAAAQM"]
[Mon Mar 30 17:33:08.737568 2026] [:error] [pid 35248:tid 35264] [client 172.213.0.0:38646] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acpDVL3igMCgAQPFS_9tCQAAAEo"]
[Mon Mar 30 17:33:09.519608 2026] [:error] [pid 35250:tid 35332] [client 172.213.0.0:9354] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acpDVYaKM1MR6zcp2YM7SgAAANU"]
[Mon Mar 30 17:33:10.685758 2026] [:error] [pid 50663:tid 50665] [client 172.213.0.0:22545] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "acpDVm28b9DKIAMEdfAC3QAAAYA"]
[Mon Mar 30 17:33:11.711692 2026] [:error] [pid 35343:tid 35357] [client 172.213.0.0:1716] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "acpDV6P5HurqmbvwN-ILbAAAAAw"]
[Mon Mar 30 17:33:12.663932 2026] [:error] [pid 35250:tid 35319] [client 172.213.0.0:31441] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Mon Mar 30 17:33:12.944553 2026] [:error] [pid 35250:tid 35311] [client 172.213.0.0:31441] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Mon Mar 30 17:33:13.181954 2026] [:error] [pid 35250:tid 35317] [client 172.213.0.0:31441] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Mon Mar 30 17:33:13.556023 2026] [:error] [pid 35250:tid 35326] [client 172.213.0.0:31441] File does not exist: /usr/local/apache/htdocs/suspended-page/aa21.php
[Mon Mar 30 17:33:13.791975 2026] [:error] [pid 35250:tid 35329] [client 172.213.0.0:31441] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Mon Mar 30 17:33:14.044838 2026] [:error] [pid 35250:tid 35331] [client 172.213.0.0:31441] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Mon Mar 30 17:33:14.288294 2026] [:error] [pid 35250:tid 35318] [client 172.213.0.0:31441] File does not exist: /usr/local/apache/htdocs/suspended-page/bootstrap.php
[Mon Mar 30 17:33:14.781879 2026] [:error] [pid 35250:tid 35325] [client 172.213.0.0:31441] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Mon Mar 30 17:33:15.186317 2026] [:error] [pid 35250:tid 35315] [client 172.213.0.0:31441] File does not exist: /usr/local/apache/htdocs/suspended-page/csv.php
[Mon Mar 30 17:33:15.421947 2026] [:error] [pid 35250:tid 35330] [client 172.213.0.0:31441] File does not exist: /usr/local/apache/htdocs/suspended-page/varb.php
[Mon Mar 30 17:33:15.664473 2026] [:error] [pid 35250:tid 35324] [client 172.213.0.0:31441] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "acpDW4aKM1MR6zcp2YM7ZQAAAM0"]
[Mon Mar 30 17:33:16.578301 2026] [:error] [pid 35249:tid 35289] [client 172.213.0.0:52022] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "acpDXCqCKiTq85d6rgBINgAAAIU"]
[Mon Mar 30 17:33:17.453865 2026] [:error] [pid 35249:tid 35286] [client 172.213.0.0:52018] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "acpDXSqCKiTq85d6rgBIOwAAAII"]
[Mon Mar 30 17:33:18.529956 2026] [:error] [pid 35250:tid 35331] [client 172.213.0.0:28316] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "acpDXoaKM1MR6zcp2YM7ZwAAANQ"]
[Mon Mar 30 17:33:19.778314 2026] [:error] [pid 64743:tid 64747] [client 172.213.0.0:22331] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "acpDXyzmpVL6Ubzil4iSeQAAAUI"]
[Mon Mar 30 17:33:20.872940 2026] [:error] [pid 35248:tid 35271] [client 172.213.0.0:63876] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "acpDYL3igMCgAQPFS_9tEwAAAFE"]
[Mon Mar 30 17:33:21.486217 2026] [:error] [pid 35343:tid 35345] [client 172.213.0.0:51969] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "acpDYaP5HurqmbvwN-ILdAAAAAA"]
[Mon Mar 30 17:33:22.084223 2026] [:error] [pid 51065:tid 51078] [client 172.213.0.0:13147] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "acpDYnMr8wtZeHSSB7ItFAAAAcs"]
[Mon Mar 30 17:33:23.302599 2026] [:error] [pid 50663:tid 50680] [client 172.213.0.0:25716] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "acpDY228b9DKIAMEdfAC6gAAAY8"]
[Mon Mar 30 17:33:24.413998 2026] [:error] [pid 50663:tid 50672] [client 172.213.0.0:13891] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "acpDZG28b9DKIAMEdfAC7wAAAYc"]
[Mon Mar 30 17:33:26.377405 2026] [:error] [pid 41941:tid 41943] [client 172.213.0.0:25265] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "acpDZiB2g7BNCXGBOJNF0gAAAQA"]
[Mon Mar 30 17:33:27.805473 2026] [:error] [pid 35250:tid 35311] [client 172.213.0.0:51971] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "acpDZ4aKM1MR6zcp2YM7fgAAAMA"]
[Mon Mar 30 17:33:28.675615 2026] [:error] [pid 35250:tid 35316] [client 172.213.0.0:22305] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "acpDaIaKM1MR6zcp2YM7gQAAAMU"]
[Mon Mar 30 17:33:29.491645 2026] [:error] [pid 35343:tid 35352] [client 172.213.0.0:57311] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "acpDaaP5HurqmbvwN-ILgAAAAAc"]
[Mon Mar 30 17:33:30.365209 2026] [:error] [pid 35250:tid 35329] [client 172.213.0.0:25226] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "acpDaoaKM1MR6zcp2YM7hgAAANI"]
[Mon Mar 30 17:33:31.552715 2026] [:error] [pid 35250:tid 35320] [client 172.213.0.0:57325] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "acpDa4aKM1MR6zcp2YM7iQAAAMk"]
[Mon Mar 30 17:33:32.708699 2026] [:error] [pid 35250:tid 35312] [client 172.213.0.0:13948] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "acpDbIaKM1MR6zcp2YM7jwAAAME"]
[Mon Mar 30 17:33:34.226146 2026] [:error] [pid 35250:tid 35313] [client 172.213.0.0:13925] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "acpDboaKM1MR6zcp2YM7lgAAAMI"]
[Mon Mar 30 17:33:35.141365 2026] [:error] [pid 41941:tid 41959] [client 172.213.0.0:1325] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "acpDbyB2g7BNCXGBOJNF3gAAARA"]
[Mon Mar 30 17:33:36.425593 2026] [:error] [pid 51065:tid 51087] [client 172.213.0.0:1313] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "acpDcHMr8wtZeHSSB7ItGgAAAdQ"]
[Mon Mar 30 17:33:37.492793 2026] [:error] [pid 41941:tid 41946] [client 172.213.0.0:10998] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acpDcSB2g7BNCXGBOJNF4wAAAQM"]
[Mon Mar 30 17:33:38.331546 2026] [:error] [pid 51065:tid 51090] [client 172.213.0.0:57290] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acpDcnMr8wtZeHSSB7ItHgAAAdc"]
[Mon Mar 30 17:33:39.270191 2026] [:error] [pid 35248:tid 35265] [client 172.213.0.0:63899] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acpDc73igMCgAQPFS_9tFQAAAEs"]
[Mon Mar 30 17:33:40.174996 2026] [:error] [pid 50663:tid 50684] [client 172.213.0.0:13927] [client 172.213.0.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin-footer.php"] [unique_id "acpDdG28b9DKIAMEdfAC9AAAAZM"]
[Mon Mar 30 19:27:22.295406 2026] [:error] [pid 35250:tid 35334] [client 64.224.120.105:4262] [client 64.224.120.105] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 64.224.120.105, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acpeGoaKM1MR6zcp2YNhNAAAANc"]
[Mon Mar 30 19:27:22.301902 2026] [:error] [pid 35250:tid 35334] [client 64.224.120.105:4262] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Mar 30 20:32:46.870468 2026] [:error] [pid 11947:tid 11949] [client 172.70.240.190:12740] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/index"] [unique_id "acptbjSVtzzXIgk-Fgl1TgAAAgA"]
[Mon Mar 30 20:32:46.895413 2026] [:error] [pid 35250:tid 35318] [client 172.70.240.190:12731] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/logs/HEAD"] [unique_id "acptboaKM1MR6zcp2YN2rwAAAMc"]
[Mon Mar 30 20:32:46.897601 2026] [:error] [pid 35250:tid 35330] [client 172.70.240.190:12724] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/refs/heads/master"] [unique_id "acptboaKM1MR6zcp2YN2sAAAANM"]
[Mon Mar 30 20:32:46.904502 2026] [:error] [pid 11947:tid 11950] [client 172.70.240.190:12732] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "acptbjSVtzzXIgk-Fgl1TwAAAgE"]
[Mon Mar 30 20:32:46.977608 2026] [:error] [pid 35250:tid 35323] [client 172.70.240.44:10770] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "acptboaKM1MR6zcp2YN2sQAAAMw"]
[Mon Mar 30 20:32:46.984032 2026] [:error] [pid 35250:tid 35326] [client 172.70.240.44:10777] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/refs/heads/main"] [unique_id "acptboaKM1MR6zcp2YN2sgAAAM8"]
[Mon Mar 30 20:32:47.901962 2026] [:error] [pid 35343:tid 35345] [client 172.70.240.190:12742] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "acptb6P5HurqmbvwN-IyGAAAAAA"]
[Mon Mar 30 20:32:47.912114 2026] [:error] [pid 11947:tid 11957] [client 172.70.240.45:11350] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "acptbzSVtzzXIgk-Fgl1UgAAAgg"]
[Mon Mar 30 20:32:47.934370 2026] [:error] [pid 11947:tid 11972] [client 172.70.240.190:12746] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "acptbzSVtzzXIgk-Fgl1UwAAAhc"]
[Mon Mar 30 20:32:47.942252 2026] [:error] [pid 11947:tid 11953] [client 172.70.240.44:10779] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "acptbzSVtzzXIgk-Fgl1VAAAAgQ"]
[Mon Mar 30 20:32:48.009997 2026] [:error] [pid 35343:tid 35357] [client 172.70.240.44:10789] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "acptcKP5HurqmbvwN-IyGQAAAAw"]
[Mon Mar 30 20:32:48.025583 2026] [:error] [pid 35343:tid 35349] [client 172.70.240.44:10787] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "acptcKP5HurqmbvwN-IyGgAAAAQ"]
[Mon Mar 30 20:32:48.910504 2026] [:error] [pid 11947:tid 11967] [client 172.70.240.45:11354] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "acptcDSVtzzXIgk-Fgl1VwAAAhI"]
[Mon Mar 30 20:32:48.923290 2026] [:error] [pid 11947:tid 11963] [client 172.70.240.44:10790] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "acptcDSVtzzXIgk-Fgl1WAAAAg4"]
[Mon Mar 30 20:32:48.968569 2026] [:error] [pid 11947:tid 11952] [client 172.70.240.190:12750] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "acptcDSVtzzXIgk-Fgl1WQAAAgM"]
[Mon Mar 30 20:32:48.980622 2026] [:error] [pid 11947:tid 11971] [client 172.70.240.190:12747] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "acptcDSVtzzXIgk-Fgl1WgAAAhY"]
[Mon Mar 30 20:32:49.048375 2026] [:error] [pid 11947:tid 11964] [client 172.70.240.44:10798] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.tmp"] [unique_id "acptcTSVtzzXIgk-Fgl1WwAAAg8"]
[Mon Mar 30 20:32:49.059414 2026] [:error] [pid 11947:tid 11960] [client 172.70.240.191:10014] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "acptcTSVtzzXIgk-Fgl1XAAAAgs"]
[Mon Mar 30 20:32:49.935804 2026] [:error] [pid 35250:tid 35323] [client 172.70.240.190:12753] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "acptcYaKM1MR6zcp2YN2uQAAAMw"]
[Mon Mar 30 20:32:49.973414 2026] [:error] [pid 12106:tid 12113] [client 172.70.240.45:11357] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production.local"] [unique_id "acptcbIKxOs8TAdw7hcgGgAAAoU"]
[Mon Mar 30 20:32:49.986518 2026] [:error] [pid 35248:tid 35274] [client 172.70.240.190:12761] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env"] [unique_id "acptcb3igMCgAQPFS_-mswAAAFQ"]
[Mon Mar 30 20:32:50.016380 2026] [:error] [pid 35248:tid 35265] [client 172.70.240.191:10017] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development.local"] [unique_id "acptcr3igMCgAQPFS_-mtAAAAEs"]
[Mon Mar 30 20:32:50.078416 2026] [:error] [pid 35248:tid 35261] [client 172.70.240.191:10022] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "acptcr3igMCgAQPFS_-mtQAAAEc"]
[Mon Mar 30 20:32:50.105782 2026] [:error] [pid 35343:tid 35346] [client 172.70.240.191:10023] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "acptcqP5HurqmbvwN-IyGwAAAAE"]
[Mon Mar 30 20:32:50.985178 2026] [:error] [pid 12046:tid 12057] [client 172.70.240.191:10029] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "acptcpDbtlkoJ6ELn7ghugAAAkg"]
[Mon Mar 30 20:32:51.021932 2026] [:error] [pid 41941:tid 41962] [client 172.70.240.191:10033] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env"] [unique_id "acptcyB2g7BNCXGBOJN8OQAAARM"]
[Mon Mar 30 20:32:51.025600 2026] [:error] [pid 35248:tid 35257] [client 172.70.240.190:12764] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/core/.env"] [unique_id "acptc73igMCgAQPFS_-muQAAAEM"]
[Mon Mar 30 20:32:51.032118 2026] [:error] [pid 11947:tid 11972] [client 172.70.240.44:10801] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "acptczSVtzzXIgk-Fgl1ZwAAAhc"]
[Mon Mar 30 20:32:51.128625 2026] [:error] [pid 12106:tid 12123] [client 172.70.240.190:12765] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/private/.env"] [unique_id "acptc7IKxOs8TAdw7hcgGwAAAo8"]
[Mon Mar 30 20:32:51.424409 2026] [:error] [pid 35249:tid 35289] [client 172.70.240.190:12773] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env1"] [unique_id "acptcyqCKiTq85d6rgBZ9AAAAIU"]
[Mon Mar 30 20:32:52.030215 2026] [:error] [pid 35343:tid 35352] [client 172.70.240.45:11364] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env.local"] [unique_id "acptdKP5HurqmbvwN-IyHgAAAAc"]
[Mon Mar 30 20:32:52.050825 2026] [:error] [pid 12106:tid 12129] [client 172.70.240.190:12781] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_backup"] [unique_id "acptdLIKxOs8TAdw7hcgHwAAApU"]
[Mon Mar 30 20:32:52.062775 2026] [:error] [pid 12106:tid 12109] [client 172.70.240.191:10040] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.php"] [unique_id "acptdLIKxOs8TAdw7hcgIAAAAoE"]
[Mon Mar 30 20:32:52.064834 2026] [:error] [pid 35343:tid 35351] [client 172.70.240.190:12774] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.json"] [unique_id "acptdKP5HurqmbvwN-IyHwAAAAY"]
[Mon Mar 30 20:32:52.143355 2026] [:error] [pid 35250:tid 35334] [client 172.70.240.190:12787] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "acptdIaKM1MR6zcp2YN2vAAAANc"]
[Mon Mar 30 20:32:52.441657 2026] [:error] [pid 12046:tid 12072] [client 172.70.240.45:11365] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env2"] [unique_id "acptdJDbtlkoJ6ELn7ghvAAAAlc"]
[Mon Mar 30 20:32:53.044682 2026] [:error] [pid 35248:tid 35267] [client 172.70.240.190:12803] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.envrc"] [unique_id "acptdb3igMCgAQPFS_-muwAAAE0"]
[Mon Mar 30 20:32:53.062785 2026] [:error] [pid 35248:tid 35254] [client 172.70.240.190:12795] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "acptdb3igMCgAQPFS_-mvAAAAEA"]
[Mon Mar 30 20:32:53.075819 2026] [:error] [pid 35248:tid 35273] [client 172.70.240.190:12808] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production.bak"] [unique_id "acptdb3igMCgAQPFS_-mvQAAAFM"]
[Mon Mar 30 20:32:53.087447 2026] [:error] [pid 35248:tid 35275] [client 172.70.240.45:11372] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.orig"] [unique_id "acptdb3igMCgAQPFS_-mvgAAAFU"]
[Mon Mar 30 20:32:53.174785 2026] [:error] [pid 41941:tid 41964] [client 172.70.240.190:12809] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "acptdSB2g7BNCXGBOJN8PAAAARU"]
[Mon Mar 30 20:32:53.473143 2026] [:error] [pid 41941:tid 41952] [client 172.70.240.45:11376] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev.local"] [unique_id "acptdSB2g7BNCXGBOJN8PgAAAQk"]
[Mon Mar 30 20:32:54.072796 2026] [:error] [pid 64743:tid 64745] [client 172.70.240.191:11941] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.docker"] [unique_id "acptdizmpVL6Ubzil4ioOgAAAUA"]
[Mon Mar 30 20:32:54.106122 2026] [:error] [pid 12046:tid 12068] [client 172.70.240.45:14223] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.container"] [unique_id "acptdpDbtlkoJ6ELn7ghvQAAAlM"]
[Mon Mar 30 20:32:54.135088 2026] [:error] [pid 12046:tid 12071] [client 172.70.240.191:11946] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/docker/.env"] [unique_id "acptdpDbtlkoJ6ELn7ghvgAAAlY"]
[Mon Mar 30 20:32:54.236658 2026] [:error] [pid 35343:tid 35347] [client 172.70.240.45:14231] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/docker/.env.local"] [unique_id "acptdqP5HurqmbvwN-IyIAAAAAI"]
[Mon Mar 30 20:32:54.405040 2026] [:error] [pid 35249:tid 35291] [client 172.70.240.190:11650] [client 172.70.240.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/www/.env"] [unique_id "acptdiqCKiTq85d6rgBZ-QAAAIc"]
[Mon Mar 30 20:32:54.512507 2026] [:error] [pid 64743:tid 64766] [client 172.70.240.45:14237] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/server/.env"] [unique_id "acptdizmpVL6Ubzil4ioOwAAAVU"]
[Mon Mar 30 20:32:55.095037 2026] [:error] [pid 41941:tid 41958] [client 172.70.240.191:11950] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/srv/.env"] [unique_id "acptdyB2g7BNCXGBOJN8QQAAAQ8"]
[Mon Mar 30 20:32:55.107605 2026] [:error] [pid 64743:tid 64754] [client 172.70.240.44:12360] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/web/.env"] [unique_id "acptdyzmpVL6Ubzil4ioPgAAAUk"]
[Mon Mar 30 20:32:55.107605 2026] [:error] [pid 41941:tid 41955] [client 172.70.240.45:14239] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/site/.env"] [unique_id "acptdyB2g7BNCXGBOJN8QgAAAQw"]
[Mon Mar 30 20:32:55.290006 2026] [:error] [pid 35249:tid 35284] [client 172.70.240.44:12361] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/var/www/.env"] [unique_id "acptdyqCKiTq85d6rgBZ-gAAAIA"]
[Mon Mar 30 20:32:55.469100 2026] [:error] [pid 35248:tid 35274] [client 172.70.240.44:12365] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/var/www/html/.env"] [unique_id "acptd73igMCgAQPFS_-mwAAAAFQ"]
[Mon Mar 30 20:32:55.562797 2026] [:error] [pid 41941:tid 41947] [client 172.70.240.191:11953] [client 172.70.240.191] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/home/.env"] [unique_id "acptdyB2g7BNCXGBOJN8QwAAAQQ"]
[Mon Mar 30 20:32:56.089480 2026] [:error] [pid 12106:tid 12124] [client 172.70.240.44:12366] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/root/.env"] [unique_id "acpteLIKxOs8TAdw7hcgIgAAApA"]
[Mon Mar 30 20:32:56.104576 2026] [:error] [pid 11947:tid 11954] [client 172.70.240.44:12371] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_config"] [unique_id "acpteDSVtzzXIgk-Fgl1agAAAgU"]
[Mon Mar 30 20:32:56.347702 2026] [:error] [pid 50663:tid 50687] [client 172.70.240.44:12379] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_settings"] [unique_id "acpteG28b9DKIAMEdfA9qQAAAZY"]
[Mon Mar 30 20:32:56.520311 2026] [:error] [pid 35250:tid 35331] [client 172.70.240.45:14243] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local.backup"] [unique_id "acpteIaKM1MR6zcp2YN2wAAAANQ"]
[Mon Mar 30 20:32:56.614075 2026] [:error] [pid 50663:tid 50674] [client 172.70.240.45:10072] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/index"] [unique_id "acpteG28b9DKIAMEdfA9qwAAAYk"]
[Mon Mar 30 20:32:56.882210 2026] [:error] [pid 41941:tid 41949] [client 172.70.240.44:14000] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/logs/HEAD"] [unique_id "acpteCB2g7BNCXGBOJN8RwAAAQY"]
[Mon Mar 30 20:32:57.053821 2026] [:error] [pid 35343:tid 35363] [client 172.70.240.44:14004] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/refs/heads/master"] [unique_id "acpteaP5HurqmbvwN-IyJAAAABI"]
[Mon Mar 30 20:32:57.146792 2026] [:error] [pid 35248:tid 35266] [client 172.70.240.44:14007] [client 172.70.240.44] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/refs/heads/main"] [unique_id "acpteb3igMCgAQPFS_-mwgAAAEw"]
[Mon Mar 30 20:32:57.393654 2026] [:error] [pid 50663:tid 50678] [client 172.70.240.45:10076] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "acpteW28b9DKIAMEdfA9sAAAAY0"]
[Mon Mar 30 20:33:16.159474 2026] [:error] [pid 35248:tid 35254] [client 172.69.33.62:12286] [client 172.69.33.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "acptjL3igMCgAQPFS_-m6AAAAEA"]
[Mon Mar 30 20:33:17.225556 2026] [:error] [pid 35250:tid 35332] [client 172.69.33.62:12289] [client 172.69.33.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "acptjYaKM1MR6zcp2YN21AAAANU"]
[Mon Mar 30 20:33:17.745388 2026] [:error] [pid 12046:tid 12065] [client 172.69.33.62:12291] [client 172.69.33.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "acptjZDbtlkoJ6ELn7ghyAAAAlA"]
[Mon Mar 30 20:33:18.280830 2026] [:error] [pid 41941:tid 41951] [client 172.70.240.45:11899] [client 172.70.240.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.tmp"] [unique_id "acptjiB2g7BNCXGBOJN8XgAAAQg"]
[Mon Mar 30 20:33:18.781116 2026] [:error] [pid 11947:tid 11961] [client 172.69.34.149:13420] [client 172.69.34.149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "acptjjSVtzzXIgk-Fgl1mAAAAgw"]
[Mon Mar 30 20:33:35.020833 2026] [:error] [pid 35250:tid 35315] [client 172.69.33.36:9500] [client 172.69.33.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development.local"] [unique_id "acptn4aKM1MR6zcp2YN29gAAAMQ"]
[Mon Mar 30 20:33:35.543613 2026] [:error] [pid 35250:tid 35320] [client 172.69.34.159:11953] [client 172.69.34.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env"] [unique_id "acptn4aKM1MR6zcp2YN2-gAAAMk"]
[Mon Mar 30 20:33:36.068541 2026] [:error] [pid 35250:tid 35323] [client 172.69.34.194:11508] [client 172.69.34.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "acptoIaKM1MR6zcp2YN2_QAAAMw"]
[Mon Mar 30 20:33:36.090361 2026] [:error] [pid 35343:tid 35361] [client 172.69.33.16:12579] [client 172.69.33.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "acptoKP5HurqmbvwN-IyQAAAABA"]
[Mon Mar 30 20:33:36.556862 2026] [:error] [pid 35248:tid 35268] [client 172.69.33.54:11308] [client 172.69.33.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "acptoL3igMCgAQPFS_-m-wAAAE4"]
[Mon Mar 30 20:33:36.557657 2026] [:error] [pid 35248:tid 35254] [client 172.69.34.193:11161] [client 172.69.34.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/core/.env"] [unique_id "acptoL3igMCgAQPFS_-m_AAAAEA"]
[Mon Mar 30 20:33:36.595416 2026] [:error] [pid 35248:tid 35277] [client 172.69.34.150:12683] [client 172.69.34.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "acptoL3igMCgAQPFS_-m_QAAAFc"]
[Mon Mar 30 20:33:37.029711 2026] [:error] [pid 50663:tid 50688] [client 172.69.33.37:13863] [client 172.69.33.37] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/private/.env"] [unique_id "acptoW28b9DKIAMEdfA91gAAAZc"]
[Mon Mar 30 20:33:37.075191 2026] [:error] [pid 11947:tid 11962] [client 172.69.34.194:11514] [client 172.69.34.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env.local"] [unique_id "acptoTSVtzzXIgk-Fgl1tAAAAg0"]
[Mon Mar 30 20:33:37.553661 2026] [:error] [pid 35250:tid 35326] [client 172.69.33.40:12534] [client 172.69.33.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.php"] [unique_id "acptoYaKM1MR6zcp2YN3AAAAAM8"]
[Mon Mar 30 20:33:37.563372 2026] [:error] [pid 11947:tid 11957] [client 172.69.34.225:9730] [client 172.69.34.225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_backup"] [unique_id "acptoTSVtzzXIgk-Fgl1uAAAAgg"]
[Mon Mar 30 20:33:37.596876 2026] [:error] [pid 50663:tid 50671] [client 172.69.33.55:10531] [client 172.69.33.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.json"] [unique_id "acptoW28b9DKIAMEdfA91wAAAYY"]
[Mon Mar 30 20:33:37.714026 2026] [:error] [pid 35343:tid 35353] [client 172.69.34.150:12687] [client 172.69.34.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "acptoaP5HurqmbvwN-IyQwAAAAg"]
[Mon Mar 30 20:33:37.901506 2026] [:error] [pid 11947:tid 11966] [client 172.69.33.63:9301] [client 172.69.33.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env2"] [unique_id "acptoTSVtzzXIgk-Fgl1ugAAAhE"]
[Mon Mar 30 20:33:38.023714 2026] [:error] [pid 64743:tid 64753] [client 172.69.33.30:13197] [client 172.69.33.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env1"] [unique_id "acptoizmpVL6Ubzil4ioSQAAAUg"]
[Mon Mar 30 20:33:38.113071 2026] [:error] [pid 35250:tid 35314] [client 172.69.33.55:10533] [client 172.69.33.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "acptooaKM1MR6zcp2YN3AQAAAMM"]
[Mon Mar 30 20:33:38.238686 2026] [:error] [pid 11947:tid 11973] [client 172.69.34.150:12691] [client 172.69.34.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.envrc"] [unique_id "acptojSVtzzXIgk-Fgl1uwAAAhg"]
[Mon Mar 30 20:33:38.427759 2026] [:error] [pid 12106:tid 12110] [client 172.69.33.16:12580] [client 172.69.33.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.orig"] [unique_id "acptorIKxOs8TAdw7hcgPwAAAoI"]
[Mon Mar 30 20:33:38.547826 2026] [:error] [pid 12046:tid 12050] [client 172.69.34.226:12364] [client 172.69.34.226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production.bak"] [unique_id "acptopDbtlkoJ6ELn7gh2gAAAkE"]
[Mon Mar 30 20:33:38.629149 2026] [:error] [pid 64743:tid 64755] [client 172.69.33.16:12581] [client 172.69.33.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "acptoizmpVL6Ubzil4ioTAAAAUo"]
[Mon Mar 30 20:33:38.682515 2026] [:error] [pid 12046:tid 12055] [client 172.69.34.227:10876] [client 172.69.34.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production.local"] [unique_id "acptopDbtlkoJ6ELn7gh2wAAAkY"]
[Mon Mar 30 20:33:38.762896 2026] [:error] [pid 12106:tid 12111] [client 172.69.33.50:10086] [client 172.69.33.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev.local"] [unique_id "acptorIKxOs8TAdw7hcgQAAAAoM"]
[Mon Mar 30 20:33:38.899657 2026] [:error] [pid 35249:tid 35305] [client 172.69.33.36:9507] [client 172.69.33.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.docker"] [unique_id "acptoiqCKiTq85d6rgBaBgAAAJU"]
[Mon Mar 30 20:33:39.032673 2026] [:error] [pid 35249:tid 35297] [client 172.69.34.150:12698] [client 172.69.34.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.container"] [unique_id "acptoyqCKiTq85d6rgBaBwAAAI0"]
[Mon Mar 30 20:33:39.115538 2026] [:error] [pid 35343:tid 35366] [client 172.69.33.17:11005] [client 172.69.33.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/docker/.env"] [unique_id "acpto6P5HurqmbvwN-IyRgAAABU"]
[Mon Mar 30 20:33:39.283817 2026] [:error] [pid 35343:tid 35356] [client 172.69.34.227:10880] [client 172.69.34.227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/docker/.env.local"] [unique_id "acpto6P5HurqmbvwN-IyRwAAAAs"]
[Mon Mar 30 20:33:39.421941 2026] [:error] [pid 12106:tid 12129] [client 172.69.33.63:9302] [client 172.69.33.63] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/server/.env"] [unique_id "acpto7IKxOs8TAdw7hcgQgAAApU"]
[Mon Mar 30 20:33:39.511706 2026] [:error] [pid 50663:tid 50683] [client 172.69.34.194:11179] [client 172.69.34.194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/srv/.env"] [unique_id "acpto228b9DKIAMEdfA92QAAAZI"]
[Mon Mar 30 20:33:39.597316 2026] [:error] [pid 50663:tid 50675] [client 172.69.33.16:11102] [client 172.69.33.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/web/.env"] [unique_id "acpto228b9DKIAMEdfA92gAAAYo"]
[Mon Mar 30 20:33:39.681634 2026] [:error] [pid 50663:tid 50669] [client 172.69.33.31:9824] [client 172.69.33.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/site/.env"] [unique_id "acpto228b9DKIAMEdfA93AAAAYQ"]
[Mon Mar 30 20:33:39.756640 2026] [:error] [pid 50663:tid 50668] [client 172.69.34.148:13326] [client 172.69.34.148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/www/.env"] [unique_id "acpto228b9DKIAMEdfA93QAAAYM"]
[Mon Mar 30 20:33:39.898820 2026] [:error] [pid 50663:tid 50670] [client 172.69.34.228:12681] [client 172.69.34.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/var/www/.env"] [unique_id "acpto228b9DKIAMEdfA93gAAAYU"]
[Mon Mar 30 20:33:40.028784 2026] [:error] [pid 50663:tid 50689] [client 172.69.33.62:13551] [client 172.69.33.62] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/var/www/html/.env"] [unique_id "acptpG28b9DKIAMEdfA94AAAAZg"]
[Mon Mar 30 20:33:40.076290 2026] [:error] [pid 50663:tid 50676] [client 172.69.33.17:12213] [client 172.69.33.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/home/.env"] [unique_id "acptpG28b9DKIAMEdfA94gAAAYs"]
[Mon Mar 30 20:33:40.164128 2026] [:error] [pid 12046:tid 12066] [client 172.69.34.193:13733] [client 172.69.34.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/root/.env"] [unique_id "acptpJDbtlkoJ6ELn7gh3gAAAlE"]
[Mon Mar 30 20:33:40.239557 2026] [:error] [pid 12046:tid 12072] [client 172.69.33.17:12215] [client 172.69.33.17] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_config"] [unique_id "acptpJDbtlkoJ6ELn7gh3wAAAlc"]
[Mon Mar 30 20:33:40.368074 2026] [:error] [pid 50663:tid 50680] [client 172.69.33.31:10055] [client 172.69.33.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_secret"] [unique_id "acptpG28b9DKIAMEdfA94wAAAY8"]
[Mon Mar 30 20:33:40.410160 2026] [:error] [pid 12106:tid 12127] [client 172.69.34.159:11956] [client 172.69.34.159] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local.backup"] [unique_id "acptpLIKxOs8TAdw7hcgQwAAApM"]
[Mon Mar 30 20:33:40.513830 2026] [:error] [pid 35250:tid 35330] [client 172.69.34.150:12706] [client 172.69.34.150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_settings"] [unique_id "acptpIaKM1MR6zcp2YN3BAAAANM"]
[Mon Mar 30 20:33:56.058579 2026] [:error] [pid 35248:tid 35265] [client 172.69.33.41:10706] [client 172.69.33.41] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env"] [unique_id "acpttL3igMCgAQPFS_-nIAAAAEs"]
[Tue Mar 31 03:08:01.314713 2026] [:error] [pid 39123:tid 39128] [client 74.248.131.192:3985] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Tue Mar 31 03:08:01.572978 2026] [:error] [pid 39123:tid 39132] [client 74.248.131.192:3985] File does not exist: /usr/local/apache/htdocs/suspended-page/sw.php
[Tue Mar 31 03:08:01.832033 2026] [:error] [pid 39123:tid 39148] [client 74.248.131.192:3985] File does not exist: /usr/local/apache/htdocs/suspended-page/fsgdjkl.php
[Tue Mar 31 03:08:02.090158 2026] [:error] [pid 39123:tid 39144] [client 74.248.131.192:3985] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Tue Mar 31 03:08:02.347806 2026] [:error] [pid 39123:tid 39128] [client 74.248.131.192:3985] File does not exist: /usr/local/apache/htdocs/suspended-page/y.php
[Tue Mar 31 03:08:02.605436 2026] [:error] [pid 39123:tid 39132] [client 74.248.131.192:3985] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Tue Mar 31 03:08:02.871753 2026] [:error] [pid 39123:tid 39135] [client 74.248.131.192:3985] File does not exist: /usr/local/apache/htdocs/suspended-page/abouta.php
[Tue Mar 31 03:08:03.139578 2026] [:error] [pid 39123:tid 39148] [client 74.248.131.192:3985] File does not exist: /usr/local/apache/htdocs/suspended-page/zfe.php
[Tue Mar 31 03:08:04.578086 2026] [:error] [pid 39123:tid 39148] [client 74.248.131.192:3985] File does not exist: /usr/local/apache/htdocs/suspended-page/by.php
[Tue Mar 31 03:08:04.836529 2026] [:error] [pid 39123:tid 39133] [client 74.248.131.192:3985] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Tue Mar 31 03:08:05.093061 2026] [:error] [pid 39123:tid 39142] [client 74.248.131.192:3985] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asudo.php"] [unique_id "acrKFSobgVY20PMQKVu9WgAAARE"]
[Tue Mar 31 03:08:06.445564 2026] [:error] [pid 39123:tid 39131] [client 74.248.131.192:39498] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asudo.php"] [unique_id "acrKFiobgVY20PMQKVu9WwAAAQY"]
[Tue Mar 31 03:08:07.912758 2026] [:error] [pid 36939:tid 36958] [client 74.248.131.192:3554] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asudo.php"] [unique_id "acrKF8RDKH225Jeq1jeH1AAAABE"]
[Tue Mar 31 03:08:10.342342 2026] [:error] [pid 36672:tid 36814] [client 74.248.131.192:3285] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX2.php"] [unique_id "acrKGrKHDzEfeL3XiLpnTQAAAEc"]
[Tue Mar 31 03:08:11.753512 2026] [:error] [pid 36688:tid 36845] [client 74.248.131.192:3319] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/000.php"] [unique_id "acrKG5Ie8NBGKiiCIcI6OwAAAIo"]
[Tue Mar 31 03:08:14.336296 2026] [:error] [pid 36688:tid 36856] [client 74.248.131.192:3283] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/000.php"] [unique_id "acrKHpIe8NBGKiiCIcI6RAAAAJU"]
[Tue Mar 31 03:08:17.003849 2026] [:error] [pid 39123:tid 39147] [client 74.248.131.192:38766] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrKISobgVY20PMQKVu9iQAAARY"]
[Tue Mar 31 03:08:19.342632 2026] [:error] [pid 36672:tid 36820] [client 74.248.131.192:38829] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zlnckdxn.php"] [unique_id "acrKI7KHDzEfeL3XiLpnYgAAAE0"]
[Tue Mar 31 03:08:20.949819 2026] [:error] [pid 39123:tid 39129] [client 74.248.131.192:39541] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-thi.php"] [unique_id "acrKJCobgVY20PMQKVu9oQAAAQQ"]
[Tue Mar 31 03:08:21.853301 2026] [:error] [pid 39123:tid 39139] [client 74.248.131.192:38735] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-thi.php"] [unique_id "acrKJSobgVY20PMQKVu9pgAAAQ4"]
[Tue Mar 31 03:08:22.764704 2026] [:error] [pid 36672:tid 36811] [client 74.248.131.192:39545] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-thi.php"] [unique_id "acrKJrKHDzEfeL3XiLpnawAAAEQ"]
[Tue Mar 31 03:08:24.160620 2026] [:error] [pid 36939:tid 36947] [client 74.248.131.192:39516] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-thi.php"] [unique_id "acrKKMRDKH225Jeq1jeIHgAAAAY"]
[Tue Mar 31 03:08:25.683249 2026] [:error] [pid 36688:tid 36837] [client 74.248.131.192:36187] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "acrKKZIe8NBGKiiCIcI6iAAAAII"]
[Tue Mar 31 03:08:26.302494 2026] [:error] [pid 36939:tid 36955] [client 74.248.131.192:39530] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "acrKKsRDKH225Jeq1jeILQAAAA4"]
[Tue Mar 31 03:08:27.193137 2026] [:error] [pid 36706:tid 36865] [client 74.248.131.192:38752] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "acrKK7a-eBLL1E34-UUoXwAAAMM"]
[Tue Mar 31 03:08:28.927303 2026] [:error] [pid 39123:tid 39136] [client 74.248.131.192:53867] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "acrKLCobgVY20PMQKVu92QAAAQs"]
[Tue Mar 31 03:08:29.563390 2026] [:error] [pid 36706:tid 36872] [client 74.248.131.192:53861] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "acrKLba-eBLL1E34-UUobAAAAMo"]
[Tue Mar 31 03:08:30.547415 2026] [:error] [pid 36672:tid 36826] [client 74.248.131.192:3309] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "acrKLrKHDzEfeL3XiLpncAAAAFM"]
[Tue Mar 31 03:08:31.168075 2026] [:error] [pid 36939:tid 36959] [client 74.248.131.192:36210] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jlex.php"] [unique_id "acrKL8RDKH225Jeq1jeIPQAAABI"]
[Tue Mar 31 03:08:32.235877 2026] [:error] [pid 36688:tid 36859] [client 74.248.131.192:38804] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jlex.php"] [unique_id "acrKMJIe8NBGKiiCIcI6nwAAAJg"]
[Tue Mar 31 03:08:33.250859 2026] [:error] [pid 39123:tid 39134] [client 74.248.131.192:38789] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dichku.php"] [unique_id "acrKMSobgVY20PMQKVu98AAAAQk"]
[Tue Mar 31 03:08:34.213825 2026] [:error] [pid 39123:tid 39141] [client 74.248.131.192:38806] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dichku.php"] [unique_id "acrKMiobgVY20PMQKVu9_AAAARA"]
[Tue Mar 31 03:08:35.166739 2026] [:error] [pid 36706:tid 36873] [client 74.248.131.192:3693] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "acrKM7a-eBLL1E34-UUoegAAAMs"]
[Tue Mar 31 03:08:35.932503 2026] [:error] [pid 39123:tid 39147] [client 74.248.131.192:39576] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "acrKMyobgVY20PMQKVu-EwAAARY"]
[Tue Mar 31 03:08:36.543246 2026] [:error] [pid 39123:tid 39140] [client 74.248.131.192:38836] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "acrKNCobgVY20PMQKVu-GQAAAQ8"]
[Tue Mar 31 03:08:37.369570 2026] [:error] [pid 36939:tid 36954] [client 74.248.131.192:38811] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "acrKNcRDKH225Jeq1jeISAAAAA0"]
[Tue Mar 31 03:08:38.057822 2026] [:error] [pid 39123:tid 39145] [client 74.248.131.192:39523] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "acrKNiobgVY20PMQKVu-JAAAARQ"]
[Tue Mar 31 03:08:38.615293 2026] [:error] [pid 36672:tid 36815] [client 74.248.131.192:53854] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xhejulap.php"] [unique_id "acrKNrKHDzEfeL3XiLpnfgAAAEg"]
[Tue Mar 31 03:08:39.191964 2026] [:error] [pid 36688:tid 36843] [client 74.248.131.192:3543] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xhejulap.php"] [unique_id "acrKN5Ie8NBGKiiCIcI6pgAAAIg"]
[Tue Mar 31 03:08:39.780945 2026] [:error] [pid 36706:tid 36883] [client 74.248.131.192:3293] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xhejulap.php"] [unique_id "acrKN7a-eBLL1E34-UUofQAAANU"]
[Tue Mar 31 03:08:40.832511 2026] [:error] [pid 36672:tid 36828] [client 74.248.131.192:3553] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xhejulap.php"] [unique_id "acrKOLKHDzEfeL3XiLpnhQAAAFU"]
[Tue Mar 31 03:08:41.537949 2026] [:error] [pid 39123:tid 39141] [client 74.248.131.192:53842] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acrKOSobgVY20PMQKVu-LQAAARA"]
[Tue Mar 31 03:08:42.163431 2026] [:error] [pid 36688:tid 36846] [client 74.248.131.192:3660] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acrKOpIe8NBGKiiCIcI6rwAAAIs"]
[Tue Mar 31 03:08:43.056636 2026] [:error] [pid 36939:tid 36962] [client 74.248.131.192:36216] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acrKO8RDKH225Jeq1jeIXQAAABU"]
[Tue Mar 31 03:08:44.237009 2026] [:error] [pid 36939:tid 36941] [client 74.248.131.192:39595] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acrKPMRDKH225Jeq1jeIYgAAAAA"]
[Tue Mar 31 03:08:45.290625 2026] [:error] [pid 36688:tid 36836] [client 74.248.131.192:53840] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8pewqMTX.php"] [unique_id "acrKPZIe8NBGKiiCIcI6vAAAAIE"]
[Tue Mar 31 03:08:46.504282 2026] [:error] [pid 36939:tid 36947] [client 74.248.131.192:53845] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ddpxi.php"] [unique_id "acrKPsRDKH225Jeq1jeIbgAAAAY"]
[Tue Mar 31 03:08:48.229005 2026] [:error] [pid 39123:tid 39135] [client 74.248.131.192:3321] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cdkfu.php"] [unique_id "acrKQCobgVY20PMQKVu-PwAAAQo"]
[Tue Mar 31 03:08:49.115094 2026] [:error] [pid 36706:tid 36875] [client 74.248.131.192:3323] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cdkfu.php"] [unique_id "acrKQba-eBLL1E34-UUolgAAAM0"]
[Tue Mar 31 03:08:50.120928 2026] [:error] [pid 36939:tid 36941] [client 74.248.131.192:36248] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/IcC7p.php"] [unique_id "acrKQsRDKH225Jeq1jeIcgAAAAA"]
[Tue Mar 31 03:08:50.751333 2026] [:error] [pid 36939:tid 36945] [client 74.248.131.192:53883] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/IcC7p.php"] [unique_id "acrKQsRDKH225Jeq1jeIdgAAAAQ"]
[Tue Mar 31 03:08:51.617779 2026] [:error] [pid 36939:tid 36959] [client 74.248.131.192:36183] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/IcC7p.php"] [unique_id "acrKQ8RDKH225Jeq1jeIfgAAABI"]
[Tue Mar 31 03:08:52.342086 2026] [:error] [pid 36706:tid 36862] [client 74.248.131.192:39543] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/IcC7p.php"] [unique_id "acrKRLa-eBLL1E34-UUopAAAAMA"]
[Tue Mar 31 03:08:53.590844 2026] [:error] [pid 36706:tid 36882] [client 74.248.131.192:52624] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "acrKRba-eBLL1E34-UUotAAAANQ"]
[Tue Mar 31 03:08:54.299910 2026] [:error] [pid 36939:tid 36949] [client 74.248.131.192:3540] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "acrKRsRDKH225Jeq1jeIhAAAAAg"]
[Tue Mar 31 03:08:55.492479 2026] [:error] [pid 36939:tid 36957] [client 74.248.131.192:3287] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Jcrop.php"] [unique_id "acrKR8RDKH225Jeq1jeIiwAAABA"]
[Tue Mar 31 15:23:44.272838 2026] [:error] [pid 6548:tid 6561] [client 172.71.144.73:11745] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/refs/heads/master"] [unique_id "act2gLgIz9HgMl9YwE6BFwAAAUs"]
[Tue Mar 31 15:23:44.287376 2026] [:error] [pid 6548:tid 6564] [client 172.71.144.59:13833] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/logs/HEAD"] [unique_id "act2gLgIz9HgMl9YwE6BGAAAAU4"]
[Tue Mar 31 15:23:44.296785 2026] [:error] [pid 6548:tid 6556] [client 172.71.144.72:12509] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "act2gLgIz9HgMl9YwE6BGQAAAUY"]
[Tue Mar 31 15:23:44.301736 2026] [:error] [pid 6548:tid 6551] [client 172.71.144.72:12506] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/index"] [unique_id "act2gLgIz9HgMl9YwE6BGgAAAUE"]
[Tue Mar 31 15:23:44.303480 2026] [:error] [pid 36892:tid 36951] [client 172.71.144.73:11743] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "act2gEyj9S4G0ek3O4I-wgAAAIA"]
[Tue Mar 31 15:23:44.311975 2026] [:error] [pid 41421:tid 41435] [client 172.71.144.100:13529] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/refs/heads/main"] [unique_id "act2gBSaDjY9kKFtUQAh-QAAAQs"]
[Tue Mar 31 15:23:45.302838 2026] [:error] [pid 36982:tid 36996] [client 172.71.144.73:11747] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "act2gflMmeoQKN0r_GPX6gAAAMs"]
[Tue Mar 31 15:23:45.323449 2026] [:error] [pid 36982:tid 37007] [client 172.71.144.100:13537] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "act2gflMmeoQKN0r_GPX6wAAANY"]
[Tue Mar 31 15:23:45.329251 2026] [:error] [pid 36982:tid 36994] [client 172.71.144.100:13542] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "act2gflMmeoQKN0r_GPX7AAAAMk"]
[Tue Mar 31 15:23:45.330770 2026] [:error] [pid 36982:tid 36995] [client 172.71.144.73:11756] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "act2gflMmeoQKN0r_GPX7QAAAMo"]
[Tue Mar 31 15:23:45.332881 2026] [:error] [pid 36982:tid 36997] [client 172.71.144.73:11754] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "act2gflMmeoQKN0r_GPX7gAAAMw"]
[Tue Mar 31 15:23:45.340648 2026] [:error] [pid 6548:tid 6563] [client 172.71.144.59:12242] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "act2gbgIz9HgMl9YwE6BHgAAAU0"]
[Tue Mar 31 15:23:46.326941 2026] [:error] [pid 41421:tid 41426] [client 172.71.144.58:13027] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "act2ghSaDjY9kKFtUQAh-gAAAQI"]
[Tue Mar 31 15:23:46.328016 2026] [:error] [pid 36891:tid 36928] [client 172.71.144.100:13544] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "act2gpJhiMaJUqoqfl6PKQAAAEQ"]
[Tue Mar 31 15:23:46.352161 2026] [:error] [pid 36892:tid 36966] [client 172.71.144.58:13028] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "act2gkyj9S4G0ek3O4I-zwAAAI8"]
[Tue Mar 31 15:23:46.366608 2026] [:error] [pid 36892:tid 36951] [client 172.71.144.73:11758] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "act2gkyj9S4G0ek3O4I-0AAAAIA"]
[Tue Mar 31 15:23:46.372559 2026] [:error] [pid 41421:tid 41427] [client 172.71.144.101:12014] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "act2ghSaDjY9kKFtUQAh-wAAAQM"]
[Tue Mar 31 15:23:46.375909 2026] [:error] [pid 41421:tid 41444] [client 172.71.144.72:12511] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.tmp"] [unique_id "act2ghSaDjY9kKFtUQAh_AAAARQ"]
[Tue Mar 31 15:23:47.367327 2026] [:error] [pid 36982:tid 36998] [client 172.71.144.101:12022] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "act2g_lMmeoQKN0r_GPX-QAAAM0"]
[Tue Mar 31 15:23:47.367556 2026] [:error] [pid 36982:tid 37005] [client 172.71.144.101:12029] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production.local"] [unique_id "act2g_lMmeoQKN0r_GPX-gAAANQ"]
[Tue Mar 31 15:23:47.401881 2026] [:error] [pid 36982:tid 36996] [client 172.71.144.73:10183] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "act2g_lMmeoQKN0r_GPX-wAAAMs"]
[Tue Mar 31 15:23:47.418351 2026] [:error] [pid 6548:tid 6562] [client 172.71.144.72:13398] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env"] [unique_id "act2g7gIz9HgMl9YwE6BLQAAAUw"]
[Tue Mar 31 15:23:47.425581 2026] [:error] [pid 6548:tid 6557] [client 172.71.144.58:13034] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "act2g7gIz9HgMl9YwE6BLgAAAUc"]
[Tue Mar 31 15:23:47.935130 2026] [:error] [pid 6548:tid 6566] [client 172.71.144.58:13035] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development.local"] [unique_id "act2g7gIz9HgMl9YwE6BNQAAAVA"]
[Tue Mar 31 15:23:48.367012 2026] [:error] [pid 36982:tid 36985] [client 172.71.144.101:12036] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "act2hPlMmeoQKN0r_GPYBQAAAMA"]
[Tue Mar 31 15:23:48.420557 2026] [:error] [pid 36982:tid 36993] [client 172.71.144.72:13400] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "act2hPlMmeoQKN0r_GPYBgAAAMg"]
[Tue Mar 31 15:23:48.456104 2026] [:error] [pid 36982:tid 37006] [client 172.71.144.58:13040] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/core/.env"] [unique_id "act2hPlMmeoQKN0r_GPYCAAAANU"]
[Tue Mar 31 15:23:48.456677 2026] [:error] [pid 36982:tid 36990] [client 172.71.144.58:13044] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env"] [unique_id "act2hPlMmeoQKN0r_GPYCQAAAMU"]
[Tue Mar 31 15:23:48.477201 2026] [:error] [pid 36982:tid 36986] [client 172.71.144.101:12044] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/private/.env"] [unique_id "act2hPlMmeoQKN0r_GPYCgAAAME"]
[Tue Mar 31 15:23:49.394325 2026] [:error] [pid 36892:tid 36952] [client 172.71.144.72:13401] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env.local"] [unique_id "act2hUyj9S4G0ek3O4I-3QAAAIE"]
[Tue Mar 31 15:23:49.462020 2026] [:error] [pid 36892:tid 36954] [client 172.71.144.73:10188] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.json"] [unique_id "act2hUyj9S4G0ek3O4I-3gAAAIM"]
[Tue Mar 31 15:23:49.468423 2026] [:error] [pid 36892:tid 36963] [client 172.71.144.59:12250] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_backup"] [unique_id "act2hUyj9S4G0ek3O4I-3wAAAIw"]
[Tue Mar 31 15:23:49.475831 2026] [:error] [pid 41421:tid 41437] [client 172.71.144.58:13049] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.php"] [unique_id "act2hRSaDjY9kKFtUQAh_wAAAQ0"]
[Tue Mar 31 15:23:49.522365 2026] [:error] [pid 41421:tid 41438] [client 172.71.144.72:13408] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "act2hRSaDjY9kKFtUQAiAAAAAQ4"]
[Tue Mar 31 15:23:49.658832 2026] [:error] [pid 36982:tid 36993] [client 172.71.144.73:10187] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env2"] [unique_id "act2hflMmeoQKN0r_GPYFAAAAMg"]
[Tue Mar 31 15:23:50.013017 2026] [:error] [pid 6548:tid 6556] [client 172.71.144.100:13550] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env1"] [unique_id "act2hrgIz9HgMl9YwE6BPQAAAUY"]
[Tue Mar 31 15:23:50.491955 2026] [:error] [pid 36982:tid 37009] [client 172.71.144.72:13414] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "act2hvlMmeoQKN0r_GPYGQAAANg"]
[Tue Mar 31 15:23:50.524424 2026] [:error] [pid 36891:tid 36942] [client 172.71.144.59:12255] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.orig"] [unique_id "act2hpJhiMaJUqoqfl6PLAAAAFI"]
[Tue Mar 31 15:23:50.528181 2026] [:error] [pid 36982:tid 36994] [client 172.71.144.58:13053] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.envrc"] [unique_id "act2hvlMmeoQKN0r_GPYGgAAAMk"]
[Tue Mar 31 15:23:50.538912 2026] [:error] [pid 36892:tid 36969] [client 172.71.144.100:13553] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production.bak"] [unique_id "act2hkyj9S4G0ek3O4I-5AAAAJI"]
[Tue Mar 31 15:23:50.684759 2026] [:error] [pid 41421:tid 41433] [client 172.71.144.58:13059] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "act2hhSaDjY9kKFtUQAiAgAAAQk"]
[Tue Mar 31 15:23:51.054017 2026] [:error] [pid 41421:tid 41440] [client 172.71.144.73:10189] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev.local"] [unique_id "act2hxSaDjY9kKFtUQAiBQAAARA"]
[Tue Mar 31 15:23:51.529906 2026] [:error] [pid 36890:tid 36895] [client 172.71.144.72:13420] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.container"] [unique_id "act2h58FASPd_uH8z7fVVQAAAAA"]
[Tue Mar 31 15:23:51.530782 2026] [:error] [pid 36890:tid 36896] [client 172.71.144.58:13064] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.docker"] [unique_id "act2h58FASPd_uH8z7fVVgAAAAE"]
[Tue Mar 31 15:23:51.566991 2026] [:error] [pid 36890:tid 36904] [client 172.71.144.73:10195] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/docker/.env"] [unique_id "act2h58FASPd_uH8z7fVVwAAAAk"]
[Tue Mar 31 15:23:51.756496 2026] [:error] [pid 36890:tid 36897] [client 172.71.144.58:13070] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/docker/.env.local"] [unique_id "act2h58FASPd_uH8z7fVWAAAAAI"]
[Tue Mar 31 15:23:51.831674 2026] [:error] [pid 36982:tid 36991] [client 172.71.144.73:10196] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/www/.env"] [unique_id "act2h_lMmeoQKN0r_GPYJwAAAMY"]
[Tue Mar 31 15:23:52.083989 2026] [:error] [pid 36890:tid 36900] [client 172.71.144.59:12261] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/server/.env"] [unique_id "act2iJ8FASPd_uH8z7fVWQAAAAU"]
[Tue Mar 31 15:23:52.529431 2026] [:error] [pid 36890:tid 36902] [client 172.71.144.58:13072] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/web/.env"] [unique_id "act2iJ8FASPd_uH8z7fVXgAAAAc"]
[Tue Mar 31 15:23:52.553608 2026] [:error] [pid 41421:tid 41442] [client 172.71.144.101:12045] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/site/.env"] [unique_id "act2iBSaDjY9kKFtUQAiDAAAARI"]
[Tue Mar 31 15:23:52.570534 2026] [:error] [pid 41421:tid 41445] [client 172.71.144.73:10200] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/srv/.env"] [unique_id "act2iBSaDjY9kKFtUQAiDQAAARU"]
[Tue Mar 31 15:23:52.779380 2026] [:error] [pid 6548:tid 6552] [client 172.71.144.73:10208] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/var/www/.env"] [unique_id "act2iLgIz9HgMl9YwE6BRgAAAUI"]
[Tue Mar 31 15:23:52.823187 2026] [:error] [pid 36892:tid 36962] [client 172.71.144.73:10212] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/var/www/html/.env"] [unique_id "act2iEyj9S4G0ek3O4I-6wAAAIs"]
[Tue Mar 31 15:23:53.112161 2026] [:error] [pid 36890:tid 36915] [client 172.71.144.72:13425] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/home/.env"] [unique_id "act2iZ8FASPd_uH8z7fVYgAAABQ"]
[Tue Mar 31 15:23:53.547460 2026] [:error] [pid 36890:tid 36904] [client 172.71.144.73:10220] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_config"] [unique_id "act2iZ8FASPd_uH8z7fVZAAAAAk"]
[Tue Mar 31 15:23:53.565579 2026] [:error] [pid 36890:tid 36896] [client 172.71.144.59:12264] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/root/.env"] [unique_id "act2iZ8FASPd_uH8z7fVZQAAAAE"]
[Tue Mar 31 15:23:53.613628 2026] [:error] [pid 36890:tid 36897] [client 172.71.144.72:13429] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_secret"] [unique_id "act2iZ8FASPd_uH8z7fVZwAAAAI"]
[Tue Mar 31 15:23:53.640424 2026] [:error] [pid 36982:tid 37001] [client 172.71.144.101:13458] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "act2iflMmeoQKN0r_GPYLQAAANA"]
[Tue Mar 31 15:23:53.771383 2026] [:error] [pid 36982:tid 36995] [client 172.71.144.100:10068] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_settings"] [unique_id "act2iflMmeoQKN0r_GPYLwAAAMo"]
[Tue Mar 31 15:23:53.829512 2026] [:error] [pid 41421:tid 41436] [client 172.71.144.73:10224] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local.backup"] [unique_id "act2iRSaDjY9kKFtUQAiDgAAAQw"]
[Tue Mar 31 15:23:54.059292 2026] [:error] [pid 36982:tid 36999] [client 172.71.144.59:11745] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "act2ivlMmeoQKN0r_GPYMAAAAM4"]
[Tue Mar 31 15:23:54.086930 2026] [:error] [pid 41421:tid 41437] [client 172.71.144.59:14200] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/index"] [unique_id "act2ihSaDjY9kKFtUQAiDwAAAQ0"]
[Tue Mar 31 15:23:54.128482 2026] [:error] [pid 6548:tid 6553] [client 172.71.144.72:10927] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/logs/HEAD"] [unique_id "act2irgIz9HgMl9YwE6BSQAAAUM"]
[Tue Mar 31 15:23:54.155412 2026] [:error] [pid 36890:tid 36907] [client 172.71.144.100:10267] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/refs/heads/master"] [unique_id "act2ip8FASPd_uH8z7fVaQAAAAw"]
[Tue Mar 31 15:23:54.281910 2026] [:error] [pid 6548:tid 6570] [client 172.71.144.59:14201] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/refs/heads/main"] [unique_id "act2irgIz9HgMl9YwE6BSgAAAVQ"]
[Tue Mar 31 15:23:54.347048 2026] [:error] [pid 6548:tid 6564] [client 172.71.144.73:12092] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "act2irgIz9HgMl9YwE6BSwAAAU4"]
[Tue Mar 31 15:23:54.576200 2026] [:error] [pid 41421:tid 41433] [client 172.71.144.58:10085] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "act2ihSaDjY9kKFtUQAiEAAAAQk"]
[Tue Mar 31 15:23:54.609781 2026] [:error] [pid 36892:tid 36966] [client 172.71.144.100:10274] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "act2ikyj9S4G0ek3O4I-7wAAAI8"]
[Tue Mar 31 15:23:54.642079 2026] [:error] [pid 41421:tid 41447] [client 172.71.144.59:14209] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "act2ihSaDjY9kKFtUQAiEQAAARc"]
[Tue Mar 31 15:23:54.801369 2026] [:error] [pid 41421:tid 41441] [client 172.71.144.101:13459] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "act2ihSaDjY9kKFtUQAiEgAAARE"]
[Tue Mar 31 15:23:54.870799 2026] [:error] [pid 36892:tid 36964] [client 172.71.144.73:12097] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "act2ikyj9S4G0ek3O4I-8AAAAI0"]
[Tue Mar 31 15:23:55.071305 2026] [:error] [pid 36982:tid 36996] [client 172.71.144.100:10278] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "act2i_lMmeoQKN0r_GPYNAAAAMs"]
[Tue Mar 31 15:23:55.117715 2026] [:error] [pid 36982:tid 37009] [client 172.71.144.59:14210] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "act2i_lMmeoQKN0r_GPYNQAAANg"]
[Tue Mar 31 15:23:55.158580 2026] [:error] [pid 41421:tid 41426] [client 172.71.144.58:10091] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "act2ixSaDjY9kKFtUQAiFQAAAQI"]
[Tue Mar 31 15:23:55.308657 2026] [:error] [pid 36982:tid 36997] [client 172.71.144.101:13467] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "act2i_lMmeoQKN0r_GPYNgAAAMw"]
[Tue Mar 31 15:23:55.381168 2026] [:error] [pid 36982:tid 36987] [client 172.71.144.58:10096] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.tmp"] [unique_id "act2i_lMmeoQKN0r_GPYOAAAAMI"]
[Tue Mar 31 15:23:55.572232 2026] [:error] [pid 41421:tid 41442] [client 172.71.144.59:14211] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "act2ixSaDjY9kKFtUQAiFgAAARI"]
[Tue Mar 31 15:23:55.619549 2026] [:error] [pid 36982:tid 36985] [client 172.71.144.58:10098] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production.local"] [unique_id "act2i_lMmeoQKN0r_GPYOwAAAMA"]
[Tue Mar 31 15:23:55.667935 2026] [:error] [pid 36890:tid 36905] [client 172.71.144.59:14214] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development.local"] [unique_id "act2i58FASPd_uH8z7fVbAAAAAo"]
[Tue Mar 31 15:23:55.823861 2026] [:error] [pid 36982:tid 37000] [client 172.71.144.100:10285] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env"] [unique_id "act2i_lMmeoQKN0r_GPYPgAAAM8"]
[Tue Mar 31 15:23:55.890201 2026] [:error] [pid 36890:tid 36909] [client 172.71.144.58:10099] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "act2i58FASPd_uH8z7fVbQAAAA4"]
[Tue Mar 31 15:23:56.073776 2026] [:error] [pid 36890:tid 36914] [client 172.71.144.72:10930] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "act2jJ8FASPd_uH8z7fVbwAAABM"]
[Tue Mar 31 15:23:56.137714 2026] [:error] [pid 36890:tid 36904] [client 172.71.144.73:12104] [client 172.71.144.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "act2jJ8FASPd_uH8z7fVcQAAAAk"]
[Tue Mar 31 15:23:56.187275 2026] [:error] [pid 36890:tid 36901] [client 172.71.144.100:10293] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "act2jJ8FASPd_uH8z7fVcgAAAAY"]
[Tue Mar 31 15:23:56.241575 2026] [:error] [pid 41421:tid 41430] [client 172.71.144.101:13472] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "act2jBSaDjY9kKFtUQAiFwAAAQY"]
[Tue Mar 31 15:23:56.344310 2026] [:error] [pid 36891:tid 36939] [client 172.71.144.58:10105] [client 172.71.144.58] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/core/.env"] [unique_id "act2jJJhiMaJUqoqfl6PMgAAAE8"]
[Tue Mar 31 15:23:56.417449 2026] [:error] [pid 36892:tid 36956] [client 172.71.144.101:13473] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env"] [unique_id "act2jEyj9S4G0ek3O4I-8QAAAIU"]
[Tue Mar 31 15:23:56.570380 2026] [:error] [pid 36891:tid 36930] [client 172.71.144.59:14218] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/private/.env"] [unique_id "act2jJJhiMaJUqoqfl6PMwAAAEY"]
[Tue Mar 31 15:23:56.769005 2026] [:error] [pid 36982:tid 36985] [client 172.71.144.100:10295] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.php"] [unique_id "act2jPlMmeoQKN0r_GPYQgAAAMA"]
[Tue Mar 31 15:23:56.871048 2026] [:error] [pid 36982:tid 36996] [client 172.71.144.59:14223] [client 172.71.144.59] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.json"] [unique_id "act2jPlMmeoQKN0r_GPYQwAAAMs"]
[Tue Mar 31 15:23:56.924568 2026] [:error] [pid 36982:tid 37009] [client 172.71.144.101:13474] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_backup"] [unique_id "act2jPlMmeoQKN0r_GPYRAAAANg"]
[Tue Mar 31 15:23:57.085652 2026] [:error] [pid 41421:tid 41433] [client 172.71.144.100:10300] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "act2jRSaDjY9kKFtUQAiGQAAAQk"]
[Tue Mar 31 15:23:57.297179 2026] [:error] [pid 36982:tid 36991] [client 172.71.144.100:10307] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env1"] [unique_id "act2jflMmeoQKN0r_GPYRwAAAMY"]
[Tue Mar 31 15:23:57.431680 2026] [:error] [pid 36982:tid 36986] [client 172.71.144.100:10312] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "act2jflMmeoQKN0r_GPYSAAAAME"]
[Tue Mar 31 15:23:57.599686 2026] [:error] [pid 41421:tid 41448] [client 172.71.144.72:11204] [client 172.71.144.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.envrc"] [unique_id "act2jRSaDjY9kKFtUQAiGwAAARg"]
[Tue Mar 31 15:23:57.951853 2026] [:error] [pid 6548:tid 6562] [client 172.71.144.101:13480] [client 172.71.144.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production.bak"] [unique_id "act2jbgIz9HgMl9YwE6BUgAAAUw"]
[Tue Mar 31 15:24:17.643177 2026] [:error] [pid 36891:tid 36937] [client 172.69.33.6:13214] [client 172.69.33.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/docker/.env"] [unique_id "act2oZJhiMaJUqoqfl6PQQAAAE0"]
[Tue Mar 31 15:24:18.121870 2026] [:error] [pid 36982:tid 36987] [client 172.69.33.7:12725] [client 172.69.33.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/docker/.env.local"] [unique_id "act2ovlMmeoQKN0r_GPYdwAAAMI"]
[Tue Mar 31 15:24:18.638290 2026] [:error] [pid 36982:tid 37003] [client 172.69.33.35:11030] [client 172.69.33.35] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/server/.env"] [unique_id "act2ovlMmeoQKN0r_GPYewAAANI"]
[Tue Mar 31 15:24:18.644943 2026] [:error] [pid 36982:tid 37007] [client 172.69.33.16:9278] [client 172.69.33.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/srv/.env"] [unique_id "act2ovlMmeoQKN0r_GPYfAAAANY"]
[Tue Mar 31 15:24:19.169080 2026] [:error] [pid 36982:tid 36997] [client 172.69.33.31:13302] [client 172.69.33.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/site/.env"] [unique_id "act2o_lMmeoQKN0r_GPYfwAAAMw"]
[Tue Mar 31 15:24:19.178578 2026] [:error] [pid 36982:tid 37005] [client 172.71.144.100:14253] [client 172.71.144.100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/web/.env"] [unique_id "act2o_lMmeoQKN0r_GPYgAAAANQ"]
[Tue Mar 31 15:24:36.692416 2026] [:error] [pid 6548:tid 6571] [client 172.69.33.55:12188] [client 172.69.33.55] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/home/.env"] [unique_id "act2tLgIz9HgMl9YwE6BoQAAAVU"]
[Tue Mar 31 15:24:37.152800 2026] [:error] [pid 41421:tid 41448] [client 172.69.33.21:13453] [client 172.69.33.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/var/www/html/.env"] [unique_id "act2tRSaDjY9kKFtUQAiQgAAARg"]
[Tue Mar 31 15:24:37.635001 2026] [:error] [pid 41421:tid 41437] [client 172.69.33.65:11352] [client 172.69.33.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_config"] [unique_id "act2tRSaDjY9kKFtUQAiRAAAAQ0"]
[Tue Mar 31 15:24:38.159859 2026] [:error] [pid 41421:tid 41432] [client 172.69.33.40:10913] [client 172.69.33.40] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_secret"] [unique_id "act2thSaDjY9kKFtUQAiRwAAAQg"]
[Tue Mar 31 15:24:38.225771 2026] [:error] [pid 41421:tid 41441] [client 172.69.33.30:11892] [client 172.69.33.30] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_settings"] [unique_id "act2thSaDjY9kKFtUQAiSAAAARE"]
[Tue Mar 31 15:24:38.226826 2026] [:error] [pid 6548:tid 6570] [client 172.69.34.175:11700] [client 172.69.34.175] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local.backup"] [unique_id "act2trgIz9HgMl9YwE6BpQAAAVQ"]
[Tue Mar 31 15:24:39.249676 2026] [:error] [pid 36982:tid 37005] [client 172.69.33.20:9318] [client 172.69.33.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/www/.env"] [unique_id "act2t_lMmeoQKN0r_GPYogAAANQ"]
[Tue Mar 31 17:27:39.889484 2026] [:error] [pid 36982:tid 37000] [client 158.158.112.113:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Tue Mar 31 17:27:40.142838 2026] [:error] [pid 36982:tid 36998] [client 158.158.112.113:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/fetch.php
[Tue Mar 31 17:27:40.384986 2026] [:error] [pid 36982:tid 37005] [client 158.158.112.113:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/20025Tn.php
[Tue Mar 31 17:27:40.627040 2026] [:error] [pid 36982:tid 37003] [client 158.158.112.113:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cer.php
[Tue Mar 31 17:27:40.869016 2026] [:error] [pid 36982:tid 37000] [client 158.158.112.113:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/welcom.php
[Tue Mar 31 17:27:41.120744 2026] [:error] [pid 36982:tid 36998] [client 158.158.112.113:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Tue Mar 31 17:27:41.373123 2026] [:error] [pid 36982:tid 37004] [client 158.158.112.113:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/.mopj.php
[Tue Mar 31 17:27:41.666967 2026] [:error] [pid 36982:tid 37003] [client 158.158.112.113:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/xozx.php
[Tue Mar 31 17:27:41.909134 2026] [:error] [pid 36982:tid 37009] [client 158.158.112.113:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/1111.php
[Tue Mar 31 17:27:42.169025 2026] [:error] [pid 36982:tid 36988] [client 158.158.112.113:63649] File does not exist: /usr/local/apache/htdocs/suspended-page/xendppio.php
[Tue Mar 31 17:27:42.420171 2026] [:error] [pid 36982:tid 37005] [client 158.158.112.113:63649] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ycadmin.php"] [unique_id "acuTjvlMmeoQKN0r_GNCyAAAANQ"]
[Tue Mar 31 17:27:43.218682 2026] [:error] [pid 6548:tid 6573] [client 158.158.112.113:61122] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ycadmin.php"] [unique_id "acuTj7gIz9HgMl9YwE7QaAAAAVc"]
[Tue Mar 31 17:27:43.898185 2026] [:error] [pid 41421:tid 41424] [client 158.158.112.113:63068] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ycadmin.php"] [unique_id "acuTjxSaDjY9kKFtUQBXwwAAAQA"]
[Tue Mar 31 17:27:44.658783 2026] [:error] [pid 36982:tid 37008] [client 158.158.112.113:63639] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ycadmin.php"] [unique_id "acuTkPlMmeoQKN0r_GNC2wAAANc"]
[Tue Mar 31 17:27:45.433401 2026] [:error] [pid 36982:tid 36988] [client 158.158.112.113:61702] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "acuTkflMmeoQKN0r_GNC4AAAAMM"]
[Tue Mar 31 17:27:46.560134 2026] [:error] [pid 6548:tid 6573] [client 158.158.112.113:64260] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "acuTkrgIz9HgMl9YwE7QbgAAAVc"]
[Tue Mar 31 17:27:47.115544 2026] [:error] [pid 36982:tid 36994] [client 158.158.112.113:64906] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "acuTk_lMmeoQKN0r_GNC6AAAAMk"]
[Tue Mar 31 17:27:48.058010 2026] [:error] [pid 6548:tid 6550] [client 158.158.112.113:64270] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "acuTlLgIz9HgMl9YwE7QcgAAAUA"]
[Tue Mar 31 17:27:49.116221 2026] [:error] [pid 6548:tid 6553] [client 158.158.112.113:62344] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lti.php"] [unique_id "acuTlbgIz9HgMl9YwE7QeAAAAUM"]
[Tue Mar 31 17:27:49.845416 2026] [:error] [pid 36982:tid 36998] [client 158.158.112.113:62446] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lti.php"] [unique_id "acuTlflMmeoQKN0r_GNC9wAAAM0"]
[Tue Mar 31 17:27:50.636484 2026] [:error] [pid 36982:tid 37001] [client 158.158.112.113:62343] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lti.php"] [unique_id "acuTlvlMmeoQKN0r_GNC_QAAANA"]
[Tue Mar 31 17:27:51.340332 2026] [:error] [pid 36892:tid 36962] [client 158.158.112.113:64290] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lti.php"] [unique_id "acuTl0yj9S4G0ek3O4Ji_gAAAIs"]
[Tue Mar 31 17:27:52.257265 2026] [:error] [pid 36891:tid 36929] [client 158.158.112.113:62440] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "acuTmJJhiMaJUqoqfl6tMwAAAEU"]
[Tue Mar 31 17:27:52.821862 2026] [:error] [pid 41421:tid 41429] [client 158.158.112.113:61786] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "acuTmBSaDjY9kKFtUQBXzQAAAQU"]
[Tue Mar 31 17:27:53.548969 2026] [:error] [pid 36982:tid 37001] [client 158.158.112.113:64320] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "acuTmflMmeoQKN0r_GNDAgAAANA"]
[Tue Mar 31 17:27:54.354080 2026] [:error] [pid 36982:tid 36997] [client 158.158.112.113:64295] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "acuTmvlMmeoQKN0r_GNDDAAAAMw"]
[Tue Mar 31 17:27:55.115937 2026] [:error] [pid 36982:tid 36993] [client 158.158.112.113:64258] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "acuTm_lMmeoQKN0r_GNDEgAAAMg"]
[Tue Mar 31 17:27:55.711669 2026] [:error] [pid 36982:tid 37004] [client 158.158.112.113:61790] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "acuTm_lMmeoQKN0r_GNDGAAAANM"]
[Tue Mar 31 17:27:56.457736 2026] [:error] [pid 36890:tid 36910] [client 158.158.112.113:62986] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "acuTnJ8FASPd_uH8z7cBswAAAA8"]
[Tue Mar 31 17:27:57.129863 2026] [:error] [pid 41421:tid 41432] [client 158.158.112.113:61140] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "acuTnRSaDjY9kKFtUQBX2AAAAQg"]
[Tue Mar 31 17:27:57.814958 2026] [:error] [pid 36982:tid 36993] [client 158.158.112.113:64374] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cnusw.php"] [unique_id "acuTnflMmeoQKN0r_GNDKgAAAMg"]
[Tue Mar 31 17:27:58.397171 2026] [:error] [pid 36892:tid 36953] [client 158.158.112.113:62365] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cnusw.php"] [unique_id "acuTnkyj9S4G0ek3O4JjBAAAAII"]
[Tue Mar 31 17:27:59.321857 2026] [:error] [pid 36982:tid 36996] [client 158.158.112.113:62457] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cnusw.php"] [unique_id "acuTn_lMmeoQKN0r_GNDNgAAAMs"]
[Tue Mar 31 17:28:00.304741 2026] [:error] [pid 36982:tid 36992] [client 158.158.112.113:63726] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cnusw.php"] [unique_id "acuToPlMmeoQKN0r_GNDOwAAAMc"]
[Tue Mar 31 17:28:01.291334 2026] [:error] [pid 41421:tid 41433] [client 158.158.112.113:64934] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acuToRSaDjY9kKFtUQBX5AAAAQk"]
[Tue Mar 31 17:28:01.912296 2026] [:error] [pid 41421:tid 41427] [client 158.158.112.113:60441] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acuToRSaDjY9kKFtUQBX5wAAAQM"]
[Tue Mar 31 17:28:03.035427 2026] [:error] [pid 36982:tid 37004] [client 158.158.112.113:63743] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acuTo_lMmeoQKN0r_GNDSQAAANM"]
[Tue Mar 31 17:28:03.839927 2026] [:error] [pid 36982:tid 37006] [client 158.158.112.113:64326] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes/twentytwentytwo/index.php"] [unique_id "acuTo_lMmeoQKN0r_GNDUAAAANU"]
[Tue Mar 31 17:28:04.644389 2026] [:error] [pid 36982:tid 36996] [client 158.158.112.113:61760] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acuTpPlMmeoQKN0r_GNDWgAAAMs"]
[Tue Mar 31 17:28:05.437601 2026] [:error] [pid 36982:tid 37005] [client 158.158.112.113:61744] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acuTpflMmeoQKN0r_GNDYAAAANQ"]
[Tue Mar 31 17:28:06.273478 2026] [:error] [pid 36982:tid 36995] [client 158.158.112.113:61721] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acuTpvlMmeoQKN0r_GNDbAAAAMo"]
[Tue Mar 31 17:28:07.092854 2026] [:error] [pid 36982:tid 36986] [client 158.158.112.113:62357] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "acuTp_lMmeoQKN0r_GNDcQAAAME"]
[Tue Mar 31 17:28:07.721697 2026] [:error] [pid 6548:tid 6565] [client 158.158.112.113:63628] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acuTp7gIz9HgMl9YwE7QjQAAAU8"]
[Tue Mar 31 17:28:08.539080 2026] [:error] [pid 36892:tid 36972] [client 158.158.112.113:65009] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acuTqEyj9S4G0ek3O4JjDQAAAJU"]
[Tue Mar 31 17:28:09.343244 2026] [:error] [pid 36890:tid 36906] [client 158.158.112.113:61135] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acuTqZ8FASPd_uH8z7cBwwAAAAs"]
[Tue Mar 31 17:28:10.465658 2026] [:error] [pid 36892:tid 36968] [client 158.158.112.113:64997] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "acuTqkyj9S4G0ek3O4JjEgAAAJE"]
[Tue Mar 31 17:28:11.353800 2026] [:error] [pid 36890:tid 36903] [client 158.158.112.113:64358] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acuTq58FASPd_uH8z7cBywAAAAg"]
[Tue Mar 31 17:28:12.041976 2026] [:error] [pid 36892:tid 36960] [client 158.158.112.113:62400] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acuTrEyj9S4G0ek3O4JjFwAAAIk"]
[Tue Mar 31 17:28:12.670548 2026] [:error] [pid 41421:tid 41437] [client 158.158.112.113:61711] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acuTrBSaDjY9kKFtUQBX9QAAAQ0"]
[Tue Mar 31 17:28:13.472081 2026] [:error] [pid 41421:tid 41438] [client 158.158.112.113:62338] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-conflg.php"] [unique_id "acuTrRSaDjY9kKFtUQBX-AAAAQ4"]
[Tue Mar 31 17:28:14.223998 2026] [:error] [pid 36891:tid 36948] [client 158.158.112.113:61747] [client 158.158.112.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "acuTrpJhiMaJUqoqfl6tQQAAAFg"]
[Tue Mar 31 17:28:15.008736 2026] [:error] [pid 36891:tid 36930] [client 158.158.112.113:61124] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "acuTr5JhiMaJUqoqfl6tRAAAAEY"]
[Tue Mar 31 17:28:15.642526 2026] [:error] [pid 41421:tid 41445] [client 158.158.112.113:64983] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "acuTrxSaDjY9kKFtUQBX_gAAARU"]
[Tue Mar 31 17:28:16.570458 2026] [:error] [pid 36891:tid 36945] [client 158.158.112.113:64926] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "acuTsJJhiMaJUqoqfl6tRwAAAFU"]
[Tue Mar 31 17:28:17.287793 2026] [:error] [pid 41421:tid 41425] [client 158.158.112.113:63685] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "acuTsRSaDjY9kKFtUQBYAAAAAQE"]
[Tue Mar 31 17:28:17.845494 2026] [:error] [pid 36982:tid 36989] [client 158.158.112.113:61778] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "acuTsflMmeoQKN0r_GNDhgAAAMQ"]
[Tue Mar 31 17:28:18.443664 2026] [:error] [pid 36982:tid 36986] [client 158.158.112.113:64293] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "acuTsvlMmeoQKN0r_GNDigAAAME"]
[Tue Mar 31 17:28:19.055165 2026] [:error] [pid 6548:tid 6572] [client 158.158.112.113:62412] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "acuTs7gIz9HgMl9YwE7QrQAAAVY"]
[Tue Mar 31 17:28:19.767279 2026] [:error] [pid 36890:tid 36913] [client 158.158.112.113:64383] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "acuTs58FASPd_uH8z7cB2QAAABI"]
[Tue Mar 31 17:28:20.378769 2026] [:error] [pid 36982:tid 36993] [client 158.158.112.113:63624] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "acuTtPlMmeoQKN0r_GNDkwAAAMg"]
[Tue Mar 31 17:28:21.017311 2026] [:error] [pid 36982:tid 37004] [client 158.158.112.113:62380] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "acuTtflMmeoQKN0r_GNDlgAAANM"]
[Tue Mar 31 17:28:21.848112 2026] [:error] [pid 36892:tid 36973] [client 158.158.112.113:61142] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "acuTtUyj9S4G0ek3O4JjIgAAAJY"]
[Tue Mar 31 17:28:22.591072 2026] [:error] [pid 6548:tid 6565] [client 158.158.112.113:63657] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "acuTtrgIz9HgMl9YwE7QvgAAAU8"]
[Tue Mar 31 17:28:23.247788 2026] [:error] [pid 6548:tid 6564] [client 158.158.112.113:63070] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acuTt7gIz9HgMl9YwE7QwgAAAU4"]
[Tue Mar 31 17:28:23.936530 2026] [:error] [pid 6548:tid 6574] [client 158.158.112.113:63742] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acuTt7gIz9HgMl9YwE7QyAAAAVg"]
[Tue Mar 31 17:28:24.552711 2026] [:error] [pid 6548:tid 6570] [client 158.158.112.113:63005] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acuTuLgIz9HgMl9YwE7QywAAAVQ"]
[Tue Mar 31 17:28:25.366262 2026] [:error] [pid 36891:tid 36934] [client 158.158.112.113:63619] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "acuTuZJhiMaJUqoqfl6tUAAAAEo"]
[Tue Mar 31 17:28:26.035542 2026] [:error] [pid 36891:tid 36947] [client 158.158.112.113:60506] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file15.php"] [unique_id "acuTupJhiMaJUqoqfl6tUgAAAFc"]
[Tue Mar 31 17:28:26.701500 2026] [:error] [pid 36890:tid 36919] [client 158.158.112.113:62420] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file15.php"] [unique_id "acuTup8FASPd_uH8z7cB4wAAABg"]
[Tue Mar 31 17:28:27.347950 2026] [:error] [pid 6548:tid 6570] [client 158.158.112.113:64985] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file15.php"] [unique_id "acuTu7gIz9HgMl9YwE7Q0QAAAVQ"]
[Tue Mar 31 17:28:28.129391 2026] [:error] [pid 41421:tid 41430] [client 158.158.112.113:63037] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file15.php"] [unique_id "acuTvBSaDjY9kKFtUQBYBgAAAQY"]
[Tue Mar 31 17:28:29.564160 2026] [:error] [pid 36890:tid 36895] [client 158.158.112.113:62369] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "acuTvZ8FASPd_uH8z7cB7AAAAAA"]
[Tue Mar 31 17:28:30.563201 2026] [:error] [pid 41421:tid 41426] [client 158.158.112.113:62449] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "acuTvhSaDjY9kKFtUQBYDAAAAQI"]
[Tue Mar 31 17:28:31.461804 2026] [:error] [pid 36892:tid 36953] [client 158.158.112.113:63081] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "acuTv0yj9S4G0ek3O4JjRwAAAII"]
[Tue Mar 31 17:28:32.327058 2026] [:error] [pid 36982:tid 37000] [client 158.158.112.113:63038] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "acuTwPlMmeoQKN0r_GNDtAAAAM8"]
[Tue Mar 31 17:28:32.889745 2026] [:error] [pid 36891:tid 36943] [client 158.158.112.113:61715] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "acuTwJJhiMaJUqoqfl6tWgAAAFM"]
[Tue Mar 31 17:28:33.746052 2026] [:error] [pid 36982:tid 37008] [client 158.158.112.113:58570] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "acuTwflMmeoQKN0r_GNDuwAAANc"]
[Tue Mar 31 17:28:34.693723 2026] [:error] [pid 36982:tid 36987] [client 158.158.112.113:63089] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "acuTwvlMmeoQKN0r_GNDzAAAAMI"]
[Tue Mar 31 17:28:35.723026 2026] [:error] [pid 36892:tid 36951] [client 158.158.112.113:63717] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "acuTw0yj9S4G0ek3O4JjTgAAAIA"]
[Tue Mar 31 17:28:36.478821 2026] [:error] [pid 6548:tid 6563] [client 158.158.112.113:63642] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "acuTxLgIz9HgMl9YwE7Q8QAAAU0"]
[Tue Mar 31 17:28:37.144523 2026] [:error] [pid 41421:tid 41438] [client 158.158.112.113:62447] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "acuTxRSaDjY9kKFtUQBYHgAAAQ4"]
[Tue Mar 31 17:28:38.210494 2026] [:error] [pid 36890:tid 36899] [client 158.158.112.113:64307] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "acuTxp8FASPd_uH8z7cB9wAAAAQ"]
[Tue Mar 31 17:28:39.188408 2026] [:error] [pid 36892:tid 36961] [client 158.158.112.113:63723] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "acuTx0yj9S4G0ek3O4JjYgAAAIo"]
[Tue Mar 31 17:28:39.856298 2026] [:error] [pid 36982:tid 37009] [client 158.158.112.113:62396] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "acuTx_lMmeoQKN0r_GNEQQAAANg"]
[Tue Mar 31 17:28:40.883560 2026] [:error] [pid 36982:tid 36985] [client 158.158.112.113:63677] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "acuTyPlMmeoQKN0r_GNEVgAAAMA"]
[Tue Mar 31 17:28:41.641479 2026] [:error] [pid 41421:tid 41435] [client 158.158.112.113:61761] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "acuTyRSaDjY9kKFtUQBYMAAAAQs"]
[Tue Mar 31 17:28:42.465054 2026] [:error] [pid 6548:tid 6565] [client 158.158.112.113:64920] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Mar 31 17:28:42.706602 2026] [:error] [pid 6548:tid 6560] [client 158.158.112.113:64920] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Mar 31 17:28:42.949000 2026] [:error] [pid 6548:tid 6574] [client 158.158.112.113:64920] File does not exist: /usr/local/apache/htdocs/suspended-page/hly.php
[Tue Mar 31 17:28:43.558726 2026] [:error] [pid 6548:tid 6568] [client 158.158.112.113:64920] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php
[Tue Mar 31 17:28:43.848156 2026] [:error] [pid 6548:tid 6570] [client 158.158.112.113:64920] File does not exist: /usr/local/apache/htdocs/suspended-page/logain5.php
[Tue Mar 31 17:28:44.119841 2026] [:error] [pid 6548:tid 6552] [client 158.158.112.113:64920] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Tue Mar 31 17:28:44.370423 2026] [:error] [pid 6548:tid 6553] [client 158.158.112.113:64920] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Mar 31 17:28:45.187632 2026] [:error] [pid 6548:tid 6555] [client 158.158.112.113:64920] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Mar 31 17:28:45.437056 2026] [:error] [pid 6548:tid 6557] [client 158.158.112.113:64920] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "acuTzbgIz9HgMl9YwE7RIgAAAUc"]
[Tue Mar 31 17:28:46.087823 2026] [:error] [pid 6548:tid 6558] [client 158.158.112.113:62346] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "acuTzrgIz9HgMl9YwE7RIwAAAUg"]
[Tue Mar 31 17:28:46.641763 2026] [:error] [pid 36892:tid 36951] [client 158.158.112.113:62372] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "acuTzkyj9S4G0ek3O4JjbgAAAIA"]
[Tue Mar 31 17:28:47.283772 2026] [:error] [pid 36982:tid 36992] [client 158.158.112.113:64291] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "acuTz_lMmeoQKN0r_GNEhgAAAMc"]
[Tue Mar 31 17:28:47.886452 2026] [:error] [pid 36982:tid 37003] [client 158.158.112.113:61742] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acuTz_lMmeoQKN0r_GNEhwAAANI"]
[Tue Mar 31 17:28:48.769419 2026] [:error] [pid 36982:tid 36993] [client 158.158.112.113:64281] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acuT0PlMmeoQKN0r_GNEjAAAAMg"]
[Tue Mar 31 17:28:49.599406 2026] [:error] [pid 36982:tid 37009] [client 158.158.112.113:63648] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acuT0flMmeoQKN0r_GNEkQAAANg"]
[Tue Mar 31 17:28:50.218906 2026] [:error] [pid 36982:tid 36993] [client 158.158.112.113:61139] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acuT0vlMmeoQKN0r_GNElgAAAMg"]
[Tue Mar 31 17:28:51.011662 2026] [:error] [pid 6548:tid 6550] [client 158.158.112.113:64362] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acuT07gIz9HgMl9YwE7RLAAAAUA"]
[Tue Mar 31 17:28:51.831893 2026] [:error] [pid 36982:tid 36994] [client 158.158.112.113:64355] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acuT0_lMmeoQKN0r_GNEoQAAAMk"]
[Tue Mar 31 17:28:52.433440 2026] [:error] [pid 36982:tid 37009] [client 158.158.112.113:63690] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acuT1PlMmeoQKN0r_GNEpAAAANg"]
[Tue Mar 31 17:28:52.999122 2026] [:error] [pid 41421:tid 41426] [client 158.158.112.113:64969] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "acuT1BSaDjY9kKFtUQBYRwAAAQI"]
[Tue Mar 31 17:28:53.596259 2026] [:error] [pid 36890:tid 36907] [client 158.158.112.113:63103] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "acuT1Z8FASPd_uH8z7cCBAAAAAw"]
[Tue Mar 31 17:28:54.480845 2026] [:error] [pid 36892:tid 36960] [client 158.158.112.113:63722] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "acuT1kyj9S4G0ek3O4JjegAAAIk"]
[Tue Mar 31 17:28:55.263870 2026] [:error] [pid 36891:tid 36940] [client 158.158.112.113:62990] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "acuT15JhiMaJUqoqfl6tbAAAAFA"]
[Tue Mar 31 17:28:55.842475 2026] [:error] [pid 36891:tid 36930] [client 158.158.112.113:63080] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "acuT15JhiMaJUqoqfl6tbQAAAEY"]
[Tue Mar 31 17:28:56.560584 2026] [:error] [pid 36982:tid 37002] [client 158.158.112.113:63634] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "acuT2PlMmeoQKN0r_GNEvgAAANE"]
[Tue Mar 31 17:28:57.101864 2026] [:error] [pid 6548:tid 6564] [client 158.158.112.113:62345] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "acuT2bgIz9HgMl9YwE7RPAAAAU4"]
[Tue Mar 31 17:28:57.695063 2026] [:error] [pid 36982:tid 36991] [client 158.158.112.113:63689] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "acuT2flMmeoQKN0r_GNExgAAAMY"]
[Tue Mar 31 17:28:58.321715 2026] [:error] [pid 36892:tid 36954] [client 158.158.112.113:64976] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/output.php"] [unique_id "acuT2kyj9S4G0ek3O4JjfgAAAIM"]
[Tue Mar 31 17:28:58.830991 2026] [:error] [pid 41421:tid 41441] [client 158.158.112.113:63045] [client 158.158.112.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "acuT2hSaDjY9kKFtUQBYTwAAARE"]
[Tue Mar 31 17:28:59.706161 2026] [:error] [pid 41421:tid 41426] [client 158.158.112.113:63624] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "acuT2xSaDjY9kKFtUQBYUwAAAQI"]
[Tue Mar 31 17:29:00.332734 2026] [:error] [pid 36982:tid 36991] [client 158.158.112.113:62356] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "acuT3PlMmeoQKN0r_GNE0AAAAMY"]
[Tue Mar 31 17:29:00.988424 2026] [:error] [pid 36982:tid 37009] [client 158.158.112.113:65011] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "acuT3PlMmeoQKN0r_GNE1gAAANg"]
[Tue Mar 31 17:29:01.571435 2026] [:error] [pid 36982:tid 37001] [client 158.158.112.113:63004] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "acuT3flMmeoQKN0r_GNE2gAAANA"]
[Tue Mar 31 17:29:02.252443 2026] [:error] [pid 36892:tid 36971] [client 158.158.112.113:63099] [client 158.158.112.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "acuT3kyj9S4G0ek3O4JjhAAAAJQ"]
[Tue Mar 31 17:29:02.842207 2026] [:error] [pid 36982:tid 37009] [client 158.158.112.113:64987] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acuT3vlMmeoQKN0r_GNE3wAAANg"]
[Tue Mar 31 17:29:03.420875 2026] [:error] [pid 41421:tid 41437] [client 158.158.112.113:64999] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acuT3xSaDjY9kKFtUQBYWgAAAQ0"]
[Tue Mar 31 17:29:04.338267 2026] [:error] [pid 6548:tid 6571] [client 158.158.112.113:63047] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "acuT4LgIz9HgMl9YwE7RSgAAAVU"]
[Tue Mar 31 17:29:05.437552 2026] [:error] [pid 36982:tid 37007] [client 158.158.112.113:63088] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "acuT4flMmeoQKN0r_GNE5AAAANY"]
[Tue Mar 31 17:29:06.334492 2026] [:error] [pid 36982:tid 37003] [client 158.158.112.113:63049] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "acuT4vlMmeoQKN0r_GNE6AAAANI"]
[Tue Mar 31 17:29:07.071904 2026] [:error] [pid 41421:tid 41434] [client 158.158.112.113:63710] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "acuT4xSaDjY9kKFtUQBYbQAAAQo"]
[Tue Mar 31 17:29:10.023407 2026] [:error] [pid 36890:tid 36896] [client 158.158.112.113:64263] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "acuT5p8FASPd_uH8z7cCFAAAAAE"]
[Tue Mar 31 17:29:14.380372 2026] [:error] [pid 36982:tid 36991] [client 158.158.112.113:61154] [client 158.158.112.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "acuT6vlMmeoQKN0r_GNE_QAAAMY"]
[Tue Mar 31 17:29:15.449669 2026] [:error] [pid 36982:tid 36992] [client 158.158.112.113:64972] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfile.php"] [unique_id "acuT6_lMmeoQKN0r_GNFCQAAAMc"]
[Tue Mar 31 17:29:16.726865 2026] [:error] [pid 36982:tid 37003] [client 158.158.112.113:61748] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfile.php"] [unique_id "acuT7PlMmeoQKN0r_GNFDgAAANI"]
[Tue Mar 31 17:29:17.576783 2026] [:error] [pid 41421:tid 41445] [client 158.158.112.113:64904] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfile.php"] [unique_id "acuT7RSaDjY9kKFtUQBYeQAAARU"]
[Tue Mar 31 17:29:18.229897 2026] [:error] [pid 36890:tid 36899] [client 158.158.112.113:62438] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfile.php"] [unique_id "acuT7p8FASPd_uH8z7cCGwAAAAQ"]
[Tue Mar 31 17:29:19.009802 2026] [:error] [pid 36982:tid 37000] [client 158.158.112.113:64916] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acuT7_lMmeoQKN0r_GNFGAAAAM8"]
[Tue Mar 31 17:29:19.849642 2026] [:error] [pid 36982:tid 36991] [client 158.158.112.113:62988] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acuT7_lMmeoQKN0r_GNFHwAAAMY"]
[Tue Mar 31 17:29:20.554962 2026] [:error] [pid 36890:tid 36917] [client 158.158.112.113:64903] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acuT8J8FASPd_uH8z7cCHQAAABY"]
[Tue Mar 31 17:29:21.256219 2026] [:error] [pid 36890:tid 36900] [client 158.158.112.113:64946] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-freya.php"] [unique_id "acuT8Z8FASPd_uH8z7cCHgAAAAU"]
[Tue Mar 31 17:29:21.878042 2026] [:error] [pid 6548:tid 6563] [client 158.158.112.113:61805] [client 158.158.112.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/Text/admin.php"] [unique_id "acuT8bgIz9HgMl9YwE7RawAAAU0"]
[Tue Mar 31 17:29:22.490118 2026] [:error] [pid 41421:tid 41424] [client 158.158.112.113:61813] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "acuT8hSaDjY9kKFtUQBYiAAAAQA"]
[Tue Mar 31 17:29:23.295707 2026] [:error] [pid 6548:tid 6567] [client 158.158.112.113:62462] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "acuT87gIz9HgMl9YwE7RbwAAAVE"]
[Tue Mar 31 17:29:23.938665 2026] [:error] [pid 6548:tid 6557] [client 158.158.112.113:61746] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "acuT87gIz9HgMl9YwE7RcgAAAUc"]
[Tue Mar 31 17:29:24.547337 2026] [:error] [pid 36890:tid 36909] [client 158.158.112.113:60471] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "acuT9J8FASPd_uH8z7cCIAAAAA4"]
[Tue Mar 31 17:29:25.393931 2026] [:error] [pid 41421:tid 41436] [client 158.158.112.113:64288] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "acuT9RSaDjY9kKFtUQBYjwAAAQw"]
[Tue Mar 31 17:29:26.431014 2026] [:error] [pid 36982:tid 37008] [client 158.158.112.113:64330] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "acuT9vlMmeoQKN0r_GNFMQAAANc"]
[Tue Mar 31 17:29:27.996402 2026] [:error] [pid 36982:tid 36992] [client 158.158.112.113:64963] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "acuT9_lMmeoQKN0r_GNFPAAAAMc"]
[Tue Mar 31 17:29:29.090970 2026] [:error] [pid 36982:tid 36996] [client 158.158.112.113:62395] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "acuT-flMmeoQKN0r_GNFPgAAAMs"]
[Tue Mar 31 17:29:29.863340 2026] [:error] [pid 36892:tid 36954] [client 158.158.112.113:61145] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acuT-Uyj9S4G0ek3O4JjqwAAAIM"]
[Tue Mar 31 17:29:31.125270 2026] [:error] [pid 41421:tid 41445] [client 158.158.112.113:63095] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acuT-xSaDjY9kKFtUQBYkQAAARU"]
[Tue Mar 31 17:29:31.820050 2026] [:error] [pid 36982:tid 36992] [client 158.158.112.113:61811] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acuT-_lMmeoQKN0r_GNFSQAAAMc"]
[Tue Mar 31 17:29:32.639472 2026] [:error] [pid 6548:tid 6566] [client 158.158.112.113:61823] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/X7x.php"] [unique_id "acuT_LgIz9HgMl9YwE7RgQAAAVA"]
[Tue Mar 31 17:29:33.358964 2026] [:error] [pid 41421:tid 41443] [client 158.158.112.113:63044] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "acuT_RSaDjY9kKFtUQBYkwAAARM"]
[Tue Mar 31 17:29:34.217071 2026] [:error] [pid 36891:tid 36937] [client 158.158.112.113:64978] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "acuT_pJhiMaJUqoqfl6tjQAAAE0"]
[Tue Mar 31 17:29:34.977393 2026] [:error] [pid 41421:tid 41428] [client 158.158.112.113:63082] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "acuT_hSaDjY9kKFtUQBYlgAAAQQ"]
[Tue Mar 31 17:29:35.671553 2026] [:error] [pid 6548:tid 6554] [client 158.158.112.113:61714] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "acuT_7gIz9HgMl9YwE7RhgAAAUQ"]
[Tue Mar 31 17:29:36.678420 2026] [:error] [pid 36891:tid 36927] [client 158.158.112.113:61749] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acuUAJJhiMaJUqoqfl6tjwAAAEM"]
[Tue Mar 31 17:29:37.308434 2026] [:error] [pid 36892:tid 36955] [client 158.158.112.113:61803] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acuUAUyj9S4G0ek3O4JjvQAAAIQ"]
[Tue Mar 31 17:29:38.093785 2026] [:error] [pid 36891:tid 36933] [client 158.158.112.113:64301] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acuUApJhiMaJUqoqfl6tkQAAAEk"]
[Tue Mar 31 17:29:38.626372 2026] [:error] [pid 36891:tid 36941] [client 158.158.112.113:63708] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d12.php"] [unique_id "acuUApJhiMaJUqoqfl6tkwAAAFE"]
[Tue Mar 31 17:29:39.432686 2026] [:error] [pid 6548:tid 6561] [client 158.158.112.113:64298] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "acuUA7gIz9HgMl9YwE7RjgAAAUs"]
[Tue Mar 31 17:29:40.031578 2026] [:error] [pid 41421:tid 41434] [client 158.158.112.113:61128] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "acuUBBSaDjY9kKFtUQBYpAAAAQo"]
[Tue Mar 31 17:29:40.702579 2026] [:error] [pid 41421:tid 41427] [client 158.158.112.113:64356] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "acuUBBSaDjY9kKFtUQBYpQAAAQM"]
[Tue Mar 31 17:29:41.268968 2026] [:error] [pid 6548:tid 6557] [client 158.158.112.113:61120] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "acuUBbgIz9HgMl9YwE7RlAAAAUc"]
[Tue Mar 31 17:29:41.847627 2026] [:error] [pid 6548:tid 6552] [client 158.158.112.113:61815] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "acuUBbgIz9HgMl9YwE7RlgAAAUI"]
[Tue Mar 31 17:29:42.645818 2026] [:error] [pid 6548:tid 6555] [client 158.158.112.113:64979] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "acuUBrgIz9HgMl9YwE7RmAAAAUU"]
[Tue Mar 31 17:29:43.257145 2026] [:error] [pid 6548:tid 6570] [client 158.158.112.113:63621] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "acuUB7gIz9HgMl9YwE7RmgAAAVQ"]
[Tue Mar 31 17:29:43.992290 2026] [:error] [pid 36892:tid 36958] [client 158.158.112.113:61800] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "acuUB0yj9S4G0ek3O4JjwgAAAIc"]
[Tue Mar 31 17:29:44.635135 2026] [:error] [pid 36892:tid 36954] [client 158.158.112.113:62425] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "acuUCEyj9S4G0ek3O4JjxAAAAIM"]
[Tue Mar 31 17:29:45.371491 2026] [:error] [pid 41421:tid 41440] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue Mar 31 17:29:45.622659 2026] [:error] [pid 41421:tid 41433] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/thoms.php
[Tue Mar 31 17:29:45.905461 2026] [:error] [pid 41421:tid 41438] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/O00.php
[Tue Mar 31 17:29:46.150204 2026] [:error] [pid 41421:tid 41439] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/class-.php
[Tue Mar 31 17:29:46.430518 2026] [:error] [pid 41421:tid 41436] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Tue Mar 31 17:29:46.676075 2026] [:error] [pid 41421:tid 41431] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/ee.php
[Tue Mar 31 17:29:46.921694 2026] [:error] [pid 41421:tid 41426] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Tue Mar 31 17:29:47.203875 2026] [:error] [pid 41421:tid 41448] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/i1.php
[Tue Mar 31 17:29:47.475837 2026] [:error] [pid 41421:tid 41444] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Tue Mar 31 17:29:47.717974 2026] [:error] [pid 41421:tid 41447] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/oo.php
[Tue Mar 31 17:29:47.959814 2026] [:error] [pid 41421:tid 41424] [client 158.158.112.113:63060] File does not exist: /usr/local/apache/htdocs/suspended-page/sk.php
[Tue Mar 31 17:29:48.219557 2026] [:error] [pid 41421:tid 41443] [client 158.158.112.113:63060] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "acuUDBSaDjY9kKFtUQBYugAAARM"]
[Tue Mar 31 17:29:48.801736 2026] [:error] [pid 6548:tid 6552] [client 158.158.112.113:61147] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "acuUDLgIz9HgMl9YwE7RpwAAAUI"]
[Tue Mar 31 17:29:49.488043 2026] [:error] [pid 36982:tid 36999] [client 158.158.112.113:61743] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "acuUDflMmeoQKN0r_GNFZgAAAM4"]
[Tue Mar 31 17:29:50.160650 2026] [:error] [pid 36892:tid 36965] [client 158.158.112.113:64932] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "acuUDkyj9S4G0ek3O4JjzwAAAI4"]
[Tue Mar 31 17:29:50.663323 2026] [:error] [pid 36890:tid 36913] [client 158.158.112.113:62371] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acuUDp8FASPd_uH8z7cCOAAAABI"]
[Tue Mar 31 17:29:51.282550 2026] [:error] [pid 41421:tid 41446] [client 158.158.112.113:63665] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acuUDxSaDjY9kKFtUQBYvAAAARY"]
[Tue Mar 31 17:29:52.001937 2026] [:error] [pid 36890:tid 36902] [client 158.158.112.113:64990] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acuUEJ8FASPd_uH8z7cCOgAAAAc"]
[Tue Mar 31 17:29:52.592958 2026] [:error] [pid 36982:tid 36985] [client 158.158.112.113:63097] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "acuUEPlMmeoQKN0r_GNFcAAAAMA"]
[Tue Mar 31 17:29:53.264729 2026] [:error] [pid 36982:tid 37005] [client 158.158.112.113:64915] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acuUEflMmeoQKN0r_GNFcwAAANQ"]
[Tue Mar 31 17:29:53.990359 2026] [:error] [pid 41421:tid 41431] [client 158.158.112.113:63699] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acuUERSaDjY9kKFtUQBYvgAAAQc"]
[Tue Mar 31 17:29:54.703605 2026] [:error] [pid 36890:tid 36919] [client 158.158.112.113:63026] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acuUEp8FASPd_uH8z7cCPwAAABg"]
[Tue Mar 31 17:29:55.493288 2026] [:error] [pid 6548:tid 6571] [client 158.158.112.113:63667] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "acuUE7gIz9HgMl9YwE7RswAAAVU"]
[Tue Mar 31 17:29:56.195494 2026] [:error] [pid 36982:tid 37009] [client 158.158.112.113:63010] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "acuUFPlMmeoQKN0r_GNFhAAAANg"]
[Tue Mar 31 17:29:56.855511 2026] [:error] [pid 6548:tid 6572] [client 158.158.112.113:61143] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "acuUFLgIz9HgMl9YwE7RtQAAAVY"]
[Tue Mar 31 17:29:57.557398 2026] [:error] [pid 6548:tid 6559] [client 158.158.112.113:64937] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "acuUFbgIz9HgMl9YwE7RtwAAAUk"]
[Tue Mar 31 17:29:58.200181 2026] [:error] [pid 36890:tid 36912] [client 158.158.112.113:64264] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "acuUFp8FASPd_uH8z7cCQwAAABE"]
[Tue Mar 31 17:29:59.067774 2026] [:error] [pid 36982:tid 36995] [client 158.158.112.113:62366] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acuUF_lMmeoQKN0r_GNFkQAAAMo"]
[Tue Mar 31 17:29:59.645244 2026] [:error] [pid 36891:tid 36945] [client 158.158.112.113:62373] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acuUF5JhiMaJUqoqfl6tpAAAAFU"]
[Tue Mar 31 17:30:00.335615 2026] [:error] [pid 36982:tid 36997] [client 158.158.112.113:62339] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acuUGPlMmeoQKN0r_GNFlwAAAMw"]
[Tue Mar 31 17:30:01.090048 2026] [:error] [pid 6548:tid 6554] [client 158.158.112.113:63721] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "acuUGbgIz9HgMl9YwE7RvQAAAUQ"]
[Tue Mar 31 17:30:01.874897 2026] [:error] [pid 6548:tid 6572] [client 158.158.112.113:60463] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acuUGbgIz9HgMl9YwE7RwgAAAVY"]
[Tue Mar 31 17:30:02.494306 2026] [:error] [pid 6548:tid 6559] [client 158.158.112.113:63727] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acuUGrgIz9HgMl9YwE7RxAAAAUk"]
[Tue Mar 31 17:30:03.116954 2026] [:error] [pid 6548:tid 6570] [client 158.158.112.113:59142] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acuUG7gIz9HgMl9YwE7RxgAAAVQ"]
[Tue Mar 31 17:30:03.763319 2026] [:error] [pid 36982:tid 37009] [client 158.158.112.113:61781] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "acuUG_lMmeoQKN0r_GNFnAAAANg"]
[Tue Mar 31 17:30:04.421872 2026] [:error] [pid 41421:tid 41445] [client 158.158.112.113:64265] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "acuUHBSaDjY9kKFtUQBYzQAAARU"]
[Tue Mar 31 17:30:05.157130 2026] [:error] [pid 36982:tid 36988] [client 158.158.112.113:65013] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "acuUHflMmeoQKN0r_GNFogAAAMM"]
[Tue Mar 31 17:30:05.825929 2026] [:error] [pid 41421:tid 41429] [client 158.158.112.113:62385] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "acuUHRSaDjY9kKFtUQBYzwAAAQU"]
[Tue Mar 31 17:30:06.443686 2026] [:error] [pid 36982:tid 37008] [client 158.158.112.113:60450] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "acuUHvlMmeoQKN0r_GNFrAAAANc"]
[Tue Mar 31 17:30:07.022245 2026] [:error] [pid 36982:tid 36995] [client 158.158.112.113:62407] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "acuUH_lMmeoQKN0r_GNFsgAAAMo"]
[Tue Mar 31 17:30:07.656434 2026] [:error] [pid 6548:tid 6564] [client 158.158.112.113:62458] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "acuUH7gIz9HgMl9YwE7RzQAAAU4"]
[Tue Mar 31 17:30:08.495729 2026] [:error] [pid 36982:tid 37002] [client 158.158.112.113:64994] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "acuUIPlMmeoQKN0r_GNFvQAAANE"]
[Tue Mar 31 17:30:09.154657 2026] [:error] [pid 36982:tid 37005] [client 158.158.112.113:61816] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "acuUIflMmeoQKN0r_GNFwwAAANQ"]
[Tue Mar 31 17:30:09.734147 2026] [:error] [pid 36891:tid 36937] [client 158.158.112.113:61138] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acuUIZJhiMaJUqoqfl6tpwAAAE0"]
[Tue Mar 31 17:30:10.406039 2026] [:error] [pid 6548:tid 6563] [client 158.158.112.113:63096] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acuUIrgIz9HgMl9YwE7R3AAAAU0"]
[Tue Mar 31 17:30:11.109679 2026] [:error] [pid 36892:tid 36960] [client 158.158.112.113:61819] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acuUI0yj9S4G0ek3O4Jj2wAAAIk"]
[Tue Mar 31 17:30:11.811187 2026] [:error] [pid 6548:tid 6555] [client 158.158.112.113:63009] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "acuUI7gIz9HgMl9YwE7R4gAAAUU"]
[Tue Mar 31 17:30:12.398193 2026] [:error] [pid 41421:tid 41424] [client 158.158.112.113:64276] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "acuUJBSaDjY9kKFtUQBY1gAAAQA"]
[Tue Mar 31 17:30:12.923214 2026] [:error] [pid 36890:tid 36898] [client 158.158.112.113:61146] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "acuUJJ8FASPd_uH8z7cCUAAAAAM"]
[Tue Mar 31 17:30:13.566659 2026] [:error] [pid 36982:tid 37008] [client 158.158.112.113:61174] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "acuUJflMmeoQKN0r_GNF1QAAANc"]
[Tue Mar 31 17:30:14.449106 2026] [:error] [pid 36891:tid 36931] [client 158.158.112.113:61804] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "acuUJpJhiMaJUqoqfl6tqwAAAEc"]
[Tue Mar 31 17:30:15.110902 2026] [:error] [pid 36892:tid 36960] [client 158.158.112.113:62386] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat.php"] [unique_id "acuUJ0yj9S4G0ek3O4Jj7AAAAIk"]
[Tue Mar 31 17:30:15.733298 2026] [:error] [pid 6548:tid 6556] [client 158.158.112.113:63043] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat.php"] [unique_id "acuUJ7gIz9HgMl9YwE7R7AAAAUY"]
[Tue Mar 31 17:30:16.431815 2026] [:error] [pid 36890:tid 36912] [client 158.158.112.113:63736] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat.php"] [unique_id "acuUKJ8FASPd_uH8z7cCYAAAABE"]
[Tue Mar 31 17:30:16.995172 2026] [:error] [pid 41421:tid 41432] [client 158.158.112.113:61798] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat.php"] [unique_id "acuUKBSaDjY9kKFtUQBY5QAAAQg"]
[Tue Mar 31 17:30:17.525699 2026] [:error] [pid 36982:tid 37009] [client 158.158.112.113:64339] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "acuUKflMmeoQKN0r_GNF3gAAANg"]
[Tue Mar 31 17:30:18.184015 2026] [:error] [pid 6548:tid 6550] [client 158.158.112.113:63072] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "acuUKrgIz9HgMl9YwE7R8gAAAUA"]
[Tue Mar 31 17:30:18.907403 2026] [:error] [pid 6548:tid 6566] [client 158.158.112.113:63055] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "acuUKrgIz9HgMl9YwE7R9AAAAVA"]
[Tue Mar 31 17:30:19.431204 2026] [:error] [pid 36890:tid 36897] [client 158.158.112.113:62977] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "acuUK58FASPd_uH8z7cCZAAAAAI"]
[Tue Mar 31 17:30:20.012644 2026] [:error] [pid 36982:tid 37005] [client 158.158.112.113:63655] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "acuULPlMmeoQKN0r_GNF5wAAANQ"]
[Tue Mar 31 17:30:20.948797 2026] [:error] [pid 36891:tid 36943] [client 158.158.112.113:63002] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "acuULJJhiMaJUqoqfl6ttgAAAFM"]
[Tue Mar 31 17:30:21.577962 2026] [:error] [pid 36982:tid 36991] [client 158.158.112.113:62354] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "acuULflMmeoQKN0r_GNF6QAAAMY"]
[Tue Mar 31 17:30:22.070421 2026] [:error] [pid 36891:tid 36939] [client 158.158.112.113:62353] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "acuULpJhiMaJUqoqfl6ttwAAAE8"]
[Tue Mar 31 17:30:23.060319 2026] [:error] [pid 36982:tid 37007] [client 158.158.112.113:63069] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "acuUL_lMmeoQKN0r_GNF7gAAANY"]
[Tue Mar 31 17:30:23.674298 2026] [:error] [pid 36982:tid 37000] [client 158.158.112.113:64959] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "acuUL_lMmeoQKN0r_GNF8gAAAM8"]
[Tue Mar 31 17:30:24.378141 2026] [:error] [pid 6548:tid 6550] [client 158.158.112.113:62392] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "acuUMLgIz9HgMl9YwE7R_QAAAUA"]
[Tue Mar 31 17:30:24.987063 2026] [:error] [pid 6548:tid 6566] [client 158.158.112.113:63720] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "acuUMLgIz9HgMl9YwE7SAAAAAVA"]
[Tue Mar 31 17:30:25.562344 2026] [:error] [pid 6548:tid 6561] [client 158.158.112.113:64292] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "acuUMbgIz9HgMl9YwE7SBQAAAUs"]
[Tue Mar 31 17:30:26.112884 2026] [:error] [pid 36890:tid 36897] [client 158.158.112.113:63102] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "acuUMp8FASPd_uH8z7cCcAAAAAI"]
[Tue Mar 31 17:30:26.686007 2026] [:error] [pid 36890:tid 36904] [client 158.158.112.113:62398] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "acuUMp8FASPd_uH8z7cCcgAAAAk"]
[Tue Mar 31 17:30:27.536389 2026] [:error] [pid 36891:tid 36944] [client 158.158.112.113:58533] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "acuUM5JhiMaJUqoqfl6tvAAAAFQ"]
[Tue Mar 31 17:30:28.275120 2026] [:error] [pid 6548:tid 6567] [client 158.158.112.113:61141] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "acuUNLgIz9HgMl9YwE7SDwAAAVE"]
[Tue Mar 31 17:30:28.829251 2026] [:error] [pid 6548:tid 6572] [client 158.158.112.113:62998] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "acuUNLgIz9HgMl9YwE7SEgAAAVY"]
[Tue Mar 31 17:30:29.436174 2026] [:error] [pid 36982:tid 37000] [client 158.158.112.113:61716] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "acuUNflMmeoQKN0r_GNGCQAAAM8"]
[Tue Mar 31 17:30:30.098651 2026] [:error] [pid 36892:tid 36960] [client 158.158.112.113:63022] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "acuUNkyj9S4G0ek3O4Jj_QAAAIk"]
[Tue Mar 31 17:30:30.869935 2026] [:error] [pid 36982:tid 36996] [client 158.158.112.113:59895] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acuUNvlMmeoQKN0r_GNGFQAAAMs"]
[Tue Mar 31 17:30:31.532519 2026] [:error] [pid 36982:tid 37005] [client 158.158.112.113:59160] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acuUN_lMmeoQKN0r_GNGGAAAANQ"]
[Tue Mar 31 17:30:32.035999 2026] [:error] [pid 36982:tid 36989] [client 158.158.112.113:64305] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acuUOPlMmeoQKN0r_GNGGgAAAMQ"]
[Tue Mar 31 17:30:32.801976 2026] [:error] [pid 6548:tid 6563] [client 158.158.112.113:61700] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acuUOLgIz9HgMl9YwE7SHAAAAU0"]
[Tue Mar 31 17:30:33.556875 2026] [:error] [pid 41421:tid 41440] [client 158.158.112.113:61126] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acuUORSaDjY9kKFtUQBY_wAAARA"]
[Tue Mar 31 17:30:34.134899 2026] [:error] [pid 41421:tid 41441] [client 158.158.112.113:61765] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acuUOhSaDjY9kKFtUQBZAgAAARE"]
[Tue Mar 31 17:30:35.008721 2026] [:error] [pid 36892:tid 36955] [client 158.158.112.113:61151] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acuUO0yj9S4G0ek3O4JkBgAAAIQ"]
[Tue Mar 31 17:30:35.830619 2026] [:error] [pid 36890:tid 36913] [client 158.158.112.113:63684] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acuUO58FASPd_uH8z7cCewAAABI"]
[Tue Mar 31 17:30:36.506485 2026] [:error] [pid 36982:tid 37008] [client 158.158.112.113:61724] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ar.php"] [unique_id "acuUPPlMmeoQKN0r_GNGJgAAANc"]
[Tue Mar 31 17:30:37.237251 2026] [:error] [pid 36982:tid 36988] [client 158.158.112.113:59853] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ar.php"] [unique_id "acuUPflMmeoQKN0r_GNGKQAAAMM"]
[Tue Mar 31 17:30:37.794357 2026] [:error] [pid 41421:tid 41429] [client 158.158.112.113:61756] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ar.php"] [unique_id "acuUPRSaDjY9kKFtUQBZCAAAAQU"]
[Tue Mar 31 17:30:38.429187 2026] [:error] [pid 6548:tid 6563] [client 158.158.112.113:63083] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ar.php"] [unique_id "acuUPrgIz9HgMl9YwE7SLQAAAU0"]
[Tue Mar 31 17:30:39.045510 2026] [:error] [pid 6548:tid 6551] [client 158.158.112.113:59220] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "acuUP7gIz9HgMl9YwE7SLwAAAUE"]
[Tue Mar 31 17:30:39.639576 2026] [:error] [pid 6548:tid 6568] [client 158.158.112.113:59194] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "acuUP7gIz9HgMl9YwE7SMwAAAVI"]
[Tue Mar 31 17:30:41.198985 2026] [:error] [pid 36982:tid 37003] [client 158.158.112.113:60520] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "acuUQflMmeoQKN0r_GNGLgAAANI"]
[Tue Mar 31 17:30:41.715634 2026] [:error] [pid 36982:tid 36996] [client 158.158.112.113:64349] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "acuUQflMmeoQKN0r_GNGMAAAAMs"]
[Tue Mar 31 17:30:42.468965 2026] [:error] [pid 36890:tid 36902] [client 158.158.112.113:62417] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acuUQp8FASPd_uH8z7cCiQAAAAc"]
[Tue Mar 31 17:30:43.402705 2026] [:error] [pid 6548:tid 6566] [client 158.158.112.113:64905] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acuUQ7gIz9HgMl9YwE7SOwAAAVA"]
[Tue Mar 31 17:30:44.010298 2026] [:error] [pid 36982:tid 36991] [client 158.158.112.113:64259] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acuURPlMmeoQKN0r_GNGPQAAAMY"]
[Tue Mar 31 17:30:44.843693 2026] [:error] [pid 36890:tid 36912] [client 158.158.112.113:60488] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "acuURJ8FASPd_uH8z7cCjAAAABE"]
[Tue Mar 31 17:30:45.571252 2026] [:error] [pid 36982:tid 36985] [client 158.158.112.113:64927] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "acuURflMmeoQKN0r_GNGQQAAAMA"]
[Tue Mar 31 17:30:46.508252 2026] [:error] [pid 36982:tid 37006] [client 158.158.112.113:58524] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "acuURvlMmeoQKN0r_GNGSQAAANU"]
[Tue Mar 31 17:30:48.124113 2026] [:error] [pid 36891:tid 36930] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Tue Mar 31 17:30:48.367189 2026] [:error] [pid 36891:tid 36940] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/ut.php
[Tue Mar 31 17:30:48.620122 2026] [:error] [pid 36891:tid 36927] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Tue Mar 31 17:30:48.901860 2026] [:error] [pid 36891:tid 36943] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Tue Mar 31 17:30:49.143957 2026] [:error] [pid 36891:tid 36931] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Tue Mar 31 17:30:49.439120 2026] [:error] [pid 36891:tid 36936] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/zde.php
[Tue Mar 31 17:30:49.683003 2026] [:error] [pid 36891:tid 36933] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/wpo.php
[Tue Mar 31 17:30:49.954843 2026] [:error] [pid 36891:tid 36925] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/aj.php
[Tue Mar 31 17:30:50.230474 2026] [:error] [pid 36891:tid 36941] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Tue Mar 31 17:30:50.512126 2026] [:error] [pid 36891:tid 36945] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/filer.php
[Tue Mar 31 17:30:50.871850 2026] [:error] [pid 36891:tid 36932] [client 158.158.112.113:64967] File does not exist: /usr/local/apache/htdocs/suspended-page/gorila.php
[Tue Mar 31 17:30:51.121178 2026] [:error] [pid 36891:tid 36938] [client 158.158.112.113:64967] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acuUS5JhiMaJUqoqfl6t2gAAAE4"]
[Tue Mar 31 17:30:51.755705 2026] [:error] [pid 6548:tid 6566] [client 158.158.112.113:64919] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acuUS7gIz9HgMl9YwE7SUQAAAVA"]
[Tue Mar 31 17:30:52.535705 2026] [:error] [pid 6548:tid 6556] [client 158.158.112.113:61751] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acuUTLgIz9HgMl9YwE7SVAAAAUY"]
[Tue Mar 31 17:30:53.550774 2026] [:error] [pid 6548:tid 6561] [client 158.158.112.113:57929] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "acuUTbgIz9HgMl9YwE7SWQAAAUs"]
[Tue Mar 31 17:30:54.229069 2026] [:error] [pid 41421:tid 41424] [client 158.158.112.113:59797] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/main.php"] [unique_id "acuUThSaDjY9kKFtUQBZIAAAAQA"]
[Tue Mar 31 17:30:54.869250 2026] [:error] [pid 36891:tid 36935] [client 158.158.112.113:63666] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/main.php"] [unique_id "acuUTpJhiMaJUqoqfl6t3QAAAEs"]
[Tue Mar 31 17:30:55.693123 2026] [:error] [pid 41421:tid 41433] [client 158.158.112.113:65010] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/main.php"] [unique_id "acuUTxSaDjY9kKFtUQBZIwAAAQk"]
[Tue Mar 31 17:30:56.423488 2026] [:error] [pid 41421:tid 41446] [client 158.158.112.113:64991] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/main.php"] [unique_id "acuUUBSaDjY9kKFtUQBZJAAAARY"]
[Tue Mar 31 17:30:57.321543 2026] [:error] [pid 36890:tid 36898] [client 158.158.112.113:61818] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "acuUUZ8FASPd_uH8z7cCpAAAAAM"]
[Tue Mar 31 17:30:58.565557 2026] [:error] [pid 36891:tid 36927] [client 158.158.112.113:64368] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "acuUUpJhiMaJUqoqfl6t4AAAAEM"]
[Tue Mar 31 17:30:59.103759 2026] [:error] [pid 36891:tid 36934] [client 158.158.112.113:62429] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "acuUU5JhiMaJUqoqfl6t4wAAAEo"]
[Tue Mar 31 17:31:00.007413 2026] [:error] [pid 36891:tid 36932] [client 158.158.112.113:59863] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "acuUVJJhiMaJUqoqfl6t5wAAAEg"]
[Tue Mar 31 17:31:00.703486 2026] [:error] [pid 6548:tid 6560] [client 158.158.112.113:64923] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f.php"] [unique_id "acuUVLgIz9HgMl9YwE7SawAAAUo"]
[Tue Mar 31 17:31:01.454141 2026] [:error] [pid 6548:tid 6570] [client 158.158.112.113:61766] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f.php"] [unique_id "acuUVbgIz9HgMl9YwE7SbgAAAVQ"]
[Tue Mar 31 17:31:02.353710 2026] [:error] [pid 6548:tid 6558] [client 158.158.112.113:63632] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f.php"] [unique_id "acuUVrgIz9HgMl9YwE7SdgAAAUg"]
[Tue Mar 31 17:31:03.080904 2026] [:error] [pid 6548:tid 6562] [client 158.158.112.113:63653] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f.php"] [unique_id "acuUV7gIz9HgMl9YwE7SewAAAUw"]
[Tue Mar 31 17:31:03.902986 2026] [:error] [pid 6548:tid 6550] [client 158.158.112.113:63078] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "acuUV7gIz9HgMl9YwE7SgAAAAUA"]
[Tue Mar 31 17:31:04.758185 2026] [:error] [pid 41421:tid 41430] [client 158.158.112.113:61057] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "acuUWBSaDjY9kKFtUQBZNgAAAQY"]
[Tue Mar 31 17:31:05.405219 2026] [:error] [pid 36890:tid 36919] [client 158.158.112.113:64268] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "acuUWZ8FASPd_uH8z7cCsgAAABg"]
[Tue Mar 31 17:31:06.129261 2026] [:error] [pid 41421:tid 41429] [client 158.158.112.113:65002] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "acuUWhSaDjY9kKFtUQBZOwAAAQU"]
[Tue Mar 31 17:31:06.812313 2026] [:error] [pid 41421:tid 41447] [client 158.158.112.113:60422] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acuUWhSaDjY9kKFtUQBZPgAAARc"]
[Tue Mar 31 17:31:07.662788 2026] [:error] [pid 36890:tid 36908] [client 158.158.112.113:62337] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acuUW58FASPd_uH8z7cCtAAAAA0"]
[Tue Mar 31 17:31:08.509741 2026] [:error] [pid 36982:tid 36996] [client 158.158.112.113:61767] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acuUXPlMmeoQKN0r_GNGngAAAMs"]
[Tue Mar 31 17:31:09.301748 2026] [:error] [pid 36982:tid 36990] [client 158.158.112.113:57319] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "acuUXflMmeoQKN0r_GNGowAAAMU"]
[Tue Mar 31 17:31:09.878666 2026] [:error] [pid 41421:tid 41439] [client 158.158.112.113:60499] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "acuUXRSaDjY9kKFtUQBZRAAAAQ8"]
[Tue Mar 31 17:31:10.567010 2026] [:error] [pid 36891:tid 36932] [client 158.158.112.113:63740] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "acuUXpJhiMaJUqoqfl6t8QAAAEg"]
[Tue Mar 31 17:31:11.551014 2026] [:error] [pid 36982:tid 36999] [client 158.158.112.113:60474] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "acuUX_lMmeoQKN0r_GNGqwAAAM4"]
[Tue Mar 31 17:31:12.307458 2026] [:error] [pid 41421:tid 41441] [client 158.158.112.113:63704] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "acuUYBSaDjY9kKFtUQBZRwAAARE"]
[Tue Mar 31 17:31:13.424720 2026] [:error] [pid 6548:tid 6551] [client 158.158.112.113:61697] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "acuUYbgIz9HgMl9YwE7SnAAAAUE"]
[Tue Mar 31 17:31:17.144081 2026] [:error] [pid 36890:tid 36907] [client 158.158.112.113:64331] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "acuUZZ8FASPd_uH8z7cCxwAAAAw"]
[Tue Mar 31 17:31:29.778441 2026] [:error] [pid 6548:tid 6566] [client 158.158.112.113:64968] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "acuUcbgIz9HgMl9YwE7SxgAAAVA"]
[Tue Mar 31 17:31:30.791040 2026] [:error] [pid 6548:tid 6552] [client 158.158.112.113:62460] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "acuUcrgIz9HgMl9YwE7SzAAAAUI"]
[Tue Mar 31 17:31:31.756906 2026] [:error] [pid 36890:tid 36901] [client 158.158.112.113:63660] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "acuUc58FASPd_uH8z7cC4wAAAAY"]
[Tue Mar 31 17:31:33.175348 2026] [:error] [pid 36890:tid 36913] [client 158.158.112.113:60528] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "acuUdZ8FASPd_uH8z7cC5AAAABI"]
[Tue Mar 31 17:31:33.929318 2026] [:error] [pid 36891:tid 36926] [client 158.158.112.113:63700] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acuUdZJhiMaJUqoqfl6uEQAAAEI"]
[Tue Mar 31 17:31:34.810016 2026] [:error] [pid 36982:tid 37009] [client 158.158.112.113:62364] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acuUdvlMmeoQKN0r_GNG6AAAANg"]
[Tue Mar 31 17:31:35.972777 2026] [:error] [pid 36891:tid 36941] [client 158.158.112.113:60421] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acuUd5JhiMaJUqoqfl6uGQAAAFE"]
[Tue Mar 31 17:31:37.121946 2026] [:error] [pid 36982:tid 36985] [client 158.158.112.113:61699] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "acuUeflMmeoQKN0r_GNG7AAAAMA"]
[Tue Mar 31 17:31:38.285613 2026] [:error] [pid 6548:tid 6570] [client 158.158.112.113:63003] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mt.php"] [unique_id "acuUergIz9HgMl9YwE7S4gAAAVQ"]
[Tue Mar 31 17:31:39.582095 2026] [:error] [pid 36890:tid 36910] [client 158.158.112.113:63637] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mt.php"] [unique_id "acuUe58FASPd_uH8z7cC7AAAAA8"]
[Tue Mar 31 17:31:40.930145 2026] [:error] [pid 36892:tid 36964] [client 158.158.112.113:64375] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mt.php"] [unique_id "acuUfEyj9S4G0ek3O4JkcQAAAI0"]
[Tue Mar 31 17:31:42.573303 2026] [:error] [pid 36891:tid 36947] [client 158.158.112.113:64913] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mt.php"] [unique_id "acuUfpJhiMaJUqoqfl6uPAAAAFc"]
[Tue Mar 31 17:31:45.834912 2026] [:error] [pid 36892:tid 36966] [client 158.158.112.113:59246] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shout.php"] [unique_id "acuUgUyj9S4G0ek3O4JkegAAAI8"]
[Tue Mar 31 17:31:46.852857 2026] [:error] [pid 36891:tid 36931] [client 158.158.112.113:62439] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shout.php"] [unique_id "acuUgpJhiMaJUqoqfl6uQQAAAEc"]
[Tue Mar 31 17:31:47.891517 2026] [:error] [pid 6548:tid 6550] [client 158.158.112.113:61802] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shout.php"] [unique_id "acuUg7gIz9HgMl9YwE7TBAAAAUA"]
[Tue Mar 31 17:31:48.766485 2026] [:error] [pid 36982:tid 37003] [client 158.158.112.113:61717] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shout.php"] [unique_id "acuUhPlMmeoQKN0r_GNG_QAAANI"]
[Tue Mar 31 17:31:50.256278 2026] [:error] [pid 41421:tid 41440] [client 158.158.112.113:63735] File does not exist: /usr/local/apache/htdocs/suspended-page/zews.php
[Tue Mar 31 17:31:50.520044 2026] [:error] [pid 41421:tid 41433] [client 158.158.112.113:63735] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue Mar 31 17:31:50.845514 2026] [:error] [pid 41421:tid 41437] [client 158.158.112.113:63735] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Tue Mar 31 17:31:51.102695 2026] [:error] [pid 41421:tid 41427] [client 158.158.112.113:63735] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Tue Mar 31 17:31:51.424709 2026] [:error] [pid 41421:tid 41440] [client 158.158.112.113:63735] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Tue Mar 31 17:31:52.043584 2026] [:error] [pid 41421:tid 41445] [client 158.158.112.113:63735] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue Mar 31 17:31:52.312206 2026] [:error] [pid 41421:tid 41434] [client 158.158.112.113:63735] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Tue Mar 31 17:31:52.555254 2026] [:error] [pid 41421:tid 41432] [client 158.158.112.113:63735] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Tue Mar 31 17:31:52.854008 2026] [:error] [pid 41421:tid 41437] [client 158.158.112.113:63735] File does not exist: /usr/local/apache/htdocs/suspended-page/06.php
[Tue Mar 31 17:31:53.753111 2026] [:error] [pid 41421:tid 41431] [client 158.158.112.113:63735] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "acuUiRSaDjY9kKFtUQBZsQAAAQc"]
[Tue Mar 31 17:31:55.154963 2026] [:error] [pid 41421:tid 41432] [client 158.158.112.113:63027] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "acuUixSaDjY9kKFtUQBZugAAAQg"]
[Tue Mar 31 17:31:56.404704 2026] [:error] [pid 36982:tid 36993] [client 158.158.112.113:59867] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "acuUjPlMmeoQKN0r_GNHFAAAAMg"]
[Tue Mar 31 17:31:58.290629 2026] [:error] [pid 36982:tid 36995] [client 158.158.112.113:60480] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "acuUjvlMmeoQKN0r_GNHHwAAAMo"]
[Tue Mar 31 17:32:00.840552 2026] [:error] [pid 36982:tid 36998] [client 158.158.112.113:57875] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "acuUkPlMmeoQKN0r_GNHJQAAAM0"]
[Tue Mar 31 17:32:01.610327 2026] [:error] [pid 6548:tid 6562] [client 158.158.112.113:63006] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "acuUkbgIz9HgMl9YwE7TKAAAAUw"]
[Tue Mar 31 17:32:02.644840 2026] [:error] [pid 6548:tid 6567] [client 158.158.112.113:63638] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "acuUkrgIz9HgMl9YwE7TLwAAAVE"]
[Tue Mar 31 17:32:03.832914 2026] [:error] [pid 41421:tid 41441] [client 158.158.112.113:60416] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "acuUkxSaDjY9kKFtUQBZzAAAARE"]
[Tue Mar 31 17:32:06.526220 2026] [:error] [pid 36892:tid 36956] [client 158.158.112.113:61789] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "acuUlkyj9S4G0ek3O4JkkgAAAIU"]
[Tue Mar 31 17:32:07.809870 2026] [:error] [pid 6548:tid 6551] [client 158.158.112.113:64902] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "acuUl7gIz9HgMl9YwE7TPgAAAUE"]
[Tue Mar 31 17:32:09.808064 2026] [:error] [pid 41421:tid 41429] [client 158.158.112.113:64354] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "acuUmRSaDjY9kKFtUQBZ3AAAAQU"]
[Tue Mar 31 17:32:10.608415 2026] [:error] [pid 36890:tid 36911] [client 158.158.112.113:61771] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "acuUmp8FASPd_uH8z7cDNAAAABA"]
[Tue Mar 31 17:32:11.933251 2026] [:error] [pid 41421:tid 41439] [client 158.158.112.113:63100] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "acuUmxSaDjY9kKFtUQBZ7AAAAQ8"]
[Tue Mar 31 17:32:12.922864 2026] [:error] [pid 36891:tid 36947] [client 158.158.112.113:64961] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "acuUnJJhiMaJUqoqfl6uagAAAFc"]
[Tue Mar 31 17:32:14.115194 2026] [:error] [pid 36892:tid 36955] [client 158.158.112.113:63058] [client 158.158.112.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "acuUnkyj9S4G0ek3O4JkrAAAAIQ"]
[Wed Apr 01 03:28:50.041853 2026] [:error] [pid 45190:tid 45208] [client 158.158.49.164:7776] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Wed Apr 01 05:44:43.714548 2026] [:error] [pid 23715:tid 23762] [client 41.254.80.236:42242] [client 41.254.80.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 41.254.80.236, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "acxAS6-REzOruNbiT9wvOAAAAEE"]
[Wed Apr 01 05:44:43.722949 2026] [:error] [pid 23715:tid 23762] [client 41.254.80.236:42242] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 01 07:30:46.586602 2026] [:error] [pid 23714:tid 23757] [client 20.116.48.67:62800] [client 20.116.48.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acxZJkHxDDU2ETcG9DTseQAAABc"]
[Wed Apr 01 07:36:31.992790 2026] [:error] [pid 24346:tid 24358] [client 20.203.130.156:13620] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Wed Apr 01 07:36:32.232323 2026] [:error] [pid 24346:tid 24368] [client 20.203.130.156:13620] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Wed Apr 01 08:02:29.954346 2026] [:error] [pid 24314:tid 24320] [client 72.146.8.102:5653] File does not exist: /usr/local/apache/htdocs/suspended-page/fffff.php
[Wed Apr 01 08:02:30.189048 2026] [:error] [pid 24314:tid 24321] [client 72.146.8.102:5653] File does not exist: /usr/local/apache/htdocs/suspended-page/xdd.php
[Wed Apr 01 08:02:30.423741 2026] [:error] [pid 24314:tid 24333] [client 72.146.8.102:5653] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Wed Apr 01 08:02:30.661775 2026] [:error] [pid 24314:tid 24328] [client 72.146.8.102:5653] File does not exist: /usr/local/apache/htdocs/suspended-page/wdone1.php
[Wed Apr 01 08:02:30.898865 2026] [:error] [pid 24314:tid 24331] [client 72.146.8.102:5653] File does not exist: /usr/local/apache/htdocs/suspended-page/ws79.php
[Wed Apr 01 08:02:31.134309 2026] [:error] [pid 24314:tid 24330] [client 72.146.8.102:5653] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Wed Apr 01 08:02:31.371028 2026] [:error] [pid 24314:tid 24329] [client 72.146.8.102:5653] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Wed Apr 01 08:02:31.608995 2026] [:error] [pid 24314:tid 24326] [client 72.146.8.102:5653] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Wed Apr 01 08:02:31.846835 2026] [:error] [pid 24314:tid 24337] [client 72.146.8.102:5653] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Wed Apr 01 08:02:32.083150 2026] [:error] [pid 24314:tid 24324] [client 72.146.8.102:5653] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Wed Apr 01 08:02:32.315954 2026] [:error] [pid 24314:tid 24338] [client 72.146.8.102:5653] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-true.php"] [unique_id "acxgmJRF3FCzjmMUX5b1dQAAARQ"]
[Wed Apr 01 08:02:32.880480 2026] [:error] [pid 23714:tid 23751] [client 72.146.8.102:6091] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-true.php"] [unique_id "acxgmEHxDDU2ETcG9DQEcQAAABE"]
[Wed Apr 01 08:02:33.349318 2026] [:error] [pid 24346:tid 24363] [client 72.146.8.102:5675] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-true.php"] [unique_id "acxgmbc1l8kg9MhGHIKfFAAAAUs"]
[Wed Apr 01 08:02:33.818495 2026] [:error] [pid 24346:tid 24359] [client 72.146.8.102:5679] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-true.php"] [unique_id "acxgmbc1l8kg9MhGHIKfFwAAAUc"]
[Wed Apr 01 08:02:34.285011 2026] [:error] [pid 24346:tid 24355] [client 72.146.8.102:6143] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acxgmrc1l8kg9MhGHIKfGwAAAUM"]
[Wed Apr 01 08:02:34.752953 2026] [:error] [pid 24346:tid 24376] [client 72.146.8.102:5645] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acxgmrc1l8kg9MhGHIKfHwAAAVg"]
[Wed Apr 01 08:02:35.219465 2026] [:error] [pid 23716:tid 23800] [client 72.146.8.102:5683] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acxgm3VtFUg_mx-RYb50VwAAAIw"]
[Wed Apr 01 08:02:35.689594 2026] [:error] [pid 23716:tid 23794] [client 72.146.8.102:5655] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acxgm3VtFUg_mx-RYb50WAAAAIY"]
[Wed Apr 01 08:02:36.158075 2026] [:error] [pid 23715:tid 23785] [client 72.146.8.102:6095] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acxgnK-REzOruNbiT9xzEAAAAFg"]
[Wed Apr 01 08:02:36.628809 2026] [:error] [pid 23715:tid 23765] [client 72.146.8.102:6112] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acxgnK-REzOruNbiT9xzEwAAAEQ"]
[Wed Apr 01 08:02:37.094628 2026] [:error] [pid 24346:tid 24355] [client 72.146.8.102:6081] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acxgnbc1l8kg9MhGHIKfJgAAAUM"]
[Wed Apr 01 08:02:37.559984 2026] [:error] [pid 23715:tid 23776] [client 72.146.8.102:6088] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acxgna-REzOruNbiT9xzFQAAAE8"]
[Wed Apr 01 08:02:38.025584 2026] [:error] [pid 23819:tid 23846] [client 72.146.8.102:5673] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acxgntdfUS_37wFAM771ewAAANg"]
[Wed Apr 01 08:02:38.498333 2026] [:error] [pid 23819:tid 23841] [client 72.146.8.102:5685] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acxgntdfUS_37wFAM771fQAAANM"]
[Wed Apr 01 08:02:38.972841 2026] [:error] [pid 23715:tid 23764] [client 72.146.8.102:6094] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acxgnq-REzOruNbiT9xzGgAAAEM"]
[Wed Apr 01 08:02:39.447636 2026] [:error] [pid 24346:tid 24370] [client 72.146.8.102:5648] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acxgn7c1l8kg9MhGHIKfKAAAAVI"]
[Wed Apr 01 08:02:39.915903 2026] [:error] [pid 24314:tid 24319] [client 72.146.8.102:5678] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acxgn5RF3FCzjmMUX5b1eAAAAQE"]
[Wed Apr 01 08:02:40.394169 2026] [:error] [pid 23716:tid 23788] [client 72.146.8.102:5691] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acxgoHVtFUg_mx-RYb50YQAAAIA"]
[Wed Apr 01 08:02:40.862730 2026] [:error] [pid 24346:tid 24372] [client 72.146.8.102:5657] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acxgoLc1l8kg9MhGHIKfLAAAAVQ"]
[Wed Apr 01 08:02:41.339929 2026] [:error] [pid 24346:tid 24358] [client 72.146.8.102:5663] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acxgobc1l8kg9MhGHIKfLQAAAUY"]
[Wed Apr 01 08:02:41.805811 2026] [:error] [pid 23715:tid 23769] [client 72.146.8.102:5686] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acxgoa-REzOruNbiT9xzHQAAAEg"]
[Wed Apr 01 08:02:42.274066 2026] [:error] [pid 23715:tid 23777] [client 72.146.8.102:6080] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acxgoq-REzOruNbiT9xzHgAAAFA"]
[Wed Apr 01 08:02:42.746495 2026] [:error] [pid 23715:tid 23778] [client 72.146.8.102:6099] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acxgoq-REzOruNbiT9xzIAAAAFE"]
[Wed Apr 01 08:02:43.224418 2026] [:error] [pid 24314:tid 24327] [client 72.146.8.102:5692] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acxgo5RF3FCzjmMUX5b1fQAAAQk"]
[Wed Apr 01 08:02:43.692058 2026] [:error] [pid 24314:tid 24326] [client 72.146.8.102:5664] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eee.php"] [unique_id "acxgo5RF3FCzjmMUX5b1gQAAAQg"]
[Wed Apr 01 08:02:44.160989 2026] [:error] [pid 23715:tid 23765] [client 72.146.8.102:5641] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eee.php"] [unique_id "acxgpK-REzOruNbiT9xzIQAAAEQ"]
[Wed Apr 01 08:02:44.633788 2026] [:error] [pid 23715:tid 23779] [client 72.146.8.102:6025] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eee.php"] [unique_id "acxgpK-REzOruNbiT9xzJAAAAFI"]
[Wed Apr 01 08:02:45.103843 2026] [:error] [pid 24346:tid 24370] [client 72.146.8.102:6111] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eee.php"] [unique_id "acxgpbc1l8kg9MhGHIKfOwAAAVI"]
[Wed Apr 01 08:02:45.587883 2026] [:error] [pid 23715:tid 23763] [client 72.146.8.102:5634] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acxgpa-REzOruNbiT9xzKwAAAEI"]
[Wed Apr 01 08:02:46.053460 2026] [:error] [pid 24346:tid 24372] [client 72.146.8.102:6084] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acxgprc1l8kg9MhGHIKfPwAAAVQ"]
[Wed Apr 01 08:02:46.543088 2026] [:error] [pid 24346:tid 24363] [client 72.146.8.102:5642] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acxgprc1l8kg9MhGHIKfQQAAAUs"]
[Wed Apr 01 08:02:47.010496 2026] [:error] [pid 23716:tid 23800] [client 72.146.8.102:6085] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acxgp3VtFUg_mx-RYb50ZQAAAIw"]
[Wed Apr 01 08:02:47.490684 2026] [:error] [pid 24346:tid 24371] [client 72.146.8.102:5640] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acxgp7c1l8kg9MhGHIKfRAAAAVM"]
[Wed Apr 01 08:02:47.956473 2026] [:error] [pid 24346:tid 24352] [client 72.146.8.102:5690] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acxgp7c1l8kg9MhGHIKfSAAAAUA"]
[Wed Apr 01 08:02:48.424146 2026] [:error] [pid 24346:tid 24358] [client 72.146.8.102:6119] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acxgqLc1l8kg9MhGHIKfTwAAAUY"]
[Wed Apr 01 08:02:48.894906 2026] [:error] [pid 24348:tid 24388] [client 72.146.8.102:6133] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acxgqG0Vs69Y5nF1HA_05wAAAYk"]
[Wed Apr 01 08:02:49.360172 2026] [:error] [pid 24346:tid 24371] [client 72.146.8.102:6036] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acxgqbc1l8kg9MhGHIKfUwAAAVM"]
[Wed Apr 01 08:02:49.836366 2026] [:error] [pid 24348:tid 24401] [client 72.146.8.102:5662] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acxgqW0Vs69Y5nF1HA_06wAAAZY"]
[Wed Apr 01 08:02:50.307866 2026] [:error] [pid 24348:tid 24402] [client 72.146.8.102:6092] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acxgqm0Vs69Y5nF1HA_07QAAAZc"]
[Wed Apr 01 08:02:50.777421 2026] [:error] [pid 23715:tid 23762] [client 72.146.8.102:5644] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acxgqq-REzOruNbiT9xzMgAAAEE"]
[Wed Apr 01 08:02:51.244089 2026] [:error] [pid 23715:tid 23764] [client 72.146.8.102:6130] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "acxgq6-REzOruNbiT9xzMwAAAEM"]
[Wed Apr 01 08:02:51.709409 2026] [:error] [pid 23819:tid 23829] [client 72.146.8.102:6093] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "acxgq9dfUS_37wFAM771gwAAAMc"]
[Wed Apr 01 08:02:52.176990 2026] [:error] [pid 23715:tid 23772] [client 72.146.8.102:5676] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "acxgrK-REzOruNbiT9xzNwAAAEs"]
[Wed Apr 01 08:02:52.646842 2026] [:error] [pid 23819:tid 23843] [client 72.146.8.102:6086] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "acxgrNdfUS_37wFAM771hQAAANU"]
[Wed Apr 01 08:02:53.120052 2026] [:error] [pid 23819:tid 23830] [client 72.146.8.102:5682] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "acxgrddfUS_37wFAM771hwAAAMg"]
[Wed Apr 01 08:02:53.595549 2026] [:error] [pid 24346:tid 24374] [client 72.146.8.102:6121] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "acxgrbc1l8kg9MhGHIKfVgAAAVY"]
[Wed Apr 01 08:02:54.062534 2026] [:error] [pid 24314:tid 24329] [client 72.146.8.102:5650] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "acxgrpRF3FCzjmMUX5b1iwAAAQs"]
[Wed Apr 01 08:02:54.534985 2026] [:error] [pid 24346:tid 24376] [client 72.146.8.102:5635] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "acxgrrc1l8kg9MhGHIKfWAAAAVg"]
[Wed Apr 01 08:02:55.000370 2026] [:error] [pid 24346:tid 24361] [client 72.146.8.102:5633] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acxgrrc1l8kg9MhGHIKfXAAAAUk"]
[Wed Apr 01 08:02:55.468762 2026] [:error] [pid 24348:tid 24392] [client 72.146.8.102:6027] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acxgr20Vs69Y5nF1HA_1AAAAAY0"]
[Wed Apr 01 08:02:55.938012 2026] [:error] [pid 24348:tid 24395] [client 72.146.8.102:5669] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acxgr20Vs69Y5nF1HA_1AgAAAZA"]
[Wed Apr 01 08:02:56.410338 2026] [:error] [pid 23716:tid 23799] [client 72.146.8.102:5689] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acxgsHVtFUg_mx-RYb50bQAAAIs"]
[Wed Apr 01 08:02:56.881798 2026] [:error] [pid 23819:tid 23838] [client 72.146.8.102:5671] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "acxgsNdfUS_37wFAM771igAAANA"]
[Wed Apr 01 08:02:57.352432 2026] [:error] [pid 24314:tid 24323] [client 72.146.8.102:5668] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "acxgsZRF3FCzjmMUX5b1kQAAAQU"]
[Wed Apr 01 08:02:57.824834 2026] [:error] [pid 23715:tid 23778] [client 72.146.8.102:5638] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "acxgsa-REzOruNbiT9xzQwAAAFE"]
[Wed Apr 01 08:02:58.293754 2026] [:error] [pid 23714:tid 23741] [client 72.146.8.102:6115] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "acxgskHxDDU2ETcG9DQEewAAAAc"]
[Wed Apr 01 08:02:58.772950 2026] [:error] [pid 23714:tid 23753] [client 72.146.8.102:5670] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acxgskHxDDU2ETcG9DQEfAAAABM"]
[Wed Apr 01 08:02:59.245311 2026] [:error] [pid 23714:tid 23735] [client 72.146.8.102:6047] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acxgs0HxDDU2ETcG9DQEfwAAAAE"]
[Wed Apr 01 08:02:59.724636 2026] [:error] [pid 24348:tid 24391] [client 72.146.8.102:6110] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acxgs20Vs69Y5nF1HA_1CAAAAYw"]
[Wed Apr 01 08:03:00.191362 2026] [:error] [pid 23715:tid 23780] [client 72.146.8.102:6087] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acxgtK-REzOruNbiT9xzTAAAAFM"]
[Wed Apr 01 08:03:00.671201 2026] [:error] [pid 23714:tid 23737] [client 72.146.8.102:6100] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acxgtEHxDDU2ETcG9DQEhAAAAAM"]
[Wed Apr 01 08:03:01.141410 2026] [:error] [pid 23714:tid 23752] [client 72.146.8.102:6101] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acxgtUHxDDU2ETcG9DQEhgAAABI"]
[Wed Apr 01 08:03:01.619187 2026] [:error] [pid 23714:tid 23755] [client 72.146.8.102:5693] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acxgtUHxDDU2ETcG9DQEhwAAABU"]
[Wed Apr 01 08:03:02.093975 2026] [:error] [pid 24346:tid 24374] [client 72.146.8.102:6128] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acxgtrc1l8kg9MhGHIKffQAAAVY"]
[Wed Apr 01 08:03:02.574563 2026] [:error] [pid 23714:tid 23742] [client 72.146.8.102:6083] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acxgtkHxDDU2ETcG9DQEiwAAAAg"]
[Wed Apr 01 08:03:03.047716 2026] [:error] [pid 23714:tid 23747] [client 72.146.8.102:5672] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acxgt0HxDDU2ETcG9DQEjwAAAA0"]
[Wed Apr 01 08:03:03.529459 2026] [:error] [pid 24346:tid 24356] [client 72.146.8.102:6039] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acxgt7c1l8kg9MhGHIKfhAAAAUQ"]
[Wed Apr 01 08:03:04.011445 2026] [:error] [pid 23715:tid 23775] [client 72.146.8.102:6117] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acxguK-REzOruNbiT9xzTwAAAE4"]
[Wed Apr 01 08:03:04.482787 2026] [:error] [pid 24346:tid 24353] [client 72.146.8.102:5652] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "acxguLc1l8kg9MhGHIKfiwAAAUE"]
[Wed Apr 01 08:03:04.953158 2026] [:error] [pid 23714:tid 23753] [client 72.146.8.102:6090] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "acxguEHxDDU2ETcG9DQEmAAAABM"]
[Wed Apr 01 08:03:05.436353 2026] [:error] [pid 23714:tid 23751] [client 72.146.8.102:6102] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "acxguUHxDDU2ETcG9DQEmgAAABE"]
[Wed Apr 01 08:03:05.904959 2026] [:error] [pid 24348:tid 24384] [client 72.146.8.102:6030] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "acxguW0Vs69Y5nF1HA_1CwAAAYU"]
[Wed Apr 01 08:03:06.371386 2026] [:error] [pid 24348:tid 24397] [client 72.146.8.102:5656] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acxgum0Vs69Y5nF1HA_1DQAAAZI"]
[Wed Apr 01 08:03:06.857721 2026] [:error] [pid 24348:tid 24383] [client 72.146.8.102:6098] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acxgum0Vs69Y5nF1HA_1EQAAAYQ"]
[Wed Apr 01 08:03:07.328276 2026] [:error] [pid 24348:tid 24399] [client 72.146.8.102:5684] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acxgu20Vs69Y5nF1HA_1EwAAAZQ"]
[Wed Apr 01 08:03:07.797686 2026] [:error] [pid 24348:tid 24387] [client 72.146.8.102:6096] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acxgu20Vs69Y5nF1HA_1GAAAAYg"]
[Wed Apr 01 08:03:08.270439 2026] [:error] [pid 24348:tid 24396] [client 72.146.8.102:6097] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "acxgvG0Vs69Y5nF1HA_1GwAAAZE"]
[Wed Apr 01 08:03:08.738493 2026] [:error] [pid 24348:tid 24381] [client 72.146.8.102:5660] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "acxgvG0Vs69Y5nF1HA_1HwAAAYI"]
[Wed Apr 01 08:03:09.210201 2026] [:error] [pid 23819:tid 23844] [client 72.146.8.102:6109] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "acxgvddfUS_37wFAM771kwAAANY"]
[Wed Apr 01 08:03:09.677917 2026] [:error] [pid 23819:tid 23834] [client 72.146.8.102:5677] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "acxgvddfUS_37wFAM771lAAAAMw"]
[Wed Apr 01 08:03:10.144613 2026] [:error] [pid 24346:tid 24356] [client 72.146.8.102:6114] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "acxgvrc1l8kg9MhGHIKfrQAAAUQ"]
[Wed Apr 01 08:03:10.613059 2026] [:error] [pid 23715:tid 23766] [client 72.146.8.102:6139] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "acxgvq-REzOruNbiT9xzUwAAAEU"]
[Wed Apr 01 08:03:11.078145 2026] [:error] [pid 23715:tid 23773] [client 72.146.8.102:6046] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "acxgv6-REzOruNbiT9xzVwAAAEw"]
[Wed Apr 01 08:03:11.555605 2026] [:error] [pid 24314:tid 24330] [client 72.146.8.102:5695] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "acxgv5RF3FCzjmMUX5b1mAAAAQw"]
[Wed Apr 01 08:03:12.022062 2026] [:error] [pid 23716:tid 23802] [client 72.146.8.102:5637] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "acxgwHVtFUg_mx-RYb50dAAAAI4"]
[Wed Apr 01 08:03:12.499809 2026] [:error] [pid 23716:tid 23807] [client 72.146.8.102:5649] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "acxgwHVtFUg_mx-RYb50dQAAAJM"]
[Wed Apr 01 08:03:12.970467 2026] [:error] [pid 23714:tid 23757] [client 72.146.8.102:6035] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "acxgwEHxDDU2ETcG9DQEpQAAABc"]
[Wed Apr 01 08:03:13.449082 2026] [:error] [pid 23714:tid 23736] [client 72.146.8.102:6104] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "acxgwUHxDDU2ETcG9DQEqgAAAAI"]
[Wed Apr 01 08:03:13.918328 2026] [:error] [pid 23714:tid 23743] [client 72.146.8.102:6065] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acxgwUHxDDU2ETcG9DQErgAAAAk"]
[Wed Apr 01 08:03:14.389614 2026] [:error] [pid 23714:tid 23742] [client 72.146.8.102:5639] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acxgwkHxDDU2ETcG9DQEsQAAAAg"]
[Wed Apr 01 08:03:14.863101 2026] [:error] [pid 24314:tid 24322] [client 72.146.8.102:6016] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acxgwpRF3FCzjmMUX5b1oQAAAQQ"]
[Wed Apr 01 08:03:15.337464 2026] [:error] [pid 24314:tid 24328] [client 72.146.8.102:6020] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "acxgw5RF3FCzjmMUX5b1pAAAAQo"]
[Wed Apr 01 08:03:15.828405 2026] [:error] [pid 24314:tid 24338] [client 72.146.8.102:5636] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "acxgw5RF3FCzjmMUX5b1pwAAARQ"]
[Wed Apr 01 08:03:16.311038 2026] [:error] [pid 23715:tid 23780] [client 72.146.8.102:5665] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "acxgxK-REzOruNbiT9xzZgAAAFM"]
[Wed Apr 01 08:03:16.787650 2026] [:error] [pid 23715:tid 23770] [client 72.146.8.102:6026] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "acxgxK-REzOruNbiT9xzaAAAAEk"]
[Wed Apr 01 08:03:17.266315 2026] [:error] [pid 23819:tid 23825] [client 72.146.8.102:6113] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "acxgxddfUS_37wFAM771mAAAAMM"]
[Wed Apr 01 08:03:17.738744 2026] [:error] [pid 24314:tid 24339] [client 72.146.8.102:6045] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uang.php"] [unique_id "acxgxZRF3FCzjmMUX5b1qgAAARU"]
[Wed Apr 01 08:03:18.217529 2026] [:error] [pid 23819:tid 23837] [client 72.146.8.102:6108] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uang.php"] [unique_id "acxgxtdfUS_37wFAM771mgAAAM8"]
[Wed Apr 01 08:03:18.692550 2026] [:error] [pid 23716:tid 23795] [client 72.146.8.102:5953] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uang.php"] [unique_id "acxgxnVtFUg_mx-RYb50fgAAAIc"]
[Wed Apr 01 08:03:19.169904 2026] [:error] [pid 23716:tid 23812] [client 72.146.8.102:6142] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uang.php"] [unique_id "acxgx3VtFUg_mx-RYb50gAAAAJg"]
[Wed Apr 01 08:03:19.639735 2026] [:error] [pid 23819:tid 23829] [client 72.146.8.102:6118] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/save.php"] [unique_id "acxgx9dfUS_37wFAM771ngAAAMc"]
[Wed Apr 01 08:03:20.110523 2026] [:error] [pid 24314:tid 24335] [client 72.146.8.102:6029] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/save.php"] [unique_id "acxgyJRF3FCzjmMUX5b1sAAAARE"]
[Wed Apr 01 08:03:20.581244 2026] [:error] [pid 23819:tid 23836] [client 72.146.8.102:6132] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/save.php"] [unique_id "acxgyNdfUS_37wFAM771oAAAAM4"]
[Wed Apr 01 08:03:21.045813 2026] [:error] [pid 23714:tid 23750] [client 72.146.8.102:6138] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/save.php"] [unique_id "acxgyUHxDDU2ETcG9DQEvwAAABA"]
[Wed Apr 01 08:03:21.517763 2026] [:error] [pid 24348:tid 24401] [client 72.146.8.102:5674] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acxgyW0Vs69Y5nF1HA_1LAAAAZY"]
[Wed Apr 01 08:03:21.987754 2026] [:error] [pid 23715:tid 23770] [client 72.146.8.102:6050] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acxgya-REzOruNbiT9xzdAAAAEk"]
[Wed Apr 01 08:03:22.457672 2026] [:error] [pid 23715:tid 23767] [client 72.146.8.102:5680] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acxgyq-REzOruNbiT9xzdQAAAEY"]
[Wed Apr 01 08:03:22.928168 2026] [:error] [pid 23715:tid 23761] [client 72.146.8.102:6033] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "acxgyq-REzOruNbiT9xzdwAAAEA"]
[Wed Apr 01 08:03:23.401533 2026] [:error] [pid 23714:tid 23744] [client 72.146.8.102:6018] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xs.php"] [unique_id "acxgy0HxDDU2ETcG9DQEygAAAAo"]
[Wed Apr 01 08:03:23.870340 2026] [:error] [pid 23715:tid 23782] [client 72.146.8.102:5688] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xs.php"] [unique_id "acxgy6-REzOruNbiT9xzfAAAAFU"]
[Wed Apr 01 08:03:24.338290 2026] [:error] [pid 24314:tid 24330] [client 72.146.8.102:6038] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xs.php"] [unique_id "acxgzJRF3FCzjmMUX5b1tgAAAQw"]
[Wed Apr 01 08:03:24.804635 2026] [:error] [pid 23716:tid 23807] [client 72.146.8.102:6123] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xs.php"] [unique_id "acxgzHVtFUg_mx-RYb50hAAAAJM"]
[Wed Apr 01 08:03:25.269453 2026] [:error] [pid 23715:tid 23762] [client 72.146.8.102:6041] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "acxgza-REzOruNbiT9xzgAAAAEE"]
[Wed Apr 01 08:03:25.740921 2026] [:error] [pid 23716:tid 23796] [client 72.146.8.102:6126] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "acxgzXVtFUg_mx-RYb50hgAAAIg"]
[Wed Apr 01 08:03:26.216084 2026] [:error] [pid 23714:tid 23736] [client 72.146.8.102:6024] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "acxgzkHxDDU2ETcG9DQE0QAAAAI"]
[Wed Apr 01 08:03:26.684628 2026] [:error] [pid 23714:tid 23753] [client 72.146.8.102:6107] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "acxgzkHxDDU2ETcG9DQE1QAAABM"]
[Wed Apr 01 08:03:27.164221 2026] [:error] [pid 23715:tid 23761] [client 72.146.8.102:6131] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acxgz6-REzOruNbiT9xzggAAAEA"]
[Wed Apr 01 08:03:27.631093 2026] [:error] [pid 23715:tid 23768] [client 72.146.8.102:6032] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acxgz6-REzOruNbiT9xzhQAAAEc"]
[Wed Apr 01 08:03:28.105252 2026] [:error] [pid 23715:tid 23766] [client 72.146.8.102:6043] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acxg0K-REzOruNbiT9xziwAAAEU"]
[Wed Apr 01 08:03:28.577712 2026] [:error] [pid 24314:tid 24341] [client 72.146.8.102:6120] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acxg0JRF3FCzjmMUX5b1uAAAARc"]
[Wed Apr 01 08:03:29.049355 2026] [:error] [pid 24348:tid 24390] [client 72.146.8.102:6106] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acxg0W0Vs69Y5nF1HA_1MAAAAYs"]
[Wed Apr 01 08:03:29.536114 2026] [:error] [pid 24348:tid 24397] [client 72.146.8.102:6028] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acxg0W0Vs69Y5nF1HA_1MwAAAZI"]
[Wed Apr 01 08:03:30.002743 2026] [:error] [pid 23714:tid 23754] [client 72.146.8.102:6074] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acxg0kHxDDU2ETcG9DQE2gAAABQ"]
[Wed Apr 01 08:03:30.473806 2026] [:error] [pid 23714:tid 23743] [client 72.146.8.102:5955] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acxg0kHxDDU2ETcG9DQE4wAAAAk"]
[Wed Apr 01 08:03:30.970253 2026] [:error] [pid 23714:tid 23754] [client 72.146.8.102:5661] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acxg0kHxDDU2ETcG9DQE5wAAABQ"]
[Wed Apr 01 08:03:31.443153 2026] [:error] [pid 23715:tid 23766] [client 72.146.8.102:6067] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acxg06-REzOruNbiT9xzkQAAAEU"]
[Wed Apr 01 08:03:31.908194 2026] [:error] [pid 23714:tid 23746] [client 72.146.8.102:5646] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acxg00HxDDU2ETcG9DQE8gAAAAw"]
[Wed Apr 01 08:03:32.389915 2026] [:error] [pid 23819:tid 23834] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Wed Apr 01 08:03:32.626176 2026] [:error] [pid 23819:tid 23824] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Wed Apr 01 08:03:32.863007 2026] [:error] [pid 23819:tid 23823] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/sweg.php
[Wed Apr 01 08:03:33.099609 2026] [:error] [pid 23819:tid 23833] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/xpwer1.php
[Wed Apr 01 08:03:33.335579 2026] [:error] [pid 23819:tid 23827] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/ws40.php
[Wed Apr 01 08:03:33.572153 2026] [:error] [pid 23819:tid 23838] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Wed Apr 01 08:03:33.806784 2026] [:error] [pid 23819:tid 23840] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/awh.php
[Wed Apr 01 08:03:34.043281 2026] [:error] [pid 23819:tid 23825] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/shellerr.php
[Wed Apr 01 08:03:34.291276 2026] [:error] [pid 23819:tid 23831] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-scanner.php
[Wed Apr 01 08:03:34.526840 2026] [:error] [pid 23819:tid 23837] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Wed Apr 01 08:03:35.001620 2026] [:error] [pid 23819:tid 23837] [client 72.146.8.102:5651] File does not exist: /usr/local/apache/htdocs/suspended-page/to.php
[Wed Apr 01 08:03:35.234554 2026] [:error] [pid 23819:tid 23822] [client 72.146.8.102:5651] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acxg19dfUS_37wFAM771rwAAAMA"]
[Wed Apr 01 08:03:35.703794 2026] [:error] [pid 23714:tid 23747] [client 72.146.8.102:5632] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acxg10HxDDU2ETcG9DQFBQAAAA0"]
[Wed Apr 01 08:03:36.188973 2026] [:error] [pid 23714:tid 23746] [client 72.146.8.102:6023] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acxg2EHxDDU2ETcG9DQFCQAAAAw"]
[Wed Apr 01 08:03:36.668071 2026] [:error] [pid 24348:tid 24402] [client 72.146.8.102:6136] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acxg2G0Vs69Y5nF1HA_1OwAAAZc"]
[Wed Apr 01 08:03:37.144625 2026] [:error] [pid 24314:tid 24342] [client 72.146.8.102:6137] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acxg2ZRF3FCzjmMUX5b1ugAAARg"]
[Wed Apr 01 08:03:37.636569 2026] [:error] [pid 24314:tid 24320] [client 72.146.8.102:5659] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acxg2ZRF3FCzjmMUX5b1vAAAAQI"]
[Wed Apr 01 08:03:38.111751 2026] [:error] [pid 24314:tid 24340] [client 72.146.8.102:5681] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acxg2pRF3FCzjmMUX5b1vQAAARY"]
[Wed Apr 01 08:03:38.580091 2026] [:error] [pid 23715:tid 23771] [client 72.146.8.102:6073] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acxg2q-REzOruNbiT9xzpQAAAEo"]
[Wed Apr 01 08:03:39.047881 2026] [:error] [pid 23715:tid 23768] [client 72.146.8.102:6063] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acxg26-REzOruNbiT9xzpgAAAEc"]
[Wed Apr 01 08:03:39.527011 2026] [:error] [pid 23714:tid 23741] [client 72.146.8.102:6070] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acxg20HxDDU2ETcG9DQFFAAAAAc"]
[Wed Apr 01 08:03:40.001731 2026] [:error] [pid 24348:tid 24394] [client 72.146.8.102:6127] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acxg3G0Vs69Y5nF1HA_1QAAAAY8"]
[Wed Apr 01 08:03:40.476885 2026] [:error] [pid 23715:tid 23778] [client 72.146.8.102:5970] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acxg3K-REzOruNbiT9xzqgAAAFE"]
[Wed Apr 01 08:03:40.945331 2026] [:error] [pid 23715:tid 23780] [client 72.146.8.102:5658] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acxg3K-REzOruNbiT9xztAAAAFM"]
[Wed Apr 01 08:03:41.415655 2026] [:error] [pid 23714:tid 23742] [client 72.146.8.102:6048] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acxg3UHxDDU2ETcG9DQFFwAAAAg"]
[Wed Apr 01 08:03:41.888507 2026] [:error] [pid 23714:tid 23753] [client 72.146.8.102:6056] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acxg3UHxDDU2ETcG9DQFHgAAABM"]
[Wed Apr 01 08:03:42.358333 2026] [:error] [pid 23714:tid 23754] [client 72.146.8.102:6034] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acxg3kHxDDU2ETcG9DQFIAAAABQ"]
[Wed Apr 01 08:03:42.838067 2026] [:error] [pid 23715:tid 23769] [client 72.146.8.102:6075] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "acxg3q-REzOruNbiT9xzywAAAEg"]
[Wed Apr 01 08:03:43.312542 2026] [:error] [pid 23714:tid 23742] [client 72.146.8.102:6069] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "acxg30HxDDU2ETcG9DQFJwAAAAg"]
[Wed Apr 01 08:03:43.780625 2026] [:error] [pid 23714:tid 23744] [client 72.146.8.102:6103] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "acxg30HxDDU2ETcG9DQFKgAAAAo"]
[Wed Apr 01 08:03:44.258216 2026] [:error] [pid 23714:tid 23753] [client 72.146.8.102:6054] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "acxg4EHxDDU2ETcG9DQFLgAAABM"]
[Wed Apr 01 08:03:44.748380 2026] [:error] [pid 23714:tid 23741] [client 72.146.8.102:6062] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classgoto24.php"] [unique_id "acxg4EHxDDU2ETcG9DQFMgAAAAc"]
[Wed Apr 01 08:03:45.218571 2026] [:error] [pid 23714:tid 23742] [client 72.146.8.102:6076] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classgoto24.php"] [unique_id "acxg4UHxDDU2ETcG9DQFOAAAAAg"]
[Wed Apr 01 08:03:45.693992 2026] [:error] [pid 23714:tid 23756] [client 72.146.8.102:6125] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classgoto24.php"] [unique_id "acxg4UHxDDU2ETcG9DQFPAAAABY"]
[Wed Apr 01 08:03:46.175915 2026] [:error] [pid 23714:tid 23751] [client 72.146.8.102:6051] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classgoto24.php"] [unique_id "acxg4kHxDDU2ETcG9DQFPgAAABE"]
[Wed Apr 01 08:03:46.661082 2026] [:error] [pid 23715:tid 23782] [client 72.146.8.102:5977] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "acxg4q-REzOruNbiT9xzzgAAAFU"]
[Wed Apr 01 08:03:47.136732 2026] [:error] [pid 24314:tid 24333] [client 72.146.8.102:5995] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "acxg45RF3FCzjmMUX5b1wAAAAQ8"]
[Wed Apr 01 08:03:47.630729 2026] [:error] [pid 23714:tid 23749] [client 72.146.8.102:5996] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "acxg40HxDDU2ETcG9DQFQgAAAA8"]
[Wed Apr 01 08:03:48.106292 2026] [:error] [pid 23714:tid 23742] [client 72.146.8.102:5998] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "acxg5EHxDDU2ETcG9DQFRgAAAAg"]
[Wed Apr 01 08:03:48.577017 2026] [:error] [pid 24314:tid 24323] [client 72.146.8.102:5966] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws43.php"] [unique_id "acxg5JRF3FCzjmMUX5b1wwAAAQU"]
[Wed Apr 01 08:03:49.053809 2026] [:error] [pid 23715:tid 23769] [client 72.146.8.102:6082] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws43.php"] [unique_id "acxg5a-REzOruNbiT9xz1QAAAEg"]
[Wed Apr 01 08:03:49.520977 2026] [:error] [pid 23716:tid 23804] [client 72.146.8.102:6064] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws43.php"] [unique_id "acxg5XVtFUg_mx-RYb50jwAAAJA"]
[Wed Apr 01 08:03:49.989084 2026] [:error] [pid 23716:tid 23812] [client 72.146.8.102:5654] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws43.php"] [unique_id "acxg5XVtFUg_mx-RYb50kgAAAJg"]
[Wed Apr 01 08:03:50.458872 2026] [:error] [pid 24348:tid 24382] [client 72.146.8.102:5990] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "acxg5m0Vs69Y5nF1HA_1SAAAAYM"]
[Wed Apr 01 08:03:50.926538 2026] [:error] [pid 24348:tid 24402] [client 72.146.8.102:6068] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "acxg5m0Vs69Y5nF1HA_1SQAAAZc"]
[Wed Apr 01 08:03:51.400996 2026] [:error] [pid 23715:tid 23765] [client 72.146.8.102:5903] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "acxg56-REzOruNbiT9xz2QAAAEQ"]
[Wed Apr 01 08:03:51.884038 2026] [:error] [pid 23715:tid 23782] [client 72.146.8.102:6140] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gec.php"] [unique_id "acxg56-REzOruNbiT9xz3AAAAFU"]
[Wed Apr 01 08:03:52.358802 2026] [:error] [pid 23819:tid 23827] [client 72.146.8.102:6010] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acxg6NdfUS_37wFAM771uwAAAMU"]
[Wed Apr 01 08:03:52.824612 2026] [:error] [pid 23715:tid 23771] [client 72.146.8.102:6002] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acxg6K-REzOruNbiT9xz4AAAAEo"]
[Wed Apr 01 08:03:53.293231 2026] [:error] [pid 24348:tid 24384] [client 72.146.8.102:5907] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acxg6W0Vs69Y5nF1HA_1SwAAAYU"]
[Wed Apr 01 08:03:53.762561 2026] [:error] [pid 23715:tid 23780] [client 72.146.8.102:5961] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "acxg6a-REzOruNbiT9xz4gAAAFM"]
[Wed Apr 01 08:03:54.237757 2026] [:error] [pid 23715:tid 23785] [client 72.146.8.102:6007] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acxg6q-REzOruNbiT9xz4wAAAFg"]
[Wed Apr 01 08:03:54.710113 2026] [:error] [pid 23714:tid 23755] [client 72.146.8.102:5964] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acxg6kHxDDU2ETcG9DQFTAAAABU"]
[Wed Apr 01 08:03:55.188546 2026] [:error] [pid 23714:tid 23746] [client 72.146.8.102:6057] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acxg60HxDDU2ETcG9DQFTQAAAAw"]
[Wed Apr 01 08:03:55.655328 2026] [:error] [pid 23714:tid 23744] [client 72.146.8.102:5938] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "acxg60HxDDU2ETcG9DQFTwAAAAo"]
[Wed Apr 01 08:03:56.126973 2026] [:error] [pid 23714:tid 23747] [client 72.146.8.102:5980] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "acxg7EHxDDU2ETcG9DQFUAAAAA0"]
[Wed Apr 01 08:03:56.600446 2026] [:error] [pid 23715:tid 23765] [client 72.146.8.102:5898] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "acxg7K-REzOruNbiT9xz6AAAAEQ"]
[Wed Apr 01 08:03:57.069767 2026] [:error] [pid 23715:tid 23776] [client 72.146.8.102:6079] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "acxg7a-REzOruNbiT9xz7AAAAE8"]
[Wed Apr 01 08:03:57.540532 2026] [:error] [pid 23715:tid 23781] [client 72.146.8.102:5978] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "acxg7a-REzOruNbiT9xz7wAAAFQ"]
[Wed Apr 01 08:03:58.005092 2026] [:error] [pid 23715:tid 23769] [client 72.146.8.102:6071] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acxg7q-REzOruNbiT9xz8gAAAEg"]
[Wed Apr 01 08:03:58.473414 2026] [:error] [pid 23715:tid 23770] [client 72.146.8.102:5694] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acxg7q-REzOruNbiT9xz9AAAAEk"]
[Wed Apr 01 08:03:58.954320 2026] [:error] [pid 23819:tid 23825] [client 72.146.8.102:6134] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acxg7tdfUS_37wFAM771vQAAAMM"]
[Wed Apr 01 08:03:59.434963 2026] [:error] [pid 23715:tid 23776] [client 72.146.8.102:5889] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "acxg76-REzOruNbiT9xz-wAAAE8"]
[Wed Apr 01 08:03:59.911023 2026] [:error] [pid 23714:tid 23740] [client 72.146.8.102:6053] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "acxg70HxDDU2ETcG9DQFUwAAAAY"]
[Wed Apr 01 08:04:00.387321 2026] [:error] [pid 23714:tid 23741] [client 72.146.8.102:6006] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "acxg8EHxDDU2ETcG9DQFVgAAAAc"]
[Wed Apr 01 08:04:00.854668 2026] [:error] [pid 23714:tid 23752] [client 72.146.8.102:5890] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "acxg8EHxDDU2ETcG9DQFWAAAABI"]
[Wed Apr 01 08:04:01.329845 2026] [:error] [pid 23715:tid 23779] [client 72.146.8.102:5666] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "acxg8a-REzOruNbiT9x0AAAAAFI"]
[Wed Apr 01 08:04:01.814543 2026] [:error] [pid 23714:tid 23746] [client 72.146.8.102:6040] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acxg8UHxDDU2ETcG9DQFWgAAAAw"]
[Wed Apr 01 08:04:02.288610 2026] [:error] [pid 23714:tid 23748] [client 72.146.8.102:6042] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acxg8kHxDDU2ETcG9DQFXgAAAA4"]
[Wed Apr 01 08:04:02.766706 2026] [:error] [pid 23714:tid 23740] [client 72.146.8.102:5982] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acxg8kHxDDU2ETcG9DQFYAAAAAY"]
[Wed Apr 01 08:04:03.247958 2026] [:error] [pid 23714:tid 23757] [client 72.146.8.102:5952] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acxg80HxDDU2ETcG9DQFZAAAABc"]
[Wed Apr 01 08:04:03.724031 2026] [:error] [pid 23714:tid 23746] [client 72.146.8.102:6135] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acxg80HxDDU2ETcG9DQFawAAAAw"]
[Wed Apr 01 08:04:04.197586 2026] [:error] [pid 23714:tid 23739] [client 72.146.8.102:5827] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acxg9EHxDDU2ETcG9DQFbAAAAAU"]
[Wed Apr 01 08:04:04.668119 2026] [:error] [pid 23714:tid 23749] [client 72.146.8.102:5667] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acxg9EHxDDU2ETcG9DQFbwAAAA8"]
[Wed Apr 01 08:04:05.138166 2026] [:error] [pid 24346:tid 24352] [client 72.146.8.102:5643] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acxg9bc1l8kg9MhGHIKf8QAAAUA"]
[Wed Apr 01 08:04:05.608818 2026] [:error] [pid 23714:tid 23743] [client 72.146.8.102:6022] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acxg9UHxDDU2ETcG9DQFcQAAAAk"]
[Wed Apr 01 08:04:06.098573 2026] [:error] [pid 23714:tid 23750] [client 72.146.8.102:6049] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acxg9kHxDDU2ETcG9DQFcgAAABA"]
[Wed Apr 01 08:04:06.583002 2026] [:error] [pid 23714:tid 23744] [client 72.146.8.102:5894] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acxg9kHxDDU2ETcG9DQFdQAAAAo"]
[Wed Apr 01 08:04:07.056870 2026] [:error] [pid 23716:tid 23797] [client 72.146.8.102:5988] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acxg93VtFUg_mx-RYb50mQAAAIk"]
[Wed Apr 01 08:04:07.537899 2026] [:error] [pid 23714:tid 23749] [client 72.146.8.102:5956] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acxg90HxDDU2ETcG9DQFeAAAAA8"]
[Wed Apr 01 08:04:08.004917 2026] [:error] [pid 23714:tid 23751] [client 72.146.8.102:6116] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acxg-EHxDDU2ETcG9DQFfQAAABE"]
[Wed Apr 01 08:04:08.476912 2026] [:error] [pid 23716:tid 23791] [client 72.146.8.102:6009] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acxg-HVtFUg_mx-RYb50mwAAAIM"]
[Wed Apr 01 08:04:08.950116 2026] [:error] [pid 24348:tid 24384] [client 72.146.8.102:6031] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acxg-G0Vs69Y5nF1HA_1VgAAAYU"]
[Wed Apr 01 08:04:09.420414 2026] [:error] [pid 24348:tid 24394] [client 72.146.8.102:6124] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acxg-W0Vs69Y5nF1HA_1WQAAAY8"]
[Wed Apr 01 08:04:09.897245 2026] [:error] [pid 23714:tid 23735] [client 72.146.8.102:5647] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acxg-UHxDDU2ETcG9DQFfwAAAAE"]
[Wed Apr 01 08:04:10.376324 2026] [:error] [pid 23716:tid 23788] [client 72.146.8.102:6019] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acxg-nVtFUg_mx-RYb50nAAAAIA"]
[Wed Apr 01 08:04:10.841564 2026] [:error] [pid 23716:tid 23804] [client 72.146.8.102:6037] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acxg-nVtFUg_mx-RYb50nQAAAJA"]
[Wed Apr 01 08:04:11.311109 2026] [:error] [pid 24314:tid 24323] [client 72.146.8.102:6122] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "acxg-5RF3FCzjmMUX5b10AAAAQU"]
[Wed Apr 01 08:04:11.779884 2026] [:error] [pid 23716:tid 23795] [client 72.146.8.102:5944] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "acxg-3VtFUg_mx-RYb50nwAAAIc"]
[Wed Apr 01 08:04:12.249410 2026] [:error] [pid 23716:tid 23802] [client 72.146.8.102:5960] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "acxg_HVtFUg_mx-RYb50ogAAAI4"]
[Wed Apr 01 08:04:12.716787 2026] [:error] [pid 23715:tid 23771] [client 72.146.8.102:6060] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "acxg_K-REzOruNbiT9x0DgAAAEo"]
[Wed Apr 01 08:04:13.184461 2026] [:error] [pid 23715:tid 23761] [client 72.146.8.102:5974] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acxg_a-REzOruNbiT9x0EAAAAEA"]
[Wed Apr 01 08:04:13.666253 2026] [:error] [pid 23819:tid 23823] [client 72.146.8.102:5847] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acxg_ddfUS_37wFAM771xgAAAME"]
[Wed Apr 01 08:04:14.134490 2026] [:error] [pid 24314:tid 24341] [client 72.146.8.102:5991] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acxg_pRF3FCzjmMUX5b11gAAARc"]
[Wed Apr 01 08:04:14.603623 2026] [:error] [pid 23715:tid 23769] [client 72.146.8.102:5687] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acxg_q-REzOruNbiT9x0FwAAAEg"]
[Wed Apr 01 08:04:15.073583 2026] [:error] [pid 23715:tid 23777] [client 72.146.8.102:6077] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "acxg_6-REzOruNbiT9x0GwAAAFA"]
[Wed Apr 01 08:04:15.547713 2026] [:error] [pid 24314:tid 24320] [client 72.146.8.102:6089] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "acxg_5RF3FCzjmMUX5b11wAAAQI"]
[Wed Apr 01 08:04:16.013259 2026] [:error] [pid 23714:tid 23743] [client 72.146.8.102:5971] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "acxhAEHxDDU2ETcG9DQFhgAAAAk"]
[Wed Apr 01 08:04:16.489187 2026] [:error] [pid 23714:tid 23735] [client 72.146.8.102:5893] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "acxhAEHxDDU2ETcG9DQFiAAAAAE"]
[Wed Apr 01 08:04:16.960764 2026] [:error] [pid 24346:tid 24356] [client 72.146.8.102:6044] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acxhALc1l8kg9MhGHIKf-QAAAUQ"]
[Wed Apr 01 08:04:17.436559 2026] [:error] [pid 23819:tid 23837] [client 72.146.8.102:6037] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acxhAddfUS_37wFAM771ywAAAM8"]
[Wed Apr 01 08:04:17.908688 2026] [:error] [pid 23714:tid 23741] [client 72.146.8.102:6055] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acxhAUHxDDU2ETcG9DQFjgAAAAc"]
[Wed Apr 01 08:04:18.377886 2026] [:error] [pid 24348:tid 24403] [client 72.146.8.102:6141] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acxhAm0Vs69Y5nF1HA_1YgAAAZg"]
[Wed Apr 01 08:04:18.848023 2026] [:error] [pid 24348:tid 24382] [client 72.146.8.102:5973] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acxhAm0Vs69Y5nF1HA_1ZgAAAYM"]
[Wed Apr 01 08:04:19.318387 2026] [:error] [pid 23714:tid 23744] [client 72.146.8.102:6058] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acxhA0HxDDU2ETcG9DQFkAAAAAo"]
[Wed Apr 01 08:04:19.793900 2026] [:error] [pid 23714:tid 23734] [client 72.146.8.102:5906] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acxhA0HxDDU2ETcG9DQFkgAAAAA"]
[Wed Apr 01 08:04:20.267453 2026] [:error] [pid 24346:tid 24363] [client 72.146.8.102:5992] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acxhBLc1l8kg9MhGHIKgBwAAAUs"]
[Wed Apr 01 08:04:20.761812 2026] [:error] [pid 24346:tid 24356] [client 72.146.8.102:6004] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acxhBLc1l8kg9MhGHIKgCAAAAUQ"]
[Wed Apr 01 08:04:21.233267 2026] [:error] [pid 24348:tid 24385] [client 72.146.8.102:5900] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acxhBW0Vs69Y5nF1HA_1dQAAAYY"]
[Wed Apr 01 08:04:21.711920 2026] [:error] [pid 23714:tid 23740] [client 72.146.8.102:6052] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acxhBUHxDDU2ETcG9DQFlAAAAAY"]
[Wed Apr 01 08:04:22.190826 2026] [:error] [pid 23716:tid 23800] [client 72.146.8.102:5993] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acxhBnVtFUg_mx-RYb50owAAAIw"]
[Wed Apr 01 08:04:22.677481 2026] [:error] [pid 24346:tid 24359] [client 72.146.8.102:5899] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "acxhBrc1l8kg9MhGHIKgDwAAAUc"]
[Wed Apr 01 08:04:23.177661 2026] [:error] [pid 24346:tid 24353] [client 72.146.8.102:5914] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "acxhB7c1l8kg9MhGHIKgEAAAAUE"]
[Wed Apr 01 08:04:23.717374 2026] [:error] [pid 23715:tid 23763] [client 72.146.8.102:5910] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "acxhB6-REzOruNbiT9x0JQAAAEI"]
[Wed Apr 01 08:04:24.194317 2026] [:error] [pid 23715:tid 23767] [client 72.146.8.102:5985] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "acxhCK-REzOruNbiT9x0JgAAAEY"]
[Wed Apr 01 08:04:24.746632 2026] [:error] [pid 23714:tid 23746] [client 72.146.8.102:5957] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "acxhCEHxDDU2ETcG9DQFmwAAAAw"]
[Wed Apr 01 08:04:25.222569 2026] [:error] [pid 23714:tid 23742] [client 72.146.8.102:5962] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "acxhCUHxDDU2ETcG9DQFnQAAAAg"]
[Wed Apr 01 08:04:25.709912 2026] [:error] [pid 24346:tid 24375] [client 72.146.8.102:6078] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "acxhCbc1l8kg9MhGHIKgEgAAAVc"]
[Wed Apr 01 08:04:26.182030 2026] [:error] [pid 24346:tid 24370] [client 72.146.8.102:5948] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "acxhCrc1l8kg9MhGHIKgFQAAAVI"]
[Wed Apr 01 08:04:26.667509 2026] [:error] [pid 24346:tid 24376] [client 72.146.8.102:5975] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acxhCrc1l8kg9MhGHIKgFgAAAVg"]
[Wed Apr 01 08:04:27.150200 2026] [:error] [pid 24348:tid 24392] [client 72.146.8.102:5999] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acxhC20Vs69Y5nF1HA_1fAAAAY0"]
[Wed Apr 01 08:04:27.627530 2026] [:error] [pid 23714:tid 23745] [client 72.146.8.102:5867] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acxhC0HxDDU2ETcG9DQFowAAAAs"]
[Wed Apr 01 08:04:28.120047 2026] [:error] [pid 24314:tid 24318] [client 72.146.8.102:5896] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acxhDJRF3FCzjmMUX5b13gAAAQA"]
[Wed Apr 01 08:04:28.590390 2026] [:error] [pid 24346:tid 24359] [client 72.146.8.102:5939] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "acxhDLc1l8kg9MhGHIKgFwAAAUc"]
[Wed Apr 01 08:04:29.059076 2026] [:error] [pid 23714:tid 23734] [client 72.146.8.102:5969] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "acxhDUHxDDU2ETcG9DQFpgAAAAA"]
[Wed Apr 01 08:04:29.549699 2026] [:error] [pid 23714:tid 23756] [client 72.146.8.102:5983] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "acxhDUHxDDU2ETcG9DQFqwAAABY"]
[Wed Apr 01 08:04:30.017319 2026] [:error] [pid 23714:tid 23738] [client 72.146.8.102:5840] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "acxhDkHxDDU2ETcG9DQFrwAAAAQ"]
[Wed Apr 01 08:04:30.483108 2026] [:error] [pid 23716:tid 23798] [client 72.146.8.102:5888] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "acxhDnVtFUg_mx-RYb50pAAAAIo"]
[Wed Apr 01 08:04:30.952443 2026] [:error] [pid 23714:tid 23746] [client 72.146.8.102:6013] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "acxhDkHxDDU2ETcG9DQFtQAAAAw"]
[Wed Apr 01 08:04:31.421999 2026] [:error] [pid 24346:tid 24358] [client 72.146.8.102:5981] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "acxhD7c1l8kg9MhGHIKgGQAAAUY"]
[Wed Apr 01 08:04:31.901482 2026] [:error] [pid 24348:tid 24386] [client 72.146.8.102:6014] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "acxhD20Vs69Y5nF1HA_1hAAAAYc"]
[Wed Apr 01 08:04:32.375919 2026] [:error] [pid 24314:tid 24341] [client 72.146.8.102:6011] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "acxhEJRF3FCzjmMUX5b14gAAARc"]
[Wed Apr 01 08:04:32.849556 2026] [:error] [pid 23715:tid 23761] [client 72.146.8.102:5983] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "acxhEK-REzOruNbiT9x0MQAAAEA"]
[Wed Apr 01 08:04:33.324877 2026] [:error] [pid 23715:tid 23765] [client 72.146.8.102:5891] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "acxhEa-REzOruNbiT9x0NQAAAEQ"]
[Wed Apr 01 08:04:33.792651 2026] [:error] [pid 24346:tid 24353] [client 72.146.8.102:5972] [client 72.146.8.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "acxhEbc1l8kg9MhGHIKgHAAAAUE"]
[Wed Apr 01 08:04:34.271749 2026] [:error] [pid 23819:tid 23845] [client 72.146.8.102:6001] File does not exist: /usr/local/apache/htdocs/suspended-page/20.php
[Wed Apr 01 08:04:34.509099 2026] [:error] [pid 23819:tid 23846] [client 72.146.8.102:6001] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Wed Apr 01 08:04:34.748724 2026] [:error] [pid 23819:tid 23838] [client 72.146.8.102:6001] File does not exist: /usr/local/apache/htdocs/suspended-page/c.php
[Wed Apr 01 08:04:34.987121 2026] [:error] [pid 23819:tid 23840] [client 72.146.8.102:6001] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Wed Apr 01 08:04:35.226731 2026] [:error] [pid 23819:tid 23827] [client 72.146.8.102:6001] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Wed Apr 01 08:04:35.464697 2026] [:error] [pid 23819:tid 23825] [client 72.146.8.102:6001] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Wed Apr 01 15:18:23.609676 2026] [:error] [pid 8909:tid 8946] [client 37.60.244.72:60303] [client 37.60.244.72] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.60.244.72, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aczGvzvP_a0662gDl6DFWgAAAMU"]
[Wed Apr 01 15:18:23.613114 2026] [:error] [pid 8909:tid 8946] [client 37.60.244.72:60303] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Apr 01 18:39:26.019985 2026] [:error] [pid 17856:tid 17859] [client 20.91.245.108:9683] File does not exist: /usr/local/apache/htdocs/suspended-page/fffff.php
[Wed Apr 01 18:39:26.287194 2026] [:error] [pid 17856:tid 17881] [client 20.91.245.108:9683] File does not exist: /usr/local/apache/htdocs/suspended-page/xdd.php
[Wed Apr 01 18:39:26.554390 2026] [:error] [pid 17856:tid 17876] [client 20.91.245.108:9683] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Wed Apr 01 18:39:26.821856 2026] [:error] [pid 17856:tid 17867] [client 20.91.245.108:9683] File does not exist: /usr/local/apache/htdocs/suspended-page/wdone1.php
[Wed Apr 01 18:39:27.089357 2026] [:error] [pid 17856:tid 17861] [client 20.91.245.108:9683] File does not exist: /usr/local/apache/htdocs/suspended-page/ws79.php
[Wed Apr 01 18:39:27.356346 2026] [:error] [pid 17856:tid 17878] [client 20.91.245.108:9683] File does not exist: /usr/local/apache/htdocs/suspended-page/aee.php
[Wed Apr 01 18:39:27.629107 2026] [:error] [pid 17856:tid 17858] [client 20.91.245.108:9683] File does not exist: /usr/local/apache/htdocs/suspended-page/max.php
[Wed Apr 01 18:39:27.896431 2026] [:error] [pid 17856:tid 17871] [client 20.91.245.108:9683] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Wed Apr 01 18:39:28.169701 2026] [:error] [pid 17856:tid 17880] [client 20.91.245.108:9683] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Wed Apr 01 18:39:28.435941 2026] [:error] [pid 17856:tid 17868] [client 20.91.245.108:9683] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Wed Apr 01 18:39:28.699281 2026] [:error] [pid 17856:tid 17865] [client 20.91.245.108:9683] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-true.php"] [unique_id "acz14D7Idlm5j9frhqTULQAAAEc"]
[Wed Apr 01 18:39:29.238521 2026] [:error] [pid 8908:tid 8930] [client 20.91.245.108:9685] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-true.php"] [unique_id "acz14fkmxtJXGnLdvgBFWwAAAJE"]
[Wed Apr 01 18:39:29.838135 2026] [:error] [pid 8995:tid 9000] [client 20.91.245.108:9696] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-true.php"] [unique_id "acz14eonaBjs3qxcReecAAAAAAI"]
[Wed Apr 01 18:39:30.447458 2026] [:error] [pid 8909:tid 8949] [client 20.91.245.108:9725] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-true.php"] [unique_id "acz14jvP_a0662gDl6BGXwAAAMg"]
[Wed Apr 01 18:39:31.160481 2026] [:error] [pid 8909:tid 8958] [client 20.91.245.108:9611] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acz14zvP_a0662gDl6BGZAAAANE"]
[Wed Apr 01 18:39:31.972469 2026] [:error] [pid 8909:tid 8949] [client 20.91.245.108:9680] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acz14zvP_a0662gDl6BGaAAAAMg"]
[Wed Apr 01 18:39:32.558752 2026] [:error] [pid 8910:tid 8985] [client 20.91.245.108:9698] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acz15KJZINUcF3tYgEw7jAAAARE"]
[Wed Apr 01 18:39:33.333411 2026] [:error] [pid 8910:tid 8972] [client 20.91.245.108:9697] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws42.php"] [unique_id "acz15aJZINUcF3tYgEw7jQAAAQQ"]
[Wed Apr 01 18:39:33.984817 2026] [:error] [pid 8909:tid 8961] [client 20.91.245.108:9702] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acz15TvP_a0662gDl6BGdAAAANQ"]
[Wed Apr 01 18:39:34.641347 2026] [:error] [pid 8909:tid 8948] [client 20.91.245.108:9723] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acz15jvP_a0662gDl6BGewAAAMc"]
[Wed Apr 01 18:39:35.429949 2026] [:error] [pid 8995:tid 8998] [client 20.91.245.108:9603] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acz15-onaBjs3qxcReecAwAAAAA"]
[Wed Apr 01 18:39:36.021120 2026] [:error] [pid 17856:tid 17863] [client 20.91.245.108:9679] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "acz16D7Idlm5j9frhqTUNQAAAEU"]
[Wed Apr 01 18:39:36.632137 2026] [:error] [pid 62559:tid 62580] [client 20.91.245.108:9609] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acz16C7NKI8IaNKZFIdpnwAAAVM"]
[Wed Apr 01 18:39:37.247804 2026] [:error] [pid 17856:tid 17870] [client 20.91.245.108:9539] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acz16T7Idlm5j9frhqTUPQAAAEw"]
[Wed Apr 01 18:39:37.866044 2026] [:error] [pid 8909:tid 8961] [client 20.91.245.108:9722] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acz16TvP_a0662gDl6BGhAAAANQ"]
[Wed Apr 01 18:39:38.481749 2026] [:error] [pid 17856:tid 17867] [client 20.91.245.108:9701] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "acz16j7Idlm5j9frhqTUQAAAAEk"]
[Wed Apr 01 18:39:39.165095 2026] [:error] [pid 8908:tid 8925] [client 20.91.245.108:9700] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acz16_kmxtJXGnLdvgBFZgAAAIw"]
[Wed Apr 01 18:39:39.973494 2026] [:error] [pid 17856:tid 17866] [client 20.91.245.108:9706] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acz16z7Idlm5j9frhqTUQwAAAEg"]
[Wed Apr 01 18:39:40.535003 2026] [:error] [pid 8909:tid 8951] [client 20.91.245.108:9640] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acz17DvP_a0662gDl6BGkwAAAMo"]
[Wed Apr 01 18:39:41.207442 2026] [:error] [pid 8995:tid 9016] [client 20.91.245.108:9726] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "acz17eonaBjs3qxcReecBgAAABI"]
[Wed Apr 01 18:39:41.788178 2026] [:error] [pid 17856:tid 17863] [client 20.91.245.108:9694] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acz17T7Idlm5j9frhqTURAAAAEU"]
[Wed Apr 01 18:39:42.379168 2026] [:error] [pid 62559:tid 62579] [client 20.91.245.108:9677] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acz17i7NKI8IaNKZFIdpogAAAVI"]
[Wed Apr 01 18:39:42.937969 2026] [:error] [pid 17856:tid 17868] [client 20.91.245.108:9604] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acz17j7Idlm5j9frhqTUSQAAAEo"]
[Wed Apr 01 18:39:43.568516 2026] [:error] [pid 8909:tid 8956] [client 20.91.245.108:9717] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/north1.php"] [unique_id "acz17zvP_a0662gDl6BGngAAAM8"]
[Wed Apr 01 18:39:44.306638 2026] [:error] [pid 8908:tid 8931] [client 20.91.245.108:9662] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eee.php"] [unique_id "acz18PkmxtJXGnLdvgBFbAAAAJI"]
[Wed Apr 01 18:39:45.166864 2026] [:error] [pid 8909:tid 8944] [client 20.91.245.108:9600] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eee.php"] [unique_id "acz18TvP_a0662gDl6BGpgAAAMM"]
[Wed Apr 01 18:39:46.072503 2026] [:error] [pid 8909:tid 8954] [client 20.91.245.108:9718] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eee.php"] [unique_id "acz18jvP_a0662gDl6BGrQAAAM0"]
[Wed Apr 01 18:39:46.862974 2026] [:error] [pid 8909:tid 8956] [client 20.91.245.108:9631] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eee.php"] [unique_id "acz18jvP_a0662gDl6BGsgAAAM8"]
[Wed Apr 01 18:39:47.921030 2026] [:error] [pid 8910:tid 8986] [client 20.91.245.108:9615] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acz186JZINUcF3tYgEw7mgAAARI"]
[Wed Apr 01 18:39:48.571458 2026] [:error] [pid 62559:tid 62575] [client 20.91.245.108:9669] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acz19C7NKI8IaNKZFIdppgAAAU4"]
[Wed Apr 01 18:39:49.190081 2026] [:error] [pid 8909:tid 8948] [client 20.91.245.108:9695] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acz19TvP_a0662gDl6BGwwAAAMc"]
[Wed Apr 01 18:39:50.107667 2026] [:error] [pid 8909:tid 8947] [client 20.91.245.108:9634] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "acz19jvP_a0662gDl6BGxwAAAMY"]
[Wed Apr 01 18:39:51.023791 2026] [:error] [pid 62559:tid 62578] [client 20.91.245.108:9608] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acz19y7NKI8IaNKZFIdppwAAAVE"]
[Wed Apr 01 18:39:51.757770 2026] [:error] [pid 62559:tid 62576] [client 20.91.245.108:9708] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acz19y7NKI8IaNKZFIdpqgAAAU8"]
[Wed Apr 01 18:39:52.450034 2026] [:error] [pid 8908:tid 8922] [client 20.91.245.108:9692] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acz1-PkmxtJXGnLdvgBFcAAAAIk"]
[Wed Apr 01 18:39:53.294922 2026] [:error] [pid 17856:tid 17881] [client 20.91.245.108:9613] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acz1-T7Idlm5j9frhqTUVwAAAFc"]
[Wed Apr 01 18:39:53.838548 2026] [:error] [pid 8995:tid 9001] [client 20.91.245.108:9676] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acz1-eonaBjs3qxcReecEwAAAAM"]
[Wed Apr 01 18:39:54.625340 2026] [:error] [pid 8909:tid 8942] [client 20.91.245.108:9552] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acz1-jvP_a0662gDl6BG1AAAAME"]
[Wed Apr 01 18:39:55.240143 2026] [:error] [pid 62559:tid 62570] [client 20.91.245.108:9607] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acz1-y7NKI8IaNKZFIdpsAAAAUk"]
[Wed Apr 01 18:39:55.970038 2026] [:error] [pid 8909:tid 8948] [client 20.91.245.108:9719] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "acz1-zvP_a0662gDl6BG1wAAAMc"]
[Wed Apr 01 18:39:56.915790 2026] [:error] [pid 8909:tid 8943] [client 20.91.245.108:9681] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "acz1_DvP_a0662gDl6BG2QAAAMI"]
[Wed Apr 01 18:39:58.082162 2026] [:error] [pid 17856:tid 17867] [client 20.91.245.108:9616] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "acz1_j7Idlm5j9frhqTUawAAAEk"]
[Wed Apr 01 18:39:59.250460 2026] [:error] [pid 8908:tid 8927] [client 20.91.245.108:9670] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "acz1__kmxtJXGnLdvgBFpwAAAI4"]
[Wed Apr 01 18:40:00.656071 2026] [:error] [pid 62559:tid 62563] [client 20.91.245.108:9601] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "acz2AC7NKI8IaNKZFIdp4AAAAUI"]
[Wed Apr 01 18:40:03.997937 2026] [:error] [pid 17856:tid 17869] [client 20.91.245.108:9673] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "acz2Az7Idlm5j9frhqTUfQAAAEs"]
[Wed Apr 01 18:40:06.582957 2026] [:error] [pid 8910:tid 8990] [client 20.91.245.108:9602] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "acz2BqJZINUcF3tYgEw7pwAAARY"]
[Wed Apr 01 18:40:08.034523 2026] [:error] [pid 8909:tid 8951] [client 20.91.245.108:9608] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "acz2CDvP_a0662gDl6BG-gAAAMo"]
[Wed Apr 01 18:40:10.103307 2026] [:error] [pid 8909:tid 8951] [client 20.91.245.108:9674] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "acz2CjvP_a0662gDl6BHBAAAAMo"]
[Wed Apr 01 18:40:13.520295 2026] [:error] [pid 17856:tid 17871] [client 20.91.245.108:9624] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acz2DT7Idlm5j9frhqTUmgAAAE0"]
[Wed Apr 01 18:40:15.336625 2026] [:error] [pid 62559:tid 62578] [client 20.91.245.108:9688] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acz2Dy7NKI8IaNKZFIdp8QAAAVE"]
[Wed Apr 01 18:40:16.289086 2026] [:error] [pid 8995:tid 9005] [client 20.91.245.108:9705] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acz2EOonaBjs3qxcReecegAAAAc"]
[Wed Apr 01 18:40:16.948026 2026] [:error] [pid 8909:tid 8959] [client 20.91.245.108:9727] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "acz2EDvP_a0662gDl6BHDgAAANI"]
[Wed Apr 01 18:40:17.506384 2026] [:error] [pid 8909:tid 8946] [client 20.91.245.108:9687] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "acz2ETvP_a0662gDl6BHEAAAAMU"]
[Wed Apr 01 18:40:18.214702 2026] [:error] [pid 62559:tid 62582] [client 20.91.245.108:9652] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "acz2Ei7NKI8IaNKZFIdp9gAAAVU"]
[Wed Apr 01 18:40:19.120459 2026] [:error] [pid 8909:tid 8948] [client 20.91.245.108:9684] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "acz2EzvP_a0662gDl6BHGwAAAMc"]
[Wed Apr 01 18:40:20.083876 2026] [:error] [pid 8909:tid 8958] [client 20.91.245.108:9724] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "acz2FDvP_a0662gDl6BHIQAAANE"]
[Wed Apr 01 18:40:20.615157 2026] [:error] [pid 8909:tid 8960] [client 20.91.245.108:9663] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acz2FDvP_a0662gDl6BHJQAAANM"]
[Wed Apr 01 18:40:21.293763 2026] [:error] [pid 8909:tid 8958] [client 20.91.245.108:9549] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acz2FTvP_a0662gDl6BHKgAAANE"]
[Wed Apr 01 18:40:21.836926 2026] [:error] [pid 8995:tid 9001] [client 20.91.245.108:9614] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acz2FeonaBjs3qxcReecfAAAAAM"]
[Wed Apr 01 18:40:22.368832 2026] [:error] [pid 8908:tid 8934] [client 20.91.245.108:9618] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h02ugyh.php"] [unique_id "acz2FvkmxtJXGnLdvgBF5gAAAJU"]
[Wed Apr 01 18:40:22.929507 2026] [:error] [pid 8908:tid 8927] [client 20.91.245.108:9650] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acz2FvkmxtJXGnLdvgBF6gAAAI4"]
[Wed Apr 01 18:40:23.456157 2026] [:error] [pid 8909:tid 8957] [client 20.91.245.108:9678] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acz2FzvP_a0662gDl6BHNAAAANA"]
[Wed Apr 01 18:40:23.988019 2026] [:error] [pid 8909:tid 8953] [client 20.91.245.108:9653] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acz2FzvP_a0662gDl6BHOQAAAMw"]
[Wed Apr 01 18:40:24.544507 2026] [:error] [pid 8908:tid 8922] [client 20.91.245.108:9689] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ad.php"] [unique_id "acz2GPkmxtJXGnLdvgBF7gAAAIk"]
[Wed Apr 01 18:40:25.078798 2026] [:error] [pid 17856:tid 17869] [client 20.91.245.108:9612] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acz2GT7Idlm5j9frhqTUrwAAAEs"]
[Wed Apr 01 18:40:25.632029 2026] [:error] [pid 8995:tid 9000] [client 20.91.245.108:9606] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acz2GeonaBjs3qxcReecgwAAAAI"]
[Wed Apr 01 18:40:26.225381 2026] [:error] [pid 17856:tid 17861] [client 20.91.245.108:9665] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acz2Gj7Idlm5j9frhqTUtQAAAEM"]
[Wed Apr 01 18:40:26.903754 2026] [:error] [pid 8908:tid 8925] [client 20.91.245.108:9575] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z60.php"] [unique_id "acz2GvkmxtJXGnLdvgBF8QAAAIw"]
[Wed Apr 01 18:40:27.595891 2026] [:error] [pid 62559:tid 62567] [client 20.91.245.108:9619] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "acz2Gy7NKI8IaNKZFIdp-wAAAUY"]
[Wed Apr 01 18:40:28.209753 2026] [:error] [pid 8908:tid 8917] [client 20.91.245.108:9693] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Wed Apr 01 18:40:28.750550 2026] [:error] [pid 8908:tid 8928] [client 20.91.245.108:9693] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Wed Apr 01 18:40:29.047808 2026] [:error] [pid 8908:tid 8914] [client 20.91.245.108:9693] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Wed Apr 01 18:40:29.314752 2026] [:error] [pid 8908:tid 8916] [client 20.91.245.108:9693] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Wed Apr 01 18:40:29.586610 2026] [:error] [pid 8908:tid 8921] [client 20.91.245.108:9693] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Wed Apr 01 18:40:29.859511 2026] [:error] [pid 8908:tid 8936] [client 20.91.245.108:9693] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Wed Apr 01 18:40:30.127832 2026] [:error] [pid 8908:tid 8925] [client 20.91.245.108:9693] File does not exist: /usr/local/apache/htdocs/suspended-page/uang.php
[Wed Apr 01 18:40:30.400780 2026] [:error] [pid 8908:tid 8923] [client 20.91.245.108:9693] File does not exist: /usr/local/apache/htdocs/suspended-page/save.php
[Wed Apr 01 18:40:30.666506 2026] [:error] [pid 8908:tid 8932] [client 20.91.245.108:9693] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Wed Apr 01 18:40:30.932609 2026] [:error] [pid 8908:tid 8929] [client 20.91.245.108:9693] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Wed Apr 01 18:40:31.196005 2026] [:error] [pid 8908:tid 8928] [client 20.91.245.108:9693] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "acz2H_kmxtJXGnLdvgBGDAAAAI8"]
[Wed Apr 01 18:40:31.980482 2026] [:error] [pid 17856:tid 17879] [client 20.91.245.108:9633] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "acz2Hz7Idlm5j9frhqTUwwAAAFU"]
[Wed Apr 01 18:40:32.648554 2026] [:error] [pid 8908:tid 8925] [client 20.91.245.108:9686] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "acz2IPkmxtJXGnLdvgBGEwAAAIw"]
[Wed Apr 01 18:40:33.936763 2026] [:error] [pid 8909:tid 8949] [client 20.91.245.108:9626] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "acz2ITvP_a0662gDl6BHUQAAAMg"]
[Wed Apr 01 18:40:35.202125 2026] [:error] [pid 8909:tid 8945] [client 20.91.245.108:9538] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acz2IzvP_a0662gDl6BHWAAAAMQ"]
[Wed Apr 01 18:40:36.504743 2026] [:error] [pid 8909:tid 8950] [client 20.91.245.108:9709] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acz2JDvP_a0662gDl6BHYQAAAMk"]
[Wed Apr 01 18:40:37.507398 2026] [:error] [pid 8909:tid 8945] [client 20.91.245.108:9707] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acz2JTvP_a0662gDl6BHZwAAAMQ"]
[Wed Apr 01 18:40:38.222754 2026] [:error] [pid 8909:tid 8961] [client 20.91.245.108:9567] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "acz2JjvP_a0662gDl6BHbAAAANQ"]
[Wed Apr 01 18:40:38.797037 2026] [:error] [pid 8909:tid 8948] [client 20.91.245.108:9645] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acz2JjvP_a0662gDl6BHbwAAAMc"]
[Wed Apr 01 18:40:39.374485 2026] [:error] [pid 8909:tid 8949] [client 20.91.245.108:9621] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acz2JzvP_a0662gDl6BHcQAAAMg"]
[Wed Apr 01 18:40:40.508525 2026] [:error] [pid 8909:tid 8943] [client 20.91.245.108:9551] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acz2KDvP_a0662gDl6BHeAAAAMI"]
[Wed Apr 01 18:40:41.111967 2026] [:error] [pid 17856:tid 17862] [client 20.91.245.108:9712] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "acz2KT7Idlm5j9frhqTU0QAAAEQ"]
[Wed Apr 01 18:40:41.821587 2026] [:error] [pid 8909:tid 8958] [client 20.91.245.108:9715] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acz2KTvP_a0662gDl6BHfwAAANE"]
[Wed Apr 01 18:40:42.776347 2026] [:error] [pid 62559:tid 62575] [client 20.91.245.108:9571] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acz2Ki7NKI8IaNKZFIdqFgAAAU4"]
[Wed Apr 01 18:40:43.651396 2026] [:error] [pid 17856:tid 17869] [client 20.91.245.108:9675] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acz2Kz7Idlm5j9frhqTU1QAAAEs"]
[Wed Apr 01 18:40:45.086248 2026] [:error] [pid 17856:tid 17863] [client 20.91.245.108:9637] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "acz2LT7Idlm5j9frhqTU2QAAAEU"]
[Wed Apr 01 18:40:46.220920 2026] [:error] [pid 8909:tid 8952] [client 20.91.245.108:9704] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acz2LjvP_a0662gDl6BHmgAAAMs"]
[Wed Apr 01 18:40:47.071849 2026] [:error] [pid 17856:tid 17882] [client 20.91.245.108:9587] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acz2Lz7Idlm5j9frhqTU4gAAAFg"]
[Wed Apr 01 18:40:47.827194 2026] [:error] [pid 8909:tid 8948] [client 20.91.245.108:9617] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acz2LzvP_a0662gDl6BHogAAAMc"]
[Wed Apr 01 18:40:48.923050 2026] [:error] [pid 8908:tid 8927] [client 20.91.245.108:9588] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "acz2MPkmxtJXGnLdvgBGPgAAAI4"]
[Wed Apr 01 18:40:49.860187 2026] [:error] [pid 8909:tid 8948] [client 20.91.245.108:9691] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sweg.php"] [unique_id "acz2MTvP_a0662gDl6BHrQAAAMc"]
[Wed Apr 01 18:40:50.521959 2026] [:error] [pid 8909:tid 8954] [client 20.91.245.108:9711] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sweg.php"] [unique_id "acz2MjvP_a0662gDl6BHtQAAAM0"]
[Wed Apr 01 18:40:51.414401 2026] [:error] [pid 8909:tid 8944] [client 20.91.245.108:9646] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sweg.php"] [unique_id "acz2MzvP_a0662gDl6BHvQAAAMM"]
[Wed Apr 01 18:40:52.133581 2026] [:error] [pid 8909:tid 8942] [client 20.91.245.108:9671] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sweg.php"] [unique_id "acz2NDvP_a0662gDl6BHxgAAAME"]
[Wed Apr 01 18:40:52.878687 2026] [:error] [pid 17856:tid 17861] [client 20.91.245.108:9599] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpwer1.php"] [unique_id "acz2ND7Idlm5j9frhqTU6QAAAEM"]
[Wed Apr 01 18:40:53.543475 2026] [:error] [pid 62559:tid 62572] [client 20.91.245.108:9710] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpwer1.php"] [unique_id "acz2NS7NKI8IaNKZFIdqGQAAAUs"]
[Wed Apr 01 18:40:54.113808 2026] [:error] [pid 8908:tid 8916] [client 20.91.245.108:9638] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpwer1.php"] [unique_id "acz2NvkmxtJXGnLdvgBGTAAAAIM"]
[Wed Apr 01 18:40:54.671363 2026] [:error] [pid 17856:tid 17868] [client 20.91.245.108:9667] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xpwer1.php"] [unique_id "acz2Nj7Idlm5j9frhqTU8wAAAEo"]
[Wed Apr 01 18:40:55.252124 2026] [:error] [pid 8995:tid 8999] [client 20.91.245.108:9537] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws40.php"] [unique_id "acz2N-onaBjs3qxcReecnwAAAAE"]
[Wed Apr 01 18:40:55.998464 2026] [:error] [pid 8909:tid 8953] [client 20.91.245.108:9628] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws40.php"] [unique_id "acz2NzvP_a0662gDl6BH1gAAAMw"]
[Wed Apr 01 18:40:56.558659 2026] [:error] [pid 62559:tid 62569] [client 20.91.245.108:9605] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws40.php"] [unique_id "acz2OC7NKI8IaNKZFIdqHAAAAUg"]
[Wed Apr 01 18:40:57.162982 2026] [:error] [pid 8909:tid 8948] [client 20.91.245.108:9690] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws40.php"] [unique_id "acz2OTvP_a0662gDl6BH2gAAAMc"]
[Wed Apr 01 18:40:57.884913 2026] [:error] [pid 8910:tid 8989] [client 20.91.245.108:9648] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acz2OaJZINUcF3tYgEw77AAAARU"]
[Wed Apr 01 18:40:58.449844 2026] [:error] [pid 8909:tid 8943] [client 20.91.245.108:9550] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acz2OjvP_a0662gDl6BH3gAAAMI"]
[Wed Apr 01 18:40:59.020196 2026] [:error] [pid 8909:tid 8942] [client 20.91.245.108:9620] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acz2OzvP_a0662gDl6BH4QAAAME"]
[Wed Apr 01 18:41:01.017955 2026] [:error] [pid 8909:tid 8941] [client 20.91.245.108:9664] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "acz2PTvP_a0662gDl6BH7wAAAMA"]
[Wed Apr 01 18:41:01.798134 2026] [:error] [pid 8908:tid 8921] [client 20.91.245.108:9593] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acz2PfkmxtJXGnLdvgBGYQAAAIg"]
[Wed Apr 01 18:41:02.694544 2026] [:error] [pid 17856:tid 17876] [client 20.91.245.108:9643] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acz2Pj7Idlm5j9frhqTVAQAAAFI"]
[Wed Apr 01 18:41:04.441794 2026] [:error] [pid 8910:tid 8978] [client 20.91.245.108:9542] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acz2QKJZINUcF3tYgEw79QAAAQo"]
[Wed Apr 01 18:41:05.025103 2026] [:error] [pid 62559:tid 62578] [client 20.91.245.108:9660] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awh.php"] [unique_id "acz2QS7NKI8IaNKZFIdqLQAAAVE"]
[Wed Apr 01 18:41:05.667702 2026] [:error] [pid 62559:tid 62566] [client 20.91.245.108:9632] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellerr.php"] [unique_id "acz2QS7NKI8IaNKZFIdqLgAAAUU"]
[Wed Apr 01 18:41:06.303446 2026] [:error] [pid 8910:tid 8992] [client 20.91.245.108:9644] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellerr.php"] [unique_id "acz2QqJZINUcF3tYgEw7-wAAARg"]
[Wed Apr 01 18:41:07.071205 2026] [:error] [pid 8908:tid 8924] [client 20.91.245.108:9543] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellerr.php"] [unique_id "acz2Q_kmxtJXGnLdvgBGbQAAAIs"]
[Wed Apr 01 18:41:07.756989 2026] [:error] [pid 8909:tid 8953] [client 20.91.245.108:9630] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellerr.php"] [unique_id "acz2QzvP_a0662gDl6BIAQAAAMw"]
[Wed Apr 01 18:41:08.333091 2026] [:error] [pid 8908:tid 8923] [client 20.91.245.108:9610] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acz2RPkmxtJXGnLdvgBGdQAAAIo"]
[Wed Apr 01 18:41:08.898527 2026] [:error] [pid 62559:tid 62582] [client 20.91.245.108:9536] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acz2RC7NKI8IaNKZFIdqNAAAAVU"]
[Wed Apr 01 18:41:11.207474 2026] [:error] [pid 17856:tid 17876] [client 20.91.245.108:9585] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acz2Rz7Idlm5j9frhqTVGAAAAFI"]
[Wed Apr 01 18:41:12.247886 2026] [:error] [pid 8908:tid 8927] [client 20.91.245.108:9636] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-scanner.php"] [unique_id "acz2SPkmxtJXGnLdvgBGgQAAAI4"]
[Wed Apr 01 18:41:14.792810 2026] [:error] [pid 8908:tid 8935] [client 20.91.245.108:9541] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "acz2SvkmxtJXGnLdvgBGjQAAAJY"]
[Wed Apr 01 18:41:15.371445 2026] [:error] [pid 8908:tid 8931] [client 20.91.245.108:9558] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "acz2S_kmxtJXGnLdvgBGkAAAAJI"]
[Wed Apr 01 18:41:15.957317 2026] [:error] [pid 8908:tid 8920] [client 20.91.245.108:9713] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "acz2S_kmxtJXGnLdvgBGlAAAAIc"]
[Wed Apr 01 18:41:16.676703 2026] [:error] [pid 8908:tid 8921] [client 20.91.245.108:9649] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "acz2TPkmxtJXGnLdvgBGlgAAAIg"]
[Wed Apr 01 18:41:17.454473 2026] [:error] [pid 62559:tid 62578] [client 20.91.245.108:9553] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "acz2TS7NKI8IaNKZFIdqNwAAAVE"]
[Wed Apr 01 18:41:18.259985 2026] [:error] [pid 17856:tid 17877] [client 20.91.245.108:9566] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "acz2Tj7Idlm5j9frhqTVHgAAAFM"]
[Wed Apr 01 18:41:19.054296 2026] [:error] [pid 8910:tid 8983] [client 20.91.245.108:9557] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "acz2T6JZINUcF3tYgEw8BwAAAQ8"]
[Wed Apr 01 18:41:19.638464 2026] [:error] [pid 62559:tid 62579] [client 20.91.245.108:9657] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "acz2Ty7NKI8IaNKZFIdqOQAAAVI"]
[Wed Apr 01 18:41:20.442537 2026] [:error] [pid 8909:tid 8947] [client 20.91.245.108:9574] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acz2UDvP_a0662gDl6BINAAAAMY"]
[Wed Apr 01 18:41:21.673387 2026] [:error] [pid 62559:tid 62567] [client 20.91.245.108:9540] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acz2US7NKI8IaNKZFIdqPAAAAUY"]
[Wed Apr 01 18:41:22.318556 2026] [:error] [pid 8995:tid 9002] [client 20.91.245.108:9494] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acz2UuonaBjs3qxcReecwQAAAAQ"]
[Wed Apr 01 18:41:22.887907 2026] [:error] [pid 8908:tid 8918] [client 20.91.245.108:9639] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "acz2UvkmxtJXGnLdvgBGsAAAAIU"]
[Wed Apr 01 18:41:23.746559 2026] [:error] [pid 17856:tid 17870] [client 20.91.245.108:9568] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acz2Uz7Idlm5j9frhqTVIQAAAEw"]
[Wed Apr 01 18:41:24.425957 2026] [:error] [pid 17856:tid 17867] [client 20.91.245.108:9623] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acz2VD7Idlm5j9frhqTVIwAAAEk"]
[Wed Apr 01 18:41:25.209154 2026] [:error] [pid 62559:tid 62568] [client 20.91.245.108:9590] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acz2VS7NKI8IaNKZFIdqRAAAAUc"]
[Wed Apr 01 18:41:25.878798 2026] [:error] [pid 62559:tid 62566] [client 20.91.245.108:9513] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "acz2VS7NKI8IaNKZFIdqRQAAAUU"]
[Wed Apr 01 18:41:26.520798 2026] [:error] [pid 62559:tid 62562] [client 20.91.245.108:9485] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acz2Vi7NKI8IaNKZFIdqSAAAAUE"]
[Wed Apr 01 18:41:27.278300 2026] [:error] [pid 62559:tid 62571] [client 20.91.245.108:9492] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acz2Vy7NKI8IaNKZFIdqSQAAAUo"]
[Wed Apr 01 18:41:27.909546 2026] [:error] [pid 8908:tid 8921] [client 20.91.245.108:9548] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acz2V_kmxtJXGnLdvgBGvQAAAIg"]
[Wed Apr 01 18:41:28.640420 2026] [:error] [pid 8995:tid 9012] [client 20.91.245.108:9589] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "acz2WOonaBjs3qxcReecxQAAAA4"]
[Wed Apr 01 18:41:29.388390 2026] [:error] [pid 8908:tid 8932] [client 20.91.245.108:9627] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acz2WfkmxtJXGnLdvgBGxQAAAJM"]
[Wed Apr 01 18:41:29.973098 2026] [:error] [pid 8908:tid 8929] [client 20.91.245.108:9559] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "acz2WfkmxtJXGnLdvgBGyAAAAJA"]
[Wed Apr 01 18:41:30.554212 2026] [:error] [pid 8908:tid 8930] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Wed Apr 01 18:41:30.819613 2026] [:error] [pid 8908:tid 8926] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/xda.php
[Wed Apr 01 18:41:31.096325 2026] [:error] [pid 8908:tid 8927] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/classgoto24.php
[Wed Apr 01 18:41:31.380501 2026] [:error] [pid 8908:tid 8920] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Wed Apr 01 18:41:31.662383 2026] [:error] [pid 8908:tid 8925] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/ws43.php
[Wed Apr 01 18:41:31.934229 2026] [:error] [pid 8908:tid 8931] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/gec.php
[Wed Apr 01 18:41:32.217203 2026] [:error] [pid 8908:tid 8933] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Wed Apr 01 18:41:32.482476 2026] [:error] [pid 8908:tid 8930] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Wed Apr 01 18:41:32.748174 2026] [:error] [pid 8908:tid 8922] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/size.php
[Wed Apr 01 18:41:33.018754 2026] [:error] [pid 8908:tid 8924] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Wed Apr 01 18:41:33.285002 2026] [:error] [pid 8908:tid 8913] [client 20.91.245.108:9635] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Wed Apr 01 18:41:33.549155 2026] [:error] [pid 8908:tid 8918] [client 20.91.245.108:9635] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acz2XfkmxtJXGnLdvgBG4AAAAIU"]
[Wed Apr 01 18:41:34.087667 2026] [:error] [pid 8910:tid 8970] [client 20.91.245.108:9654] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acz2XqJZINUcF3tYgEw8FQAAAQI"]
[Wed Apr 01 18:41:34.619988 2026] [:error] [pid 8995:tid 9017] [client 20.91.245.108:9581] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acz2XuonaBjs3qxcReec0AAAABM"]
[Wed Apr 01 18:41:35.202936 2026] [:error] [pid 8910:tid 8973] [client 20.91.245.108:9570] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "acz2X6JZINUcF3tYgEw8HAAAAQU"]
[Wed Apr 01 18:41:35.779760 2026] [:error] [pid 8910:tid 8980] [client 20.91.245.108:9501] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acz2X6JZINUcF3tYgEw8IAAAAQw"]
[Wed Apr 01 18:41:36.421121 2026] [:error] [pid 8910:tid 8977] [client 20.91.245.108:9546] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acz2YKJZINUcF3tYgEw8JwAAAQk"]
[Wed Apr 01 18:41:37.096278 2026] [:error] [pid 62559:tid 62566] [client 20.91.245.108:9672] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acz2YS7NKI8IaNKZFIdqTQAAAUU"]
[Wed Apr 01 18:41:37.657292 2026] [:error] [pid 8908:tid 8924] [client 20.91.245.108:9720] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "acz2YfkmxtJXGnLdvgBG5wAAAIs"]
[Wed Apr 01 18:41:38.280797 2026] [:error] [pid 8908:tid 8916] [client 20.91.245.108:9651] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acz2YvkmxtJXGnLdvgBG6wAAAIM"]
[Wed Apr 01 18:41:38.985301 2026] [:error] [pid 8908:tid 8915] [client 20.91.245.108:9625] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acz2YvkmxtJXGnLdvgBG7QAAAII"]
[Wed Apr 01 18:41:39.601897 2026] [:error] [pid 8908:tid 8933] [client 20.91.245.108:9667] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acz2Y_kmxtJXGnLdvgBG8QAAAJQ"]
[Wed Apr 01 18:41:40.164667 2026] [:error] [pid 8909:tid 8943] [client 20.91.245.108:9598] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "acz2ZDvP_a0662gDl6BIXwAAAMI"]
[Wed Apr 01 18:41:40.880315 2026] [:error] [pid 17856:tid 17865] [client 20.91.245.108:9682] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acz2ZD7Idlm5j9frhqTVUwAAAEc"]
[Wed Apr 01 18:41:41.434604 2026] [:error] [pid 8909:tid 8948] [client 20.91.245.108:9486] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acz2ZTvP_a0662gDl6BIYwAAAMc"]
[Wed Apr 01 18:41:41.984176 2026] [:error] [pid 8995:tid 9004] [client 20.91.245.108:9511] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acz2ZeonaBjs3qxcReec2gAAAAY"]
[Wed Apr 01 18:41:42.563552 2026] [:error] [pid 8909:tid 8954] [client 20.91.245.108:9584] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "acz2ZjvP_a0662gDl6BIaQAAAM0"]
[Wed Apr 01 18:41:43.136064 2026] [:error] [pid 8910:tid 8973] [client 20.91.245.108:9482] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acz2Z6JZINUcF3tYgEw8NQAAAQU"]
[Wed Apr 01 18:41:43.746680 2026] [:error] [pid 62559:tid 62572] [client 20.91.245.108:9554] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acz2Zy7NKI8IaNKZFIdqVAAAAUs"]
[Wed Apr 01 18:41:44.347414 2026] [:error] [pid 8909:tid 8961] [client 20.91.245.108:9418] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acz2aDvP_a0662gDl6BIegAAANQ"]
[Wed Apr 01 18:41:44.883828 2026] [:error] [pid 62559:tid 62563] [client 20.91.245.108:9716] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acz2aC7NKI8IaNKZFIdqVQAAAUI"]
[Wed Apr 01 18:41:45.412849 2026] [:error] [pid 8910:tid 8969] [client 20.91.245.108:9647] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "acz2aaJZINUcF3tYgEw8OgAAAQE"]
[Wed Apr 01 18:41:46.051574 2026] [:error] [pid 62559:tid 62582] [client 20.91.245.108:9472] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "acz2ai7NKI8IaNKZFIdqVwAAAVU"]
[Wed Apr 01 18:41:46.680750 2026] [:error] [pid 8995:tid 9017] [client 20.91.245.108:9534] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "acz2auonaBjs3qxcReec4gAAABM"]
[Wed Apr 01 18:41:47.482350 2026] [:error] [pid 17856:tid 17862] [client 20.91.245.108:9474] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "acz2az7Idlm5j9frhqTVZQAAAEQ"]
[Wed Apr 01 18:41:48.092930 2026] [:error] [pid 8995:tid 9012] [client 20.91.245.108:9578] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acz2bOonaBjs3qxcReec6QAAAA4"]
[Wed Apr 01 18:41:48.660658 2026] [:error] [pid 8909:tid 8960] [client 20.91.245.108:9573] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acz2bDvP_a0662gDl6BIsAAAANM"]
[Wed Apr 01 18:41:49.212683 2026] [:error] [pid 17856:tid 17873] [client 20.91.245.108:9655] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acz2bT7Idlm5j9frhqTVawAAAE8"]
[Wed Apr 01 18:41:49.759193 2026] [:error] [pid 8908:tid 8924] [client 20.91.245.108:9658] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "acz2bfkmxtJXGnLdvgBHCAAAAIs"]
[Wed Apr 01 18:41:50.293167 2026] [:error] [pid 17856:tid 17864] [client 20.91.245.108:9629] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "acz2bj7Idlm5j9frhqTVbwAAAEY"]
[Wed Apr 01 18:41:50.884552 2026] [:error] [pid 8910:tid 8975] [client 20.91.245.108:9506] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "acz2bqJZINUcF3tYgEw8SAAAAQc"]
[Wed Apr 01 18:41:51.503975 2026] [:error] [pid 17856:tid 17880] [client 20.91.245.108:9545] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "acz2bz7Idlm5j9frhqTVcwAAAFY"]
[Wed Apr 01 18:41:52.087078 2026] [:error] [pid 8908:tid 8927] [client 20.91.245.108:9565] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "acz2cPkmxtJXGnLdvgBHDAAAAI4"]
[Wed Apr 01 18:41:52.620310 2026] [:error] [pid 8908:tid 8920] [client 20.91.245.108:9721] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acz2cPkmxtJXGnLdvgBHDgAAAIc"]
[Wed Apr 01 18:41:53.167618 2026] [:error] [pid 17856:tid 17877] [client 20.91.245.108:9503] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acz2cT7Idlm5j9frhqTVeAAAAFM"]
[Wed Apr 01 18:41:53.699593 2026] [:error] [pid 8909:tid 8962] [client 20.91.245.108:9410] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acz2cTvP_a0662gDl6BI5AAAANU"]
[Wed Apr 01 18:41:54.245192 2026] [:error] [pid 8909:tid 8955] [client 20.91.245.108:9491] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acz2cjvP_a0662gDl6BI5wAAAM4"]
[Wed Apr 01 18:41:54.772947 2026] [:error] [pid 8908:tid 8928] [client 20.91.245.108:9484] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acz2cvkmxtJXGnLdvgBHGQAAAI8"]
[Wed Apr 01 18:41:55.310929 2026] [:error] [pid 17856:tid 17879] [client 20.91.245.108:9530] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acz2cz7Idlm5j9frhqTVlAAAAFU"]
[Wed Apr 01 18:41:55.852307 2026] [:error] [pid 8910:tid 8976] [client 20.91.245.108:9560] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acz2c6JZINUcF3tYgEw8SgAAAQg"]
[Wed Apr 01 18:41:56.432689 2026] [:error] [pid 17856:tid 17877] [client 20.91.245.108:9642] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp3.php"] [unique_id "acz2dD7Idlm5j9frhqTVoQAAAFM"]
[Wed Apr 01 18:41:57.068784 2026] [:error] [pid 17856:tid 17871] [client 20.91.245.108:9576] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acz2dT7Idlm5j9frhqTVqAAAAE0"]
[Wed Apr 01 18:41:57.602665 2026] [:error] [pid 8909:tid 8965] [client 20.91.245.108:9496] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acz2dTvP_a0662gDl6BI9wAAANg"]
[Wed Apr 01 18:41:58.142981 2026] [:error] [pid 8909:tid 8954] [client 20.91.245.108:9583] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acz2djvP_a0662gDl6BI_AAAAM0"]
[Wed Apr 01 18:41:58.668166 2026] [:error] [pid 17856:tid 17867] [client 20.91.245.108:9493] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "acz2dj7Idlm5j9frhqTVrgAAAEk"]
[Wed Apr 01 18:41:59.197972 2026] [:error] [pid 8909:tid 8956] [client 20.91.245.108:9561] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "acz2dzvP_a0662gDl6BJAQAAAM8"]
[Wed Apr 01 18:41:59.729979 2026] [:error] [pid 8910:tid 8987] [client 20.91.245.108:9699] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "acz2d6JZINUcF3tYgEw8UgAAARM"]
[Wed Apr 01 18:42:00.323507 2026] [:error] [pid 8910:tid 8986] [client 20.91.245.108:9659] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "acz2eKJZINUcF3tYgEw8VAAAARI"]
[Wed Apr 01 18:42:00.850336 2026] [:error] [pid 8909:tid 8964] [client 20.91.245.108:9569] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "acz2eDvP_a0662gDl6BJBgAAANc"]
[Wed Apr 01 18:42:01.404388 2026] [:error] [pid 8995:tid 9011] [client 20.91.245.108:9656] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "acz2eeonaBjs3qxcReedHgAAAA0"]
[Wed Apr 01 18:42:01.965166 2026] [:error] [pid 8995:tid 9020] [client 20.91.245.108:9519] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "acz2eeonaBjs3qxcReedHwAAABY"]
[Wed Apr 01 18:42:02.503613 2026] [:error] [pid 8908:tid 8913] [client 20.91.245.108:9438] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "acz2evkmxtJXGnLdvgBHKwAAAIA"]
[Wed Apr 01 18:42:03.032042 2026] [:error] [pid 8908:tid 8937] [client 20.91.245.108:9544] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d2.php"] [unique_id "acz2e_kmxtJXGnLdvgBHLQAAAJg"]
[Wed Apr 01 18:42:03.570373 2026] [:error] [pid 62559:tid 62580] [client 20.91.245.108:9562] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acz2ey7NKI8IaNKZFIdqagAAAVM"]
[Wed Apr 01 18:42:04.102931 2026] [:error] [pid 8909:tid 8951] [client 20.91.245.108:9579] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acz2fDvP_a0662gDl6BJEAAAAMo"]
[Wed Apr 01 18:42:04.637447 2026] [:error] [pid 8909:tid 8949] [client 20.91.245.108:9641] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acz2fDvP_a0662gDl6BJEQAAAMg"]
[Wed Apr 01 18:42:05.167006 2026] [:error] [pid 8908:tid 8918] [client 20.91.245.108:9426] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc.php"] [unique_id "acz2ffkmxtJXGnLdvgBHNQAAAIU"]
[Wed Apr 01 18:42:05.700263 2026] [:error] [pid 8908:tid 8923] [client 20.91.245.108:9517] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "acz2ffkmxtJXGnLdvgBHNgAAAIo"]
[Wed Apr 01 18:42:06.227767 2026] [:error] [pid 17856:tid 17862] [client 20.91.245.108:9477] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "acz2fj7Idlm5j9frhqTVywAAAEQ"]
[Wed Apr 01 18:42:06.753369 2026] [:error] [pid 17856:tid 17876] [client 20.91.245.108:9495] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "acz2fj7Idlm5j9frhqTVzAAAAFI"]
[Wed Apr 01 18:42:07.280278 2026] [:error] [pid 17856:tid 17873] [client 20.91.245.108:9483] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "acz2fz7Idlm5j9frhqTV1AAAAE8"]
[Wed Apr 01 18:42:07.826060 2026] [:error] [pid 62559:tid 62563] [client 20.91.245.108:9510] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "acz2fy7NKI8IaNKZFIdqbQAAAUI"]
[Wed Apr 01 18:42:08.351961 2026] [:error] [pid 17856:tid 17876] [client 20.91.245.108:9512] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "acz2gD7Idlm5j9frhqTV3AAAAFI"]
[Wed Apr 01 18:42:08.930672 2026] [:error] [pid 8909:tid 8954] [client 20.91.245.108:9577] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "acz2gDvP_a0662gDl6BJLAAAAM0"]
[Wed Apr 01 18:42:09.456008 2026] [:error] [pid 8909:tid 8964] [client 20.91.245.108:9586] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "acz2gTvP_a0662gDl6BJMQAAANc"]
[Wed Apr 01 18:42:09.991292 2026] [:error] [pid 8909:tid 8955] [client 20.91.245.108:9480] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "acz2gTvP_a0662gDl6BJNQAAAM4"]
[Wed Apr 01 18:42:10.534062 2026] [:error] [pid 8909:tid 8947] [client 20.91.245.108:9481] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "acz2gjvP_a0662gDl6BJOgAAAMY"]
[Wed Apr 01 18:42:11.065840 2026] [:error] [pid 17856:tid 17881] [client 20.91.245.108:9489] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "acz2gz7Idlm5j9frhqTV4wAAAFc"]
[Wed Apr 01 18:42:11.594554 2026] [:error] [pid 17856:tid 17858] [client 20.91.245.108:9622] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "acz2gz7Idlm5j9frhqTV6QAAAEA"]
[Wed Apr 01 18:42:12.123013 2026] [:error] [pid 8909:tid 8949] [client 20.91.245.108:9572] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/20.php"] [unique_id "acz2hDvP_a0662gDl6BJQwAAAMg"]
[Wed Apr 01 18:42:12.681939 2026] [:error] [pid 17856:tid 17879] [client 20.91.245.108:9555] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/20.php"] [unique_id "acz2hD7Idlm5j9frhqTV7wAAAFU"]
[Wed Apr 01 18:42:13.215964 2026] [:error] [pid 17856:tid 17880] [client 20.91.245.108:9461] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/20.php"] [unique_id "acz2hT7Idlm5j9frhqTV9AAAAFY"]
[Wed Apr 01 18:42:13.854542 2026] [:error] [pid 17856:tid 17865] [client 20.91.245.108:9533] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/20.php"] [unique_id "acz2hT7Idlm5j9frhqTV-gAAAEc"]
[Wed Apr 01 18:42:14.392515 2026] [:error] [pid 8909:tid 8965] [client 20.91.245.108:9703] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "acz2hjvP_a0662gDl6BJTQAAANg"]
[Wed Apr 01 18:42:15.047780 2026] [:error] [pid 8909:tid 8960] [client 20.91.245.108:9666] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "acz2hzvP_a0662gDl6BJUgAAANM"]
[Wed Apr 01 18:42:15.580680 2026] [:error] [pid 8909:tid 8948] [client 20.91.245.108:9563] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "acz2hzvP_a0662gDl6BJWQAAAMc"]
[Wed Apr 01 18:42:16.116267 2026] [:error] [pid 8995:tid 9020] [client 20.91.245.108:9490] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "acz2iOonaBjs3qxcReedMAAAABY"]
[Wed Apr 01 18:42:16.659096 2026] [:error] [pid 17856:tid 17863] [client 20.91.245.108:9564] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/c.php"] [unique_id "acz2iD7Idlm5j9frhqTWBwAAAEU"]
[Wed Apr 01 18:42:17.186341 2026] [:error] [pid 8908:tid 8931] [client 20.91.245.108:9594] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/c.php"] [unique_id "acz2ifkmxtJXGnLdvgBHUAAAAJI"]
[Wed Apr 01 18:42:17.719798 2026] [:error] [pid 8910:tid 8978] [client 20.91.245.108:9528] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/c.php"] [unique_id "acz2iaJZINUcF3tYgEw8YQAAAQo"]
[Wed Apr 01 18:42:18.261549 2026] [:error] [pid 17856:tid 17860] [client 20.91.245.108:9479] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/c.php"] [unique_id "acz2ij7Idlm5j9frhqTWEAAAAEI"]
[Wed Apr 01 18:42:18.820790 2026] [:error] [pid 8995:tid 9001] [client 20.91.245.108:9526] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acz2iuonaBjs3qxcReedNgAAAAM"]
[Wed Apr 01 18:42:19.384852 2026] [:error] [pid 8908:tid 8928] [client 20.91.245.108:9509] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acz2i_kmxtJXGnLdvgBHWAAAAI8"]
[Wed Apr 01 18:42:19.923407 2026] [:error] [pid 8909:tid 8953] [client 20.91.245.108:9486] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acz2izvP_a0662gDl6BJbgAAAMw"]
[Wed Apr 01 18:42:20.463272 2026] [:error] [pid 8908:tid 8935] [client 20.91.245.108:9514] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "acz2jPkmxtJXGnLdvgBHWwAAAJY"]
[Wed Apr 01 18:42:21.010439 2026] [:error] [pid 8908:tid 8931] [client 20.91.245.108:9531] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/04.php"] [unique_id "acz2jfkmxtJXGnLdvgBHYAAAAJI"]
[Wed Apr 01 18:42:21.571201 2026] [:error] [pid 8909:tid 8954] [client 20.91.245.108:9475] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/04.php"] [unique_id "acz2jTvP_a0662gDl6BJdQAAAM0"]
[Wed Apr 01 18:42:22.111286 2026] [:error] [pid 17856:tid 17866] [client 20.91.245.108:9417] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/04.php"] [unique_id "acz2jj7Idlm5j9frhqTWHwAAAEg"]
[Wed Apr 01 18:42:22.670818 2026] [:error] [pid 8995:tid 9019] [client 20.91.245.108:9595] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/04.php"] [unique_id "acz2juonaBjs3qxcReedPAAAABU"]
[Wed Apr 01 18:42:23.200008 2026] [:error] [pid 8908:tid 8922] [client 20.91.245.108:9592] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "acz2j_kmxtJXGnLdvgBHYwAAAIk"]
[Wed Apr 01 18:42:23.727555 2026] [:error] [pid 17856:tid 17879] [client 20.91.245.108:9488] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "acz2jz7Idlm5j9frhqTWJAAAAFU"]
[Wed Apr 01 18:42:24.323004 2026] [:error] [pid 8908:tid 8929] [client 20.91.245.108:9450] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "acz2kPkmxtJXGnLdvgBHZQAAAJA"]
[Wed Apr 01 18:42:24.857206 2026] [:error] [pid 8909:tid 8958] [client 20.91.245.108:9423] [client 20.91.245.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "acz2kDvP_a0662gDl6BJfgAAANE"]
[Thu Apr 02 04:33:56.306812 2026] [:error] [pid 37543:tid 37563] [client 20.240.45.211:21699] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Thu Apr 02 06:28:51.731738 2026] [:error] [pid 37543:tid 37561] [client 172.213.236.116:29120] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Thu Apr 02 06:28:51.976799 2026] [:error] [pid 37543:tid 37569] [client 172.213.236.116:29120] File does not exist: /usr/local/apache/htdocs/suspended-page/f2.php
[Thu Apr 02 06:28:52.214005 2026] [:error] [pid 37543:tid 37548] [client 172.213.236.116:29120] File does not exist: /usr/local/apache/htdocs/suspended-page/classc.php
[Thu Apr 02 06:28:52.452097 2026] [:error] [pid 37543:tid 37553] [client 172.213.236.116:29120] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Thu Apr 02 06:28:52.688190 2026] [:error] [pid 37543:tid 37567] [client 172.213.236.116:29120] File does not exist: /usr/local/apache/htdocs/suspended-page/class-cc.php
[Thu Apr 02 06:28:52.928678 2026] [:error] [pid 37543:tid 37561] [client 172.213.236.116:29120] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Thu Apr 02 06:28:53.164185 2026] [:error] [pid 37543:tid 37554] [client 172.213.236.116:29120] File does not exist: /usr/local/apache/htdocs/suspended-page/brtnd.php
[Thu Apr 02 06:28:53.404287 2026] [:error] [pid 37543:tid 37564] [client 172.213.236.116:29120] File does not exist: /usr/local/apache/htdocs/suspended-page/azrhw.php
[Thu Apr 02 06:28:53.642084 2026] [:error] [pid 37543:tid 37569] [client 172.213.236.116:29120] File does not exist: /usr/local/apache/htdocs/suspended-page/cnusw.php
[Thu Apr 02 06:28:53.878710 2026] [:error] [pid 37543:tid 37560] [client 172.213.236.116:29120] File does not exist: /usr/local/apache/htdocs/suspended-page/dtwpf.php
[Thu Apr 02 06:28:54.111992 2026] [:error] [pid 37543:tid 37548] [client 172.213.236.116:29120] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "ac2cJnhdk2bEYJCvILYlbQAAAUM"]
[Thu Apr 02 06:28:54.355570 2026] [:error] [pid 29467:tid 29476] [client 20.250.12.127:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Thu Apr 02 06:28:54.580130 2026] [:error] [pid 29467:tid 29478] [client 172.213.236.116:24114] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "ac2cJr4VUBFCJAq-WOknrgAAAQg"]
[Thu Apr 02 06:28:54.596760 2026] [:error] [pid 29467:tid 29485] [client 20.250.12.127:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/f2.php
[Thu Apr 02 06:28:54.837080 2026] [:error] [pid 29467:tid 29492] [client 20.250.12.127:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/classc.php
[Thu Apr 02 06:28:55.077156 2026] [:error] [pid 29467:tid 29471] [client 20.250.12.127:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/ahutr.php
[Thu Apr 02 06:28:55.094467 2026] [:error] [pid 29467:tid 29475] [client 172.213.236.116:29160] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "ac2cJ74VUBFCJAq-WOknsgAAAQU"]
[Thu Apr 02 06:28:55.328812 2026] [:error] [pid 29467:tid 29477] [client 20.250.12.127:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/class-cc.php
[Thu Apr 02 06:28:55.568832 2026] [:error] [pid 29467:tid 29483] [client 20.250.12.127:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Thu Apr 02 06:28:55.570162 2026] [:error] [pid 29467:tid 29487] [client 172.213.236.116:24089] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "ac2cJ74VUBFCJAq-WOkntwAAARE"]
[Thu Apr 02 06:28:56.235712 2026] [:error] [pid 59200:tid 59242] [client 172.213.236.116:30750] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ac2cKLfP26txrdLs3Er-agAAAEI"]
[Thu Apr 02 06:28:56.891478 2026] [:error] [pid 59200:tid 59247] [client 172.213.236.116:48407] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ac2cKLfP26txrdLs3Er-bAAAAEc"]
[Thu Apr 02 06:28:57.182294 2026] [:error] [pid 29467:tid 29483] [client 20.250.12.127:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/brtnd.php
[Thu Apr 02 06:28:57.422981 2026] [:error] [pid 29467:tid 29484] [client 20.250.12.127:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/azrhw.php
[Thu Apr 02 06:28:57.442329 2026] [:error] [pid 59200:tid 59253] [client 172.213.236.116:24127] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ac2cKbfP26txrdLs3Er-bwAAAE0"]
[Thu Apr 02 06:28:57.664778 2026] [:error] [pid 29467:tid 29471] [client 20.250.12.127:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/cnusw.php
[Thu Apr 02 06:28:57.905112 2026] [:error] [pid 29467:tid 29475] [client 20.250.12.127:58001] File does not exist: /usr/local/apache/htdocs/suspended-page/dtwpf.php
[Thu Apr 02 06:28:57.969071 2026] [:error] [pid 59201:tid 59279] [client 172.213.236.116:23074] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f222.php"] [unique_id "ac2cKcAC0Tw8eL6gzZ6HTwAAAIw"]
[Thu Apr 02 06:28:58.142143 2026] [:error] [pid 29467:tid 29473] [client 20.250.12.127:58001] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "ac2cKr4VUBFCJAq-WOknwwAAAQM"]
[Thu Apr 02 06:28:58.595751 2026] [:error] [pid 59194:tid 59233] [client 172.213.236.116:24081] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "ac2cKhMpAeV11hcQehzhbwAAABQ"]
[Thu Apr 02 06:28:58.613649 2026] [:error] [pid 37543:tid 37553] [client 20.250.12.127:59296] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "ac2cKnhdk2bEYJCvILYlbwAAAUg"]
[Thu Apr 02 06:28:59.075421 2026] [:error] [pid 59200:tid 59256] [client 172.213.236.116:29149] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "ac2cK7fP26txrdLs3Er-cwAAAFA"]
[Thu Apr 02 06:28:59.084764 2026] [:error] [pid 59201:tid 59269] [client 20.250.12.127:60846] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "ac2cK8AC0Tw8eL6gzZ6HUAAAAII"]
[Thu Apr 02 06:28:59.556554 2026] [:error] [pid 59200:tid 59255] [client 20.250.12.127:58045] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "ac2cK7fP26txrdLs3Er-dAAAAE8"]
[Thu Apr 02 06:28:59.582039 2026] [:error] [pid 29467:tid 29479] [client 172.213.236.116:24122] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "ac2cK74VUBFCJAq-WOknxAAAAQk"]
[Thu Apr 02 06:29:00.046792 2026] [:error] [pid 37543:tid 37558] [client 20.250.12.127:58017] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ac2cLHhdk2bEYJCvILYlcgAAAU0"]
[Thu Apr 02 06:29:00.047487 2026] [:error] [pid 37543:tid 37566] [client 172.213.236.116:30772] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "ac2cLHhdk2bEYJCvILYlcwAAAVU"]
[Thu Apr 02 06:29:00.518173 2026] [:error] [pid 59201:tid 59274] [client 20.250.12.127:61942] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ac2cLMAC0Tw8eL6gzZ6HUgAAAIc"]
[Thu Apr 02 06:29:00.524194 2026] [:error] [pid 37543:tid 37561] [client 172.213.236.116:25030] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "ac2cLHhdk2bEYJCvILYldAAAAVA"]
[Thu Apr 02 06:29:00.992371 2026] [:error] [pid 37543:tid 37565] [client 20.250.12.127:61926] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ac2cLHhdk2bEYJCvILYldQAAAVQ"]
[Thu Apr 02 06:29:00.993897 2026] [:error] [pid 37543:tid 37557] [client 172.213.236.116:30733] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "ac2cLHhdk2bEYJCvILYldgAAAUw"]
[Thu Apr 02 06:29:01.466622 2026] [:error] [pid 59305:tid 59312] [client 172.213.236.116:24102] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "ac2cLar2tV4rDwKFxKcX-wAAAMM"]
[Thu Apr 02 06:29:01.466622 2026] [:error] [pid 59200:tid 59264] [client 20.250.12.127:61937] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ac2cLbfP26txrdLs3Er-dgAAAFg"]
[Thu Apr 02 06:29:01.932010 2026] [:error] [pid 59200:tid 59241] [client 172.213.236.116:25035] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "ac2cLbfP26txrdLs3Er-eAAAAEE"]
[Thu Apr 02 06:29:01.945013 2026] [:error] [pid 37543:tid 37563] [client 20.250.12.127:61915] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ac2cLXhdk2bEYJCvILYleQAAAVI"]
[Thu Apr 02 06:29:02.406057 2026] [:error] [pid 59305:tid 59320] [client 172.213.236.116:48417] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "ac2cLqr2tV4rDwKFxKcX_AAAAMs"]
[Thu Apr 02 06:29:02.434461 2026] [:error] [pid 37543:tid 37545] [client 20.250.12.127:60831] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ac2cLnhdk2bEYJCvILYlewAAAUA"]
[Thu Apr 02 06:29:02.874796 2026] [:error] [pid 59194:tid 59225] [client 172.213.236.116:8951] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-upload.php"] [unique_id "ac2cLhMpAeV11hcQehzhcgAAAAw"]
[Thu Apr 02 06:29:02.908906 2026] [:error] [pid 37543:tid 37551] [client 20.250.12.127:59294] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ac2cLnhdk2bEYJCvILYlfQAAAUY"]
[Thu Apr 02 06:29:03.343822 2026] [:error] [pid 59194:tid 59226] [client 172.213.236.116:30782] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-upload.php"] [unique_id "ac2cLxMpAeV11hcQehzhcwAAAA0"]
[Thu Apr 02 06:29:03.390494 2026] [:error] [pid 29467:tid 29473] [client 20.250.12.127:61938] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lef.php"] [unique_id "ac2cL74VUBFCJAq-WOknyQAAAQM"]
[Thu Apr 02 06:29:03.809448 2026] [:error] [pid 29467:tid 29478] [client 172.213.236.116:35803] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-upload.php"] [unique_id "ac2cL74VUBFCJAq-WOknywAAAQg"]
[Thu Apr 02 06:29:03.862608 2026] [:error] [pid 29467:tid 29472] [client 20.250.12.127:58054] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lef.php"] [unique_id "ac2cL74VUBFCJAq-WOknzAAAAQI"]
[Thu Apr 02 06:29:04.284003 2026] [:error] [pid 37543:tid 37552] [client 172.213.236.116:48443] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-upload.php"] [unique_id "ac2cMHhdk2bEYJCvILYlhAAAAUc"]
[Thu Apr 02 06:29:04.514664 2026] [:error] [pid 29467:tid 29483] [client 20.250.12.127:61889] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac2cML4VUBFCJAq-WOknzgAAAQ0"]
[Thu Apr 02 06:29:04.774343 2026] [:error] [pid 29467:tid 29485] [client 172.213.236.116:29126] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/only.php"] [unique_id "ac2cML4VUBFCJAq-WOknzwAAAQ8"]
[Thu Apr 02 06:29:05.046468 2026] [:error] [pid 59194:tid 59235] [client 20.250.12.127:61946] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac2cMRMpAeV11hcQehzhdAAAABY"]
[Thu Apr 02 06:29:05.265751 2026] [:error] [pid 37543:tid 37561] [client 172.213.236.116:25055] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/only.php"] [unique_id "ac2cMXhdk2bEYJCvILYlhwAAAVA"]
[Thu Apr 02 06:29:05.570086 2026] [:error] [pid 59194:tid 59232] [client 20.250.12.127:59278] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac2cMRMpAeV11hcQehzhdgAAABM"]
[Thu Apr 02 06:29:05.735281 2026] [:error] [pid 29467:tid 29487] [client 172.213.236.116:8947] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/only.php"] [unique_id "ac2cMb4VUBFCJAq-WOkn0wAAARE"]
[Thu Apr 02 06:29:06.066662 2026] [:error] [pid 59194:tid 59229] [client 20.250.12.127:57994] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac2cMhMpAeV11hcQehzhdwAAABA"]
[Thu Apr 02 06:29:06.206635 2026] [:error] [pid 29467:tid 29492] [client 172.213.236.116:29182] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/only.php"] [unique_id "ac2cMr4VUBFCJAq-WOkn1gAAARY"]
[Thu Apr 02 06:29:06.622886 2026] [:error] [pid 59201:tid 59290] [client 20.250.12.127:57988] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "ac2cMsAC0Tw8eL6gzZ6HWgAAAJc"]
[Thu Apr 02 06:29:06.675627 2026] [:error] [pid 59201:tid 59270] [client 172.213.236.116:8921] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac2cMsAC0Tw8eL6gzZ6HWwAAAIM"]
[Thu Apr 02 06:29:07.103480 2026] [:error] [pid 29467:tid 29473] [client 20.250.12.127:58042] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "ac2cM74VUBFCJAq-WOkn2QAAAQM"]
[Thu Apr 02 06:29:07.148509 2026] [:error] [pid 29467:tid 29478] [client 172.213.236.116:30763] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac2cM74VUBFCJAq-WOkn2gAAAQg"]
[Thu Apr 02 06:29:07.598507 2026] [:error] [pid 59201:tid 59279] [client 20.250.12.127:57996] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "ac2cM8AC0Tw8eL6gzZ6HXgAAAIw"]
[Thu Apr 02 06:29:07.619052 2026] [:error] [pid 29467:tid 29476] [client 172.213.236.116:30722] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac2cM74VUBFCJAq-WOkn3QAAAQY"]
[Thu Apr 02 06:29:08.084354 2026] [:error] [pid 59201:tid 59280] [client 20.250.12.127:59308] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "ac2cNMAC0Tw8eL6gzZ6HYQAAAI0"]
[Thu Apr 02 06:29:08.085643 2026] [:error] [pid 29467:tid 29483] [client 172.213.236.116:35837] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac2cNL4VUBFCJAq-WOkn3wAAAQ0"]
[Thu Apr 02 06:29:08.561342 2026] [:error] [pid 29467:tid 29475] [client 20.250.12.127:59291] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "ac2cNL4VUBFCJAq-WOkn4AAAAQU"]
[Thu Apr 02 06:29:08.609749 2026] [:error] [pid 29467:tid 29488] [client 172.213.236.116:30767] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa.php"] [unique_id "ac2cNL4VUBFCJAq-WOkn4QAAARI"]
[Thu Apr 02 06:29:09.036095 2026] [:error] [pid 29467:tid 29486] [client 20.250.12.127:60843] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "ac2cNb4VUBFCJAq-WOkn4wAAARA"]
[Thu Apr 02 06:29:09.077671 2026] [:error] [pid 29467:tid 29493] [client 172.213.236.116:25085] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa.php"] [unique_id "ac2cNb4VUBFCJAq-WOkn5AAAARc"]
[Thu Apr 02 06:29:09.510202 2026] [:error] [pid 59194:tid 59216] [client 20.250.12.127:60833] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "ac2cNRMpAeV11hcQehzhewAAAAM"]
[Thu Apr 02 06:29:09.548948 2026] [:error] [pid 37543:tid 37556] [client 172.213.236.116:35823] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa.php"] [unique_id "ac2cNXhdk2bEYJCvILYljQAAAUs"]
[Thu Apr 02 06:29:09.982303 2026] [:error] [pid 59201:tid 59278] [client 20.250.12.127:61943] [client 20.250.12.127] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "ac2cNcAC0Tw8eL6gzZ6HZAAAAIs"]
[Thu Apr 02 06:29:10.040144 2026] [:error] [pid 37543:tid 37558] [client 172.213.236.116:24092] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa.php"] [unique_id "ac2cNnhdk2bEYJCvILYljgAAAU0"]
[Thu Apr 02 06:29:10.585568 2026] [:error] [pid 29467:tid 29489] [client 172.213.236.116:29178] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ac2cNr4VUBFCJAq-WOkn6AAAARM"]
[Thu Apr 02 06:29:11.063043 2026] [:error] [pid 59305:tid 59325] [client 172.213.236.116:30778] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ac2cN6r2tV4rDwKFxKcX_gAAANA"]
[Thu Apr 02 06:29:11.589619 2026] [:error] [pid 37543:tid 37564] [client 172.213.236.116:8914] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ac2cN3hdk2bEYJCvILYlkAAAAVM"]
[Thu Apr 02 06:29:12.101817 2026] [:error] [pid 59305:tid 59322] [client 172.213.236.116:48395] [client 172.213.236.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "ac2cOKr2tV4rDwKFxKcYAQAAAM0"]
[Thu Apr 02 08:13:53.412876 2026] [:error] [pid 37543:tid 37549] [client 95.111.234.66:36780] [client 95.111.234.66] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "ac20wXhdk2bEYJCvILZOZQAAAUQ"]
[Fri Apr 03 02:52:53.400694 2026] [:error] [pid 25470:tid 25485] [client 95.70.128.192:19660] [client 95.70.128.192] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.70.128.192, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ac67BXhROcck6_9HYyhxgwAAAM0"]
[Fri Apr 03 02:52:53.405500 2026] [:error] [pid 25470:tid 25485] [client 95.70.128.192:19660] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 03 03:46:39.896213 2026] [:error] [pid 57244:tid 57291] [client 74.248.134.192:29779] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 03 03:46:41.523312 2026] [:error] [pid 57244:tid 57291] [client 74.248.134.192:29779] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Fri Apr 03 03:46:41.783850 2026] [:error] [pid 57244:tid 57290] [client 74.248.134.192:29779] File does not exist: /usr/local/apache/htdocs/suspended-page/ogifomnzqnlvwh5womfjirvaCdefault.php
[Fri Apr 03 03:46:42.088780 2026] [:error] [pid 57244:tid 57301] [client 74.248.134.192:29779] File does not exist: /usr/local/apache/htdocs/suspended-page/nhj6t74aqmkde3hgpCdefault.php
[Fri Apr 03 03:46:42.805812 2026] [:error] [pid 57244:tid 57301] [client 74.248.134.192:29779] File does not exist: /usr/local/apache/htdocs/suspended-page/b4txckoieeyhynhsrpi9lCdefault.php
[Fri Apr 03 03:46:43.067375 2026] [:error] [pid 57244:tid 57303] [client 74.248.134.192:29779] File does not exist: /usr/local/apache/htdocs/suspended-page/c6jpzOQvtPyeM9hdefault.php
[Fri Apr 03 03:46:43.343763 2026] [:error] [pid 57244:tid 57293] [client 74.248.134.192:29779] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Fri Apr 03 03:46:43.604559 2026] [:error] [pid 57244:tid 57286] [client 74.248.134.192:29779] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Fri Apr 03 03:46:43.927904 2026] [:error] [pid 57244:tid 57281] [client 74.248.134.192:29779] File does not exist: /usr/local/apache/htdocs/suspended-page/ibcqocdtu3eovdx2hwj7Cdefault.php
[Fri Apr 03 03:46:44.694454 2026] [:error] [pid 57244:tid 57289] [client 74.248.134.192:29779] File does not exist: /usr/local/apache/htdocs/suspended-page/JKydQumkIarjMJ4default.php
[Fri Apr 03 03:46:44.952364 2026] [:error] [pid 57244:tid 57282] [client 74.248.134.192:29779] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7HpFdzWyq9jWyC2p9NSQAAAEI"]
[Fri Apr 03 03:46:47.158191 2026] [:error] [pid 57244:tid 57298] [client 74.248.134.192:25278] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7Hp1dzWyq9jWyC2p9NTAAAAFI"]
[Fri Apr 03 03:46:49.746091 2026] [:error] [pid 57245:tid 57318] [client 74.248.134.192:25243] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7HqWXYBOrK3cdkk4cXIAAAAIs"]
[Fri Apr 03 03:46:51.163800 2026] [:error] [pid 57244:tid 57292] [client 74.248.134.192:36606] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac7Hq1dzWyq9jWyC2p9NWAAAAEw"]
[Fri Apr 03 03:46:52.100395 2026] [:error] [pid 57243:tid 57257] [client 74.248.134.192:42353] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7HrIFPSJ_v7wlF-z2MgAAAAAU"]
[Fri Apr 03 03:46:53.180719 2026] [:error] [pid 57243:tid 57276] [client 74.248.134.192:38555] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7HrYFPSJ_v7wlF-z2MmQAAABg"]
[Fri Apr 03 03:46:54.193897 2026] [:error] [pid 57244:tid 57284] [client 74.248.134.192:29764] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7HrldzWyq9jWyC2p9NYAAAAEQ"]
[Fri Apr 03 03:46:55.074610 2026] [:error] [pid 57244:tid 57300] [client 74.248.134.192:26595] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac7Hr1dzWyq9jWyC2p9NYQAAAFQ"]
[Fri Apr 03 03:46:55.759967 2026] [:error] [pid 57244:tid 57299] [client 74.248.134.192:26599] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7Hr1dzWyq9jWyC2p9NZAAAAFM"]
[Fri Apr 03 03:46:57.459478 2026] [:error] [pid 57245:tid 57322] [client 74.248.134.192:52509] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7HsWXYBOrK3cdkk4cXLAAAAI8"]
[Fri Apr 03 03:46:59.693717 2026] [:error] [pid 57245:tid 57315] [client 74.248.134.192:50847] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7Hs2XYBOrK3cdkk4cXMQAAAIg"]
[Fri Apr 03 03:47:00.610709 2026] [:error] [pid 57244:tid 57281] [client 74.248.134.192:25218] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac7HtFdzWyq9jWyC2p9NagAAAEE"]
[Fri Apr 03 03:47:01.293055 2026] [:error] [pid 57244:tid 57295] [client 74.248.134.192:29800] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac7HtVdzWyq9jWyC2p9NbwAAAE8"]
[Fri Apr 03 03:47:02.108218 2026] [:error] [pid 57333:tid 57338] [client 74.248.134.192:50827] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac7Hth43LZe-blRyU9VqOwAAAMM"]
[Fri Apr 03 03:47:03.294098 2026] [:error] [pid 57244:tid 57298] [client 74.248.134.192:42354] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac7Ht1dzWyq9jWyC2p9NcwAAAFI"]
[Fri Apr 03 03:47:04.153254 2026] [:error] [pid 57245:tid 57318] [client 74.248.134.192:25247] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac7HuGXYBOrK3cdkk4cXRQAAAIs"]
[Fri Apr 03 03:47:04.876086 2026] [:error] [pid 57244:tid 57282] [client 74.248.134.192:50862] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac7HuFdzWyq9jWyC2p9NdwAAAEI"]
[Fri Apr 03 03:47:05.681267 2026] [:error] [pid 57243:tid 57273] [client 74.248.134.192:61877] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac7HuYFPSJ_v7wlF-z2MrAAAABU"]
[Fri Apr 03 03:47:06.551320 2026] [:error] [pid 57243:tid 57265] [client 74.248.134.192:53075] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac7HuoFPSJ_v7wlF-z2MsgAAAA0"]
[Fri Apr 03 03:47:07.448589 2026] [:error] [pid 57245:tid 57316] [client 74.248.134.192:43475] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac7Hu2XYBOrK3cdkk4cXVAAAAIk"]
[Fri Apr 03 03:47:09.477288 2026] [:error] [pid 57333:tid 57351] [client 74.248.134.192:34561] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac7HvR43LZe-blRyU9VqVQAAANA"]
[Fri Apr 03 03:47:11.496026 2026] [:error] [pid 57333:tid 57343] [client 74.248.134.192:53083] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac7Hvx43LZe-blRyU9VqWwAAAMg"]
[Fri Apr 03 03:47:19.633885 2026] [:error] [pid 57333:tid 57341] [client 74.248.134.192:52506] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac7Hxx43LZe-blRyU9VqcAAAAMY"]
[Fri Apr 03 03:47:21.130297 2026] [:error] [pid 57245:tid 57326] [client 74.248.134.192:25896] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac7HyWXYBOrK3cdkk4cXsAAAAJM"]
[Fri Apr 03 03:47:22.162259 2026] [:error] [pid 57244:tid 57300] [client 74.248.134.192:50875] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac7HyldzWyq9jWyC2p9NnwAAAFQ"]
[Fri Apr 03 03:47:23.035427 2026] [:error] [pid 57245:tid 57324] [client 74.248.134.192:26601] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac7Hy2XYBOrK3cdkk4cXvwAAAJE"]
[Fri Apr 03 03:47:24.009675 2026] [:error] [pid 57333:tid 57341] [client 74.248.134.192:25235] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac7HzB43LZe-blRyU9Vq1wAAAMY"]
[Fri Apr 03 03:47:25.045681 2026] [:error] [pid 57333:tid 57357] [client 74.248.134.192:34560] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac7HzR43LZe-blRyU9Vq2wAAANY"]
[Fri Apr 03 03:47:26.173395 2026] [:error] [pid 57244:tid 57303] [client 74.248.134.192:59064] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac7HzldzWyq9jWyC2p9NpQAAAFc"]
[Fri Apr 03 03:47:26.950294 2026] [:error] [pid 57243:tid 57268] [client 74.248.134.192:61859] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac7HzoFPSJ_v7wlF-z2M5QAAABA"]
[Fri Apr 03 03:47:27.831506 2026] [:error] [pid 57245:tid 57330] [client 74.248.134.192:50874] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac7Hz2XYBOrK3cdkk4cXxgAAAJc"]
[Fri Apr 03 03:47:28.893307 2026] [:error] [pid 57245:tid 57324] [client 74.248.134.192:52504] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac7H0GXYBOrK3cdkk4cXxwAAAJE"]
[Fri Apr 03 03:47:29.976069 2026] [:error] [pid 57245:tid 57309] [client 74.248.134.192:26563] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac7H0WXYBOrK3cdkk4cXywAAAII"]
[Fri Apr 03 03:47:30.701569 2026] [:error] [pid 57244:tid 57294] [client 74.248.134.192:38536] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac7H0ldzWyq9jWyC2p9NrgAAAE4"]
[Fri Apr 03 03:47:31.452680 2026] [:error] [pid 57333:tid 57357] [client 74.248.134.192:59030] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac7H0x43LZe-blRyU9Vq6AAAANY"]
[Fri Apr 03 03:47:32.923676 2026] [:error] [pid 57244:tid 57289] [client 74.248.134.192:43500] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac7H1FdzWyq9jWyC2p9NsgAAAEk"]
[Fri Apr 03 03:47:34.019462 2026] [:error] [pid 57243:tid 57253] [client 74.248.134.192:43457] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac7H1oFPSJ_v7wlF-z2M-AAAAAE"]
[Fri Apr 03 03:47:35.879730 2026] [:error] [pid 57244:tid 57304] [client 74.248.134.192:26618] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac7H11dzWyq9jWyC2p9NugAAAFg"]
[Fri Apr 03 03:47:38.163847 2026] [:error] [pid 57333:tid 57348] [client 74.248.134.192:26576] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac7H2h43LZe-blRyU9Vq9wAAAM0"]
[Fri Apr 03 03:47:39.641925 2026] [:error] [pid 57333:tid 57339] [client 74.248.134.192:25258] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac7H2x43LZe-blRyU9Vq-gAAAMQ"]
[Fri Apr 03 03:47:42.547244 2026] [:error] [pid 57333:tid 57354] [client 74.248.134.192:29781] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fyiiz.php"] [unique_id "ac7H3h43LZe-blRyU9VrDQAAANM"]
[Fri Apr 03 03:47:45.374981 2026] [:error] [pid 57333:tid 57350] [client 74.248.134.192:53105] File does not exist: /usr/local/apache/htdocs/suspended-page/fyiiz.php
[Fri Apr 03 03:47:45.687135 2026] [:error] [pid 57333:tid 57336] [client 74.248.134.192:53105] [client 74.248.134.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac7H4R43LZe-blRyU9VrGQAAAME"]
[Fri Apr 03 03:47:51.117958 2026] [:error] [pid 57245:tid 57330] [client 74.248.134.192:42306] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 03 03:47:51.670429 2026] [:error] [pid 57245:tid 57324] [client 74.248.134.192:42306] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Fri Apr 03 03:47:52.190271 2026] [:error] [pid 57245:tid 57313] [client 74.248.134.192:42306] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Fri Apr 03 03:47:52.449487 2026] [:error] [pid 57245:tid 57319] [client 74.248.134.192:42306] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Fri Apr 03 03:47:52.709346 2026] [:error] [pid 57245:tid 57331] [client 74.248.134.192:42306] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Fri Apr 03 03:47:52.968591 2026] [:error] [pid 57245:tid 57328] [client 74.248.134.192:42306] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 03 03:47:53.226709 2026] [:error] [pid 57245:tid 57311] [client 74.248.134.192:42306] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 03 03:47:53.491725 2026] [:error] [pid 57245:tid 57321] [client 74.248.134.192:42306] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac7H6WXYBOrK3cdkk4cX_QAAAI4"]
[Fri Apr 03 03:47:56.005383 2026] [:error] [pid 57333:tid 57336] [client 74.248.134.192:41675] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac7H7B43LZe-blRyU9VrOwAAAME"]
[Fri Apr 03 03:48:02.060124 2026] [:error] [pid 57245:tid 57311] [client 74.248.134.192:26604] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac7H8mXYBOrK3cdkk4cYDwAAAIQ"]
[Fri Apr 03 03:48:06.921727 2026] [:error] [pid 57333:tid 57347] [client 74.248.134.192:50871] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac7H9h43LZe-blRyU9VragAAAMw"]
[Fri Apr 03 03:48:09.456406 2026] [:error] [pid 57333:tid 57359] [client 74.248.134.192:3097] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "ac7H-R43LZe-blRyU9VrcwAAANg"]
[Fri Apr 03 03:48:11.594086 2026] [:error] [pid 57333:tid 57339] [client 74.248.134.192:34563] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "ac7H-x43LZe-blRyU9VrdwAAAMQ"]
[Fri Apr 03 03:48:12.321142 2026] [:error] [pid 57245:tid 57326] [client 74.248.134.192:34598] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "ac7H_GXYBOrK3cdkk4cYLwAAAJM"]
[Fri Apr 03 03:48:13.702833 2026] [:error] [pid 57244:tid 57281] [client 74.248.134.192:38588] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "ac7H_VdzWyq9jWyC2p9N4gAAAEE"]
[Fri Apr 03 03:48:14.653339 2026] [:error] [pid 57243:tid 57270] [client 74.248.134.192:25274] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac7H_oFPSJ_v7wlF-z2NOwAAABI"]
[Fri Apr 03 03:48:15.577722 2026] [:error] [pid 57333:tid 57341] [client 74.248.134.192:50839] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac7H_x43LZe-blRyU9VriwAAAMY"]
[Fri Apr 03 03:48:16.419714 2026] [:error] [pid 57245:tid 57315] [client 74.248.134.192:38569] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac7IAGXYBOrK3cdkk4cYQwAAAIg"]
[Fri Apr 03 03:48:17.549146 2026] [:error] [pid 57245:tid 57329] [client 74.248.134.192:26570] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac7IAWXYBOrK3cdkk4cYRwAAAJY"]
[Fri Apr 03 03:48:18.635337 2026] [:error] [pid 57245:tid 57311] [client 74.248.134.192:25894] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac7IAmXYBOrK3cdkk4cYTgAAAIQ"]
[Fri Apr 03 03:48:19.886171 2026] [:error] [pid 57333:tid 57337] [client 74.248.134.192:42308] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac7IAx43LZe-blRyU9VrnQAAAMI"]
[Fri Apr 03 03:48:20.729862 2026] [:error] [pid 57245:tid 57307] [client 74.248.134.192:43516] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac7IBGXYBOrK3cdkk4cYWgAAAIA"]
[Fri Apr 03 03:48:21.445739 2026] [:error] [pid 57244:tid 57280] [client 74.248.134.192:59068] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac7IBVdzWyq9jWyC2p9N5gAAAEA"]
[Fri Apr 03 03:48:22.068706 2026] [:error] [pid 57245:tid 57311] [client 74.248.134.192:61845] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac7IBmXYBOrK3cdkk4cYYQAAAIQ"]
[Fri Apr 03 03:48:22.858782 2026] [:error] [pid 57243:tid 57273] [client 74.248.134.192:29760] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac7IBoFPSJ_v7wlF-z2NUAAAABU"]
[Fri Apr 03 03:48:23.679045 2026] [:error] [pid 57243:tid 57255] [client 74.248.134.192:42313] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac7IB4FPSJ_v7wlF-z2NVgAAAAM"]
[Fri Apr 03 03:48:24.479124 2026] [:error] [pid 57333:tid 57350] [client 74.248.134.192:50846] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac7ICB43LZe-blRyU9VrqQAAAM8"]
[Fri Apr 03 03:48:25.479740 2026] [:error] [pid 57245:tid 57312] [client 74.248.134.192:25233] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac7ICWXYBOrK3cdkk4cYbQAAAIU"]
[Fri Apr 03 03:48:26.687679 2026] [:error] [pid 57245:tid 57328] [client 74.248.134.192:52523] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac7ICmXYBOrK3cdkk4cYdQAAAJU"]
[Fri Apr 03 03:48:27.402941 2026] [:error] [pid 57245:tid 57326] [client 74.248.134.192:26569] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac7IC2XYBOrK3cdkk4cYdwAAAJM"]
[Fri Apr 03 03:48:29.039509 2026] [:error] [pid 57245:tid 57322] [client 74.248.134.192:52535] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac7IDWXYBOrK3cdkk4cYgwAAAI8"]
[Fri Apr 03 03:48:29.767716 2026] [:error] [pid 57333:tid 57355] [client 74.248.134.192:3537] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "ac7IDR43LZe-blRyU9VrsQAAANQ"]
[Fri Apr 03 03:48:33.322911 2026] [:error] [pid 57243:tid 57260] [client 74.248.134.192:3539] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "ac7IEYFPSJ_v7wlF-z2NdwAAAAg"]
[Fri Apr 03 03:48:37.319347 2026] [:error] [pid 57333:tid 57351] [client 74.248.134.192:51882] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "ac7IFR43LZe-blRyU9Vr2QAAANA"]
[Fri Apr 03 03:48:39.881982 2026] [:error] [pid 57245:tid 57331] [client 74.248.134.192:35921] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sc.php"] [unique_id "ac7IF2XYBOrK3cdkk4cYwAAAAJg"]
[Fri Apr 03 03:48:41.057923 2026] [:error] [pid 57244:tid 57299] [client 74.248.134.192:47113] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac7IGVdzWyq9jWyC2p9N7QAAAFM"]
[Fri Apr 03 03:48:43.793559 2026] [:error] [pid 57333:tid 57338] [client 74.248.134.192:46488] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac7IGx43LZe-blRyU9Vr8AAAAMM"]
[Fri Apr 03 03:48:50.337153 2026] [:error] [pid 57333:tid 57352] [client 74.248.134.192:46507] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac7IIh43LZe-blRyU9VsBwAAANE"]
[Fri Apr 03 03:49:15.904955 2026] [:error] [pid 57333:tid 57354] [client 74.248.134.192:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Fri Apr 03 03:49:16.203373 2026] [:error] [pid 57333:tid 57352] [client 74.248.134.192:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/xvs.php
[Fri Apr 03 03:49:16.462207 2026] [:error] [pid 57333:tid 57346] [client 74.248.134.192:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Fri Apr 03 03:49:16.765640 2026] [:error] [pid 57333:tid 57349] [client 74.248.134.192:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Fri Apr 03 03:49:17.120421 2026] [:error] [pid 57333:tid 57345] [client 74.248.134.192:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Apr 03 03:49:17.659733 2026] [:error] [pid 57333:tid 57349] [client 74.248.134.192:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/lp6.php
[Fri Apr 03 03:49:17.917437 2026] [:error] [pid 57333:tid 57358] [client 74.248.134.192:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/com.php
[Fri Apr 03 03:49:18.215951 2026] [:error] [pid 57333:tid 57354] [client 74.248.134.192:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 03 03:49:18.475824 2026] [:error] [pid 57333:tid 57336] [client 74.248.134.192:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/wander.php
[Fri Apr 03 03:49:20.090865 2026] [:error] [pid 57333:tid 57336] [client 74.248.134.192:47197] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Apr 03 03:49:20.406808 2026] [:error] [pid 57333:tid 57358] [client 74.248.134.192:47197] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7IQB43LZe-blRyU9VsggAAANc"]
[Fri Apr 03 03:49:23.281561 2026] [:error] [pid 57245:tid 57313] [client 74.248.134.192:3309] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7IQ2XYBOrK3cdkk4cZXQAAAIY"]
[Fri Apr 03 03:49:25.010813 2026] [:error] [pid 57245:tid 57326] [client 74.248.134.192:57699] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7IRWXYBOrK3cdkk4cZXgAAAJM"]
[Fri Apr 03 03:49:27.768922 2026] [:error] [pid 57245:tid 57324] [client 74.248.134.192:55927] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac7IR2XYBOrK3cdkk4cZYwAAAJE"]
[Fri Apr 03 03:49:28.755527 2026] [:error] [pid 57244:tid 57294] [client 74.248.134.192:62414] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac7ISFdzWyq9jWyC2p9OJAAAAE4"]
[Fri Apr 03 03:49:29.681557 2026] [:error] [pid 57244:tid 57289] [client 74.248.134.192:3321] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac7ISVdzWyq9jWyC2p9OKQAAAEk"]
[Fri Apr 03 03:49:32.285886 2026] [:error] [pid 57244:tid 57281] [client 74.248.134.192:3458] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac7ITFdzWyq9jWyC2p9OLAAAAEE"]
[Fri Apr 03 03:49:41.472646 2026] [:error] [pid 22671:tid 22698] [client 74.248.134.192:45218] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac7IVSRuUnMW7r8hvyYepgAAAAc"]
[Fri Apr 03 03:49:44.382758 2026] [:error] [pid 22671:tid 22715] [client 74.248.134.192:41635] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac7IWCRuUnMW7r8hvyYevgAAABg"]
[Fri Apr 03 03:49:49.412360 2026] [:error] [pid 22672:tid 22736] [client 74.248.134.192:45308] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac7IXazrgXkFSOK0fvpT4gAAAFE"]
[Fri Apr 03 03:49:52.144771 2026] [:error] [pid 22671:tid 22693] [client 74.248.134.192:41661] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac7IYCRuUnMW7r8hvyYe2QAAAAI"]
[Fri Apr 03 03:49:54.060859 2026] [:error] [pid 22671:tid 22695] [client 74.248.134.192:32743] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac7IYiRuUnMW7r8hvyYe4QAAAAQ"]
[Fri Apr 03 03:49:55.531612 2026] [:error] [pid 22673:tid 22767] [client 74.248.134.192:32759] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac7IY--GlVDWdWxxwJBJ0gAAAJU"]
[Fri Apr 03 03:49:56.319111 2026] [:error] [pid 22671:tid 22695] [client 74.248.134.192:62449] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac7IZCRuUnMW7r8hvyYe6gAAAAQ"]
[Fri Apr 03 03:49:57.155471 2026] [:error] [pid 22672:tid 22740] [client 74.248.134.192:35205] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac7IZazrgXkFSOK0fvpT8AAAAFU"]
[Fri Apr 03 03:49:58.028143 2026] [:error] [pid 22673:tid 22746] [client 74.248.134.192:38074] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac7IZu-GlVDWdWxxwJBJ1AAAAIA"]
[Fri Apr 03 03:49:58.819007 2026] [:error] [pid 22672:tid 22737] [client 74.248.134.192:37004] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac7IZqzrgXkFSOK0fvpT8QAAAFI"]
[Fri Apr 03 03:49:59.693130 2026] [:error] [pid 22778:tid 22791] [client 74.248.134.192:3478] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac7IZ_S-q9hkdFqUjq8zMQAAAMY"]
[Fri Apr 03 03:50:00.739403 2026] [:error] [pid 22672:tid 22731] [client 74.248.134.192:35210] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac7IaKzrgXkFSOK0fvpT9wAAAEw"]
[Fri Apr 03 03:50:01.514818 2026] [:error] [pid 22672:tid 22736] [client 74.248.134.192:37037] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac7IaazrgXkFSOK0fvpT_AAAAFE"]
[Fri Apr 03 03:50:02.746736 2026] [:error] [pid 22778:tid 22803] [client 74.248.134.192:37007] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "ac7IavS-q9hkdFqUjq8zNwAAANI"]
[Fri Apr 03 03:50:06.333884 2026] [:error] [pid 22778:tid 22808] [client 74.248.134.192:34656] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "ac7IbvS-q9hkdFqUjq8zQgAAANc"]
[Fri Apr 03 03:50:10.117540 2026] [:error] [pid 22778:tid 22794] [client 74.248.134.192:38063] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "ac7IcvS-q9hkdFqUjq8zTQAAAMk"]
[Fri Apr 03 03:50:15.541862 2026] [:error] [pid 22672:tid 22723] [client 74.248.134.192:38046] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "ac7Id6zrgXkFSOK0fvpUDQAAAEQ"]
[Fri Apr 03 03:50:17.734870 2026] [:error] [pid 22672:tid 22725] [client 74.248.134.192:37016] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ac7IeazrgXkFSOK0fvpUFAAAAEY"]
[Fri Apr 03 03:50:22.014491 2026] [:error] [pid 22778:tid 22805] [client 74.248.134.192:45212] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Fri Apr 03 03:50:22.274732 2026] [:error] [pid 22778:tid 22794] [client 74.248.134.192:45212] File does not exist: /usr/local/apache/htdocs/suspended-page/aifa.php
[Fri Apr 03 03:50:22.547076 2026] [:error] [pid 22778:tid 22800] [client 74.248.134.192:45212] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Fri Apr 03 03:50:22.858599 2026] [:error] [pid 22778:tid 22790] [client 74.248.134.192:45212] File does not exist: /usr/local/apache/htdocs/suspended-page/feokc.php
[Fri Apr 03 03:50:23.118919 2026] [:error] [pid 22778:tid 22791] [client 74.248.134.192:45212] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Fri Apr 03 03:50:23.407140 2026] [:error] [pid 22778:tid 22801] [client 74.248.134.192:45212] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Fri Apr 03 03:50:24.020701 2026] [:error] [pid 22778:tid 22788] [client 74.248.134.192:45212] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Apr 03 03:50:24.279610 2026] [:error] [pid 22778:tid 22794] [client 74.248.134.192:45212] File does not exist: /usr/local/apache/htdocs/suspended-page/goat1.php
[Fri Apr 03 03:50:24.565869 2026] [:error] [pid 22778:tid 22800] [client 74.248.134.192:45212] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Fri Apr 03 03:50:24.879248 2026] [:error] [pid 22778:tid 22798] [client 74.248.134.192:45212] File does not exist: /usr/local/apache/htdocs/suspended-page/yanz.php
[Fri Apr 03 03:50:25.169540 2026] [:error] [pid 22778:tid 22795] [client 74.248.134.192:45212] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac7IgfS-q9hkdFqUjq8ziwAAAMo"]
[Fri Apr 03 03:50:27.043040 2026] [:error] [pid 22673:tid 22756] [client 74.248.134.192:20102] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac7Ig--GlVDWdWxxwJBKDAAAAIo"]
[Fri Apr 03 03:50:27.755042 2026] [:error] [pid 22778:tid 22788] [client 74.248.134.192:34670] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac7Ig_S-q9hkdFqUjq8zkAAAAMM"]
[Fri Apr 03 03:50:29.117886 2026] [:error] [pid 22778:tid 22796] [client 74.248.134.192:34644] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac7IhfS-q9hkdFqUjq8zlQAAAMs"]
[Fri Apr 03 03:50:30.579446 2026] [:error] [pid 22673:tid 22768] [client 74.248.134.192:62430] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "ac7Ihu-GlVDWdWxxwJBKFAAAAJY"]
[Fri Apr 03 03:50:32.056866 2026] [:error] [pid 22672:tid 22736] [client 74.248.134.192:47847] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "ac7IiKzrgXkFSOK0fvpUJwAAAFE"]
[Fri Apr 03 03:50:33.699318 2026] [:error] [pid 22778:tid 22785] [client 74.248.134.192:37005] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "ac7IifS-q9hkdFqUjq8zmgAAAMA"]
[Fri Apr 03 03:50:34.608902 2026] [:error] [pid 22778:tid 22804] [client 74.248.134.192:45282] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "ac7IivS-q9hkdFqUjq8znQAAANM"]
[Fri Apr 03 03:50:35.458986 2026] [:error] [pid 22672:tid 22732] [client 74.248.134.192:45294] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-2019.php"] [unique_id "ac7Ii6zrgXkFSOK0fvpUMAAAAE0"]
[Fri Apr 03 03:50:36.481059 2026] [:error] [pid 22778:tid 22797] [client 74.248.134.192:62447] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-2019.php"] [unique_id "ac7IjPS-q9hkdFqUjq8zogAAAMw"]
[Fri Apr 03 03:50:37.377010 2026] [:error] [pid 22672:tid 22737] [client 74.248.134.192:20148] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-2019.php"] [unique_id "ac7IjazrgXkFSOK0fvpUNAAAAFI"]
[Fri Apr 03 03:50:38.246730 2026] [:error] [pid 22672:tid 22722] [client 74.248.134.192:35211] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-2019.php"] [unique_id "ac7IjqzrgXkFSOK0fvpUNgAAAEM"]
[Fri Apr 03 03:50:39.012438 2026] [:error] [pid 22671:tid 22705] [client 74.248.134.192:62415] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac7IjyRuUnMW7r8hvyYfJgAAAA4"]
[Fri Apr 03 03:50:40.284019 2026] [:error] [pid 22673:tid 22749] [client 74.248.134.192:47835] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac7IkO-GlVDWdWxxwJBKJQAAAIM"]
[Fri Apr 03 03:50:41.042357 2026] [:error] [pid 22672:tid 22742] [client 74.248.134.192:47833] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac7IkazrgXkFSOK0fvpUPgAAAFc"]
[Fri Apr 03 03:50:42.023685 2026] [:error] [pid 22673:tid 22768] [client 74.248.134.192:47837] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac7Iku-GlVDWdWxxwJBKKAAAAJY"]
[Fri Apr 03 03:50:43.449926 2026] [:error] [pid 22671:tid 22698] [client 74.248.134.192:41607] [client 74.248.134.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac7IkyRuUnMW7r8hvyYfMQAAAAc"]
[Fri Apr 03 03:50:44.782776 2026] [:error] [pid 22672:tid 22733] [client 74.248.134.192:41631] [client 74.248.134.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac7IlKzrgXkFSOK0fvpUSgAAAE4"]
[Fri Apr 03 03:50:45.987517 2026] [:error] [pid 22778:tid 22786] [client 74.248.134.192:38065] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "ac7IlfS-q9hkdFqUjq8zqwAAAME"]
[Fri Apr 03 03:50:46.976940 2026] [:error] [pid 22778:tid 22799] [client 74.248.134.192:38034] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "ac7IlvS-q9hkdFqUjq8zrQAAAM4"]
[Fri Apr 03 03:50:48.591023 2026] [:error] [pid 22778:tid 22790] [client 74.248.134.192:41637] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "ac7ImPS-q9hkdFqUjq8zswAAAMU"]
[Fri Apr 03 03:50:50.290458 2026] [:error] [pid 22778:tid 22797] [client 74.248.134.192:36992] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "ac7ImvS-q9hkdFqUjq8ztwAAAMw"]
[Fri Apr 03 03:50:51.075353 2026] [:error] [pid 22673:tid 22770] [client 74.248.134.192:59643] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac7Im--GlVDWdWxxwJBKNgAAAJg"]
[Fri Apr 03 03:50:52.174664 2026] [:error] [pid 22673:tid 22749] [client 74.248.134.192:41639] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac7InO-GlVDWdWxxwJBKPQAAAIM"]
[Fri Apr 03 03:50:53.158369 2026] [:error] [pid 22671:tid 22699] [client 74.248.134.192:38023] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac7InSRuUnMW7r8hvyYfQAAAAAg"]
[Fri Apr 03 03:50:54.148321 2026] [:error] [pid 22673:tid 22768] [client 74.248.134.192:63072] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac7Inu-GlVDWdWxxwJBKRQAAAJY"]
[Fri Apr 03 03:50:54.792117 2026] [:error] [pid 22673:tid 22764] [client 74.248.134.192:20124] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac7Inu-GlVDWdWxxwJBKRgAAAJI"]
[Fri Apr 03 03:50:55.739317 2026] [:error] [pid 22672:tid 22725] [client 74.248.134.192:3283] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac7In6zrgXkFSOK0fvpUYAAAAEY"]
[Fri Apr 03 03:50:56.594152 2026] [:error] [pid 22672:tid 22726] [client 74.248.134.192:47843] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac7IoKzrgXkFSOK0fvpUZQAAAEc"]
[Fri Apr 03 03:50:57.541381 2026] [:error] [pid 22673:tid 22767] [client 74.248.134.192:62401] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac7Ioe-GlVDWdWxxwJBKTAAAAJU"]
[Fri Apr 03 03:50:58.474535 2026] [:error] [pid 22673:tid 22748] [client 74.248.134.192:37009] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "ac7Iou-GlVDWdWxxwJBKVAAAAII"]
[Fri Apr 03 03:50:59.368346 2026] [:error] [pid 22778:tid 22804] [client 74.248.134.192:50936] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "ac7Io_S-q9hkdFqUjq8zvQAAANM"]
[Fri Apr 03 03:51:00.033666 2026] [:error] [pid 22778:tid 22807] [client 74.248.134.192:37003] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "ac7IpPS-q9hkdFqUjq8zwgAAANY"]
[Fri Apr 03 03:51:00.895331 2026] [:error] [pid 22778:tid 22795] [client 74.248.134.192:35255] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "ac7IpPS-q9hkdFqUjq8zxQAAAMo"]
[Fri Apr 03 03:51:02.350409 2026] [:error] [pid 22778:tid 22794] [client 74.248.134.192:34671] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac7IpvS-q9hkdFqUjq8zzgAAAMk"]
[Fri Apr 03 03:51:03.164835 2026] [:error] [pid 22778:tid 22803] [client 74.248.134.192:59627] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac7Ip_S-q9hkdFqUjq8z0QAAANI"]
[Fri Apr 03 03:51:03.825804 2026] [:error] [pid 22778:tid 22797] [client 74.248.134.192:45220] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac7Ip_S-q9hkdFqUjq8z0wAAAMw"]
[Fri Apr 03 03:51:04.681600 2026] [:error] [pid 22672:tid 22726] [client 74.248.134.192:37021] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac7IqKzrgXkFSOK0fvpUbQAAAEc"]
[Fri Apr 03 03:51:05.677883 2026] [:error] [pid 22672:tid 22729] [client 74.248.134.192:47822] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/444.php"] [unique_id "ac7IqazrgXkFSOK0fvpUbwAAAEo"]
[Fri Apr 03 03:51:06.400627 2026] [:error] [pid 22672:tid 22742] [client 74.248.134.192:45211] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/444.php"] [unique_id "ac7IqqzrgXkFSOK0fvpUcQAAAFc"]
[Fri Apr 03 03:51:07.510899 2026] [:error] [pid 22778:tid 22795] [client 74.248.134.192:34633] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/444.php"] [unique_id "ac7Iq_S-q9hkdFqUjq8z3wAAAMo"]
[Fri Apr 03 03:51:08.913532 2026] [:error] [pid 22778:tid 22809] [client 74.248.134.192:41606] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/444.php"] [unique_id "ac7IrPS-q9hkdFqUjq8z5gAAANg"]
[Fri Apr 03 03:51:10.418379 2026] [:error] [pid 22778:tid 22793] [client 74.248.134.192:62448] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac7IrvS-q9hkdFqUjq8z9AAAAMg"]
[Fri Apr 03 03:51:13.512945 2026] [:error] [pid 22673:tid 22758] [client 74.248.134.192:41638] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac7Ise-GlVDWdWxxwJBKdQAAAIw"]
[Fri Apr 03 03:51:14.931778 2026] [:error] [pid 22672:tid 22730] [client 74.248.134.192:47844] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac7IsqzrgXkFSOK0fvpUfQAAAEs"]
[Fri Apr 03 03:51:20.933100 2026] [:error] [pid 22672:tid 22730] [client 74.248.134.192:59591] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac7IuKzrgXkFSOK0fvpUiQAAAEs"]
[Fri Apr 03 03:51:22.529964 2026] [:error] [pid 22672:tid 22732] [client 74.248.134.192:38076] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filesss.php"] [unique_id "ac7IuqzrgXkFSOK0fvpUjgAAAE0"]
[Fri Apr 03 03:51:25.103816 2026] [:error] [pid 22778:tid 22797] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/filesss.php
[Fri Apr 03 03:51:25.404509 2026] [:error] [pid 22778:tid 22786] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/file88.php
[Fri Apr 03 03:51:26.740918 2026] [:error] [pid 22778:tid 22798] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Fri Apr 03 03:51:27.034105 2026] [:error] [pid 22778:tid 22790] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/aj.php
[Fri Apr 03 03:51:27.292751 2026] [:error] [pid 22778:tid 22808] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Fri Apr 03 03:51:27.553308 2026] [:error] [pid 22778:tid 22797] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/filer.php
[Fri Apr 03 03:51:27.835547 2026] [:error] [pid 22778:tid 22806] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/lites.php
[Fri Apr 03 03:51:28.096068 2026] [:error] [pid 22778:tid 22805] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri Apr 03 03:51:28.354396 2026] [:error] [pid 22778:tid 22796] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/he.php
[Fri Apr 03 03:51:28.664538 2026] [:error] [pid 22778:tid 22788] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/aves.php
[Fri Apr 03 03:51:29.248924 2026] [:error] [pid 22778:tid 22793] [client 74.248.134.192:35241] File does not exist: /usr/local/apache/htdocs/suspended-page/gorila.php
[Fri Apr 03 03:51:29.647060 2026] [:error] [pid 22778:tid 22789] [client 74.248.134.192:35241] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanta.php"] [unique_id "ac7IwfS-q9hkdFqUjq80OgAAAMQ"]
[Fri Apr 03 03:51:31.478000 2026] [:error] [pid 22778:tid 22793] [client 74.248.134.192:50900] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanta.php"] [unique_id "ac7Iw_S-q9hkdFqUjq80RAAAAMg"]
[Fri Apr 03 03:51:33.714500 2026] [:error] [pid 22778:tid 22796] [client 74.248.134.192:51448] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanta.php"] [unique_id "ac7IxfS-q9hkdFqUjq80TgAAAMs"]
[Fri Apr 03 03:51:34.855418 2026] [:error] [pid 22778:tid 22787] [client 74.248.134.192:51441] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanta.php"] [unique_id "ac7IxvS-q9hkdFqUjq80UwAAAMI"]
[Fri Apr 03 03:51:36.805653 2026] [:error] [pid 22671:tid 22707] [client 74.248.134.192:45261] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac7IyCRuUnMW7r8hvyYfYQAAABA"]
[Fri Apr 03 03:51:38.773363 2026] [:error] [pid 22778:tid 22809] [client 74.248.134.192:38067] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac7IyvS-q9hkdFqUjq80YwAAANg"]
[Fri Apr 03 03:51:40.048417 2026] [:error] [pid 22778:tid 22793] [client 74.248.134.192:49767] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac7IzPS-q9hkdFqUjq80ZgAAAMg"]
[Fri Apr 03 03:51:40.757074 2026] [:error] [pid 22672:tid 22721] [client 74.248.134.192:59585] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac7IzKzrgXkFSOK0fvpUowAAAEI"]
[Fri Apr 03 03:51:42.606115 2026] [:error] [pid 22671:tid 22709] [client 74.248.134.192:35207] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac7IziRuUnMW7r8hvyYfcAAAABI"]
[Fri Apr 03 03:51:44.061997 2026] [:error] [pid 22671:tid 22715] [client 74.248.134.192:55903] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac7I0CRuUnMW7r8hvyYfcwAAABg"]
[Fri Apr 03 03:51:46.664678 2026] [:error] [pid 22672:tid 22733] [client 74.248.134.192:63059] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac7I0qzrgXkFSOK0fvpUrwAAAE4"]
[Fri Apr 03 03:51:49.182938 2026] [:error] [pid 22673:tid 22758] [client 74.248.134.192:47836] [client 74.248.134.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac7I1e-GlVDWdWxxwJBKowAAAIw"]
[Fri Apr 03 13:39:28.636704 2026] [:error] [pid 33446:tid 33489] [client 45.131.195.180:50133] [client 45.131.195.180] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ac9SkNg3dCqFYIIdw0qQvQAAAEw"]
[Fri Apr 03 18:34:18.412388 2026] [:error] [pid 55174:tid 55194] [client 85.204.70.96:54268] [client 85.204.70.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "ac-Xqp_WKqUonPNUHYzFNAAAAdI"]
[Fri Apr 03 18:34:19.774581 2026] [:error] [pid 33445:tid 33470] [client 85.204.70.96:43750] [client 85.204.70.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "ac-Xq1lRNZ0iDVmJWM2-fAAAABQ"]
[Fri Apr 03 18:34:20.420085 2026] [:error] [pid 33446:tid 33484] [client 85.204.70.96:42330] [client 85.204.70.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "ac-XrNg3dCqFYIIdw0oBZAAAAEc"]
[Fri Apr 03 18:34:21.608609 2026] [:error] [pid 55174:tid 55189] [client 85.204.70.96:40018] [client 85.204.70.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "ac-XrZ_WKqUonPNUHYzFPAAAAc0"]
[Fri Apr 03 18:34:22.160516 2026] [:error] [pid 33446:tid 33501] [client 85.204.70.96:42334] [client 85.204.70.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.php"] [unique_id "ac-Xrtg3dCqFYIIdw0oBbgAAAFg"]
[Fri Apr 03 18:34:23.366600 2026] [:error] [pid 33447:tid 33527] [client 85.204.70.96:40026] [client 85.204.70.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.php"] [unique_id "ac-Xr0gaPmDHz92j4lMjdQAAAJc"]
[Fri Apr 03 18:34:23.953678 2026] [:error] [pid 33445:tid 33455] [client 85.204.70.96:42336] [client 85.204.70.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/beta/.env"] [unique_id "ac-Xr1lRNZ0iDVmJWM2-hAAAAAU"]
[Fri Apr 03 18:34:25.136900 2026] [:error] [pid 35469:tid 35489] [client 85.204.70.96:40032] [client 85.204.70.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/beta/.env"] [unique_id "ac-XsaGvTIc8-wY3jUQaCwAAARI"]
[Fri Apr 03 18:34:25.700783 2026] [:error] [pid 33445:tid 33459] [client 85.204.70.96:42352] [client 85.204.70.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/prod/.env"] [unique_id "ac-XsVlRNZ0iDVmJWM2-hwAAAAk"]
[Fri Apr 03 18:34:26.818926 2026] [:error] [pid 33445:tid 33454] [client 85.204.70.96:40040] [client 85.204.70.96] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/prod/.env"] [unique_id "ac-XsllRNZ0iDVmJWM2-igAAAAQ"]
[Fri Apr 03 19:56:16.898651 2026] [:error] [pid 33542:tid 33567] [client 106.219.165.117:29652] [client 106.219.165.117] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.219.165.117, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ac-q4Hwb6uB1LaGtepbpWQAAANY"]
[Fri Apr 03 19:56:16.903560 2026] [:error] [pid 33542:tid 33567] [client 106.219.165.117:29652] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 03 20:37:27.390291 2026] [:error] [pid 33446:tid 33484] [client 74.248.137.46:35565] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Fri Apr 03 20:37:27.697073 2026] [:error] [pid 33446:tid 33487] [client 74.248.137.46:35565] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Apr 03 20:37:27.982036 2026] [:error] [pid 33446:tid 33485] [client 74.248.137.46:35565] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Fri Apr 03 20:37:28.271952 2026] [:error] [pid 33446:tid 33483] [client 74.248.137.46:35565] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 03 20:37:28.532053 2026] [:error] [pid 33446:tid 33492] [client 74.248.137.46:35565] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Apr 03 20:37:28.813008 2026] [:error] [pid 33446:tid 33495] [client 74.248.137.46:35565] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri Apr 03 20:37:29.408563 2026] [:error] [pid 33446:tid 33497] [client 74.248.137.46:35565] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Fri Apr 03 20:37:29.666907 2026] [:error] [pid 33446:tid 33499] [client 74.248.137.46:35565] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 03 20:37:30.088173 2026] [:error] [pid 33446:tid 33496] [client 74.248.137.46:35565] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Fri Apr 03 20:37:30.344606 2026] [:error] [pid 33446:tid 33483] [client 74.248.137.46:35565] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac-0itg3dCqFYIIdw0pQ6AAAAEY"]
[Fri Apr 03 20:37:30.862550 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:45121] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac-0iqGvTIc8-wY3jUR2pQAAAQE"]
[Fri Apr 03 20:37:31.390810 2026] [:error] [pid 33445:tid 33453] [client 74.248.137.46:35560] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac-0i1lRNZ0iDVmJWM324QAAAAM"]
[Fri Apr 03 20:37:31.957250 2026] [:error] [pid 33445:tid 33459] [client 74.248.137.46:49511] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "ac-0i1lRNZ0iDVmJWM324wAAAAk"]
[Fri Apr 03 20:37:32.783544 2026] [:error] [pid 33446:tid 33487] [client 74.248.137.46:45071] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n.php"] [unique_id "ac-0jNg3dCqFYIIdw0pQ-QAAAEo"]
[Fri Apr 03 20:37:33.435687 2026] [:error] [pid 33445:tid 33464] [client 74.248.137.46:57724] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n.php"] [unique_id "ac-0jVlRNZ0iDVmJWM326AAAAA4"]
[Fri Apr 03 20:37:33.998341 2026] [:error] [pid 33447:tid 33518] [client 74.248.137.46:32477] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n.php"] [unique_id "ac-0jUgaPmDHz92j4lNCIwAAAI4"]
[Fri Apr 03 20:37:34.571568 2026] [:error] [pid 33445:tid 33470] [client 74.248.137.46:45117] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n.php"] [unique_id "ac-0jllRNZ0iDVmJWM327gAAABQ"]
[Fri Apr 03 20:37:35.303981 2026] [:error] [pid 35469:tid 35478] [client 74.248.137.46:57699] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "ac-0j6GvTIc8-wY3jUR2uQAAAQc"]
[Fri Apr 03 20:37:35.872038 2026] [:error] [pid 40562:tid 40570] [client 74.248.137.46:64336] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "ac-0jzfFMXuP9zvqCep2GQAAAYU"]
[Fri Apr 03 20:37:36.445284 2026] [:error] [pid 33446:tid 33501] [client 74.248.137.46:45064] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "ac-0kNg3dCqFYIIdw0pRCAAAAFg"]
[Fri Apr 03 20:37:37.011737 2026] [:error] [pid 33446:tid 33491] [client 74.248.137.46:65256] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "ac-0kdg3dCqFYIIdw0pRCwAAAE4"]
[Fri Apr 03 20:37:37.631901 2026] [:error] [pid 33446:tid 33488] [client 74.248.137.46:45078] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new4.php"] [unique_id "ac-0kdg3dCqFYIIdw0pRDwAAAEs"]
[Fri Apr 03 20:37:38.592635 2026] [:error] [pid 35469:tid 35478] [client 74.248.137.46:65279] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new4.php"] [unique_id "ac-0kqGvTIc8-wY3jUR2xwAAAQc"]
[Fri Apr 03 20:37:39.384076 2026] [:error] [pid 35469:tid 35484] [client 74.248.137.46:31124] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new4.php"] [unique_id "ac-0k6GvTIc8-wY3jUR2ygAAAQ0"]
[Fri Apr 03 20:37:40.054499 2026] [:error] [pid 33446:tid 33492] [client 74.248.137.46:47237] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new4.php"] [unique_id "ac-0lNg3dCqFYIIdw0pRGQAAAE8"]
[Fri Apr 03 20:37:40.711415 2026] [:error] [pid 33542:tid 33565] [client 74.248.137.46:65253] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "ac-0lHwb6uB1LaGtepbyDgAAANQ"]
[Fri Apr 03 20:37:41.513049 2026] [:error] [pid 35469:tid 35487] [client 74.248.137.46:48437] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "ac-0laGvTIc8-wY3jUR20AAAARA"]
[Fri Apr 03 20:37:42.101530 2026] [:error] [pid 33446:tid 33500] [client 74.248.137.46:31115] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "ac-0ltg3dCqFYIIdw0pRJgAAAFc"]
[Fri Apr 03 20:37:42.672808 2026] [:error] [pid 35469:tid 35478] [client 74.248.137.46:37999] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "ac-0lqGvTIc8-wY3jUR20wAAAQc"]
[Fri Apr 03 20:37:43.285003 2026] [:error] [pid 40562:tid 40577] [client 74.248.137.46:53438] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-0lzfFMXuP9zvqCep2KgAAAYw"]
[Fri Apr 03 20:37:43.844923 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:32472] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-0l6GvTIc8-wY3jUR22AAAAQU"]
[Fri Apr 03 20:37:44.495114 2026] [:error] [pid 33446:tid 33499] [client 74.248.137.46:58078] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-0mNg3dCqFYIIdw0pRNAAAAFY"]
[Fri Apr 03 20:37:45.128121 2026] [:error] [pid 35469:tid 35491] [client 74.248.137.46:47290] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "ac-0maGvTIc8-wY3jUR24wAAARQ"]
[Fri Apr 03 20:37:45.830422 2026] [:error] [pid 40533:tid 40538] [client 74.248.137.46:65229] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac-0mfbIAA8AViDmwsunmAAAAUM"]
[Fri Apr 03 20:37:46.444979 2026] [:error] [pid 33446:tid 33488] [client 74.248.137.46:65240] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac-0mtg3dCqFYIIdw0pRRAAAAEs"]
[Fri Apr 03 20:37:47.016154 2026] [:error] [pid 35469:tid 35485] [client 74.248.137.46:45084] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac-0m6GvTIc8-wY3jUR27gAAAQ4"]
[Fri Apr 03 20:37:47.674598 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:31125] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac-0m6GvTIc8-wY3jUR28gAAAQU"]
[Fri Apr 03 20:37:48.486339 2026] [:error] [pid 35469:tid 35484] [client 74.248.137.46:49527] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "ac-0nKGvTIc8-wY3jUR2-QAAAQ0"]
[Fri Apr 03 20:37:49.271297 2026] [:error] [pid 35469:tid 35483] [client 74.248.137.46:45103] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "ac-0naGvTIc8-wY3jUR2_wAAAQw"]
[Fri Apr 03 20:37:50.182966 2026] [:error] [pid 33446:tid 33483] [client 74.248.137.46:53399] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "ac-0ntg3dCqFYIIdw0pRUQAAAEY"]
[Fri Apr 03 20:37:50.789434 2026] [:error] [pid 33446:tid 33494] [client 74.248.137.46:45062] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "ac-0ntg3dCqFYIIdw0pRVwAAAFE"]
[Fri Apr 03 20:37:51.547762 2026] [:error] [pid 33447:tid 33521] [client 74.248.137.46:53390] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "ac-0n0gaPmDHz92j4lNCLQAAAJE"]
[Fri Apr 03 20:37:52.165450 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:49530] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "ac-0oKGvTIc8-wY3jUR3CgAAAQE"]
[Fri Apr 03 20:37:52.847544 2026] [:error] [pid 35469:tid 35492] [client 74.248.137.46:45086] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "ac-0oKGvTIc8-wY3jUR3DwAAARU"]
[Fri Apr 03 20:37:53.475674 2026] [:error] [pid 33447:tid 33516] [client 74.248.137.46:54018] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "ac-0oUgaPmDHz92j4lNCLwAAAIw"]
[Fri Apr 03 20:37:54.238052 2026] [:error] [pid 33445:tid 33465] [client 74.248.137.46:65277] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ac-0ollRNZ0iDVmJWM33EgAAAA8"]
[Fri Apr 03 20:37:54.982564 2026] [:error] [pid 40562:tid 40573] [client 74.248.137.46:45157] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ac-0ojfFMXuP9zvqCep2MwAAAYg"]
[Fri Apr 03 20:37:55.884933 2026] [:error] [pid 33542:tid 33562] [client 74.248.137.46:47276] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ac-0o3wb6uB1LaGtepbyGAAAANE"]
[Fri Apr 03 20:37:56.559296 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:59824] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ac-0pKGvTIc8-wY3jUR3GgAAARM"]
[Fri Apr 03 20:37:57.147622 2026] [:error] [pid 33446:tid 33489] [client 74.248.137.46:47285] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "ac-0pdg3dCqFYIIdw0pRZAAAAEw"]
[Fri Apr 03 20:37:57.798805 2026] [:error] [pid 33447:tid 33518] [client 74.248.137.46:48409] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "ac-0pUgaPmDHz92j4lNCMwAAAI4"]
[Fri Apr 03 20:37:58.964625 2026] [:error] [pid 40533:tid 40536] [client 74.248.137.46:49481] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "ac-0pvbIAA8AViDmwsunnwAAAUE"]
[Fri Apr 03 20:37:59.580326 2026] [:error] [pid 33446:tid 33500] [client 74.248.137.46:47283] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "ac-0p9g3dCqFYIIdw0pRbAAAAFc"]
[Fri Apr 03 20:38:00.337230 2026] [:error] [pid 33446:tid 33494] [client 74.248.137.46:31148] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-0qNg3dCqFYIIdw0pRcQAAAFE"]
[Fri Apr 03 20:38:01.010694 2026] [:error] [pid 35469:tid 35493] [client 74.248.137.46:32468] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-0qaGvTIc8-wY3jUR3HwAAARY"]
[Fri Apr 03 20:38:02.236730 2026] [:error] [pid 55174:tid 55189] [client 74.248.137.46:65237] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-0qp_WKqUonPNUHYzpdgAAAc0"]
[Fri Apr 03 20:38:03.898433 2026] [:error] [pid 40562:tid 40569] [client 74.248.137.46:47287] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "ac-0qzfFMXuP9zvqCep2QgAAAYQ"]
[Fri Apr 03 20:38:04.702176 2026] [:error] [pid 35469:tid 35485] [client 74.248.137.46:58065] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "ac-0rKGvTIc8-wY3jUR3PwAAAQ4"]
[Fri Apr 03 20:38:05.983404 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:47245] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "ac-0raGvTIc8-wY3jUR3TgAAAQk"]
[Fri Apr 03 20:38:09.867045 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:32469] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "ac-0saGvTIc8-wY3jUR3XAAAAQk"]
[Fri Apr 03 20:38:11.123739 2026] [:error] [pid 35469:tid 35495] [client 74.248.137.46:58056] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "ac-0s6GvTIc8-wY3jUR3ZgAAARg"]
[Fri Apr 03 20:38:11.966317 2026] [:error] [pid 33447:tid 33509] [client 74.248.137.46:9045] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ac-0s0gaPmDHz92j4lNCQwAAAIU"]
[Fri Apr 03 20:38:12.829247 2026] [:error] [pid 40562:tid 40584] [client 74.248.137.46:45930] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ac-0tDfFMXuP9zvqCep2VAAAAZM"]
[Fri Apr 03 20:38:13.756376 2026] [:error] [pid 40562:tid 40566] [client 74.248.137.46:47266] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ac-0tTfFMXuP9zvqCep2WQAAAYE"]
[Fri Apr 03 20:38:15.003802 2026] [:error] [pid 40533:tid 40535] [client 74.248.137.46:47261] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ac-0t_bIAA8AViDmwsunpAAAAUA"]
[Fri Apr 03 20:38:15.782596 2026] [:error] [pid 33445:tid 33460] [client 74.248.137.46:59810] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "ac-0t1lRNZ0iDVmJWM33NwAAAAo"]
[Fri Apr 03 20:38:17.506053 2026] [:error] [pid 35469:tid 35488] [client 74.248.137.46:45946] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "ac-0uaGvTIc8-wY3jUR3jQAAARE"]
[Fri Apr 03 20:38:20.619952 2026] [:error] [pid 35469:tid 35485] [client 74.248.137.46:9154] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "ac-0vKGvTIc8-wY3jUR3mQAAAQ4"]
[Fri Apr 03 20:38:21.899278 2026] [:error] [pid 35469:tid 35474] [client 74.248.137.46:9201] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "ac-0vaGvTIc8-wY3jUR3nwAAAQM"]
[Fri Apr 03 20:38:22.870592 2026] [:error] [pid 33445:tid 33462] [client 74.248.137.46:34320] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "ac-0vllRNZ0iDVmJWM33SAAAAAw"]
[Fri Apr 03 20:38:24.162090 2026] [:error] [pid 35469:tid 35473] [client 74.248.137.46:34311] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "ac-0wKGvTIc8-wY3jUR3pwAAAQI"]
[Fri Apr 03 20:38:25.156082 2026] [:error] [pid 33445:tid 33459] [client 74.248.137.46:45916] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "ac-0wVlRNZ0iDVmJWM33UgAAAAk"]
[Fri Apr 03 20:38:26.359629 2026] [:error] [pid 35469:tid 35492] [client 74.248.137.46:62616] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "ac-0wqGvTIc8-wY3jUR3qQAAARU"]
[Fri Apr 03 20:38:28.301180 2026] [:error] [pid 35469:tid 35477] [client 74.248.137.46:9199] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nope.php"] [unique_id "ac-0xKGvTIc8-wY3jUR3rQAAAQY"]
[Fri Apr 03 20:38:29.684009 2026] [:error] [pid 33447:tid 33512] [client 74.248.137.46:51877] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nope.php"] [unique_id "ac-0xUgaPmDHz92j4lNCTgAAAIg"]
[Fri Apr 03 20:38:30.615258 2026] [:error] [pid 40562:tid 40568] [client 74.248.137.46:62615] File does not exist: /usr/local/apache/htdocs/suspended-page/nope.php
[Fri Apr 03 20:38:30.886169 2026] [:error] [pid 40562:tid 40565] [client 74.248.137.46:62615] File does not exist: /usr/local/apache/htdocs/suspended-page/js.php
[Fri Apr 03 20:38:31.264219 2026] [:error] [pid 40562:tid 40566] [client 74.248.137.46:62615] [client 74.248.137.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ac-0xzfFMXuP9zvqCep2egAAAYE"]
[Fri Apr 03 20:38:32.422854 2026] [:error] [pid 33542:tid 33560] [client 74.248.137.46:51880] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Fri Apr 03 20:38:32.710494 2026] [:error] [pid 33542:tid 33566] [client 74.248.137.46:51880] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Apr 03 20:38:32.987398 2026] [:error] [pid 33542:tid 33554] [client 74.248.137.46:51880] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Fri Apr 03 20:38:34.391462 2026] [:error] [pid 33542:tid 33554] [client 74.248.137.46:51880] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Apr 03 20:38:34.766474 2026] [:error] [pid 33542:tid 33558] [client 74.248.137.46:51880] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Fri Apr 03 20:38:35.530207 2026] [:error] [pid 33542:tid 33564] [client 74.248.137.46:51880] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Fri Apr 03 20:38:35.868355 2026] [:error] [pid 33542:tid 33559] [client 74.248.137.46:51880] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Fri Apr 03 20:38:36.256752 2026] [:error] [pid 33542:tid 33545] [client 74.248.137.46:51880] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 03 20:38:36.512177 2026] [:error] [pid 33542:tid 33567] [client 74.248.137.46:51880] [client 74.248.137.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "ac-0zHwb6uB1LaGtepbySgAAANY"]
[Fri Apr 03 20:38:37.258092 2026] [:error] [pid 33447:tid 33506] [client 74.248.137.46:57310] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Fri Apr 03 20:38:37.591088 2026] [:error] [pid 33447:tid 33507] [client 74.248.137.46:57310] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac-0zUgaPmDHz92j4lNCUgAAAIM"]
[Fri Apr 03 20:38:38.723801 2026] [:error] [pid 35469:tid 35487] [client 74.248.137.46:46783] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac-0zqGvTIc8-wY3jUR3ugAAARA"]
[Fri Apr 03 20:38:39.584289 2026] [:error] [pid 33447:tid 33521] [client 74.248.137.46:44725] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac-0z0gaPmDHz92j4lNCVwAAAJE"]
[Fri Apr 03 20:38:41.107038 2026] [:error] [pid 33447:tid 33524] [client 74.248.137.46:53356] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "ac-00UgaPmDHz92j4lNCWgAAAJQ"]
[Fri Apr 03 20:38:41.779622 2026] [:error] [pid 33447:tid 33517] [client 74.248.137.46:51878] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac-00UgaPmDHz92j4lNCXQAAAI0"]
[Fri Apr 03 20:38:53.265676 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:53984] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wp.php"] [unique_id "ac-03aGvTIc8-wY3jUR4DAAAAQQ"]
[Fri Apr 03 20:39:34.447548 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:35904] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "ac-1BqGvTIc8-wY3jUR4mQAAAQs"]
[Fri Apr 03 20:39:35.455596 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:64771] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "ac-1B6GvTIc8-wY3jUR4ogAAAQ8"]
[Fri Apr 03 20:39:36.553179 2026] [:error] [pid 55174:tid 55187] [client 74.248.137.46:53315] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "ac-1CJ_WKqUonPNUHYzp2gAAAcs"]
[Fri Apr 03 20:39:37.334732 2026] [:error] [pid 33542:tid 33559] [client 74.248.137.46:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/33.php
[Fri Apr 03 20:39:37.644965 2026] [:error] [pid 33542:tid 33545] [client 74.248.137.46:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 03 20:39:37.988579 2026] [:error] [pid 33542:tid 33553] [client 74.248.137.46:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Fri Apr 03 20:39:38.706096 2026] [:error] [pid 33542:tid 33546] [client 74.248.137.46:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Fri Apr 03 20:39:38.983364 2026] [:error] [pid 33542:tid 33555] [client 74.248.137.46:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Fri Apr 03 20:39:39.334768 2026] [:error] [pid 33542:tid 33565] [client 74.248.137.46:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/v4.php
[Fri Apr 03 20:39:39.595544 2026] [:error] [pid 33542:tid 33551] [client 74.248.137.46:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Apr 03 20:39:39.934970 2026] [:error] [pid 33542:tid 33552] [client 74.248.137.46:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Apr 03 20:39:40.217716 2026] [:error] [pid 33542:tid 33556] [client 74.248.137.46:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Fri Apr 03 20:39:40.499078 2026] [:error] [pid 33542:tid 33564] [client 74.248.137.46:44682] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Fri Apr 03 20:39:40.772145 2026] [:error] [pid 33542:tid 33559] [client 74.248.137.46:44682] [client 74.248.137.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ac-1DHwb6uB1LaGtepbykAAAAM4"]
[Fri Apr 03 20:39:41.322915 2026] [:error] [pid 55174:tid 55193] [client 74.248.137.46:46795] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "ac-1DZ_WKqUonPNUHYzp7QAAAdE"]
[Fri Apr 03 20:39:42.001370 2026] [:error] [pid 33446:tid 33488] [client 74.248.137.46:56043] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "ac-1Dtg3dCqFYIIdw0pSlAAAAEs"]
[Fri Apr 03 20:39:42.525884 2026] [:error] [pid 33542:tid 33549] [client 74.248.137.46:31860] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "ac-1Dnwb6uB1LaGtepbykgAAAMQ"]
[Fri Apr 03 20:39:43.071139 2026] [:error] [pid 33445:tid 33461] [client 74.248.137.46:63928] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "ac-1D1lRNZ0iDVmJWM34CwAAAAs"]
[Fri Apr 03 20:39:43.636815 2026] [:error] [pid 33445:tid 33466] [client 74.248.137.46:61067] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ext.php"] [unique_id "ac-1D1lRNZ0iDVmJWM34DwAAABA"]
[Fri Apr 03 20:39:44.214889 2026] [:error] [pid 33446:tid 33497] [client 74.248.137.46:52408] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ext.php"] [unique_id "ac-1ENg3dCqFYIIdw0pSmgAAAFQ"]
[Fri Apr 03 20:39:44.766433 2026] [:error] [pid 55174:tid 55177] [client 74.248.137.46:31870] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ext.php"] [unique_id "ac-1EJ_WKqUonPNUHYzp_QAAAcE"]
[Fri Apr 03 20:39:45.317165 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:64784] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ext.php"] [unique_id "ac-1EaGvTIc8-wY3jUR4xAAAAQk"]
[Fri Apr 03 20:39:45.968396 2026] [:error] [pid 35469:tid 35474] [client 74.248.137.46:46832] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about3.php"] [unique_id "ac-1EaGvTIc8-wY3jUR4xwAAAQM"]
[Fri Apr 03 20:39:46.556873 2026] [:error] [pid 40562:tid 40577] [client 74.248.137.46:44674] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about3.php"] [unique_id "ac-1EjfFMXuP9zvqCep3BAAAAYw"]
[Fri Apr 03 20:39:47.199712 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:56010] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about3.php"] [unique_id "ac-1E6GvTIc8-wY3jUR40wAAAQs"]
[Fri Apr 03 20:39:47.744844 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:51879] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about3.php"] [unique_id "ac-1E6GvTIc8-wY3jUR41QAAARc"]
[Fri Apr 03 20:39:48.307346 2026] [:error] [pid 55174:tid 55177] [client 74.248.137.46:44689] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ac-1FJ_WKqUonPNUHYzqCgAAAcE"]
[Fri Apr 03 20:39:48.831744 2026] [:error] [pid 33445:tid 33456] [client 74.248.137.46:35940] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ac-1FFlRNZ0iDVmJWM34EAAAAAY"]
[Fri Apr 03 20:39:49.375091 2026] [:error] [pid 33447:tid 33507] [client 74.248.137.46:48960] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ac-1FUgaPmDHz92j4lNCsAAAAIM"]
[Fri Apr 03 20:39:49.991846 2026] [:error] [pid 35469:tid 35487] [client 74.248.137.46:35924] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ac-1FaGvTIc8-wY3jUR43QAAARA"]
[Fri Apr 03 20:39:50.532551 2026] [:error] [pid 55174:tid 55197] [client 74.248.137.46:46820] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "ac-1Fp_WKqUonPNUHYzqDwAAAdU"]
[Fri Apr 03 20:39:51.232650 2026] [:error] [pid 55174:tid 55181] [client 74.248.137.46:56023] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "ac-1F5_WKqUonPNUHYzqFQAAAcU"]
[Fri Apr 03 20:39:51.800244 2026] [:error] [pid 33445:tid 33470] [client 74.248.137.46:52390] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "ac-1F1lRNZ0iDVmJWM34EwAAABQ"]
[Fri Apr 03 20:39:52.465768 2026] [:error] [pid 33542:tid 33561] [client 74.248.137.46:52361] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "ac-1GHwb6uB1LaGtepbyngAAANA"]
[Fri Apr 03 20:39:53.022575 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:61089] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ac-1Gdg3dCqFYIIdw0pSpwAAAEI"]
[Fri Apr 03 20:39:53.683887 2026] [:error] [pid 33542:tid 33552] [client 74.248.137.46:64776] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ac-1GXwb6uB1LaGtepbypgAAAMc"]
[Fri Apr 03 20:39:54.343397 2026] [:error] [pid 40562:tid 40580] [client 74.248.137.46:31854] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ac-1GjfFMXuP9zvqCep3LwAAAY8"]
[Fri Apr 03 20:39:55.019340 2026] [:error] [pid 35469:tid 35478] [client 74.248.137.46:36792] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ac-1G6GvTIc8-wY3jUR47AAAAQc"]
[Fri Apr 03 20:39:55.720336 2026] [:error] [pid 35469:tid 35479] [client 74.248.137.46:63935] [client 74.248.137.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "ac-1G6GvTIc8-wY3jUR49wAAAQg"]
[Fri Apr 03 20:39:56.302983 2026] [:error] [pid 33445:tid 33472] [client 74.248.137.46:61085] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "ac-1HFlRNZ0iDVmJWM34HwAAABY"]
[Fri Apr 03 20:39:56.936846 2026] [:error] [pid 40562:tid 40566] [client 74.248.137.46:46813] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "ac-1HDfFMXuP9zvqCep3OQAAAYE"]
[Fri Apr 03 20:39:57.514313 2026] [:error] [pid 33447:tid 33515] [client 74.248.137.46:37344] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "ac-1HUgaPmDHz92j4lNCyQAAAIs"]
[Fri Apr 03 20:39:58.072708 2026] [:error] [pid 33446:tid 33490] [client 74.248.137.46:63898] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "ac-1Htg3dCqFYIIdw0pSuQAAAE0"]
[Fri Apr 03 20:39:58.654641 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:35957] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "ac-1HqGvTIc8-wY3jUR4_gAAAQs"]
[Fri Apr 03 20:39:59.192282 2026] [:error] [pid 40562:tid 40569] [client 74.248.137.46:64812] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "ac-1HzfFMXuP9zvqCep3QwAAAYQ"]
[Fri Apr 03 20:39:59.955217 2026] [:error] [pid 33447:tid 33504] [client 74.248.137.46:55323] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "ac-1H0gaPmDHz92j4lNCzgAAAIA"]
[Fri Apr 03 20:40:00.534282 2026] [:error] [pid 40562:tid 40581] [client 74.248.137.46:36768] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "ac-1IDfFMXuP9zvqCep3SgAAAZA"]
[Fri Apr 03 20:40:01.061015 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:51886] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac-1IaGvTIc8-wY3jUR5EAAAAQU"]
[Fri Apr 03 20:40:01.830773 2026] [:error] [pid 40533:tid 40558] [client 74.248.137.46:44707] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac-1IfbIAA8AViDmwsun0wAAAVc"]
[Fri Apr 03 20:40:02.475333 2026] [:error] [pid 33542:tid 33549] [client 74.248.137.46:37373] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac-1Inwb6uB1LaGtepbysAAAAMQ"]
[Fri Apr 03 20:40:03.014632 2026] [:error] [pid 35469:tid 35473] [client 74.248.137.46:56022] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac-1I6GvTIc8-wY3jUR5HgAAAQI"]
[Fri Apr 03 20:40:03.689296 2026] [:error] [pid 35469:tid 35489] [client 74.248.137.46:63910] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-1I6GvTIc8-wY3jUR5IwAAARI"]
[Fri Apr 03 20:40:04.220588 2026] [:error] [pid 35469:tid 35474] [client 74.248.137.46:63929] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-1JKGvTIc8-wY3jUR5JgAAAQM"]
[Fri Apr 03 20:40:04.804050 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:61060] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-1JKGvTIc8-wY3jUR5LAAAAQ8"]
[Fri Apr 03 20:40:05.347088 2026] [:error] [pid 33446:tid 33493] [client 74.248.137.46:31820] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "ac-1Jdg3dCqFYIIdw0pSzAAAAFA"]
[Fri Apr 03 20:40:05.935054 2026] [:error] [pid 33447:tid 33527] [client 74.248.137.46:35905] [client 74.248.137.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ac-1JUgaPmDHz92j4lNC1gAAAJc"]
[Fri Apr 03 20:40:06.530291 2026] [:error] [pid 40562:tid 40588] [client 74.248.137.46:46797] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ac-1JjfFMXuP9zvqCep3VwAAAZc"]
[Fri Apr 03 20:40:07.094931 2026] [:error] [pid 33447:tid 33512] [client 74.248.137.46:56012] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ac-1J0gaPmDHz92j4lNC2AAAAIg"]
[Fri Apr 03 20:40:07.847605 2026] [:error] [pid 33446:tid 33498] [client 74.248.137.46:61058] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ac-1J9g3dCqFYIIdw0pSzwAAAFU"]
[Fri Apr 03 20:40:08.406644 2026] [:error] [pid 33445:tid 33469] [client 74.248.137.46:31846] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "ac-1KFlRNZ0iDVmJWM34LwAAABM"]
[Fri Apr 03 20:40:09.267632 2026] [:error] [pid 35469:tid 35488] [client 74.248.137.46:52364] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "ac-1KaGvTIc8-wY3jUR5RQAAARE"]
[Fri Apr 03 20:40:10.141190 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:62655] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "ac-1KqGvTIc8-wY3jUR5TQAAAQk"]
[Fri Apr 03 20:40:10.968141 2026] [:error] [pid 33446:tid 33496] [client 74.248.137.46:37361] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "ac-1Ktg3dCqFYIIdw0pS2AAAAFM"]
[Fri Apr 03 20:40:11.780296 2026] [:error] [pid 33446:tid 33482] [client 74.248.137.46:31828] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/filemanager.php"] [unique_id "ac-1K9g3dCqFYIIdw0pS2gAAAEU"]
[Fri Apr 03 20:40:12.898620 2026] [:error] [pid 33445:tid 33457] [client 74.248.137.46:46804] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/filemanager.php"] [unique_id "ac-1LFlRNZ0iDVmJWM34NgAAAAc"]
[Fri Apr 03 20:40:13.432372 2026] [:error] [pid 33446:tid 33487] [client 74.248.137.46:44681] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/filemanager.php"] [unique_id "ac-1Ldg3dCqFYIIdw0pS5QAAAEo"]
[Fri Apr 03 20:40:13.991878 2026] [:error] [pid 33446:tid 33491] [client 74.248.137.46:35946] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/filemanager.php"] [unique_id "ac-1Ldg3dCqFYIIdw0pS6gAAAE4"]
[Fri Apr 03 20:40:14.574589 2026] [:error] [pid 33445:tid 33459] [client 74.248.137.46:51859] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-1LllRNZ0iDVmJWM34NwAAAAk"]
[Fri Apr 03 20:40:15.330225 2026] [:error] [pid 33446:tid 33497] [client 74.248.137.46:35916] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-1L9g3dCqFYIIdw0pS8AAAAFQ"]
[Fri Apr 03 20:40:16.027523 2026] [:error] [pid 40533:tid 40537] [client 74.248.137.46:44692] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-1MPbIAA8AViDmwsun3wAAAUI"]
[Fri Apr 03 20:40:16.590746 2026] [:error] [pid 33445:tid 33470] [client 74.248.137.46:35950] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "ac-1MFlRNZ0iDVmJWM34RQAAABQ"]
[Fri Apr 03 20:40:17.560966 2026] [:error] [pid 40533:tid 40554] [client 74.248.137.46:52394] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dlu.php"] [unique_id "ac-1MfbIAA8AViDmwsun5QAAAVM"]
[Fri Apr 03 20:40:18.204594 2026] [:error] [pid 40533:tid 40556] [client 74.248.137.46:62633] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dlu.php"] [unique_id "ac-1MvbIAA8AViDmwsun6wAAAVU"]
[Fri Apr 03 20:40:18.851067 2026] [:error] [pid 33446:tid 33494] [client 74.248.137.46:31862] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dlu.php"] [unique_id "ac-1Mtg3dCqFYIIdw0pS9AAAAFE"]
[Fri Apr 03 20:40:19.603773 2026] [:error] [pid 33446:tid 33481] [client 74.248.137.46:56057] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dlu.php"] [unique_id "ac-1M9g3dCqFYIIdw0pS-gAAAEQ"]
[Fri Apr 03 20:40:20.114510 2026] [:error] [pid 33447:tid 33516] [client 74.248.137.46:51900] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/555.php"] [unique_id "ac-1NEgaPmDHz92j4lNC4wAAAIw"]
[Fri Apr 03 20:40:20.763074 2026] [:error] [pid 33446:tid 33485] [client 74.248.137.46:52415] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/555.php"] [unique_id "ac-1NNg3dCqFYIIdw0pS_wAAAEg"]
[Fri Apr 03 20:40:21.346820 2026] [:error] [pid 33445:tid 33469] [client 74.248.137.46:63909] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/555.php"] [unique_id "ac-1NVlRNZ0iDVmJWM34SwAAABM"]
[Fri Apr 03 20:40:22.791888 2026] [:error] [pid 55174:tid 55200] [client 74.248.137.46:31871] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/555.php"] [unique_id "ac-1Np_WKqUonPNUHYzqMwAAAdg"]
[Fri Apr 03 20:40:24.026466 2026] [:error] [pid 33446:tid 33501] [client 74.248.137.46:63903] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mail.php"] [unique_id "ac-1ONg3dCqFYIIdw0pTCAAAAFg"]
[Fri Apr 03 20:40:24.782154 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:51870] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mail.php"] [unique_id "ac-1OKGvTIc8-wY3jUR5egAAAQ8"]
[Fri Apr 03 20:40:25.519634 2026] [:error] [pid 35469:tid 35478] [client 74.248.137.46:52393] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mail.php"] [unique_id "ac-1OaGvTIc8-wY3jUR5fAAAAQc"]
[Fri Apr 03 20:40:26.252929 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:61076] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mail.php"] [unique_id "ac-1OqGvTIc8-wY3jUR5fwAAAQs"]
[Fri Apr 03 20:40:29.509321 2026] [:error] [pid 33445:tid 33468] [client 74.248.137.46:61068] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/403.php"] [unique_id "ac-1PVlRNZ0iDVmJWM34cQAAABI"]
[Fri Apr 03 20:40:30.702112 2026] [:error] [pid 40562:tid 40582] [client 74.248.137.46:51888] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/403.php"] [unique_id "ac-1PjfFMXuP9zvqCep3fQAAAZE"]
[Fri Apr 03 20:40:31.476100 2026] [:error] [pid 40533:tid 40541] [client 74.248.137.46:64788] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/403.php"] [unique_id "ac-1P_bIAA8AViDmwsun-QAAAUY"]
[Fri Apr 03 20:40:32.074537 2026] [:error] [pid 40562:tid 40586] [client 74.248.137.46:62623] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/403.php"] [unique_id "ac-1QDfFMXuP9zvqCep3ggAAAZU"]
[Fri Apr 03 20:40:33.135011 2026] [:error] [pid 33445:tid 33471] [client 74.248.137.46:37347] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "ac-1QVlRNZ0iDVmJWM34hAAAABU"]
[Fri Apr 03 20:40:34.459722 2026] [:error] [pid 33542:tid 33562] [client 74.248.137.46:63879] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "ac-1Qnwb6uB1LaGtepby0QAAANE"]
[Fri Apr 03 20:40:35.195192 2026] [:error] [pid 33446:tid 33499] [client 74.248.137.46:52385] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "ac-1Q9g3dCqFYIIdw0pTHAAAAFY"]
[Fri Apr 03 20:40:36.003666 2026] [:error] [pid 40562:tid 40572] [client 74.248.137.46:62606] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "ac-1RDfFMXuP9zvqCep3kQAAAYc"]
[Fri Apr 03 20:40:36.578991 2026] [:error] [pid 35469:tid 35478] [client 74.248.137.46:40224] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ac-1RKGvTIc8-wY3jUR5tgAAAQc"]
[Fri Apr 03 20:40:37.347377 2026] [:error] [pid 33446:tid 33486] [client 74.248.137.46:51852] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ac-1Rdg3dCqFYIIdw0pTIAAAAEk"]
[Fri Apr 03 20:40:38.465551 2026] [:error] [pid 33446:tid 33490] [client 74.248.137.46:62610] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ac-1Rtg3dCqFYIIdw0pTKQAAAE0"]
[Fri Apr 03 20:40:38.998775 2026] [:error] [pid 33447:tid 33526] [client 74.248.137.46:64787] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ac-1RkgaPmDHz92j4lNC8QAAAJY"]
[Fri Apr 03 20:40:39.735403 2026] [:error] [pid 33446:tid 33488] [client 74.248.137.46:64769] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hook.php"] [unique_id "ac-1R9g3dCqFYIIdw0pTLgAAAEs"]
[Fri Apr 03 20:40:41.453209 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:62599] File does not exist: /usr/local/apache/htdocs/suspended-page/hook.php
[Fri Apr 03 20:40:41.828557 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:62599] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Fri Apr 03 20:40:42.122177 2026] [:error] [pid 35469:tid 35484] [client 74.248.137.46:62599] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 03 20:40:42.395482 2026] [:error] [pid 35469:tid 35480] [client 74.248.137.46:62599] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php
[Fri Apr 03 20:40:42.765801 2026] [:error] [pid 35469:tid 35477] [client 74.248.137.46:62599] File does not exist: /usr/local/apache/htdocs/suspended-page/te.php
[Fri Apr 03 20:40:43.125880 2026] [:error] [pid 35469:tid 35493] [client 74.248.137.46:62599] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 03 20:40:43.492978 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:62599] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Fri Apr 03 20:40:43.828859 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:62599] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Fri Apr 03 20:40:44.087278 2026] [:error] [pid 35469:tid 35488] [client 74.248.137.46:62599] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 03 20:40:44.374615 2026] [:error] [pid 35469:tid 35471] [client 74.248.137.46:62599] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Apr 03 20:40:44.912496 2026] [:error] [pid 35469:tid 35482] [client 74.248.137.46:62599] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ac-1TKGvTIc8-wY3jUR58gAAAQs"]
[Fri Apr 03 20:40:45.459622 2026] [:error] [pid 33446:tid 33500] [client 74.248.137.46:35921] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ac-1Tdg3dCqFYIIdw0pTOwAAAFc"]
[Fri Apr 03 20:40:46.109990 2026] [:error] [pid 33445:tid 33454] [client 74.248.137.46:63872] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ac-1TllRNZ0iDVmJWM34pgAAAAQ"]
[Fri Apr 03 20:40:47.273031 2026] [:error] [pid 33446:tid 33491] [client 74.248.137.46:31844] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ac-1T9g3dCqFYIIdw0pTQQAAAE4"]
[Fri Apr 03 20:40:48.356374 2026] [:error] [pid 33445:tid 33458] [client 74.248.137.46:52369] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "ac-1UFlRNZ0iDVmJWM34uwAAAAg"]
[Fri Apr 03 20:40:48.959561 2026] [:error] [pid 33447:tid 33512] [client 74.248.137.46:35935] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "ac-1UEgaPmDHz92j4lNC_gAAAIg"]
[Fri Apr 03 20:40:50.352899 2026] [:error] [pid 33446:tid 33494] [client 74.248.137.46:31829] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "ac-1Utg3dCqFYIIdw0pTUQAAAFE"]
[Fri Apr 03 20:40:51.028540 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:64811] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "ac-1U6GvTIc8-wY3jUR5-wAAAQU"]
[Fri Apr 03 20:40:51.624209 2026] [:error] [pid 33445:tid 33459] [client 74.248.137.46:36774] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "ac-1U1lRNZ0iDVmJWM34xQAAAAk"]
[Fri Apr 03 20:40:52.176881 2026] [:error] [pid 33445:tid 33455] [client 74.248.137.46:62642] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "ac-1VFlRNZ0iDVmJWM34yQAAAAU"]
[Fri Apr 03 20:40:52.755697 2026] [:error] [pid 35469:tid 35485] [client 74.248.137.46:36793] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "ac-1VKGvTIc8-wY3jUR6BAAAAQ4"]
[Fri Apr 03 20:40:53.640077 2026] [:error] [pid 35469:tid 35488] [client 74.248.137.46:51855] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "ac-1VaGvTIc8-wY3jUR6CAAAARE"]
[Fri Apr 03 20:40:54.598134 2026] [:error] [pid 40562:tid 40571] [client 74.248.137.46:56026] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac-1VjfFMXuP9zvqCep3uwAAAYY"]
[Fri Apr 03 20:40:55.228712 2026] [:error] [pid 35469:tid 35492] [client 74.248.137.46:62629] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac-1V6GvTIc8-wY3jUR6FAAAARU"]
[Fri Apr 03 20:40:55.758498 2026] [:error] [pid 35469:tid 35471] [client 74.248.137.46:61095] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac-1V6GvTIc8-wY3jUR6GwAAAQA"]
[Fri Apr 03 20:40:56.456673 2026] [:error] [pid 40562:tid 40576] [client 74.248.137.46:52405] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "ac-1WDfFMXuP9zvqCep3wAAAAYs"]
[Fri Apr 03 20:40:57.318600 2026] [:error] [pid 33446:tid 33486] [client 74.248.137.46:37342] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shoha.php"] [unique_id "ac-1Wdg3dCqFYIIdw0pTXwAAAEk"]
[Fri Apr 03 20:40:57.929163 2026] [:error] [pid 33445:tid 33457] [client 74.248.137.46:51882] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shoha.php"] [unique_id "ac-1WVlRNZ0iDVmJWM341gAAAAc"]
[Fri Apr 03 20:40:59.138676 2026] [:error] [pid 33445:tid 33459] [client 74.248.137.46:46807] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shoha.php"] [unique_id "ac-1W1lRNZ0iDVmJWM342wAAAAk"]
[Fri Apr 03 20:40:59.788105 2026] [:error] [pid 40562:tid 40585] [client 74.248.137.46:64818] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shoha.php"] [unique_id "ac-1WzfFMXuP9zvqCep3xgAAAZQ"]
[Fri Apr 03 20:41:00.621064 2026] [:error] [pid 35469:tid 35487] [client 74.248.137.46:56000] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "ac-1XKGvTIc8-wY3jUR6PwAAARA"]
[Fri Apr 03 20:41:01.555611 2026] [:error] [pid 55174:tid 55180] [client 74.248.137.46:60738] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "ac-1XZ_WKqUonPNUHYzqXgAAAcQ"]
[Fri Apr 03 20:41:02.331329 2026] [:error] [pid 35469:tid 35471] [client 74.248.137.46:56029] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "ac-1XqGvTIc8-wY3jUR6RwAAAQA"]
[Fri Apr 03 20:41:03.081862 2026] [:error] [pid 55174:tid 55190] [client 74.248.137.46:35914] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "ac-1X5_WKqUonPNUHYzqYwAAAc4"]
[Fri Apr 03 20:41:04.103114 2026] [:error] [pid 33445:tid 33452] [client 74.248.137.46:46822] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ac-1YFlRNZ0iDVmJWM347QAAAAI"]
[Fri Apr 03 20:41:04.870797 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:63925] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ac-1YKGvTIc8-wY3jUR6UAAAAQE"]
[Fri Apr 03 20:41:05.722886 2026] [:error] [pid 33445:tid 33465] [client 74.248.137.46:35908] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ac-1YVlRNZ0iDVmJWM349wAAAA8"]
[Fri Apr 03 20:41:06.453318 2026] [:error] [pid 33446:tid 33492] [client 74.248.137.46:61090] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ac-1Ytg3dCqFYIIdw0pTgQAAAE8"]
[Fri Apr 03 20:41:07.143998 2026] [:error] [pid 33445:tid 33451] [client 74.248.137.46:31858] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ac-1Y1lRNZ0iDVmJWM35AAAAAAE"]
[Fri Apr 03 20:41:07.698086 2026] [:error] [pid 35469:tid 35471] [client 74.248.137.46:37370] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ac-1Y6GvTIc8-wY3jUR6ZQAAAQA"]
[Fri Apr 03 20:41:08.563837 2026] [:error] [pid 33542:tid 33569] [client 74.248.137.46:53342] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ac-1ZHwb6uB1LaGtepby5gAAANg"]
[Fri Apr 03 20:41:09.183564 2026] [:error] [pid 33447:tid 33511] [client 74.248.137.46:51860] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ac-1ZUgaPmDHz92j4lNDDAAAAIc"]
[Fri Apr 03 20:41:09.745668 2026] [:error] [pid 33447:tid 33510] [client 74.248.137.46:35906] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "ac-1ZUgaPmDHz92j4lNDDwAAAIY"]
[Fri Apr 03 20:41:10.519103 2026] [:error] [pid 33446:tid 33480] [client 74.248.137.46:63873] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "ac-1Ztg3dCqFYIIdw0pTlQAAAEM"]
[Fri Apr 03 20:41:11.114390 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:35951] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "ac-1Z6GvTIc8-wY3jUR6cAAAAQE"]
[Fri Apr 03 20:41:11.789900 2026] [:error] [pid 35469:tid 35492] [client 74.248.137.46:64781] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "ac-1Z6GvTIc8-wY3jUR6eAAAARU"]
[Fri Apr 03 20:41:12.370293 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:63932] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mo.php"] [unique_id "ac-1aNg3dCqFYIIdw0pTmwAAAEI"]
[Fri Apr 03 20:41:12.923851 2026] [:error] [pid 35469:tid 35493] [client 74.248.137.46:46829] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mo.php"] [unique_id "ac-1aKGvTIc8-wY3jUR6fAAAARY"]
[Fri Apr 03 20:41:13.698050 2026] [:error] [pid 33446:tid 33485] [client 74.248.137.46:62624] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mo.php"] [unique_id "ac-1adg3dCqFYIIdw0pTogAAAEg"]
[Fri Apr 03 20:41:14.473273 2026] [:error] [pid 33446:tid 33492] [client 74.248.137.46:64804] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mo.php"] [unique_id "ac-1atg3dCqFYIIdw0pTpAAAAE8"]
[Fri Apr 03 20:41:15.370869 2026] [:error] [pid 33446:tid 33496] [client 74.248.137.46:62626] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "ac-1a9g3dCqFYIIdw0pTpwAAAFM"]
[Fri Apr 03 20:41:16.029837 2026] [:error] [pid 33446:tid 33481] [client 74.248.137.46:46802] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "ac-1bNg3dCqFYIIdw0pTqwAAAEQ"]
[Fri Apr 03 20:41:16.634366 2026] [:error] [pid 33446:tid 33494] [client 74.248.137.46:52383] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "ac-1bNg3dCqFYIIdw0pTsQAAAFE"]
[Fri Apr 03 20:41:17.254100 2026] [:error] [pid 33445:tid 33452] [client 74.248.137.46:36763] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "ac-1bVlRNZ0iDVmJWM35FgAAAAI"]
[Fri Apr 03 20:41:17.874017 2026] [:error] [pid 33446:tid 33484] [client 74.248.137.46:31865] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inde.php"] [unique_id "ac-1bdg3dCqFYIIdw0pTtAAAAEc"]
[Fri Apr 03 20:41:18.513948 2026] [:error] [pid 33447:tid 33504] [client 74.248.137.46:61107] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inde.php"] [unique_id "ac-1bkgaPmDHz92j4lNDHAAAAIA"]
[Fri Apr 03 20:41:19.101301 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:55313] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inde.php"] [unique_id "ac-1b9g3dCqFYIIdw0pTuQAAAEI"]
[Fri Apr 03 20:41:19.792521 2026] [:error] [pid 33447:tid 33507] [client 74.248.137.46:61100] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inde.php"] [unique_id "ac-1b0gaPmDHz92j4lNDIgAAAIM"]
[Fri Apr 03 20:41:20.819530 2026] [:error] [pid 40562:tid 40566] [client 74.248.137.46:56015] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ac-1cDfFMXuP9zvqCep38wAAAYE"]
[Fri Apr 03 20:41:21.459779 2026] [:error] [pid 55174:tid 55182] [client 74.248.137.46:36746] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ac-1cZ_WKqUonPNUHYzqgQAAAcY"]
[Fri Apr 03 20:41:22.089791 2026] [:error] [pid 33447:tid 33512] [client 74.248.137.46:61059] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ac-1ckgaPmDHz92j4lNDJwAAAIg"]
[Fri Apr 03 20:41:22.732140 2026] [:error] [pid 40562:tid 40567] [client 74.248.137.46:64809] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ac-1cjfFMXuP9zvqCep39wAAAYI"]
[Fri Apr 03 20:41:23.375816 2026] [:error] [pid 33447:tid 33507] [client 74.248.137.46:46814] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ac-1c0gaPmDHz92j4lNDMQAAAIM"]
[Fri Apr 03 20:41:23.932449 2026] [:error] [pid 33446:tid 33487] [client 74.248.137.46:56905] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ac-1c9g3dCqFYIIdw0pTxAAAAEo"]
[Fri Apr 03 20:41:24.700213 2026] [:error] [pid 40562:tid 40572] [client 74.248.137.46:36748] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ac-1dDfFMXuP9zvqCep3_QAAAYc"]
[Fri Apr 03 20:41:25.314344 2026] [:error] [pid 35469:tid 35493] [client 74.248.137.46:35967] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ac-1daGvTIc8-wY3jUR6igAAARY"]
[Fri Apr 03 20:41:26.121862 2026] [:error] [pid 40533:tid 40552] [client 74.248.137.46:31852] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "ac-1dvbIAA8AViDmwsuoHQAAAVE"]
[Fri Apr 03 20:41:26.745884 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:56008] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "ac-1dqGvTIc8-wY3jUR6lQAAARc"]
[Fri Apr 03 20:41:27.359935 2026] [:error] [pid 55174:tid 55189] [client 74.248.137.46:36771] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "ac-1d5_WKqUonPNUHYzqhQAAAc0"]
[Fri Apr 03 20:41:27.911433 2026] [:error] [pid 35469:tid 35484] [client 74.248.137.46:56062] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "ac-1d6GvTIc8-wY3jUR6oQAAAQ0"]
[Fri Apr 03 20:41:28.617511 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:64790] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "ac-1eKGvTIc8-wY3jUR6qAAAAQU"]
[Fri Apr 03 20:41:29.187986 2026] [:error] [pid 33542:tid 33556] [client 74.248.137.46:36790] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "ac-1eXwb6uB1LaGtepby8AAAAMs"]
[Fri Apr 03 20:41:29.994451 2026] [:error] [pid 33445:tid 33458] [client 74.248.137.46:46805] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "ac-1eVlRNZ0iDVmJWM35OQAAAAg"]
[Fri Apr 03 20:41:30.626189 2026] [:error] [pid 35469:tid 35491] [client 74.248.137.46:8294] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "ac-1eqGvTIc8-wY3jUR6tgAAARQ"]
[Fri Apr 03 20:41:31.210142 2026] [:error] [pid 55174:tid 55199] [client 74.248.137.46:8895] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "ac-1e5_WKqUonPNUHYzqiQAAAdc"]
[Fri Apr 03 20:41:31.844600 2026] [:error] [pid 33446:tid 33491] [client 74.248.137.46:46806] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "ac-1e9g3dCqFYIIdw0pT3wAAAE4"]
[Fri Apr 03 20:41:34.386517 2026] [:error] [pid 33447:tid 33509] [client 74.248.137.46:40223] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "ac-1fkgaPmDHz92j4lNDPAAAAIU"]
[Fri Apr 03 20:41:35.109744 2026] [:error] [pid 33447:tid 33527] [client 74.248.137.46:46812] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "ac-1f0gaPmDHz92j4lNDPQAAAJc"]
[Fri Apr 03 20:41:35.829460 2026] [:error] [pid 55174:tid 55184] [client 74.248.137.46:51875] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ac-1f5_WKqUonPNUHYzqjgAAAcg"]
[Fri Apr 03 20:41:37.056384 2026] [:error] [pid 33447:tid 33512] [client 74.248.137.46:62634] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ac-1gUgaPmDHz92j4lNDQQAAAIg"]
[Fri Apr 03 20:41:37.602180 2026] [:error] [pid 33447:tid 33511] [client 74.248.137.46:53318] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ac-1gUgaPmDHz92j4lNDQwAAAIc"]
[Fri Apr 03 20:41:38.524484 2026] [:error] [pid 33445:tid 33463] [client 74.248.137.46:57647] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ac-1gllRNZ0iDVmJWM35RwAAAA0"]
[Fri Apr 03 20:41:39.155619 2026] [:error] [pid 55174:tid 55199] [client 74.248.137.46:57657] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wolv2.php"] [unique_id "ac-1g5_WKqUonPNUHYzqmQAAAdc"]
[Fri Apr 03 20:41:40.732564 2026] [:error] [pid 33446:tid 33485] [client 74.248.137.46:46726] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wolv2.php"] [unique_id "ac-1hNg3dCqFYIIdw0pT9QAAAEg"]
[Fri Apr 03 20:41:41.479597 2026] [:error] [pid 55174:tid 55191] [client 74.248.137.46:63889] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wolv2.php"] [unique_id "ac-1hZ_WKqUonPNUHYzqoQAAAc8"]
[Fri Apr 03 20:41:42.030085 2026] [:error] [pid 33542:tid 33568] [client 74.248.137.46:36778] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wolv2.php"] [unique_id "ac-1hnwb6uB1LaGtepbzBwAAANc"]
[Fri Apr 03 20:41:42.596530 2026] [:error] [pid 55174:tid 55178] [client 74.248.137.46:62631] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/geck.php"] [unique_id "ac-1hp_WKqUonPNUHYzqqwAAAcI"]
[Fri Apr 03 20:41:43.257369 2026] [:error] [pid 55174:tid 55180] [client 74.248.137.46:8838] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/geck.php"] [unique_id "ac-1h5_WKqUonPNUHYzqsAAAAcQ"]
[Fri Apr 03 20:41:43.978269 2026] [:error] [pid 55174:tid 55177] [client 74.248.137.46:57641] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/geck.php"] [unique_id "ac-1h5_WKqUonPNUHYzqtQAAAcE"]
[Fri Apr 03 20:41:44.624380 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:51885] File does not exist: /usr/local/apache/htdocs/suspended-page/geck.php
[Fri Apr 03 20:41:46.019490 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:51885] File does not exist: /usr/local/apache/htdocs/suspended-page/xtt.php
[Fri Apr 03 20:41:46.328946 2026] [:error] [pid 35469:tid 35485] [client 74.248.137.46:51885] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Apr 03 20:41:46.587897 2026] [:error] [pid 35469:tid 35493] [client 74.248.137.46:51885] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Fri Apr 03 20:41:46.903109 2026] [:error] [pid 35469:tid 35492] [client 74.248.137.46:51885] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri Apr 03 20:41:47.161832 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:51885] File does not exist: /usr/local/apache/htdocs/suspended-page/gdn.php
[Fri Apr 03 20:41:47.421842 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:51885] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Fri Apr 03 20:41:47.682671 2026] [:error] [pid 35469:tid 35491] [client 74.248.137.46:51885] File does not exist: /usr/local/apache/htdocs/suspended-page/media.php
[Fri Apr 03 20:41:48.265465 2026] [:error] [pid 35469:tid 35478] [client 74.248.137.46:51885] File does not exist: /usr/local/apache/htdocs/suspended-page/admir.php
[Fri Apr 03 20:41:48.552505 2026] [:error] [pid 35469:tid 35483] [client 74.248.137.46:51885] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Fri Apr 03 20:41:48.824434 2026] [:error] [pid 35469:tid 35490] [client 74.248.137.46:51885] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "ac-1jKGvTIc8-wY3jUR67gAAARM"]
[Fri Apr 03 20:41:49.391498 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:63883] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "ac-1jaGvTIc8-wY3jUR68AAAAQU"]
[Fri Apr 03 20:41:49.917068 2026] [:error] [pid 33446:tid 33489] [client 74.248.137.46:63885] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "ac-1jdg3dCqFYIIdw0pUBgAAAEw"]
[Fri Apr 03 20:41:50.538203 2026] [:error] [pid 35469:tid 35491] [client 74.248.137.46:8872] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "ac-1jqGvTIc8-wY3jUR68gAAARQ"]
[Fri Apr 03 20:41:51.292846 2026] [:error] [pid 33447:tid 33513] [client 74.248.137.46:35915] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-1j0gaPmDHz92j4lNDUAAAAIk"]
[Fri Apr 03 20:41:52.280178 2026] [:error] [pid 40562:tid 40583] [client 74.248.137.46:46734] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-1kDfFMXuP9zvqCep4NgAAAZI"]
[Fri Apr 03 20:41:52.824482 2026] [:error] [pid 40562:tid 40576] [client 74.248.137.46:62636] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-1kDfFMXuP9zvqCep4OAAAAYs"]
[Fri Apr 03 20:41:53.374789 2026] [:error] [pid 33447:tid 33519] [client 74.248.137.46:57639] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colour.php"] [unique_id "ac-1kUgaPmDHz92j4lNDWAAAAI8"]
[Fri Apr 03 20:41:53.945006 2026] [:error] [pid 33446:tid 33488] [client 74.248.137.46:57622] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc.php"] [unique_id "ac-1kdg3dCqFYIIdw0pUEQAAAEs"]
[Fri Apr 03 20:41:55.648918 2026] [:error] [pid 33446:tid 33477] [client 74.248.137.46:40199] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc.php"] [unique_id "ac-1k9g3dCqFYIIdw0pUGgAAAEA"]
[Fri Apr 03 20:41:56.527417 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:52359] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc.php"] [unique_id "ac-1lKGvTIc8-wY3jUR7BAAAAQE"]
[Fri Apr 03 20:41:57.065791 2026] [:error] [pid 35469:tid 35476] [client 74.248.137.46:40254] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc.php"] [unique_id "ac-1laGvTIc8-wY3jUR7CQAAAQU"]
[Fri Apr 03 20:41:57.794537 2026] [:error] [pid 33447:tid 33526] [client 74.248.137.46:31821] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bkxzo.php"] [unique_id "ac-1lUgaPmDHz92j4lNDWQAAAJY"]
[Fri Apr 03 20:41:58.408309 2026] [:error] [pid 55174:tid 55185] [client 74.248.137.46:40232] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bkxzo.php"] [unique_id "ac-1lp_WKqUonPNUHYzq0AAAAck"]
[Fri Apr 03 20:41:59.011514 2026] [:error] [pid 35469:tid 35472] [client 74.248.137.46:58459] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bkxzo.php"] [unique_id "ac-1l6GvTIc8-wY3jUR7EQAAAQE"]
[Fri Apr 03 20:41:59.849950 2026] [:error] [pid 33446:tid 33482] [client 74.248.137.46:50014] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bkxzo.php"] [unique_id "ac-1l9g3dCqFYIIdw0pULgAAAEU"]
[Fri Apr 03 20:42:00.683786 2026] [:error] [pid 33445:tid 33450] [client 74.248.137.46:8315] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lo.php"] [unique_id "ac-1mFlRNZ0iDVmJWM35ZQAAAAA"]
[Fri Apr 03 20:42:01.266629 2026] [:error] [pid 40533:tid 40544] [client 74.248.137.46:50003] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lo.php"] [unique_id "ac-1mfbIAA8AViDmwsuoMgAAAUk"]
[Fri Apr 03 20:42:01.894026 2026] [:error] [pid 33542:tid 33545] [client 74.248.137.46:44188] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lo.php"] [unique_id "ac-1mXwb6uB1LaGtepbzFQAAAMA"]
[Fri Apr 03 20:42:02.802061 2026] [:error] [pid 55174:tid 55176] [client 74.248.137.46:57633] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lo.php"] [unique_id "ac-1mp_WKqUonPNUHYzq1wAAAcA"]
[Fri Apr 03 20:42:03.614971 2026] [:error] [pid 40533:tid 40552] [client 74.248.137.46:8871] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ac-1m_bIAA8AViDmwsuoNQAAAVE"]
[Fri Apr 03 20:42:04.257935 2026] [:error] [pid 33542:tid 33565] [client 74.248.137.46:44189] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ac-1nHwb6uB1LaGtepbzGgAAANQ"]
[Fri Apr 03 20:42:05.069717 2026] [:error] [pid 40533:tid 40553] [client 74.248.137.46:40198] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ac-1nfbIAA8AViDmwsuoNwAAAVI"]
[Fri Apr 03 20:42:05.605681 2026] [:error] [pid 33542:tid 33569] [client 74.248.137.46:8833] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ac-1nXwb6uB1LaGtepbzHgAAANg"]
[Fri Apr 03 20:42:06.204516 2026] [:error] [pid 35469:tid 35471] [client 74.248.137.46:58473] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "ac-1nqGvTIc8-wY3jUR7FAAAAQA"]
[Fri Apr 03 20:42:06.877538 2026] [:error] [pid 33445:tid 33455] [client 74.248.137.46:36741] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "ac-1nllRNZ0iDVmJWM35bwAAAAU"]
[Fri Apr 03 20:42:07.434404 2026] [:error] [pid 40562:tid 40583] [client 74.248.137.46:8858] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "ac-1nzfFMXuP9zvqCep4QgAAAZI"]
[Fri Apr 03 20:42:07.962530 2026] [:error] [pid 33542:tid 33562] [client 74.248.137.46:50017] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "ac-1n3wb6uB1LaGtepbzIQAAANE"]
[Fri Apr 03 20:42:08.573980 2026] [:error] [pid 40562:tid 40585] [client 74.248.137.46:57600] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac-1oDfFMXuP9zvqCep4RgAAAZQ"]
[Fri Apr 03 20:42:09.193776 2026] [:error] [pid 33446:tid 33483] [client 74.248.137.46:35961] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac-1odg3dCqFYIIdw0pUQAAAAEY"]
[Fri Apr 03 20:42:09.732960 2026] [:error] [pid 33446:tid 33480] [client 74.248.137.46:63882] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac-1odg3dCqFYIIdw0pURQAAAEM"]
[Fri Apr 03 20:42:10.294875 2026] [:error] [pid 33446:tid 33495] [client 74.248.137.46:35936] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "ac-1otg3dCqFYIIdw0pUTAAAAFI"]
[Fri Apr 03 20:42:10.857009 2026] [:error] [pid 33445:tid 33466] [client 74.248.137.46:35948] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-1ollRNZ0iDVmJWM35eQAAABA"]
[Fri Apr 03 20:42:11.396609 2026] [:error] [pid 40562:tid 40568] [client 74.248.137.46:35909] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-1ozfFMXuP9zvqCep4TAAAAYM"]
[Fri Apr 03 20:42:11.936378 2026] [:error] [pid 33542:tid 33568] [client 74.248.137.46:35943] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-1o3wb6uB1LaGtepbzJAAAANc"]
[Fri Apr 03 20:42:12.560044 2026] [:error] [pid 33445:tid 33456] [client 74.248.137.46:57613] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "ac-1pFlRNZ0iDVmJWM35gAAAAAY"]
[Fri Apr 03 20:42:13.205342 2026] [:error] [pid 55174:tid 55190] [client 74.248.137.46:44169] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "ac-1pZ_WKqUonPNUHYzq7AAAAc4"]
[Fri Apr 03 20:42:14.248785 2026] [:error] [pid 33445:tid 33461] [client 74.248.137.46:62625] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "ac-1pllRNZ0iDVmJWM35ggAAAAs"]
[Fri Apr 03 20:42:14.793101 2026] [:error] [pid 33445:tid 33469] [client 74.248.137.46:31840] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "ac-1pllRNZ0iDVmJWM35hAAAABM"]
[Fri Apr 03 20:42:15.408489 2026] [:error] [pid 33445:tid 33467] [client 74.248.137.46:8265] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "ac-1p1lRNZ0iDVmJWM35hgAAABE"]
[Fri Apr 03 20:42:16.005174 2026] [:error] [pid 35469:tid 35473] [client 74.248.137.46:37343] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "ac-1qKGvTIc8-wY3jUR7IAAAAQI"]
[Fri Apr 03 20:42:17.612179 2026] [:error] [pid 40533:tid 40540] [client 74.248.137.46:62647] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "ac-1qfbIAA8AViDmwsuoRwAAAUU"]
[Fri Apr 03 20:42:18.202341 2026] [:error] [pid 40533:tid 40543] [client 74.248.137.46:46834] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "ac-1qvbIAA8AViDmwsuoSQAAAUg"]
[Fri Apr 03 20:42:18.815351 2026] [:error] [pid 40562:tid 40589] [client 74.248.137.46:8847] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-configs.php"] [unique_id "ac-1qjfFMXuP9zvqCep4ZAAAAZg"]
[Fri Apr 03 20:42:19.490421 2026] [:error] [pid 40562:tid 40568] [client 74.248.137.46:31823] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ac-1qzfFMXuP9zvqCep4aQAAAYM"]
[Fri Apr 03 20:42:20.150323 2026] [:error] [pid 33542:tid 33556] [client 74.248.137.46:53313] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ac-1rHwb6uB1LaGtepbzNQAAAMs"]
[Fri Apr 03 20:42:20.873642 2026] [:error] [pid 33447:tid 33514] [client 74.248.137.46:50023] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ac-1rEgaPmDHz92j4lNDmwAAAIo"]
[Fri Apr 03 20:42:21.440726 2026] [:error] [pid 35469:tid 35478] [client 74.248.137.46:44175] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ac-1raGvTIc8-wY3jUR7KAAAAQc"]
[Fri Apr 03 20:42:21.970232 2026] [:error] [pid 33447:tid 33509] [client 74.248.137.46:49993] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "ac-1rUgaPmDHz92j4lNDnQAAAIU"]
[Fri Apr 03 20:42:22.504315 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:8861] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "ac-1rqGvTIc8-wY3jUR7LQAAAQ8"]
[Fri Apr 03 20:42:23.304773 2026] [:error] [pid 35469:tid 35487] [client 74.248.137.46:8295] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "ac-1r6GvTIc8-wY3jUR7LgAAARA"]
[Fri Apr 03 20:42:23.992280 2026] [:error] [pid 35469:tid 35478] [client 74.248.137.46:8679] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "ac-1r6GvTIc8-wY3jUR7NQAAAQc"]
[Fri Apr 03 20:42:24.734154 2026] [:error] [pid 33445:tid 33453] [client 74.248.137.46:57646] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac-1sFlRNZ0iDVmJWM35ngAAAAM"]
[Fri Apr 03 20:42:25.608055 2026] [:error] [pid 33445:tid 33452] [client 74.248.137.46:59899] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac-1sVlRNZ0iDVmJWM35ogAAAAI"]
[Fri Apr 03 20:42:26.246896 2026] [:error] [pid 33542:tid 33554] [client 74.248.137.46:52291] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac-1snwb6uB1LaGtepbzOgAAAMk"]
[Fri Apr 03 20:42:26.776709 2026] [:error] [pid 40562:tid 40574] [client 74.248.137.46:63062] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac-1sjfFMXuP9zvqCep4cQAAAYk"]
[Fri Apr 03 20:42:27.331036 2026] [:error] [pid 33542:tid 33557] [client 74.248.137.46:52297] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac-1s3wb6uB1LaGtepbzOwAAAMw"]
[Fri Apr 03 20:42:27.855776 2026] [:error] [pid 33445:tid 33461] [client 74.248.137.46:41947] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac-1s1lRNZ0iDVmJWM35qAAAAAs"]
[Fri Apr 03 20:42:28.424233 2026] [:error] [pid 40533:tid 40538] [client 74.248.137.46:54364] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac-1tPbIAA8AViDmwsuoTwAAAUM"]
[Fri Apr 03 20:42:29.185039 2026] [:error] [pid 33445:tid 33474] [client 74.248.137.46:63951] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ac-1tVlRNZ0iDVmJWM35rQAAABg"]
[Fri Apr 03 20:42:29.719947 2026] [:error] [pid 33542:tid 33551] [client 74.248.137.46:49427] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "ac-1tXwb6uB1LaGtepbzPwAAAMY"]
[Fri Apr 03 20:42:30.346180 2026] [:error] [pid 40562:tid 40576] [client 74.248.137.46:43743] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "ac-1tjfFMXuP9zvqCep4fwAAAYs"]
[Fri Apr 03 20:42:30.964011 2026] [:error] [pid 55174:tid 55179] [client 74.248.137.46:40312] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "ac-1tp_WKqUonPNUHYzrAwAAAcM"]
[Fri Apr 03 20:42:31.709350 2026] [:error] [pid 40562:tid 40566] [client 74.248.137.46:44753] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "ac-1tzfFMXuP9zvqCep4hQAAAYE"]
[Fri Apr 03 20:42:32.340820 2026] [:error] [pid 55174:tid 55184] [client 74.248.137.46:44745] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac-1uJ_WKqUonPNUHYzrCgAAAcg"]
[Fri Apr 03 20:42:32.884880 2026] [:error] [pid 55174:tid 55185] [client 74.248.137.46:40897] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac-1uJ_WKqUonPNUHYzrDAAAAck"]
[Fri Apr 03 20:42:33.541742 2026] [:error] [pid 33542:tid 33559] [client 74.248.137.46:61871] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac-1uXwb6uB1LaGtepbzSAAAAM4"]
[Fri Apr 03 20:42:34.097512 2026] [:error] [pid 40533:tid 40555] [client 74.248.137.46:40269] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ac-1uvbIAA8AViDmwsuoWQAAAVQ"]
[Fri Apr 03 20:42:34.673915 2026] [:error] [pid 40562:tid 40583] [client 74.248.137.46:44798] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/himu.php"] [unique_id "ac-1ujfFMXuP9zvqCep4jAAAAZI"]
[Fri Apr 03 20:42:35.435916 2026] [:error] [pid 55174:tid 55191] [client 74.248.137.46:8911] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/himu.php"] [unique_id "ac-1u5_WKqUonPNUHYzrGAAAAc8"]
[Fri Apr 03 20:42:36.267137 2026] [:error] [pid 33446:tid 33487] [client 74.248.137.46:61500] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/himu.php"] [unique_id "ac-1vNg3dCqFYIIdw0pUZgAAAEo"]
[Fri Apr 03 20:42:36.891847 2026] [:error] [pid 33446:tid 33497] [client 74.248.137.46:47354] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/himu.php"] [unique_id "ac-1vNg3dCqFYIIdw0pUawAAAFQ"]
[Fri Apr 03 20:42:37.458926 2026] [:error] [pid 33446:tid 33484] [client 74.248.137.46:58772] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "ac-1vdg3dCqFYIIdw0pUcQAAAEc"]
[Fri Apr 03 20:42:38.114547 2026] [:error] [pid 33446:tid 33498] [client 74.248.137.46:8914] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "ac-1vtg3dCqFYIIdw0pUdwAAAFU"]
[Fri Apr 03 20:42:38.680267 2026] [:error] [pid 33542:tid 33556] [client 74.248.137.46:31187] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "ac-1vnwb6uB1LaGtepbzTwAAAMs"]
[Fri Apr 03 20:42:39.385850 2026] [:error] [pid 35469:tid 35481] [client 74.248.137.46:31206] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "ac-1v6GvTIc8-wY3jUR7UAAAAQo"]
[Fri Apr 03 20:42:39.930290 2026] [:error] [pid 35469:tid 35489] [client 74.248.137.46:8441] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ac-1v6GvTIc8-wY3jUR7VAAAARI"]
[Fri Apr 03 20:42:40.466543 2026] [:error] [pid 35469:tid 35475] [client 74.248.137.46:47342] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ac-1wKGvTIc8-wY3jUR7WgAAAQQ"]
[Fri Apr 03 20:42:41.142404 2026] [:error] [pid 35469:tid 35486] [client 74.248.137.46:39703] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ac-1waGvTIc8-wY3jUR7XwAAAQ8"]
[Fri Apr 03 20:42:41.817461 2026] [:error] [pid 33445:tid 33471] [client 74.248.137.46:39695] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ac-1wVlRNZ0iDVmJWM35xAAAABU"]
[Fri Apr 03 20:42:42.454213 2026] [:error] [pid 33446:tid 33491] [client 74.248.137.46:61504] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "ac-1wtg3dCqFYIIdw0pUfwAAAE4"]
[Fri Apr 03 20:42:43.074786 2026] [:error] [pid 55174:tid 55193] [client 74.248.137.46:61514] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "ac-1w5_WKqUonPNUHYzrIQAAAdE"]
[Fri Apr 03 20:42:43.610187 2026] [:error] [pid 33447:tid 33507] [client 74.248.137.46:8427] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "ac-1w0gaPmDHz92j4lNDogAAAIM"]
[Fri Apr 03 20:42:44.200745 2026] [:error] [pid 33446:tid 33496] [client 74.248.137.46:40917] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "ac-1xNg3dCqFYIIdw0pUigAAAFM"]
[Fri Apr 03 20:42:44.756033 2026] [:error] [pid 33445:tid 33452] [client 74.248.137.46:58839] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "ac-1xFlRNZ0iDVmJWM35ywAAAAI"]
[Fri Apr 03 20:42:45.394621 2026] [:error] [pid 33445:tid 33471] [client 74.248.137.46:59150] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "ac-1xVlRNZ0iDVmJWM350AAAABU"]
[Fri Apr 03 20:42:45.966037 2026] [:error] [pid 35469:tid 35494] [client 74.248.137.46:61565] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "ac-1xaGvTIc8-wY3jUR7ZQAAARc"]
[Fri Apr 03 20:42:46.508309 2026] [:error] [pid 35469:tid 35487] [client 74.248.137.46:36809] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "ac-1xqGvTIc8-wY3jUR7aQAAARA"]
[Fri Apr 03 20:42:47.032465 2026] [:error] [pid 33447:tid 33514] [client 74.248.137.46:58843] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/m.php"] [unique_id "ac-1x0gaPmDHz92j4lNDqQAAAIo"]
[Fri Apr 03 20:42:47.608055 2026] [:error] [pid 35469:tid 35492] [client 74.248.137.46:61460] [client 74.248.137.46] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/m.php"] [unique_id "ac-1x6GvTIc8-wY3jUR7cwAAARU"]
[Fri Apr 03 20:42:48.220967 2026] [:error] [pid 33446:tid 33500] [client 74.248.137.46:41389] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Fri Apr 03 20:42:48.523076 2026] [:error] [pid 33446:tid 33494] [client 74.248.137.46:41389] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-is.php
[Fri Apr 03 20:42:48.897077 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:41389] File does not exist: /usr/local/apache/htdocs/suspended-page/file15.php
[Fri Apr 03 20:42:49.193892 2026] [:error] [pid 33446:tid 33480] [client 74.248.137.46:41389] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Fri Apr 03 20:42:49.510612 2026] [:error] [pid 33446:tid 33495] [client 74.248.137.46:41389] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 03 20:42:49.787766 2026] [:error] [pid 33446:tid 33498] [client 74.248.137.46:41389] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Apr 03 20:42:50.146661 2026] [:error] [pid 33446:tid 33488] [client 74.248.137.46:41389] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri Apr 03 20:42:50.423832 2026] [:error] [pid 33446:tid 33483] [client 74.248.137.46:41389] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php
[Fri Apr 03 20:42:50.734551 2026] [:error] [pid 33446:tid 33479] [client 74.248.137.46:41389] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Apr 03 22:23:34.951118 2026] [:error] [pid 35469:tid 35478] [client 20.215.240.160:53030] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 03 22:23:35.215511 2026] [:error] [pid 35469:tid 35489] [client 20.215.240.160:53030] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Fri Apr 03 22:23:35.481684 2026] [:error] [pid 35469:tid 35483] [client 20.215.240.160:53030] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 03 22:23:35.747454 2026] [:error] [pid 35469:tid 35493] [client 20.215.240.160:53030] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Fri Apr 03 22:23:36.013794 2026] [:error] [pid 35469:tid 35495] [client 20.215.240.160:53030] File does not exist: /usr/local/apache/htdocs/suspended-page/filesss.php
[Fri Apr 03 22:23:36.319277 2026] [:error] [pid 35469:tid 35475] [client 20.215.240.160:53030] File does not exist: /usr/local/apache/htdocs/suspended-page/feokc.php
[Fri Apr 03 22:23:36.577528 2026] [:error] [pid 35469:tid 35476] [client 20.215.240.160:53030] File does not exist: /usr/local/apache/htdocs/suspended-page/b4txckoieeyhynhsrpi9lCdefault.php
[Fri Apr 03 22:23:36.836045 2026] [:error] [pid 35469:tid 35487] [client 20.215.240.160:53030] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Fri Apr 03 22:23:37.627141 2026] [:error] [pid 35469:tid 35478] [client 20.215.240.160:53030] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ac_NaaGvTIc8-wY3jUS6wwAAAQc"]
[Fri Apr 03 22:23:38.217454 2026] [:error] [pid 33445:tid 33460] [client 20.215.240.160:64084] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ac_NallRNZ0iDVmJWM0tYAAAAAo"]
[Fri Apr 03 22:23:38.821000 2026] [:error] [pid 40533:tid 40553] [client 20.215.240.160:64095] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ac_NavbIAA8AViDmwsvEYgAAAVI"]
[Fri Apr 03 22:23:39.505003 2026] [:error] [pid 40533:tid 40543] [client 20.215.240.160:60981] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ac_Na_bIAA8AViDmwsvEbwAAAUg"]
[Fri Apr 03 22:23:40.372709 2026] [:error] [pid 40562:tid 40579] [client 20.215.240.160:45356] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac_NbDfFMXuP9zvqCeqcdgAAAY4"]
[Fri Apr 03 22:23:40.979686 2026] [:error] [pid 33542:tid 33566] [client 20.215.240.160:42029] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac_NbHwb6uB1LaGtepYN9AAAANU"]
[Fri Apr 03 22:23:41.777075 2026] [:error] [pid 33542:tid 33547] [client 20.215.240.160:64107] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac_NbXwb6uB1LaGtepYN9wAAAMI"]
[Fri Apr 03 22:23:42.578418 2026] [:error] [pid 40562:tid 40585] [client 20.215.240.160:47757] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac_NbjfFMXuP9zvqCeqcfAAAAZQ"]
[Fri Apr 03 22:23:43.108796 2026] [:error] [pid 33446:tid 33477] [client 20.215.240.160:45369] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac_Nb9g3dCqFYIIdw0qIewAAAEA"]
[Fri Apr 03 22:23:43.821497 2026] [:error] [pid 55174:tid 55178] [client 20.215.240.160:45327] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac_Nb5_WKqUonPNUHYwF7wAAAcI"]
[Fri Apr 03 22:23:44.337431 2026] [:error] [pid 33445:tid 33461] [client 20.215.240.160:64100] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac_NcFlRNZ0iDVmJWM0taQAAAAs"]
[Fri Apr 03 22:23:44.914383 2026] [:error] [pid 33447:tid 33507] [client 20.215.240.160:56519] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac_NcEgaPmDHz92j4lNbdwAAAIM"]
[Fri Apr 03 22:23:45.526892 2026] [:error] [pid 40533:tid 40550] [client 20.215.240.160:56560] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "ac_NcfbIAA8AViDmwsvEggAAAU8"]
[Fri Apr 03 22:23:46.168103 2026] [:error] [pid 33446:tid 33491] [client 20.215.240.160:42041] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "ac_Nctg3dCqFYIIdw0qIgQAAAE4"]
[Fri Apr 03 22:23:46.834326 2026] [:error] [pid 33445:tid 33462] [client 20.215.240.160:4303] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "ac_NcllRNZ0iDVmJWM0tcwAAAAw"]
[Fri Apr 03 22:23:47.439122 2026] [:error] [pid 33446:tid 33484] [client 20.215.240.160:45320] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "ac_Nc9g3dCqFYIIdw0qIhQAAAEc"]
[Fri Apr 03 22:23:48.369544 2026] [:error] [pid 33447:tid 33525] [client 20.215.240.160:47170] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac_NdEgaPmDHz92j4lNbewAAAJU"]
[Fri Apr 03 22:23:48.892606 2026] [:error] [pid 33446:tid 33488] [client 20.215.240.160:42044] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac_NdNg3dCqFYIIdw0qIiAAAAEs"]
[Fri Apr 03 22:23:49.577856 2026] [:error] [pid 40562:tid 40571] [client 20.215.240.160:42017] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac_NdTfFMXuP9zvqCeqcgwAAAYY"]
[Fri Apr 03 22:23:50.131106 2026] [:error] [pid 33542:tid 33556] [client 20.215.240.160:45345] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac_Ndnwb6uB1LaGtepYODwAAAMs"]
[Fri Apr 03 22:23:51.198026 2026] [:error] [pid 33542:tid 33554] [client 20.215.240.160:56559] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "ac_Nd3wb6uB1LaGtepYOGgAAAMk"]
[Fri Apr 03 22:23:52.008911 2026] [:error] [pid 33542:tid 33557] [client 20.215.240.160:64127] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "ac_NeHwb6uB1LaGtepYOJAAAAMw"]
[Fri Apr 03 22:23:52.743356 2026] [:error] [pid 40562:tid 40589] [client 20.215.240.160:47224] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "ac_NeDfFMXuP9zvqCeqcjwAAAZg"]
[Fri Apr 03 22:23:53.347208 2026] [:error] [pid 40562:tid 40586] [client 20.215.240.160:42022] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "ac_NeTfFMXuP9zvqCeqclAAAAZU"]
[Fri Apr 03 22:23:54.072825 2026] [:error] [pid 33446:tid 33499] [client 20.215.240.160:45367] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac_Netg3dCqFYIIdw0qInAAAAFY"]
[Fri Apr 03 22:23:54.646790 2026] [:error] [pid 55174:tid 55199] [client 20.215.240.160:47748] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac_Nep_WKqUonPNUHYwGIQAAAdc"]
[Fri Apr 03 22:23:55.518734 2026] [:error] [pid 40562:tid 40587] [client 20.215.240.160:42039] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac_NezfFMXuP9zvqCeqcowAAAZY"]
[Fri Apr 03 22:23:56.054979 2026] [:error] [pid 40533:tid 40550] [client 20.215.240.160:60957] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac_NfPbIAA8AViDmwsvEugAAAU8"]
[Fri Apr 03 22:23:56.626877 2026] [:error] [pid 33542:tid 33567] [client 20.215.240.160:60977] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "ac_NfHwb6uB1LaGtepYOLQAAANY"]
[Fri Apr 03 22:23:57.199742 2026] [:error] [pid 35469:tid 35491] [client 20.215.240.160:56516] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "ac_NfaGvTIc8-wY3jUS65AAAARQ"]
[Fri Apr 03 22:23:57.736642 2026] [:error] [pid 33446:tid 33491] [client 20.215.240.160:45328] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "ac_Nfdg3dCqFYIIdw0qIngAAAE4"]
[Fri Apr 03 22:23:58.335252 2026] [:error] [pid 40533:tid 40554] [client 20.215.240.160:56562] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "ac_NfvbIAA8AViDmwsvEwwAAAVM"]
[Fri Apr 03 22:23:58.953279 2026] [:error] [pid 40533:tid 40547] [client 20.215.240.160:60939] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_NfvbIAA8AViDmwsvEyAAAAUw"]
[Fri Apr 03 22:23:59.653047 2026] [:error] [pid 35469:tid 35482] [client 20.215.240.160:64102] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_Nf6GvTIc8-wY3jUS65gAAAQs"]
[Fri Apr 03 22:24:00.226590 2026] [:error] [pid 33447:tid 33528] [client 20.215.240.160:64087] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_NgEgaPmDHz92j4lNbigAAAJg"]
[Fri Apr 03 22:24:01.096736 2026] [:error] [pid 40533:tid 40548] [client 20.215.240.160:56570] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_NgfbIAA8AViDmwsvE0gAAAU0"]
[Fri Apr 03 22:24:01.917041 2026] [:error] [pid 33447:tid 33506] [client 20.215.240.160:56575] [client 20.215.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac_NgUgaPmDHz92j4lNbjQAAAII"]
[Fri Apr 03 22:24:02.558153 2026] [:error] [pid 40533:tid 40535] [client 20.215.240.160:47788] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aves.php"] [unique_id "ac_NgvbIAA8AViDmwsvE3AAAAUA"]
[Fri Apr 03 22:24:03.088825 2026] [:error] [pid 40533:tid 40543] [client 20.215.240.160:41997] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aves.php"] [unique_id "ac_Ng_bIAA8AViDmwsvE3wAAAUg"]
[Fri Apr 03 22:24:03.621559 2026] [:error] [pid 33542:tid 33553] [client 20.215.240.160:45374] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aves.php"] [unique_id "ac_Ng3wb6uB1LaGtepYOPgAAAMg"]
[Fri Apr 03 22:24:04.172997 2026] [:error] [pid 33446:tid 33493] [client 20.215.240.160:53053] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aves.php"] [unique_id "ac_NhNg3dCqFYIIdw0qIowAAAFA"]
[Fri Apr 03 22:24:04.714892 2026] [:error] [pid 33446:tid 33485] [client 20.215.240.160:45336] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac_NhNg3dCqFYIIdw0qIpgAAAEg"]
[Fri Apr 03 22:24:05.244179 2026] [:error] [pid 33447:tid 33507] [client 20.215.240.160:56530] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac_NhUgaPmDHz92j4lNbkQAAAIM"]
[Fri Apr 03 22:24:05.872704 2026] [:error] [pid 35469:tid 35486] [client 20.215.240.160:41984] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac_NhaGvTIc8-wY3jUS68gAAAQ8"]
[Fri Apr 03 22:24:06.444173 2026] [:error] [pid 33447:tid 33525] [client 20.215.240.160:52995] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac_NhkgaPmDHz92j4lNbmQAAAJU"]
[Fri Apr 03 22:24:07.012600 2026] [:error] [pid 40533:tid 40537] [client 20.215.240.160:60943] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac_Nh_bIAA8AViDmwsvE5gAAAUI"]
[Fri Apr 03 22:24:07.605365 2026] [:error] [pid 33445:tid 33474] [client 20.215.240.160:47784] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac_Nh1lRNZ0iDVmJWM0towAAABg"]
[Fri Apr 03 22:24:08.124800 2026] [:error] [pid 35469:tid 35472] [client 20.215.240.160:4330] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac_NiKGvTIc8-wY3jUS6-gAAAQE"]
[Fri Apr 03 22:24:08.662326 2026] [:error] [pid 33447:tid 33514] [client 20.215.240.160:47771] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac_NiEgaPmDHz92j4lNbnQAAAIo"]
[Fri Apr 03 22:24:09.179328 2026] [:error] [pid 33447:tid 33512] [client 20.215.240.160:4608] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_NiUgaPmDHz92j4lNboAAAAIg"]
[Fri Apr 03 22:24:09.730179 2026] [:error] [pid 40533:tid 40548] [client 20.215.240.160:64065] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_NifbIAA8AViDmwsvE6wAAAU0"]
[Fri Apr 03 22:24:10.268308 2026] [:error] [pid 40533:tid 40554] [client 20.215.240.160:47203] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_NivbIAA8AViDmwsvE7wAAAVM"]
[Fri Apr 03 22:24:10.828815 2026] [:error] [pid 40533:tid 40549] [client 20.215.240.160:62977] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_NivbIAA8AViDmwsvE8AAAAU4"]
[Fri Apr 03 22:24:11.374838 2026] [:error] [pid 40533:tid 40547] [client 20.215.240.160:47744] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "ac_Ni_bIAA8AViDmwsvE9gAAAUw"]
[Fri Apr 03 22:24:11.894276 2026] [:error] [pid 33445:tid 33457] [client 20.215.240.160:4317] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "ac_Ni1lRNZ0iDVmJWM0trQAAAAc"]
[Fri Apr 03 22:24:12.416039 2026] [:error] [pid 33445:tid 33459] [client 20.215.240.160:64104] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "ac_NjFlRNZ0iDVmJWM0tsAAAAAk"]
[Fri Apr 03 22:24:12.954367 2026] [:error] [pid 33447:tid 33523] [client 20.215.240.160:42012] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "ac_NjEgaPmDHz92j4lNbpQAAAJM"]
[Fri Apr 03 22:24:13.489633 2026] [:error] [pid 55174:tid 55196] [client 20.215.240.160:4339] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac_NjZ_WKqUonPNUHYwGMgAAAdQ"]
[Fri Apr 03 22:24:14.021419 2026] [:error] [pid 40562:tid 40574] [client 20.215.240.160:47787] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac_NjjfFMXuP9zvqCeqcugAAAYk"]
[Fri Apr 03 22:24:14.547311 2026] [:error] [pid 40533:tid 40544] [client 20.215.240.160:42032] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac_NjvbIAA8AViDmwsvE_gAAAUk"]
[Fri Apr 03 22:24:15.076076 2026] [:error] [pid 33447:tid 33518] [client 20.215.240.160:47184] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac_Nj0gaPmDHz92j4lNbpwAAAI4"]
[Fri Apr 03 22:24:15.642171 2026] [:error] [pid 33445:tid 33456] [client 20.215.240.160:52997] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac_Nj1lRNZ0iDVmJWM0tuwAAAAY"]
[Fri Apr 03 22:24:16.237016 2026] [:error] [pid 33446:tid 33500] [client 20.215.240.160:56522] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac_NkNg3dCqFYIIdw0qIvwAAAFc"]
[Fri Apr 03 22:24:16.776651 2026] [:error] [pid 33446:tid 33493] [client 20.215.240.160:47226] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac_NkNg3dCqFYIIdw0qIwgAAAFA"]
[Fri Apr 03 22:24:17.301718 2026] [:error] [pid 33542:tid 33560] [client 20.215.240.160:56535] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac_NkXwb6uB1LaGtepYOTAAAAM8"]
[Fri Apr 03 22:24:17.835123 2026] [:error] [pid 40533:tid 40543] [client 20.215.240.160:4325] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac_NkfbIAA8AViDmwsvFCQAAAUg"]
[Fri Apr 03 22:24:18.364171 2026] [:error] [pid 33447:tid 33505] [client 20.215.240.160:60983] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac_NkkgaPmDHz92j4lNbqAAAAIE"]
[Fri Apr 03 22:24:18.909299 2026] [:error] [pid 33447:tid 33515] [client 20.215.240.160:4873] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac_NkkgaPmDHz92j4lNbqQAAAIs"]
[Fri Apr 03 22:24:19.440560 2026] [:error] [pid 33447:tid 33511] [client 20.215.240.160:45375] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac_Nk0gaPmDHz92j4lNbrAAAAIc"]
[Fri Apr 03 22:24:19.995004 2026] [:error] [pid 33445:tid 33467] [client 20.215.240.160:47190] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac_Nk1lRNZ0iDVmJWM0tvwAAABE"]
[Fri Apr 03 22:24:20.526534 2026] [:error] [pid 40533:tid 40544] [client 20.215.240.160:47192] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac_NlPbIAA8AViDmwsvFJwAAAUk"]
[Fri Apr 03 22:24:21.054588 2026] [:error] [pid 40562:tid 40565] [client 20.215.240.160:64122] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac_NlTfFMXuP9zvqCeqcwgAAAYA"]
[Fri Apr 03 22:24:21.612070 2026] [:error] [pid 55174:tid 55184] [client 20.215.240.160:56542] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac_NlZ_WKqUonPNUHYwGQQAAAcg"]
[Fri Apr 03 22:24:22.141808 2026] [:error] [pid 33542:tid 33556] [client 20.215.240.160:56536] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ac_Nlnwb6uB1LaGtepYOTwAAAMs"]
[Fri Apr 03 22:24:22.702133 2026] [:error] [pid 33445:tid 33456] [client 20.215.240.160:60945] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ac_NlllRNZ0iDVmJWM0tzQAAAAY"]
[Fri Apr 03 22:24:23.267323 2026] [:error] [pid 40533:tid 40550] [client 20.215.240.160:60964] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ac_Nl_bIAA8AViDmwsvFNwAAAU8"]
[Fri Apr 03 22:24:23.820299 2026] [:error] [pid 33445:tid 33458] [client 20.215.240.160:56553] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ac_Nl1lRNZ0iDVmJWM0t0wAAAAg"]
[Fri Apr 03 22:24:24.364766 2026] [:error] [pid 33445:tid 33468] [client 20.215.240.160:53050] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac_NmFlRNZ0iDVmJWM0t2QAAABI"]
[Fri Apr 03 22:24:24.938982 2026] [:error] [pid 33445:tid 33450] [client 20.215.240.160:4307] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac_NmFlRNZ0iDVmJWM0t3gAAAAA"]
[Fri Apr 03 22:24:25.541737 2026] [:error] [pid 33447:tid 33526] [client 20.215.240.160:42000] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac_NmUgaPmDHz92j4lNbtQAAAJY"]
[Fri Apr 03 22:24:26.077779 2026] [:error] [pid 40533:tid 40539] [client 20.215.240.160:56513] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac_NmvbIAA8AViDmwsvFRQAAAUQ"]
[Fri Apr 03 22:24:26.647715 2026] [:error] [pid 40533:tid 40555] [client 20.215.240.160:56531] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac_NmvbIAA8AViDmwsvFTgAAAVQ"]
[Fri Apr 03 22:24:27.260045 2026] [:error] [pid 33447:tid 33521] [client 20.215.240.160:4617] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac_Nm0gaPmDHz92j4lNbtwAAAJE"]
[Fri Apr 03 22:24:27.822747 2026] [:error] [pid 33447:tid 33528] [client 20.215.240.160:60978] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac_Nm0gaPmDHz92j4lNbuQAAAJg"]
[Fri Apr 03 22:24:28.429818 2026] [:error] [pid 33542:tid 33549] [client 20.215.240.160:60942] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac_NnHwb6uB1LaGtepYOVgAAAMQ"]
[Fri Apr 03 22:24:28.972595 2026] [:error] [pid 33542:tid 33557] [client 20.215.240.160:42035] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac_NnHwb6uB1LaGtepYOWQAAAMw"]
[Fri Apr 03 22:24:29.578678 2026] [:error] [pid 33446:tid 33497] [client 20.215.240.160:53036] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac_Nndg3dCqFYIIdw0qIywAAAFQ"]
[Fri Apr 03 22:24:30.106671 2026] [:error] [pid 33447:tid 33507] [client 20.215.240.160:47176] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac_NnkgaPmDHz92j4lNbwAAAAIM"]
[Fri Apr 03 22:24:30.633422 2026] [:error] [pid 33447:tid 33517] [client 20.215.240.160:60933] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac_NnkgaPmDHz92j4lNbwgAAAI0"]
[Fri Apr 03 22:24:31.172695 2026] [:error] [pid 33445:tid 33469] [client 20.215.240.160:52994] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_Nn1lRNZ0iDVmJWM0t6QAAABM"]
[Fri Apr 03 22:24:31.751963 2026] [:error] [pid 33446:tid 33500] [client 20.215.240.160:45335] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_Nn9g3dCqFYIIdw0qI1AAAAFc"]
[Fri Apr 03 22:24:32.296899 2026] [:error] [pid 33447:tid 33526] [client 20.215.240.160:4336] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_NoEgaPmDHz92j4lNbyAAAAJY"]
[Fri Apr 03 22:24:32.836329 2026] [:error] [pid 33445:tid 33472] [client 20.215.240.160:47194] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_NoFlRNZ0iDVmJWM0t7gAAABY"]
[Fri Apr 03 22:24:33.461140 2026] [:error] [pid 33447:tid 33510] [client 20.215.240.160:45349] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac_NoUgaPmDHz92j4lNbzgAAAIY"]
[Fri Apr 03 22:24:33.990706 2026] [:error] [pid 33446:tid 33495] [client 20.215.240.160:42024] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac_Nodg3dCqFYIIdw0qI5AAAAFI"]
[Fri Apr 03 22:24:34.515049 2026] [:error] [pid 33446:tid 33492] [client 20.215.240.160:45351] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac_Notg3dCqFYIIdw0qI6QAAAE8"]
[Fri Apr 03 22:24:35.077119 2026] [:error] [pid 33542:tid 33568] [client 20.215.240.160:56549] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac_No3wb6uB1LaGtepYOcAAAANc"]
[Fri Apr 03 22:24:35.613441 2026] [:error] [pid 33446:tid 33495] [client 20.215.240.160:53041] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac_No9g3dCqFYIIdw0qI9QAAAFI"]
[Fri Apr 03 22:24:36.174030 2026] [:error] [pid 33542:tid 33555] [client 20.215.240.160:45333] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac_NpHwb6uB1LaGtepYOdAAAAMo"]
[Fri Apr 03 22:24:36.697559 2026] [:error] [pid 40533:tid 40544] [client 20.215.240.160:41999] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac_NpPbIAA8AViDmwsvFYgAAAUk"]
[Fri Apr 03 22:24:37.233901 2026] [:error] [pid 33445:tid 33453] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Fri Apr 03 22:24:37.492975 2026] [:error] [pid 33445:tid 33467] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/tiny.php
[Fri Apr 03 22:24:37.751987 2026] [:error] [pid 33445:tid 33451] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/nhj6t74aqmkde3hgpCdefault.php
[Fri Apr 03 22:24:38.011227 2026] [:error] [pid 33445:tid 33468] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/com.php
[Fri Apr 03 22:24:38.270222 2026] [:error] [pid 33445:tid 33452] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/filer.php
[Fri Apr 03 22:24:38.528971 2026] [:error] [pid 33445:tid 33459] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Fri Apr 03 22:24:38.797779 2026] [:error] [pid 33445:tid 33461] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Fri Apr 03 22:24:40.359778 2026] [:error] [pid 33445:tid 33461] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/vanta.php
[Fri Apr 03 22:24:40.619102 2026] [:error] [pid 33445:tid 33464] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Fri Apr 03 22:24:40.878800 2026] [:error] [pid 33445:tid 33451] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Fri Apr 03 22:24:41.158114 2026] [:error] [pid 33445:tid 33470] [client 20.215.240.160:47755] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 03 22:24:41.413112 2026] [:error] [pid 33445:tid 33452] [client 20.215.240.160:47755] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ac_NqVlRNZ0iDVmJWM0uGAAAAAI"]
[Fri Apr 03 22:24:41.939200 2026] [:error] [pid 33542:tid 33557] [client 20.215.240.160:47227] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ac_NqXwb6uB1LaGtepYOhQAAAMw"]
[Fri Apr 03 22:24:42.463770 2026] [:error] [pid 33445:tid 33460] [client 20.215.240.160:53054] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ac_NqllRNZ0iDVmJWM0uIQAAAAo"]
[Fri Apr 03 22:24:42.987290 2026] [:error] [pid 33542:tid 33560] [client 20.215.240.160:47208] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ac_Nqnwb6uB1LaGtepYOjAAAAM8"]
[Fri Apr 03 22:24:43.504874 2026] [:error] [pid 33445:tid 33468] [client 20.215.240.160:45343] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac_Nq1lRNZ0iDVmJWM0uJgAAABI"]
[Fri Apr 03 22:24:44.040517 2026] [:error] [pid 40533:tid 40545] [client 20.215.240.160:47195] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac_NrPbIAA8AViDmwsvFdwAAAUo"]
[Fri Apr 03 22:24:44.553922 2026] [:error] [pid 33445:tid 33450] [client 20.215.240.160:45922] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac_NrFlRNZ0iDVmJWM0uKgAAAAA"]
[Fri Apr 03 22:24:45.084847 2026] [:error] [pid 40533:tid 40536] [client 20.215.240.160:64096] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac_NrfbIAA8AViDmwsvFegAAAUE"]
[Fri Apr 03 22:24:45.599733 2026] [:error] [pid 33445:tid 33463] [client 20.215.240.160:47802] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac_NrVlRNZ0iDVmJWM0uNQAAAA0"]
[Fri Apr 03 22:24:46.117439 2026] [:error] [pid 33445:tid 33471] [client 20.215.240.160:47777] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac_NrllRNZ0iDVmJWM0uOQAAABU"]
[Fri Apr 03 22:24:46.649701 2026] [:error] [pid 33542:tid 33555] [client 20.215.240.160:39507] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac_Nrnwb6uB1LaGtepYOoQAAAMo"]
[Fri Apr 03 22:24:47.162535 2026] [:error] [pid 33445:tid 33453] [client 20.215.240.160:41985] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac_Nr1lRNZ0iDVmJWM0uPQAAAAM"]
[Fri Apr 03 22:24:47.678374 2026] [:error] [pid 40533:tid 40544] [client 20.215.240.160:47177] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ac_Nr_bIAA8AViDmwsvFfgAAAUk"]
[Fri Apr 03 22:24:48.197588 2026] [:error] [pid 40533:tid 40542] [client 20.215.240.160:64111] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ac_NsPbIAA8AViDmwsvFfwAAAUc"]
[Fri Apr 03 22:24:48.718882 2026] [:error] [pid 33445:tid 33463] [client 20.215.240.160:59838] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ac_NsFlRNZ0iDVmJWM0uQwAAAA0"]
[Fri Apr 03 22:24:49.237979 2026] [:error] [pid 33445:tid 33465] [client 20.215.240.160:42026] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "ac_NsVlRNZ0iDVmJWM0uRAAAAA8"]
[Fri Apr 03 22:24:49.776581 2026] [:error] [pid 33445:tid 33456] [client 20.215.240.160:59837] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "ac_NsVlRNZ0iDVmJWM0uRwAAAAY"]
[Fri Apr 03 22:24:50.300569 2026] [:error] [pid 40562:tid 40578] [client 20.215.240.160:45936] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "ac_NsjfFMXuP9zvqCeqc2gAAAY0"]
[Fri Apr 03 22:24:50.813497 2026] [:error] [pid 40533:tid 40559] [client 20.215.240.160:56533] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "ac_NsvbIAA8AViDmwsvFgwAAAVg"]
[Fri Apr 03 22:24:51.324689 2026] [:error] [pid 33445:tid 33458] [client 20.215.240.160:47769] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "ac_Ns1lRNZ0iDVmJWM0uTAAAAAg"]
[Fri Apr 03 22:24:51.848008 2026] [:error] [pid 33542:tid 33545] [client 20.215.240.160:53012] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac_Ns3wb6uB1LaGtepYOvwAAAMA"]
[Fri Apr 03 22:24:52.370192 2026] [:error] [pid 40533:tid 40544] [client 20.215.240.160:45313] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac_NtPbIAA8AViDmwsvFigAAAUk"]
[Fri Apr 03 22:24:52.896360 2026] [:error] [pid 40533:tid 40558] [client 20.215.240.160:47750] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac_NtPbIAA8AViDmwsvFjgAAAVc"]
[Fri Apr 03 22:24:53.414170 2026] [:error] [pid 40533:tid 40552] [client 20.215.240.160:59796] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac_NtfbIAA8AViDmwsvFlQAAAVE"]
[Fri Apr 03 22:24:53.950003 2026] [:error] [pid 40562:tid 40574] [client 20.215.240.160:63008] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ac_NtTfFMXuP9zvqCeqc5AAAAYk"]
[Fri Apr 03 22:24:54.505984 2026] [:error] [pid 33447:tid 33507] [client 20.215.240.160:4300] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ac_NtkgaPmDHz92j4lNb2gAAAIM"]
[Fri Apr 03 22:24:55.031117 2026] [:error] [pid 35469:tid 35473] [client 20.215.240.160:60970] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ac_Nt6GvTIc8-wY3jUS7HwAAAQI"]
[Fri Apr 03 22:24:55.578500 2026] [:error] [pid 33447:tid 33524] [client 20.215.240.160:64093] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ac_Nt0gaPmDHz92j4lNb3AAAAJQ"]
[Fri Apr 03 22:24:56.114037 2026] [:error] [pid 40562:tid 40566] [client 20.215.240.160:64113] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ac_NuDfFMXuP9zvqCeqc6QAAAYE"]
[Fri Apr 03 22:24:56.637697 2026] [:error] [pid 40533:tid 40541] [client 20.215.240.160:47799] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ac_NuPbIAA8AViDmwsvFnAAAAUY"]
[Fri Apr 03 22:24:57.188347 2026] [:error] [pid 40562:tid 40570] [client 20.215.240.160:53022] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ac_NuTfFMXuP9zvqCeqc8AAAAYU"]
[Fri Apr 03 22:24:57.723978 2026] [:error] [pid 33445:tid 33469] [client 20.215.240.160:4647] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ac_NuVlRNZ0iDVmJWM0uVQAAABM"]
[Fri Apr 03 22:24:58.253441 2026] [:error] [pid 33542:tid 33547] [client 20.215.240.160:45901] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ac_Nunwb6uB1LaGtepYO3AAAAMI"]
[Fri Apr 03 22:24:58.840300 2026] [:error] [pid 40533:tid 40538] [client 20.215.240.160:62993] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ac_NuvbIAA8AViDmwsvFowAAAUM"]
[Fri Apr 03 22:24:59.388817 2026] [:error] [pid 40533:tid 40546] [client 20.215.240.160:47772] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ac_Nu_bIAA8AViDmwsvFpAAAAUs"]
[Fri Apr 03 22:24:59.935136 2026] [:error] [pid 33445:tid 33470] [client 20.215.240.160:56540] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ac_Nu1lRNZ0iDVmJWM0uWAAAABQ"]
[Fri Apr 03 22:25:00.447637 2026] [:error] [pid 40533:tid 40554] [client 20.215.240.160:53025] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac_NvPbIAA8AViDmwsvFpgAAAVM"]
[Fri Apr 03 22:25:00.973301 2026] [:error] [pid 33447:tid 33522] [client 20.215.240.160:64120] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac_NvEgaPmDHz92j4lNb3wAAAJI"]
[Fri Apr 03 22:25:01.553706 2026] [:error] [pid 33542:tid 33568] [client 20.215.240.160:53031] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac_NvXwb6uB1LaGtepYO8gAAANc"]
[Fri Apr 03 22:25:02.111687 2026] [:error] [pid 33542:tid 33560] [client 20.215.240.160:56512] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac_Nvnwb6uB1LaGtepYO-QAAAM8"]
[Fri Apr 03 22:25:02.658302 2026] [:error] [pid 55174:tid 55188] [client 20.215.240.160:60944] [client 20.215.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac_Nvp_WKqUonPNUHYwGaQAAAcw"]
[Fri Apr 03 22:25:03.185542 2026] [:error] [pid 40562:tid 40577] [client 20.215.240.160:4322] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac_NvzfFMXuP9zvqCeqc9QAAAYw"]
[Fri Apr 03 22:25:03.729629 2026] [:error] [pid 40562:tid 40580] [client 20.215.240.160:56544] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac_NvzfFMXuP9zvqCeqc9wAAAY8"]
[Fri Apr 03 22:25:04.246009 2026] [:error] [pid 33542:tid 33565] [client 20.215.240.160:60963] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac_NwHwb6uB1LaGtepYPBQAAANQ"]
[Fri Apr 03 22:25:04.771282 2026] [:error] [pid 55174:tid 55199] [client 20.215.240.160:4328] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "ac_NwJ_WKqUonPNUHYwGbAAAAdc"]
[Fri Apr 03 22:25:05.321244 2026] [:error] [pid 33542:tid 33554] [client 20.215.240.160:47221] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "ac_NwXwb6uB1LaGtepYPEAAAAMk"]
[Fri Apr 03 22:25:05.844792 2026] [:error] [pid 33542:tid 33567] [client 20.215.240.160:47168] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "ac_NwXwb6uB1LaGtepYPFQAAANY"]
[Fri Apr 03 22:25:06.407352 2026] [:error] [pid 33542:tid 33565] [client 20.215.240.160:47762] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "ac_Nwnwb6uB1LaGtepYPGgAAANQ"]
[Fri Apr 03 22:25:06.973100 2026] [:error] [pid 33446:tid 33497] [client 20.215.240.160:45359] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac_Nwtg3dCqFYIIdw0qJDgAAAFQ"]
[Fri Apr 03 22:25:07.512163 2026] [:error] [pid 40533:tid 40555] [client 20.215.240.160:64106] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac_Nw_bIAA8AViDmwsvFsAAAAVQ"]
[Fri Apr 03 22:25:08.038975 2026] [:error] [pid 33445:tid 33465] [client 20.215.240.160:47789] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac_NxFlRNZ0iDVmJWM0uXAAAAA8"]
[Fri Apr 03 22:25:08.573417 2026] [:error] [pid 40533:tid 40539] [client 20.215.240.160:47758] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac_NxPbIAA8AViDmwsvFtAAAAUQ"]
[Fri Apr 03 22:25:09.131170 2026] [:error] [pid 40533:tid 40559] [client 20.215.240.160:53045] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac_NxfbIAA8AViDmwsvFuQAAAVg"]
[Fri Apr 03 22:25:09.680796 2026] [:error] [pid 40533:tid 40537] [client 20.215.240.160:41989] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac_NxfbIAA8AViDmwsvFvwAAAUI"]
[Fri Apr 03 22:25:10.224718 2026] [:error] [pid 40533:tid 40559] [client 20.215.240.160:56563] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac_NxvbIAA8AViDmwsvFxgAAAVg"]
[Fri Apr 03 22:25:10.755675 2026] [:error] [pid 40562:tid 40584] [client 20.215.240.160:64092] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac_NxjfFMXuP9zvqCeqdAwAAAZM"]
[Fri Apr 03 22:25:11.278103 2026] [:error] [pid 33447:tid 33527] [client 20.215.240.160:45368] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_Nx0gaPmDHz92j4lNb6gAAAJc"]
[Fri Apr 03 22:25:11.792453 2026] [:error] [pid 55174:tid 55189] [client 20.215.240.160:64070] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_Nx5_WKqUonPNUHYwGcAAAAc0"]
[Fri Apr 03 22:25:12.329291 2026] [:error] [pid 55174:tid 55195] [client 20.215.240.160:53037] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_NyJ_WKqUonPNUHYwGcgAAAdM"]
[Fri Apr 03 22:25:12.855129 2026] [:error] [pid 35469:tid 35481] [client 20.215.240.160:47219] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_NyKGvTIc8-wY3jUS7NwAAAQo"]
[Fri Apr 03 22:25:13.387626 2026] [:error] [pid 33447:tid 33514] [client 20.215.240.160:47173] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ac_NyUgaPmDHz92j4lNb8wAAAIo"]
[Fri Apr 03 22:25:13.907719 2026] [:error] [pid 33447:tid 33508] [client 20.215.240.160:42038] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ac_NyUgaPmDHz92j4lNb9gAAAIQ"]
[Fri Apr 03 22:25:14.423536 2026] [:error] [pid 33447:tid 33507] [client 20.215.240.160:53026] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ac_NykgaPmDHz92j4lNb-QAAAIM"]
[Fri Apr 03 22:25:14.949811 2026] [:error] [pid 33445:tid 33461] [client 20.215.240.160:42013] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ac_NyllRNZ0iDVmJWM0uYQAAAAs"]
[Fri Apr 03 22:25:15.466561 2026] [:error] [pid 33445:tid 33457] [client 20.215.240.160:60974] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "ac_Ny1lRNZ0iDVmJWM0uYwAAAAc"]
[Fri Apr 03 22:25:15.985492 2026] [:error] [pid 35469:tid 35488] [client 20.215.240.160:56555] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "ac_Ny6GvTIc8-wY3jUS7PgAAARE"]
[Fri Apr 03 22:25:16.499207 2026] [:error] [pid 33542:tid 33563] [client 20.215.240.160:4329] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "ac_NzHwb6uB1LaGtepYPMQAAANI"]
[Fri Apr 03 22:25:17.016481 2026] [:error] [pid 33542:tid 33548] [client 20.215.240.160:47217] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "ac_NzXwb6uB1LaGtepYPNQAAAMM"]
[Fri Apr 03 22:25:17.530576 2026] [:error] [pid 33445:tid 33453] [client 20.215.240.160:45344] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac_NzVlRNZ0iDVmJWM0ubgAAAAM"]
[Fri Apr 03 22:25:18.044681 2026] [:error] [pid 33445:tid 33469] [client 20.215.240.160:45346] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac_NzllRNZ0iDVmJWM0ucgAAABM"]
[Fri Apr 03 22:25:18.564466 2026] [:error] [pid 40533:tid 40543] [client 20.215.240.160:4324] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac_NzvbIAA8AViDmwsvF1QAAAUg"]
[Fri Apr 03 22:25:19.081011 2026] [:error] [pid 33445:tid 33473] [client 20.215.240.160:4327] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac_Nz1lRNZ0iDVmJWM0udgAAABc"]
[Fri Apr 03 22:25:19.607994 2026] [:error] [pid 33445:tid 33451] [client 20.215.240.160:47210] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac_Nz1lRNZ0iDVmJWM0uewAAAAE"]
[Fri Apr 03 22:25:20.127351 2026] [:error] [pid 33445:tid 33454] [client 20.215.240.160:56538] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac_N0FlRNZ0iDVmJWM0uhAAAAAQ"]
[Fri Apr 03 22:25:20.653825 2026] [:error] [pid 33446:tid 33487] [client 20.215.240.160:4665] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac_N0Ng3dCqFYIIdw0qJIQAAAEo"]
[Fri Apr 03 22:25:21.187378 2026] [:error] [pid 40533:tid 40559] [client 20.215.240.160:64097] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac_N0fbIAA8AViDmwsvF2gAAAVg"]
[Fri Apr 03 22:25:21.715958 2026] [:error] [pid 33445:tid 33457] [client 20.215.240.160:4637] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "ac_N0VlRNZ0iDVmJWM0ujAAAAAc"]
[Fri Apr 03 22:25:22.235992 2026] [:error] [pid 33445:tid 33454] [client 20.215.240.160:47767] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "ac_N0llRNZ0iDVmJWM0ukgAAAAQ"]
[Fri Apr 03 22:25:22.753351 2026] [:error] [pid 33445:tid 33451] [client 20.215.240.160:4304] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "ac_N0llRNZ0iDVmJWM0ulQAAAAE"]
[Fri Apr 03 22:25:23.273443 2026] [:error] [pid 33445:tid 33469] [client 20.215.240.160:45370] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "ac_N01lRNZ0iDVmJWM0unQAAABM"]
[Fri Apr 03 22:25:23.795371 2026] [:error] [pid 33445:tid 33468] [client 20.215.240.160:47225] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac_N01lRNZ0iDVmJWM0upQAAABI"]
[Fri Apr 03 22:25:24.388824 2026] [:error] [pid 33445:tid 33463] [client 20.215.240.160:47215] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac_N1FlRNZ0iDVmJWM0uqQAAAA0"]
[Fri Apr 03 22:25:24.916515 2026] [:error] [pid 33542:tid 33555] [client 20.215.240.160:47201] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac_N1Hwb6uB1LaGtepYPPgAAAMo"]
[Fri Apr 03 22:25:25.457092 2026] [:error] [pid 35469:tid 35477] [client 20.215.240.160:42034] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac_N1aGvTIc8-wY3jUS7TAAAAQY"]
[Fri Apr 03 22:25:25.975998 2026] [:error] [pid 33446:tid 33486] [client 20.215.240.160:42021] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "ac_N1dg3dCqFYIIdw0qJMQAAAEk"]
[Fri Apr 03 22:25:26.495325 2026] [:error] [pid 33446:tid 33483] [client 20.215.240.160:52996] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "ac_N1tg3dCqFYIIdw0qJMgAAAEY"]
[Fri Apr 03 22:25:27.022502 2026] [:error] [pid 33445:tid 33451] [client 20.215.240.160:4661] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "ac_N11lRNZ0iDVmJWM0utAAAAAE"]
[Fri Apr 03 22:25:27.546239 2026] [:error] [pid 33542:tid 33554] [client 20.215.240.160:4295] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "ac_N13wb6uB1LaGtepYPSQAAAMk"]
[Fri Apr 03 22:25:28.068565 2026] [:error] [pid 33445:tid 33464] [client 20.215.240.160:60951] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "ac_N2FlRNZ0iDVmJWM0uvQAAAA4"]
[Fri Apr 03 22:25:28.586310 2026] [:error] [pid 33445:tid 33460] [client 20.215.240.160:53046] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "ac_N2FlRNZ0iDVmJWM0uwwAAAAo"]
[Fri Apr 03 22:25:29.121004 2026] [:error] [pid 40533:tid 40543] [client 20.215.240.160:53035] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "ac_N2fbIAA8AViDmwsvF4gAAAUg"]
[Fri Apr 03 22:25:29.694790 2026] [:error] [pid 33542:tid 33555] [client 20.215.240.160:4312] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "ac_N2Xwb6uB1LaGtepYPTAAAAMo"]
[Fri Apr 03 22:25:30.209015 2026] [:error] [pid 40533:tid 40542] [client 20.215.240.160:45925] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "ac_N2vbIAA8AViDmwsvF6wAAAUc"]
[Fri Apr 03 22:25:30.737317 2026] [:error] [pid 33445:tid 33470] [client 20.215.240.160:47207] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "ac_N2llRNZ0iDVmJWM0uygAAABQ"]
[Fri Apr 03 22:25:31.278223 2026] [:error] [pid 33445:tid 33452] [client 20.215.240.160:47792] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "ac_N21lRNZ0iDVmJWM0uywAAAAI"]
[Fri Apr 03 22:25:31.794188 2026] [:error] [pid 40562:tid 40581] [client 20.215.240.160:64121] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "ac_N2zfFMXuP9zvqCeqdGQAAAZA"]
[Fri Apr 03 22:25:32.323119 2026] [:error] [pid 40562:tid 40567] [client 20.215.240.160:47785] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fyiiz.php"] [unique_id "ac_N3DfFMXuP9zvqCeqdGwAAAYI"]
[Fri Apr 03 22:25:32.846512 2026] [:error] [pid 35469:tid 35485] [client 20.215.240.160:60989] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fyiiz.php"] [unique_id "ac_N3KGvTIc8-wY3jUS7VQAAAQ4"]
[Fri Apr 03 22:25:33.360996 2026] [:error] [pid 33447:tid 33517] [client 20.215.240.160:41992] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fyiiz.php"] [unique_id "ac_N3UgaPmDHz92j4lNcHgAAAI0"]
[Fri Apr 03 22:25:33.892691 2026] [:error] [pid 33445:tid 33462] [client 20.215.240.160:60962] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fyiiz.php"] [unique_id "ac_N3VlRNZ0iDVmJWM0u0gAAAAw"]
[Fri Apr 03 22:25:34.411536 2026] [:error] [pid 33445:tid 33458] [client 20.215.240.160:45347] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_N3llRNZ0iDVmJWM0u1gAAAAg"]
[Fri Apr 03 22:25:34.937085 2026] [:error] [pid 33446:tid 33483] [client 20.215.240.160:42027] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_N3tg3dCqFYIIdw0qJQQAAAEY"]
[Fri Apr 03 22:25:35.459124 2026] [:error] [pid 33445:tid 33459] [client 20.215.240.160:59780] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_N31lRNZ0iDVmJWM0u2AAAAAk"]
[Fri Apr 03 22:25:35.980668 2026] [:error] [pid 55174:tid 55189] [client 20.215.240.160:63016] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_N35_WKqUonPNUHYwGjwAAAc0"]
[Fri Apr 03 22:25:36.501625 2026] [:error] [pid 40533:tid 40536] [client 20.215.240.160:47179] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_N4PbIAA8AViDmwsvF_gAAAUE"]
[Fri Apr 03 22:25:37.027100 2026] [:error] [pid 33542:tid 33549] [client 20.215.240.160:47200] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_N4Xwb6uB1LaGtepYPXgAAAMQ"]
[Fri Apr 03 22:25:37.560348 2026] [:error] [pid 33542:tid 33557] [client 20.215.240.160:56554] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_N4Xwb6uB1LaGtepYPYQAAAMw"]
[Fri Apr 03 22:25:38.098419 2026] [:error] [pid 35469:tid 35482] [client 20.215.240.160:4332] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_N4qGvTIc8-wY3jUS7WQAAAQs"]
[Fri Apr 03 22:25:38.664079 2026] [:error] [pid 33445:tid 33450] [client 20.215.240.160:4877] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "ac_N4llRNZ0iDVmJWM0u8AAAAAA"]
[Fri Apr 03 22:25:39.190366 2026] [:error] [pid 40533:tid 40559] [client 20.215.240.160:56548] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "ac_N4_bIAA8AViDmwsvGBAAAAVg"]
[Fri Apr 03 22:25:39.720785 2026] [:error] [pid 40533:tid 40558] [client 20.215.240.160:45911] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "ac_N4_bIAA8AViDmwsvGBgAAAVc"]
[Fri Apr 03 22:25:40.247420 2026] [:error] [pid 40533:tid 40540] [client 20.215.240.160:64123] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "ac_N5PbIAA8AViDmwsvGDQAAAUU"]
[Fri Apr 03 22:25:40.770761 2026] [:error] [pid 40533:tid 40553] [client 20.215.240.160:60982] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac_N5PbIAA8AViDmwsvGFAAAAVI"]
[Fri Apr 03 22:25:41.298186 2026] [:error] [pid 33445:tid 33456] [client 20.215.240.160:56525] File does not exist: /usr/local/apache/htdocs/suspended-page/c6jpzOQvtPyeM9hdefault.php
[Fri Apr 03 22:25:41.556685 2026] [:error] [pid 33445:tid 33469] [client 20.215.240.160:56525] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Fri Apr 03 22:25:41.820109 2026] [:error] [pid 33445:tid 33452] [client 20.215.240.160:56525] File does not exist: /usr/local/apache/htdocs/suspended-page/aifa.php
[Fri Apr 03 22:25:42.079730 2026] [:error] [pid 33445:tid 33467] [client 20.215.240.160:56525] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Fri Apr 03 22:25:42.335063 2026] [:error] [pid 33445:tid 33464] [client 20.215.240.160:56525] [client 20.215.240.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac_N5llRNZ0iDVmJWM0vCgAAAA4"]
[Fri Apr 03 22:25:42.854180 2026] [:error] [pid 33445:tid 33460] [client 20.215.240.160:4316] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Fri Apr 03 22:25:43.111115 2026] [:error] [pid 33445:tid 33461] [client 20.215.240.160:4316] File does not exist: /usr/local/apache/htdocs/suspended-page/lites.php
[Fri Apr 03 22:25:43.373099 2026] [:error] [pid 33445:tid 33463] [client 20.215.240.160:4316] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Fri Apr 03 22:25:43.632471 2026] [:error] [pid 33445:tid 33474] [client 20.215.240.160:4316] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Fri Apr 03 22:25:43.892048 2026] [:error] [pid 33445:tid 33459] [client 20.215.240.160:4316] File does not exist: /usr/local/apache/htdocs/suspended-page/JKydQumkIarjMJ4default.php
[Fri Apr 03 22:25:44.152422 2026] [:error] [pid 33445:tid 33453] [client 20.215.240.160:4316] File does not exist: /usr/local/apache/htdocs/suspended-page/he.php
[Fri Apr 03 22:25:44.410977 2026] [:error] [pid 33445:tid 33470] [client 20.215.240.160:4316] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Fri Apr 03 22:25:44.666660 2026] [:error] [pid 33445:tid 33469] [client 20.215.240.160:4316] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "ac_N6FlRNZ0iDVmJWM0vGwAAABM"]
[Fri Apr 03 22:25:45.208991 2026] [:error] [pid 55174:tid 55190] [client 20.215.240.160:60932] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "ac_N6Z_WKqUonPNUHYwGlQAAAc4"]
[Fri Apr 03 22:25:45.735664 2026] [:error] [pid 33445:tid 33459] [client 20.215.240.160:53038] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "ac_N6VlRNZ0iDVmJWM0vIQAAAAk"]
[Fri Apr 03 22:25:46.253922 2026] [:error] [pid 40562:tid 40581] [client 20.215.240.160:42025] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwq13.php"] [unique_id "ac_N6jfFMXuP9zvqCeqdMwAAAZA"]
[Fri Apr 03 22:25:46.766578 2026] [:error] [pid 33445:tid 33456] [client 20.215.240.160:45325] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "ac_N6llRNZ0iDVmJWM0vIwAAAAY"]
[Fri Apr 03 22:25:47.279623 2026] [:error] [pid 40562:tid 40584] [client 20.215.240.160:64099] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "ac_N6zfFMXuP9zvqCeqdOAAAAZM"]
[Fri Apr 03 22:25:47.792061 2026] [:error] [pid 40562:tid 40571] [client 20.215.240.160:47855] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "ac_N6zfFMXuP9zvqCeqdOgAAAYY"]
[Fri Apr 03 22:25:48.320411 2026] [:error] [pid 40533:tid 40539] [client 20.215.240.160:45889] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/marijuana.php"] [unique_id "ac_N7PbIAA8AViDmwsvGJQAAAUQ"]
[Fri Apr 03 22:25:48.868595 2026] [:error] [pid 33542:tid 33558] [client 20.215.240.160:41988] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac_N7Hwb6uB1LaGtepYPawAAAM0"]
[Fri Apr 03 22:25:49.391380 2026] [:error] [pid 40562:tid 40583] [client 20.215.240.160:52993] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac_N7TfFMXuP9zvqCeqdPwAAAZI"]
[Fri Apr 03 22:25:49.934033 2026] [:error] [pid 33542:tid 33569] [client 20.215.240.160:53028] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac_N7Xwb6uB1LaGtepYPcAAAANg"]
[Fri Apr 03 22:25:50.449651 2026] [:error] [pid 33445:tid 33472] [client 20.215.240.160:47183] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "ac_N7llRNZ0iDVmJWM0vKAAAABY"]
[Fri Apr 03 22:25:51.095206 2026] [:error] [pid 40562:tid 40589] [client 20.215.240.160:47756] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac_N7zfFMXuP9zvqCeqdQwAAAZg"]
[Fri Apr 03 22:25:51.658188 2026] [:error] [pid 40533:tid 40536] [client 20.215.240.160:60938] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac_N7_bIAA8AViDmwsvGMQAAAUE"]
[Fri Apr 03 22:25:52.190185 2026] [:error] [pid 33445:tid 33458] [client 20.215.240.160:47213] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac_N8FlRNZ0iDVmJWM0vNAAAAAg"]
[Fri Apr 03 22:25:52.714114 2026] [:error] [pid 33446:tid 33482] [client 20.215.240.160:4333] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac_N8Ng3dCqFYIIdw0qJVgAAAEU"]
[Fri Apr 03 22:25:53.226556 2026] [:error] [pid 40533:tid 40553] [client 20.215.240.160:4306] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac_N8fbIAA8AViDmwsvGOwAAAVI"]
[Fri Apr 03 22:25:53.743526 2026] [:error] [pid 33445:tid 33466] [client 20.215.240.160:45904] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac_N8VlRNZ0iDVmJWM0vPAAAABA"]
[Fri Apr 03 22:25:54.281918 2026] [:error] [pid 40533:tid 40554] [client 20.215.240.160:55228] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac_N8vbIAA8AViDmwsvGPgAAAVM"]
[Fri Apr 03 22:25:54.815566 2026] [:error] [pid 40533:tid 40557] [client 20.215.240.160:47832] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac_N8vbIAA8AViDmwsvGRAAAAVY"]
[Fri Apr 03 22:25:55.330136 2026] [:error] [pid 33446:tid 33498] [client 20.215.240.160:42005] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "ac_N89g3dCqFYIIdw0qJWAAAAFU"]
[Fri Apr 03 22:25:55.846949 2026] [:error] [pid 33445:tid 33460] [client 20.215.240.160:63010] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "ac_N81lRNZ0iDVmJWM0vRgAAAAo"]
[Fri Apr 03 22:25:56.365989 2026] [:error] [pid 33446:tid 33483] [client 20.215.240.160:41985] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "ac_N9Ng3dCqFYIIdw0qJXAAAAEY"]
[Fri Apr 03 22:25:56.894159 2026] [:error] [pid 33542:tid 33550] [client 20.215.240.160:4875] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "ac_N9Hwb6uB1LaGtepYPdgAAAMU"]
[Fri Apr 03 22:25:57.433198 2026] [:error] [pid 33445:tid 33464] [client 20.215.240.160:59778] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_N9VlRNZ0iDVmJWM0vUwAAAA4"]
[Fri Apr 03 22:25:57.950678 2026] [:error] [pid 33445:tid 33455] [client 20.215.240.160:59808] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_N9VlRNZ0iDVmJWM0vVwAAAAU"]
[Fri Apr 03 22:25:58.477850 2026] [:error] [pid 33445:tid 33453] [client 20.215.240.160:45329] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_N9llRNZ0iDVmJWM0vXQAAAAM"]
[Fri Apr 03 22:25:58.994363 2026] [:error] [pid 33447:tid 33526] [client 20.215.240.160:56534] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_N9kgaPmDHz92j4lNcJgAAAJY"]
[Fri Apr 03 22:25:59.544320 2026] [:error] [pid 33542:tid 33548] [client 20.215.240.160:45316] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac_N93wb6uB1LaGtepYPfAAAAMM"]
[Fri Apr 03 22:26:00.071535 2026] [:error] [pid 40562:tid 40577] [client 20.215.240.160:4867] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac_N-DfFMXuP9zvqCeqdSgAAAYw"]
[Fri Apr 03 22:26:00.592605 2026] [:error] [pid 40533:tid 40540] [client 20.215.240.160:45341] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac_N-PbIAA8AViDmwsvGWQAAAUU"]
[Fri Apr 03 22:26:01.114507 2026] [:error] [pid 55174:tid 55181] [client 20.215.240.160:53010] [client 20.215.240.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac_N-Z_WKqUonPNUHYwGpQAAAcU"]
[Fri Apr 03 23:13:46.774292 2026] [:error] [pid 40533:tid 40551] [client 20.240.61.149:7697] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 03 23:13:47.040108 2026] [:error] [pid 40533:tid 40552] [client 20.240.61.149:7697] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Fri Apr 03 23:13:47.305295 2026] [:error] [pid 40533:tid 40550] [client 20.240.61.149:7697] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Fri Apr 03 23:13:47.570621 2026] [:error] [pid 40533:tid 40556] [client 20.240.61.149:7697] File does not exist: /usr/local/apache/htdocs/suspended-page/sc.php
[Fri Apr 03 23:13:47.835898 2026] [:error] [pid 40533:tid 40548] [client 20.240.61.149:7697] File does not exist: /usr/local/apache/htdocs/suspended-page/filesss.php
[Fri Apr 03 23:13:48.100317 2026] [:error] [pid 40533:tid 40543] [client 20.240.61.149:7697] File does not exist: /usr/local/apache/htdocs/suspended-page/feokc.php
[Fri Apr 03 23:13:48.364859 2026] [:error] [pid 40533:tid 40546] [client 20.240.61.149:7697] File does not exist: /usr/local/apache/htdocs/suspended-page/b4txckoieeyhynhsrpi9lCdefault.php
[Fri Apr 03 23:13:48.630198 2026] [:error] [pid 40533:tid 40547] [client 20.240.61.149:7697] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Fri Apr 03 23:13:49.424674 2026] [:error] [pid 40533:tid 40544] [client 20.240.61.149:7697] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ac_ZLfbIAA8AViDmwsviKQAAAUk"]
[Fri Apr 03 23:13:49.952050 2026] [:error] [pid 33445:tid 33455] [client 20.240.61.149:7720] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ac_ZLVlRNZ0iDVmJWM1VWQAAAAU"]
[Fri Apr 03 23:13:50.488788 2026] [:error] [pid 33445:tid 33457] [client 20.240.61.149:7705] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ac_ZLllRNZ0iDVmJWM1VXAAAAAc"]
[Fri Apr 03 23:13:51.018961 2026] [:error] [pid 33542:tid 33550] [client 20.240.61.149:7732] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ac_ZL3wb6uB1LaGtepYjeQAAAMU"]
[Fri Apr 03 23:13:51.549129 2026] [:error] [pid 55174:tid 55187] [client 20.240.61.149:7741] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac_ZL5_WKqUonPNUHYwPEQAAAcs"]
[Fri Apr 03 23:13:52.086825 2026] [:error] [pid 33542:tid 33551] [client 20.240.61.149:7430] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac_ZMHwb6uB1LaGtepYjfQAAAMY"]
[Fri Apr 03 23:13:52.615401 2026] [:error] [pid 40533:tid 40547] [client 20.240.61.149:7454] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac_ZMPbIAA8AViDmwsviNAAAAUw"]
[Fri Apr 03 23:13:53.140202 2026] [:error] [pid 40533:tid 40553] [client 20.240.61.149:7483] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "ac_ZMfbIAA8AViDmwsviNQAAAVI"]
[Fri Apr 03 23:13:53.666897 2026] [:error] [pid 40533:tid 40558] [client 20.240.61.149:7721] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac_ZMfbIAA8AViDmwsviOgAAAVc"]
[Fri Apr 03 23:13:54.202249 2026] [:error] [pid 40533:tid 40551] [client 20.240.61.149:7463] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac_ZMvbIAA8AViDmwsviPQAAAVA"]
[Fri Apr 03 23:13:54.731826 2026] [:error] [pid 40562:tid 40570] [client 20.240.61.149:7726] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac_ZMjfFMXuP9zvqCeqsJAAAAYU"]
[Fri Apr 03 23:13:55.256320 2026] [:error] [pid 33446:tid 33479] [client 20.240.61.149:7702] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aapig.php"] [unique_id "ac_ZM9g3dCqFYIIdw0qVOwAAAEI"]
[Fri Apr 03 23:13:55.786128 2026] [:error] [pid 33542:tid 33556] [client 20.240.61.149:7698] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "ac_ZM3wb6uB1LaGtepYjigAAAMs"]
[Fri Apr 03 23:13:56.312376 2026] [:error] [pid 33542:tid 33561] [client 20.240.61.149:7442] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "ac_ZNHwb6uB1LaGtepYjjAAAANA"]
[Fri Apr 03 23:13:56.841946 2026] [:error] [pid 35469:tid 35489] [client 20.240.61.149:7703] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "ac_ZNKGvTIc8-wY3jUTGuwAAARI"]
[Fri Apr 03 23:13:57.381659 2026] [:error] [pid 35469:tid 35494] [client 20.240.61.149:7444] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/web.php"] [unique_id "ac_ZNaGvTIc8-wY3jUTGwQAAARc"]
[Fri Apr 03 23:13:57.910978 2026] [:error] [pid 40533:tid 40558] [client 20.240.61.149:7692] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac_ZNfbIAA8AViDmwsviRAAAAVc"]
[Fri Apr 03 23:13:58.455635 2026] [:error] [pid 35469:tid 35477] [client 20.240.61.149:7728] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac_ZNqGvTIc8-wY3jUTGwgAAAQY"]
[Fri Apr 03 23:13:58.988057 2026] [:error] [pid 33445:tid 33461] [client 20.240.61.149:7695] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac_ZNllRNZ0iDVmJWM1VZAAAAAs"]
[Fri Apr 03 23:13:59.520427 2026] [:error] [pid 55174:tid 55188] [client 20.240.61.149:7424] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "ac_ZN5_WKqUonPNUHYwPEwAAAcw"]
[Fri Apr 03 23:14:00.047480 2026] [:error] [pid 40562:tid 40579] [client 20.240.61.149:7736] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "ac_ZODfFMXuP9zvqCeqsKQAAAY4"]
[Fri Apr 03 23:14:00.574219 2026] [:error] [pid 33446:tid 33495] [client 20.240.61.149:7737] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "ac_ZONg3dCqFYIIdw0qVQQAAAFI"]
[Fri Apr 03 23:14:01.109337 2026] [:error] [pid 33446:tid 33499] [client 20.240.61.149:7425] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "ac_ZOdg3dCqFYIIdw0qVQgAAAFY"]
[Fri Apr 03 23:14:01.634797 2026] [:error] [pid 55174:tid 55183] [client 20.240.61.149:7735] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wander.php"] [unique_id "ac_ZOZ_WKqUonPNUHYwPFwAAAcc"]
[Fri Apr 03 23:14:02.188961 2026] [:error] [pid 40562:tid 40582] [client 20.240.61.149:8160] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac_ZOjfFMXuP9zvqCeqsLwAAAZE"]
[Fri Apr 03 23:14:02.715390 2026] [:error] [pid 33447:tid 33508] [client 20.240.61.149:7689] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac_ZOkgaPmDHz92j4lNk2wAAAIQ"]
[Fri Apr 03 23:14:03.241605 2026] [:error] [pid 33542:tid 33563] [client 20.240.61.149:7443] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac_ZO3wb6uB1LaGtepYjoAAAANI"]
[Fri Apr 03 23:14:03.786718 2026] [:error] [pid 40562:tid 40568] [client 20.240.61.149:7441] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "ac_ZOzfFMXuP9zvqCeqsMwAAAYM"]
[Fri Apr 03 23:14:04.313282 2026] [:error] [pid 40533:tid 40551] [client 20.240.61.149:7711] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "ac_ZPPbIAA8AViDmwsviTwAAAVA"]
[Fri Apr 03 23:14:04.839736 2026] [:error] [pid 33542:tid 33547] [client 20.240.61.149:7710] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "ac_ZPHwb6uB1LaGtepYjqAAAAMI"]
[Fri Apr 03 23:14:05.366848 2026] [:error] [pid 33447:tid 33522] [client 20.240.61.149:7435] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "ac_ZPUgaPmDHz92j4lNk3QAAAJI"]
[Fri Apr 03 23:14:05.891750 2026] [:error] [pid 33542:tid 33551] [client 20.240.61.149:7718] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "ac_ZPXwb6uB1LaGtepYjrAAAAMY"]
[Fri Apr 03 23:14:06.421289 2026] [:error] [pid 33542:tid 33562] [client 20.240.61.149:7742] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_ZPnwb6uB1LaGtepYjrwAAANE"]
[Fri Apr 03 23:14:06.948329 2026] [:error] [pid 33542:tid 33564] [client 20.240.61.149:7733] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_ZPnwb6uB1LaGtepYjtAAAANM"]
[Fri Apr 03 23:14:07.474778 2026] [:error] [pid 33446:tid 33477] [client 20.240.61.149:7727] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_ZP9g3dCqFYIIdw0qVRAAAAEA"]
[Fri Apr 03 23:14:08.002831 2026] [:error] [pid 33542:tid 33562] [client 20.240.61.149:8130] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "ac_ZQHwb6uB1LaGtepYjuwAAANE"]
[Fri Apr 03 23:14:08.538035 2026] [:error] [pid 33445:tid 33451] [client 20.240.61.149:7730] [client 20.240.61.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac_ZQFlRNZ0iDVmJWM1VdAAAAAE"]
[Fri Apr 03 23:14:09.066375 2026] [:error] [pid 55174:tid 55184] [client 20.240.61.149:7683] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aves.php"] [unique_id "ac_ZQZ_WKqUonPNUHYwPHQAAAcg"]
[Fri Apr 03 23:14:09.597636 2026] [:error] [pid 40562:tid 40585] [client 20.240.61.149:7434] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aves.php"] [unique_id "ac_ZQTfFMXuP9zvqCeqsOgAAAZQ"]
[Fri Apr 03 23:14:10.126386 2026] [:error] [pid 40562:tid 40587] [client 20.240.61.149:7451] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aves.php"] [unique_id "ac_ZQjfFMXuP9zvqCeqsQAAAAZY"]
[Fri Apr 03 23:14:10.672221 2026] [:error] [pid 40533:tid 40541] [client 20.240.61.149:7712] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aves.php"] [unique_id "ac_ZQvbIAA8AViDmwsviVgAAAUY"]
[Fri Apr 03 23:14:11.203566 2026] [:error] [pid 33542:tid 33552] [client 20.240.61.149:7707] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac_ZQ3wb6uB1LaGtepYjwgAAAMc"]
[Fri Apr 03 23:14:11.734588 2026] [:error] [pid 33445:tid 33454] [client 20.240.61.149:7723] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac_ZQ1lRNZ0iDVmJWM1VfQAAAAQ"]
[Fri Apr 03 23:14:12.257476 2026] [:error] [pid 33447:tid 33512] [client 20.240.61.149:8163] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac_ZREgaPmDHz92j4lNk5QAAAIg"]
[Fri Apr 03 23:14:12.785542 2026] [:error] [pid 33445:tid 33450] [client 20.240.61.149:7431] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/webadmin.php"] [unique_id "ac_ZRFlRNZ0iDVmJWM1VgQAAAAA"]
[Fri Apr 03 23:14:13.320755 2026] [:error] [pid 33445:tid 33456] [client 20.240.61.149:7449] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac_ZRVlRNZ0iDVmJWM1VhQAAAAY"]
[Fri Apr 03 23:14:13.854298 2026] [:error] [pid 40533:tid 40550] [client 20.240.61.149:8136] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac_ZRfbIAA8AViDmwsviWwAAAU8"]
[Fri Apr 03 23:14:14.382855 2026] [:error] [pid 33445:tid 33470] [client 20.240.61.149:7456] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac_ZRllRNZ0iDVmJWM1VkQAAABQ"]
[Fri Apr 03 23:14:14.906419 2026] [:error] [pid 40533:tid 40549] [client 20.240.61.149:7426] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/to.php"] [unique_id "ac_ZRvbIAA8AViDmwsviYgAAAU4"]
[Fri Apr 03 23:14:15.435866 2026] [:error] [pid 35469:tid 35474] [client 20.240.61.149:7696] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_ZR6GvTIc8-wY3jUTGyQAAAQM"]
[Fri Apr 03 23:14:15.967154 2026] [:error] [pid 40533:tid 40548] [client 20.240.61.149:7471] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_ZR_bIAA8AViDmwsvibQAAAU0"]
[Fri Apr 03 23:14:16.505906 2026] [:error] [pid 40533:tid 40542] [client 20.240.61.149:7445] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_ZSPbIAA8AViDmwsvidgAAAUc"]
[Fri Apr 03 23:14:17.030821 2026] [:error] [pid 40533:tid 40553] [client 20.240.61.149:7453] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "ac_ZSfbIAA8AViDmwsvifQAAAVI"]
[Fri Apr 03 23:14:17.568547 2026] [:error] [pid 40533:tid 40548] [client 20.240.61.149:7731] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "ac_ZSfbIAA8AViDmwsvihAAAAU0"]
[Fri Apr 03 23:14:18.096249 2026] [:error] [pid 55174:tid 55183] [client 20.240.61.149:7433] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "ac_ZSp_WKqUonPNUHYwPJAAAAcc"]
[Fri Apr 03 23:14:18.631879 2026] [:error] [pid 55174:tid 55190] [client 20.240.61.149:7428] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "ac_ZSp_WKqUonPNUHYwPJQAAAc4"]
[Fri Apr 03 23:14:19.158971 2026] [:error] [pid 33446:tid 33481] [client 20.240.61.149:7743] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yanz.php"] [unique_id "ac_ZS9g3dCqFYIIdw0qVUAAAAEQ"]
[Fri Apr 03 23:14:19.685410 2026] [:error] [pid 33542:tid 33554] [client 20.240.61.149:7432] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac_ZS3wb6uB1LaGtepYjxQAAAMk"]
[Fri Apr 03 23:14:20.213888 2026] [:error] [pid 33445:tid 33470] [client 20.240.61.149:8141] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac_ZTFlRNZ0iDVmJWM1VnAAAABQ"]
[Fri Apr 03 23:14:20.743353 2026] [:error] [pid 33447:tid 33509] [client 20.240.61.149:7681] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac_ZTEgaPmDHz92j4lNk6QAAAIU"]
[Fri Apr 03 23:14:21.274348 2026] [:error] [pid 33445:tid 33452] [client 20.240.61.149:8154] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "ac_ZTVlRNZ0iDVmJWM1VoQAAAAI"]
[Fri Apr 03 23:14:21.802018 2026] [:error] [pid 33446:tid 33487] [client 20.240.61.149:7719] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac_ZTdg3dCqFYIIdw0qVVQAAAEo"]
[Fri Apr 03 23:14:22.324975 2026] [:error] [pid 40562:tid 40584] [client 20.240.61.149:7429] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac_ZTjfFMXuP9zvqCeqsUQAAAZM"]
[Fri Apr 03 23:14:22.851010 2026] [:error] [pid 33542:tid 33558] [client 20.240.61.149:7701] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac_ZTnwb6uB1LaGtepYjzAAAAM0"]
[Fri Apr 03 23:14:23.388225 2026] [:error] [pid 40562:tid 40587] [client 20.240.61.149:8131] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "ac_ZTzfFMXuP9zvqCeqsVQAAAZY"]
[Fri Apr 03 23:14:23.914604 2026] [:error] [pid 33445:tid 33466] [client 20.240.61.149:8157] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac_ZT1lRNZ0iDVmJWM1VpwAAABA"]
[Fri Apr 03 23:14:24.440117 2026] [:error] [pid 33445:tid 33450] [client 20.240.61.149:7729] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac_ZUFlRNZ0iDVmJWM1VqgAAAAA"]
[Fri Apr 03 23:14:24.968909 2026] [:error] [pid 33445:tid 33451] [client 20.240.61.149:8185] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac_ZUFlRNZ0iDVmJWM1VrwAAAAE"]
[Fri Apr 03 23:14:25.501421 2026] [:error] [pid 33445:tid 33453] [client 20.240.61.149:7438] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/24.php"] [unique_id "ac_ZUVlRNZ0iDVmJWM1VsQAAAAM"]
[Fri Apr 03 23:14:26.031072 2026] [:error] [pid 35469:tid 35476] [client 20.240.61.149:8074] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac_ZUqGvTIc8-wY3jUTG1AAAAQU"]
[Fri Apr 03 23:14:26.563654 2026] [:error] [pid 55174:tid 55178] [client 20.240.61.149:8179] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac_ZUp_WKqUonPNUHYwPKAAAAcI"]
[Fri Apr 03 23:14:27.097493 2026] [:error] [pid 40533:tid 40545] [client 20.240.61.149:7437] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac_ZU_bIAA8AViDmwsvitAAAAUo"]
[Fri Apr 03 23:14:27.630300 2026] [:error] [pid 33445:tid 33451] [client 20.240.61.149:7708] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock.php"] [unique_id "ac_ZU1lRNZ0iDVmJWM1VvQAAAAE"]
[Fri Apr 03 23:14:28.154390 2026] [:error] [pid 40562:tid 40565] [client 20.240.61.149:7699] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ac_ZVDfFMXuP9zvqCeqsXQAAAYA"]
[Fri Apr 03 23:14:28.689121 2026] [:error] [pid 40562:tid 40573] [client 20.240.61.149:7706] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ac_ZVDfFMXuP9zvqCeqsXgAAAYg"]
[Fri Apr 03 23:14:29.213484 2026] [:error] [pid 33446:tid 33484] [client 20.240.61.149:7436] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ac_ZVdg3dCqFYIIdw0qVVwAAAEc"]
[Fri Apr 03 23:14:29.739328 2026] [:error] [pid 33446:tid 33486] [client 20.240.61.149:7704] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aj.php"] [unique_id "ac_ZVdg3dCqFYIIdw0qVWAAAAEk"]
[Fri Apr 03 23:14:30.262267 2026] [:error] [pid 40533:tid 40557] [client 20.240.61.149:7690] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac_ZVvbIAA8AViDmwsvixwAAAVY"]
[Fri Apr 03 23:14:30.786723 2026] [:error] [pid 33445:tid 33453] [client 20.240.61.149:7739] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac_ZVllRNZ0iDVmJWM1VxwAAAAM"]
[Fri Apr 03 23:14:31.310404 2026] [:error] [pid 40533:tid 40548] [client 20.240.61.149:7738] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac_ZV_bIAA8AViDmwsvizwAAAU0"]
[Fri Apr 03 23:14:31.833899 2026] [:error] [pid 33446:tid 33489] [client 20.240.61.149:7448] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ac_ZV9g3dCqFYIIdw0qVWQAAAEw"]
[Fri Apr 03 23:14:32.369005 2026] [:error] [pid 33542:tid 33566] [client 20.240.61.149:7724] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac_ZWHwb6uB1LaGtepYj2wAAANU"]
[Fri Apr 03 23:14:32.894761 2026] [:error] [pid 33542:tid 33548] [client 20.240.61.149:8156] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac_ZWHwb6uB1LaGtepYj3AAAAMM"]
[Fri Apr 03 23:14:33.421543 2026] [:error] [pid 33445:tid 33457] [client 20.240.61.149:7479] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac_ZWVlRNZ0iDVmJWM1VzgAAAAc"]
[Fri Apr 03 23:14:33.950580 2026] [:error] [pid 33445:tid 33469] [client 20.240.61.149:7466] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wqqs.php"] [unique_id "ac_ZWVlRNZ0iDVmJWM1V1AAAABM"]
[Fri Apr 03 23:14:34.482567 2026] [:error] [pid 33542:tid 33552] [client 20.240.61.149:8152] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac_ZWnwb6uB1LaGtepYj5AAAAMc"]
[Fri Apr 03 23:14:35.030103 2026] [:error] [pid 33445:tid 33461] [client 20.240.61.149:7450] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac_ZW1lRNZ0iDVmJWM1V2gAAAAs"]
[Fri Apr 03 23:14:35.557957 2026] [:error] [pid 33445:tid 33451] [client 20.240.61.149:7473] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac_ZW1lRNZ0iDVmJWM1V3gAAAAE"]
[Fri Apr 03 23:14:36.089050 2026] [:error] [pid 33445:tid 33459] [client 20.240.61.149:7458] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file9.php"] [unique_id "ac_ZXFlRNZ0iDVmJWM1V4QAAAAk"]
[Fri Apr 03 23:14:36.615566 2026] [:error] [pid 33542:tid 33553] [client 20.240.61.149:7468] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_ZXHwb6uB1LaGtepYj6AAAAMg"]
[Fri Apr 03 23:14:37.139856 2026] [:error] [pid 33445:tid 33453] [client 20.240.61.149:7459] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_ZXVlRNZ0iDVmJWM1V5wAAAAM"]
[Fri Apr 03 23:14:37.676002 2026] [:error] [pid 33447:tid 33504] [client 20.240.61.149:8128] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_ZXUgaPmDHz92j4lNk7wAAAIA"]
[Fri Apr 03 23:14:38.202090 2026] [:error] [pid 33445:tid 33456] [client 20.240.61.149:7477] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "ac_ZXllRNZ0iDVmJWM1V7wAAAAY"]
[Fri Apr 03 23:14:38.732351 2026] [:error] [pid 33445:tid 33462] [client 20.240.61.149:8168] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac_ZXllRNZ0iDVmJWM1V8wAAAAw"]
[Fri Apr 03 23:14:39.256309 2026] [:error] [pid 33445:tid 33470] [client 20.240.61.149:7455] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac_ZX1lRNZ0iDVmJWM1V-gAAABQ"]
[Fri Apr 03 23:14:39.788603 2026] [:error] [pid 33542:tid 33551] [client 20.240.61.149:7486] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac_ZX3wb6uB1LaGtepYj7gAAAMY"]
[Fri Apr 03 23:14:40.325517 2026] [:error] [pid 33446:tid 33498] [client 20.240.61.149:7688] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xc0252.php"] [unique_id "ac_ZYNg3dCqFYIIdw0qVYQAAAFU"]
[Fri Apr 03 23:14:40.853072 2026] [:error] [pid 33446:tid 33482] [client 20.240.61.149:8173] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac_ZYNg3dCqFYIIdw0qVZQAAAEU"]
[Fri Apr 03 23:14:41.382984 2026] [:error] [pid 40562:tid 40580] [client 20.240.61.149:7481] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac_ZYTfFMXuP9zvqCeqsYgAAAY8"]
[Fri Apr 03 23:14:41.907570 2026] [:error] [pid 33447:tid 33517] [client 20.240.61.149:8076] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac_ZYUgaPmDHz92j4lNk8gAAAI0"]
[Fri Apr 03 23:14:42.433307 2026] [:error] [pid 55174:tid 55178] [client 20.240.61.149:8135] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ac_ZYp_WKqUonPNUHYwPNQAAAcI"]
[Fri Apr 03 23:14:42.959402 2026] [:error] [pid 33446:tid 33500] [client 20.240.61.149:7474] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "ac_ZYtg3dCqFYIIdw0qVbgAAAFc"]
[Fri Apr 03 23:14:43.485306 2026] [:error] [pid 33447:tid 33516] [client 20.240.61.149:7476] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "ac_ZY0gaPmDHz92j4lNk9QAAAIw"]
[Fri Apr 03 23:14:44.016546 2026] [:error] [pid 33447:tid 33515] [client 20.240.61.149:7462] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "ac_ZZEgaPmDHz92j4lNk9wAAAIs"]
[Fri Apr 03 23:14:44.541630 2026] [:error] [pid 33447:tid 33514] [client 20.240.61.149:8150] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "ac_ZZEgaPmDHz92j4lNk-QAAAIo"]
[Fri Apr 03 23:14:45.069061 2026] [:error] [pid 33446:tid 33485] [client 20.240.61.149:8153] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac_ZZdg3dCqFYIIdw0qVcgAAAEg"]
[Fri Apr 03 23:14:45.596370 2026] [:error] [pid 33447:tid 33520] [client 20.240.61.149:7447] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac_ZZUgaPmDHz92j4lNk_AAAAJA"]
[Fri Apr 03 23:14:46.125516 2026] [:error] [pid 40562:tid 40585] [client 20.240.61.149:8182] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac_ZZjfFMXuP9zvqCeqsaQAAAZQ"]
[Fri Apr 03 23:14:46.649756 2026] [:error] [pid 40533:tid 40542] [client 20.240.61.149:7725] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac_ZZvbIAA8AViDmwsvi9gAAAUc"]
[Fri Apr 03 23:14:47.177517 2026] [:error] [pid 40533:tid 40541] [client 20.240.61.149:8137] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "ac_ZZ_bIAA8AViDmwsvi-gAAAUY"]
[Fri Apr 03 23:14:47.704218 2026] [:error] [pid 40533:tid 40551] [client 20.240.61.149:7457] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "ac_ZZ_bIAA8AViDmwsvi_wAAAVA"]
[Fri Apr 03 23:14:48.232648 2026] [:error] [pid 40533:tid 40550] [client 20.240.61.149:7684] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "ac_ZaPbIAA8AViDmwsvjAQAAAU8"]
[Fri Apr 03 23:14:48.765868 2026] [:error] [pid 35469:tid 35492] [client 20.240.61.149:8174] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/com.php"] [unique_id "ac_ZaKGvTIc8-wY3jUTG6wAAARU"]
[Fri Apr 03 23:14:49.292368 2026] [:error] [pid 40562:tid 40586] [client 20.240.61.149:8103] File does not exist: /usr/local/apache/htdocs/suspended-page/filer.php
[Fri Apr 03 23:14:49.558077 2026] [:error] [pid 40562:tid 40578] [client 20.240.61.149:8103] File does not exist: /usr/local/apache/htdocs/suspended-page/ng.php
[Fri Apr 03 23:14:49.823863 2026] [:error] [pid 40562:tid 40571] [client 20.240.61.149:8103] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Fri Apr 03 23:14:50.088880 2026] [:error] [pid 40562:tid 40582] [client 20.240.61.149:8103] File does not exist: /usr/local/apache/htdocs/suspended-page/vanta.php
[Fri Apr 03 23:14:50.354828 2026] [:error] [pid 40562:tid 40570] [client 20.240.61.149:8103] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Fri Apr 03 23:14:50.620266 2026] [:error] [pid 40562:tid 40568] [client 20.240.61.149:8103] File does not exist: /usr/local/apache/htdocs/suspended-page/wps.php
[Fri Apr 03 23:14:50.884089 2026] [:error] [pid 40562:tid 40589] [client 20.240.61.149:8103] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 03 23:14:51.149092 2026] [:error] [pid 40562:tid 40579] [client 20.240.61.149:8103] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Apr 03 23:14:51.945041 2026] [:error] [pid 40562:tid 40565] [client 20.240.61.149:8103] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Fri Apr 03 23:14:52.207177 2026] [:error] [pid 40562:tid 40577] [client 20.240.61.149:8103] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "ac_ZbDfFMXuP9zvqCeqsegAAAYw"]
[Fri Apr 03 23:14:52.730717 2026] [:error] [pid 40562:tid 40581] [client 20.240.61.149:8078] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "ac_ZbDfFMXuP9zvqCeqsfQAAAZA"]
[Fri Apr 03 23:14:53.255617 2026] [:error] [pid 33445:tid 33460] [client 20.240.61.149:7452] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "ac_ZbVlRNZ0iDVmJWM1WGgAAAAo"]
[Fri Apr 03 23:14:53.789536 2026] [:error] [pid 33542:tid 33557] [client 20.240.61.149:7460] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xvs.php"] [unique_id "ac_ZbXwb6uB1LaGtepYkAwAAAMw"]
[Fri Apr 03 23:14:54.315070 2026] [:error] [pid 33445:tid 33461] [client 20.240.61.149:8186] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac_ZbllRNZ0iDVmJWM1WHgAAAAs"]
[Fri Apr 03 23:14:54.838521 2026] [:error] [pid 33445:tid 33450] [client 20.240.61.149:7467] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac_ZbllRNZ0iDVmJWM1WIQAAAAA"]
[Fri Apr 03 23:14:55.370730 2026] [:error] [pid 33446:tid 33485] [client 20.240.61.149:7439] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac_Zb9g3dCqFYIIdw0qVeQAAAEg"]
[Fri Apr 03 23:14:55.907423 2026] [:error] [pid 40562:tid 40583] [client 20.240.61.149:7740] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "ac_ZbzfFMXuP9zvqCeqsggAAAZI"]
[Fri Apr 03 23:14:56.438695 2026] [:error] [pid 35469:tid 35494] [client 20.240.61.149:7709] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ac_ZcKGvTIc8-wY3jUTG8gAAARc"]
[Fri Apr 03 23:14:56.964567 2026] [:error] [pid 33445:tid 33465] [client 20.240.61.149:8068] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ac_ZcFlRNZ0iDVmJWM1WJgAAAA8"]
[Fri Apr 03 23:14:57.489972 2026] [:error] [pid 55174:tid 55187] [client 20.240.61.149:7722] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ac_ZcZ_WKqUonPNUHYwPQwAAAcs"]
[Fri Apr 03 23:14:58.014707 2026] [:error] [pid 33447:tid 33525] [client 20.240.61.149:7715] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ac_ZckgaPmDHz92j4lNlBQAAAJU"]
[Fri Apr 03 23:14:58.547371 2026] [:error] [pid 33542:tid 33549] [client 20.240.61.149:7427] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ac_Zcnwb6uB1LaGtepYkCgAAAMQ"]
[Fri Apr 03 23:14:59.075114 2026] [:error] [pid 33542:tid 33550] [client 20.240.61.149:7682] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ac_Zc3wb6uB1LaGtepYkDgAAAMU"]
[Fri Apr 03 23:14:59.601304 2026] [:error] [pid 33445:tid 33474] [client 20.240.61.149:7440] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ac_Zc1lRNZ0iDVmJWM1WLQAAABg"]
[Fri Apr 03 23:15:00.133411 2026] [:error] [pid 55174:tid 55185] [client 20.240.61.149:7464] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gorila.php"] [unique_id "ac_ZdJ_WKqUonPNUHYwPSwAAAck"]
[Fri Apr 03 23:15:00.667610 2026] [:error] [pid 35469:tid 35492] [client 20.240.61.149:8146] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ac_ZdKGvTIc8-wY3jUTG-AAAARU"]
[Fri Apr 03 23:15:01.193826 2026] [:error] [pid 33542:tid 33564] [client 20.240.61.149:8145] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ac_ZdXwb6uB1LaGtepYkEgAAANM"]
[Fri Apr 03 23:15:01.727561 2026] [:error] [pid 33445:tid 33462] [client 20.240.61.149:7685] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ac_ZdVlRNZ0iDVmJWM1WNAAAAAw"]
[Fri Apr 03 23:15:02.250516 2026] [:error] [pid 40533:tid 40559] [client 20.240.61.149:8082] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ac_ZdvbIAA8AViDmwsvjEAAAAVg"]
[Fri Apr 03 23:15:02.773373 2026] [:error] [pid 40533:tid 40553] [client 20.240.61.149:7465] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac_ZdvbIAA8AViDmwsvjEwAAAVI"]
[Fri Apr 03 23:15:03.295808 2026] [:error] [pid 40533:tid 40556] [client 20.240.61.149:7475] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac_Zd_bIAA8AViDmwsvjFwAAAVU"]
[Fri Apr 03 23:15:03.820143 2026] [:error] [pid 33542:tid 33553] [client 20.240.61.149:8142] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac_Zd3wb6uB1LaGtepYkGgAAAMg"]
[Fri Apr 03 23:15:04.346379 2026] [:error] [pid 33447:tid 33512] [client 20.240.61.149:7485] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ac_ZeEgaPmDHz92j4lNlCAAAAIg"]
[Fri Apr 03 23:15:04.871949 2026] [:error] [pid 33446:tid 33485] [client 20.240.61.149:8071] [client 20.240.61.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac_ZeNg3dCqFYIIdw0qVhgAAAEg"]
[Fri Apr 03 23:15:05.406601 2026] [:error] [pid 33542:tid 33564] [client 20.240.61.149:8190] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac_ZeXwb6uB1LaGtepYkHwAAANM"]
[Fri Apr 03 23:15:05.933385 2026] [:error] [pid 40533:tid 40552] [client 20.240.61.149:8167] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac_ZefbIAA8AViDmwsvjHQAAAVE"]
[Fri Apr 03 23:15:06.465793 2026] [:error] [pid 40562:tid 40589] [client 20.240.61.149:7461] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac_ZejfFMXuP9zvqCeqskQAAAZg"]
[Fri Apr 03 23:15:06.990336 2026] [:error] [pid 40533:tid 40557] [client 20.240.61.149:8175] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ac_ZevbIAA8AViDmwsvjIAAAAVY"]
[Fri Apr 03 23:15:07.521660 2026] [:error] [pid 35469:tid 35490] [client 20.240.61.149:8189] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "ac_Ze6GvTIc8-wY3jUTHBQAAARM"]
[Fri Apr 03 23:15:08.048142 2026] [:error] [pid 33445:tid 33457] [client 20.240.61.149:8070] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "ac_ZfFlRNZ0iDVmJWM1WPgAAAAc"]
[Fri Apr 03 23:15:08.578048 2026] [:error] [pid 40562:tid 40572] [client 20.240.61.149:8159] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "ac_ZfDfFMXuP9zvqCeqsmAAAAYc"]
[Fri Apr 03 23:15:09.103538 2026] [:error] [pid 33445:tid 33461] [client 20.240.61.149:8158] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "ac_ZfVlRNZ0iDVmJWM1WRwAAAAs"]
[Fri Apr 03 23:15:09.634602 2026] [:error] [pid 40533:tid 40547] [client 20.240.61.149:7469] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac_ZffbIAA8AViDmwsvjJgAAAUw"]
[Fri Apr 03 23:15:10.171607 2026] [:error] [pid 40533:tid 40542] [client 20.240.61.149:7484] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac_ZfvbIAA8AViDmwsvjKwAAAUc"]
[Fri Apr 03 23:15:10.694816 2026] [:error] [pid 33445:tid 33473] [client 20.240.61.149:8147] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac_ZfllRNZ0iDVmJWM1WUAAAABc"]
[Fri Apr 03 23:15:11.218579 2026] [:error] [pid 33445:tid 33467] [client 20.240.61.149:8090] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/x1.php"] [unique_id "ac_Zf1lRNZ0iDVmJWM1WUgAAABE"]
[Fri Apr 03 23:15:11.745675 2026] [:error] [pid 40533:tid 40551] [client 20.240.61.149:8155] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac_Zf_bIAA8AViDmwsvjMwAAAVA"]
[Fri Apr 03 23:15:12.270022 2026] [:error] [pid 33445:tid 33474] [client 20.240.61.149:7691] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac_ZgFlRNZ0iDVmJWM1WVAAAABg"]
[Fri Apr 03 23:15:12.797720 2026] [:error] [pid 33447:tid 33514] [client 20.240.61.149:8151] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac_ZgEgaPmDHz92j4lNlDQAAAIo"]
[Fri Apr 03 23:15:13.320358 2026] [:error] [pid 35469:tid 35493] [client 20.240.61.149:8086] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "ac_ZgaGvTIc8-wY3jUTHCgAAARY"]
[Fri Apr 03 23:15:13.850545 2026] [:error] [pid 33445:tid 33466] [client 20.240.61.149:7482] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_ZgVlRNZ0iDVmJWM1WVwAAABA"]
[Fri Apr 03 23:15:14.387542 2026] [:error] [pid 33445:tid 33464] [client 20.240.61.149:8149] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_ZgllRNZ0iDVmJWM1WWgAAAA4"]
[Fri Apr 03 23:15:14.921183 2026] [:error] [pid 33445:tid 33465] [client 20.240.61.149:8187] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_ZgllRNZ0iDVmJWM1WXQAAAA8"]
[Fri Apr 03 23:15:15.448157 2026] [:error] [pid 33445:tid 33469] [client 20.240.61.149:8003] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac_Zg1lRNZ0iDVmJWM1WYQAAABM"]
[Fri Apr 03 23:15:15.976715 2026] [:error] [pid 55174:tid 55187] [client 20.240.61.149:8106] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ac_Zg5_WKqUonPNUHYwPVgAAAcs"]
[Fri Apr 03 23:15:16.500550 2026] [:error] [pid 33445:tid 33459] [client 20.240.61.149:8094] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ac_ZhFlRNZ0iDVmJWM1WZwAAAAk"]
[Fri Apr 03 23:15:17.030324 2026] [:error] [pid 33445:tid 33468] [client 20.240.61.149:7687] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ac_ZhVlRNZ0iDVmJWM1WawAAABI"]
[Fri Apr 03 23:15:17.556461 2026] [:error] [pid 33446:tid 33493] [client 20.240.61.149:8080] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ac_Zhdg3dCqFYIIdw0qVjwAAAFA"]
[Fri Apr 03 23:15:18.084057 2026] [:error] [pid 33445:tid 33461] [client 20.240.61.149:8165] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "ac_ZhllRNZ0iDVmJWM1WcAAAAAs"]
[Fri Apr 03 23:15:18.610159 2026] [:error] [pid 33445:tid 33452] [client 20.240.61.149:8170] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "ac_ZhllRNZ0iDVmJWM1WdQAAAAI"]
[Fri Apr 03 23:15:19.135726 2026] [:error] [pid 33445:tid 33469] [client 20.240.61.149:8148] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "ac_Zh1lRNZ0iDVmJWM1WeQAAABM"]
[Fri Apr 03 23:15:19.664257 2026] [:error] [pid 33542:tid 33546] [client 20.240.61.149:8081] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "ac_Zh3wb6uB1LaGtepYkLgAAAME"]
[Fri Apr 03 23:15:20.190220 2026] [:error] [pid 40562:tid 40577] [client 20.240.61.149:7446] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac_ZiDfFMXuP9zvqCeqsqQAAAYw"]
[Fri Apr 03 23:15:20.726774 2026] [:error] [pid 33542:tid 33545] [client 20.240.61.149:8117] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac_ZiHwb6uB1LaGtepYkMgAAAMA"]
[Fri Apr 03 23:15:21.250662 2026] [:error] [pid 40562:tid 40565] [client 20.240.61.149:8085] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac_ZiTfFMXuP9zvqCeqssQAAAYA"]
[Fri Apr 03 23:15:21.776795 2026] [:error] [pid 33445:tid 33453] [client 20.240.61.149:8133] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sh3ll.php"] [unique_id "ac_ZiVlRNZ0iDVmJWM1WhAAAAAM"]
[Fri Apr 03 23:15:22.300566 2026] [:error] [pid 33445:tid 33464] [client 20.240.61.149:8184] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac_ZillRNZ0iDVmJWM1WhgAAAA4"]
[Fri Apr 03 23:15:22.833972 2026] [:error] [pid 33445:tid 33465] [client 20.240.61.149:8088] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac_ZillRNZ0iDVmJWM1WigAAAA8"]
[Fri Apr 03 23:15:23.357484 2026] [:error] [pid 35469:tid 35486] [client 20.240.61.149:8139] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac_Zi6GvTIc8-wY3jUTHFAAAAQ8"]
[Fri Apr 03 23:15:23.886001 2026] [:error] [pid 33445:tid 33464] [client 20.240.61.149:8134] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws84.php"] [unique_id "ac_Zi1lRNZ0iDVmJWM1WlAAAAA4"]
[Fri Apr 03 23:15:24.412255 2026] [:error] [pid 40533:tid 40543] [client 20.240.61.149:8067] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "ac_ZjPbIAA8AViDmwsvjRwAAAUg"]
[Fri Apr 03 23:15:24.946125 2026] [:error] [pid 33445:tid 33459] [client 20.240.61.149:8072] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "ac_ZjFlRNZ0iDVmJWM1WlwAAAAk"]
[Fri Apr 03 23:15:25.477867 2026] [:error] [pid 33446:tid 33494] [client 20.240.61.149:8097] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "ac_Zjdg3dCqFYIIdw0qVlwAAAFE"]
[Fri Apr 03 23:15:26.010859 2026] [:error] [pid 33542:tid 33568] [client 20.240.61.149:8100] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goat1.php"] [unique_id "ac_Zjnwb6uB1LaGtepYkNQAAANc"]
[Fri Apr 03 23:15:26.534407 2026] [:error] [pid 40533:tid 40548] [client 20.240.61.149:8123] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac_ZjvbIAA8AViDmwsvjTwAAAU0"]
[Fri Apr 03 23:15:27.067649 2026] [:error] [pid 33542:tid 33569] [client 20.240.61.149:8102] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac_Zj3wb6uB1LaGtepYkOQAAANg"]
[Fri Apr 03 23:15:27.602871 2026] [:error] [pid 33542:tid 33556] [client 20.240.61.149:8177] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac_Zj3wb6uB1LaGtepYkOwAAAMs"]
[Fri Apr 03 23:15:28.128063 2026] [:error] [pid 33445:tid 33459] [client 20.240.61.149:8119] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mis.php"] [unique_id "ac_ZkFlRNZ0iDVmJWM1WpQAAAAk"]
[Fri Apr 03 23:15:28.662329 2026] [:error] [pid 40533:tid 40543] [client 20.240.61.149:8144] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "ac_ZkPbIAA8AViDmwsvjVgAAAUg"]
[Fri Apr 03 23:15:29.193493 2026] [:error] [pid 35469:tid 35487] [client 20.240.61.149:8112] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "ac_ZkaGvTIc8-wY3jUTHHwAAARA"]
[Fri Apr 03 23:15:29.718347 2026] [:error] [pid 40533:tid 40552] [client 20.240.61.149:8180] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "ac_ZkfbIAA8AViDmwsvjWQAAAVE"]
[Fri Apr 03 23:15:30.242298 2026] [:error] [pid 33446:tid 33493] [client 20.240.61.149:8138] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "ac_Zktg3dCqFYIIdw0qVmwAAAFA"]
[Fri Apr 03 23:15:30.769469 2026] [:error] [pid 40533:tid 40538] [client 20.240.61.149:7480] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "ac_ZkvbIAA8AViDmwsvjXAAAAUM"]
[Fri Apr 03 23:15:31.293279 2026] [:error] [pid 40533:tid 40546] [client 20.240.61.149:8037] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "ac_Zk_bIAA8AViDmwsvjXgAAAUs"]
[Fri Apr 03 23:15:31.824402 2026] [:error] [pid 33447:tid 33511] [client 20.240.61.149:8140] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "ac_Zk0gaPmDHz92j4lNlGQAAAIc"]
[Fri Apr 03 23:15:32.352875 2026] [:error] [pid 33542:tid 33564] [client 20.240.61.149:8114] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "ac_ZlHwb6uB1LaGtepYkRQAAANM"]
[Fri Apr 03 23:15:32.877196 2026] [:error] [pid 33542:tid 33560] [client 20.240.61.149:8164] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "ac_ZlHwb6uB1LaGtepYkSQAAAM8"]
[Fri Apr 03 23:15:33.399626 2026] [:error] [pid 33447:tid 33513] [client 20.240.61.149:8099] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "ac_ZlUgaPmDHz92j4lNlGgAAAIk"]
[Fri Apr 03 23:15:33.924583 2026] [:error] [pid 33542:tid 33562] [client 20.240.61.149:7734] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "ac_ZlXwb6uB1LaGtepYkTQAAANE"]
[Fri Apr 03 23:15:34.448213 2026] [:error] [pid 40562:tid 40565] [client 20.240.61.149:8101] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "ac_ZljfFMXuP9zvqCeqsuQAAAYA"]
[Fri Apr 03 23:15:34.992287 2026] [:error] [pid 33447:tid 33520] [client 20.240.61.149:8161] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fyiiz.php"] [unique_id "ac_ZlkgaPmDHz92j4lNlGwAAAJA"]
[Fri Apr 03 23:15:35.522177 2026] [:error] [pid 33446:tid 33480] [client 20.240.61.149:8178] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fyiiz.php"] [unique_id "ac_Zl9g3dCqFYIIdw0qVogAAAEM"]
[Fri Apr 03 23:15:36.049881 2026] [:error] [pid 33542:tid 33556] [client 20.240.61.149:8092] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fyiiz.php"] [unique_id "ac_ZmHwb6uB1LaGtepYkVwAAAMs"]
[Fri Apr 03 23:15:36.582607 2026] [:error] [pid 40562:tid 40587] [client 20.240.61.149:8129] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fyiiz.php"] [unique_id "ac_ZmDfFMXuP9zvqCeqsuwAAAZY"]
[Fri Apr 03 23:15:37.112283 2026] [:error] [pid 40562:tid 40567] [client 20.240.61.149:7487] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_ZmTfFMXuP9zvqCeqsvQAAAYI"]
[Fri Apr 03 23:15:37.643000 2026] [:error] [pid 35469:tid 35476] [client 20.240.61.149:8069] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_ZmaGvTIc8-wY3jUTHKgAAAQU"]
[Fri Apr 03 23:15:38.175005 2026] [:error] [pid 33446:tid 33498] [client 20.240.61.149:8031] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_Zmtg3dCqFYIIdw0qVpAAAAFU"]
[Fri Apr 03 23:15:38.701890 2026] [:error] [pid 40533:tid 40541] [client 20.240.61.149:8030] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac_ZmvbIAA8AViDmwsvjZQAAAUY"]
[Fri Apr 03 23:15:39.224432 2026] [:error] [pid 40562:tid 40589] [client 20.240.61.149:7472] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_ZmzfFMXuP9zvqCeqswQAAAZg"]
[Fri Apr 03 23:15:39.751537 2026] [:error] [pid 40562:tid 40580] [client 20.240.61.149:8059] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_ZmzfFMXuP9zvqCeqswgAAAY8"]
[Fri Apr 03 23:15:40.278956 2026] [:error] [pid 40562:tid 40588] [client 20.240.61.149:8109] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_ZnDfFMXuP9zvqCeqsxAAAAZc"]
[Fri Apr 03 23:15:40.802800 2026] [:error] [pid 33445:tid 33453] [client 20.240.61.149:8143] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac_ZnFlRNZ0iDVmJWM1WrAAAAAM"]
[Fri Apr 03 23:15:41.327008 2026] [:error] [pid 33445:tid 33455] [client 20.240.61.149:8172] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "ac_ZnVlRNZ0iDVmJWM1WrwAAAAU"]
[Fri Apr 03 23:15:41.858158 2026] [:error] [pid 33445:tid 33470] [client 20.240.61.149:8125] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "ac_ZnVlRNZ0iDVmJWM1WtQAAABQ"]
[Fri Apr 03 23:15:42.382464 2026] [:error] [pid 33542:tid 33552] [client 20.240.61.149:7680] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "ac_Znnwb6uB1LaGtepYkXAAAAMc"]
[Fri Apr 03 23:15:42.905923 2026] [:error] [pid 33542:tid 33546] [client 20.240.61.149:7694] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "ac_Znnwb6uB1LaGtepYkXwAAAME"]
[Fri Apr 03 23:15:43.432036 2026] [:error] [pid 40533:tid 40556] [client 20.240.61.149:7470] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac_Zn_bIAA8AViDmwsvjbAAAAVU"]
[Fri Apr 03 23:15:43.957871 2026] [:error] [pid 40562:tid 40574] [client 20.240.61.149:8110] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac_ZnzfFMXuP9zvqCeqsygAAAYk"]
[Fri Apr 03 23:15:44.485286 2026] [:error] [pid 33445:tid 33463] [client 20.240.61.149:8171] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac_ZoFlRNZ0iDVmJWM1WvwAAAA0"]
[Fri Apr 03 23:15:45.009598 2026] [:error] [pid 33445:tid 33460] [client 20.240.61.149:8105] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "ac_ZoVlRNZ0iDVmJWM1WwgAAAAo"]
[Fri Apr 03 23:15:45.534959 2026] [:error] [pid 33542:tid 33548] [client 20.240.61.149:8036] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "ac_ZoXwb6uB1LaGtepYkZwAAAMM"]
[Fri Apr 03 23:15:46.061531 2026] [:error] [pid 33542:tid 33561] [client 20.240.61.149:8073] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "ac_Zonwb6uB1LaGtepYkaQAAANA"]
[Fri Apr 03 23:15:46.586639 2026] [:error] [pid 40533:tid 40552] [client 20.240.61.149:8089] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "ac_ZovbIAA8AViDmwsvjdQAAAVE"]
[Fri Apr 03 23:15:47.116842 2026] [:error] [pid 40533:tid 40546] [client 20.240.61.149:8066] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/network.php"] [unique_id "ac_Zo_bIAA8AViDmwsvjewAAAUs"]
[Fri Apr 03 23:15:47.648179 2026] [:error] [pid 33542:tid 33554] [client 20.240.61.149:8116] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "ac_Zo3wb6uB1LaGtepYkagAAAMk"]
[Fri Apr 03 23:15:48.191123 2026] [:error] [pid 33445:tid 33473] [client 20.240.61.149:8065] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "ac_ZpFlRNZ0iDVmJWM1WywAAABc"]
[Fri Apr 03 23:15:48.721283 2026] [:error] [pid 33445:tid 33474] [client 20.240.61.149:8029] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "ac_ZpFlRNZ0iDVmJWM1WzQAAABg"]
[Fri Apr 03 23:15:49.243660 2026] [:error] [pid 33445:tid 33466] [client 20.240.61.149:8001] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aifa.php"] [unique_id "ac_ZpVlRNZ0iDVmJWM1W0gAAABA"]
[Fri Apr 03 23:15:49.771642 2026] [:error] [pid 40562:tid 40576] [client 20.240.61.149:8023] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "ac_ZpTfFMXuP9zvqCeqs0QAAAYs"]
[Fri Apr 03 23:15:50.294771 2026] [:error] [pid 33446:tid 33487] [client 20.240.61.149:8091] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "ac_Zptg3dCqFYIIdw0qVtwAAAEo"]
[Fri Apr 03 23:15:50.823654 2026] [:error] [pid 40533:tid 40545] [client 20.240.61.149:8014] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "ac_ZpvbIAA8AViDmwsvjhQAAAUo"]
[Fri Apr 03 23:15:51.351039 2026] [:error] [pid 33445:tid 33461] [client 20.240.61.149:8087] File does not exist: /usr/local/apache/htdocs/suspended-page/opts.php
[Fri Apr 03 23:15:51.613123 2026] [:error] [pid 33445:tid 33470] [client 20.240.61.149:8087] [client 20.240.61.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac_Zp1lRNZ0iDVmJWM1W3AAAABQ"]
[Fri Apr 03 23:15:52.147513 2026] [:error] [pid 33445:tid 33459] [client 20.240.61.149:7472] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Fri Apr 03 23:15:52.414514 2026] [:error] [pid 33445:tid 33469] [client 20.240.61.149:7472] File does not exist: /usr/local/apache/htdocs/suspended-page/lites.php
[Fri Apr 03 23:15:52.679458 2026] [:error] [pid 33445:tid 33467] [client 20.240.61.149:7472] File does not exist: /usr/local/apache/htdocs/suspended-page/az.php
[Fri Apr 03 23:15:52.944383 2026] [:error] [pid 33445:tid 33462] [client 20.240.61.149:7472] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Fri Apr 03 23:15:53.210382 2026] [:error] [pid 33445:tid 33468] [client 20.240.61.149:7472] File does not exist: /usr/local/apache/htdocs/suspended-page/JKydQumkIarjMJ4default.php
[Fri Apr 03 23:15:53.475412 2026] [:error] [pid 33445:tid 33472] [client 20.240.61.149:7472] File does not exist: /usr/local/apache/htdocs/suspended-page/he.php
[Fri Apr 03 23:15:53.740425 2026] [:error] [pid 33445:tid 33474] [client 20.240.61.149:7472] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-cron.php
[Fri Apr 03 23:15:54.007168 2026] [:error] [pid 33445:tid 33470] [client 20.240.61.149:7472] File does not exist: /usr/local/apache/htdocs/suspended-page/zwq13.php
[Fri Apr 03 23:15:54.274362 2026] [:error] [pid 33445:tid 33469] [client 20.240.61.149:7472] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Fri Apr 03 23:15:54.539621 2026] [:error] [pid 33445:tid 33473] [client 20.240.61.149:7472] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Fri Apr 03 23:15:54.802800 2026] [:error] [pid 33445:tid 33451] [client 20.240.61.149:7472] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac_ZqllRNZ0iDVmJWM1XAwAAAAE"]
[Fri Apr 03 23:15:55.327900 2026] [:error] [pid 40562:tid 40586] [client 20.240.61.149:8050] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac_ZqzfFMXuP9zvqCeqs2QAAAZU"]
[Fri Apr 03 23:15:55.852924 2026] [:error] [pid 40562:tid 40580] [client 20.240.61.149:8126] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac_ZqzfFMXuP9zvqCeqs3QAAAY8"]
[Fri Apr 03 23:15:56.380567 2026] [:error] [pid 40533:tid 40553] [client 20.240.61.149:7716] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "ac_ZrPbIAA8AViDmwsvjiwAAAVI"]
[Fri Apr 03 23:15:56.904422 2026] [:error] [pid 40533:tid 40541] [client 20.240.61.149:8011] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac_ZrPbIAA8AViDmwsvjjQAAAUY"]
[Fri Apr 03 23:15:57.429578 2026] [:error] [pid 33445:tid 33461] [client 20.240.61.149:8048] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac_ZrVlRNZ0iDVmJWM1XDgAAAAs"]
[Fri Apr 03 23:15:57.956641 2026] [:error] [pid 33445:tid 33456] [client 20.240.61.149:8095] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac_ZrVlRNZ0iDVmJWM1XFAAAAAY"]
[Fri Apr 03 23:15:58.485356 2026] [:error] [pid 40533:tid 40543] [client 20.240.61.149:8042] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ac_ZrvbIAA8AViDmwsvjkQAAAUg"]
[Fri Apr 03 23:15:59.009558 2026] [:error] [pid 33542:tid 33554] [client 20.240.61.149:8040] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "ac_Zr3wb6uB1LaGtepYkdgAAAMk"]
[Fri Apr 03 23:15:59.536267 2026] [:error] [pid 33542:tid 33553] [client 20.240.61.149:8054] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "ac_Zr3wb6uB1LaGtepYkeAAAAMg"]
[Fri Apr 03 23:16:00.067140 2026] [:error] [pid 33445:tid 33469] [client 20.240.61.149:8124] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "ac_ZsFlRNZ0iDVmJWM1XHwAAABM"]
[Fri Apr 03 23:16:00.596814 2026] [:error] [pid 40562:tid 40569] [client 20.240.61.149:8121] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "ac_ZsDfFMXuP9zvqCeqs4wAAAYQ"]
[Fri Apr 03 23:16:01.123427 2026] [:error] [pid 33445:tid 33455] [client 20.240.61.149:8169] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_ZsVlRNZ0iDVmJWM1XKQAAAAU"]
[Fri Apr 03 23:16:01.648870 2026] [:error] [pid 33445:tid 33461] [client 20.240.61.149:7982] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_ZsVlRNZ0iDVmJWM1XLQAAAAs"]
[Fri Apr 03 23:16:02.191607 2026] [:error] [pid 33446:tid 33487] [client 20.240.61.149:8104] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_Zstg3dCqFYIIdw0qVwQAAAEo"]
[Fri Apr 03 23:16:02.719781 2026] [:error] [pid 33445:tid 33460] [client 20.240.61.149:8079] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ac_ZsllRNZ0iDVmJWM1XOQAAAAo"]
[Fri Apr 03 23:16:03.244341 2026] [:error] [pid 35469:tid 35482] [client 20.240.61.149:7949] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac_Zs6GvTIc8-wY3jUTHQAAAAQs"]
[Fri Apr 03 23:16:03.776930 2026] [:error] [pid 33542:tid 33568] [client 20.240.61.149:8041] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac_Zs3wb6uB1LaGtepYkeQAAANc"]
[Fri Apr 03 23:16:04.300060 2026] [:error] [pid 33542:tid 33555] [client 20.240.61.149:8132] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac_ZtHwb6uB1LaGtepYkfgAAAMo"]
[Fri Apr 03 23:16:04.834126 2026] [:error] [pid 40562:tid 40577] [client 20.240.61.149:8083] [client 20.240.61.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ac_ZtDfFMXuP9zvqCeqs5wAAAYw"]
[Sat Apr 04 06:29:18.909135 2026] [:error] [pid 2459:tid 2550] [client 62.164.177.15:60764] File does not exist: /usr/local/apache/htdocs/suspended-page/fileupload.php
[Sat Apr 04 13:46:04.007925 2026] [:error] [pid 37114:tid 37137] [client 103.176.184.35:9899] [client 103.176.184.35] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.176.184.35, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adClnM-DnSj3fGMexeJ6ugAAARU"]
[Sat Apr 04 13:46:04.012029 2026] [:error] [pid 37114:tid 37137] [client 103.176.184.35:9899] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 05 00:40:40.240017 2026] [:error] [pid 53820:tid 53906] [client 173.239.214.48:65319] [client 173.239.214.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "adE_CDKzpMZSi9FOeIYP-gAAAEU"]
[Sun Apr 05 07:41:56.242033 2026] [:error] [pid 45304:tid 45367] [client 102.129.234.141:57996] [client 102.129.234.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "adGhxA5jnqDKKovdRkkkhgAAAFc"]
[Sun Apr 05 12:12:21.753119 2026] [:error] [pid 45304:tid 45355] [client 74.248.146.253:49339] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Sun Apr 05 13:16:46.519645 2026] [:error] [pid 45303:tid 45325] [client 51.107.75.125:13373] File does not exist: /usr/local/apache/htdocs/suspended-page/RIP.php
[Sun Apr 05 14:38:31.328564 2026] [:error] [pid 45409:tid 45429] [client 114.130.187.125:23472] [client 114.130.187.125] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.130.187.125, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adIDZ9Ht_Oyw03gjCNgEKQAAANI"]
[Sun Apr 05 14:38:31.334321 2026] [:error] [pid 45409:tid 45429] [client 114.130.187.125:23472] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 05 23:17:57.621021 2026] [:error] [pid 30921:tid 30929] [client 20.250.12.212:17383] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Sun Apr 05 23:17:57.859590 2026] [:error] [pid 30921:tid 30931] [client 20.250.12.212:17383] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sun Apr 05 23:17:58.100307 2026] [:error] [pid 30921:tid 30944] [client 20.250.12.212:17383] File does not exist: /usr/local/apache/htdocs/suspended-page/ghhjh.php
[Sun Apr 05 23:17:58.339470 2026] [:error] [pid 30921:tid 30938] [client 20.250.12.212:17383] File does not exist: /usr/local/apache/htdocs/suspended-page/cacheee.php
[Sun Apr 05 23:17:58.578156 2026] [:error] [pid 30921:tid 30939] [client 20.250.12.212:17383] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Sun Apr 05 23:17:58.817747 2026] [:error] [pid 30921:tid 30947] [client 20.250.12.212:17383] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun Apr 05 23:17:59.055575 2026] [:error] [pid 30921:tid 30942] [client 20.250.12.212:17383] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Apr 05 23:17:59.294103 2026] [:error] [pid 30921:tid 30937] [client 20.250.12.212:17383] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Apr 05 23:17:59.533048 2026] [:error] [pid 30921:tid 30925] [client 20.250.12.212:17383] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sun Apr 05 23:17:59.792160 2026] [:error] [pid 30921:tid 30934] [client 20.250.12.212:17383] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Sun Apr 05 23:18:00.028584 2026] [:error] [pid 30921:tid 30929] [client 20.250.12.212:17383] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "adJ9KGFGQVn8Q0ueB25VtwAAAQY"]
[Sun Apr 05 23:18:00.499728 2026] [:error] [pid 45409:tid 45433] [client 20.250.12.212:17373] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "adJ9KNHt_Oyw03gjCNhtTQAAANY"]
[Sun Apr 05 23:18:00.974570 2026] [:error] [pid 30921:tid 30935] [client 20.250.12.212:17361] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "adJ9KGFGQVn8Q0ueB25VugAAAQw"]
[Sun Apr 05 23:18:01.444765 2026] [:error] [pid 45304:tid 45351] [client 20.250.12.212:17282] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "adJ9KQ5jnqDKKovdRklBtgAAAEc"]
[Sun Apr 05 23:18:01.921540 2026] [:error] [pid 45409:tid 45429] [client 20.250.12.212:17345] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "adJ9KdHt_Oyw03gjCNhtUgAAANI"]
[Sun Apr 05 23:18:02.395019 2026] [:error] [pid 45304:tid 45356] [client 20.250.12.212:17377] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "adJ9Kg5jnqDKKovdRklBvAAAAEw"]
[Sun Apr 05 23:18:02.874450 2026] [:error] [pid 45409:tid 45413] [client 20.250.12.212:17348] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "adJ9KtHt_Oyw03gjCNhtWwAAAMI"]
[Sun Apr 05 23:18:03.351107 2026] [:error] [pid 45304:tid 45349] [client 20.250.12.212:17404] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "adJ9Kw5jnqDKKovdRklBvwAAAEU"]
[Sun Apr 05 23:18:03.823292 2026] [:error] [pid 45304:tid 45346] [client 20.250.12.212:17366] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "adJ9Kw5jnqDKKovdRklBxwAAAEI"]
[Sun Apr 05 23:18:04.297058 2026] [:error] [pid 45304:tid 45368] [client 20.250.12.212:17297] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "adJ9LA5jnqDKKovdRklBywAAAFg"]
[Sun Apr 05 23:18:04.768410 2026] [:error] [pid 45303:tid 45320] [client 20.250.12.212:17398] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "adJ9LLboQ9eViZ4hdnmINgAAAAM"]
[Sun Apr 05 23:18:05.244833 2026] [:error] [pid 45409:tid 45417] [client 20.250.12.212:17379] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "adJ9LdHt_Oyw03gjCNhtawAAAMY"]
[Sun Apr 05 23:18:05.717286 2026] [:error] [pid 30921:tid 30926] [client 20.250.12.212:17401] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "adJ9LWFGQVn8Q0ueB25VvgAAAQM"]
[Sun Apr 05 23:18:06.201162 2026] [:error] [pid 30921:tid 30925] [client 20.250.12.212:17396] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "adJ9LmFGQVn8Q0ueB25VwAAAAQI"]
[Sun Apr 05 23:18:06.678149 2026] [:error] [pid 45303:tid 45320] [client 20.250.12.212:17334] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "adJ9LrboQ9eViZ4hdnmIRAAAAAM"]
[Sun Apr 05 23:18:07.148800 2026] [:error] [pid 45409:tid 45433] [client 20.250.12.212:17227] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "adJ9L9Ht_Oyw03gjCNhtegAAANY"]
[Sun Apr 05 23:18:07.620360 2026] [:error] [pid 45409:tid 45414] [client 20.250.12.212:17285] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "adJ9L9Ht_Oyw03gjCNhtfAAAAMM"]
[Sun Apr 05 23:18:08.091031 2026] [:error] [pid 45409:tid 45411] [client 20.250.12.212:17311] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "adJ9MNHt_Oyw03gjCNhtfgAAAMA"]
[Sun Apr 05 23:18:08.563122 2026] [:error] [pid 45409:tid 45425] [client 20.250.12.212:17363] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "adJ9MNHt_Oyw03gjCNhthQAAAM4"]
[Sun Apr 05 23:18:09.038017 2026] [:error] [pid 45409:tid 45433] [client 20.250.12.212:17407] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "adJ9MdHt_Oyw03gjCNhthwAAANY"]
[Sun Apr 05 23:18:09.513905 2026] [:error] [pid 45303:tid 45318] [client 20.250.12.212:17293] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.mopj.php"] [unique_id "adJ9MbboQ9eViZ4hdnmITwAAAAE"]
[Sun Apr 05 23:18:09.986232 2026] [:error] [pid 45409:tid 45430] [client 20.250.12.212:17395] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.mopj.php"] [unique_id "adJ9MdHt_Oyw03gjCNhtjAAAANM"]
[Sun Apr 05 23:18:10.456745 2026] [:error] [pid 45305:tid 45380] [client 20.250.12.212:17225] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.mopj.php"] [unique_id "adJ9MujDQjr7aWhjflCMsgAAAIk"]
[Sun Apr 05 23:18:10.928442 2026] [:error] [pid 30921:tid 30933] [client 20.250.12.212:17299] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.mopj.php"] [unique_id "adJ9MmFGQVn8Q0ueB25V0AAAAQo"]
[Sun Apr 05 23:18:11.404045 2026] [:error] [pid 45303:tid 45330] [client 20.250.12.212:17287] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.yuf.php"] [unique_id "adJ9M7boQ9eViZ4hdnmIVgAAAA0"]
[Sun Apr 05 23:18:11.881080 2026] [:error] [pid 45305:tid 45381] [client 20.250.12.212:17384] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.yuf.php"] [unique_id "adJ9M-jDQjr7aWhjflCMugAAAIo"]
[Sun Apr 05 23:18:12.352975 2026] [:error] [pid 45303:tid 45335] [client 20.250.12.212:17391] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.yuf.php"] [unique_id "adJ9NLboQ9eViZ4hdnmIXAAAABI"]
[Sun Apr 05 23:18:12.825698 2026] [:error] [pid 45305:tid 45392] [client 20.250.12.212:17359] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.yuf.php"] [unique_id "adJ9NOjDQjr7aWhjflCMvwAAAJU"]
[Sun Apr 05 23:18:13.303783 2026] [:error] [pid 45305:tid 45395] [client 20.250.12.212:17393] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nano.php"] [unique_id "adJ9NejDQjr7aWhjflCMwwAAAJg"]
[Sun Apr 05 23:18:13.774647 2026] [:error] [pid 45304:tid 45362] [client 20.250.12.212:17399] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nano.php"] [unique_id "adJ9NQ5jnqDKKovdRklB2AAAAFI"]
[Sun Apr 05 23:18:14.244701 2026] [:error] [pid 45409:tid 45430] [client 20.250.12.212:17358] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nano.php"] [unique_id "adJ9NtHt_Oyw03gjCNhtlgAAANM"]
[Sun Apr 05 23:18:14.719950 2026] [:error] [pid 45305:tid 45387] [client 20.250.12.212:17294] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nano.php"] [unique_id "adJ9NujDQjr7aWhjflCMxwAAAJA"]
[Sun Apr 05 23:18:15.191985 2026] [:error] [pid 45409:tid 45413] [client 20.250.12.212:17286] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "adJ9N9Ht_Oyw03gjCNhtnAAAAMI"]
[Sun Apr 05 23:18:15.663339 2026] [:error] [pid 45409:tid 45428] [client 20.250.12.212:17388] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "adJ9N9Ht_Oyw03gjCNhtoQAAANE"]
[Sun Apr 05 23:18:16.135919 2026] [:error] [pid 30921:tid 30941] [client 20.250.12.212:17296] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "adJ9OGFGQVn8Q0ueB25V3QAAARI"]
[Sun Apr 05 23:18:16.606603 2026] [:error] [pid 45409:tid 45413] [client 20.250.12.212:17332] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "adJ9ONHt_Oyw03gjCNhtqAAAAMI"]
[Sun Apr 05 23:18:17.088743 2026] [:error] [pid 30921:tid 30943] [client 20.250.12.212:17244] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "adJ9OWFGQVn8Q0ueB25V5AAAARQ"]
[Sun Apr 05 23:18:17.569882 2026] [:error] [pid 45409:tid 45435] [client 20.250.12.212:17303] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "adJ9OdHt_Oyw03gjCNhtqwAAANg"]
[Sun Apr 05 23:18:18.050436 2026] [:error] [pid 45305:tid 45394] [client 20.250.12.212:17310] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "adJ9OujDQjr7aWhjflCMyQAAAJc"]
[Sun Apr 05 23:18:18.519382 2026] [:error] [pid 45303:tid 45336] [client 20.250.12.212:17330] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "adJ9OrboQ9eViZ4hdnmIawAAABM"]
[Sun Apr 05 23:18:18.990232 2026] [:error] [pid 45409:tid 45422] [client 20.250.12.212:17292] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "adJ9OtHt_Oyw03gjCNhtuAAAAMs"]
[Sun Apr 05 23:18:19.462902 2026] [:error] [pid 45409:tid 45415] [client 20.250.12.212:17375] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "adJ9O9Ht_Oyw03gjCNhtugAAAMQ"]
[Sun Apr 05 23:18:19.935802 2026] [:error] [pid 45409:tid 45428] [client 20.250.12.212:17400] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "adJ9O9Ht_Oyw03gjCNhtvQAAANE"]
[Sun Apr 05 23:18:20.415066 2026] [:error] [pid 45304:tid 45368] [client 20.250.12.212:17370] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "adJ9PA5jnqDKKovdRklB4AAAAFg"]
[Sun Apr 05 23:18:20.891249 2026] [:error] [pid 45409:tid 45413] [client 20.250.12.212:17325] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file31.php"] [unique_id "adJ9PNHt_Oyw03gjCNhtxQAAAMI"]
[Sun Apr 05 23:18:21.372435 2026] [:error] [pid 45303:tid 45330] [client 20.250.12.212:17337] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file31.php"] [unique_id "adJ9PbboQ9eViZ4hdnmIdAAAAA0"]
[Sun Apr 05 23:18:21.844514 2026] [:error] [pid 45409:tid 45423] [client 20.250.12.212:17362] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file31.php"] [unique_id "adJ9PdHt_Oyw03gjCNhtygAAAMw"]
[Sun Apr 05 23:18:22.317059 2026] [:error] [pid 45409:tid 45429] [client 20.250.12.212:17305] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file31.php"] [unique_id "adJ9PtHt_Oyw03gjCNhtzQAAANI"]
[Sun Apr 05 23:18:22.787948 2026] [:error] [pid 45409:tid 45413] [client 20.250.12.212:17397] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "adJ9PtHt_Oyw03gjCNht1AAAAMI"]
[Sun Apr 05 23:18:23.258595 2026] [:error] [pid 45409:tid 45415] [client 20.250.12.212:17389] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "adJ9P9Ht_Oyw03gjCNht2QAAAMQ"]
[Sun Apr 05 23:18:23.728009 2026] [:error] [pid 45303:tid 45318] [client 20.250.12.212:17217] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "adJ9P7boQ9eViZ4hdnmIegAAAAE"]
[Sun Apr 05 23:18:24.199064 2026] [:error] [pid 45305:tid 45390] [client 20.250.12.212:17288] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "adJ9QOjDQjr7aWhjflCM0QAAAJM"]
[Sun Apr 05 23:18:24.668790 2026] [:error] [pid 45409:tid 45431] [client 20.250.12.212:17324] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/control.php"] [unique_id "adJ9QNHt_Oyw03gjCNht3wAAANQ"]
[Sun Apr 05 23:18:25.138825 2026] [:error] [pid 45303:tid 45325] [client 20.250.12.212:17235] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/control.php"] [unique_id "adJ9QbboQ9eViZ4hdnmIfwAAAAg"]
[Sun Apr 05 23:18:25.608681 2026] [:error] [pid 45303:tid 45318] [client 20.250.12.212:17390] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/control.php"] [unique_id "adJ9QbboQ9eViZ4hdnmIhAAAAAE"]
[Sun Apr 05 23:18:26.083936 2026] [:error] [pid 45303:tid 45317] [client 20.250.12.212:17291] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/control.php"] [unique_id "adJ9QrboQ9eViZ4hdnmIiQAAAAA"]
[Sun Apr 05 23:18:26.556386 2026] [:error] [pid 45409:tid 45428] [client 20.250.12.212:17335] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "adJ9QtHt_Oyw03gjCNht6gAAANE"]
[Sun Apr 05 23:18:27.035344 2026] [:error] [pid 45409:tid 45419] [client 20.250.12.212:17216] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "adJ9Q9Ht_Oyw03gjCNht7gAAAMg"]
[Sun Apr 05 23:18:27.507247 2026] [:error] [pid 30921:tid 30930] [client 20.250.12.212:17280] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "adJ9Q2FGQVn8Q0ueB25V8AAAAQc"]
[Sun Apr 05 23:18:27.981164 2026] [:error] [pid 45409:tid 45431] [client 20.250.12.212:17274] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "adJ9Q9Ht_Oyw03gjCNht8gAAANQ"]
[Sun Apr 05 23:18:28.455833 2026] [:error] [pid 45304:tid 45365] [client 20.250.12.212:17352] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1111.php"] [unique_id "adJ9RA5jnqDKKovdRklB5gAAAFU"]
[Sun Apr 05 23:18:28.925510 2026] [:error] [pid 30921:tid 30946] [client 20.250.12.212:17405] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1111.php"] [unique_id "adJ9RGFGQVn8Q0ueB25V9gAAARc"]
[Sun Apr 05 23:18:29.413339 2026] [:error] [pid 45409:tid 45424] [client 20.250.12.212:17233] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1111.php"] [unique_id "adJ9RdHt_Oyw03gjCNht-gAAAM0"]
[Sun Apr 05 23:18:29.887263 2026] [:error] [pid 45409:tid 45428] [client 20.250.12.212:17275] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1111.php"] [unique_id "adJ9RdHt_Oyw03gjCNht_gAAANE"]
[Sun Apr 05 23:18:30.365272 2026] [:error] [pid 45303:tid 45324] [client 20.250.12.212:17402] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "adJ9RrboQ9eViZ4hdnmImwAAAAc"]
[Sun Apr 05 23:18:30.844112 2026] [:error] [pid 45303:tid 45336] [client 20.250.12.212:17371] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "adJ9RrboQ9eViZ4hdnmIngAAABM"]
[Sun Apr 05 23:18:31.325884 2026] [:error] [pid 45409:tid 45431] [client 20.250.12.212:17284] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "adJ9R9Ht_Oyw03gjCNhuDAAAANQ"]
[Sun Apr 05 23:18:31.796899 2026] [:error] [pid 45409:tid 45419] [client 20.250.12.212:17238] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "adJ9R9Ht_Oyw03gjCNhuEQAAAMg"]
[Sun Apr 05 23:18:32.279068 2026] [:error] [pid 45409:tid 45433] [client 20.250.12.212:17356] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "adJ9SNHt_Oyw03gjCNhuFwAAANY"]
[Sun Apr 05 23:18:32.762434 2026] [:error] [pid 45409:tid 45422] [client 20.250.12.212:17302] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "adJ9SNHt_Oyw03gjCNhuIwAAAMs"]
[Sun Apr 05 23:18:33.233202 2026] [:error] [pid 45305:tid 45389] [client 20.250.12.212:17323] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "adJ9SejDQjr7aWhjflCM2gAAAJI"]
[Sun Apr 05 23:18:33.706764 2026] [:error] [pid 45304:tid 45364] [client 20.250.12.212:17307] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "adJ9SQ5jnqDKKovdRklB6wAAAFQ"]
[Sun Apr 05 23:18:34.177878 2026] [:error] [pid 45305:tid 45395] [client 20.250.12.212:17246] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "adJ9SujDQjr7aWhjflCM3AAAAJg"]
[Sun Apr 05 23:18:34.649669 2026] [:error] [pid 45304:tid 45353] [client 20.250.12.212:17323] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "adJ9Sg5jnqDKKovdRklB7QAAAEk"]
[Sun Apr 05 23:18:35.126162 2026] [:error] [pid 45304:tid 45366] [client 20.250.12.212:17355] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "adJ9Sw5jnqDKKovdRklB8AAAAFY"]
[Sun Apr 05 23:18:35.597690 2026] [:error] [pid 45304:tid 45344] [client 20.250.12.212:17360] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "adJ9Sw5jnqDKKovdRklB8QAAAEA"]
[Sun Apr 05 23:18:36.067751 2026] [:error] [pid 45304:tid 45365] [client 20.250.12.212:17312] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "adJ9TA5jnqDKKovdRklB8wAAAFU"]
[Sun Apr 05 23:18:36.536671 2026] [:error] [pid 45304:tid 45355] [client 20.250.12.212:17219] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "adJ9TA5jnqDKKovdRklB-AAAAEs"]
[Sun Apr 05 23:18:37.008640 2026] [:error] [pid 45409:tid 45432] [client 20.250.12.212:17218] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "adJ9TdHt_Oyw03gjCNhuOQAAANU"]
[Sun Apr 05 23:18:37.480608 2026] [:error] [pid 45305:tid 45379] [client 20.250.12.212:17357] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "adJ9TejDQjr7aWhjflCM8wAAAIg"]
[Sun Apr 05 23:18:37.950786 2026] [:error] [pid 30921:tid 30946] [client 20.250.12.212:17222] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "adJ9TWFGQVn8Q0ueB25WBAAAARc"]
[Sun Apr 05 23:18:38.421819 2026] [:error] [pid 45305:tid 45393] [client 20.250.12.212:17312] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "adJ9TujDQjr7aWhjflCM-AAAAJY"]
[Sun Apr 05 23:18:38.893793 2026] [:error] [pid 45409:tid 45417] [client 20.250.12.212:17236] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "adJ9TtHt_Oyw03gjCNhuQgAAAMY"]
[Sun Apr 05 23:18:39.364435 2026] [:error] [pid 45305:tid 45376] [client 20.250.12.212:17329] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "adJ9T-jDQjr7aWhjflCM_AAAAIU"]
[Sun Apr 05 23:18:39.835322 2026] [:error] [pid 30921:tid 30934] [client 20.250.12.212:17365] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "adJ9T2FGQVn8Q0ueB25WCAAAAQs"]
[Sun Apr 05 23:18:40.308449 2026] [:error] [pid 45305:tid 45390] [client 20.250.12.212:17308] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "adJ9UOjDQjr7aWhjflCM_QAAAJM"]
[Sun Apr 05 23:18:40.783068 2026] [:error] [pid 45304:tid 45355] [client 20.250.12.212:17369] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "adJ9UA5jnqDKKovdRklCBgAAAEs"]
[Sun Apr 05 23:18:41.262026 2026] [:error] [pid 45409:tid 45434] [client 20.250.12.212:17243] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "adJ9UdHt_Oyw03gjCNhuUgAAANc"]
[Sun Apr 05 23:18:41.732044 2026] [:error] [pid 45305:tid 45373] [client 20.250.12.212:17331] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "adJ9UejDQjr7aWhjflCNBQAAAII"]
[Sun Apr 05 23:18:42.201814 2026] [:error] [pid 45303:tid 45319] [client 20.250.12.212:17353] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "adJ9UrboQ9eViZ4hdnmIwQAAAAI"]
[Sun Apr 05 23:18:42.672660 2026] [:error] [pid 45409:tid 45411] [client 20.250.12.212:17298] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "adJ9UtHt_Oyw03gjCNhuXwAAAMA"]
[Sun Apr 05 23:18:43.149047 2026] [:error] [pid 45409:tid 45423] [client 20.250.12.212:17354] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "adJ9U9Ht_Oyw03gjCNhuZQAAAMw"]
[Sun Apr 05 23:18:43.619560 2026] [:error] [pid 45303:tid 45328] [client 20.250.12.212:17386] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "adJ9U7boQ9eViZ4hdnmIxAAAAAs"]
[Sun Apr 05 23:18:44.089872 2026] [:error] [pid 45303:tid 45323] [client 20.250.12.212:17242] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "adJ9VLboQ9eViZ4hdnmIyAAAAAY"]
[Sun Apr 05 23:18:44.560731 2026] [:error] [pid 45303:tid 45333] [client 20.250.12.212:17317] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "adJ9VLboQ9eViZ4hdnmIzQAAABA"]
[Sun Apr 05 23:18:45.035606 2026] [:error] [pid 45303:tid 45319] [client 20.250.12.212:17322] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "adJ9VbboQ9eViZ4hdnmI0AAAAAI"]
[Sun Apr 05 23:18:45.505992 2026] [:error] [pid 30921:tid 30927] [client 20.250.12.212:17392] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "adJ9VWFGQVn8Q0ueB25WEwAAAQQ"]
[Sun Apr 05 23:18:45.979180 2026] [:error] [pid 30921:tid 30929] [client 20.250.12.212:17368] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "adJ9VWFGQVn8Q0ueB25WGAAAAQY"]
[Sun Apr 05 23:18:46.451718 2026] [:error] [pid 45409:tid 45414] [client 20.250.12.212:17374] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "adJ9VtHt_Oyw03gjCNhuegAAAMM"]
[Sun Apr 05 23:18:46.922007 2026] [:error] [pid 30921:tid 30938] [client 20.250.12.212:17318] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "adJ9VmFGQVn8Q0ueB25WHQAAAQ8"]
[Sun Apr 05 23:18:47.392811 2026] [:error] [pid 30921:tid 30928] [client 20.250.12.212:17245] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "adJ9V2FGQVn8Q0ueB25WIAAAAQU"]
[Sun Apr 05 23:18:47.863869 2026] [:error] [pid 45304:tid 45359] [client 20.250.12.212:17300] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "adJ9Vw5jnqDKKovdRklCHgAAAE8"]
[Sun Apr 05 23:18:48.335186 2026] [:error] [pid 45305:tid 45391] [client 20.250.12.212:17245] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "adJ9WOjDQjr7aWhjflCNEQAAAJQ"]
[Sun Apr 05 23:18:48.806501 2026] [:error] [pid 30921:tid 30942] [client 20.250.12.212:17257] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "adJ9WGFGQVn8Q0ueB25WJgAAARM"]
[Sun Apr 05 23:18:49.288102 2026] [:error] [pid 30921:tid 30932] [client 20.250.12.212:17364] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/read.php"] [unique_id "adJ9WWFGQVn8Q0ueB25WJwAAAQk"]
[Sun Apr 05 23:18:49.765624 2026] [:error] [pid 45304:tid 45359] [client 20.250.12.212:17295] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/read.php"] [unique_id "adJ9WQ5jnqDKKovdRklCLwAAAE8"]
[Sun Apr 05 23:18:50.235318 2026] [:error] [pid 45305:tid 45390] [client 20.250.12.212:17232] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/read.php"] [unique_id "adJ9WujDQjr7aWhjflCNFQAAAJM"]
[Sun Apr 05 23:18:50.705668 2026] [:error] [pid 30921:tid 30938] [client 20.250.12.212:17382] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/read.php"] [unique_id "adJ9WmFGQVn8Q0ueB25WLQAAAQ8"]
[Sun Apr 05 23:18:51.182264 2026] [:error] [pid 45304:tid 45344] [client 20.250.12.212:17306] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adJ9Ww5jnqDKKovdRklCNwAAAEA"]
[Sun Apr 05 23:18:51.657744 2026] [:error] [pid 45304:tid 45353] [client 20.250.12.212:17241] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adJ9Ww5jnqDKKovdRklCOgAAAEk"]
[Sun Apr 05 23:18:52.131059 2026] [:error] [pid 45303:tid 45329] [client 20.250.12.212:17341] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adJ9XLboQ9eViZ4hdnmI3wAAAAw"]
[Sun Apr 05 23:18:52.604159 2026] [:error] [pid 45409:tid 45423] [client 20.250.12.212:17304] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "adJ9XNHt_Oyw03gjCNhumAAAAMw"]
[Sun Apr 05 23:18:53.075136 2026] [:error] [pid 45409:tid 45413] [client 20.250.12.212:17248] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "adJ9XdHt_Oyw03gjCNhunQAAAMI"]
[Sun Apr 05 23:18:53.548786 2026] [:error] [pid 45303:tid 45330] [client 20.250.12.212:17328] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "adJ9XbboQ9eViZ4hdnmI4AAAAA0"]
[Sun Apr 05 23:18:54.035984 2026] [:error] [pid 45409:tid 45432] [client 20.250.12.212:17248] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "adJ9XtHt_Oyw03gjCNhuqgAAANU"]
[Sun Apr 05 23:18:54.511151 2026] [:error] [pid 45303:tid 45339] [client 20.250.12.212:17281] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "adJ9XrboQ9eViZ4hdnmI4wAAABY"]
[Sun Apr 05 23:18:54.986050 2026] [:error] [pid 45305:tid 45389] [client 20.250.12.212:13901] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "adJ9XujDQjr7aWhjflCNHQAAAJI"]
[Sun Apr 05 23:18:55.470549 2026] [:error] [pid 45409:tid 45416] [client 20.250.12.212:17378] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "adJ9X9Ht_Oyw03gjCNhutQAAAMU"]
[Sun Apr 05 23:18:55.943149 2026] [:error] [pid 45303:tid 45326] [client 20.250.12.212:17271] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "adJ9X7boQ9eViZ4hdnmI6QAAAAk"]
[Sun Apr 05 23:18:56.422041 2026] [:error] [pid 30921:tid 30937] [client 20.250.12.212:17321] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "adJ9YGFGQVn8Q0ueB25WPAAAAQ4"]
[Sun Apr 05 23:18:56.895147 2026] [:error] [pid 45304:tid 45348] [client 20.250.12.212:13898] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adJ9YA5jnqDKKovdRklCRgAAAEQ"]
[Sun Apr 05 23:18:57.364817 2026] [:error] [pid 30921:tid 30927] [client 20.250.12.212:17256] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adJ9YWFGQVn8Q0ueB25WQgAAAQQ"]
[Sun Apr 05 23:18:57.836937 2026] [:error] [pid 30921:tid 30944] [client 20.250.12.212:17267] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adJ9YWFGQVn8Q0ueB25WRAAAARU"]
[Sun Apr 05 23:18:58.308276 2026] [:error] [pid 30921:tid 30935] [client 20.250.12.212:17289] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adJ9YmFGQVn8Q0ueB25WRwAAAQw"]
[Sun Apr 05 23:18:58.778407 2026] [:error] [pid 45303:tid 45328] [client 20.250.12.212:17220] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "adJ9YrboQ9eViZ4hdnmI6gAAAAs"]
[Sun Apr 05 23:18:59.254162 2026] [:error] [pid 45303:tid 45330] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun Apr 05 23:18:59.492969 2026] [:error] [pid 45303:tid 45333] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mter.php
[Sun Apr 05 23:18:59.731497 2026] [:error] [pid 45303:tid 45317] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sun Apr 05 23:18:59.972259 2026] [:error] [pid 45303:tid 45337] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/19.php
[Sun Apr 05 23:19:00.213090 2026] [:error] [pid 45303:tid 45326] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Sun Apr 05 23:19:00.452362 2026] [:error] [pid 45303:tid 45332] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sun Apr 05 23:19:00.690041 2026] [:error] [pid 45303:tid 45321] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sun Apr 05 23:19:00.930906 2026] [:error] [pid 45303:tid 45334] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sun Apr 05 23:19:01.168826 2026] [:error] [pid 45303:tid 45322] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/eee.php
[Sun Apr 05 23:19:01.409341 2026] [:error] [pid 45303:tid 45333] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Sun Apr 05 23:19:01.655504 2026] [:error] [pid 45303:tid 45341] [client 20.250.12.212:17234] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Sun Apr 05 23:19:01.890969 2026] [:error] [pid 45303:tid 45339] [client 20.250.12.212:17234] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/swallowable.php"] [unique_id "adJ9ZbboQ9eViZ4hdnmJAgAAABY"]
[Sun Apr 05 23:19:02.380957 2026] [:error] [pid 45303:tid 45325] [client 20.250.12.212:13893] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/swallowable.php"] [unique_id "adJ9ZrboQ9eViZ4hdnmJBgAAAAg"]
[Sun Apr 05 23:19:02.873590 2026] [:error] [pid 45305:tid 45394] [client 20.250.12.212:17342] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/swallowable.php"] [unique_id "adJ9ZujDQjr7aWhjflCNKwAAAJc"]
[Sun Apr 05 23:19:03.351956 2026] [:error] [pid 45305:tid 45386] [client 20.250.12.212:17349] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/swallowable.php"] [unique_id "adJ9Z-jDQjr7aWhjflCNLgAAAI8"]
[Sun Apr 05 23:19:03.832428 2026] [:error] [pid 30921:tid 30939] [client 20.250.12.212:17228] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "adJ9Z2FGQVn8Q0ueB25WXAAAARA"]
[Sun Apr 05 23:19:04.312697 2026] [:error] [pid 45303:tid 45337] [client 20.250.12.212:17309] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "adJ9aLboQ9eViZ4hdnmJFAAAABQ"]
[Sun Apr 05 23:19:04.799570 2026] [:error] [pid 30921:tid 30941] [client 20.250.12.212:17278] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "adJ9aGFGQVn8Q0ueB25WXQAAARI"]
[Sun Apr 05 23:19:05.286405 2026] [:error] [pid 45409:tid 45420] [client 20.250.12.212:17264] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "adJ9adHt_Oyw03gjCNhuxQAAAMk"]
[Sun Apr 05 23:19:05.758753 2026] [:error] [pid 45303:tid 45339] [client 20.250.12.212:17253] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "adJ9abboQ9eViZ4hdnmJGgAAABY"]
[Sun Apr 05 23:19:06.240778 2026] [:error] [pid 45304:tid 45353] [client 20.250.12.212:17314] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "adJ9ag5jnqDKKovdRklCgAAAAEk"]
[Sun Apr 05 23:19:06.715970 2026] [:error] [pid 30921:tid 30923] [client 20.250.12.212:13896] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "adJ9amFGQVn8Q0ueB25WYgAAAQA"]
[Sun Apr 05 23:19:07.194044 2026] [:error] [pid 45303:tid 45319] [client 20.250.12.212:17338] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "adJ9a7boQ9eViZ4hdnmJIwAAAAI"]
[Sun Apr 05 23:19:07.667755 2026] [:error] [pid 45305:tid 45379] [client 20.250.12.212:13910] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "adJ9a-jDQjr7aWhjflCNOQAAAIg"]
[Sun Apr 05 23:19:08.138651 2026] [:error] [pid 30921:tid 30941] [client 20.250.12.212:17385] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "adJ9bGFGQVn8Q0ueB25WaQAAARI"]
[Sun Apr 05 23:19:08.611864 2026] [:error] [pid 45303:tid 45331] [client 20.250.12.212:17301] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "adJ9bLboQ9eViZ4hdnmJKgAAAA4"]
[Sun Apr 05 23:19:09.083397 2026] [:error] [pid 45303:tid 45322] [client 20.250.12.212:17250] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "adJ9bbboQ9eViZ4hdnmJLAAAAAU"]
[Sun Apr 05 23:19:09.554802 2026] [:error] [pid 30921:tid 30925] [client 20.250.12.212:17343] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "adJ9bWFGQVn8Q0ueB25WbQAAAQI"]
[Sun Apr 05 23:19:10.056349 2026] [:error] [pid 45303:tid 45330] [client 20.250.12.212:17273] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "adJ9brboQ9eViZ4hdnmJLwAAAA0"]
[Sun Apr 05 23:19:10.528521 2026] [:error] [pid 45303:tid 45337] [client 20.250.12.212:17406] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "adJ9brboQ9eViZ4hdnmJMwAAABQ"]
[Sun Apr 05 23:19:11.002506 2026] [:error] [pid 45303:tid 45331] [client 20.250.12.212:13911] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "adJ9b7boQ9eViZ4hdnmJOQAAAA4"]
[Sun Apr 05 23:19:11.475585 2026] [:error] [pid 45303:tid 45319] [client 20.250.12.212:13932] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "adJ9b7boQ9eViZ4hdnmJPgAAAAI"]
[Sun Apr 05 23:19:11.946290 2026] [:error] [pid 30921:tid 30941] [client 20.250.12.212:17231] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "adJ9b2FGQVn8Q0ueB25WdQAAARI"]
[Sun Apr 05 23:19:12.421814 2026] [:error] [pid 30921:tid 30938] [client 20.250.12.212:17376] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "adJ9cGFGQVn8Q0ueB25WegAAAQ8"]
[Sun Apr 05 23:19:12.899122 2026] [:error] [pid 45305:tid 45392] [client 20.250.12.212:17347] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "adJ9cOjDQjr7aWhjflCNPwAAAJU"]
[Sun Apr 05 23:19:13.371379 2026] [:error] [pid 45304:tid 45345] [client 20.250.12.212:17340] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9cQ5jnqDKKovdRklCkAAAAEE"]
[Sun Apr 05 23:19:13.856949 2026] [:error] [pid 45305:tid 45385] [client 20.250.12.212:17333] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9cejDQjr7aWhjflCNQwAAAI4"]
[Sun Apr 05 23:19:14.328929 2026] [:error] [pid 45305:tid 45381] [client 20.250.12.212:17221] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9cujDQjr7aWhjflCNRAAAAIo"]
[Sun Apr 05 23:19:14.799082 2026] [:error] [pid 30921:tid 30941] [client 20.250.12.212:17260] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9cmFGQVn8Q0ueB25WgAAAARI"]
[Sun Apr 05 23:19:15.273655 2026] [:error] [pid 45303:tid 45318] [client 20.250.12.212:13912] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "adJ9c7boQ9eViZ4hdnmJUQAAAAE"]
[Sun Apr 05 23:19:15.760372 2026] [:error] [pid 45303:tid 45329] [client 20.250.12.212:13888] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "adJ9c7boQ9eViZ4hdnmJUgAAAAw"]
[Sun Apr 05 23:19:16.239458 2026] [:error] [pid 30921:tid 30938] [client 20.250.12.212:13915] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "adJ9dGFGQVn8Q0ueB25WhAAAAQ8"]
[Sun Apr 05 23:19:16.714507 2026] [:error] [pid 45409:tid 45421] [client 20.250.12.212:17344] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "adJ9dNHt_Oyw03gjCNhu2wAAAMo"]
[Sun Apr 05 23:19:17.205233 2026] [:error] [pid 45304:tid 45368] [client 20.250.12.212:13904] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "adJ9dQ5jnqDKKovdRklCmgAAAFg"]
[Sun Apr 05 23:19:17.678827 2026] [:error] [pid 30921:tid 30939] [client 20.250.12.212:17367] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "adJ9dWFGQVn8Q0ueB25WhQAAARA"]
[Sun Apr 05 23:19:18.231509 2026] [:error] [pid 45303:tid 45326] [client 20.250.12.212:17380] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "adJ9drboQ9eViZ4hdnmJXAAAAAk"]
[Sun Apr 05 23:19:18.703958 2026] [:error] [pid 45409:tid 45433] [client 20.250.12.212:17265] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "adJ9dtHt_Oyw03gjCNhu5AAAANY"]
[Sun Apr 05 23:19:19.185058 2026] [:error] [pid 45303:tid 45332] [client 20.250.12.212:17283] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "adJ9d7boQ9eViZ4hdnmJYQAAAA8"]
[Sun Apr 05 23:19:19.657994 2026] [:error] [pid 45409:tid 45412] [client 20.250.12.212:17276] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "adJ9d9Ht_Oyw03gjCNhu6QAAAME"]
[Sun Apr 05 23:19:20.141681 2026] [:error] [pid 45409:tid 45417] [client 20.250.12.212:13890] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "adJ9eNHt_Oyw03gjCNhu7AAAAMY"]
[Sun Apr 05 23:19:20.614669 2026] [:error] [pid 45304:tid 45368] [client 20.250.12.212:13899] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "adJ9eA5jnqDKKovdRklCpAAAAFg"]
[Sun Apr 05 23:19:21.089963 2026] [:error] [pid 45409:tid 45422] [client 20.250.12.212:17230] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "adJ9edHt_Oyw03gjCNhu8gAAAMs"]
[Sun Apr 05 23:19:21.572077 2026] [:error] [pid 45409:tid 45412] [client 20.250.12.212:17237] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "adJ9edHt_Oyw03gjCNhu9QAAAME"]
[Sun Apr 05 23:19:22.047741 2026] [:error] [pid 45409:tid 45426] [client 20.250.12.212:17316] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "adJ9etHt_Oyw03gjCNhu_AAAAM8"]
[Sun Apr 05 23:19:22.518830 2026] [:error] [pid 30921:tid 30939] [client 20.250.12.212:13894] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "adJ9emFGQVn8Q0ueB25WkAAAARA"]
[Sun Apr 05 23:19:22.990018 2026] [:error] [pid 45409:tid 45428] [client 20.250.12.212:17224] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "adJ9etHt_Oyw03gjCNhvAgAAANE"]
[Sun Apr 05 23:19:23.482070 2026] [:error] [pid 45409:tid 45417] [client 20.250.12.212:17223] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "adJ9e9Ht_Oyw03gjCNhvCQAAAMY"]
[Sun Apr 05 23:19:23.951667 2026] [:error] [pid 30921:tid 30934] [client 20.250.12.212:17372] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "adJ9e2FGQVn8Q0ueB25WlAAAAQs"]
[Sun Apr 05 23:19:24.426507 2026] [:error] [pid 45409:tid 45424] [client 20.250.12.212:17327] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "adJ9fNHt_Oyw03gjCNhvDgAAAM0"]
[Sun Apr 05 23:19:24.896596 2026] [:error] [pid 45303:tid 45331] [client 20.250.12.212:17266] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "adJ9fLboQ9eViZ4hdnmJaAAAAA4"]
[Sun Apr 05 23:19:25.368464 2026] [:error] [pid 45409:tid 45435] [client 20.250.12.212:13895] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "adJ9fdHt_Oyw03gjCNhvEQAAANg"]
[Sun Apr 05 23:19:25.840958 2026] [:error] [pid 45304:tid 45366] [client 20.250.12.212:17261] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "adJ9fQ5jnqDKKovdRklCrgAAAFY"]
[Sun Apr 05 23:19:26.311868 2026] [:error] [pid 45304:tid 45367] [client 20.250.12.212:17239] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "adJ9fg5jnqDKKovdRklCsAAAAFc"]
[Sun Apr 05 23:19:26.820222 2026] [:error] [pid 45304:tid 45355] [client 20.250.12.212:13892] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "adJ9fg5jnqDKKovdRklCswAAAEs"]
[Sun Apr 05 23:19:27.302650 2026] [:error] [pid 30921:tid 30932] [client 20.250.12.212:17346] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "adJ9f2FGQVn8Q0ueB25WnQAAAQk"]
[Sun Apr 05 23:19:27.772841 2026] [:error] [pid 45304:tid 45345] [client 20.250.12.212:17247] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "adJ9fw5jnqDKKovdRklCuQAAAEE"]
[Sun Apr 05 23:19:28.248581 2026] [:error] [pid 45303:tid 45333] [client 20.250.12.212:13920] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "adJ9gLboQ9eViZ4hdnmJbwAAABA"]
[Sun Apr 05 23:19:28.720411 2026] [:error] [pid 45303:tid 45322] [client 20.250.12.212:17381] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "adJ9gLboQ9eViZ4hdnmJcwAAAAU"]
[Sun Apr 05 23:19:29.193002 2026] [:error] [pid 45304:tid 45366] [client 20.250.12.212:13900] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "adJ9gQ5jnqDKKovdRklCwgAAAFY"]
[Sun Apr 05 23:19:29.664394 2026] [:error] [pid 30921:tid 30942] [client 20.250.12.212:13923] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "adJ9gWFGQVn8Q0ueB25WpQAAARM"]
[Sun Apr 05 23:19:30.139805 2026] [:error] [pid 45409:tid 45422] [client 20.250.12.212:17263] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "adJ9gtHt_Oyw03gjCNhvIgAAAMs"]
[Sun Apr 05 23:19:30.614220 2026] [:error] [pid 45305:tid 45379] [client 20.250.12.212:13928] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "adJ9gujDQjr7aWhjflCNVwAAAIg"]
[Sun Apr 05 23:19:31.088903 2026] [:error] [pid 45409:tid 45433] [client 20.250.12.212:17290] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "adJ9g9Ht_Oyw03gjCNhvJQAAANY"]
[Sun Apr 05 23:19:31.562674 2026] [:error] [pid 30921:tid 30932] [client 20.250.12.212:17336] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "adJ9g2FGQVn8Q0ueB25WqQAAAQk"]
[Sun Apr 05 23:19:32.035901 2026] [:error] [pid 45303:tid 45341] [client 20.250.12.212:17351] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "adJ9hLboQ9eViZ4hdnmJfAAAABg"]
[Sun Apr 05 23:19:32.514648 2026] [:error] [pid 45303:tid 45338] [client 20.250.12.212:17171] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adJ9hLboQ9eViZ4hdnmJfwAAABU"]
[Sun Apr 05 23:19:32.999965 2026] [:error] [pid 45305:tid 45385] [client 20.250.12.212:13943] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adJ9hOjDQjr7aWhjflCNXQAAAI4"]
[Sun Apr 05 23:19:33.481790 2026] [:error] [pid 45305:tid 45381] [client 20.250.12.212:13941] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adJ9hejDQjr7aWhjflCNYAAAAIo"]
[Sun Apr 05 23:19:33.961836 2026] [:error] [pid 45409:tid 45435] [client 20.250.12.212:17202] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adJ9hdHt_Oyw03gjCNhvLQAAANg"]
[Sun Apr 05 23:19:34.440811 2026] [:error] [pid 45409:tid 45427] [client 20.250.12.212:17339] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "adJ9htHt_Oyw03gjCNhvLwAAANA"]
[Sun Apr 05 23:19:34.919159 2026] [:error] [pid 45304:tid 45347] [client 20.250.12.212:13906] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "adJ9hg5jnqDKKovdRklC0gAAAEM"]
[Sun Apr 05 23:19:35.423250 2026] [:error] [pid 45305:tid 45394] [client 20.250.12.212:13889] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "adJ9h-jDQjr7aWhjflCNZgAAAJc"]
[Sun Apr 05 23:19:35.912469 2026] [:error] [pid 45305:tid 45395] [client 20.250.12.212:17315] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "adJ9h-jDQjr7aWhjflCNZwAAAJg"]
[Sun Apr 05 23:19:36.392029 2026] [:error] [pid 45409:tid 45432] [client 20.250.12.212:13951] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "adJ9iNHt_Oyw03gjCNhvPgAAANU"]
[Sun Apr 05 23:19:36.862797 2026] [:error] [pid 45409:tid 45419] [client 20.250.12.212:17394] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "adJ9iNHt_Oyw03gjCNhvQQAAAMg"]
[Sun Apr 05 23:19:37.333862 2026] [:error] [pid 45303:tid 45317] [client 20.250.12.212:17319] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "adJ9ibboQ9eViZ4hdnmJigAAAAA"]
[Sun Apr 05 23:19:37.806650 2026] [:error] [pid 45304:tid 45352] [client 20.250.12.212:17222] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "adJ9iQ5jnqDKKovdRklC2gAAAEg"]
[Sun Apr 05 23:19:38.278819 2026] [:error] [pid 45409:tid 45417] [client 20.250.12.212:13914] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "adJ9itHt_Oyw03gjCNhvSgAAAMY"]
[Sun Apr 05 23:19:38.750978 2026] [:error] [pid 45409:tid 45432] [client 20.250.12.212:17268] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "adJ9itHt_Oyw03gjCNhvTQAAANU"]
[Sun Apr 05 23:19:39.222879 2026] [:error] [pid 45409:tid 45428] [client 20.250.12.212:13934] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "adJ9i9Ht_Oyw03gjCNhvUAAAANE"]
[Sun Apr 05 23:19:39.700659 2026] [:error] [pid 30921:tid 30946] [client 20.250.12.212:17254] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "adJ9i2FGQVn8Q0ueB25WuAAAARc"]
[Sun Apr 05 23:19:40.176711 2026] [:error] [pid 45303:tid 45331] [client 20.250.12.212:17277] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "adJ9jLboQ9eViZ4hdnmJjgAAAA4"]
[Sun Apr 05 23:19:40.657978 2026] [:error] [pid 30921:tid 30929] [client 20.250.12.212:17208] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "adJ9jGFGQVn8Q0ueB25WwQAAAQY"]
[Sun Apr 05 23:19:41.127563 2026] [:error] [pid 45409:tid 45427] [client 20.250.12.212:13897] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "adJ9jdHt_Oyw03gjCNhvWgAAANA"]
[Sun Apr 05 23:19:41.600781 2026] [:error] [pid 45409:tid 45423] [client 20.250.12.212:17313] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "adJ9jdHt_Oyw03gjCNhvXQAAAMw"]
[Sun Apr 05 23:19:42.073182 2026] [:error] [pid 45303:tid 45339] [client 20.250.12.212:17156] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "adJ9jrboQ9eViZ4hdnmJkwAAABY"]
[Sun Apr 05 23:19:42.548121 2026] [:error] [pid 45409:tid 45430] [client 20.250.12.212:17272] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "adJ9jtHt_Oyw03gjCNhvZAAAANM"]
[Sun Apr 05 23:19:43.026370 2026] [:error] [pid 45305:tid 45386] [client 20.250.12.212:17262] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "adJ9j-jDQjr7aWhjflCNcAAAAI8"]
[Sun Apr 05 23:19:43.543945 2026] [:error] [pid 45305:tid 45372] [client 20.250.12.212:13913] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "adJ9j-jDQjr7aWhjflCNcQAAAIE"]
[Sun Apr 05 23:19:44.021074 2026] [:error] [pid 45305:tid 45393] [client 20.250.12.212:13907] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adJ9kOjDQjr7aWhjflCNcwAAAJY"]
[Sun Apr 05 23:19:44.497115 2026] [:error] [pid 45409:tid 45430] [client 20.250.12.212:17189] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adJ9kNHt_Oyw03gjCNhvbgAAANM"]
[Sun Apr 05 23:19:44.970681 2026] [:error] [pid 45304:tid 45354] [client 20.250.12.212:17183] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adJ9kA5jnqDKKovdRklC5AAAAEo"]
[Sun Apr 05 23:19:45.448147 2026] [:error] [pid 30921:tid 30944] [client 20.250.12.212:17226] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adJ9kWFGQVn8Q0ueB25WyAAAARU"]
[Sun Apr 05 23:19:45.919498 2026] [:error] [pid 30921:tid 30926] [client 20.250.12.212:13924] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adJ9kWFGQVn8Q0ueB25WywAAAQM"]
[Sun Apr 05 23:19:46.397486 2026] [:error] [pid 45303:tid 45337] [client 20.250.12.212:13916] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adJ9krboQ9eViZ4hdnmJmAAAABQ"]
[Sun Apr 05 23:19:46.868491 2026] [:error] [pid 30921:tid 30928] [client 20.250.12.212:13903] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adJ9kmFGQVn8Q0ueB25WzgAAAQU"]
[Sun Apr 05 23:19:47.348023 2026] [:error] [pid 45409:tid 45411] [client 20.250.12.212:17157] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adJ9k9Ht_Oyw03gjCNhvgAAAAMA"]
[Sun Apr 05 23:19:47.824623 2026] [:error] [pid 45409:tid 45425] [client 20.250.12.212:13909] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adJ9k9Ht_Oyw03gjCNhvhAAAAM4"]
[Sun Apr 05 23:19:48.298036 2026] [:error] [pid 45304:tid 45363] [client 20.250.12.212:13921] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adJ9lA5jnqDKKovdRklC6AAAAFM"]
[Sun Apr 05 23:19:48.770299 2026] [:error] [pid 45409:tid 45435] [client 20.250.12.212:13891] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adJ9lNHt_Oyw03gjCNhviAAAANg"]
[Sun Apr 05 23:19:49.242310 2026] [:error] [pid 45409:tid 45417] [client 20.250.12.212:17240] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adJ9ldHt_Oyw03gjCNhvjQAAAMY"]
[Sun Apr 05 23:19:49.718061 2026] [:error] [pid 45409:tid 45416] [client 20.250.12.212:17229] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "adJ9ldHt_Oyw03gjCNhvkwAAAMU"]
[Sun Apr 05 23:19:50.188371 2026] [:error] [pid 45409:tid 45412] [client 20.250.12.212:13938] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "adJ9ltHt_Oyw03gjCNhvlwAAAME"]
[Sun Apr 05 23:19:50.664383 2026] [:error] [pid 45409:tid 45420] [client 20.250.12.212:17174] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "adJ9ltHt_Oyw03gjCNhvmQAAAMk"]
[Sun Apr 05 23:19:51.140008 2026] [:error] [pid 45303:tid 45341] [client 20.250.12.212:13936] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "adJ9l7boQ9eViZ4hdnmJrAAAABg"]
[Sun Apr 05 23:19:51.617435 2026] [:error] [pid 45303:tid 45336] [client 20.250.12.212:17269] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "adJ9l7boQ9eViZ4hdnmJsAAAABM"]
[Sun Apr 05 23:19:52.089833 2026] [:error] [pid 45409:tid 45414] [client 20.250.12.212:17184] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "adJ9mNHt_Oyw03gjCNhvogAAAMM"]
[Sun Apr 05 23:19:52.562132 2026] [:error] [pid 45304:tid 45365] [client 20.250.12.212:13917] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "adJ9mA5jnqDKKovdRklC6gAAAFU"]
[Sun Apr 05 23:19:53.032581 2026] [:error] [pid 45409:tid 45428] [client 20.250.12.212:13926] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "adJ9mdHt_Oyw03gjCNhvqgAAANE"]
[Sun Apr 05 23:19:53.503641 2026] [:error] [pid 45304:tid 45349] [client 20.250.12.212:17166] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "adJ9mQ5jnqDKKovdRklC7AAAAEU"]
[Sun Apr 05 23:19:53.975583 2026] [:error] [pid 45409:tid 45434] [client 20.250.12.212:13922] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "adJ9mdHt_Oyw03gjCNhvtgAAANc"]
[Sun Apr 05 23:19:54.446684 2026] [:error] [pid 45303:tid 45335] [client 20.250.12.212:13902] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "adJ9mrboQ9eViZ4hdnmJuAAAABI"]
[Sun Apr 05 23:19:54.921808 2026] [:error] [pid 45304:tid 45351] [client 20.250.12.212:17197] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "adJ9mg5jnqDKKovdRklC8AAAAEc"]
[Sun Apr 05 23:19:55.401092 2026] [:error] [pid 45304:tid 45354] [client 20.250.12.212:17255] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adJ9mw5jnqDKKovdRklC9AAAAEo"]
[Sun Apr 05 23:19:55.871706 2026] [:error] [pid 45305:tid 45394] [client 20.250.12.212:17205] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adJ9m-jDQjr7aWhjflCNiQAAAJc"]
[Sun Apr 05 23:19:56.343545 2026] [:error] [pid 45305:tid 45381] [client 20.250.12.212:13927] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adJ9nOjDQjr7aWhjflCNjAAAAIo"]
[Sun Apr 05 23:19:56.823308 2026] [:error] [pid 45409:tid 45424] [client 20.250.12.212:14303] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adJ9nNHt_Oyw03gjCNhvwwAAAM0"]
[Sun Apr 05 23:19:57.295997 2026] [:error] [pid 30921:tid 30935] [client 20.250.12.212:17165] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9nWFGQVn8Q0ueB25W2QAAAQw"]
[Sun Apr 05 23:19:57.766999 2026] [:error] [pid 30921:tid 30931] [client 20.250.12.212:17270] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9nWFGQVn8Q0ueB25W2wAAAQg"]
[Sun Apr 05 23:19:58.241571 2026] [:error] [pid 30921:tid 30940] [client 20.250.12.212:13931] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9nmFGQVn8Q0ueB25W4AAAARE"]
[Sun Apr 05 23:19:58.717436 2026] [:error] [pid 45409:tid 45415] [client 20.250.12.212:13939] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adJ9ntHt_Oyw03gjCNhvywAAAMQ"]
[Sun Apr 05 23:19:59.190078 2026] [:error] [pid 30921:tid 30929] [client 20.250.12.212:13905] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "adJ9n2FGQVn8Q0ueB25W5AAAAQY"]
[Sun Apr 05 23:19:59.664026 2026] [:error] [pid 45409:tid 45423] [client 20.250.12.212:17249] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "adJ9n9Ht_Oyw03gjCNhv0AAAAMw"]
[Sun Apr 05 23:20:00.151324 2026] [:error] [pid 45409:tid 45420] [client 20.250.12.212:13925] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "adJ9oNHt_Oyw03gjCNhv1wAAAMk"]
[Sun Apr 05 23:20:00.638391 2026] [:error] [pid 45409:tid 45430] [client 20.250.12.212:17158] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "adJ9oNHt_Oyw03gjCNhv2gAAANM"]
[Sun Apr 05 23:20:01.120925 2026] [:error] [pid 45409:tid 45422] [client 20.250.12.212:17177] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Apr 05 23:20:01.359864 2026] [:error] [pid 45409:tid 45428] [client 20.250.12.212:17177] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sun Apr 05 23:20:01.600475 2026] [:error] [pid 45409:tid 45424] [client 20.250.12.212:17177] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Apr 05 23:20:01.839676 2026] [:error] [pid 45409:tid 45434] [client 20.250.12.212:17177] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sun Apr 05 23:20:02.331301 2026] [:error] [pid 45409:tid 45414] [client 20.250.12.212:17177] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sun Apr 05 23:20:02.812273 2026] [:error] [pid 45409:tid 45426] [client 20.250.12.212:17177] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Sun Apr 05 23:20:03.051272 2026] [:error] [pid 45409:tid 45431] [client 20.250.12.212:17177] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Sun Apr 05 23:20:03.291991 2026] [:error] [pid 45409:tid 45423] [client 20.250.12.212:17177] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sun Apr 05 23:20:03.530922 2026] [:error] [pid 45409:tid 45411] [client 20.250.12.212:17177] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Sun Apr 05 23:20:03.766140 2026] [:error] [pid 45409:tid 45412] [client 20.250.12.212:17177] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "adJ9o9Ht_Oyw03gjCNhwAgAAAME"]
[Sun Apr 05 23:20:04.242116 2026] [:error] [pid 30921:tid 30928] [client 20.250.12.212:13942] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "adJ9pGFGQVn8Q0ueB25W7AAAAQU"]
[Sun Apr 05 23:20:04.731196 2026] [:error] [pid 45409:tid 45427] [client 20.250.12.212:17350] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "adJ9pNHt_Oyw03gjCNhwBgAAANA"]
[Sun Apr 05 23:20:05.211096 2026] [:error] [pid 45304:tid 45360] [client 20.250.12.212:13937] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "adJ9pQ5jnqDKKovdRklDCgAAAFA"]
[Sun Apr 05 23:20:05.682434 2026] [:error] [pid 45409:tid 45412] [client 20.250.12.212:17168] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adJ9pdHt_Oyw03gjCNhwEQAAAME"]
[Sun Apr 05 23:20:06.155902 2026] [:error] [pid 45409:tid 45435] [client 20.250.12.212:17326] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adJ9ptHt_Oyw03gjCNhwFAAAANg"]
[Sun Apr 05 23:20:06.628688 2026] [:error] [pid 45409:tid 45414] [client 20.250.12.212:13918] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adJ9ptHt_Oyw03gjCNhwGwAAAMM"]
[Sun Apr 05 23:20:07.097960 2026] [:error] [pid 45409:tid 45435] [client 20.250.12.212:17211] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adJ9p9Ht_Oyw03gjCNhwHwAAANg"]
[Sun Apr 05 23:20:07.570442 2026] [:error] [pid 45409:tid 45412] [client 20.250.12.212:17152] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "adJ9p9Ht_Oyw03gjCNhwIwAAAME"]
[Sun Apr 05 23:20:08.045495 2026] [:error] [pid 45305:tid 45395] [client 20.250.12.212:17213] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "adJ9qOjDQjr7aWhjflCNmwAAAJg"]
[Sun Apr 05 23:20:08.516205 2026] [:error] [pid 45305:tid 45375] [client 20.250.12.212:17188] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "adJ9qOjDQjr7aWhjflCNnQAAAIQ"]
[Sun Apr 05 23:20:08.993541 2026] [:error] [pid 45303:tid 45326] [client 20.250.12.212:17259] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "adJ9qLboQ9eViZ4hdnmJ1QAAAAk"]
[Sun Apr 05 23:20:09.469457 2026] [:error] [pid 45305:tid 45378] [client 20.250.12.212:17170] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adJ9qejDQjr7aWhjflCNoQAAAIc"]
[Sun Apr 05 23:20:09.952525 2026] [:error] [pid 30921:tid 30946] [client 20.250.12.212:13930] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adJ9qWFGQVn8Q0ueB25W9AAAARc"]
[Sun Apr 05 23:20:10.427294 2026] [:error] [pid 45303:tid 45339] [client 20.250.12.212:17199] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adJ9qrboQ9eViZ4hdnmJ2wAAABY"]
[Sun Apr 05 23:20:10.899592 2026] [:error] [pid 45304:tid 45363] [client 20.250.12.212:17210] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adJ9qg5jnqDKKovdRklDFAAAAFM"]
[Sun Apr 05 23:20:11.377537 2026] [:error] [pid 45304:tid 45364] [client 20.250.12.212:17178] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "adJ9qw5jnqDKKovdRklDFgAAAFQ"]
[Sun Apr 05 23:20:11.850421 2026] [:error] [pid 45303:tid 45322] [client 20.250.12.212:17176] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "adJ9q7boQ9eViZ4hdnmJ4wAAAAU"]
[Sun Apr 05 23:20:12.366802 2026] [:error] [pid 45305:tid 45389] [client 20.250.12.212:14335] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "adJ9rOjDQjr7aWhjflCNqAAAAJI"]
[Sun Apr 05 23:20:12.856497 2026] [:error] [pid 45304:tid 45345] [client 20.250.12.212:13940] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "adJ9rA5jnqDKKovdRklDHAAAAEE"]
[Sun Apr 05 23:20:13.412552 2026] [:error] [pid 45304:tid 45358] [client 20.250.12.212:14308] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adJ9rQ5jnqDKKovdRklDIAAAAE4"]
[Sun Apr 05 23:20:13.957708 2026] [:error] [pid 45303:tid 45326] [client 20.250.12.212:13948] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adJ9rbboQ9eViZ4hdnmJ7wAAAAk"]
[Sun Apr 05 23:20:14.443895 2026] [:error] [pid 45303:tid 45327] [client 20.250.12.212:13946] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adJ9rrboQ9eViZ4hdnmJ9gAAAAo"]
[Sun Apr 05 23:20:14.928994 2026] [:error] [pid 45305:tid 45388] [client 20.250.12.212:17183] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adJ9rujDQjr7aWhjflCNqQAAAJE"]
[Sun Apr 05 23:20:15.413756 2026] [:error] [pid 45304:tid 45367] [client 20.250.12.212:17194] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adJ9rw5jnqDKKovdRklDJgAAAFc"]
[Sun Apr 05 23:20:15.892555 2026] [:error] [pid 45409:tid 45417] [client 20.250.12.212:13950] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adJ9r9Ht_Oyw03gjCNhwMwAAAMY"]
[Sun Apr 05 23:20:16.366144 2026] [:error] [pid 45303:tid 45327] [client 20.250.12.212:17153] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adJ9sLboQ9eViZ4hdnmKDAAAAAo"]
[Sun Apr 05 23:20:16.834997 2026] [:error] [pid 45303:tid 45318] [client 20.250.12.212:17190] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "adJ9sLboQ9eViZ4hdnmKEQAAAAE"]
[Sun Apr 05 23:20:17.304097 2026] [:error] [pid 30921:tid 30928] [client 20.250.12.212:17212] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "adJ9sWFGQVn8Q0ueB25XAQAAAQU"]
[Sun Apr 05 23:20:17.780985 2026] [:error] [pid 30921:tid 30924] [client 20.250.12.212:14287] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "adJ9sWFGQVn8Q0ueB25XAgAAAQE"]
[Sun Apr 05 23:20:18.257938 2026] [:error] [pid 30921:tid 30934] [client 20.250.12.212:17185] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "adJ9smFGQVn8Q0ueB25XBAAAAQs"]
[Sun Apr 05 23:20:18.749070 2026] [:error] [pid 45409:tid 45424] [client 20.250.12.212:17387] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "adJ9stHt_Oyw03gjCNhwRQAAAM0"]
[Sun Apr 05 23:20:19.224413 2026] [:error] [pid 45305:tid 45373] [client 20.250.12.212:17167] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "adJ9s-jDQjr7aWhjflCNrgAAAII"]
[Sun Apr 05 23:20:19.694475 2026] [:error] [pid 45303:tid 45331] [client 20.250.12.212:13935] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "adJ9s7boQ9eViZ4hdnmKGwAAAA4"]
[Sun Apr 05 23:20:20.169351 2026] [:error] [pid 45304:tid 45358] [client 20.250.12.212:13919] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "adJ9tA5jnqDKKovdRklDLQAAAE4"]
[Sun Apr 05 23:20:20.645279 2026] [:error] [pid 45303:tid 45340] [client 20.250.12.212:17252] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "adJ9tLboQ9eViZ4hdnmKIwAAABc"]
[Sun Apr 05 23:20:21.115556 2026] [:error] [pid 45303:tid 45325] [client 20.250.12.212:13945] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adJ9tbboQ9eViZ4hdnmKKQAAAAg"]
[Sun Apr 05 23:20:21.590082 2026] [:error] [pid 45304:tid 45363] [client 20.250.12.212:14279] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adJ9tQ5jnqDKKovdRklDNwAAAFM"]
[Sun Apr 05 23:20:22.065900 2026] [:error] [pid 45305:tid 45393] [client 20.250.12.212:14313] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adJ9tujDQjr7aWhjflCNtAAAAJY"]
[Sun Apr 05 23:20:22.537868 2026] [:error] [pid 30921:tid 30946] [client 20.250.12.212:17182] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "adJ9tmFGQVn8Q0ueB25XDAAAARc"]
[Sun Apr 05 23:20:23.010096 2026] [:error] [pid 45305:tid 45388] [client 20.250.12.212:17195] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "adJ9t-jDQjr7aWhjflCNtgAAAJE"]
[Sun Apr 05 23:20:23.486267 2026] [:error] [pid 45305:tid 45392] [client 20.250.12.212:17320] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "adJ9t-jDQjr7aWhjflCNuwAAAJU"]
[Sun Apr 05 23:20:23.961486 2026] [:error] [pid 45409:tid 45415] [client 20.250.12.212:14285] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "adJ9t9Ht_Oyw03gjCNhwWAAAAMQ"]
[Sun Apr 05 23:20:24.434356 2026] [:error] [pid 45409:tid 45416] [client 20.250.12.212:14304] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "adJ9uNHt_Oyw03gjCNhwXQAAAMU"]
[Sun Apr 05 23:20:24.907648 2026] [:error] [pid 45304:tid 45352] [client 20.250.12.212:13650] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "adJ9uA5jnqDKKovdRklDPgAAAEg"]
[Sun Apr 05 23:20:25.378701 2026] [:error] [pid 45409:tid 45429] [client 20.250.12.212:17164] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "adJ9udHt_Oyw03gjCNhwXwAAANI"]
[Sun Apr 05 23:20:25.850333 2026] [:error] [pid 30921:tid 30945] [client 20.250.12.212:13676] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "adJ9uWFGQVn8Q0ueB25XHAAAARY"]
[Sun Apr 05 23:20:26.321265 2026] [:error] [pid 30921:tid 30938] [client 20.250.12.212:13944] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "adJ9umFGQVn8Q0ueB25XHgAAAQ8"]
[Sun Apr 05 23:20:26.792111 2026] [:error] [pid 45305:tid 45381] [client 20.250.12.212:14306] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about2.php"] [unique_id "adJ9uujDQjr7aWhjflCNwAAAAIo"]
[Sun Apr 05 23:20:27.263158 2026] [:error] [pid 30921:tid 30930] [client 20.250.12.212:14314] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about2.php"] [unique_id "adJ9u2FGQVn8Q0ueB25XJQAAAQc"]
[Sun Apr 05 23:20:27.734294 2026] [:error] [pid 30921:tid 30927] [client 20.250.12.212:17200] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about2.php"] [unique_id "adJ9u2FGQVn8Q0ueB25XKAAAAQQ"]
[Sun Apr 05 23:20:28.210250 2026] [:error] [pid 45303:tid 45323] [client 20.250.12.212:13676] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about2.php"] [unique_id "adJ9vLboQ9eViZ4hdnmKOgAAAAY"]
[Sun Apr 05 23:20:28.681258 2026] [:error] [pid 45305:tid 45373] [client 20.250.12.212:14301] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "adJ9vOjDQjr7aWhjflCNzwAAAII"]
[Sun Apr 05 23:20:29.152963 2026] [:error] [pid 45409:tid 45432] [client 20.250.12.212:17154] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "adJ9vdHt_Oyw03gjCNhwbwAAANU"]
[Sun Apr 05 23:20:29.623175 2026] [:error] [pid 45409:tid 45433] [client 20.250.12.212:13947] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "adJ9vdHt_Oyw03gjCNhwdgAAANY"]
[Sun Apr 05 23:20:30.093209 2026] [:error] [pid 45409:tid 45428] [client 20.250.12.212:17173] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "adJ9vtHt_Oyw03gjCNhwfQAAANE"]
[Sun Apr 05 23:20:30.568658 2026] [:error] [pid 45409:tid 45434] [client 20.250.12.212:17193] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "adJ9vtHt_Oyw03gjCNhwhwAAANc"]
[Sun Apr 05 23:20:31.039147 2026] [:error] [pid 45409:tid 45424] [client 20.250.12.212:14272] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "adJ9v9Ht_Oyw03gjCNhwkAAAAM0"]
[Sun Apr 05 23:20:31.510498 2026] [:error] [pid 45409:tid 45420] [client 20.250.12.212:17198] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "adJ9v9Ht_Oyw03gjCNhwlQAAAMk"]
[Sun Apr 05 23:20:31.979993 2026] [:error] [pid 45303:tid 45321] [client 20.250.12.212:14334] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "adJ9v7boQ9eViZ4hdnmKQAAAAAQ"]
[Sun Apr 05 23:20:32.451374 2026] [:error] [pid 45304:tid 45355] [client 20.250.12.212:17403] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "adJ9wA5jnqDKKovdRklDSQAAAEs"]
[Sun Apr 05 23:20:32.924844 2026] [:error] [pid 45409:tid 45423] [client 20.250.12.212:13908] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "adJ9wNHt_Oyw03gjCNhwngAAAMw"]
[Sun Apr 05 23:20:33.404140 2026] [:error] [pid 45303:tid 45325] [client 20.250.12.212:17163] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "adJ9wbboQ9eViZ4hdnmKSQAAAAg"]
[Sun Apr 05 23:20:33.874973 2026] [:error] [pid 45303:tid 45328] [client 20.250.12.212:17169] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "adJ9wbboQ9eViZ4hdnmKUgAAAAs"]
[Sun Apr 05 23:20:34.345014 2026] [:error] [pid 45303:tid 45325] [client 20.250.12.212:14281] [client 20.250.12.212] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adJ9wrboQ9eViZ4hdnmKVgAAAAg"]
[Sun Apr 05 23:20:34.816052 2026] [:error] [pid 45303:tid 45330] [client 20.250.12.212:14297] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "adJ9wrboQ9eViZ4hdnmKWAAAAA0"]
[Sun Apr 05 23:20:35.288073 2026] [:error] [pid 45304:tid 45360] [client 20.250.12.212:17155] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "adJ9ww5jnqDKKovdRklDVAAAAFA"]
[Sun Apr 05 23:20:35.757691 2026] [:error] [pid 45303:tid 45334] [client 20.250.12.212:17159] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "adJ9w7boQ9eViZ4hdnmKYAAAABE"]
[Sun Apr 05 23:20:36.228605 2026] [:error] [pid 45303:tid 45329] [client 20.250.12.212:17162] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adJ9xLboQ9eViZ4hdnmKYgAAAAw"]
[Sun Apr 05 23:20:36.698748 2026] [:error] [pid 45303:tid 45319] [client 20.250.12.212:14333] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adJ9xLboQ9eViZ4hdnmKZwAAAAI"]
[Sun Apr 05 23:20:37.177557 2026] [:error] [pid 45303:tid 45317] [client 20.250.12.212:17160] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adJ9xbboQ9eViZ4hdnmKbAAAAAA"]
[Sun Apr 05 23:20:37.653192 2026] [:error] [pid 45409:tid 45414] [client 20.250.12.212:17204] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adJ9xdHt_Oyw03gjCNhwuwAAAMM"]
[Sun Apr 05 23:20:38.121988 2026] [:error] [pid 45303:tid 45325] [client 20.250.12.212:13632] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adJ9xrboQ9eViZ4hdnmKcAAAAAg"]
[Sun Apr 05 23:20:38.595320 2026] [:error] [pid 45409:tid 45425] [client 20.250.12.212:14274] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adJ9xtHt_Oyw03gjCNhwxQAAAM4"]
[Sun Apr 05 23:20:39.067884 2026] [:error] [pid 30921:tid 30930] [client 20.250.12.212:17172] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adJ9x2FGQVn8Q0ueB25XPAAAAQc"]
[Sun Apr 05 23:20:39.537359 2026] [:error] [pid 45303:tid 45318] [client 20.250.12.212:13663] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adJ9x7boQ9eViZ4hdnmKdwAAAAE"]
[Sun Apr 05 23:20:40.007394 2026] [:error] [pid 45303:tid 45329] [client 20.250.12.212:17196] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "adJ9yLboQ9eViZ4hdnmKewAAAAw"]
[Sun Apr 05 23:20:40.476743 2026] [:error] [pid 45409:tid 45425] [client 20.250.12.212:14277] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "adJ9yNHt_Oyw03gjCNhw0QAAAM4"]
[Sun Apr 05 23:20:40.948093 2026] [:error] [pid 45409:tid 45426] [client 20.250.12.212:13661] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "adJ9yNHt_Oyw03gjCNhw1QAAAM8"]
[Sun Apr 05 23:20:41.419049 2026] [:error] [pid 30921:tid 30924] [client 20.250.12.212:17175] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "adJ9yWFGQVn8Q0ueB25XQwAAAQE"]
[Sun Apr 05 23:20:41.887432 2026] [:error] [pid 45409:tid 45411] [client 20.250.12.212:14284] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "adJ9ydHt_Oyw03gjCNhw3wAAAMA"]
[Sun Apr 05 23:20:42.356663 2026] [:error] [pid 45409:tid 45429] [client 20.250.12.212:13658] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "adJ9ytHt_Oyw03gjCNhw5QAAANI"]
[Sun Apr 05 23:20:42.827015 2026] [:error] [pid 45409:tid 45411] [client 20.250.12.212:17237] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "adJ9ytHt_Oyw03gjCNhw7wAAAMA"]
[Sun Apr 05 23:20:43.303298 2026] [:error] [pid 45409:tid 45433] [client 20.250.12.212:14291] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "adJ9y9Ht_Oyw03gjCNhw9gAAANY"]
[Sun Apr 05 23:20:43.774647 2026] [:error] [pid 45409:tid 45429] [client 20.250.12.212:17353] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "adJ9y9Ht_Oyw03gjCNhw_QAAANI"]
[Sun Apr 05 23:20:44.244814 2026] [:error] [pid 45303:tid 45333] [client 20.250.12.212:13675] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "adJ9zLboQ9eViZ4hdnmKigAAABA"]
[Sun Apr 05 23:20:44.717573 2026] [:error] [pid 45409:tid 45435] [client 20.250.12.212:14280] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "adJ9zNHt_Oyw03gjCNhxBwAAANg"]
[Sun Apr 05 23:20:45.186768 2026] [:error] [pid 45303:tid 45340] [client 20.250.12.212:13695] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "adJ9zbboQ9eViZ4hdnmKkAAAABc"]
[Sun Apr 05 23:20:45.658087 2026] [:error] [pid 45409:tid 45421] [client 20.250.12.212:17206] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "adJ9zdHt_Oyw03gjCNhxEQAAAMo"]
[Sun Apr 05 23:20:46.127721 2026] [:error] [pid 45409:tid 45422] [client 20.250.12.212:17214] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "adJ9ztHt_Oyw03gjCNhxEgAAAMs"]
[Sun Apr 05 23:20:46.597588 2026] [:error] [pid 45409:tid 45419] [client 20.250.12.212:13643] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "adJ9ztHt_Oyw03gjCNhxGQAAAMg"]
[Sun Apr 05 23:20:47.068556 2026] [:error] [pid 45303:tid 45327] [client 20.250.12.212:14307] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "adJ9z7boQ9eViZ4hdnmKlQAAAAo"]
[Sun Apr 05 23:20:47.540490 2026] [:error] [pid 45409:tid 45425] [client 20.250.12.212:17207] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "adJ9z9Ht_Oyw03gjCNhxJgAAAM4"]
[Sun Apr 05 23:20:48.012754 2026] [:error] [pid 45303:tid 45339] [client 20.250.12.212:14295] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "adJ90LboQ9eViZ4hdnmKmAAAABY"]
[Sun Apr 05 23:20:48.487458 2026] [:error] [pid 45303:tid 45334] [client 20.250.12.212:13687] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "adJ90LboQ9eViZ4hdnmKmgAAABE"]
[Sun Apr 05 23:20:48.958649 2026] [:error] [pid 45305:tid 45391] [client 20.250.12.212:14282] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "adJ90OjDQjr7aWhjflCN4gAAAJQ"]
[Sun Apr 05 23:20:49.431719 2026] [:error] [pid 45409:tid 45430] [client 20.250.12.212:13656] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "adJ90dHt_Oyw03gjCNhxMgAAANM"]
[Sun Apr 05 23:20:49.901665 2026] [:error] [pid 45303:tid 45333] [client 20.250.12.212:13933] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "adJ90bboQ9eViZ4hdnmKpQAAABA"]
[Sun Apr 05 23:20:50.371024 2026] [:error] [pid 30921:tid 30931] [client 20.250.12.212:13655] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "adJ90mFGQVn8Q0ueB25XRwAAAQg"]
[Sun Apr 05 23:20:50.843332 2026] [:error] [pid 30921:tid 30927] [client 20.250.12.212:17203] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "adJ90mFGQVn8Q0ueB25XSgAAAQQ"]
[Sun Apr 05 23:20:51.347178 2026] [:error] [pid 45305:tid 45375] [client 20.250.12.212:13929] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "adJ90-jDQjr7aWhjflCN5QAAAIQ"]
[Sun Apr 05 23:20:51.817422 2026] [:error] [pid 45303:tid 45320] [client 20.250.12.212:14293] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "adJ907boQ9eViZ4hdnmKqgAAAAM"]
[Sun Apr 05 23:20:52.287915 2026] [:error] [pid 45409:tid 45421] [client 20.250.12.212:13929] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "adJ91NHt_Oyw03gjCNhxPgAAAMo"]
[Sun Apr 05 23:20:52.757086 2026] [:error] [pid 45409:tid 45432] [client 20.250.12.212:14322] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "adJ91NHt_Oyw03gjCNhxQwAAANU"]
[Sun Apr 05 23:20:53.230701 2026] [:error] [pid 30921:tid 30935] [client 20.250.12.212:17187] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "adJ91WFGQVn8Q0ueB25XVwAAAQw"]
[Sun Apr 05 23:20:53.716058 2026] [:error] [pid 45305:tid 45389] [client 20.250.12.212:13677] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "adJ91ejDQjr7aWhjflCN7gAAAJI"]
[Sun Apr 05 23:20:54.187010 2026] [:error] [pid 45305:tid 45381] [client 20.250.12.212:14278] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "adJ91ujDQjr7aWhjflCN9AAAAIo"]
[Sun Apr 05 23:20:54.657662 2026] [:error] [pid 45409:tid 45429] [client 20.250.12.212:14241] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "adJ91tHt_Oyw03gjCNhxTQAAANI"]
[Sun Apr 05 23:20:55.127850 2026] [:error] [pid 30921:tid 30927] [client 20.250.12.212:13685] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bengi.php"] [unique_id "adJ912FGQVn8Q0ueB25XXAAAAQQ"]
[Sun Apr 05 23:20:55.598712 2026] [:error] [pid 45409:tid 45424] [client 20.250.12.212:13635] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bengi.php"] [unique_id "adJ919Ht_Oyw03gjCNhxVAAAAM0"]
[Sun Apr 05 23:20:56.076950 2026] [:error] [pid 45305:tid 45385] [client 20.250.12.212:17251] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bengi.php"] [unique_id "adJ92OjDQjr7aWhjflCN_AAAAI4"]
[Sun Apr 05 23:20:56.548867 2026] [:error] [pid 45305:tid 45390] [client 20.250.12.212:17181] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bengi.php"] [unique_id "adJ92OjDQjr7aWhjflCOAQAAAJM"]
[Sun Apr 05 23:20:57.018126 2026] [:error] [pid 45304:tid 45367] [client 20.250.12.212:13648] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adJ92Q5jnqDKKovdRklDcQAAAFc"]
[Sun Apr 05 23:20:57.489067 2026] [:error] [pid 45305:tid 45383] [client 20.250.12.212:17209] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adJ92ejDQjr7aWhjflCOBAAAAIw"]
[Sun Apr 05 23:20:57.958198 2026] [:error] [pid 45303:tid 45319] [client 20.250.12.212:14283] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adJ92bboQ9eViZ4hdnmKzAAAAAI"]
[Sun Apr 05 23:20:58.429435 2026] [:error] [pid 45303:tid 45318] [client 20.250.12.212:14290] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adJ92rboQ9eViZ4hdnmK0AAAAAE"]
[Sun Apr 05 23:20:58.901641 2026] [:error] [pid 45303:tid 45335] [client 20.250.12.212:17215] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "adJ92rboQ9eViZ4hdnmK1AAAABI"]
[Sun Apr 05 23:20:59.374790 2026] [:error] [pid 45303:tid 45339] [client 20.250.12.212:13652] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "adJ927boQ9eViZ4hdnmK2QAAABY"]
[Sun Apr 05 23:20:59.850601 2026] [:error] [pid 45303:tid 45318] [client 20.250.12.212:17345] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "adJ927boQ9eViZ4hdnmK3AAAAAE"]
[Sun Apr 05 23:21:00.329184 2026] [:error] [pid 45303:tid 45320] [client 20.250.12.212:13949] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "adJ93LboQ9eViZ4hdnmK3wAAAAM"]
[Sun Apr 05 23:21:00.806874 2026] [:error] [pid 45305:tid 45377] [client 20.250.12.212:14315] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "adJ93OjDQjr7aWhjflCOCAAAAIY"]
[Sun Apr 05 23:21:01.295478 2026] [:error] [pid 45303:tid 45329] [client 20.250.12.212:17186] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "adJ93bboQ9eViZ4hdnmK5QAAAAw"]
[Sun Apr 05 23:21:01.766059 2026] [:error] [pid 30921:tid 30934] [client 20.250.12.212:14292] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "adJ93WFGQVn8Q0ueB25XZgAAAQs"]
[Sun Apr 05 23:21:02.238668 2026] [:error] [pid 30921:tid 30930] [client 20.250.12.212:17175] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "adJ93mFGQVn8Q0ueB25XaQAAAQc"]
[Sun Apr 05 23:21:02.783027 2026] [:error] [pid 45303:tid 45320] [client 20.250.12.212:13644] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "adJ93rboQ9eViZ4hdnmK7gAAAAM"]
[Sun Apr 05 23:21:03.312215 2026] [:error] [pid 45304:tid 45348] [client 20.250.12.212:14275] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sun Apr 05 23:21:03.552084 2026] [:error] [pid 45304:tid 45368] [client 20.250.12.212:14275] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sun Apr 05 23:21:03.791092 2026] [:error] [pid 45304:tid 45345] [client 20.250.12.212:14275] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Sun Apr 05 23:21:04.030794 2026] [:error] [pid 45304:tid 45353] [client 20.250.12.212:14275] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sun Apr 05 23:21:04.578770 2026] [:error] [pid 45304:tid 45365] [client 20.250.12.212:14275] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sun Apr 05 23:21:04.827199 2026] [:error] [pid 45304:tid 45367] [client 20.250.12.212:14275] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Sun Apr 05 23:21:05.084468 2026] [:error] [pid 45304:tid 45362] [client 20.250.12.212:14275] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Sun Apr 05 23:21:05.324033 2026] [:error] [pid 45304:tid 45354] [client 20.250.12.212:14275] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sun Apr 05 23:21:05.566285 2026] [:error] [pid 45304:tid 45355] [client 20.250.12.212:14275] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Sun Apr 05 23:21:05.817322 2026] [:error] [pid 45304:tid 45349] [client 20.250.12.212:14275] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Sun Apr 05 23:21:06.055943 2026] [:error] [pid 45304:tid 45356] [client 20.250.12.212:14275] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "adJ94g5jnqDKKovdRklDigAAAEw"]
[Sun Apr 05 23:21:06.741599 2026] [:error] [pid 45305:tid 45393] [client 20.250.12.212:13645] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "adJ94ujDQjr7aWhjflCOFQAAAJY"]
[Sun Apr 05 23:21:07.370893 2026] [:error] [pid 45305:tid 45392] [client 20.250.12.212:13680] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "adJ94-jDQjr7aWhjflCOGQAAAJU"]
[Sun Apr 05 23:21:08.213630 2026] [:error] [pid 45304:tid 45353] [client 20.250.12.212:14288] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "adJ95A5jnqDKKovdRklDkAAAAEk"]
[Sun Apr 05 23:21:08.807250 2026] [:error] [pid 45304:tid 45357] [client 20.250.12.212:14324] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/efile.php"] [unique_id "adJ95A5jnqDKKovdRklDmQAAAE0"]
[Sun Apr 05 23:21:09.278197 2026] [:error] [pid 45303:tid 45336] [client 20.250.12.212:13660] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/efile.php"] [unique_id "adJ95bboQ9eViZ4hdnmLBgAAABM"]
[Sun Apr 05 23:21:09.749874 2026] [:error] [pid 30921:tid 30941] [client 20.250.12.212:14325] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/efile.php"] [unique_id "adJ95WFGQVn8Q0ueB25XfQAAARI"]
[Sun Apr 05 23:21:10.228981 2026] [:error] [pid 30921:tid 30934] [client 20.250.12.212:14328] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/efile.php"] [unique_id "adJ95mFGQVn8Q0ueB25XgQAAAQs"]
[Sun Apr 05 23:21:10.706954 2026] [:error] [pid 45303:tid 45335] [client 20.250.12.212:14323] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "adJ95rboQ9eViZ4hdnmLCgAAABI"]
[Sun Apr 05 23:21:11.176977 2026] [:error] [pid 45303:tid 45323] [client 20.250.12.212:14330] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "adJ957boQ9eViZ4hdnmLDwAAAAY"]
[Sun Apr 05 23:21:11.647547 2026] [:error] [pid 45409:tid 45419] [client 20.250.12.212:14318] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "adJ959Ht_Oyw03gjCNhxewAAAMg"]
[Sun Apr 05 23:21:12.118916 2026] [:error] [pid 45303:tid 45317] [client 20.250.12.212:13664] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "adJ96LboQ9eViZ4hdnmLFQAAAAA"]
[Sun Apr 05 23:21:12.589284 2026] [:error] [pid 45303:tid 45335] [client 20.250.12.212:14305] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "adJ96LboQ9eViZ4hdnmLGQAAABI"]
[Sun Apr 05 23:21:13.060723 2026] [:error] [pid 45409:tid 45429] [client 20.250.12.212:13673] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "adJ96dHt_Oyw03gjCNhxfgAAANI"]
[Sun Apr 05 23:21:13.531692 2026] [:error] [pid 45409:tid 45433] [client 20.250.12.212:14321] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "adJ96dHt_Oyw03gjCNhxgQAAANY"]
[Sun Apr 05 23:21:14.014011 2026] [:error] [pid 45303:tid 45329] [client 20.250.12.212:14273] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "adJ96rboQ9eViZ4hdnmLJAAAAAw"]
[Sun Apr 05 23:21:14.483728 2026] [:error] [pid 45409:tid 45411] [client 20.250.12.212:14311] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "adJ96tHt_Oyw03gjCNhxigAAAMA"]
[Sun Apr 05 23:21:14.954347 2026] [:error] [pid 45409:tid 45430] [client 20.250.12.212:14327] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "adJ96tHt_Oyw03gjCNhxkQAAANM"]
[Sun Apr 05 23:21:15.424961 2026] [:error] [pid 45304:tid 45352] [client 20.250.12.212:14276] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "adJ96w5jnqDKKovdRklDqAAAAEg"]
[Sun Apr 05 23:21:15.896673 2026] [:error] [pid 45304:tid 45350] [client 20.250.12.212:14233] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "adJ96w5jnqDKKovdRklDqgAAAEY"]
[Sun Apr 05 23:21:16.368624 2026] [:error] [pid 45303:tid 45334] [client 20.250.12.212:14229] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "adJ97LboQ9eViZ4hdnmLKwAAABE"]
[Sun Apr 05 23:21:16.842423 2026] [:error] [pid 45305:tid 45389] [client 20.250.12.212:13670] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "adJ97OjDQjr7aWhjflCOQQAAAJI"]
[Sun Apr 05 23:21:17.314678 2026] [:error] [pid 45304:tid 45366] [client 20.250.12.212:13642] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "adJ97Q5jnqDKKovdRklDrAAAAFY"]
[Sun Apr 05 23:21:17.785645 2026] [:error] [pid 45304:tid 45360] [client 20.250.12.212:13681] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "adJ97Q5jnqDKKovdRklDrQAAAFA"]
[Sun Apr 05 23:21:18.259857 2026] [:error] [pid 45305:tid 45379] [client 20.250.12.212:14329] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "adJ97ujDQjr7aWhjflCOSAAAAIg"]
[Sun Apr 05 23:21:18.731397 2026] [:error] [pid 45303:tid 45332] [client 20.250.12.212:13667] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "adJ97rboQ9eViZ4hdnmLOAAAAA8"]
[Sun Apr 05 23:21:19.202599 2026] [:error] [pid 45303:tid 45334] [client 20.250.12.212:14300] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "adJ977boQ9eViZ4hdnmLOQAAABE"]
[Sun Apr 05 23:21:19.674945 2026] [:error] [pid 45304:tid 45350] [client 20.250.12.212:14289] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "adJ97w5jnqDKKovdRklDuwAAAEY"]
[Sun Apr 05 23:21:20.145349 2026] [:error] [pid 45305:tid 45376] [client 20.250.12.212:13668] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "adJ98OjDQjr7aWhjflCOSgAAAIU"]
[Sun Apr 05 23:21:20.621858 2026] [:error] [pid 45304:tid 45364] [client 20.250.12.212:13647] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "adJ98A5jnqDKKovdRklDwAAAAFQ"]
[Sun Apr 05 23:21:21.091831 2026] [:error] [pid 45304:tid 45361] [client 20.250.12.212:13684] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "adJ98Q5jnqDKKovdRklDxQAAAFE"]
[Sun Apr 05 23:21:21.561884 2026] [:error] [pid 45304:tid 45355] [client 20.250.12.212:17192] [client 20.250.12.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "adJ98Q5jnqDKKovdRklDyAAAAEs"]
[Mon Apr 06 07:08:02.757756 2026] [:error] [pid 35786:tid 35814] [client 45.92.33.175:63685] [client 45.92.33.175] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.92.33.175, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adLrUmgkfCKTaLhwaKRPKQAAANU"]
[Mon Apr 06 07:08:02.762435 2026] [:error] [pid 35786:tid 35814] [client 45.92.33.175:63685] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 07 00:07:42.502719 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:15956] File does not exist: /usr/local/apache/htdocs/suspended-page/asd67.php
[Tue Apr 07 00:07:42.766765 2026] [:error] [pid 35688:tid 35750] [client 51.120.80.210:15956] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue Apr 07 00:07:43.031488 2026] [:error] [pid 35688:tid 35769] [client 51.120.80.210:15956] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Tue Apr 07 00:07:43.294897 2026] [:error] [pid 35688:tid 35774] [client 51.120.80.210:15956] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Tue Apr 07 00:07:43.558817 2026] [:error] [pid 35688:tid 35755] [client 51.120.80.210:15956] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Tue Apr 07 00:07:43.821930 2026] [:error] [pid 35688:tid 35753] [client 51.120.80.210:15956] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Tue Apr 07 00:07:44.355937 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:15956] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Tue Apr 07 00:07:44.620767 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:15956] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue Apr 07 00:07:44.903426 2026] [:error] [pid 35688:tid 35760] [client 51.120.80.210:15956] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Tue Apr 07 00:07:45.164407 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:15956] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adPaUeZ85qg4jLsRpQwm-gAAAIc"]
[Tue Apr 07 00:07:46.390786 2026] [:error] [pid 9413:tid 9433] [client 51.120.80.210:15992] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adPaUnllvEK3chn01wHkkQAAAZI"]
[Tue Apr 07 00:07:47.371067 2026] [:error] [pid 9413:tid 9438] [client 51.120.80.210:15892] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adPaU3llvEK3chn01wHkkgAAAZc"]
[Tue Apr 07 00:07:48.121857 2026] [:error] [pid 35687:tid 35734] [client 51.120.80.210:15995] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "adPaVJ3LtDozV0i8BiuUMgAAAEs"]
[Tue Apr 07 00:07:49.015285 2026] [:error] [pid 9442:tid 9453] [client 51.120.80.210:15969] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/n.php"] [unique_id "adPaVUPsNnAJTnmz6sZ6xQAAAQk"]
[Tue Apr 07 00:07:50.414522 2026] [:error] [pid 10280:tid 10292] [client 51.120.80.210:15967] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/n.php"] [unique_id "adPaVl8QUJkf8g-BFfNXawAAAck"]
[Tue Apr 07 00:07:51.620601 2026] [:error] [pid 35688:tid 35761] [client 51.120.80.210:15994] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/n.php"] [unique_id "adPaV-Z85qg4jLsRpQwnDgAAAIs"]
[Tue Apr 07 00:07:52.564680 2026] [:error] [pid 10280:tid 10289] [client 51.120.80.210:15978] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/n.php"] [unique_id "adPaWF8QUJkf8g-BFfNXcQAAAcY"]
[Tue Apr 07 00:07:53.327633 2026] [:error] [pid 10280:tid 10287] [client 51.120.80.210:15911] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "adPaWV8QUJkf8g-BFfNXdQAAAcQ"]
[Tue Apr 07 00:07:54.281895 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:15983] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "adPaWuZ85qg4jLsRpQwnFQAAAJQ"]
[Tue Apr 07 00:07:55.115008 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:15951] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "adPaW-Z85qg4jLsRpQwnFwAAAIc"]
[Tue Apr 07 00:07:56.208249 2026] [:error] [pid 35687:tid 35742] [client 51.120.80.210:15949] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "adPaXJ3LtDozV0i8BiuUOQAAAFM"]
[Tue Apr 07 00:07:57.433963 2026] [:error] [pid 1827:tid 1849] [client 51.120.80.210:15958] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/new4.php"] [unique_id "adPaXeVeb6S_DnjZ2xFNyQAAAhQ"]
[Tue Apr 07 00:07:58.330827 2026] [:error] [pid 1827:tid 1841] [client 51.120.80.210:15885] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/new4.php"] [unique_id "adPaXuVeb6S_DnjZ2xFNzgAAAgw"]
[Tue Apr 07 00:07:59.358576 2026] [:error] [pid 9442:tid 9467] [client 51.120.80.210:15979] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/new4.php"] [unique_id "adPaX0PsNnAJTnmz6sZ6zgAAARc"]
[Tue Apr 07 00:08:00.474529 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:15999] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/new4.php"] [unique_id "adPaYOZ85qg4jLsRpQwnHAAAAIc"]
[Tue Apr 07 00:08:01.338424 2026] [:error] [pid 35786:tid 35812] [client 51.120.80.210:15913] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "adPaYWgkfCKTaLhwaKQ41AAAANM"]
[Tue Apr 07 00:08:02.204686 2026] [:error] [pid 35688:tid 35773] [client 51.120.80.210:15883] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "adPaYuZ85qg4jLsRpQwnHwAAAJc"]
[Tue Apr 07 00:08:03.108703 2026] [:error] [pid 35688:tid 35750] [client 51.120.80.210:15972] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "adPaY-Z85qg4jLsRpQwnIQAAAIA"]
[Tue Apr 07 00:08:03.676309 2026] [:error] [pid 9442:tid 9459] [client 51.120.80.210:15901] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "adPaY0PsNnAJTnmz6sZ63QAAAQ8"]
[Tue Apr 07 00:08:04.486202 2026] [:error] [pid 38562:tid 38586] [client 51.120.80.210:15826] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adPaZKeD6Ohe6wzRuy7MngAAAVU"]
[Tue Apr 07 00:08:05.235937 2026] [:error] [pid 38562:tid 38568] [client 51.120.80.210:15989] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adPaZaeD6Ohe6wzRuy7MogAAAUM"]
[Tue Apr 07 00:08:05.894300 2026] [:error] [pid 35687:tid 35727] [client 51.120.80.210:15938] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adPaZZ3LtDozV0i8BiuUPwAAAEQ"]
[Tue Apr 07 00:08:06.579660 2026] [:error] [pid 38562:tid 38578] [client 51.120.80.210:15996] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adPaZqeD6Ohe6wzRuy7MqAAAAU0"]
[Tue Apr 07 00:08:07.274712 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:15882] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "adPaZ-Z85qg4jLsRpQwnKAAAAIg"]
[Tue Apr 07 00:08:07.944006 2026] [:error] [pid 9413:tid 9418] [client 51.120.80.210:15945] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "adPaZ3llvEK3chn01wHkmwAAAYM"]
[Tue Apr 07 00:08:08.523432 2026] [:error] [pid 10280:tid 10283] [client 51.120.80.210:15948] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "adPaaF8QUJkf8g-BFfNXhwAAAcA"]
[Tue Apr 07 00:08:09.153181 2026] [:error] [pid 10280:tid 10286] [client 51.120.80.210:15988] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "adPaaV8QUJkf8g-BFfNXjQAAAcM"]
[Tue Apr 07 00:08:09.743465 2026] [:error] [pid 35686:tid 35719] [client 51.120.80.210:15921] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "adPaacMKdea6oORd2fwGKgAAABc"]
[Tue Apr 07 00:08:10.334366 2026] [:error] [pid 35688:tid 35754] [client 51.120.80.210:15890] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "adPaauZ85qg4jLsRpQwnMwAAAIQ"]
[Tue Apr 07 00:08:10.971897 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:15973] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "adPaauZ85qg4jLsRpQwnNgAAAJQ"]
[Tue Apr 07 00:08:11.539979 2026] [:error] [pid 38562:tid 38572] [client 51.120.80.210:15875] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "adPaa6eD6Ohe6wzRuy7MsgAAAUc"]
[Tue Apr 07 00:08:12.310799 2026] [:error] [pid 35786:tid 35795] [client 51.120.80.210:15891] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "adPabGgkfCKTaLhwaKQ42QAAAMI"]
[Tue Apr 07 00:08:13.072667 2026] [:error] [pid 35688:tid 35755] [client 51.120.80.210:15935] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "adPabeZ85qg4jLsRpQwnQAAAAIU"]
[Tue Apr 07 00:08:13.721390 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:15980] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "adPabeZ85qg4jLsRpQwnRwAAAIg"]
[Tue Apr 07 00:08:14.363980 2026] [:error] [pid 10280:tid 10302] [client 51.120.80.210:15997] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "adPabl8QUJkf8g-BFfNXkwAAAdM"]
[Tue Apr 07 00:08:15.159677 2026] [:error] [pid 10280:tid 10306] [client 51.120.80.210:15976] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "adPab18QUJkf8g-BFfNXlQAAAdc"]
[Tue Apr 07 00:08:15.759519 2026] [:error] [pid 35687:tid 35732] [client 51.120.80.210:15964] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "adPab53LtDozV0i8BiuUQQAAAEk"]
[Tue Apr 07 00:08:16.570541 2026] [:error] [pid 9442:tid 9452] [client 51.120.80.210:15987] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "adPacEPsNnAJTnmz6sZ67AAAAQg"]
[Tue Apr 07 00:08:17.344305 2026] [:error] [pid 9442:tid 9451] [client 51.120.80.210:15959] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "adPacUPsNnAJTnmz6sZ68AAAAQc"]
[Tue Apr 07 00:08:18.022752 2026] [:error] [pid 9442:tid 9449] [client 51.120.80.210:15991] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "adPackPsNnAJTnmz6sZ69AAAAQU"]
[Tue Apr 07 00:08:18.584426 2026] [:error] [pid 9442:tid 9468] [client 51.120.80.210:15876] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "adPackPsNnAJTnmz6sZ69wAAARg"]
[Tue Apr 07 00:08:19.215478 2026] [:error] [pid 35688:tid 35759] [client 51.120.80.210:15895] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "adPac-Z85qg4jLsRpQwnWQAAAIk"]
[Tue Apr 07 00:08:20.137063 2026] [:error] [pid 35786:tid 35799] [client 51.120.80.210:15888] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "adPadGgkfCKTaLhwaKQ42gAAAMY"]
[Tue Apr 07 00:08:20.855577 2026] [:error] [pid 35686:tid 35698] [client 51.120.80.210:15953] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adPadMMKdea6oORd2fwGLgAAAAI"]
[Tue Apr 07 00:08:21.578216 2026] [:error] [pid 35786:tid 35806] [client 51.120.80.210:15899] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adPadWgkfCKTaLhwaKQ43AAAAM0"]
[Tue Apr 07 00:08:22.150120 2026] [:error] [pid 9442:tid 9467] [client 51.120.80.210:15873] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adPadkPsNnAJTnmz6sZ7BQAAARc"]
[Tue Apr 07 00:08:22.875520 2026] [:error] [pid 10280:tid 10290] [client 51.120.80.210:15950] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adPadl8QUJkf8g-BFfNXnAAAAcc"]
[Tue Apr 07 00:08:23.635012 2026] [:error] [pid 9442:tid 9453] [client 51.120.80.210:15939] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "adPad0PsNnAJTnmz6sZ7DAAAAQk"]
[Tue Apr 07 00:08:24.360699 2026] [:error] [pid 10280:tid 10288] [client 51.120.80.210:15894] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "adPaeF8QUJkf8g-BFfNXpAAAAcU"]
[Tue Apr 07 00:08:25.081539 2026] [:error] [pid 38562:tid 38571] [client 51.120.80.210:15933] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "adPaeaeD6Ohe6wzRuy7MuQAAAUY"]
[Tue Apr 07 00:08:25.663115 2026] [:error] [pid 35688:tid 35765] [client 51.120.80.210:15998] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "adPaeeZ85qg4jLsRpQwnXwAAAI8"]
[Tue Apr 07 00:08:26.307405 2026] [:error] [pid 9442:tid 9467] [client 51.120.80.210:15918] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adPaekPsNnAJTnmz6sZ7FQAAARc"]
[Tue Apr 07 00:08:27.063001 2026] [:error] [pid 9442:tid 9460] [client 51.120.80.210:15955] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adPae0PsNnAJTnmz6sZ7IAAAARA"]
[Tue Apr 07 00:08:28.083365 2026] [:error] [pid 9442:tid 9462] [client 51.120.80.210:15946] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adPafEPsNnAJTnmz6sZ7JAAAARI"]
[Tue Apr 07 00:08:28.815349 2026] [:error] [pid 10280:tid 10283] [client 51.120.80.210:15926] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adPafF8QUJkf8g-BFfNXrQAAAcA"]
[Tue Apr 07 00:08:29.581027 2026] [:error] [pid 9442:tid 9467] [client 51.120.80.210:15977] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adPafUPsNnAJTnmz6sZ7JwAAARc"]
[Tue Apr 07 00:08:30.646673 2026] [:error] [pid 9442:tid 9446] [client 51.120.80.210:15960] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adPafkPsNnAJTnmz6sZ7MQAAAQI"]
[Tue Apr 07 00:08:31.363327 2026] [:error] [pid 1827:tid 1846] [client 51.120.80.210:15887] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adPaf-Veb6S_DnjZ2xFN5QAAAhE"]
[Tue Apr 07 00:08:32.218144 2026] [:error] [pid 9413:tid 9433] [client 51.120.80.210:15878] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adPagHllvEK3chn01wHkpQAAAZI"]
[Tue Apr 07 00:08:33.021266 2026] [:error] [pid 10280:tid 10295] [client 51.120.80.210:15850] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "adPagV8QUJkf8g-BFfNXtgAAAcw"]
[Tue Apr 07 00:08:33.806554 2026] [:error] [pid 9442:tid 9457] [client 51.120.80.210:15993] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "adPagUPsNnAJTnmz6sZ7PQAAAQ0"]
[Tue Apr 07 00:08:34.575535 2026] [:error] [pid 9442:tid 9460] [client 51.120.80.210:15817] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "adPagkPsNnAJTnmz6sZ7RAAAARA"]
[Tue Apr 07 00:08:35.549845 2026] [:error] [pid 35688:tid 35760] [client 51.120.80.210:15823] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "adPag-Z85qg4jLsRpQwnbwAAAIo"]
[Tue Apr 07 00:08:36.478209 2026] [:error] [pid 9442:tid 9456] [client 51.120.80.210:15954] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nope.php"] [unique_id "adPahEPsNnAJTnmz6sZ7SQAAAQw"]
[Tue Apr 07 00:08:37.566101 2026] [:error] [pid 9442:tid 9458] [client 51.120.80.210:15884] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nope.php"] [unique_id "adPahUPsNnAJTnmz6sZ7TgAAAQ4"]
[Tue Apr 07 00:08:38.218426 2026] [:error] [pid 9442:tid 9464] [client 51.120.80.210:15880] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nope.php"] [unique_id "adPahkPsNnAJTnmz6sZ7UgAAARQ"]
[Tue Apr 07 00:08:38.974593 2026] [:error] [pid 9442:tid 9450] [client 51.120.80.210:15963] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nope.php"] [unique_id "adPahkPsNnAJTnmz6sZ7VgAAAQY"]
[Tue Apr 07 00:08:39.594947 2026] [:error] [pid 9442:tid 9462] [client 51.120.80.210:15975] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js.php"] [unique_id "adPah0PsNnAJTnmz6sZ7WQAAARI"]
[Tue Apr 07 00:08:40.213816 2026] [:error] [pid 10280:tid 10294] [client 51.120.80.210:15879] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js.php"] [unique_id "adPaiF8QUJkf8g-BFfNXvQAAAcs"]
[Tue Apr 07 00:08:41.206797 2026] [:error] [pid 9442:tid 9444] [client 51.120.80.210:15843] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js.php"] [unique_id "adPaiUPsNnAJTnmz6sZ7XQAAAQA"]
[Tue Apr 07 00:08:42.062651 2026] [:error] [pid 35688:tid 35751] [client 51.120.80.210:15896] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js.php"] [unique_id "adPaiuZ85qg4jLsRpQwnewAAAIE"]
[Tue Apr 07 00:08:42.820392 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:15808] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adPaiuZ85qg4jLsRpQwngQAAAI0"]
[Tue Apr 07 00:08:43.405917 2026] [:error] [pid 35687:tid 35740] [client 51.120.80.210:15944] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/num.php"] [unique_id "adPai53LtDozV0i8BiuUWAAAAFE"]
[Tue Apr 07 00:08:44.206736 2026] [:error] [pid 35687:tid 35748] [client 51.120.80.210:15834] File does not exist: /usr/local/apache/htdocs/suspended-page/num.php
[Tue Apr 07 00:08:44.469651 2026] [:error] [pid 35687:tid 35725] [client 51.120.80.210:15834] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue Apr 07 00:08:44.731371 2026] [:error] [pid 35687:tid 35738] [client 51.120.80.210:15834] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Apr 07 00:08:44.993575 2026] [:error] [pid 35687:tid 35731] [client 51.120.80.210:15834] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Apr 07 00:08:45.255515 2026] [:error] [pid 35687:tid 35726] [client 51.120.80.210:15834] File does not exist: /usr/local/apache/htdocs/suspended-page/wfile.php
[Tue Apr 07 00:08:45.553155 2026] [:error] [pid 35687:tid 35735] [client 51.120.80.210:15834] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Tue Apr 07 00:08:45.915337 2026] [:error] [pid 35687:tid 35732] [client 51.120.80.210:15834] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Tue Apr 07 00:08:46.197954 2026] [:error] [pid 35687:tid 35741] [client 51.120.80.210:15834] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue Apr 07 00:08:46.457018 2026] [:error] [pid 35687:tid 35730] [client 51.120.80.210:15834] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "adPajp3LtDozV0i8BiuUaAAAAEc"]
[Tue Apr 07 00:08:47.106530 2026] [:error] [pid 9442:tid 9449] [client 51.120.80.210:15910] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Tue Apr 07 00:08:47.649205 2026] [:error] [pid 9442:tid 9456] [client 51.120.80.210:15910] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Tue Apr 07 00:08:47.934164 2026] [:error] [pid 9442:tid 9444] [client 51.120.80.210:15910] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "adPaj0PsNnAJTnmz6sZ7vQAAAQA"]
[Tue Apr 07 00:08:48.648819 2026] [:error] [pid 35686:tid 35719] [client 51.120.80.210:15908] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "adPakMMKdea6oORd2fwGNQAAABc"]
[Tue Apr 07 00:08:49.626095 2026] [:error] [pid 10280:tid 10287] [client 51.120.80.210:15821] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "adPakV8QUJkf8g-BFfNXzQAAAcQ"]
[Tue Apr 07 00:08:50.161343 2026] [:error] [pid 1827:tid 1844] [client 51.120.80.210:15941] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "adPakuVeb6S_DnjZ2xFN-AAAAg8"]
[Tue Apr 07 00:08:50.805713 2026] [:error] [pid 1827:tid 1830] [client 51.120.80.210:15897] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "adPakuVeb6S_DnjZ2xFN-gAAAgE"]
[Tue Apr 07 00:08:51.475014 2026] [:error] [pid 9442:tid 9449] [client 51.120.80.210:15872] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "adPak0PsNnAJTnmz6sZ70AAAAQU"]
[Tue Apr 07 00:08:52.141053 2026] [:error] [pid 9442:tid 9456] [client 51.120.80.210:15903] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "adPalEPsNnAJTnmz6sZ70wAAAQw"]
[Tue Apr 07 00:08:52.881648 2026] [:error] [pid 38562:tid 38568] [client 51.120.80.210:15819] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "adPalKeD6Ohe6wzRuy7MywAAAUM"]
[Tue Apr 07 00:08:53.683041 2026] [:error] [pid 1827:tid 1836] [client 51.120.80.210:15814] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "adPaleVeb6S_DnjZ2xFN_QAAAgc"]
[Tue Apr 07 00:08:54.489594 2026] [:error] [pid 9413:tid 9432] [client 51.120.80.210:15816] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "adPalnllvEK3chn01wHkqwAAAZE"]
[Tue Apr 07 00:08:55.183196 2026] [:error] [pid 35688:tid 35751] [client 51.120.80.210:15981] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "adPal-Z85qg4jLsRpQwnnAAAAIE"]
[Tue Apr 07 00:08:56.220732 2026] [:error] [pid 38562:tid 38583] [client 51.120.80.210:15753] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "adPamKeD6Ohe6wzRuy7MzgAAAVI"]
[Tue Apr 07 00:08:56.909460 2026] [:error] [pid 35688:tid 35766] [client 51.120.80.210:15825] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adPamOZ85qg4jLsRpQwnogAAAJA"]
[Tue Apr 07 00:08:57.687304 2026] [:error] [pid 1827:tid 1848] [client 51.120.80.210:15952] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adPameVeb6S_DnjZ2xFOAAAAAhM"]
[Tue Apr 07 00:08:58.683456 2026] [:error] [pid 38562:tid 38576] [client 51.120.80.210:15915] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adPamqeD6Ohe6wzRuy7M0AAAAUs"]
[Tue Apr 07 00:08:59.653829 2026] [:error] [pid 38562:tid 38574] [client 51.120.80.210:15902] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "adPam6eD6Ohe6wzRuy7M0wAAAUk"]
[Tue Apr 07 00:09:00.297735 2026] [:error] [pid 35686:tid 35716] [client 51.120.80.210:15922] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-x7.php"] [unique_id "adPanMMKdea6oORd2fwGOwAAABQ"]
[Tue Apr 07 00:09:01.059703 2026] [:error] [pid 35686:tid 35706] [client 51.120.80.210:15842] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-x7.php"] [unique_id "adPancMKdea6oORd2fwGPQAAAAo"]
[Tue Apr 07 00:09:01.721675 2026] [:error] [pid 9413:tid 9427] [client 51.120.80.210:15762] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-x7.php"] [unique_id "adPanXllvEK3chn01wHkrwAAAYw"]
[Tue Apr 07 00:09:02.373805 2026] [:error] [pid 9442:tid 9446] [client 51.120.80.210:15968] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-x7.php"] [unique_id "adPankPsNnAJTnmz6sZ74QAAAQI"]
[Tue Apr 07 00:09:03.283413 2026] [:error] [pid 9442:tid 9467] [client 51.120.80.210:15877] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/log.php"] [unique_id "adPan0PsNnAJTnmz6sZ75wAAARc"]
[Tue Apr 07 00:09:04.015309 2026] [:error] [pid 9413:tid 9415] [client 51.120.80.210:15971] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/log.php"] [unique_id "adPaoHllvEK3chn01wHksgAAAYA"]
[Tue Apr 07 00:09:04.563832 2026] [:error] [pid 9413:tid 9435] [client 51.120.80.210:15966] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/log.php"] [unique_id "adPaoHllvEK3chn01wHktQAAAZQ"]
[Tue Apr 07 00:09:05.177666 2026] [:error] [pid 10280:tid 10288] [client 51.120.80.210:15829] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/log.php"] [unique_id "adPaoV8QUJkf8g-BFfNX5gAAAcU"]
[Tue Apr 07 00:09:05.718567 2026] [:error] [pid 10280:tid 10290] [client 51.120.80.210:15840] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "adPaoV8QUJkf8g-BFfNX7AAAAcc"]
[Tue Apr 07 00:09:06.281562 2026] [:error] [pid 9413:tid 9424] [client 51.120.80.210:15924] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "adPaonllvEK3chn01wHkuAAAAYk"]
[Tue Apr 07 00:09:06.889498 2026] [:error] [pid 35687:tid 35726] [client 51.120.80.210:15912] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "adPaop3LtDozV0i8BiuUcgAAAEM"]
[Tue Apr 07 00:09:07.464385 2026] [:error] [pid 35688:tid 35755] [client 51.120.80.210:15838] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "adPao-Z85qg4jLsRpQwnqgAAAIU"]
[Tue Apr 07 00:09:08.027953 2026] [:error] [pid 9413:tid 9422] [client 51.120.80.210:15974] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "adPapHllvEK3chn01wHkuwAAAYc"]
[Tue Apr 07 00:09:08.760219 2026] [:error] [pid 35786:tid 35803] [client 51.120.80.210:15906] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "adPapGgkfCKTaLhwaKQ46gAAAMo"]
[Tue Apr 07 00:09:09.409985 2026] [:error] [pid 35688:tid 35762] [client 51.120.80.210:15982] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "adPapeZ85qg4jLsRpQwnrwAAAIw"]
[Tue Apr 07 00:09:10.053157 2026] [:error] [pid 35786:tid 35810] [client 51.120.80.210:15881] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "adPapmgkfCKTaLhwaKQ47gAAANE"]
[Tue Apr 07 00:09:10.726938 2026] [:error] [pid 9442:tid 9464] [client 51.120.80.210:15928] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adPapkPsNnAJTnmz6sZ78wAAARQ"]
[Tue Apr 07 00:09:11.430413 2026] [:error] [pid 9442:tid 9445] [client 51.120.80.210:15758] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adPap0PsNnAJTnmz6sZ79QAAAQE"]
[Tue Apr 07 00:09:12.202911 2026] [:error] [pid 9442:tid 9460] [client 51.120.80.210:15828] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adPaqEPsNnAJTnmz6sZ79wAAARA"]
[Tue Apr 07 00:09:13.214337 2026] [:error] [pid 35688:tid 35752] [client 51.120.80.210:15957] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adPaqeZ85qg4jLsRpQwnswAAAII"]
[Tue Apr 07 00:09:14.181666 2026] [:error] [pid 35686:tid 35709] [client 51.120.80.210:15824] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/an7.php"] [unique_id "adPaqsMKdea6oORd2fwGSwAAAA0"]
[Tue Apr 07 00:09:15.329512 2026] [:error] [pid 35688:tid 35774] [client 51.120.80.210:15839] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/an7.php"] [unique_id "adPaq-Z85qg4jLsRpQwnuQAAAJg"]
[Tue Apr 07 00:09:16.380828 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:15914] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/an7.php"] [unique_id "adParOZ85qg4jLsRpQwnvAAAAI0"]
[Tue Apr 07 00:09:17.093771 2026] [:error] [pid 35688:tid 35764] [client 51.120.80.210:15990] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/an7.php"] [unique_id "adPareZ85qg4jLsRpQwnwAAAAI4"]
[Tue Apr 07 00:09:17.703478 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:15757] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "adPareZ85qg4jLsRpQwnxQAAAIc"]
[Tue Apr 07 00:09:18.261588 2026] [:error] [pid 35688:tid 35765] [client 51.120.80.210:15844] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "adParuZ85qg4jLsRpQwnyQAAAI8"]
[Tue Apr 07 00:09:19.118951 2026] [:error] [pid 1827:tid 1848] [client 51.120.80.210:15965] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "adPar-Veb6S_DnjZ2xFOFgAAAhM"]
[Tue Apr 07 00:09:21.122671 2026] [:error] [pid 9442:tid 9446] [client 51.120.80.210:15788] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "adPasUPsNnAJTnmz6sZ8CQAAAQI"]
[Tue Apr 07 00:09:21.757812 2026] [:error] [pid 9442:tid 9462] [client 51.120.80.210:15909] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adPasUPsNnAJTnmz6sZ8DAAAARI"]
[Tue Apr 07 00:09:22.359885 2026] [:error] [pid 9442:tid 9458] [client 51.120.80.210:15900] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "adPaskPsNnAJTnmz6sZ8EgAAAQ4"]
[Tue Apr 07 00:09:22.976135 2026] [:error] [pid 35686:tid 35696] [client 51.120.80.210:15755] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "adPassMKdea6oORd2fwGTgAAAAA"]
[Tue Apr 07 00:09:23.708515 2026] [:error] [pid 9442:tid 9446] [client 51.120.80.210:15813] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "adPas0PsNnAJTnmz6sZ8FwAAAQI"]
[Tue Apr 07 00:09:24.427783 2026] [:error] [pid 35688:tid 35761] [client 51.120.80.210:15893] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "adPatOZ85qg4jLsRpQwn2AAAAIs"]
[Tue Apr 07 00:09:25.065398 2026] [:error] [pid 10280:tid 10287] [client 51.120.80.210:15942] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ext.php"] [unique_id "adPatV8QUJkf8g-BFfNYGAAAAcQ"]
[Tue Apr 07 00:09:25.646812 2026] [:error] [pid 10280:tid 10296] [client 51.120.80.210:15859] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ext.php"] [unique_id "adPatV8QUJkf8g-BFfNYGwAAAc0"]
[Tue Apr 07 00:09:26.604682 2026] [:error] [pid 35687:tid 35738] [client 51.120.80.210:15986] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ext.php"] [unique_id "adPatp3LtDozV0i8BiuUfwAAAE8"]
[Tue Apr 07 00:09:27.344009 2026] [:error] [pid 35688:tid 35769] [client 51.120.80.210:15932] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ext.php"] [unique_id "adPat-Z85qg4jLsRpQwn5wAAAJM"]
[Tue Apr 07 00:09:29.229028 2026] [:error] [pid 9442:tid 9448] [client 51.120.80.210:15871] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about3.php"] [unique_id "adPauUPsNnAJTnmz6sZ8NAAAAQQ"]
[Tue Apr 07 00:09:30.504437 2026] [:error] [pid 9442:tid 9452] [client 51.120.80.210:15866] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about3.php"] [unique_id "adPaukPsNnAJTnmz6sZ8RgAAAQg"]
[Tue Apr 07 00:09:31.431291 2026] [:error] [pid 35686:tid 35702] [client 51.120.80.210:15818] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about3.php"] [unique_id "adPau8MKdea6oORd2fwGbQAAAAY"]
[Tue Apr 07 00:09:32.353703 2026] [:error] [pid 9442:tid 9445] [client 51.120.80.210:15898] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about3.php"] [unique_id "adPavEPsNnAJTnmz6sZ8TgAAAQE"]
[Tue Apr 07 00:09:33.346989 2026] [:error] [pid 10280:tid 10296] [client 51.120.80.210:15984] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adPavV8QUJkf8g-BFfNYJAAAAc0"]
[Tue Apr 07 00:09:34.047665 2026] [:error] [pid 9413:tid 9426] [client 51.120.80.210:15765] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adPavnllvEK3chn01wHkzwAAAYs"]
[Tue Apr 07 00:09:34.701620 2026] [:error] [pid 9442:tid 9458] [client 51.120.80.210:15810] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adPavkPsNnAJTnmz6sZ8YwAAAQ4"]
[Tue Apr 07 00:09:35.666719 2026] [:error] [pid 35688:tid 35768] [client 51.120.80.210:15809] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adPav-Z85qg4jLsRpQwn_wAAAJI"]
[Tue Apr 07 00:09:36.213815 2026] [:error] [pid 38562:tid 38576] [client 51.120.80.210:15985] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "adPawKeD6Ohe6wzRuy7M9QAAAUs"]
[Tue Apr 07 00:09:36.854448 2026] [:error] [pid 9413:tid 9424] [client 51.120.80.210:15848] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "adPawHllvEK3chn01wHk1gAAAYk"]
[Tue Apr 07 00:09:37.419206 2026] [:error] [pid 35687:tid 35745] [client 51.120.80.210:15962] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "adPawZ3LtDozV0i8BiuUjwAAAFY"]
[Tue Apr 07 00:09:38.134701 2026] [:error] [pid 38562:tid 38575] [client 51.120.80.210:15845] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "adPawqeD6Ohe6wzRuy7M_gAAAUo"]
[Tue Apr 07 00:09:38.801882 2026] [:error] [pid 9442:tid 9466] [client 51.120.80.210:15867] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "adPawkPsNnAJTnmz6sZ8dgAAARY"]
[Tue Apr 07 00:09:39.772245 2026] [:error] [pid 35686:tid 35712] [client 51.120.80.210:15907] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "adPaw8MKdea6oORd2fwGdwAAABA"]
[Tue Apr 07 00:09:40.691172 2026] [:error] [pid 9442:tid 9451] [client 51.120.80.210:15943] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "adPaxEPsNnAJTnmz6sZ8hAAAAQc"]
[Tue Apr 07 00:09:41.669304 2026] [:error] [pid 9442:tid 9461] [client 51.120.80.210:15925] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "adPaxUPsNnAJTnmz6sZ8jwAAARE"]
[Tue Apr 07 00:09:42.420074 2026] [:error] [pid 9442:tid 9454] [client 51.120.80.210:15905] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "adPaxkPsNnAJTnmz6sZ8mQAAAQo"]
[Tue Apr 07 00:09:42.994070 2026] [:error] [pid 38562:tid 38569] [client 51.120.80.210:15769] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "adPaxqeD6Ohe6wzRuy7NCwAAAUQ"]
[Tue Apr 07 00:09:43.828269 2026] [:error] [pid 9442:tid 9446] [client 51.120.80.210:15832] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "adPax0PsNnAJTnmz6sZ8ngAAAQI"]
[Tue Apr 07 00:09:44.470415 2026] [:error] [pid 35686:tid 35711] [client 51.120.80.210:15930] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "adPayMMKdea6oORd2fwGewAAAA8"]
[Tue Apr 07 00:09:45.523330 2026] [:error] [pid 9442:tid 9459] [client 51.120.80.210:15780] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "adPayUPsNnAJTnmz6sZ8pAAAAQ8"]
[Tue Apr 07 00:09:46.184600 2026] [:error] [pid 1827:tid 1845] [client 51.120.80.210:15874] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "adPayuVeb6S_DnjZ2xFOOQAAAhA"]
[Tue Apr 07 00:09:47.043383 2026] [:error] [pid 9442:tid 9462] [client 51.120.80.210:15822] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Tue Apr 07 00:09:47.330033 2026] [:error] [pid 9442:tid 9460] [client 51.120.80.210:15822] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Apr 07 00:09:47.855517 2026] [:error] [pid 9442:tid 9465] [client 51.120.80.210:15822] [client 51.120.80.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adPay0PsNnAJTnmz6sZ8tgAAARU"]
[Tue Apr 07 00:09:50.265039 2026] [:error] [pid 38562:tid 38589] [client 51.120.80.210:15931] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue Apr 07 00:09:50.564641 2026] [:error] [pid 38562:tid 38587] [client 51.120.80.210:15931] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Tue Apr 07 00:09:51.374103 2026] [:error] [pid 38562:tid 38567] [client 51.120.80.210:15931] File does not exist: /usr/local/apache/htdocs/suspended-page/dlu.php
[Tue Apr 07 00:09:51.638588 2026] [:error] [pid 38562:tid 38580] [client 51.120.80.210:15931] File does not exist: /usr/local/apache/htdocs/suspended-page/555.php
[Tue Apr 07 00:09:51.905118 2026] [:error] [pid 38562:tid 38577] [client 51.120.80.210:15931] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Tue Apr 07 00:09:52.168263 2026] [:error] [pid 38562:tid 38578] [client 51.120.80.210:15931] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Tue Apr 07 00:09:52.427753 2026] [:error] [pid 38562:tid 38571] [client 51.120.80.210:15931] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "adPa0KeD6Ohe6wzRuy7NIwAAAUY"]
[Tue Apr 07 00:09:53.738856 2026] [:error] [pid 35688:tid 35750] [client 51.120.80.210:15851] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "adPa0eZ85qg4jLsRpQwoGwAAAIA"]
[Tue Apr 07 00:09:54.663093 2026] [:error] [pid 9442:tid 9449] [client 51.120.80.210:15812] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "adPa0kPsNnAJTnmz6sZ8wgAAAQU"]
[Tue Apr 07 00:09:56.185214 2026] [:error] [pid 38562:tid 38578] [client 51.120.80.210:15916] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "adPa1KeD6Ohe6wzRuy7NKwAAAU0"]
[Tue Apr 07 00:09:58.327075 2026] [:error] [pid 1827:tid 1832] [client 51.120.80.210:15827] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "adPa1uVeb6S_DnjZ2xFOUAAAAgM"]
[Tue Apr 07 00:09:59.641212 2026] [:error] [pid 1827:tid 1838] [client 51.120.80.210:15947] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "adPa1-Veb6S_DnjZ2xFOVAAAAgk"]
[Tue Apr 07 00:10:00.854113 2026] [:error] [pid 9442:tid 9453] [client 51.120.80.210:15773] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "adPa2EPsNnAJTnmz6sZ80gAAAQk"]
[Tue Apr 07 00:10:01.940531 2026] [:error] [pid 35688:tid 35753] [client 51.120.80.210:15744] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "adPa2eZ85qg4jLsRpQwoLwAAAIM"]
[Tue Apr 07 00:10:02.579286 2026] [:error] [pid 9413:tid 9421] [client 51.120.80.210:15748] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hook.php"] [unique_id "adPa2nllvEK3chn01wHk6gAAAYY"]
[Tue Apr 07 00:10:03.153122 2026] [:error] [pid 35688:tid 35759] [client 51.120.80.210:15856] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hook.php"] [unique_id "adPa2-Z85qg4jLsRpQwoMwAAAIk"]
[Tue Apr 07 00:10:03.877409 2026] [:error] [pid 9442:tid 9452] [client 51.120.80.210:15830] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hook.php"] [unique_id "adPa20PsNnAJTnmz6sZ83gAAAQg"]
[Tue Apr 07 00:10:04.521950 2026] [:error] [pid 35687:tid 35736] [client 51.120.80.210:15869] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hook.php"] [unique_id "adPa3J3LtDozV0i8BiuUoQAAAE0"]
[Tue Apr 07 00:10:05.464283 2026] [:error] [pid 9442:tid 9446] [client 51.120.80.210:15961] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "adPa3UPsNnAJTnmz6sZ84gAAAQI"]
[Tue Apr 07 00:10:06.183406 2026] [:error] [pid 10280:tid 10293] [client 51.120.80.210:15889] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "adPa3l8QUJkf8g-BFfNYRgAAAco"]
[Tue Apr 07 00:10:06.756304 2026] [:error] [pid 35688:tid 35765] [client 51.120.80.210:15746] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "adPa3uZ85qg4jLsRpQwoPAAAAI8"]
[Tue Apr 07 00:10:07.806701 2026] [:error] [pid 10280:tid 10307] [client 51.120.80.210:15904] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "adPa318QUJkf8g-BFfNYSQAAAdg"]
[Tue Apr 07 00:10:08.501684 2026] [:error] [pid 35688:tid 35774] [client 51.120.80.210:15937] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "adPa4OZ85qg4jLsRpQwoQgAAAJg"]
[Tue Apr 07 00:10:09.261220 2026] [:error] [pid 10280:tid 10306] [client 51.120.80.210:15811] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "adPa4V8QUJkf8g-BFfNYUAAAAdc"]
[Tue Apr 07 00:10:10.185954 2026] [:error] [pid 35687:tid 35744] [client 51.120.80.210:15835] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "adPa4p3LtDozV0i8BiuUqAAAAFU"]
[Tue Apr 07 00:10:11.642694 2026] [:error] [pid 9442:tid 9462] [client 51.120.80.210:15841] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "adPa40PsNnAJTnmz6sZ86QAAARI"]
[Tue Apr 07 00:10:12.906790 2026] [:error] [pid 9442:tid 9453] [client 51.120.80.210:10501] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "adPa5EPsNnAJTnmz6sZ87wAAAQk"]
[Tue Apr 07 00:10:14.150020 2026] [:error] [pid 1827:tid 1834] [client 51.120.80.210:15756] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "adPa5uVeb6S_DnjZ2xFOVwAAAgU"]
[Tue Apr 07 00:10:15.374475 2026] [:error] [pid 9442:tid 9449] [client 51.120.80.210:15864] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "adPa50PsNnAJTnmz6sZ8_QAAAQU"]
[Tue Apr 07 00:10:16.438380 2026] [:error] [pid 10280:tid 10288] [client 51.120.80.210:15934] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "adPa6F8QUJkf8g-BFfNYaAAAAcU"]
[Tue Apr 07 00:10:17.281808 2026] [:error] [pid 38562:tid 38567] [client 51.120.80.210:15833] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/te.php"] [unique_id "adPa6aeD6Ohe6wzRuy7NPQAAAUI"]
[Tue Apr 07 00:10:17.916730 2026] [:error] [pid 35687:tid 35745] [client 51.120.80.210:15855] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/te.php"] [unique_id "adPa6Z3LtDozV0i8BiuUrAAAAFY"]
[Tue Apr 07 00:10:18.538932 2026] [:error] [pid 9442:tid 9461] [client 51.120.80.210:15760] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/te.php"] [unique_id "adPa6kPsNnAJTnmz6sZ9BgAAARE"]
[Tue Apr 07 00:10:19.700844 2026] [:error] [pid 35786:tid 35812] [client 51.120.80.210:15847] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/te.php"] [unique_id "adPa62gkfCKTaLhwaKQ5GAAAANM"]
[Tue Apr 07 00:10:20.697318 2026] [:error] [pid 35687:tid 35742] [client 51.120.80.210:15920] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "adPa7J3LtDozV0i8BiuUrQAAAFM"]
[Tue Apr 07 00:10:22.101818 2026] [:error] [pid 9413:tid 9439] [client 51.120.80.210:15747] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "adPa7nllvEK3chn01wHk8AAAAZg"]
[Tue Apr 07 00:10:23.497875 2026] [:error] [pid 35688:tid 35751] [client 51.120.80.210:15853] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "adPa7-Z85qg4jLsRpQwoTwAAAIE"]
[Tue Apr 07 00:10:24.911952 2026] [:error] [pid 35786:tid 35817] [client 51.120.80.210:15802] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "adPa8GgkfCKTaLhwaKQ5HQAAANg"]
[Tue Apr 07 00:10:25.668638 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:15790] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "adPa8eZ85qg4jLsRpQwoVAAAAI0"]
[Tue Apr 07 00:10:26.592587 2026] [:error] [pid 35687:tid 35731] [client 51.120.80.210:15927] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "adPa8p3LtDozV0i8BiuUswAAAEg"]
[Tue Apr 07 00:10:27.611910 2026] [:error] [pid 10280:tid 10289] [client 51.120.80.210:15868] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "adPa818QUJkf8g-BFfNYjgAAAcY"]
[Tue Apr 07 00:10:28.477971 2026] [:error] [pid 35786:tid 35795] [client 51.120.80.210:15863] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "adPa9GgkfCKTaLhwaKQ5IwAAAMI"]
[Tue Apr 07 00:10:29.915203 2026] [:error] [pid 38562:tid 38587] [client 51.120.80.210:15854] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "adPa9aeD6Ohe6wzRuy7NTwAAAVY"]
[Tue Apr 07 00:10:31.147283 2026] [:error] [pid 35686:tid 35713] [client 51.120.80.210:15852] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "adPa98MKdea6oORd2fwGkwAAABE"]
[Tue Apr 07 00:10:31.882995 2026] [:error] [pid 35688:tid 35756] [client 51.120.80.210:10504] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "adPa9-Z85qg4jLsRpQwoXgAAAIY"]
[Tue Apr 07 00:10:32.774748 2026] [:error] [pid 9413:tid 9428] [client 51.120.80.210:15837] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "adPa-HllvEK3chn01wHk-wAAAY0"]
[Tue Apr 07 00:10:33.470906 2026] [:error] [pid 35786:tid 35798] [client 51.120.80.210:15923] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "adPa-WgkfCKTaLhwaKQ5JwAAAMU"]
[Tue Apr 07 00:10:34.123823 2026] [:error] [pid 35688:tid 35769] [client 51.120.80.210:15792] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "adPa-uZ85qg4jLsRpQwoZQAAAJM"]
[Tue Apr 07 00:10:35.660104 2026] [:error] [pid 9442:tid 9454] [client 51.120.80.210:10525] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "adPa-0PsNnAJTnmz6sZ9LwAAAQo"]
[Tue Apr 07 00:10:36.252192 2026] [:error] [pid 35687:tid 35729] [client 51.120.80.210:15761] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "adPa_J3LtDozV0i8BiuUuwAAAEY"]
[Tue Apr 07 00:10:37.269850 2026] [:error] [pid 38562:tid 38569] [client 51.120.80.210:15771] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "adPa_aeD6Ohe6wzRuy7NXwAAAUQ"]
[Tue Apr 07 00:10:38.882617 2026] [:error] [pid 9442:tid 9461] [client 51.120.80.210:15846] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "adPa_kPsNnAJTnmz6sZ9QAAAARE"]
[Tue Apr 07 00:10:40.036468 2026] [:error] [pid 9413:tid 9417] [client 51.120.80.210:15820] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "adPbAHllvEK3chn01wHlAQAAAYI"]
[Tue Apr 07 00:10:41.992769 2026] [:error] [pid 9442:tid 9459] [client 51.120.80.210:15801] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "adPbAUPsNnAJTnmz6sZ9VAAAAQ8"]
[Tue Apr 07 00:10:43.995691 2026] [:error] [pid 10280:tid 10285] [client 51.120.80.210:15787] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/manager.php"] [unique_id "adPbA18QUJkf8g-BFfNYtAAAAcI"]
[Tue Apr 07 00:10:45.077502 2026] [:error] [pid 1827:tid 1847] [client 51.120.80.210:15929] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/manager.php"] [unique_id "adPbBeVeb6S_DnjZ2xFObQAAAhI"]
[Tue Apr 07 00:10:46.172145 2026] [:error] [pid 35687:tid 35746] [client 51.120.80.210:15862] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/manager.php"] [unique_id "adPbBp3LtDozV0i8BiuUwgAAAFc"]
[Tue Apr 07 00:10:46.913012 2026] [:error] [pid 1827:tid 1853] [client 51.120.80.210:10531] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/manager.php"] [unique_id "adPbBuVeb6S_DnjZ2xFOcgAAAhg"]
[Tue Apr 07 00:10:47.916107 2026] [:error] [pid 35688:tid 35755] [client 51.120.80.210:15799] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "adPbB-Z85qg4jLsRpQwodQAAAIU"]
[Tue Apr 07 00:10:49.221526 2026] [:error] [pid 9413:tid 9421] [client 51.120.80.210:10524] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "adPbCXllvEK3chn01wHlCAAAAYY"]
[Tue Apr 07 00:10:50.040111 2026] [:error] [pid 35786:tid 35798] [client 51.120.80.210:15759] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "adPbCmgkfCKTaLhwaKQ5MwAAAMU"]
[Tue Apr 07 00:10:50.971244 2026] [:error] [pid 10280:tid 10289] [client 51.120.80.210:10521] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "adPbCl8QUJkf8g-BFfNYvwAAAcY"]
[Tue Apr 07 00:10:52.300908 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:15919] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Tue Apr 07 00:10:52.651461 2026] [:error] [pid 35688:tid 35770] [client 51.120.80.210:15919] File does not exist: /usr/local/apache/htdocs/suspended-page/v2.php
[Tue Apr 07 00:10:53.195110 2026] [:error] [pid 35688:tid 35764] [client 51.120.80.210:15919] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Apr 07 00:10:53.465178 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:15919] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue Apr 07 00:10:53.728953 2026] [:error] [pid 35688:tid 35769] [client 51.120.80.210:15919] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Tue Apr 07 00:10:54.119741 2026] [:error] [pid 35688:tid 35768] [client 51.120.80.210:15919] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Tue Apr 07 00:10:54.383721 2026] [:error] [pid 35688:tid 35774] [client 51.120.80.210:15919] File does not exist: /usr/local/apache/htdocs/suspended-page/mo.php
[Tue Apr 07 00:10:54.646746 2026] [:error] [pid 35688:tid 35771] [client 51.120.80.210:15919] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 07 00:10:54.908029 2026] [:error] [pid 35688:tid 35764] [client 51.120.80.210:15919] File does not exist: /usr/local/apache/htdocs/suspended-page/inde.php
[Tue Apr 07 00:10:55.309430 2026] [:error] [pid 35688:tid 35756] [client 51.120.80.210:15919] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Apr 07 00:10:55.715808 2026] [:error] [pid 35688:tid 35750] [client 51.120.80.210:15919] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "adPbD-Z85qg4jLsRpQwomgAAAIA"]
[Tue Apr 07 00:10:56.969228 2026] [:error] [pid 35686:tid 35700] [client 51.120.80.210:15749] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "adPbEMMKdea6oORd2fwGqgAAAAQ"]
[Tue Apr 07 00:10:58.363908 2026] [:error] [pid 38562:tid 38585] [client 51.120.80.210:15763] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "adPbEqeD6Ohe6wzRuy7NawAAAVQ"]
[Tue Apr 07 00:10:59.488718 2026] [:error] [pid 1827:tid 1845] [client 51.120.80.210:15775] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "adPbE-Veb6S_DnjZ2xFOfQAAAhA"]
[Tue Apr 07 00:11:00.108491 2026] [:error] [pid 9442:tid 9462] [client 51.120.80.210:15860] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "adPbFEPsNnAJTnmz6sZ9dAAAARI"]
[Tue Apr 07 00:11:01.492112 2026] [:error] [pid 9442:tid 9444] [client 51.120.80.210:10547] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "adPbFUPsNnAJTnmz6sZ9egAAAQA"]
[Tue Apr 07 00:11:02.691682 2026] [:error] [pid 35688:tid 35766] [client 51.120.80.210:15752] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "adPbFuZ85qg4jLsRpQwonAAAAJA"]
[Tue Apr 07 00:11:03.575671 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:15766] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "adPbF-Z85qg4jLsRpQwopQAAAIg"]
[Tue Apr 07 00:11:04.525423 2026] [:error] [pid 9442:tid 9464] [client 51.120.80.210:15803] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "adPbGEPsNnAJTnmz6sZ9gwAAARQ"]
[Tue Apr 07 00:11:05.281518 2026] [:error] [pid 10280:tid 10299] [client 51.120.80.210:15804] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "adPbGV8QUJkf8g-BFfNY2wAAAdA"]
[Tue Apr 07 00:11:06.313622 2026] [:error] [pid 9442:tid 9449] [client 51.120.80.210:15815] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "adPbGkPsNnAJTnmz6sZ9iwAAAQU"]
[Tue Apr 07 00:11:07.193594 2026] [:error] [pid 1827:tid 1852] [client 51.120.80.210:15786] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "adPbG-Veb6S_DnjZ2xFOggAAAhc"]
[Tue Apr 07 00:11:07.904457 2026] [:error] [pid 10280:tid 10284] [client 51.120.80.210:15767] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "adPbG18QUJkf8g-BFfNY4QAAAcE"]
[Tue Apr 07 00:11:09.236742 2026] [:error] [pid 1827:tid 1839] [client 51.120.80.210:15783] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "adPbHeVeb6S_DnjZ2xFOhAAAAgo"]
[Tue Apr 07 00:11:10.640162 2026] [:error] [pid 35687:tid 35740] [client 51.120.80.210:15688] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "adPbHp3LtDozV0i8BiuU0gAAAFE"]
[Tue Apr 07 00:11:11.616851 2026] [:error] [pid 1827:tid 1842] [client 51.120.80.210:15870] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "adPbH-Veb6S_DnjZ2xFOigAAAg0"]
[Tue Apr 07 00:11:12.602763 2026] [:error] [pid 35686:tid 35701] [client 51.120.80.210:10549] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "adPbIMMKdea6oORd2fwGtQAAAAU"]
[Tue Apr 07 00:11:13.493943 2026] [:error] [pid 35686:tid 35717] [client 51.120.80.210:15784] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "adPbIcMKdea6oORd2fwGugAAABU"]
[Tue Apr 07 00:11:14.495598 2026] [:error] [pid 9442:tid 9448] [client 51.120.80.210:10500] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "adPbIkPsNnAJTnmz6sZ9pgAAAQQ"]
[Tue Apr 07 00:11:15.257503 2026] [:error] [pid 9413:tid 9435] [client 51.120.80.210:10530] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "adPbI3llvEK3chn01wHlFgAAAZQ"]
[Tue Apr 07 00:11:15.799553 2026] [:error] [pid 35786:tid 35810] [client 51.120.80.210:15789] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wolv2.php"] [unique_id "adPbI2gkfCKTaLhwaKQ5PwAAANE"]
[Tue Apr 07 00:11:16.410439 2026] [:error] [pid 35687:tid 35730] [client 51.120.80.210:15750] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wolv2.php"] [unique_id "adPbJJ3LtDozV0i8BiuU1QAAAEc"]
[Tue Apr 07 00:11:17.110433 2026] [:error] [pid 35688:tid 35768] [client 51.120.80.210:15798] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wolv2.php"] [unique_id "adPbJeZ85qg4jLsRpQworwAAAJI"]
[Tue Apr 07 00:11:17.672996 2026] [:error] [pid 9442:tid 9462] [client 51.120.80.210:15886] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wolv2.php"] [unique_id "adPbJUPsNnAJTnmz6sZ9sQAAARI"]
[Tue Apr 07 00:11:18.557727 2026] [:error] [pid 9442:tid 9444] [client 51.120.80.210:10505] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/geck.php"] [unique_id "adPbJkPsNnAJTnmz6sZ9uAAAAQA"]
[Tue Apr 07 00:11:19.638357 2026] [:error] [pid 35786:tid 35794] [client 51.120.80.210:15857] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/geck.php"] [unique_id "adPbJ2gkfCKTaLhwaKQ5QgAAAME"]
[Tue Apr 07 00:11:20.691399 2026] [:error] [pid 35786:tid 35799] [client 51.120.80.210:15849] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/geck.php"] [unique_id "adPbKGgkfCKTaLhwaKQ5QwAAAMY"]
[Tue Apr 07 00:11:21.601873 2026] [:error] [pid 10280:tid 10305] [client 51.120.80.210:15797] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/geck.php"] [unique_id "adPbKV8QUJkf8g-BFfNY8gAAAdY"]
[Tue Apr 07 00:11:22.678271 2026] [:error] [pid 10280:tid 10294] [client 51.120.80.210:15751] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xtt.php"] [unique_id "adPbKl8QUJkf8g-BFfNY8wAAAcs"]
[Tue Apr 07 00:11:23.351669 2026] [:error] [pid 10280:tid 10299] [client 51.120.80.210:10514] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xtt.php"] [unique_id "adPbK18QUJkf8g-BFfNY9wAAAdA"]
[Tue Apr 07 00:11:23.962465 2026] [:error] [pid 35688:tid 35769] [client 51.120.80.210:10507] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xtt.php"] [unique_id "adPbK-Z85qg4jLsRpQwovwAAAJM"]
[Tue Apr 07 00:11:24.578868 2026] [:error] [pid 1827:tid 1831] [client 51.120.80.210:15795] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xtt.php"] [unique_id "adPbLOVeb6S_DnjZ2xFOmgAAAgI"]
[Tue Apr 07 00:11:25.163009 2026] [:error] [pid 38562:tid 38582] [client 51.120.80.210:15791] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "adPbLaeD6Ohe6wzRuy7NkgAAAVE"]
[Tue Apr 07 00:11:25.879738 2026] [:error] [pid 10280:tid 10285] [client 51.120.80.210:10509] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "adPbLV8QUJkf8g-BFfNY-gAAAcI"]
[Tue Apr 07 00:11:26.788083 2026] [:error] [pid 35686:tid 35705] [client 51.120.80.210:10508] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "adPbLsMKdea6oORd2fwG2AAAAAk"]
[Tue Apr 07 00:11:27.979323 2026] [:error] [pid 35688:tid 35771] [client 51.120.80.210:15680] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "adPbL-Z85qg4jLsRpQwo1wAAAJU"]
[Tue Apr 07 00:11:29.709771 2026] [:error] [pid 1827:tid 1835] [client 51.120.80.210:10559] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/system.php"] [unique_id "adPbMeVeb6S_DnjZ2xFOoAAAAgY"]
[Tue Apr 07 00:11:30.501072 2026] [:error] [pid 35688:tid 35765] [client 51.120.80.210:15861] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/system.php"] [unique_id "adPbMuZ85qg4jLsRpQwo5gAAAI8"]
[Tue Apr 07 00:11:31.332504 2026] [:error] [pid 1827:tid 1845] [client 51.120.80.210:10548] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/system.php"] [unique_id "adPbM-Veb6S_DnjZ2xFOpAAAAhA"]
[Tue Apr 07 00:11:32.177832 2026] [:error] [pid 38562:tid 38565] [client 51.120.80.210:15779] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/system.php"] [unique_id "adPbNKeD6Ohe6wzRuy7NmgAAAUA"]
[Tue Apr 07 00:11:33.006739 2026] [:error] [pid 10280:tid 10302] [client 51.120.80.210:10506] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "adPbNV8QUJkf8g-BFfNZBQAAAdM"]
[Tue Apr 07 00:11:33.626475 2026] [:error] [pid 35688:tid 35765] [client 51.120.80.210:15768] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "adPbNeZ85qg4jLsRpQwo8QAAAI8"]
[Tue Apr 07 00:11:34.170212 2026] [:error] [pid 10280:tid 10296] [client 51.120.80.210:15754] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "adPbNl8QUJkf8g-BFfNZCAAAAc0"]
[Tue Apr 07 00:11:34.764949 2026] [:error] [pid 35687:tid 35745] [client 51.120.80.210:10532] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/manager.php"] [unique_id "adPbNp3LtDozV0i8BiuU4wAAAFY"]
[Tue Apr 07 00:11:35.720250 2026] [:error] [pid 9413:tid 9425] [client 51.120.80.210:10502] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gdn.php"] [unique_id "adPbN3llvEK3chn01wHlKAAAAYo"]
[Tue Apr 07 00:11:36.333117 2026] [:error] [pid 10280:tid 10300] [client 51.120.80.210:10517] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gdn.php"] [unique_id "adPbOF8QUJkf8g-BFfNZDAAAAdE"]
[Tue Apr 07 00:11:36.983556 2026] [:error] [pid 35688:tid 35752] [client 51.120.80.210:15793] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gdn.php"] [unique_id "adPbOOZ85qg4jLsRpQwo-QAAAII"]
[Tue Apr 07 00:11:37.587875 2026] [:error] [pid 35688:tid 35760] [client 51.120.80.210:10503] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gdn.php"] [unique_id "adPbOeZ85qg4jLsRpQwo_AAAAIo"]
[Tue Apr 07 00:11:38.199359 2026] [:error] [pid 9442:tid 9467] [client 51.120.80.210:10515] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ton.php"] [unique_id "adPbOkPsNnAJTnmz6sZ9xQAAARc"]
[Tue Apr 07 00:11:38.833611 2026] [:error] [pid 1827:tid 1849] [client 51.120.80.210:15831] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ton.php"] [unique_id "adPbOuVeb6S_DnjZ2xFOvAAAAhQ"]
[Tue Apr 07 00:11:39.367317 2026] [:error] [pid 35688:tid 35774] [client 51.120.80.210:15836] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ton.php"] [unique_id "adPbO-Z85qg4jLsRpQwpAAAAAJg"]
[Tue Apr 07 00:11:40.007717 2026] [:error] [pid 10280:tid 10301] [client 51.120.80.210:10519] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ton.php"] [unique_id "adPbPF8QUJkf8g-BFfNZIQAAAdI"]
[Tue Apr 07 00:11:40.757454 2026] [:error] [pid 10280:tid 10295] [client 51.120.80.210:15686] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/media.php"] [unique_id "adPbPF8QUJkf8g-BFfNZIgAAAcw"]
[Tue Apr 07 00:11:41.342035 2026] [:error] [pid 1827:tid 1830] [client 51.120.80.210:15800] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/media.php"] [unique_id "adPbPeVeb6S_DnjZ2xFOvwAAAgE"]
[Tue Apr 07 00:11:41.917352 2026] [:error] [pid 1827:tid 1829] [client 51.120.80.210:15917] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/media.php"] [unique_id "adPbPeVeb6S_DnjZ2xFOwAAAAgA"]
[Tue Apr 07 00:11:42.455692 2026] [:error] [pid 10280:tid 10302] [client 51.120.80.210:10516] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/media.php"] [unique_id "adPbPl8QUJkf8g-BFfNZJAAAAdM"]
[Tue Apr 07 00:11:43.470408 2026] [:error] [pid 35786:tid 35804] [client 51.120.80.210:15691] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adPbP2gkfCKTaLhwaKQ5TQAAAMs"]
[Tue Apr 07 00:11:44.107782 2026] [:error] [pid 38562:tid 38574] [client 51.120.80.210:10511] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adPbQKeD6Ohe6wzRuy7NqAAAAUk"]
[Tue Apr 07 00:11:44.791936 2026] [:error] [pid 38562:tid 38576] [client 51.120.80.210:15699] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adPbQKeD6Ohe6wzRuy7NrwAAAUs"]
[Tue Apr 07 00:11:45.406753 2026] [:error] [pid 1827:tid 1839] [client 51.120.80.210:10534] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "adPbQeVeb6S_DnjZ2xFOxQAAAgo"]
[Tue Apr 07 00:11:46.047885 2026] [:error] [pid 38562:tid 38573] [client 51.120.80.210:10550] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "adPbQqeD6Ohe6wzRuy7NswAAAUg"]
[Tue Apr 07 00:11:46.853301 2026] [:error] [pid 35687:tid 35739] [client 51.120.80.210:10529] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "adPbQp3LtDozV0i8BiuU6wAAAFA"]
[Tue Apr 07 00:11:47.497705 2026] [:error] [pid 35688:tid 35774] [client 51.120.80.210:15806] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "adPbQ-Z85qg4jLsRpQwpGQAAAJg"]
[Tue Apr 07 00:11:48.232735 2026] [:error] [pid 9442:tid 9449] [client 51.120.80.210:15774] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admir.php"] [unique_id "adPbREPsNnAJTnmz6sZ91QAAAQU"]
[Tue Apr 07 00:11:48.921001 2026] [:error] [pid 9442:tid 9458] [client 51.120.80.210:15782] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "adPbREPsNnAJTnmz6sZ92AAAAQ4"]
[Tue Apr 07 00:11:49.502932 2026] [:error] [pid 35686:tid 35719] [client 51.120.80.210:15778] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "adPbRcMKdea6oORd2fwG9gAAABc"]
[Tue Apr 07 00:11:51.371842 2026] [:error] [pid 9442:tid 9462] [client 51.120.80.210:10536] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "adPbR0PsNnAJTnmz6sZ93QAAARI"]
[Tue Apr 07 00:11:52.308582 2026] [:error] [pid 38562:tid 38569] [client 51.120.80.210:10513] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "adPbSKeD6Ohe6wzRuy7NvQAAAUQ"]
[Tue Apr 07 00:11:52.948753 2026] [:error] [pid 38562:tid 38586] [client 51.120.80.210:10497] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "adPbSKeD6Ohe6wzRuy7NwQAAAVU"]
[Tue Apr 07 00:11:53.720563 2026] [:error] [pid 35786:tid 35798] [client 51.120.80.210:15733] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "adPbSWgkfCKTaLhwaKQ5UAAAAMU"]
[Tue Apr 07 00:11:54.257560 2026] [:error] [pid 1827:tid 1845] [client 51.120.80.210:15735] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "adPbSuVeb6S_DnjZ2xFOywAAAhA"]
[Tue Apr 07 00:11:54.834333 2026] [:error] [pid 9413:tid 9415] [client 51.120.80.210:15689] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "adPbSnllvEK3chn01wHlOgAAAYA"]
[Tue Apr 07 00:11:55.717418 2026] [:error] [pid 1827:tid 1834] [client 51.120.80.210:15796] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Tue Apr 07 00:11:55.982081 2026] [:error] [pid 1827:tid 1840] [client 51.120.80.210:15796] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Tue Apr 07 00:11:56.247692 2026] [:error] [pid 1827:tid 1838] [client 51.120.80.210:15796] File does not exist: /usr/local/apache/htdocs/suspended-page/lo.php
[Tue Apr 07 00:11:56.510400 2026] [:error] [pid 1827:tid 1853] [client 51.120.80.210:15796] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Tue Apr 07 00:11:56.772329 2026] [:error] [pid 1827:tid 1846] [client 51.120.80.210:15796] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Tue Apr 07 00:11:57.301347 2026] [:error] [pid 1827:tid 1842] [client 51.120.80.210:15796] File does not exist: /usr/local/apache/htdocs/suspended-page/lmutxdvyp7u5yksqke8ozbjgCdefault.php
[Tue Apr 07 00:11:57.564286 2026] [:error] [pid 1827:tid 1836] [client 51.120.80.210:15796] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Tue Apr 07 00:11:57.826736 2026] [:error] [pid 1827:tid 1834] [client 51.120.80.210:15796] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Tue Apr 07 00:11:58.089061 2026] [:error] [pid 1827:tid 1841] [client 51.120.80.210:15796] File does not exist: /usr/local/apache/htdocs/suspended-page/yas.php
[Tue Apr 07 00:11:58.349618 2026] [:error] [pid 1827:tid 1840] [client 51.120.80.210:15796] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "adPbTuVeb6S_DnjZ2xFO4wAAAgs"]
[Tue Apr 07 00:11:59.264043 2026] [:error] [pid 35688:tid 35771] [client 51.120.80.210:10553] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "adPbT-Z85qg4jLsRpQwpLgAAAJU"]
[Tue Apr 07 00:12:00.036447 2026] [:error] [pid 9442:tid 9460] [client 51.120.80.210:15865] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "adPbUEPsNnAJTnmz6sZ97QAAARA"]
[Tue Apr 07 00:12:00.769006 2026] [:error] [pid 9413:tid 9417] [client 51.120.80.210:15992] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "adPbUHllvEK3chn01wHlQAAAAYI"]
[Tue Apr 07 00:12:01.463750 2026] [:error] [pid 35688:tid 35768] [client 51.120.80.210:10522] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "adPbUeZ85qg4jLsRpQwpMgAAAJI"]
[Tue Apr 07 00:12:02.102712 2026] [:error] [pid 35688:tid 35774] [client 51.120.80.210:15956] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "adPbUuZ85qg4jLsRpQwpNAAAAJg"]
[Tue Apr 07 00:12:02.824169 2026] [:error] [pid 38562:tid 38572] [client 51.120.80.210:15682] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "adPbUqeD6Ohe6wzRuy7N1AAAAUc"]
[Tue Apr 07 00:12:03.470503 2026] [:error] [pid 38562:tid 38570] [client 51.120.80.210:10523] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "adPbU6eD6Ohe6wzRuy7N2QAAAUU"]
[Tue Apr 07 00:12:04.145571 2026] [:error] [pid 10280:tid 10294] [client 51.120.80.210:15711] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adPbVF8QUJkf8g-BFfNZMAAAAcs"]
[Tue Apr 07 00:12:04.841672 2026] [:error] [pid 35688:tid 35753] [client 51.120.80.210:15690] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adPbVOZ85qg4jLsRpQwpRwAAAIM"]
[Tue Apr 07 00:12:05.750144 2026] [:error] [pid 9442:tid 9444] [client 51.120.80.210:15713] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adPbVUPsNnAJTnmz6sZ-BQAAAQA"]
[Tue Apr 07 00:12:06.492497 2026] [:error] [pid 35687:tid 35724] [client 51.120.80.210:10543] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "adPbVp3LtDozV0i8BiuU_wAAAEE"]
[Tue Apr 07 00:12:07.153464 2026] [:error] [pid 35687:tid 35744] [client 51.120.80.210:15892] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "adPbV53LtDozV0i8BiuVBQAAAFU"]
[Tue Apr 07 00:12:08.192813 2026] [:error] [pid 38562:tid 38569] [client 51.120.80.210:10496] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "adPbWKeD6Ohe6wzRuy7N5AAAAUQ"]
[Tue Apr 07 00:12:08.846437 2026] [:error] [pid 10280:tid 10291] [client 51.120.80.210:15701] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "adPbWF8QUJkf8g-BFfNZMwAAAcg"]
[Tue Apr 07 00:12:09.506545 2026] [:error] [pid 10280:tid 10307] [client 51.120.80.210:15858] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "adPbWV8QUJkf8g-BFfNZOQAAAdg"]
[Tue Apr 07 00:12:10.287118 2026] [:error] [pid 38562:tid 38567] [client 51.120.80.210:15994] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adPbWqeD6Ohe6wzRuy7N6gAAAUI"]
[Tue Apr 07 00:12:10.971921 2026] [:error] [pid 1827:tid 1832] [client 51.120.80.210:15949] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adPbWuVeb6S_DnjZ2xFO6gAAAgM"]
[Tue Apr 07 00:12:11.913188 2026] [:error] [pid 1827:tid 1849] [client 51.120.80.210:15718] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adPbW-Veb6S_DnjZ2xFO6wAAAhQ"]
[Tue Apr 07 00:12:13.540786 2026] [:error] [pid 35686:tid 35701] [client 51.120.80.210:15719] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "adPbXcMKdea6oORd2fwHEAAAAAU"]
[Tue Apr 07 00:12:15.331097 2026] [:error] [pid 9442:tid 9451] [client 51.120.80.210:15885] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/himu.php"] [unique_id "adPbX0PsNnAJTnmz6sZ-IgAAAQc"]
[Tue Apr 07 00:12:16.185006 2026] [:error] [pid 9442:tid 9467] [client 51.120.80.210:15781] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/himu.php"] [unique_id "adPbYEPsNnAJTnmz6sZ-KQAAARc"]
[Tue Apr 07 00:12:17.459126 2026] [:error] [pid 35686:tid 35698] [client 51.120.80.210:10554] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/himu.php"] [unique_id "adPbYcMKdea6oORd2fwHEQAAAAI"]
[Tue Apr 07 00:12:18.557358 2026] [:error] [pid 10280:tid 10306] [client 51.120.80.210:15720] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/himu.php"] [unique_id "adPbYl8QUJkf8g-BFfNZVAAAAdc"]
[Tue Apr 07 00:12:19.128796 2026] [:error] [pid 35686:tid 35697] [client 51.120.80.210:10539] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "adPbY8MKdea6oORd2fwHFAAAAAE"]
[Tue Apr 07 00:12:19.812364 2026] [:error] [pid 9442:tid 9446] [client 51.120.80.210:15703] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "adPbY0PsNnAJTnmz6sZ-PAAAAQI"]
[Tue Apr 07 00:12:20.803990 2026] [:error] [pid 35686:tid 35719] [client 51.120.80.210:15717] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "adPbZMMKdea6oORd2fwHGAAAABc"]
[Tue Apr 07 00:12:21.500185 2026] [:error] [pid 9442:tid 9453] [client 51.120.80.210:15692] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "adPbZUPsNnAJTnmz6sZ-SAAAAQk"]
[Tue Apr 07 00:12:22.139109 2026] [:error] [pid 35786:tid 35815] [client 51.120.80.210:15958] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "adPbZmgkfCKTaLhwaKQ5WgAAANY"]
[Tue Apr 07 00:12:22.741354 2026] [:error] [pid 35688:tid 35760] [client 51.120.80.210:15691] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "adPbZuZ85qg4jLsRpQwpXwAAAIo"]
[Tue Apr 07 00:12:23.308037 2026] [:error] [pid 9442:tid 9451] [client 51.120.80.210:15988] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "adPbZ0PsNnAJTnmz6sZ-TAAAAQc"]
[Tue Apr 07 00:12:23.948189 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:15883] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "adPbZ-Z85qg4jLsRpQwpZgAAAI0"]
[Tue Apr 07 00:12:24.554572 2026] [:error] [pid 35688:tid 35758] [client 51.120.80.210:15794] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "adPbaOZ85qg4jLsRpQwpawAAAIg"]
[Tue Apr 07 00:12:25.445740 2026] [:error] [pid 9442:tid 9462] [client 51.120.80.210:15913] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "adPbaUPsNnAJTnmz6sZ-VQAAARI"]
[Tue Apr 07 00:12:26.143171 2026] [:error] [pid 9442:tid 9466] [client 51.120.80.210:15980] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "adPbakPsNnAJTnmz6sZ-WgAAARY"]
[Tue Apr 07 00:12:27.323353 2026] [:error] [pid 35688:tid 35757] [client 51.120.80.210:10498] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "adPba-Z85qg4jLsRpQwpcQAAAIc"]
[Tue Apr 07 00:12:28.137752 2026] [:error] [pid 35688:tid 35763] [client 51.120.80.210:15935] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "adPbbOZ85qg4jLsRpQwpdgAAAI0"]
[Tue Apr 07 00:12:28.762586 2026] [:error] [pid 35687:tid 35734] [client 51.120.80.210:15882] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "adPbbJ3LtDozV0i8BiuVFgAAAEs"]
[Tue Apr 07 00:12:29.338140 2026] [:error] [pid 35688:tid 35772] [client 51.120.80.210:15764] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "adPbbeZ85qg4jLsRpQwpegAAAJY"]
[Tue Apr 07 00:12:30.162454 2026] [:error] [pid 9442:tid 9455] [client 51.120.80.210:15709] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "adPbbkPsNnAJTnmz6sZ-YQAAAQs"]
[Tue Apr 07 00:12:31.010456 2026] [:error] [pid 35686:tid 35718] [client 51.120.80.210:15959] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m.php"] [unique_id "adPbb8MKdea6oORd2fwHKAAAABY"]
[Tue Apr 07 00:12:31.933297 2026] [:error] [pid 9413:tid 9425] [client 51.120.80.210:15704] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m.php"] [unique_id "adPbb3llvEK3chn01wHlSQAAAYo"]
[Tue Apr 07 00:12:32.753999 2026] [:error] [pid 35686:tid 35698] [client 51.120.80.210:15729] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m.php"] [unique_id "adPbcMMKdea6oORd2fwHMQAAAAI"]
[Tue Apr 07 00:12:33.722013 2026] [:error] [pid 38562:tid 38588] [client 51.120.80.210:15999] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m.php"] [unique_id "adPbcaeD6Ohe6wzRuy7OAQAAAVc"]
[Tue Apr 07 00:12:34.566494 2026] [:error] [pid 9442:tid 9464] [client 51.120.80.210:15955] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-is.php"] [unique_id "adPbckPsNnAJTnmz6sZ-awAAARQ"]
[Tue Apr 07 00:12:35.369025 2026] [:error] [pid 1827:tid 1844] [client 51.120.80.210:15987] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-is.php"] [unique_id "adPbc-Veb6S_DnjZ2xFO-wAAAg8"]
[Tue Apr 07 00:12:36.125343 2026] [:error] [pid 9442:tid 9461] [client 51.120.80.210:15712] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-is.php"] [unique_id "adPbdEPsNnAJTnmz6sZ-cwAAARE"]
[Tue Apr 07 00:12:37.465834 2026] [:error] [pid 38562:tid 38574] [client 51.120.80.210:15776] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-is.php"] [unique_id "adPbdaeD6Ohe6wzRuy7OBwAAAUk"]
[Tue Apr 07 00:12:38.889108 2026] [:error] [pid 9413:tid 9434] [client 51.120.80.210:15875] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file15.php"] [unique_id "adPbdnllvEK3chn01wHlTQAAAZM"]
[Tue Apr 07 00:12:40.362336 2026] [:error] [pid 35686:tid 35715] [client 51.120.80.210:15739] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file15.php"] [unique_id "adPbeMMKdea6oORd2fwHOAAAABM"]
[Tue Apr 07 00:12:41.996099 2026] [:error] [pid 35686:tid 35716] [client 51.120.80.210:15888] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file15.php"] [unique_id "adPbecMKdea6oORd2fwHOQAAABQ"]
[Tue Apr 07 00:12:44.522526 2026] [:error] [pid 9413:tid 9416] [client 51.120.80.210:15977] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file15.php"] [unique_id "adPbfHllvEK3chn01wHlTwAAAYE"]
[Tue Apr 07 00:12:46.216900 2026] [:error] [pid 1827:tid 1845] [client 51.120.80.210:15693] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "adPbfuVeb6S_DnjZ2xFPBwAAAhA"]
[Tue Apr 07 00:12:47.533623 2026] [:error] [pid 1827:tid 1842] [client 51.120.80.210:10538] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "adPbf-Veb6S_DnjZ2xFPCQAAAg0"]
[Tue Apr 07 00:12:48.415699 2026] [:error] [pid 35686:tid 35697] [client 51.120.80.210:15983] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "adPbgMMKdea6oORd2fwHSgAAAAE"]
[Tue Apr 07 00:12:49.097797 2026] [:error] [pid 35686:tid 35715] [client 51.120.80.210:15996] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "adPbgcMKdea6oORd2fwHTgAAABM"]
[Tue Apr 07 00:12:51.205748 2026] [:error] [pid 9413:tid 9438] [client 51.120.80.210:15967] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "adPbg3llvEK3chn01wHlUAAAAZc"]
[Tue Apr 07 00:12:52.527489 2026] [:error] [pid 9413:tid 9433] [client 51.120.80.210:15969] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "adPbhHllvEK3chn01wHlVAAAAZI"]
[Tue Apr 07 00:12:53.349853 2026] [:error] [pid 35786:tid 35811] [client 51.120.80.210:15939] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "adPbhWgkfCKTaLhwaKQ5bAAAANI"]
[Tue Apr 07 00:12:54.464182 2026] [:error] [pid 35688:tid 35754] [client 51.120.80.210:15918] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "adPbhuZ85qg4jLsRpQwpmgAAAIQ"]
[Tue Apr 07 00:12:56.590166 2026] [:error] [pid 38562:tid 38567] [client 51.120.80.210:10551] [client 51.120.80.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/an.php"] [unique_id "adPbiKeD6Ohe6wzRuy7OFgAAAUI"]
[Tue Apr 07 00:12:58.080142 2026] [:error] [pid 9442:tid 9462] [client 51.120.80.210:15823] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue Apr 07 00:12:58.346118 2026] [:error] [pid 9442:tid 9457] [client 51.120.80.210:15823] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Tue Apr 07 00:12:58.636018 2026] [:error] [pid 9442:tid 9466] [client 51.120.80.210:15823] File does not exist: /usr/local/apache/htdocs/suspended-page/lol.php
[Tue Apr 07 00:12:58.902970 2026] [:error] [pid 9442:tid 9465] [client 51.120.80.210:15823] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue Apr 07 10:56:55.031894 2026] [:error] [pid 12948:tid 12956] [client 217.216.72.68:52627] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "adRyd8beSPAN8LvMqsY2xgAAAQU"]
[Tue Apr 07 10:56:55.144705 2026] [:error] [pid 12948:tid 12959] [client 217.216.72.68:52634] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/"] [unique_id "adRyd8beSPAN8LvMqsY2yAAAAQg"]
[Tue Apr 07 10:57:05.626835 2026] [:error] [pid 37719:tid 37740] [client 217.216.72.68:53315] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "adRygU09Xv52u2xXGLDvZQAAANI"]
[Tue Apr 07 10:57:05.745967 2026] [:error] [pid 37719:tid 37728] [client 217.216.72.68:53314] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adRygU09Xv52u2xXGLDvbQAAAMY"]
[Tue Apr 07 10:57:16.396218 2026] [:error] [pid 37598:tid 37683] [client 217.216.72.68:60652] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/"] [unique_id "adRyjO9g7q_cV2WhPawTmQAAAJY"]
[Tue Apr 07 10:57:16.599812 2026] [:error] [pid 59490:tid 59497] [client 217.216.72.68:60773] [client 217.216.72.68] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.html"] [unique_id "adRyjEcw8OFbiUZ7Rx0SFwAAAUU"]
[Tue Apr 07 14:08:29.517368 2026] [:error] [pid 37719:tid 37742] [client 138.84.78.190:30607] [client 138.84.78.190] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.84.78.190, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adSfXU09Xv52u2xXGLBDbwAAANQ"]
[Tue Apr 07 14:08:29.525886 2026] [:error] [pid 37719:tid 37742] [client 138.84.78.190:30607] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 07 18:03:30.685626 2026] [:error] [pid 12948:tid 12974] [client 159.89.55.133:52942] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "adTWcsbeSPAN8LvMqsaOtgAAARc"]
[Tue Apr 07 19:48:38.826599 2026] [:error] [pid 37719:tid 37744] [client 34.247.86.177:55038] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "adTvFk09Xv52u2xXGLAIcwAAANY"]
[Tue Apr 07 19:48:39.860557 2026] [:error] [pid 12948:tid 12972] [client 34.247.86.177:55054] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "adTvF8beSPAN8LvMqsanZQAAARU"]
[Tue Apr 07 19:48:40.880831 2026] [:error] [pid 37719:tid 37742] [client 34.247.86.177:55068] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "adTvGE09Xv52u2xXGLAIeQAAANQ"]
[Tue Apr 07 19:48:41.901670 2026] [:error] [pid 12948:tid 12953] [client 34.247.86.177:55070] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "adTvGcbeSPAN8LvMqsanaQAAAQI"]
[Tue Apr 07 19:48:42.929373 2026] [:error] [pid 37598:tid 37675] [client 34.247.86.177:55074] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "adTvGu9g7q_cV2WhPayvJAAAAI4"]
[Tue Apr 07 19:48:43.961991 2026] [:error] [pid 37597:tid 37650] [client 34.247.86.177:55080] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "adTvGw6uAY0QAy-8EEJfbgAAAFA"]
[Tue Apr 07 19:48:44.981896 2026] [:error] [pid 12948:tid 12966] [client 34.247.86.177:55092] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.remote"] [unique_id "adTvHMbeSPAN8LvMqsanbQAAAQ8"]
[Tue Apr 07 19:48:46.001498 2026] [:error] [pid 37719:tid 37722] [client 34.247.86.177:52626] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "adTvHk09Xv52u2xXGLAIfwAAAMA"]
[Tue Apr 07 19:48:47.039290 2026] [:error] [pid 37597:tid 37635] [client 34.247.86.177:52632] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "adTvHw6uAY0QAy-8EEJfgAAAAEE"]
[Tue Apr 07 19:48:48.076625 2026] [:error] [pid 59551:tid 59575] [client 34.247.86.177:52640] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "adTvIF7LN7Ubyqs-sVv7EwAAAZY"]
[Tue Apr 07 19:48:49.108622 2026] [:error] [pid 37719:tid 37744] [client 34.247.86.177:52646] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "adTvIU09Xv52u2xXGLAIhwAAANY"]
[Tue Apr 07 19:48:50.135709 2026] [:error] [pid 59551:tid 59557] [client 34.247.86.177:52656] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.sample"] [unique_id "adTvIl7LN7Ubyqs-sVv7GQAAAYQ"]
[Tue Apr 07 19:48:51.162809 2026] [:error] [pid 37719:tid 37729] [client 34.247.86.177:52670] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "adTvI009Xv52u2xXGLAIjgAAAMc"]
[Tue Apr 07 19:48:52.196748 2026] [:error] [pid 37597:tid 37657] [client 34.247.86.177:52678] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "adTvJA6uAY0QAy-8EEJfjgAAAFc"]
[Tue Apr 07 19:48:53.221149 2026] [:error] [pid 59660:tid 59666] [client 34.247.86.177:52694] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "adTvJTp3-oiX2o5bTswN1QAAAcQ"]
[Tue Apr 07 19:48:54.257273 2026] [:error] [pid 37719:tid 37726] [client 34.247.86.177:52706] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.stage"] [unique_id "adTvJk09Xv52u2xXGLAIkwAAAMQ"]
[Tue Apr 07 19:48:55.294706 2026] [:error] [pid 37597:tid 37653] [client 34.247.86.177:52714] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.ci"] [unique_id "adTvJw6uAY0QAy-8EEJflgAAAFM"]
[Tue Apr 07 19:48:56.325682 2026] [:error] [pid 37719:tid 37723] [client 34.247.86.177:54680] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.docker"] [unique_id "adTvKE09Xv52u2xXGLAIlQAAAME"]
[Tue Apr 07 19:48:57.361105 2026] [:error] [pid 12948:tid 12957] [client 34.247.86.177:54694] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.live"] [unique_id "adTvKcbeSPAN8LvMqsandAAAAQY"]
[Tue Apr 07 19:48:58.396691 2026] [:error] [pid 12948:tid 12964] [client 34.247.86.177:54698] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.preprod"] [unique_id "adTvKsbeSPAN8LvMqsandwAAAQ0"]
[Tue Apr 07 19:48:59.424442 2026] [:error] [pid 37598:tid 37682] [client 34.247.86.177:54704] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.uat"] [unique_id "adTvK-9g7q_cV2WhPayvLgAAAJU"]
[Tue Apr 07 19:49:00.449774 2026] [:error] [pid 37597:tid 37646] [client 34.247.86.177:54706] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "adTvLA6uAY0QAy-8EEJfngAAAEw"]
[Tue Apr 07 19:49:01.476565 2026] [:error] [pid 59490:tid 59499] [client 34.247.86.177:54714] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.swp"] [unique_id "adTvLUcw8OFbiUZ7Rx1kfQAAAUc"]
[Tue Apr 07 19:49:02.563710 2026] [:error] [pid 12948:tid 12965] [client 34.247.86.177:54728] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "adTvLsbeSPAN8LvMqsanfwAAAQ4"]
[Tue Apr 07 19:49:03.597119 2026] [:error] [pid 37598:tid 37661] [client 34.247.86.177:54730] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "adTvL-9g7q_cV2WhPayvRQAAAIA"]
[Tue Apr 07 19:49:04.621920 2026] [:error] [pid 12948:tid 12967] [client 34.247.86.177:54736] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/apps/.env"] [unique_id "adTvMMbeSPAN8LvMqsanhAAAARA"]
[Tue Apr 07 19:49:05.649439 2026] [:error] [pid 37597:tid 37643] [client 34.247.86.177:54742] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "adTvMQ6uAY0QAy-8EEJfrAAAAEk"]
[Tue Apr 07 19:49:06.676562 2026] [:error] [pid 37598:tid 37664] [client 34.247.86.177:56324] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/web/.env"] [unique_id "adTvMu9g7q_cV2WhPayvWQAAAIM"]
[Tue Apr 07 19:49:07.714644 2026] [:error] [pid 37598:tid 37663] [client 34.247.86.177:56336] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/site/.env"] [unique_id "adTvM-9g7q_cV2WhPayvXwAAAII"]
[Tue Apr 07 19:49:08.746382 2026] [:error] [pid 37598:tid 37667] [client 34.247.86.177:56342] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env"] [unique_id "adTvNO9g7q_cV2WhPayvZAAAAIY"]
[Tue Apr 07 19:49:09.779213 2026] [:error] [pid 37598:tid 37680] [client 34.247.86.177:56350] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "adTvNe9g7q_cV2WhPayvagAAAJM"]
[Tue Apr 07 19:49:10.804380 2026] [:error] [pid 12948:tid 12973] [client 34.247.86.177:56356] [client 34.247.86.177] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "adTvNsbeSPAN8LvMqsanjwAAARY"]
[Tue Apr 07 20:07:54.452957 2026] [:error] [pid 37597:tid 37642] [client 35.90.54.6:34214] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "adTzmg6uAY0QAy-8EEJq2wAAAEg"]
[Tue Apr 07 20:07:55.184065 2026] [:error] [pid 59804:tid 59825] [client 35.90.54.6:60160] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "adTzm3YVIXiPh5_eJTmi2AAAAhM"]
[Tue Apr 07 20:07:55.915001 2026] [:error] [pid 59804:tid 59824] [client 35.90.54.6:60162] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "adTzm3YVIXiPh5_eJTmi2QAAAhI"]
[Tue Apr 07 20:07:56.641511 2026] [:error] [pid 37597:tid 37658] [client 35.90.54.6:60178] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "adTznA6uAY0QAy-8EEJq5AAAAFg"]
[Tue Apr 07 20:07:57.368179 2026] [:error] [pid 37597:tid 37637] [client 35.90.54.6:60188] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "adTznQ6uAY0QAy-8EEJq6gAAAEM"]
[Tue Apr 07 20:07:58.098031 2026] [:error] [pid 37719:tid 37734] [client 35.90.54.6:60204] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "adTznk09Xv52u2xXGLASAwAAAMw"]
[Tue Apr 07 20:07:58.830055 2026] [:error] [pid 37719:tid 37724] [client 35.90.54.6:60216] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.remote"] [unique_id "adTznk09Xv52u2xXGLASBAAAAMI"]
[Tue Apr 07 20:07:59.569455 2026] [:error] [pid 37719:tid 37725] [client 35.90.54.6:60222] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "adTzn009Xv52u2xXGLASBwAAAMM"]
[Tue Apr 07 20:08:00.308308 2026] [:error] [pid 37597:tid 37653] [client 35.90.54.6:60238] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "adTzoA6uAY0QAy-8EEJq8gAAAFM"]
[Tue Apr 07 20:08:01.039333 2026] [:error] [pid 59804:tid 59827] [client 35.90.54.6:60240] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "adTzoXYVIXiPh5_eJTmi3wAAAhU"]
[Tue Apr 07 20:08:01.778872 2026] [:error] [pid 37597:tid 37635] [client 35.90.54.6:60250] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "adTzoQ6uAY0QAy-8EEJq-wAAAEE"]
[Tue Apr 07 20:08:02.522397 2026] [:error] [pid 37597:tid 37650] [client 35.90.54.6:60266] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.sample"] [unique_id "adTzog6uAY0QAy-8EEJq_gAAAFA"]
[Tue Apr 07 20:08:03.258120 2026] [:error] [pid 37597:tid 37639] [client 35.90.54.6:60270] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "adTzow6uAY0QAy-8EEJrAwAAAEU"]
[Tue Apr 07 20:08:03.987852 2026] [:error] [pid 37597:tid 37654] [client 35.90.54.6:60284] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "adTzow6uAY0QAy-8EEJrBQAAAFQ"]
[Tue Apr 07 20:08:04.721148 2026] [:error] [pid 37598:tid 37681] [client 35.90.54.6:45948] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "adTzpO9g7q_cV2WhPayz_gAAAJQ"]
[Tue Apr 07 20:08:05.452545 2026] [:error] [pid 37597:tid 37635] [client 35.90.54.6:45962] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.stage"] [unique_id "adTzpQ6uAY0QAy-8EEJrCAAAAEE"]
[Tue Apr 07 20:08:06.182125 2026] [:error] [pid 37597:tid 37639] [client 35.90.54.6:45970] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.ci"] [unique_id "adTzpg6uAY0QAy-8EEJrCgAAAEU"]
[Tue Apr 07 20:08:06.912931 2026] [:error] [pid 37597:tid 37651] [client 35.90.54.6:45986] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.docker"] [unique_id "adTzpg6uAY0QAy-8EEJrEAAAAFE"]
[Tue Apr 07 20:08:07.650137 2026] [:error] [pid 12948:tid 12975] [client 35.90.54.6:46000] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.live"] [unique_id "adTzp8beSPAN8LvMqsar3QAAARg"]
[Tue Apr 07 20:08:08.388137 2026] [:error] [pid 37598:tid 37665] [client 35.90.54.6:46012] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.preprod"] [unique_id "adTzqO9g7q_cV2WhPayz_wAAAIQ"]
[Tue Apr 07 20:08:09.120624 2026] [:error] [pid 37598:tid 37661] [client 35.90.54.6:46026] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.uat"] [unique_id "adTzqe9g7q_cV2WhPay0AAAAAIA"]
[Tue Apr 07 20:08:09.850927 2026] [:error] [pid 59551:tid 59568] [client 35.90.54.6:46036] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "adTzqV7LN7Ubyqs-sVsCRQAAAY8"]
[Tue Apr 07 20:08:10.576833 2026] [:error] [pid 59490:tid 59504] [client 35.90.54.6:46052] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.swp"] [unique_id "adTzqkcw8OFbiUZ7Rx1nigAAAUw"]
[Tue Apr 07 20:08:11.305382 2026] [:error] [pid 37597:tid 37650] [client 35.90.54.6:46060] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "adTzqw6uAY0QAy-8EEJrEgAAAFA"]
[Tue Apr 07 20:08:12.032321 2026] [:error] [pid 59660:tid 59685] [client 35.90.54.6:46064] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "adTzrDp3-oiX2o5bTswQyQAAAdc"]
[Tue Apr 07 20:08:12.758043 2026] [:error] [pid 37719:tid 37741] [client 35.90.54.6:46068] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/apps/.env"] [unique_id "adTzrE09Xv52u2xXGLASDwAAANM"]
[Tue Apr 07 20:08:13.491547 2026] [:error] [pid 37597:tid 37648] [client 35.90.54.6:46084] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "adTzrQ6uAY0QAy-8EEJrFgAAAE4"]
[Tue Apr 07 20:08:14.223703 2026] [:error] [pid 37597:tid 37658] [client 35.90.54.6:46096] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/web/.env"] [unique_id "adTzrg6uAY0QAy-8EEJrFwAAAFg"]
[Tue Apr 07 20:08:14.950818 2026] [:error] [pid 59660:tid 59666] [client 35.90.54.6:36098] [client 35.90.54.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/site/.env"] [unique_id "adTzrjp3-oiX2o5bTswQywAAAcQ"]
[Wed Apr 08 07:21:01.681143 2026] [:error] [pid 16630:tid 16643] [client 94.130.8.54:56062] [client 94.130.8.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "adWRXSjfVAkPG-jgJErxlAAAAQs"]
[Wed Apr 08 09:25:33.389448 2026] [:error] [pid 47627:tid 47705] [client 103.168.67.159:3068] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "adWujXOljf1Quv_kDjn0ewAAAIY"]
[Wed Apr 08 09:25:34.097092 2026] [:error] [pid 47625:tid 47645] [client 103.168.67.159:3576] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "adWujiVuHyNWzZlE8PA23QAAAAs"]
[Wed Apr 08 09:25:34.888083 2026] [:error] [pid 47627:tid 47707] [client 103.168.67.159:4188] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "adWujnOljf1Quv_kDjn0pgAAAIg"]
[Wed Apr 08 09:25:35.665285 2026] [:error] [pid 47627:tid 47713] [client 103.168.67.159:4784] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "adWuj3Oljf1Quv_kDjn0ugAAAI4"]
[Wed Apr 08 09:25:36.375416 2026] [:error] [pid 47732:tid 47756] [client 103.168.67.159:5338] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dashboard"] [unique_id "adWukIm4N5QW9Mh7G128HQAAANY"]
[Wed Apr 08 09:25:37.079166 2026] [:error] [pid 47732:tid 47742] [client 103.168.67.159:5856] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dashboard"] [unique_id "adWukYm4N5QW9Mh7G128LQAAAMg"]
[Wed Apr 08 09:25:37.797686 2026] [:error] [pid 47627:tid 47712] [client 103.168.67.159:6380] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dashboard"] [unique_id "adWukXOljf1Quv_kDjn02QAAAI0"]
[Wed Apr 08 09:25:38.516816 2026] [:error] [pid 47625:tid 47652] [client 103.168.67.159:6916] [client 103.168.67.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dashboard"] [unique_id "adWukiVuHyNWzZlE8PA3DgAAABI"]
[Wed Apr 08 09:41:27.013619 2026] [:error] [pid 47732:tid 47740] [client 186.57.194.249:58379] [client 186.57.194.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 186.57.194.249, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adWyR4m4N5QW9Mh7G13BrwAAAMY"]
[Wed Apr 08 09:41:27.018828 2026] [:error] [pid 47732:tid 47740] [client 186.57.194.249:58379] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 08 20:28:54.124711 2026] [:error] [pid 7047:tid 7052] [client 4.223.70.230:49427] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Wed Apr 08 20:28:54.390751 2026] [:error] [pid 7047:tid 7050] [client 4.223.70.230:49427] File does not exist: /usr/local/apache/htdocs/suspended-page/uwu2.php
[Wed Apr 08 20:28:54.909326 2026] [:error] [pid 7047:tid 7062] [client 4.223.70.230:49427] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Wed Apr 08 20:28:55.180160 2026] [:error] [pid 7047:tid 7054] [client 4.223.70.230:49427] File does not exist: /usr/local/apache/htdocs/suspended-page/akcc.php
[Wed Apr 08 20:28:55.451973 2026] [:error] [pid 7047:tid 7049] [client 4.223.70.230:49427] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Apr 08 20:28:55.721657 2026] [:error] [pid 7047:tid 7060] [client 4.223.70.230:49427] File does not exist: /usr/local/apache/htdocs/suspended-page/zews.php
[Wed Apr 08 20:28:56.006999 2026] [:error] [pid 7047:tid 7050] [client 4.223.70.230:49427] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Wed Apr 08 20:28:56.272323 2026] [:error] [pid 7047:tid 7073] [client 4.223.70.230:49427] File does not exist: /usr/local/apache/htdocs/suspended-page/124.php
[Wed Apr 08 20:28:56.537043 2026] [:error] [pid 7047:tid 7053] [client 4.223.70.230:49427] File does not exist: /usr/local/apache/htdocs/suspended-page/epinyins.php
[Wed Apr 08 20:28:56.926369 2026] [:error] [pid 7047:tid 7072] [client 4.223.70.230:49427] File does not exist: /usr/local/apache/htdocs/suspended-page/geck.php
[Wed Apr 08 20:28:57.192439 2026] [:error] [pid 7047:tid 7071] [client 4.223.70.230:49427] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shout.php"] [unique_id "adZKCeNh3oGO3pKiCzwIlwAAAZY"]
[Wed Apr 08 20:28:58.882444 2026] [:error] [pid 7189:tid 7194] [client 4.223.70.230:49025] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shout.php"] [unique_id "adZKChaBqhBSu0L37lrLiQAAAcM"]
[Wed Apr 08 20:29:01.245754 2026] [:error] [pid 7189:tid 7212] [client 4.223.70.230:48984] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shout.php"] [unique_id "adZKDRaBqhBSu0L37lrLkQAAAdU"]
[Wed Apr 08 20:29:04.827360 2026] [:error] [pid 7047:tid 7073] [client 4.223.70.230:49460] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shout.php"] [unique_id "adZKEONh3oGO3pKiCzwIowAAAZg"]
[Wed Apr 08 20:29:06.114372 2026] [:error] [pid 7047:tid 7071] [client 4.223.70.230:49450] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "adZKEuNh3oGO3pKiCzwIpwAAAZY"]
[Wed Apr 08 20:29:07.537801 2026] [:error] [pid 7047:tid 7051] [client 4.223.70.230:49346] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "adZKE-Nh3oGO3pKiCzwIqQAAAYI"]
[Wed Apr 08 20:29:14.806134 2026] [:error] [pid 7189:tid 7209] [client 4.223.70.230:49363] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "adZKGhaBqhBSu0L37lrLnAAAAdI"]
[Wed Apr 08 20:29:19.566432 2026] [:error] [pid 12385:tid 12399] [client 4.223.70.230:49437] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/size.php"] [unique_id "adZKHyAjtvRQEkLosq2bjAAAAAo"]
[Wed Apr 08 20:29:20.563576 2026] [:error] [pid 64066:tid 64070] [client 4.223.70.230:49349] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "adZKIFR3WucJgr2vZGY4KQAAAUE"]
[Wed Apr 08 20:29:23.398424 2026] [:error] [pid 12453:tid 12456] [client 4.223.70.230:49746] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "adZKIxjtW7S6XsLPvrQhHwAAAIE"]
[Wed Apr 08 20:29:24.059022 2026] [:error] [pid 12453:tid 12468] [client 4.223.70.230:49415] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "adZKJBjtW7S6XsLPvrQhIwAAAI0"]
[Wed Apr 08 20:29:25.601546 2026] [:error] [pid 12453:tid 12479] [client 4.223.70.230:49783] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "adZKJRjtW7S6XsLPvrQhKAAAAJg"]
[Wed Apr 08 20:29:28.223735 2026] [:error] [pid 7189:tid 7203] [client 4.223.70.230:49413] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "adZKKBaBqhBSu0L37lrL1wAAAcw"]
[Wed Apr 08 20:29:32.740075 2026] [:error] [pid 7189:tid 7196] [client 4.223.70.230:49421] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mn.php"] [unique_id "adZKLBaBqhBSu0L37lrL7QAAAcU"]
[Wed Apr 08 20:30:11.113263 2026] [:error] [pid 12490:tid 12500] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Wed Apr 08 20:30:11.515422 2026] [:error] [pid 12490:tid 12516] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Wed Apr 08 20:30:11.799488 2026] [:error] [pid 12490:tid 12497] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Wed Apr 08 20:30:12.109016 2026] [:error] [pid 12490:tid 12514] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed Apr 08 20:30:12.401134 2026] [:error] [pid 12490:tid 12509] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Wed Apr 08 20:30:12.672847 2026] [:error] [pid 12490:tid 12493] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/123.php
[Wed Apr 08 20:30:13.003127 2026] [:error] [pid 12490:tid 12496] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Wed Apr 08 20:30:13.278157 2026] [:error] [pid 12490:tid 12492] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Wed Apr 08 20:30:13.543473 2026] [:error] [pid 12490:tid 12498] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 08 20:30:13.855679 2026] [:error] [pid 12490:tid 12513] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/v.php
[Wed Apr 08 20:30:14.190553 2026] [:error] [pid 12490:tid 12503] [client 4.223.70.230:50054] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Wed Apr 08 20:30:14.455493 2026] [:error] [pid 12490:tid 12502] [client 4.223.70.230:50054] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qing.php"] [unique_id "adZKVm1Fea4F4fbumr38JwAAAMo"]
[Wed Apr 08 20:30:15.699332 2026] [:error] [pid 64066:tid 64089] [client 4.223.70.230:50057] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qing.php"] [unique_id "adZKV1R3WucJgr2vZGY4cAAAAVQ"]
[Wed Apr 08 20:30:20.143395 2026] [:error] [pid 7047:tid 7072] [client 4.223.70.230:50118] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qing.php"] [unique_id "adZKXONh3oGO3pKiCzwJ6wAAAZc"]
[Wed Apr 08 20:30:22.760491 2026] [:error] [pid 7189:tid 7208] [client 4.223.70.230:50137] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qing.php"] [unique_id "adZKXhaBqhBSu0L37lrMbQAAAdE"]
[Wed Apr 08 20:30:28.155885 2026] [:error] [pid 7047:tid 7056] [client 4.223.70.230:50367] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "adZKZONh3oGO3pKiCzwKDgAAAYc"]
[Wed Apr 08 20:30:29.562321 2026] [:error] [pid 7047:tid 7064] [client 4.223.70.230:50160] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "adZKZeNh3oGO3pKiCzwKFwAAAY8"]
[Wed Apr 08 20:30:30.622343 2026] [:error] [pid 7047:tid 7061] [client 4.223.70.230:49811] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "adZKZuNh3oGO3pKiCzwKHAAAAYw"]
[Wed Apr 08 20:30:31.708047 2026] [:error] [pid 12490:tid 12514] [client 4.223.70.230:50145] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "adZKZ21Fea4F4fbumr38QQAAANY"]
[Wed Apr 08 20:30:32.418309 2026] [:error] [pid 35642:tid 35652] [client 4.223.70.230:50317] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mms.php"] [unique_id "adZKaA-CqryxdEs5DN9XNQAAAEg"]
[Wed Apr 08 20:30:35.175109 2026] [:error] [pid 7189:tid 7191] [client 4.223.70.230:50099] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mms.php"] [unique_id "adZKaxaBqhBSu0L37lrMdgAAAcA"]
[Wed Apr 08 20:30:40.576006 2026] [:error] [pid 12490:tid 12498] [client 4.223.70.230:50401] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mms.php"] [unique_id "adZKcG1Fea4F4fbumr38TAAAAMY"]
[Wed Apr 08 20:30:41.686690 2026] [:error] [pid 64066:tid 64078] [client 4.223.70.230:50139] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mms.php"] [unique_id "adZKcVR3WucJgr2vZGY4lQAAAUk"]
[Wed Apr 08 20:30:49.940304 2026] [:error] [pid 12453:tid 12479] [client 4.223.70.230:50364] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "adZKeRjtW7S6XsLPvrQiOAAAAJg"]
[Wed Apr 08 20:30:57.930972 2026] [:error] [pid 7047:tid 7058] [client 4.223.70.230:50768] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "adZKgeNh3oGO3pKiCzwKoAAAAYk"]
[Wed Apr 08 20:30:59.236002 2026] [:error] [pid 7047:tid 7050] [client 4.223.70.230:50721] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "adZKg-Nh3oGO3pKiCzwKrwAAAYE"]
[Wed Apr 08 20:31:00.513551 2026] [:error] [pid 7047:tid 7060] [client 4.223.70.230:50120] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "adZKhONh3oGO3pKiCzwKvAAAAYs"]
[Wed Apr 08 20:31:02.248857 2026] [:error] [pid 12453:tid 12469] [client 4.223.70.230:50807] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "adZKhhjtW7S6XsLPvrQieQAAAI4"]
[Wed Apr 08 20:31:03.949929 2026] [:error] [pid 7189:tid 7193] [client 4.223.70.230:50313] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lite.php"] [unique_id "adZKhxaBqhBSu0L37lrMxQAAAcI"]
[Wed Apr 08 20:31:06.437366 2026] [:error] [pid 7047:tid 7068] [client 4.223.70.230:50814] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lite.php"] [unique_id "adZKiuNh3oGO3pKiCzwKxAAAAZM"]
[Wed Apr 08 20:31:08.042316 2026] [:error] [pid 64066:tid 64070] [client 4.223.70.230:50728] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lite.php"] [unique_id "adZKjFR3WucJgr2vZGY4uQAAAUE"]
[Wed Apr 08 20:31:13.532185 2026] [:error] [pid 12453:tid 12468] [client 4.223.70.230:50707] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lite.php"] [unique_id "adZKkRjtW7S6XsLPvrQixwAAAI0"]
[Wed Apr 08 20:31:15.120065 2026] [:error] [pid 35642:tid 35651] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Wed Apr 08 20:31:15.385692 2026] [:error] [pid 35642:tid 35645] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Wed Apr 08 20:31:15.823287 2026] [:error] [pid 35642:tid 35645] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Wed Apr 08 20:31:16.266511 2026] [:error] [pid 35642:tid 35661] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Wed Apr 08 20:31:16.792948 2026] [:error] [pid 35642:tid 35644] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed Apr 08 20:31:17.220810 2026] [:error] [pid 35642:tid 35663] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Wed Apr 08 20:31:17.486042 2026] [:error] [pid 35642:tid 35665] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/ee.php
[Wed Apr 08 20:31:17.752381 2026] [:error] [pid 35642:tid 35648] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Wed Apr 08 20:31:18.017553 2026] [:error] [pid 35642:tid 35668] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Wed Apr 08 20:31:18.284004 2026] [:error] [pid 35642:tid 35647] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/02.php
[Wed Apr 08 20:31:18.648948 2026] [:error] [pid 35642:tid 35650] [client 4.223.70.230:50753] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Wed Apr 08 20:31:19.068909 2026] [:error] [pid 35642:tid 35666] [client 4.223.70.230:50753] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "adZKlw-CqryxdEs5DN9XYQAAAFY"]
[Wed Apr 08 20:31:22.502783 2026] [:error] [pid 7047:tid 7062] [client 4.223.70.230:51027] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "adZKmuNh3oGO3pKiCzwK6wAAAY0"]
[Wed Apr 08 20:31:47.759252 2026] [:error] [pid 12453:tid 12472] [client 4.223.70.230:50997] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "adZKsxjtW7S6XsLPvrQjMAAAAJE"]
[Wed Apr 08 20:31:53.758416 2026] [:error] [pid 64066:tid 64073] [client 4.223.70.230:50778] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "adZKuVR3WucJgr2vZGY4-gAAAUQ"]
[Wed Apr 08 20:31:58.194590 2026] [:error] [pid 7189:tid 7197] [client 4.223.70.230:50704] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13k.php"] [unique_id "adZKvhaBqhBSu0L37lrNIwAAAcY"]
[Wed Apr 08 20:32:19.454854 2026] [:error] [pid 7047:tid 7067] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Wed Apr 08 20:32:19.759199 2026] [:error] [pid 7047:tid 7060] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Wed Apr 08 20:32:20.172883 2026] [:error] [pid 7047:tid 7051] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Wed Apr 08 20:32:20.438255 2026] [:error] [pid 7047:tid 7065] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/kk.php
[Wed Apr 08 20:32:20.718412 2026] [:error] [pid 7047:tid 7070] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/cf.php
[Wed Apr 08 20:32:21.064801 2026] [:error] [pid 7047:tid 7054] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/456.php
[Wed Apr 08 20:32:21.330670 2026] [:error] [pid 7047:tid 7069] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Wed Apr 08 20:32:21.611160 2026] [:error] [pid 7047:tid 7061] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/2x.php
[Wed Apr 08 20:32:21.877112 2026] [:error] [pid 7047:tid 7060] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Wed Apr 08 20:32:22.425492 2026] [:error] [pid 7047:tid 7058] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed Apr 08 20:32:22.691447 2026] [:error] [pid 7047:tid 7064] [client 4.223.70.230:51795] File does not exist: /usr/local/apache/htdocs/suspended-page/pepe.php
[Wed Apr 08 20:32:22.957634 2026] [:error] [pid 7047:tid 7063] [client 4.223.70.230:51795] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "adZK1uNh3oGO3pKiCzwLwwAAAY4"]
[Wed Apr 08 20:32:25.685097 2026] [:error] [pid 12385:tid 12390] [client 4.223.70.230:51363] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "adZK2SAjtvRQEkLosq2b7QAAAAE"]
[Wed Apr 08 20:32:27.427695 2026] [:error] [pid 7047:tid 7068] [client 4.223.70.230:51813] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "adZK2-Nh3oGO3pKiCzwL0AAAAZM"]
[Wed Apr 08 20:32:28.564601 2026] [:error] [pid 7047:tid 7065] [client 4.223.70.230:50968] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "adZK3ONh3oGO3pKiCzwL1QAAAZA"]
[Wed Apr 08 20:32:31.380801 2026] [:error] [pid 12386:tid 12435] [client 4.223.70.230:51455] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adZK3xLhhLtqHi2gK7UWHgAAARM"]
[Wed Apr 08 20:32:35.009420 2026] [:error] [pid 7189:tid 7208] [client 4.223.70.230:51763] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adZK4xaBqhBSu0L37lrNUAAAAdE"]
[Wed Apr 08 20:32:48.829930 2026] [:error] [pid 12490:tid 12508] [client 4.223.70.230:51769] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "adZK8G1Fea4F4fbumr38pwAAANA"]
[Wed Apr 08 20:32:52.302603 2026] [:error] [pid 7047:tid 7069] [client 4.223.70.230:52148] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "adZK9ONh3oGO3pKiCzwMGAAAAZQ"]
[Wed Apr 08 20:32:54.016586 2026] [:error] [pid 12386:tid 12440] [client 4.223.70.230:51775] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "adZK9hLhhLtqHi2gK7UWJgAAARg"]
[Wed Apr 08 20:32:58.249482 2026] [:error] [pid 35642:tid 35648] [client 4.223.70.230:51411] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "adZK-g-CqryxdEs5DN9XswAAAEQ"]
[Wed Apr 08 20:33:00.817039 2026] [:error] [pid 35642:tid 35654] [client 4.223.70.230:51719] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "adZK_A-CqryxdEs5DN9XuQAAAEo"]
[Wed Apr 08 20:33:02.052012 2026] [:error] [pid 7047:tid 7052] [client 4.223.70.230:51778] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "adZK_uNh3oGO3pKiCzwMJgAAAYM"]
[Wed Apr 08 20:33:03.217185 2026] [:error] [pid 12385:tid 12407] [client 4.223.70.230:52114] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "adZK_yAjtvRQEkLosq2b-QAAABI"]
[Wed Apr 08 20:33:04.885722 2026] [:error] [pid 64066:tid 64088] [client 4.223.70.230:52126] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "adZLAFR3WucJgr2vZGY5MQAAAVM"]
[Wed Apr 08 20:33:05.835451 2026] [:error] [pid 7047:tid 7060] [client 4.223.70.230:52180] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "adZLAeNh3oGO3pKiCzwMNQAAAYs"]
[Wed Apr 08 20:33:09.021265 2026] [:error] [pid 7189:tid 7211] [client 4.223.70.230:51790] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "adZLBRaBqhBSu0L37lrNjQAAAdQ"]
[Wed Apr 08 20:33:10.548869 2026] [:error] [pid 35642:tid 35646] [client 4.223.70.230:52202] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "adZLBg-CqryxdEs5DN9XzgAAAEI"]
[Wed Apr 08 20:33:11.915980 2026] [:error] [pid 35642:tid 35666] [client 4.223.70.230:51779] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "adZLBw-CqryxdEs5DN9X0QAAAFY"]
[Wed Apr 08 20:33:14.171495 2026] [:error] [pid 35642:tid 35662] [client 4.223.70.230:51784] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ll.php"] [unique_id "adZLCg-CqryxdEs5DN9X1AAAAFI"]
[Wed Apr 08 20:33:32.961054 2026] [:error] [pid 7047:tid 7057] [client 4.223.70.230:51800] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed Apr 08 20:33:33.275578 2026] [:error] [pid 7047:tid 7059] [client 4.223.70.230:51800] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Wed Apr 08 20:33:33.540719 2026] [:error] [pid 7047:tid 7060] [client 4.223.70.230:51800] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-gr.php
[Wed Apr 08 20:33:33.805530 2026] [:error] [pid 7047:tid 7064] [client 4.223.70.230:51800] File does not exist: /usr/local/apache/htdocs/suspended-page/asus.php
[Wed Apr 08 20:33:34.206411 2026] [:error] [pid 7047:tid 7051] [client 4.223.70.230:51800] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed Apr 08 20:33:34.473861 2026] [:error] [pid 7047:tid 7053] [client 4.223.70.230:51800] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Apr 08 20:33:34.887815 2026] [:error] [pid 7047:tid 7070] [client 4.223.70.230:51800] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mn.php
[Wed Apr 08 20:33:35.156261 2026] [:error] [pid 7047:tid 7057] [client 4.223.70.230:51800] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Wed Apr 08 20:33:35.421202 2026] [:error] [pid 7047:tid 7068] [client 4.223.70.230:51800] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed Apr 08 20:33:35.685586 2026] [:error] [pid 7047:tid 7054] [client 4.223.70.230:51800] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Wed Apr 08 20:33:35.947764 2026] [:error] [pid 7047:tid 7052] [client 4.223.70.230:51800] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/html.php"] [unique_id "adZLH-Nh3oGO3pKiCzwMkgAAAYM"]
[Wed Apr 08 20:33:36.899567 2026] [:error] [pid 12385:tid 12413] [client 4.223.70.230:52176] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/html.php"] [unique_id "adZLICAjtvRQEkLosq2cGgAAABg"]
[Wed Apr 08 20:33:38.733595 2026] [:error] [pid 12453:tid 12479] [client 4.223.70.230:52443] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/html.php"] [unique_id "adZLIhjtW7S6XsLPvrQj0gAAAJg"]
[Wed Apr 08 20:33:44.902360 2026] [:error] [pid 7047:tid 7061] [client 4.223.70.230:52362] [client 4.223.70.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/html.php"] [unique_id "adZLKONh3oGO3pKiCzwMogAAAYw"]
[Thu Apr 09 03:45:19.320585 2026] [:error] [pid 20535:tid 20548] [client 206.212.255.116:53222] [client 206.212.255.116] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 206.212.255.116, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "adawTwWiD9hWnEUHWdPDTQAAAAQ"]
[Thu Apr 09 03:45:19.323217 2026] [:error] [pid 20535:tid 20548] [client 206.212.255.116:53222] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Apr 09 05:01:58.509737 2026] [:error] [pid 22627:tid 22650] [client 179.108.59.123:5759] [client 179.108.59.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 179.108.59.123, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adbCRvr8glsF_jKQpr7WewAAARQ"]
[Thu Apr 09 05:01:58.513391 2026] [:error] [pid 22627:tid 22650] [client 179.108.59.123:5759] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 09 09:29:42.531909 2026] [:error] [pid 20535:tid 20551] [client 20.63.32.44:62870] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 09 09:29:42.738934 2026] [:error] [pid 20535:tid 20549] [client 20.63.32.44:62870] File does not exist: /usr/local/apache/htdocs/suspended-page/shadow-bot.php
[Thu Apr 09 09:29:44.200611 2026] [:error] [pid 20535:tid 20549] [client 20.63.32.44:62870] File does not exist: /usr/local/apache/htdocs/suspended-page/zxcs.php
[Thu Apr 09 09:29:44.407655 2026] [:error] [pid 20535:tid 20546] [client 20.63.32.44:62870] File does not exist: /usr/local/apache/htdocs/suspended-page/btx25.php
[Thu Apr 09 09:29:44.614951 2026] [:error] [pid 20535:tid 20568] [client 20.63.32.44:62870] File does not exist: /usr/local/apache/htdocs/suspended-page/ca-022.php
[Thu Apr 09 09:29:44.823042 2026] [:error] [pid 20535:tid 20558] [client 20.63.32.44:62870] File does not exist: /usr/local/apache/htdocs/suspended-page/rnenu.php
[Thu Apr 09 09:29:45.031442 2026] [:error] [pid 20535:tid 20546] [client 20.63.32.44:62870] File does not exist: /usr/local/apache/htdocs/suspended-page/fallbackapi.php
[Thu Apr 09 13:58:35.326558 2026] [:error] [pid 24516:tid 24559] [client 20.63.32.44:20612] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 09 20:57:11.949684 2026] [:error] [pid 24927:tid 24943] [client 94.247.172.129:56694] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nextspaceconsulting.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nextspaceconsulting.com.au"] [uri "/"] [unique_id "adeiJzXObuzEuw8mNJsjAQAAAQ0"]
[Fri Apr 10 03:42:12.607474 2026] [:error] [pid 36672:tid 36685] [client 170.0.169.1:21217] [client 170.0.169.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 170.0.169.1, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adgBFD99r9VLJsT_o8i0XgAAAMs"]
[Fri Apr 10 03:42:12.613095 2026] [:error] [pid 36672:tid 36685] [client 170.0.169.1:21217] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 10 05:53:43.972776 2026] [:error] [pid 59218:tid 59220] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Fri Apr 10 05:53:44.433046 2026] [:error] [pid 59218:tid 59221] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Fri Apr 10 05:53:44.892361 2026] [:error] [pid 59218:tid 59243] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri Apr 10 05:53:45.355733 2026] [:error] [pid 59218:tid 59225] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri Apr 10 05:53:45.814948 2026] [:error] [pid 59218:tid 59222] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 10 05:53:46.274897 2026] [:error] [pid 59218:tid 59231] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 10 05:53:46.734674 2026] [:error] [pid 59218:tid 59224] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri Apr 10 05:53:47.194011 2026] [:error] [pid 59218:tid 59228] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Fri Apr 10 05:53:48.112150 2026] [:error] [pid 59218:tid 59244] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Fri Apr 10 05:53:48.570533 2026] [:error] [pid 59218:tid 59240] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Fri Apr 10 05:53:49.031626 2026] [:error] [pid 59218:tid 59226] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 10 05:53:49.491338 2026] [:error] [pid 59218:tid 59235] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Fri Apr 10 05:53:49.949925 2026] [:error] [pid 59218:tid 59229] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Fri Apr 10 05:53:50.408871 2026] [:error] [pid 59218:tid 59242] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Fri Apr 10 05:53:50.868044 2026] [:error] [pid 59218:tid 59236] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Fri Apr 10 05:53:51.327264 2026] [:error] [pid 59218:tid 59239] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Apr 10 05:53:51.785691 2026] [:error] [pid 59218:tid 59220] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri Apr 10 05:53:52.245293 2026] [:error] [pid 59218:tid 59237] [client 62.197.152.148:40438] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Apr 10 05:54:00.080598 2026] [:error] [pid 59218:tid 59238] [client 62.197.152.148:40438] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adgf-IjSO_Wp4VS3Qe_r-gAAAZI"]
[Fri Apr 10 05:54:03.982052 2026] [:error] [pid 12685:tid 12697] [client 62.197.152.148:49724] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adgf-88f5ssYShsynapyZgAAAMo"]
[Fri Apr 10 05:54:06.272628 2026] [:error] [pid 59286:tid 59288] [client 62.197.152.148:49736] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 10 05:54:07.643435 2026] [:error] [pid 59286:tid 59303] [client 62.197.152.148:49736] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adgf_21gMezN4JEr-RWm5AAAAc8"]
[Fri Apr 10 05:54:09.515365 2026] [:error] [pid 59098:tid 59125] [client 62.197.152.148:47196] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri Apr 10 05:54:09.982022 2026] [:error] [pid 59098:tid 59101] [client 62.197.152.148:47196] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adggASZshs05JVy8bJ4V2QAAAQA"]
[Fri Apr 10 05:54:11.383049 2026] [:error] [pid 59218:tid 59233] [client 62.197.152.148:47212] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Fri Apr 10 05:54:13.722474 2026] [:error] [pid 59218:tid 59226] [client 62.197.152.148:47212] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adggBYjSO_Wp4VS3Qe_sBQAAAYY"]
[Fri Apr 10 05:54:15.119631 2026] [:error] [pid 59144:tid 59157] [client 62.197.152.148:47224] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adggBxta6MlufQo3_orsDwAAAUs"]
[Fri Apr 10 05:54:16.030279 2026] [:error] [pid 59098:tid 59118] [client 62.197.152.148:47232] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adggCCZshs05JVy8bJ4V4AAAARE"]
[Fri Apr 10 05:54:16.943845 2026] [:error] [pid 59098:tid 59108] [client 62.197.152.148:58342] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adggCCZshs05JVy8bJ4V4QAAAQc"]
[Fri Apr 10 05:54:17.855697 2026] [:error] [pid 12575:tid 12637] [client 62.197.152.148:58358] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adggCSjFTOT5X6zsPClPPQAAAE8"]
[Fri Apr 10 05:54:18.765054 2026] [:error] [pid 12574:tid 12601] [client 62.197.152.148:58368] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adggCnw-1tvJISKJyrTZLQAAAAc"]
[Fri Apr 10 05:54:20.134613 2026] [:error] [pid 59218:tid 59239] [client 62.197.152.148:58380] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adggDIjSO_Wp4VS3Qe_sCQAAAZM"]
[Fri Apr 10 05:54:21.067793 2026] [:error] [pid 12574:tid 12600] [client 62.197.152.148:58390] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Fri Apr 10 05:54:22.000928 2026] [:error] [pid 12574:tid 12613] [client 62.197.152.148:58390] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "adggDXw-1tvJISKJyrTZMAAAABM"]
[Fri Apr 10 05:54:23.864395 2026] [:error] [pid 12576:tid 12660] [client 62.197.152.148:58400] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adggDwZp1JUS4li1Qnu08wAAAIs"]
[Fri Apr 10 05:54:25.263647 2026] [:error] [pid 59144:tid 59169] [client 62.197.152.148:58410] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adggERta6MlufQo3_orsGQAAAVc"]
[Fri Apr 10 05:54:26.177679 2026] [:error] [pid 59098:tid 59102] [client 62.197.152.148:58426] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Fri Apr 10 05:54:26.632597 2026] [:error] [pid 59098:tid 59115] [client 62.197.152.148:58426] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adggEiZshs05JVy8bJ4V6QAAAQ4"]
[Fri Apr 10 05:54:27.546110 2026] [:error] [pid 59286:tid 59303] [client 62.197.152.148:58340] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Fri Apr 10 05:54:29.153250 2026] [:error] [pid 59286:tid 59299] [client 62.197.152.148:58340] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Apr 10 05:54:30.526735 2026] [:error] [pid 59286:tid 59312] [client 62.197.152.148:58340] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adggFm1gMezN4JEr-RWm_QAAAdg"]
[Fri Apr 10 05:54:31.442326 2026] [:error] [pid 59144:tid 59170] [client 62.197.152.148:58344] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Fri Apr 10 05:54:31.897543 2026] [:error] [pid 59144:tid 59159] [client 62.197.152.148:58344] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adggFxta6MlufQo3_orsJwAAAU0"]
[Fri Apr 10 05:54:32.832593 2026] [:error] [pid 12574:tid 12603] [client 62.197.152.148:58360] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Fri Apr 10 05:54:33.768068 2026] [:error] [pid 12574:tid 12594] [client 62.197.152.148:58360] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adggGXw-1tvJISKJyrTZNgAAAAA"]
[Fri Apr 10 05:54:35.165280 2026] [:error] [pid 59218:tid 59227] [client 62.197.152.148:58376] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adggG4jSO_Wp4VS3Qe_sGAAAAYc"]
[Fri Apr 10 05:54:36.537557 2026] [:error] [pid 12685:tid 12688] [client 62.197.152.148:58392] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Fri Apr 10 05:54:36.996396 2026] [:error] [pid 12685:tid 12697] [client 62.197.152.148:58392] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Fri Apr 10 05:54:37.908335 2026] [:error] [pid 12685:tid 12698] [client 62.197.152.148:58392] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adggHc8f5ssYShsynapyfAAAAMs"]
[Fri Apr 10 05:54:39.305220 2026] [:error] [pid 12685:tid 12700] [client 62.197.152.148:57492] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adggH88f5ssYShsynapygAAAAM0"]
[Fri Apr 10 05:54:40.674909 2026] [:error] [pid 59218:tid 59238] [client 62.197.152.148:57498] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adggIIjSO_Wp4VS3Qe_sGgAAAZI"]
[Fri Apr 10 05:54:41.586624 2026] [:error] [pid 59218:tid 59222] [client 62.197.152.148:57504] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adggIYjSO_Wp4VS3Qe_sHQAAAYI"]
[Fri Apr 10 05:54:42.517114 2026] [:error] [pid 59286:tid 59302] [client 62.197.152.148:57518] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adggIm1gMezN4JEr-RWnAQAAAc4"]
[Fri Apr 10 05:54:44.390121 2026] [:error] [pid 59286:tid 59309] [client 62.197.152.148:57522] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Fri Apr 10 05:54:44.856087 2026] [:error] [pid 59286:tid 59308] [client 62.197.152.148:57522] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adggJG1gMezN4JEr-RWnBgAAAdQ"]
[Fri Apr 10 05:54:45.769132 2026] [:error] [pid 12685:tid 12704] [client 62.197.152.148:57538] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adggJc8f5ssYShsynapyjAAAANE"]
[Fri Apr 10 05:54:46.680523 2026] [:error] [pid 59218:tid 59229] [client 62.197.152.148:32968] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adggJojSO_Wp4VS3Qe_sIgAAAYk"]
[Fri Apr 10 05:54:48.513936 2026] [:error] [pid 59286:tid 59299] [client 62.197.152.148:32972] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Fri Apr 10 05:54:49.431042 2026] [:error] [pid 59286:tid 59289] [client 62.197.152.148:32972] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Fri Apr 10 05:54:51.262388 2026] [:error] [pid 59286:tid 59304] [client 62.197.152.148:32972] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adggK21gMezN4JEr-RWnEgAAAdA"]
[Fri Apr 10 05:54:53.600709 2026] [:error] [pid 12685:tid 12710] [client 62.197.152.148:32974] [client 62.197.152.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.197.152.148, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adggLc8f5ssYShsynapynAAAANc"]
[Fri Apr 10 05:54:54.075108 2026] [:error] [pid 12685:tid 12692] [client 62.197.152.148:32974] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri Apr 10 05:54:56.421534 2026] [:error] [pid 12685:tid 12704] [client 62.197.152.148:32974] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Fri Apr 10 05:54:56.889287 2026] [:error] [pid 12685:tid 12710] [client 62.197.152.148:32974] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri Apr 10 05:54:59.230280 2026] [:error] [pid 12685:tid 12697] [client 62.197.152.148:32974] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adggM88f5ssYShsynapytAAAAMo"]
[Fri Apr 10 05:55:00.606117 2026] [:error] [pid 12685:tid 12694] [client 62.197.152.148:34948] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Fri Apr 10 05:55:01.061211 2026] [:error] [pid 12685:tid 12690] [client 62.197.152.148:34948] [client 62.197.152.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.197.152.148, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adggNc8f5ssYShsynapyuwAAAMM"]
[Fri Apr 10 05:55:01.979800 2026] [:error] [pid 12685:tid 12696] [client 62.197.152.148:34948] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/item.php"] [unique_id "adggNc8f5ssYShsynapyvgAAAMk"]
[Fri Apr 10 05:55:04.789033 2026] [:error] [pid 59218:tid 59231] [client 62.197.152.148:37841] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Apr 10 05:55:05.729797 2026] [:error] [pid 59218:tid 59228] [client 62.197.152.148:37841] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Fri Apr 10 05:55:06.664780 2026] [:error] [pid 59218:tid 59234] [client 62.197.152.148:37841] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adggOojSO_Wp4VS3Qe_sMQAAAY4"]
[Fri Apr 10 05:55:07.579550 2026] [:error] [pid 12685:tid 12690] [client 62.197.152.148:45786] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Fri Apr 10 05:55:08.955251 2026] [:error] [pid 12685:tid 12696] [client 62.197.152.148:45786] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Fri Apr 10 05:55:09.876043 2026] [:error] [pid 12685:tid 12706] [client 62.197.152.148:45786] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Fri Apr 10 05:55:10.792496 2026] [:error] [pid 12685:tid 12710] [client 62.197.152.148:45786] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Fri Apr 10 05:55:11.247647 2026] [:error] [pid 12685:tid 12703] [client 62.197.152.148:45786] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adggP88f5ssYShsynapyzwAAANA"]
[Fri Apr 10 05:55:12.162471 2026] [:error] [pid 59286:tid 59298] [client 62.197.152.148:45796] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri Apr 10 05:55:12.623756 2026] [:error] [pid 59286:tid 59312] [client 62.197.152.148:45796] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri Apr 10 05:55:13.079882 2026] [:error] [pid 59286:tid 59292] [client 62.197.152.148:45796] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adggQW1gMezN4JEr-RWnIAAAAcQ"]
[Fri Apr 10 05:55:14.452972 2026] [:error] [pid 12575:tid 12636] [client 62.197.152.148:45808] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Fri Apr 10 05:55:15.367447 2026] [:error] [pid 12575:tid 12624] [client 62.197.152.148:45808] [client 62.197.152.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.197.152.148, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adggQyjFTOT5X6zsPClPSAAAAEI"]
[Fri Apr 10 05:55:15.828222 2026] [:error] [pid 12575:tid 12622] [client 62.197.152.148:45808] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adggQyjFTOT5X6zsPClPSgAAAEA"]
[Fri Apr 10 05:55:21.337854 2026] [:error] [pid 12574:tid 12618] [client 62.197.152.148:34288] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Fri Apr 10 05:55:24.093735 2026] [:error] [pid 12574:tid 12614] [client 62.197.152.148:34288] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri Apr 10 05:55:24.549156 2026] [:error] [pid 12574:tid 12615] [client 62.197.152.148:34288] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adggTHw-1tvJISKJyrTZWgAAABU"]
[Fri Apr 10 05:55:25.483735 2026] [:error] [pid 12685:tid 12690] [client 62.197.152.148:34294] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri Apr 10 05:55:26.887743 2026] [:error] [pid 12685:tid 12707] [client 62.197.152.148:34294] [client 62.197.152.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 62.197.152.148, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adggTs8f5ssYShsynapy3AAAANQ"]
[Fri Apr 10 05:55:27.360399 2026] [:error] [pid 12685:tid 12704] [client 62.197.152.148:34294] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Fri Apr 10 05:55:27.829410 2026] [:error] [pid 12685:tid 12710] [client 62.197.152.148:34294] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Fri Apr 10 05:55:28.298333 2026] [:error] [pid 12685:tid 12703] [client 62.197.152.148:34294] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Fri Apr 10 05:55:28.764495 2026] [:error] [pid 12685:tid 12688] [client 62.197.152.148:34294] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adggUM8f5ssYShsynapy4QAAAME"]
[Fri Apr 10 05:55:29.689854 2026] [:error] [pid 59286:tid 59309] [client 62.197.152.148:53368] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Apr 10 05:55:30.145318 2026] [:error] [pid 59286:tid 59300] [client 62.197.152.148:53368] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adggUm1gMezN4JEr-RWnNgAAAcw"]
[Fri Apr 10 05:55:31.518281 2026] [:error] [pid 12685:tid 12700] [client 62.197.152.148:53374] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri Apr 10 05:55:31.974761 2026] [:error] [pid 12685:tid 12705] [client 62.197.152.148:53374] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adggU88f5ssYShsynapy5QAAANI"]
[Fri Apr 10 05:55:33.806349 2026] [:error] [pid 59218:tid 59229] [client 62.197.152.148:53386] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Fri Apr 10 05:55:34.261405 2026] [:error] [pid 59218:tid 59235] [client 62.197.152.148:53386] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adggVojSO_Wp4VS3Qe_sQgAAAY8"]
[Fri Apr 10 05:55:35.172126 2026] [:error] [pid 59218:tid 59223] [client 62.197.152.148:53390] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adggV4jSO_Wp4VS3Qe_sRQAAAYM"]
[Fri Apr 10 05:55:36.085474 2026] [:error] [pid 12685:tid 12698] [client 62.197.152.148:53394] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Apr 10 05:55:36.543451 2026] [:error] [pid 12685:tid 12691] [client 62.197.152.148:53394] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Fri Apr 10 05:55:38.375758 2026] [:error] [pid 12685:tid 12695] [client 62.197.152.148:53394] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adggWs8f5ssYShsynapy6wAAAMg"]
[Fri Apr 10 05:55:39.747490 2026] [:error] [pid 59218:tid 59243] [client 62.197.152.148:53374] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adggW4jSO_Wp4VS3Qe_sRwAAAZc"]
[Fri Apr 10 05:55:42.049656 2026] [:error] [pid 12685:tid 12697] [client 62.197.152.148:53390] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adggXs8f5ssYShsynapy9AAAAMo"]
[Fri Apr 10 05:55:42.964401 2026] [:error] [pid 59098:tid 59103] [client 62.197.152.148:53400] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Fri Apr 10 05:55:43.886906 2026] [:error] [pid 59098:tid 59113] [client 62.197.152.148:53400] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Fri Apr 10 05:55:44.343087 2026] [:error] [pid 59098:tid 59116] [client 62.197.152.148:53400] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adggYCZshs05JVy8bJ4WAgAAAQ8"]
[Fri Apr 10 05:55:45.258475 2026] [:error] [pid 59286:tid 59298] [client 62.197.152.148:53402] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri Apr 10 05:55:46.172857 2026] [:error] [pid 59286:tid 59299] [client 62.197.152.148:53402] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/click.php"] [unique_id "adggYm1gMezN4JEr-RWnUQAAAcs"]
[Fri Apr 10 05:55:48.467518 2026] [:error] [pid 59144:tid 59150] [client 62.197.152.148:56844] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adggZBta6MlufQo3_orsSAAAAUQ"]
[Fri Apr 10 05:55:49.843977 2026] [:error] [pid 59098:tid 59114] [client 62.197.152.148:56860] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Apr 10 05:55:51.222136 2026] [:error] [pid 59098:tid 59119] [client 62.197.152.148:56860] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Apr 10 05:55:52.140795 2026] [:error] [pid 59098:tid 59121] [client 62.197.152.148:56860] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Fri Apr 10 05:55:52.597049 2026] [:error] [pid 59098:tid 59123] [client 62.197.152.148:56860] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adggaCZshs05JVy8bJ4WDAAAARY"]
[Fri Apr 10 05:55:53.528575 2026] [:error] [pid 59098:tid 59113] [client 62.197.152.148:56866] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adggaSZshs05JVy8bJ4WDgAAAQw"]
[Fri Apr 10 05:55:55.989908 2026] [:error] [pid 59218:tid 59241] [client 62.197.152.148:56874] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adgga4jSO_Wp4VS3Qe_sVAAAAZU"]
[Fri Apr 10 05:55:56.901314 2026] [:error] [pid 12576:tid 12658] [client 62.197.152.148:33510] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adggbAZp1JUS4li1Qnu1BQAAAIk"]
[Fri Apr 10 05:55:57.816947 2026] [:error] [pid 59098:tid 59107] [client 62.197.152.148:33520] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Fri Apr 10 05:55:58.271602 2026] [:error] [pid 59098:tid 59110] [client 62.197.152.148:33520] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adggbiZshs05JVy8bJ4WEQAAAQk"]
[Fri Apr 10 05:55:59.181875 2026] [:error] [pid 59286:tid 59308] [client 62.197.152.148:33530] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adggb21gMezN4JEr-RWnVQAAAdQ"]
[Fri Apr 10 05:56:00.125362 2026] [:error] [pid 59286:tid 59309] [client 62.197.152.148:33544] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Fri Apr 10 05:56:01.042960 2026] [:error] [pid 59286:tid 59291] [client 62.197.152.148:33544] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adggcW1gMezN4JEr-RWnWAAAAcM"]
[Fri Apr 10 05:56:01.972354 2026] [:error] [pid 59286:tid 59300] [client 62.197.152.148:33546] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adggcW1gMezN4JEr-RWnWQAAAcw"]
[Fri Apr 10 05:56:02.884220 2026] [:error] [pid 59286:tid 59303] [client 62.197.152.148:33562] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adggcm1gMezN4JEr-RWnXgAAAc8"]
[Fri Apr 10 05:56:03.794049 2026] [:error] [pid 12685:tid 12704] [client 62.197.152.148:33570] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adggc88f5ssYShsynapzDAAAANE"]
[Fri Apr 10 05:56:05.165502 2026] [:error] [pid 59144:tid 59146] [client 62.197.152.148:33580] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adggdRta6MlufQo3_orsTQAAAUA"]
[Fri Apr 10 05:56:06.994415 2026] [:error] [pid 59218:tid 59234] [client 62.197.152.148:33596] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adggdojSO_Wp4VS3Qe_sXwAAAY4"]
[Fri Apr 10 05:56:07.909281 2026] [:error] [pid 59098:tid 59119] [client 62.197.152.148:60632] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Fri Apr 10 05:56:09.287453 2026] [:error] [pid 59098:tid 59123] [client 62.197.152.148:60632] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Fri Apr 10 05:56:09.743747 2026] [:error] [pid 59098:tid 59108] [client 62.197.152.148:60632] [client 62.197.152.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adggeSZshs05JVy8bJ4WGgAAAQc"]
[Fri Apr 10 05:56:11.136045 2026] [:error] [pid 12575:tid 12625] [client 62.197.152.148:60636] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Fri Apr 10 05:56:11.595587 2026] [:error] [pid 12575:tid 12629] [client 62.197.152.148:60636] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Fri Apr 10 05:56:12.510776 2026] [:error] [pid 12575:tid 12635] [client 62.197.152.148:60636] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/beez3/bypass.php"] [unique_id "adggfCjFTOT5X6zsPClPVgAAAE0"]
[Fri Apr 10 05:56:13.422954 2026] [:error] [pid 12575:tid 12636] [client 62.197.152.148:60640] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/beez3/bypass.php"] [unique_id "adggfSjFTOT5X6zsPClPVwAAAE4"]
[Fri Apr 10 05:56:14.333580 2026] [:error] [pid 59218:tid 59223] [client 62.197.152.148:60650] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/beez3/bypass.php"] [unique_id "adggfojSO_Wp4VS3Qe_sYwAAAYM"]
[Fri Apr 10 05:56:15.242738 2026] [:error] [pid 59218:tid 59239] [client 62.197.152.148:60652] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/beez3/bypass.php"] [unique_id "adggf4jSO_Wp4VS3Qe_sZAAAAZM"]
[Fri Apr 10 05:56:16.151539 2026] [:error] [pid 12576:tid 12671] [client 62.197.152.148:60660] [client 62.197.152.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/beez3/bypass.php"] [unique_id "adgggAZp1JUS4li1Qnu1DAAAAJY"]
[Fri Apr 10 05:57:04.754171 2026] [autoindex:error] [pid 59218:tid 59234] [client 62.197.152.198:37764] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Apr 11 01:42:07.238201 2026] [:error] [pid 55451:tid 55476] [client 52.143.152.19:46146] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Sat Apr 11 01:42:07.475445 2026] [:error] [pid 55451:tid 55463] [client 52.143.152.19:46146] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Sat Apr 11 01:42:07.715015 2026] [:error] [pid 55451:tid 55467] [client 52.143.152.19:46146] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Sat Apr 11 01:42:08.014397 2026] [:error] [pid 55451:tid 55468] [client 52.143.152.19:46146] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Sat Apr 11 01:42:08.253714 2026] [:error] [pid 55451:tid 55459] [client 52.143.152.19:46146] File does not exist: /usr/local/apache/htdocs/suspended-page/hwjtry0zd1fzeakcuzn8Cdefault.php
[Sat Apr 11 01:42:08.493932 2026] [:error] [pid 55451:tid 55454] [client 52.143.152.19:46146] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat Apr 11 01:42:08.737851 2026] [:error] [pid 55451:tid 55456] [client 52.143.152.19:46146] File does not exist: /usr/local/apache/htdocs/suspended-page/oLEzRVqmJJPFSucdefault.php
[Sat Apr 11 01:42:08.992698 2026] [:error] [pid 55451:tid 55453] [client 52.143.152.19:46146] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Sat Apr 11 01:42:09.234138 2026] [:error] [pid 55451:tid 55467] [client 52.143.152.19:46146] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Sat Apr 11 01:42:09.471600 2026] [:error] [pid 55451:tid 55474] [client 52.143.152.19:46146] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Sat Apr 11 01:42:09.706016 2026] [:error] [pid 55451:tid 55475] [client 52.143.152.19:46146] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adk2cXApxuyB7yCS5Rn3ZgAAANY"]
[Sat Apr 11 01:42:10.306421 2026] [:error] [pid 21706:tid 21711] [client 52.143.152.19:46149] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adk2ciGQ1M5d8fQSsLGb0wAAAAM"]
[Sat Apr 11 01:42:10.898810 2026] [:error] [pid 55451:tid 55460] [client 52.143.152.19:46168] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adk2cnApxuyB7yCS5Rn3bQAAAMc"]
[Sat Apr 11 01:42:11.594160 2026] [:error] [pid 21569:tid 21650] [client 52.143.152.19:46142] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adk2c3AvQTgvXJ6vHoqTcwAAAIU"]
[Sat Apr 11 01:42:12.130895 2026] [:error] [pid 21706:tid 21708] [client 52.143.152.19:58007] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "adk2dCGQ1M5d8fQSsLGb2AAAAAA"]
[Sat Apr 11 01:42:12.642189 2026] [:error] [pid 21706:tid 21719] [client 52.143.152.19:46171] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "adk2dCGQ1M5d8fQSsLGb4AAAAAs"]
[Sat Apr 11 01:42:13.149319 2026] [:error] [pid 55451:tid 55463] [client 52.143.152.19:58717] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "adk2dXApxuyB7yCS5Rn3dwAAAMo"]
[Sat Apr 11 01:42:13.647644 2026] [:error] [pid 21568:tid 21594] [client 52.143.152.19:46093] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "adk2dYiz5v_ljZxkpR_AqwAAARY"]
[Sat Apr 11 01:42:14.115355 2026] [:error] [pid 21568:tid 21590] [client 52.143.152.19:58032] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adk2doiz5v_ljZxkpR_ArwAAARI"]
[Sat Apr 11 01:42:14.606083 2026] [:error] [pid 21570:tid 21687] [client 52.143.152.19:46135] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adk2djKs5t9xRSNL6cm-wAAAAE0"]
[Sat Apr 11 01:42:15.089971 2026] [:error] [pid 21706:tid 21715] [client 52.143.152.19:58749] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adk2dyGQ1M5d8fQSsLGb7QAAAAc"]
[Sat Apr 11 01:42:15.631483 2026] [:error] [pid 21570:tid 21689] [client 52.143.152.19:58719] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adk2dzKs5t9xRSNL6cm-yQAAAE8"]
[Sat Apr 11 01:42:16.100553 2026] [:error] [pid 21706:tid 21717] [client 52.143.152.19:44357] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "adk2eCGQ1M5d8fQSsLGb9QAAAAk"]
[Sat Apr 11 01:42:16.646707 2026] [:error] [pid 21570:tid 21687] [client 52.143.152.19:46131] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "adk2eDKs5t9xRSNL6cm-zQAAAE0"]
[Sat Apr 11 01:42:17.114911 2026] [:error] [pid 55451:tid 55474] [client 52.143.152.19:46114] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "adk2eXApxuyB7yCS5Rn3hQAAANU"]
[Sat Apr 11 01:42:17.591664 2026] [:error] [pid 21706:tid 21714] [client 52.143.152.19:58709] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "adk2eSGQ1M5d8fQSsLGb9wAAAAY"]
[Sat Apr 11 01:42:18.118480 2026] [:error] [pid 55451:tid 55472] [client 52.143.152.19:58022] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "adk2enApxuyB7yCS5Rn3jQAAANM"]
[Sat Apr 11 01:42:18.603849 2026] [:error] [pid 21570:tid 21681] [client 52.143.152.19:46193] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "adk2ejKs5t9xRSNL6cm-0AAAAEo"]
[Sat Apr 11 01:42:19.089653 2026] [:error] [pid 21706:tid 21715] [client 52.143.152.19:58737] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "adk2eyGQ1M5d8fQSsLGb_QAAAAc"]
[Sat Apr 11 01:42:19.599197 2026] [:error] [pid 21568:tid 21574] [client 52.143.152.19:46104] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "adk2e4iz5v_ljZxkpR_AswAAAQI"]
[Sat Apr 11 01:42:20.070101 2026] [:error] [pid 21568:tid 21581] [client 52.143.152.19:50148] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "adk2fIiz5v_ljZxkpR_AtAAAAQk"]
[Sat Apr 11 01:42:20.537828 2026] [:error] [pid 21706:tid 21712] [client 52.143.152.19:46153] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "adk2fCGQ1M5d8fQSsLGcAgAAAAQ"]
[Sat Apr 11 01:42:21.044102 2026] [:error] [pid 21568:tid 21594] [client 52.143.152.19:58047] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "adk2fYiz5v_ljZxkpR_AugAAARY"]
[Sat Apr 11 01:42:21.591366 2026] [:error] [pid 55451:tid 55472] [client 52.143.152.19:58699] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "adk2fXApxuyB7yCS5Rn3mQAAANM"]
[Sat Apr 11 01:42:22.058904 2026] [:error] [pid 21570:tid 21698] [client 52.143.152.19:46140] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "adk2fjKs5t9xRSNL6cm-0wAAAFg"]
[Sat Apr 11 01:42:22.536440 2026] [:error] [pid 55451:tid 55468] [client 52.143.152.19:58015] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "adk2fnApxuyB7yCS5Rn3nQAAAM8"]
[Sat Apr 11 01:42:23.002824 2026] [:error] [pid 21568:tid 21591] [client 52.143.152.19:46179] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "adk2f4iz5v_ljZxkpR_AyQAAARM"]
[Sat Apr 11 01:42:23.475588 2026] [:error] [pid 21568:tid 21578] [client 52.143.152.19:58013] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "adk2f4iz5v_ljZxkpR_AywAAAQY"]
[Sat Apr 11 01:42:23.971158 2026] [:error] [pid 55451:tid 55474] [client 52.143.152.19:58005] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adk2f3ApxuyB7yCS5Rn3qAAAANU"]
[Sat Apr 11 01:42:24.480920 2026] [:error] [pid 55451:tid 55462] [client 52.143.152.19:58730] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adk2gHApxuyB7yCS5Rn3qwAAAMk"]
[Sat Apr 11 01:42:24.958141 2026] [:error] [pid 21570:tid 21687] [client 52.143.152.19:58020] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adk2gDKs5t9xRSNL6cm-2AAAAE0"]
[Sat Apr 11 01:42:25.429691 2026] [:error] [pid 21568:tid 21594] [client 52.143.152.19:46186] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adk2gYiz5v_ljZxkpR_AzwAAARY"]
[Sat Apr 11 01:42:25.921797 2026] [:error] [pid 21568:tid 21590] [client 52.143.152.19:46086] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "adk2gYiz5v_ljZxkpR_A0QAAARI"]
[Sat Apr 11 01:42:26.480290 2026] [:error] [pid 55451:tid 55454] [client 52.143.152.19:58748] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "adk2gnApxuyB7yCS5Rn3vAAAAME"]
[Sat Apr 11 01:42:27.044578 2026] [:error] [pid 21568:tid 21583] [client 52.143.152.19:58751] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "adk2g4iz5v_ljZxkpR_A1AAAAQs"]
[Sat Apr 11 01:42:27.635564 2026] [:error] [pid 21568:tid 21591] [client 52.143.152.19:46164] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "adk2g4iz5v_ljZxkpR_A2AAAARM"]
[Sat Apr 11 01:42:28.124339 2026] [:error] [pid 21569:tid 21662] [client 52.143.152.19:46206] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "adk2hHAvQTgvXJ6vHoqTfAAAAI8"]
[Sat Apr 11 01:42:28.654244 2026] [:error] [pid 21570:tid 21695] [client 52.143.152.19:46083] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "adk2hDKs5t9xRSNL6cm-3gAAAFU"]
[Sat Apr 11 01:42:29.130220 2026] [:error] [pid 55451:tid 55472] [client 52.143.152.19:57997] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "adk2hXApxuyB7yCS5Rn3zAAAANM"]
[Sat Apr 11 01:42:29.598531 2026] [:error] [pid 21568:tid 21590] [client 52.143.152.19:46190] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "adk2hYiz5v_ljZxkpR_A6gAAARI"]
[Sat Apr 11 01:42:30.100555 2026] [:error] [pid 21569:tid 21669] [client 52.143.152.19:46109] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blqjs.php"] [unique_id "adk2hnAvQTgvXJ6vHoqTgAAAAJI"]
[Sat Apr 11 01:42:30.588507 2026] [:error] [pid 55451:tid 55468] [client 52.143.152.19:58011] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blqjs.php"] [unique_id "adk2hnApxuyB7yCS5Rn32gAAAM8"]
[Sat Apr 11 01:42:31.061209 2026] [:error] [pid 55451:tid 55475] [client 52.143.152.19:50137] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blqjs.php"] [unique_id "adk2h3ApxuyB7yCS5Rn33gAAANY"]
[Sat Apr 11 01:42:31.539525 2026] [:error] [pid 55451:tid 55477] [client 52.143.152.19:46134] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blqjs.php"] [unique_id "adk2h3ApxuyB7yCS5Rn34AAAANg"]
[Sat Apr 11 01:42:32.008492 2026] [:error] [pid 21706:tid 21722] [client 52.143.152.19:57990] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "adk2iCGQ1M5d8fQSsLGcGwAAAA4"]
[Sat Apr 11 01:42:32.479559 2026] [:error] [pid 21570:tid 21694] [client 52.143.152.19:58726] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "adk2iDKs5t9xRSNL6cm-5QAAAFQ"]
[Sat Apr 11 01:42:33.010463 2026] [:error] [pid 21569:tid 21680] [client 52.143.152.19:58701] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "adk2iXAvQTgvXJ6vHoqThwAAAJc"]
[Sat Apr 11 01:42:33.476992 2026] [:error] [pid 55451:tid 55455] [client 52.143.152.19:58043] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "adk2iXApxuyB7yCS5Rn37wAAAMI"]
[Sat Apr 11 01:42:33.966337 2026] [:error] [pid 21570:tid 21693] [client 52.143.152.19:46198] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "adk2iTKs5t9xRSNL6cm-6gAAAFM"]
[Sat Apr 11 01:42:34.480903 2026] [:error] [pid 21568:tid 21594] [client 52.143.152.19:46202] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "adk2ioiz5v_ljZxkpR_A_wAAARY"]
[Sat Apr 11 01:42:35.103101 2026] [:error] [pid 21570:tid 21696] [client 52.143.152.19:46166] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "adk2izKs5t9xRSNL6cm-8AAAAFY"]
[Sat Apr 11 01:42:35.620788 2026] [:error] [pid 21568:tid 21593] [client 52.143.152.19:57996] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fetch.php"] [unique_id "adk2i4iz5v_ljZxkpR_BDAAAARU"]
[Sat Apr 11 01:42:36.119775 2026] [:error] [pid 21568:tid 21585] [client 52.143.152.19:46191] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adk2jIiz5v_ljZxkpR_BEQAAAQ0"]
[Sat Apr 11 01:42:36.591440 2026] [:error] [pid 55451:tid 55464] [client 52.143.152.19:58024] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adk2jHApxuyB7yCS5Rn3_wAAAMs"]
[Sat Apr 11 01:42:37.131503 2026] [:error] [pid 21570:tid 21673] [client 52.143.152.19:58033] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adk2jTKs5t9xRSNL6cm-9wAAAEY"]
[Sat Apr 11 01:42:37.619523 2026] [:error] [pid 21569:tid 21669] [client 52.143.152.19:46124] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adk2jXAvQTgvXJ6vHoqTkAAAAJI"]
[Sat Apr 11 01:42:38.171871 2026] [:error] [pid 55451:tid 55477] [client 52.143.152.19:50127] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk2jnApxuyB7yCS5Rn4AwAAANg"]
[Sat Apr 11 01:42:38.793228 2026] [:error] [pid 21706:tid 21725] [client 52.143.152.19:58745] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk2jiGQ1M5d8fQSsLGcIgAAABE"]
[Sat Apr 11 01:42:39.390680 2026] [:error] [pid 21706:tid 21724] [client 52.143.152.19:46137] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk2jyGQ1M5d8fQSsLGcLQAAABA"]
[Sat Apr 11 01:42:39.983784 2026] [:error] [pid 21569:tid 21646] [client 52.143.152.19:46199] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adk2j3AvQTgvXJ6vHoqTlgAAAIE"]
[Sat Apr 11 01:42:40.906109 2026] [:error] [pid 21568:tid 21573] [client 52.143.152.19:46141] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oircv.php"] [unique_id "adk2kIiz5v_ljZxkpR_BKAAAAQE"]
[Sat Apr 11 01:42:41.628640 2026] [:error] [pid 55451:tid 55465] [client 52.143.152.19:46180] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oircv.php"] [unique_id "adk2kXApxuyB7yCS5Rn4DAAAAMw"]
[Sat Apr 11 01:42:42.251397 2026] [:error] [pid 21706:tid 21725] [client 52.143.152.19:46150] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oircv.php"] [unique_id "adk2kiGQ1M5d8fQSsLGcMwAAABE"]
[Sat Apr 11 01:42:42.756538 2026] [:error] [pid 55451:tid 55460] [client 52.143.152.19:46160] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oircv.php"] [unique_id "adk2knApxuyB7yCS5Rn4GAAAAMc"]
[Sat Apr 11 01:42:43.331864 2026] [:error] [pid 21570:tid 21689] [client 52.143.152.19:46136] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blnux.php"] [unique_id "adk2kzKs5t9xRSNL6cm_AgAAAE8"]
[Sat Apr 11 01:42:43.850160 2026] [:error] [pid 21570:tid 21694] [client 52.143.152.19:58728] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blnux.php"] [unique_id "adk2kzKs5t9xRSNL6cm_BAAAAFQ"]
[Sat Apr 11 01:42:44.359643 2026] [:error] [pid 21569:tid 21650] [client 52.143.152.19:46144] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blnux.php"] [unique_id "adk2lHAvQTgvXJ6vHoqToAAAAIU"]
[Sat Apr 11 01:42:44.833269 2026] [:error] [pid 21706:tid 21714] [client 52.143.152.19:58746] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blnux.php"] [unique_id "adk2lCGQ1M5d8fQSsLGcQgAAAAY"]
[Sat Apr 11 01:42:45.303388 2026] [:error] [pid 21706:tid 21723] [client 52.143.152.19:58735] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk2lSGQ1M5d8fQSsLGcRgAAAA8"]
[Sat Apr 11 01:42:45.857024 2026] [:error] [pid 55451:tid 55472] [client 52.143.152.19:46157] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk2lXApxuyB7yCS5Rn4JAAAANM"]
[Sat Apr 11 01:42:46.416846 2026] [:error] [pid 21706:tid 21730] [client 52.143.152.19:46121] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk2liGQ1M5d8fQSsLGcSwAAABY"]
[Sat Apr 11 01:42:46.925835 2026] [:error] [pid 55451:tid 55470] [client 52.143.152.19:46185] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adk2lnApxuyB7yCS5Rn4KgAAANE"]
[Sat Apr 11 01:42:47.429828 2026] [:error] [pid 21570:tid 21685] [client 52.143.152.19:57993] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk2lzKs5t9xRSNL6cm_DQAAAEw"]
[Sat Apr 11 01:42:47.971066 2026] [:error] [pid 55451:tid 55459] [client 52.143.152.19:58028] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk2l3ApxuyB7yCS5Rn4LwAAAMY"]
[Sat Apr 11 01:42:48.438627 2026] [:error] [pid 21569:tid 21651] [client 52.143.152.19:58711] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk2mHAvQTgvXJ6vHoqTqAAAAIY"]
[Sat Apr 11 01:42:48.921900 2026] [:error] [pid 21570:tid 21695] [client 52.143.152.19:46158] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Spow_SRw.php"] [unique_id "adk2mDKs5t9xRSNL6cm_EAAAAFU"]
[Sat Apr 11 01:42:49.409775 2026] [:error] [pid 55451:tid 55460] [client 52.143.152.19:46175] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albrt.php"] [unique_id "adk2mXApxuyB7yCS5Rn4NQAAAMc"]
[Sat Apr 11 01:42:49.983691 2026] [:error] [pid 21570:tid 21668] [client 52.143.152.19:46207] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albrt.php"] [unique_id "adk2mTKs5t9xRSNL6cm_FAAAAEM"]
[Sat Apr 11 01:42:50.551442 2026] [:error] [pid 21568:tid 21594] [client 52.143.152.19:58021] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albrt.php"] [unique_id "adk2moiz5v_ljZxkpR_BNwAAARY"]
[Sat Apr 11 01:42:51.371083 2026] [:error] [pid 21568:tid 21595] [client 52.143.152.19:46116] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albrt.php"] [unique_id "adk2m4iz5v_ljZxkpR_BQAAAARc"]
[Sat Apr 11 01:42:51.883943 2026] [:error] [pid 21706:tid 21718] [client 52.143.152.19:46129] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxivicLhot.php"] [unique_id "adk2myGQ1M5d8fQSsLGcXgAAAAo"]
[Sat Apr 11 01:42:52.418119 2026] [:error] [pid 55451:tid 55465] [client 52.143.152.19:46188] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxivicLhot.php"] [unique_id "adk2nHApxuyB7yCS5Rn4SwAAAMw"]
[Sat Apr 11 01:42:52.975004 2026] [:error] [pid 21570:tid 21663] [client 52.143.152.19:58742] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxivicLhot.php"] [unique_id "adk2nDKs5t9xRSNL6cm_HwAAAEE"]
[Sat Apr 11 01:42:53.509133 2026] [:error] [pid 21706:tid 21711] [client 52.143.152.19:58703] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxivicLhot.php"] [unique_id "adk2nSGQ1M5d8fQSsLGcZwAAAAM"]
[Sat Apr 11 01:42:54.111421 2026] [:error] [pid 21706:tid 21715] [client 52.143.152.19:46201] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "adk2niGQ1M5d8fQSsLGcbwAAAAc"]
[Sat Apr 11 01:42:54.729557 2026] [:error] [pid 55451:tid 55471] [client 52.143.152.19:50108] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "adk2nnApxuyB7yCS5Rn4UAAAANI"]
[Sat Apr 11 01:42:55.353500 2026] [:error] [pid 55451:tid 55474] [client 52.143.152.19:46165] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "adk2n3ApxuyB7yCS5Rn4UgAAANU"]
[Sat Apr 11 01:42:55.875291 2026] [:error] [pid 21706:tid 21716] [client 52.143.152.19:58039] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "adk2nyGQ1M5d8fQSsLGcggAAAAg"]
[Sat Apr 11 01:42:56.376790 2026] [:error] [pid 21570:tid 21682] [client 52.143.152.19:58741] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "adk2oDKs5t9xRSNL6cm_JwAAAEs"]
[Sat Apr 11 01:42:56.860118 2026] [:error] [pid 21568:tid 21588] [client 52.143.152.19:46181] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "adk2oIiz5v_ljZxkpR_BTwAAARA"]
[Sat Apr 11 01:42:57.440548 2026] [:error] [pid 21570:tid 21673] [client 52.143.152.19:44378] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "adk2oTKs5t9xRSNL6cm_MwAAAEY"]
[Sat Apr 11 01:42:57.908051 2026] [:error] [pid 21568:tid 21584] [client 52.143.152.19:58706] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "adk2oYiz5v_ljZxkpR_BVQAAAQw"]
[Sat Apr 11 01:42:58.372955 2026] [:error] [pid 55451:tid 55460] [client 52.143.152.19:46167] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "adk2onApxuyB7yCS5Rn4WAAAAMc"]
[Sat Apr 11 01:42:58.840202 2026] [:error] [pid 21568:tid 21576] [client 52.143.152.19:58744] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "adk2ooiz5v_ljZxkpR_BYAAAAQQ"]
[Sat Apr 11 01:42:59.353762 2026] [:error] [pid 21706:tid 21710] [client 52.143.152.19:46148] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "adk2oyGQ1M5d8fQSsLGcjgAAAAI"]
[Sat Apr 11 01:42:59.890044 2026] [:error] [pid 21568:tid 21579] [client 52.143.152.19:46107] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "adk2o4iz5v_ljZxkpR_BagAAAQc"]
[Sat Apr 11 01:43:00.382992 2026] [:error] [pid 21568:tid 21586] [client 52.143.152.19:57988] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "adk2pIiz5v_ljZxkpR_BawAAAQ4"]
[Sat Apr 11 01:43:00.903179 2026] [:error] [pid 55451:tid 55468] [client 52.143.152.19:58740] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "adk2pHApxuyB7yCS5Rn4aAAAAM8"]
[Sat Apr 11 01:43:01.407982 2026] [:error] [pid 21706:tid 21722] [client 52.143.152.19:58003] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "adk2pSGQ1M5d8fQSsLGclQAAAA4"]
[Sat Apr 11 01:43:01.893933 2026] [:error] [pid 21706:tid 21719] [client 52.143.152.19:58041] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "adk2pSGQ1M5d8fQSsLGcmgAAAAs"]
[Sat Apr 11 01:43:02.416280 2026] [:error] [pid 21570:tid 21675] [client 52.143.152.19:46204] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "adk2pjKs5t9xRSNL6cm_QwAAAEc"]
[Sat Apr 11 01:43:02.925226 2026] [:error] [pid 21706:tid 21732] [client 52.143.152.19:46152] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "adk2piGQ1M5d8fQSsLGcnQAAABg"]
[Sat Apr 11 01:43:03.398573 2026] [:error] [pid 55451:tid 55472] [client 52.143.152.19:58734] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "adk2p3ApxuyB7yCS5Rn4eAAAANM"]
[Sat Apr 11 01:43:03.919908 2026] [:error] [pid 55451:tid 55453] [client 52.143.152.19:50129] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "adk2p3ApxuyB7yCS5Rn4fQAAAMA"]
[Sat Apr 11 01:43:04.395500 2026] [:error] [pid 55451:tid 55474] [client 52.143.152.19:50057] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fyflv.php"] [unique_id "adk2qHApxuyB7yCS5Rn4ggAAANU"]
[Sat Apr 11 01:43:04.873905 2026] [:error] [pid 21570:tid 21675] [client 52.143.152.19:46203] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fyflv.php"] [unique_id "adk2qDKs5t9xRSNL6cm_TgAAAEc"]
[Sat Apr 11 01:43:05.352873 2026] [:error] [pid 21706:tid 21730] [client 52.143.152.19:58001] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fyflv.php"] [unique_id "adk2qSGQ1M5d8fQSsLGcpAAAABY"]
[Sat Apr 11 01:43:05.856167 2026] [:error] [pid 21706:tid 21731] [client 52.143.152.19:46090] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fyflv.php"] [unique_id "adk2qSGQ1M5d8fQSsLGcpwAAABc"]
[Sat Apr 11 01:43:06.368769 2026] [:error] [pid 55451:tid 55474] [client 52.143.152.19:58729] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "adk2qnApxuyB7yCS5Rn4kAAAANU"]
[Sat Apr 11 01:43:06.859774 2026] [:error] [pid 55451:tid 55454] [client 52.143.152.19:58694] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "adk2qnApxuyB7yCS5Rn4lAAAAME"]
[Sat Apr 11 01:43:07.332402 2026] [:error] [pid 21570:tid 21689] [client 52.143.152.19:50145] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "adk2qzKs5t9xRSNL6cm_VQAAAE8"]
[Sat Apr 11 01:43:07.834801 2026] [:error] [pid 55451:tid 55454] [client 52.143.152.19:46125] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "adk2q3ApxuyB7yCS5Rn4owAAAME"]
[Sat Apr 11 01:43:08.307572 2026] [:error] [pid 21568:tid 21583] [client 52.143.152.19:58708] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sde.php"] [unique_id "adk2rIiz5v_ljZxkpR_BewAAAQs"]
[Sat Apr 11 01:43:08.790601 2026] [:error] [pid 55451:tid 55461] [client 52.143.152.19:58000] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sde.php"] [unique_id "adk2rHApxuyB7yCS5Rn4qwAAAMg"]
[Sat Apr 11 01:43:09.280272 2026] [:error] [pid 21568:tid 21580] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/sde.php
[Sat Apr 11 01:43:09.514064 2026] [:error] [pid 21568:tid 21593] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/wpb.php
[Sat Apr 11 01:43:09.783985 2026] [:error] [pid 21568:tid 21584] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sat Apr 11 01:43:10.019129 2026] [:error] [pid 21568:tid 21582] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/9EaklzMysJ.php
[Sat Apr 11 01:43:10.259140 2026] [:error] [pid 21568:tid 21581] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Sat Apr 11 01:43:10.494937 2026] [:error] [pid 21568:tid 21590] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/s3FiyJ2WGCnF0p1default.php
[Sat Apr 11 01:43:10.776758 2026] [:error] [pid 21568:tid 21591] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Sat Apr 11 01:43:11.013416 2026] [:error] [pid 21568:tid 21594] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Sat Apr 11 01:43:11.248319 2026] [:error] [pid 21568:tid 21577] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sat Apr 11 01:43:11.494531 2026] [:error] [pid 21568:tid 21573] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sat Apr 11 01:43:11.732985 2026] [:error] [pid 21568:tid 21575] [client 52.143.152.19:58029] File does not exist: /usr/local/apache/htdocs/suspended-page/p14rAeWytPdH5hZcscCFdefault.php
[Sat Apr 11 01:43:11.964917 2026] [:error] [pid 21568:tid 21592] [client 52.143.152.19:58029] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iindv.php"] [unique_id "adk2r4iz5v_ljZxkpR_BjgAAARQ"]
[Sat Apr 11 01:43:12.431097 2026] [:error] [pid 21568:tid 21588] [client 52.143.152.19:57992] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iindv.php"] [unique_id "adk2sIiz5v_ljZxkpR_BkAAAARA"]
[Sat Apr 11 01:43:13.006349 2026] [:error] [pid 55451:tid 55465] [client 52.143.152.19:46112] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iindv.php"] [unique_id "adk2sXApxuyB7yCS5Rn4zgAAAMw"]
[Sat Apr 11 01:43:13.578852 2026] [:error] [pid 21568:tid 21581] [client 52.143.152.19:58017] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iindv.php"] [unique_id "adk2sYiz5v_ljZxkpR_BlAAAAQk"]
[Sat Apr 11 01:43:14.071155 2026] [:error] [pid 21570:tid 21681] [client 52.143.152.19:50114] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maintura.php"] [unique_id "adk2sjKs5t9xRSNL6cm_ZwAAAEo"]
[Sat Apr 11 01:43:15.067011 2026] [:error] [pid 55451:tid 55467] [client 52.143.152.19:44355] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maintura.php"] [unique_id "adk2s3ApxuyB7yCS5Rn43QAAAM4"]
[Sat Apr 11 01:43:15.538153 2026] [:error] [pid 21568:tid 21590] [client 52.143.152.19:46105] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maintura.php"] [unique_id "adk2s4iz5v_ljZxkpR_BlQAAARI"]
[Sat Apr 11 01:43:16.079114 2026] [:error] [pid 21569:tid 21652] [client 52.143.152.19:50131] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maintura.php"] [unique_id "adk2tHAvQTgvXJ6vHoqTxwAAAIc"]
[Sat Apr 11 01:43:16.558597 2026] [:error] [pid 21568:tid 21596] [client 52.143.152.19:58704] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adk2tIiz5v_ljZxkpR_BlwAAARg"]
[Sat Apr 11 01:43:17.036936 2026] [:error] [pid 21569:tid 21653] [client 52.143.152.19:58027] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adk2tXAvQTgvXJ6vHoqTzwAAAIg"]
[Sat Apr 11 01:43:17.538012 2026] [:error] [pid 55451:tid 55465] [client 52.143.152.19:58695] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adk2tXApxuyB7yCS5Rn48gAAAMw"]
[Sat Apr 11 01:43:19.027064 2026] [:error] [pid 21706:tid 21714] [client 52.143.152.19:46169] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adk2tyGQ1M5d8fQSsLGcuwAAAAY"]
[Sat Apr 11 01:43:19.930045 2026] [:error] [pid 55451:tid 55464] [client 52.143.152.19:46081] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adk2t3ApxuyB7yCS5Rn5EQAAAMs"]
[Sat Apr 11 01:43:23.617169 2026] [:error] [pid 55451:tid 55475] [client 52.143.152.19:46092] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adk2u3ApxuyB7yCS5Rn5NAAAANY"]
[Sat Apr 11 01:43:24.115763 2026] [:error] [pid 55451:tid 55460] [client 52.143.152.19:58700] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adk2vHApxuyB7yCS5Rn5OQAAAMc"]
[Sat Apr 11 01:43:24.580940 2026] [:error] [pid 55451:tid 55454] [client 52.143.152.19:46154] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adk2vHApxuyB7yCS5Rn5PgAAAME"]
[Sat Apr 11 01:43:25.174542 2026] [:error] [pid 55451:tid 55469] [client 52.143.152.19:46088] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "adk2vXApxuyB7yCS5Rn5QQAAANA"]
[Sat Apr 11 01:43:25.648285 2026] [:error] [pid 21568:tid 21576] [client 52.143.152.19:44385] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "adk2vYiz5v_ljZxkpR_BowAAAQQ"]
[Sat Apr 11 01:43:26.179322 2026] [:error] [pid 21568:tid 21583] [client 52.143.152.19:58012] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "adk2voiz5v_ljZxkpR_BpwAAAQs"]
[Sat Apr 11 01:43:26.722042 2026] [:error] [pid 21568:tid 21577] [client 52.143.152.19:44298] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "adk2voiz5v_ljZxkpR_BqQAAAQU"]
[Sat Apr 11 01:43:27.193837 2026] [:error] [pid 21568:tid 21580] [client 52.143.152.19:50146] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adk2v4iz5v_ljZxkpR_BrAAAAQg"]
[Sat Apr 11 01:43:27.666331 2026] [:error] [pid 21569:tid 21650] [client 52.143.152.19:58004] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adk2v3AvQTgvXJ6vHoqT5gAAAIU"]
[Sat Apr 11 01:43:28.169318 2026] [:error] [pid 21570:tid 21673] [client 52.143.152.19:58720] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adk2wDKs5t9xRSNL6cm_dQAAAEY"]
[Sat Apr 11 01:43:28.666825 2026] [:error] [pid 21570:tid 21695] [client 52.143.152.19:46096] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adk2wDKs5t9xRSNL6cm_egAAAFU"]
[Sat Apr 11 01:43:29.142682 2026] [:error] [pid 21568:tid 21572] [client 52.143.152.19:58718] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "adk2wYiz5v_ljZxkpR_BtwAAAQA"]
[Sat Apr 11 01:43:29.632309 2026] [:error] [pid 21569:tid 21651] [client 52.143.152.19:50081] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "adk2wXAvQTgvXJ6vHoqT6wAAAIY"]
[Sat Apr 11 01:43:30.142592 2026] [:error] [pid 21706:tid 21727] [client 52.143.152.19:58736] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "adk2wiGQ1M5d8fQSsLGczwAAABM"]
[Sat Apr 11 01:43:30.648346 2026] [:error] [pid 21569:tid 21650] [client 52.143.152.19:58014] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "adk2wnAvQTgvXJ6vHoqT7wAAAIU"]
[Sat Apr 11 01:43:31.123393 2026] [:error] [pid 21570:tid 21682] [client 52.143.152.19:58008] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk2wzKs5t9xRSNL6cm_iwAAAEs"]
[Sat Apr 11 01:43:31.666047 2026] [:error] [pid 21569:tid 21678] [client 52.143.152.19:58724] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk2w3AvQTgvXJ6vHoqT9gAAAJY"]
[Sat Apr 11 01:43:32.160733 2026] [:error] [pid 21568:tid 21583] [client 52.143.152.19:50134] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk2xIiz5v_ljZxkpR_BwwAAAQs"]
[Sat Apr 11 01:43:32.813513 2026] [:error] [pid 21568:tid 21580] [client 52.143.152.19:58692] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adk2xIiz5v_ljZxkpR_BxwAAAQg"]
[Sat Apr 11 01:43:33.397141 2026] [:error] [pid 21568:tid 21575] [client 52.143.152.19:50063] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk2xYiz5v_ljZxkpR_BzAAAAQM"]
[Sat Apr 11 01:43:33.887161 2026] [:error] [pid 21570:tid 21677] [client 52.143.152.19:27729] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk2xTKs5t9xRSNL6cm_lQAAAEg"]
[Sat Apr 11 01:43:34.382920 2026] [:error] [pid 21569:tid 21648] [client 52.143.152.19:58697] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk2xnAvQTgvXJ6vHoqUBwAAAIM"]
[Sat Apr 11 01:43:34.870322 2026] [:error] [pid 21706:tid 21711] [client 52.143.152.19:58044] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adk2xiGQ1M5d8fQSsLGc1gAAAAM"]
[Sat Apr 11 01:43:35.417130 2026] [:error] [pid 21706:tid 21712] [client 52.143.152.19:50160] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk2xyGQ1M5d8fQSsLGc3gAAAAQ"]
[Sat Apr 11 01:43:36.546983 2026] [:error] [pid 55451:tid 55463] [client 52.143.152.19:50117] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk2yHApxuyB7yCS5Rn5ZQAAAMo"]
[Sat Apr 11 01:43:37.221632 2026] [:error] [pid 21570:tid 21665] [client 52.143.152.19:50112] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk2yTKs5t9xRSNL6cm_mQAAAEI"]
[Sat Apr 11 01:43:37.709934 2026] [:error] [pid 21570:tid 21691] [client 52.143.152.19:58046] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adk2yTKs5t9xRSNL6cm_nAAAAFE"]
[Sat Apr 11 01:43:38.193071 2026] [:error] [pid 21568:tid 21589] [client 52.143.152.19:58731] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "adk2yoiz5v_ljZxkpR_B5gAAARE"]
[Sat Apr 11 01:43:38.685630 2026] [:error] [pid 21568:tid 21590] [client 52.143.152.19:27722] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "adk2yoiz5v_ljZxkpR_B7AAAARI"]
[Sat Apr 11 01:43:39.327574 2026] [:error] [pid 21706:tid 21718] [client 52.143.152.19:44305] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "adk2yyGQ1M5d8fQSsLGc7QAAAAo"]
[Sat Apr 11 01:43:39.855971 2026] [:error] [pid 55451:tid 55461] [client 52.143.152.19:50061] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "adk2y3ApxuyB7yCS5Rn5bAAAAMg"]
[Sat Apr 11 01:43:40.322943 2026] [:error] [pid 21706:tid 21728] [client 52.143.152.19:46194] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adk2zCGQ1M5d8fQSsLGc8gAAABQ"]
[Sat Apr 11 01:43:41.490900 2026] [:error] [pid 21706:tid 21712] [client 52.143.152.19:46123] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adk2zSGQ1M5d8fQSsLGc-gAAAAQ"]
[Sat Apr 11 01:43:41.961555 2026] [:error] [pid 21706:tid 21710] [client 52.143.152.19:46173] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adk2zSGQ1M5d8fQSsLGdAgAAAAI"]
[Sat Apr 11 01:43:43.174369 2026] [:error] [pid 21706:tid 21715] [client 52.143.152.19:46113] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adk2zyGQ1M5d8fQSsLGdBwAAAAc"]
[Sat Apr 11 01:43:43.700096 2026] [:error] [pid 21706:tid 21727] [client 52.143.152.19:46087] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "adk2zyGQ1M5d8fQSsLGdDAAAABM"]
[Sat Apr 11 01:43:44.197988 2026] [:error] [pid 21706:tid 21722] [client 52.143.152.19:50109] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "adk20CGQ1M5d8fQSsLGdDwAAAA4"]
[Sat Apr 11 01:43:44.682677 2026] [:error] [pid 21706:tid 21723] [client 52.143.152.19:50048] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "adk20CGQ1M5d8fQSsLGdFAAAAA8"]
[Sat Apr 11 01:43:45.197725 2026] [:error] [pid 55451:tid 55461] [client 52.143.152.19:57987] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "adk20XApxuyB7yCS5Rn5ewAAAMg"]
[Sat Apr 11 01:43:45.677553 2026] [:error] [pid 21570:tid 21670] [client 52.143.152.19:58023] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "adk20TKs5t9xRSNL6cm_qAAAAEQ"]
[Sat Apr 11 01:43:46.148506 2026] [:error] [pid 21570:tid 21675] [client 52.143.152.19:44328] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "adk20jKs5t9xRSNL6cm_qQAAAEc"]
[Sat Apr 11 01:43:46.672019 2026] [:error] [pid 21570:tid 21668] [client 52.143.152.19:50153] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "adk20jKs5t9xRSNL6cm_rAAAAEM"]
[Sat Apr 11 01:43:47.329385 2026] [:error] [pid 21569:tid 21678] [client 52.143.152.19:50118] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "adk203AvQTgvXJ6vHoqUGgAAAJY"]
[Sat Apr 11 01:43:47.820864 2026] [:error] [pid 21706:tid 21731] [client 52.143.152.19:57991] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk20yGQ1M5d8fQSsLGdGQAAABc"]
[Sat Apr 11 01:43:48.334927 2026] [:error] [pid 21570:tid 21694] [client 52.143.152.19:58034] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk21DKs5t9xRSNL6cm_sQAAAFQ"]
[Sat Apr 11 01:43:48.822957 2026] [:error] [pid 55451:tid 55476] [client 52.143.152.19:50087] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk21HApxuyB7yCS5Rn5hgAAANc"]
[Sat Apr 11 01:43:49.349749 2026] [:error] [pid 55451:tid 55471] [client 52.143.152.19:44410] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adk21XApxuyB7yCS5Rn5iQAAANI"]
[Sat Apr 11 01:43:49.909721 2026] [:error] [pid 21706:tid 21721] [client 52.143.152.19:50092] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adk21SGQ1M5d8fQSsLGdIgAAAA0"]
[Sat Apr 11 01:43:50.508188 2026] [:error] [pid 55451:tid 55461] [client 52.143.152.19:58716] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adk21nApxuyB7yCS5Rn5lwAAAMg"]
[Sat Apr 11 01:43:51.013087 2026] [:error] [pid 55451:tid 55465] [client 52.143.152.19:44310] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adk213ApxuyB7yCS5Rn5nQAAAMw"]
[Sat Apr 11 01:43:51.561955 2026] [:error] [pid 55451:tid 55461] [client 52.143.152.19:27725] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "adk213ApxuyB7yCS5Rn5owAAAMg"]
[Sat Apr 11 01:43:52.048732 2026] [:error] [pid 21570:tid 21691] [client 52.143.152.19:50049] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "adk22DKs5t9xRSNL6cm_tAAAAFE"]
[Sat Apr 11 01:43:52.613112 2026] [:error] [pid 21568:tid 21587] [client 52.143.152.19:58036] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "adk22Iiz5v_ljZxkpR_CHAAAAQ8"]
[Sat Apr 11 01:43:53.150764 2026] [:error] [pid 21706:tid 21714] [client 52.143.152.19:58690] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "adk22SGQ1M5d8fQSsLGdKQAAAAY"]
[Sat Apr 11 01:43:53.947606 2026] [:error] [pid 21706:tid 21721] [client 52.143.152.19:44384] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "adk22SGQ1M5d8fQSsLGdMAAAAA0"]
[Sat Apr 11 01:43:54.427672 2026] [:error] [pid 21706:tid 21712] [client 52.143.152.19:44324] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk22iGQ1M5d8fQSsLGdMwAAAAQ"]
[Sat Apr 11 01:43:54.909064 2026] [:error] [pid 21570:tid 21663] [client 52.143.152.19:58036] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk22jKs5t9xRSNL6cm_twAAAEE"]
[Sat Apr 11 01:43:55.392051 2026] [:error] [pid 21568:tid 21589] [client 52.143.152.19:46102] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk224iz5v_ljZxkpR_CJAAAARE"]
[Sat Apr 11 01:43:55.910196 2026] [:error] [pid 21568:tid 21578] [client 52.143.152.19:58016] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adk224iz5v_ljZxkpR_CKAAAAQY"]
[Sat Apr 11 01:43:56.610824 2026] [:error] [pid 21570:tid 21668] [client 52.143.152.19:50163] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk23DKs5t9xRSNL6cm_vAAAAEM"]
[Sat Apr 11 01:43:57.124432 2026] [:error] [pid 21569:tid 21678] [client 52.143.152.19:44362] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk23XAvQTgvXJ6vHoqUMAAAAJY"]
[Sat Apr 11 01:43:57.627233 2026] [:error] [pid 21706:tid 21717] [client 52.143.152.19:44396] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk23SGQ1M5d8fQSsLGdQAAAAAk"]
[Sat Apr 11 01:43:58.109764 2026] [:error] [pid 21706:tid 21709] [client 52.143.152.19:46126] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adk23iGQ1M5d8fQSsLGdRQAAAAE"]
[Sat Apr 11 01:43:58.947657 2026] [:error] [pid 21569:tid 21667] [client 52.143.152.19:58722] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "adk23nAvQTgvXJ6vHoqUNAAAAJE"]
[Sat Apr 11 01:43:59.424829 2026] [:error] [pid 55451:tid 55453] [client 52.143.152.19:44402] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "adk233ApxuyB7yCS5Rn5vQAAAMA"]
[Sat Apr 11 01:43:59.908169 2026] [:error] [pid 21569:tid 21680] [client 52.143.152.19:50168] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "adk233AvQTgvXJ6vHoqUOAAAAJc"]
[Sat Apr 11 01:44:00.491331 2026] [:error] [pid 21568:tid 21594] [client 52.143.152.19:58696] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "adk24Iiz5v_ljZxkpR_CNwAAARY"]
[Sat Apr 11 01:44:01.062213 2026] [:error] [pid 21568:tid 21580] [client 52.143.152.19:58707] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "adk24Yiz5v_ljZxkpR_COwAAAQg"]
[Sat Apr 11 01:44:01.581357 2026] [:error] [pid 21570:tid 21675] [client 52.143.152.19:50153] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "adk24TKs5t9xRSNL6cm_yAAAAEc"]
[Sat Apr 11 01:44:02.073544 2026] [:error] [pid 55451:tid 55470] [client 52.143.152.19:46189] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "adk24nApxuyB7yCS5Rn5wgAAANE"]
[Sat Apr 11 01:44:02.591600 2026] [:error] [pid 21568:tid 21589] [client 52.143.152.19:58009] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "adk24oiz5v_ljZxkpR_CPgAAARE"]
[Sat Apr 11 01:44:03.072615 2026] [:error] [pid 55451:tid 55474] [client 52.143.152.19:46162] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "adk243ApxuyB7yCS5Rn5xQAAANU"]
[Sat Apr 11 01:44:03.587994 2026] [:error] [pid 55451:tid 55455] [client 52.143.152.19:44401] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "adk243ApxuyB7yCS5Rn5yAAAAMI"]
[Sat Apr 11 01:44:04.779630 2026] [:error] [pid 21569:tid 21646] [client 52.143.152.19:58688] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "adk25HAvQTgvXJ6vHoqUSQAAAIE"]
[Sat Apr 11 01:44:05.253840 2026] [:error] [pid 21568:tid 21594] [client 52.143.152.19:58026] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "adk25Yiz5v_ljZxkpR_CQgAAARY"]
[Sat Apr 11 01:44:05.778998 2026] [:error] [pid 21568:tid 21581] [client 52.143.152.19:44358] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "adk25Yiz5v_ljZxkpR_CRAAAAQk"]
[Sat Apr 11 01:44:06.299774 2026] [:error] [pid 21568:tid 21595] [client 52.143.152.19:46084] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "adk25oiz5v_ljZxkpR_CRgAAARc"]
[Sat Apr 11 01:44:06.777478 2026] [:error] [pid 55451:tid 55461] [client 52.143.152.19:46094] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "adk25nApxuyB7yCS5Rn53AAAAMg"]
[Sat Apr 11 01:44:07.299572 2026] [:error] [pid 55451:tid 55460] [client 52.143.152.19:46145] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "adk253ApxuyB7yCS5Rn54AAAAMc"]
[Sat Apr 11 01:44:07.800151 2026] [:error] [pid 21568:tid 21575] [client 52.143.152.19:58712] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX2.php"] [unique_id "adk254iz5v_ljZxkpR_CSwAAAQM"]
[Sat Apr 11 01:44:08.337944 2026] [:error] [pid 21568:tid 21585] [client 52.143.152.19:50130] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX2.php"] [unique_id "adk26Iiz5v_ljZxkpR_CUAAAAQ0"]
[Sat Apr 11 01:44:08.818078 2026] [:error] [pid 21568:tid 21579] [client 52.143.152.19:46176] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX2.php"] [unique_id "adk26Iiz5v_ljZxkpR_CVgAAAQc"]
[Sat Apr 11 01:44:09.363551 2026] [:error] [pid 21570:tid 21675] [client 52.143.152.19:46197] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX2.php"] [unique_id "adk26TKs5t9xRSNL6cm_4gAAAEc"]
[Sat Apr 11 01:44:09.877106 2026] [:error] [pid 21568:tid 21572] [client 52.143.152.19:44293] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "adk26Yiz5v_ljZxkpR_CYQAAAQA"]
[Sat Apr 11 01:44:10.406993 2026] [:error] [pid 21706:tid 21711] [client 52.143.152.19:58750] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "adk26iGQ1M5d8fQSsLGdWwAAAAM"]
[Sat Apr 11 01:44:10.894496 2026] [:error] [pid 21706:tid 21715] [client 52.143.152.19:46128] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "adk26iGQ1M5d8fQSsLGdXwAAAAc"]
[Sat Apr 11 01:44:11.378556 2026] [:error] [pid 21706:tid 21728] [client 52.143.152.19:46127] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sat Apr 11 01:44:11.615105 2026] [:error] [pid 21706:tid 21709] [client 52.143.152.19:46127] File does not exist: /usr/local/apache/htdocs/suspended-page/wtiiy.php
[Sat Apr 11 01:44:11.850126 2026] [:error] [pid 21706:tid 21727] [client 52.143.152.19:46127] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Apr 11 01:44:12.085221 2026] [:error] [pid 21706:tid 21729] [client 52.143.152.19:46127] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sat Apr 11 01:44:12.433825 2026] [:error] [pid 21706:tid 21731] [client 52.143.152.19:46127] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Apr 11 01:44:12.921716 2026] [:error] [pid 21706:tid 21724] [client 52.143.152.19:46127] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Apr 11 01:44:13.157847 2026] [:error] [pid 21706:tid 21720] [client 52.143.152.19:46127] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat Apr 11 01:44:13.392773 2026] [:error] [pid 21706:tid 21716] [client 52.143.152.19:46127] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sat Apr 11 01:44:13.774489 2026] [:error] [pid 21706:tid 21716] [client 52.143.152.19:46127] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sat Apr 11 01:44:14.085828 2026] [:error] [pid 21706:tid 21714] [client 52.143.152.19:46127] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Apr 11 01:44:14.322300 2026] [:error] [pid 21706:tid 21708] [client 52.143.152.19:46127] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adk27iGQ1M5d8fQSsLGdcAAAAAA"]
[Sat Apr 11 01:44:14.831369 2026] [:error] [pid 21569:tid 21651] [client 52.143.152.19:58037] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adk27nAvQTgvXJ6vHoqUVwAAAIY"]
[Sat Apr 11 01:44:15.430553 2026] [:error] [pid 21569:tid 21657] [client 52.143.152.19:27346] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adk273AvQTgvXJ6vHoqUXQAAAIw"]
[Sat Apr 11 01:44:15.952074 2026] [:error] [pid 21570:tid 21692] [client 52.143.152.19:44380] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "adk27zKs5t9xRSNL6cm_5QAAAFI"]
[Sat Apr 11 01:44:16.553650 2026] [:error] [pid 55451:tid 55467] [client 52.143.152.19:46155] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "adk28HApxuyB7yCS5Rn59wAAAM4"]
[Sat Apr 11 01:44:17.240738 2026] [:error] [pid 55451:tid 55463] [client 52.143.152.19:46130] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "adk28XApxuyB7yCS5Rn6AQAAAMo"]
[Sat Apr 11 01:44:18.442011 2026] [:error] [pid 21569:tid 21657] [client 52.143.152.19:46187] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "adk28nAvQTgvXJ6vHoqUagAAAIw"]
[Sat Apr 11 01:44:18.936948 2026] [:error] [pid 55451:tid 55461] [client 52.143.152.19:58727] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "adk28nApxuyB7yCS5Rn6BwAAAMg"]
[Sat Apr 11 01:44:19.459060 2026] [:error] [pid 55451:tid 55454] [client 52.143.152.19:58733] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adk283ApxuyB7yCS5Rn6CgAAAME"]
[Sat Apr 11 01:44:19.942204 2026] [:error] [pid 21569:tid 21646] [client 52.143.152.19:58040] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adk283AvQTgvXJ6vHoqUcQAAAIE"]
[Sat Apr 11 01:44:20.502178 2026] [:error] [pid 55451:tid 55457] [client 52.143.152.19:44350] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adk29HApxuyB7yCS5Rn6DAAAAMQ"]
[Sat Apr 11 01:44:21.212804 2026] [:error] [pid 55451:tid 55467] [client 52.143.152.19:46138] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "adk29XApxuyB7yCS5Rn6EwAAAM4"]
[Sat Apr 11 01:44:22.009855 2026] [:error] [pid 21569:tid 21651] [client 52.143.152.19:58705] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "adk29nAvQTgvXJ6vHoqUdwAAAIY"]
[Sat Apr 11 01:44:22.640879 2026] [:error] [pid 21568:tid 21576] [client 52.143.152.19:58739] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "adk29oiz5v_ljZxkpR_CkwAAAQQ"]
[Sat Apr 11 01:44:23.180156 2026] [:error] [pid 21570:tid 21695] [client 52.143.152.19:57989] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "adk29zKs5t9xRSNL6cm_7AAAAFU"]
[Sat Apr 11 01:44:23.767943 2026] [:error] [pid 55451:tid 55458] [client 52.143.152.19:44405] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "adk293ApxuyB7yCS5Rn6JwAAAMU"]
[Sat Apr 11 01:44:24.238166 2026] [:error] [pid 55451:tid 55462] [client 52.143.152.19:58019] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "adk2-HApxuyB7yCS5Rn6KQAAAMk"]
[Sat Apr 11 01:44:25.004899 2026] [:error] [pid 21570:tid 21693] [client 52.143.152.19:50061] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "adk2-TKs5t9xRSNL6cm_8AAAAFM"]
[Sat Apr 11 01:44:25.469283 2026] [:error] [pid 55451:tid 55466] [client 52.143.152.19:50158] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "adk2-XApxuyB7yCS5Rn6MQAAAM0"]
[Sat Apr 11 01:44:25.977207 2026] [:error] [pid 21568:tid 21573] [client 52.143.152.19:27764] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "adk2-Yiz5v_ljZxkpR_CngAAAQE"]
[Sat Apr 11 01:44:26.614214 2026] [:error] [pid 21569:tid 21656] [client 52.143.152.19:44387] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "adk2-nAvQTgvXJ6vHoqUfAAAAIs"]
[Sat Apr 11 01:44:27.088531 2026] [:error] [pid 21570:tid 21672] [client 52.143.152.19:58698] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "adk2-zKs5t9xRSNL6cm_9AAAAEU"]
[Sat Apr 11 01:44:27.555688 2026] [:error] [pid 21569:tid 21645] [client 52.143.152.19:46156] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "adk2-3AvQTgvXJ6vHoqUfwAAAIA"]
[Sat Apr 11 01:44:28.088436 2026] [:error] [pid 55451:tid 55458] [client 52.143.152.19:46177] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "adk2_HApxuyB7yCS5Rn6PAAAAMU"]
[Sat Apr 11 01:44:28.632874 2026] [:error] [pid 21569:tid 21659] [client 52.143.152.19:46122] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "adk2_HAvQTgvXJ6vHoqUgQAAAI0"]
[Sat Apr 11 01:44:29.118874 2026] [:error] [pid 21568:tid 21579] [client 52.143.152.19:46170] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "adk2_Yiz5v_ljZxkpR_CowAAAQc"]
[Sat Apr 11 01:44:29.606142 2026] [:error] [pid 21568:tid 21584] [client 52.143.152.19:50150] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "adk2_Yiz5v_ljZxkpR_CpQAAAQw"]
[Sat Apr 11 01:44:30.164478 2026] [:error] [pid 21568:tid 21589] [client 52.143.152.19:50094] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "adk2_oiz5v_ljZxkpR_CpgAAARE"]
[Sat Apr 11 01:44:30.733604 2026] [:error] [pid 21706:tid 21710] [client 52.143.152.19:46089] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "adk2_iGQ1M5d8fQSsLGddQAAAAI"]
[Sat Apr 11 01:44:31.304961 2026] [:error] [pid 21568:tid 21572] [client 52.143.152.19:50066] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "adk2_4iz5v_ljZxkpR_CqAAAAQA"]
[Sat Apr 11 01:44:31.780398 2026] [:error] [pid 21568:tid 21595] [client 52.143.152.19:58031] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "adk2_4iz5v_ljZxkpR_CqwAAARc"]
[Sat Apr 11 01:44:32.263268 2026] [:error] [pid 21568:tid 21592] [client 52.143.152.19:50122] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "adk3AIiz5v_ljZxkpR_CrwAAARQ"]
[Sat Apr 11 01:44:32.742963 2026] [:error] [pid 21706:tid 21720] [client 52.143.152.19:58715] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "adk3ACGQ1M5d8fQSsLGdeQAAAAw"]
[Sat Apr 11 01:44:33.226406 2026] [:error] [pid 55451:tid 55459] [client 52.143.152.19:58010] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "adk3AXApxuyB7yCS5Rn6RQAAAMY"]
[Sat Apr 11 01:44:33.691309 2026] [:error] [pid 21570:tid 21673] [client 52.143.152.19:58045] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "adk3ATKs5t9xRSNL6cnACQAAAEY"]
[Sat Apr 11 01:44:34.221087 2026] [:error] [pid 55451:tid 55471] [client 52.143.152.19:44391] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "adk3AnApxuyB7yCS5Rn6SwAAANI"]
[Sat Apr 11 01:44:34.690196 2026] [:error] [pid 21570:tid 21689] [client 52.143.152.19:50090] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "adk3AjKs5t9xRSNL6cnADwAAAE8"]
[Sat Apr 11 01:44:35.165291 2026] [:error] [pid 21568:tid 21576] [client 52.143.152.19:50154] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "adk3A4iz5v_ljZxkpR_CuAAAAQQ"]
[Sat Apr 11 01:44:35.632374 2026] [:error] [pid 55451:tid 55474] [client 52.143.152.19:46151] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "adk3A3ApxuyB7yCS5Rn6TgAAANU"]
[Sat Apr 11 01:44:36.103479 2026] [:error] [pid 55451:tid 55457] [client 52.143.152.19:44294] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "adk3BHApxuyB7yCS5Rn6UwAAAMQ"]
[Sat Apr 11 01:44:36.585042 2026] [:error] [pid 55451:tid 55472] [client 52.143.152.19:46101] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "adk3BHApxuyB7yCS5Rn6WAAAANM"]
[Sat Apr 11 01:44:37.049921 2026] [:error] [pid 21706:tid 21725] [client 52.143.152.19:21453] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "adk3BSGQ1M5d8fQSsLGdfAAAABE"]
[Sat Apr 11 01:44:37.517776 2026] [:error] [pid 21569:tid 21647] [client 52.143.152.19:44304] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "adk3BXAvQTgvXJ6vHoqUnQAAAII"]
[Sat Apr 11 01:44:38.038819 2026] [:error] [pid 55451:tid 55477] [client 52.143.152.19:50082] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "adk3BnApxuyB7yCS5Rn6YAAAANg"]
[Sat Apr 11 01:44:38.509084 2026] [:error] [pid 21568:tid 21589] [client 52.143.152.19:50098] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "adk3Boiz5v_ljZxkpR_CvQAAARE"]
[Sat Apr 11 01:44:39.015622 2026] [:error] [pid 21568:tid 21575] [client 52.143.152.19:50149] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "adk3B4iz5v_ljZxkpR_CwQAAAQM"]
[Sat Apr 11 01:44:39.494340 2026] [:error] [pid 55451:tid 55456] [client 52.143.152.19:50172] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "adk3B3ApxuyB7yCS5Rn6bwAAAMM"]
[Sat Apr 11 01:44:40.033877 2026] [:error] [pid 55451:tid 55476] [client 52.143.152.19:50144] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "adk3CHApxuyB7yCS5Rn6cQAAANc"]
[Sat Apr 11 01:44:40.618935 2026] [:error] [pid 55451:tid 55464] [client 52.143.152.19:57998] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "adk3CHApxuyB7yCS5Rn6dwAAAMs"]
[Sat Apr 11 01:44:41.336330 2026] [:error] [pid 55451:tid 55476] [client 52.143.152.19:46159] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "adk3CXApxuyB7yCS5Rn6fwAAANc"]
[Sat Apr 11 01:44:41.830674 2026] [:error] [pid 55451:tid 55470] [client 52.143.152.19:50067] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "adk3CXApxuyB7yCS5Rn6gwAAANE"]
[Sat Apr 11 01:44:42.310508 2026] [:error] [pid 55451:tid 55468] [client 52.143.152.19:44353] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "adk3CnApxuyB7yCS5Rn6iQAAAM8"]
[Sat Apr 11 01:44:42.783048 2026] [:error] [pid 55451:tid 55465] [client 52.143.152.19:58732] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "adk3CnApxuyB7yCS5Rn6jgAAAMw"]
[Sat Apr 11 01:44:43.265781 2026] [:error] [pid 21706:tid 21709] [client 52.143.152.19:44336] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "adk3CyGQ1M5d8fQSsLGdgAAAAAE"]
[Sat Apr 11 01:44:43.765048 2026] [:error] [pid 55451:tid 55458] [client 52.143.152.19:58035] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "adk3C3ApxuyB7yCS5Rn6lQAAAMU"]
[Sat Apr 11 01:44:44.343111 2026] [:error] [pid 21568:tid 21582] [client 52.143.152.19:50050] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "adk3DIiz5v_ljZxkpR_CzgAAAQo"]
[Sat Apr 11 01:44:44.817042 2026] [:error] [pid 21706:tid 21726] [client 52.143.152.19:44369] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "adk3DCGQ1M5d8fQSsLGdhAAAABI"]
[Sat Apr 11 01:44:45.314380 2026] [:error] [pid 21569:tid 21669] [client 52.143.152.19:44381] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "adk3DXAvQTgvXJ6vHoqUogAAAJI"]
[Sat Apr 11 01:44:45.844401 2026] [:error] [pid 21706:tid 21708] [client 52.143.152.19:50076] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "adk3DSGQ1M5d8fQSsLGdjAAAAAA"]
[Sat Apr 11 01:44:46.347133 2026] [:error] [pid 55451:tid 55467] [client 52.143.152.19:50101] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "adk3DnApxuyB7yCS5Rn6pgAAAM4"]
[Sat Apr 11 01:44:46.850339 2026] [:error] [pid 55451:tid 55456] [client 52.143.152.19:44394] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adk3DnApxuyB7yCS5Rn6qwAAAMM"]
[Sat Apr 11 01:44:47.523749 2026] [:error] [pid 55451:tid 55454] [client 52.143.152.19:57985] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adk3D3ApxuyB7yCS5Rn6sgAAAME"]
[Sat Apr 11 01:44:47.990042 2026] [:error] [pid 21706:tid 21728] [client 52.143.152.19:50065] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adk3DyGQ1M5d8fQSsLGdkAAAABQ"]
[Sat Apr 11 01:44:48.461974 2026] [:error] [pid 21570:tid 21698] [client 52.143.152.19:44311] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adk3EDKs5t9xRSNL6cnAGwAAAFg"]
[Sat Apr 11 01:44:49.020374 2026] [:error] [pid 21569:tid 21645] [client 52.143.152.19:44302] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "adk3EXAvQTgvXJ6vHoqUqwAAAIA"]
[Sat Apr 11 01:44:49.520837 2026] [:error] [pid 21570:tid 21661] [client 52.143.152.19:44352] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "adk3ETKs5t9xRSNL6cnAHgAAAEA"]
[Sat Apr 11 01:44:49.990646 2026] [:error] [pid 21570:tid 21668] [client 52.143.152.19:44312] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "adk3ETKs5t9xRSNL6cnAIwAAAEM"]
[Sat Apr 11 01:44:50.499232 2026] [:error] [pid 55451:tid 55476] [client 52.143.152.19:46095] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "adk3EnApxuyB7yCS5Rn6vwAAANc"]
[Sat Apr 11 01:44:50.968309 2026] [:error] [pid 55451:tid 55461] [client 52.143.152.19:44296] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adk3EnApxuyB7yCS5Rn6xgAAAMg"]
[Sat Apr 11 01:44:51.437934 2026] [:error] [pid 55451:tid 55475] [client 52.143.152.19:50140] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adk3E3ApxuyB7yCS5Rn6zgAAANY"]
[Sat Apr 11 01:44:51.915000 2026] [:error] [pid 21568:tid 21586] [client 52.143.152.19:44325] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adk3E4iz5v_ljZxkpR_C3AAAAQ4"]
[Sat Apr 11 01:44:52.467361 2026] [:error] [pid 55451:tid 55465] [client 52.143.152.19:44395] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adk3FHApxuyB7yCS5Rn60wAAAMw"]
[Sat Apr 11 01:44:53.022634 2026] [:error] [pid 21569:tid 21667] [client 52.143.152.19:50169] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "adk3FXAvQTgvXJ6vHoqUrgAAAJE"]
[Sat Apr 11 01:44:53.493690 2026] [:error] [pid 21569:tid 21650] [client 52.143.152.19:46108] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "adk3FXAvQTgvXJ6vHoqUsAAAAIU"]
[Sat Apr 11 01:44:53.961004 2026] [:error] [pid 21570:tid 21681] [client 52.143.152.19:44379] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "adk3FTKs5t9xRSNL6cnAKQAAAEo"]
[Sat Apr 11 01:44:54.468802 2026] [:error] [pid 21570:tid 21692] [client 52.143.152.19:50115] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "adk3FjKs5t9xRSNL6cnAKgAAAFI"]
[Sat Apr 11 01:44:54.939201 2026] [:error] [pid 21706:tid 21716] [client 52.143.152.19:50119] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adk3FiGQ1M5d8fQSsLGdpAAAAAg"]
[Sat Apr 11 01:44:55.430939 2026] [:error] [pid 21706:tid 21730] [client 52.143.152.19:44412] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adk3FyGQ1M5d8fQSsLGdqQAAABY"]
[Sat Apr 11 01:44:55.900448 2026] [:error] [pid 21569:tid 21653] [client 52.143.152.19:46117] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adk3F3AvQTgvXJ6vHoqUtwAAAIg"]
[Sat Apr 11 01:44:56.439412 2026] [:error] [pid 21569:tid 21645] [client 52.143.152.19:44296] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adk3GHAvQTgvXJ6vHoqUugAAAIA"]
[Sat Apr 11 01:44:56.904347 2026] [:error] [pid 21570:tid 21694] [client 52.143.152.19:27354] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "adk3GDKs5t9xRSNL6cnALgAAAFQ"]
[Sat Apr 11 01:44:57.470189 2026] [:error] [pid 55451:tid 55454] [client 52.143.152.19:50107] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "adk3GXApxuyB7yCS5Rn64gAAAME"]
[Sat Apr 11 01:44:57.981743 2026] [:error] [pid 21570:tid 21690] [client 52.143.152.19:44389] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "adk3GTKs5t9xRSNL6cnAMgAAAFA"]
[Sat Apr 11 01:44:58.454686 2026] [:error] [pid 21569:tid 21667] [client 52.143.152.19:44415] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "adk3GnAvQTgvXJ6vHoqUvwAAAJE"]
[Sat Apr 11 01:44:58.920285 2026] [:error] [pid 21568:tid 21586] [client 52.143.152.19:46192] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "adk3Goiz5v_ljZxkpR_C6gAAAQ4"]
[Sat Apr 11 01:44:59.497903 2026] [:error] [pid 21706:tid 21714] [client 52.143.152.19:50054] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "adk3GyGQ1M5d8fQSsLGdwQAAAAY"]
[Sat Apr 11 01:44:59.994470 2026] [:error] [pid 21569:tid 21669] [client 52.143.152.19:46195] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "adk3G3AvQTgvXJ6vHoqUwwAAAJI"]
[Sat Apr 11 01:45:00.502943 2026] [:error] [pid 21568:tid 21576] [client 52.143.152.19:46182] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "adk3HIiz5v_ljZxkpR_C7QAAAQQ"]
[Sat Apr 11 01:45:00.987348 2026] [:error] [pid 21568:tid 21573] [client 52.143.152.19:46115] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "adk3HIiz5v_ljZxkpR_C7wAAAQE"]
[Sat Apr 11 01:45:01.455923 2026] [:error] [pid 21706:tid 21720] [client 52.143.152.19:50099] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "adk3HSGQ1M5d8fQSsLGdzwAAAAw"]
[Sat Apr 11 01:45:02.016365 2026] [:error] [pid 21706:tid 21716] [client 52.143.152.19:44366] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "adk3HiGQ1M5d8fQSsLGd1gAAAAg"]
[Sat Apr 11 01:45:02.502604 2026] [:error] [pid 21570:tid 21697] [client 52.143.152.19:27714] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "adk3HjKs5t9xRSNL6cnANwAAAFc"]
[Sat Apr 11 01:45:02.973825 2026] [:error] [pid 21568:tid 21595] [client 52.143.152.19:44319] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "adk3Hoiz5v_ljZxkpR_C9QAAARc"]
[Sat Apr 11 01:45:03.501509 2026] [:error] [pid 55451:tid 55460] [client 52.143.152.19:44376] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "adk3H3ApxuyB7yCS5Rn67gAAAMc"]
[Sat Apr 11 01:45:03.974334 2026] [:error] [pid 21706:tid 21711] [client 52.143.152.19:46106] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "adk3HyGQ1M5d8fQSsLGd2gAAAAM"]
[Sat Apr 11 01:45:04.441535 2026] [:error] [pid 21706:tid 21709] [client 52.143.152.19:57984] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "adk3ICGQ1M5d8fQSsLGd4QAAAAE"]
[Sat Apr 11 01:45:04.955363 2026] [:error] [pid 21706:tid 21724] [client 52.143.152.19:44342] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "adk3ICGQ1M5d8fQSsLGd5QAAABA"]
[Sat Apr 11 01:45:05.455229 2026] [:error] [pid 21706:tid 21719] [client 52.143.152.19:58025] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "adk3ISGQ1M5d8fQSsLGd5wAAAAs"]
[Sat Apr 11 01:45:05.923484 2026] [:error] [pid 21568:tid 21577] [client 52.143.152.19:50074] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "adk3IYiz5v_ljZxkpR_C_QAAAQU"]
[Sat Apr 11 01:45:06.408488 2026] [:error] [pid 21568:tid 21578] [client 52.143.152.19:58018] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "adk3Ioiz5v_ljZxkpR_DAgAAAQY"]
[Sat Apr 11 01:45:06.902685 2026] [:error] [pid 21568:tid 21596] [client 52.143.152.19:27737] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "adk3Ioiz5v_ljZxkpR_DBgAAARg"]
[Sat Apr 11 01:45:07.418989 2026] [:error] [pid 21570:tid 21685] [client 52.143.152.19:50138] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "adk3IzKs5t9xRSNL6cnAPwAAAEw"]
[Sat Apr 11 01:45:07.902916 2026] [:error] [pid 21568:tid 21591] [client 52.143.152.19:58723] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "adk3I4iz5v_ljZxkpR_DCAAAARM"]
[Sat Apr 11 01:45:08.409691 2026] [:error] [pid 21568:tid 21592] [client 52.143.152.19:44335] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "adk3JIiz5v_ljZxkpR_DDgAAARQ"]
[Sat Apr 11 01:45:08.910833 2026] [:error] [pid 55451:tid 55469] [client 52.143.152.19:58747] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "adk3JHApxuyB7yCS5Rn68wAAANA"]
[Sat Apr 11 01:45:09.451614 2026] [:error] [pid 21569:tid 21674] [client 52.143.152.19:44382] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "adk3JXAvQTgvXJ6vHoqU2AAAAJQ"]
[Sat Apr 11 01:45:09.976688 2026] [:error] [pid 21706:tid 21720] [client 52.143.152.19:57995] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "adk3JSGQ1M5d8fQSsLGd8QAAAAw"]
[Sat Apr 11 01:45:10.464002 2026] [:error] [pid 55451:tid 55453] [client 52.143.152.19:58713] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "adk3JnApxuyB7yCS5Rn6_AAAAMA"]
[Sat Apr 11 01:45:10.933345 2026] [:error] [pid 21706:tid 21714] [client 52.143.152.19:44404] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new3.php"] [unique_id "adk3JiGQ1M5d8fQSsLGd-gAAAAY"]
[Sat Apr 11 01:45:11.476549 2026] [:error] [pid 55451:tid 55471] [client 52.143.152.19:50159] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new3.php"] [unique_id "adk3J3ApxuyB7yCS5Rn6_wAAANI"]
[Sat Apr 11 01:45:11.989981 2026] [:error] [pid 21568:tid 21578] [client 52.143.152.19:50142] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new3.php"] [unique_id "adk3J4iz5v_ljZxkpR_DGQAAAQY"]
[Sat Apr 11 01:45:12.459441 2026] [:error] [pid 55451:tid 55469] [client 52.143.152.19:50075] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new3.php"] [unique_id "adk3KHApxuyB7yCS5Rn7BAAAANA"]
[Sat Apr 11 01:45:12.933880 2026] [:error] [pid 55451:tid 55475] [client 52.143.152.19:58042] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "adk3KHApxuyB7yCS5Rn7CgAAANY"]
[Sat Apr 11 01:45:13.400440 2026] [:error] [pid 21706:tid 21724] [client 52.143.152.19:50060] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "adk3KSGQ1M5d8fQSsLGeCAAAABA"]
[Sat Apr 11 01:45:13.867747 2026] [:error] [pid 55451:tid 55466] [client 52.143.152.19:44363] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nw.php"] [unique_id "adk3KXApxuyB7yCS5Rn7EQAAAM0"]
[Sat Apr 11 01:45:14.354496 2026] [:error] [pid 21568:tid 21587] [client 52.143.152.19:44360] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sat Apr 11 01:45:14.590101 2026] [:error] [pid 21568:tid 21575] [client 52.143.152.19:44360] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sat Apr 11 01:45:14.840940 2026] [:error] [pid 21568:tid 21576] [client 52.143.152.19:44360] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sat Apr 11 01:45:15.076370 2026] [:error] [pid 21568:tid 21580] [client 52.143.152.19:44360] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sat Apr 11 01:45:15.313268 2026] [:error] [pid 21568:tid 21582] [client 52.143.152.19:44360] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Sat Apr 11 01:45:15.550470 2026] [:error] [pid 21568:tid 21581] [client 52.143.152.19:44360] File does not exist: /usr/local/apache/htdocs/suspended-page/xsas.php
[Sat Apr 11 01:45:16.026952 2026] [:error] [pid 21568:tid 21594] [client 52.143.152.19:44360] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat Apr 11 01:45:16.313518 2026] [:error] [pid 21568:tid 21585] [client 52.143.152.19:44360] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sat Apr 11 01:45:16.548917 2026] [:error] [pid 21568:tid 21596] [client 52.143.152.19:44360] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat Apr 11 01:45:16.835680 2026] [:error] [pid 21568:tid 21578] [client 52.143.152.19:44360] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sat Apr 11 01:45:17.069136 2026] [:error] [pid 21568:tid 21579] [client 52.143.152.19:44360] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "adk3LYiz5v_ljZxkpR_DMAAAAQc"]
[Sat Apr 11 01:45:17.540543 2026] [:error] [pid 21706:tid 21724] [client 52.143.152.19:50113] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "adk3LSGQ1M5d8fQSsLGeFQAAABA"]
[Sat Apr 11 01:45:18.033445 2026] [:error] [pid 21569:tid 21664] [client 52.143.152.19:58038] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "adk3LnAvQTgvXJ6vHoqU6AAAAJA"]
[Sat Apr 11 01:45:18.499171 2026] [:error] [pid 21570:tid 21692] [client 52.143.152.19:44338] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "adk3LjKs5t9xRSNL6cnATQAAAFI"]
[Sat Apr 11 01:45:18.965697 2026] [:error] [pid 21570:tid 21696] [client 52.143.152.19:44300] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adk3LjKs5t9xRSNL6cnATwAAAFY"]
[Sat Apr 11 01:45:19.434719 2026] [:error] [pid 21570:tid 21687] [client 52.143.152.19:46196] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adk3LzKs5t9xRSNL6cnAVgAAAE0"]
[Sat Apr 11 01:45:19.904531 2026] [:error] [pid 21569:tid 21660] [client 52.143.152.19:46184] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adk3L3AvQTgvXJ6vHoqU7gAAAI4"]
[Sat Apr 11 01:45:20.399665 2026] [:error] [pid 21570:tid 21665] [client 52.143.152.19:44314] [client 52.143.152.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adk3MDKs5t9xRSNL6cnAYQAAAEI"]
[Sat Apr 11 03:56:45.103002 2026] [:error] [pid 32088:tid 32186] [client 164.68.120.90:51800] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jobs/"] [unique_id "adlV_Xi-kLhF3DztplAdRAAAAJM"]
[Sat Apr 11 03:57:01.960727 2026] [:error] [pid 32208:tid 32218] [client 164.68.120.90:40892] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/employment"] [unique_id "adlWDYZ4YzBUDeFI2a8gFQAAAMY"]
[Sat Apr 11 03:58:48.373982 2026] [:error] [pid 2812:tid 2822] [client 164.68.120.90:33528] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vacancies/"] [unique_id "adlWeNmkbBYp4LlMowsCLQAAAMc"]
[Sat Apr 11 03:59:46.421518 2026] [:error] [pid 2812:tid 2827] [client 164.68.120.90:34238] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/current-vacancies/"] [unique_id "adlWstmkbBYp4LlMowsDFQAAAMw"]
[Sat Apr 11 04:01:06.798566 2026] [:error] [pid 2812:tid 2836] [client 164.68.120.90:35568] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/contact"] [unique_id "adlXAtmkbBYp4LlMowsEngAAANU"]
[Sat Apr 11 04:01:36.971955 2026] [:error] [pid 2812:tid 2839] [client 164.68.120.90:44064] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/privacy"] [unique_id "adlXINmkbBYp4LlMowsFHwAAANg"]
[Sat Apr 11 04:01:51.755788 2026] [:error] [pid 2722:tid 2756] [client 164.68.120.90:39788] [client 164.68.120.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/privacy-policy"] [unique_id "adlXL4_R23QDTmaQHyGC1wAAAEM"]
[Sat Apr 11 05:24:22.784293 2026] [:error] [pid 15244:tid 15269] [client 20.111.36.240:22742] File does not exist: /usr/local/apache/htdocs/suspended-page/HhJj1KbY8mQ.php
[Sat Apr 11 05:24:23.044883 2026] [:error] [pid 15244:tid 15264] [client 20.111.36.240:22742] File does not exist: /usr/local/apache/htdocs/suspended-page/tJsRZpCPGbk.php
[Sat Apr 11 05:24:23.324646 2026] [:error] [pid 15244:tid 15253] [client 20.111.36.240:22742] File does not exist: /usr/local/apache/htdocs/suspended-page/aboud.php
[Sat Apr 11 05:24:23.561808 2026] [:error] [pid 15244:tid 15249] [client 20.111.36.240:22742] File does not exist: /usr/local/apache/htdocs/suspended-page/pCS3rHdUjGM.php
[Sat Apr 11 05:24:23.803510 2026] [:error] [pid 15244:tid 15267] [client 20.111.36.240:22742] File does not exist: /usr/local/apache/htdocs/suspended-page/JMckCndy4s3.php
[Sat Apr 11 05:24:24.056664 2026] [:error] [pid 15244:tid 15258] [client 20.111.36.240:22742] File does not exist: /usr/local/apache/htdocs/suspended-page/vkYjOI1NKVi.php
[Sat Apr 11 05:24:24.293162 2026] [:error] [pid 15244:tid 15248] [client 20.111.36.240:22742] File does not exist: /usr/local/apache/htdocs/suspended-page/4SfCBioxZaQ.php
[Sat Apr 11 05:24:24.539400 2026] [:error] [pid 15244:tid 15266] [client 20.111.36.240:22742] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sat Apr 11 05:24:24.810275 2026] [:error] [pid 15244:tid 15246] [client 20.111.36.240:22742] File does not exist: /usr/local/apache/htdocs/suspended-page/wXPBaHfi2do.php
[Sat Apr 11 05:24:25.046695 2026] [:error] [pid 15244:tid 15250] [client 20.111.36.240:22742] File does not exist: /usr/local/apache/htdocs/suspended-page/ropyx.php
[Sat Apr 11 05:24:25.344363 2026] [:error] [pid 15244:tid 15269] [client 20.111.36.240:22742] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/option.php"] [unique_id "adlqiYkdEsz5NeAq8w3xpAAAARc"]
[Sat Apr 11 05:24:25.955153 2026] [:error] [pid 33172:tid 33240] [client 20.111.36.240:23071] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/option.php"] [unique_id "adlqiTn2G0IJw5EZY9komQAAAFY"]
[Sat Apr 11 05:24:26.571992 2026] [:error] [pid 33171:tid 33203] [client 20.111.36.240:26857] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/option.php"] [unique_id "adlqiroqTMlo30hcVw9OQQAAABE"]
[Sat Apr 11 05:24:27.342726 2026] [:error] [pid 15244:tid 15265] [client 20.111.36.240:16751] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/option.php"] [unique_id "adlqi4kdEsz5NeAq8w3xqgAAARM"]
[Sat Apr 11 05:24:27.935460 2026] [:error] [pid 15244:tid 15256] [client 20.111.36.240:23641] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/OK.php"] [unique_id "adlqi4kdEsz5NeAq8w3xsAAAAQo"]
[Sat Apr 11 05:24:28.594071 2026] [:error] [pid 15244:tid 15248] [client 20.111.36.240:26796] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/OK.php"] [unique_id "adlqjIkdEsz5NeAq8w3xtAAAAQI"]
[Sat Apr 11 05:24:29.329724 2026] [:error] [pid 33173:tid 33265] [client 20.111.36.240:23658] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/OK.php"] [unique_id "adlqja8109xRDP2izWjCgAAAAJQ"]
[Sat Apr 11 05:24:30.040306 2026] [:error] [pid 33173:tid 33249] [client 20.111.36.240:37467] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/OK.php"] [unique_id "adlqjq8109xRDP2izWjChAAAAIQ"]
[Sat Apr 11 05:24:30.895667 2026] [:error] [pid 33173:tid 33247] [client 20.111.36.240:26773] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "adlqjq8109xRDP2izWjChwAAAII"]
[Sat Apr 11 05:24:31.736577 2026] [:error] [pid 15244:tid 15267] [client 20.111.36.240:22671] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "adlqj4kdEsz5NeAq8w3xzgAAARU"]
[Sat Apr 11 05:24:32.308860 2026] [:error] [pid 15244:tid 15262] [client 20.111.36.240:16765] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "adlqkIkdEsz5NeAq8w3x3gAAARA"]
[Sat Apr 11 05:24:33.096369 2026] [:error] [pid 15244:tid 15250] [client 20.111.36.240:21564] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "adlqkYkdEsz5NeAq8w3x5gAAAQQ"]
[Sat Apr 11 05:24:33.833104 2026] [:error] [pid 15244:tid 15263] [client 20.111.36.240:37486] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adlqkYkdEsz5NeAq8w3x6gAAARE"]
[Sat Apr 11 05:24:34.394006 2026] [:error] [pid 15244:tid 15264] [client 20.111.36.240:23629] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adlqkokdEsz5NeAq8w3x8QAAARI"]
[Sat Apr 11 05:24:35.023877 2026] [:error] [pid 33173:tid 33258] [client 20.111.36.240:22755] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adlqk68109xRDP2izWjCmQAAAI0"]
[Sat Apr 11 05:24:35.622669 2026] [:error] [pid 33172:tid 33226] [client 20.111.36.240:27480] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/F1jgmosvPbq.php"] [unique_id "adlqkzn2G0IJw5EZY9kooQAAAEg"]
[Sat Apr 11 05:24:36.249457 2026] [:error] [pid 15244:tid 15250] [client 20.111.36.240:21560] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adlqlIkdEsz5NeAq8w3yBAAAAQQ"]
[Sat Apr 11 05:24:36.871835 2026] [:error] [pid 33172:tid 33222] [client 20.111.36.240:23843] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adlqlDn2G0IJw5EZY9kopQAAAEQ"]
[Sat Apr 11 05:24:37.620730 2026] [:error] [pid 15244:tid 15269] [client 20.111.36.240:23654] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adlqlYkdEsz5NeAq8w3yFwAAARc"]
[Sat Apr 11 05:24:38.379875 2026] [:error] [pid 33173:tid 33253] [client 20.111.36.240:27500] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v1Cd9rWaZMx.php"] [unique_id "adlqlq8109xRDP2izWjCoAAAAIg"]
[Sat Apr 11 05:24:39.017180 2026] [:error] [pid 33172:tid 33225] [client 20.111.36.240:23085] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NexusLeads.php"] [unique_id "adlqlzn2G0IJw5EZY9koqQAAAEc"]
[Sat Apr 11 05:24:39.665543 2026] [:error] [pid 15244:tid 15262] [client 20.111.36.240:16795] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NexusLeads.php"] [unique_id "adlql4kdEsz5NeAq8w3yJwAAARA"]
[Sat Apr 11 05:24:40.327354 2026] [:error] [pid 15244:tid 15259] [client 20.111.36.240:26435] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NexusLeads.php"] [unique_id "adlqmIkdEsz5NeAq8w3yKgAAAQ0"]
[Sat Apr 11 05:24:40.910893 2026] [:error] [pid 33173:tid 33259] [client 20.111.36.240:16723] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NexusLeads.php"] [unique_id "adlqmK8109xRDP2izWjCrgAAAI4"]
[Sat Apr 11 05:24:41.526139 2026] [:error] [pid 33172:tid 33228] [client 20.111.36.240:21567] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rfzhh.php"] [unique_id "adlqmTn2G0IJw5EZY9korgAAAEo"]
[Sat Apr 11 05:24:42.085394 2026] [:error] [pid 15244:tid 15258] [client 20.111.36.240:26754] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rfzhh.php"] [unique_id "adlqmokdEsz5NeAq8w3yMwAAAQw"]
[Sat Apr 11 05:24:42.664649 2026] [:error] [pid 15244:tid 15270] [client 20.111.36.240:26045] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rfzhh.php"] [unique_id "adlqmokdEsz5NeAq8w3yNAAAARg"]
[Sat Apr 11 05:24:43.171902 2026] [:error] [pid 33171:tid 33210] [client 20.111.36.240:16769] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rfzhh.php"] [unique_id "adlqm7oqTMlo30hcVw9OXgAAABg"]
[Sat Apr 11 05:24:43.723622 2026] [:error] [pid 33171:tid 33186] [client 20.111.36.240:16797] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin-wp.php"] [unique_id "adlqm7oqTMlo30hcVw9OYwAAAAA"]
[Sat Apr 11 05:24:44.343376 2026] [:error] [pid 33172:tid 33242] [client 20.111.36.240:16791] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin-wp.php"] [unique_id "adlqnDn2G0IJw5EZY9kowAAAAFg"]
[Sat Apr 11 05:24:44.899532 2026] [:error] [pid 33172:tid 33235] [client 20.111.36.240:26758] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin-wp.php"] [unique_id "adlqnDn2G0IJw5EZY9kowgAAAFE"]
[Sat Apr 11 05:24:45.411610 2026] [:error] [pid 33288:tid 33291] [client 20.111.36.240:23826] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin-wp.php"] [unique_id "adlqnWJmwJFFPEgRHfEhswAAAME"]
[Sat Apr 11 05:24:45.968284 2026] [:error] [pid 15244:tid 15266] [client 20.111.36.240:26879] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uplozyu.php"] [unique_id "adlqnYkdEsz5NeAq8w3yOgAAARQ"]
[Sat Apr 11 05:24:46.547831 2026] [:error] [pid 33288:tid 33313] [client 20.111.36.240:26472] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uplozyu.php"] [unique_id "adlqnmJmwJFFPEgRHfEh0gAAANc"]
[Sat Apr 11 05:24:47.032348 2026] [:error] [pid 33288:tid 33300] [client 20.111.36.240:23040] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uplozyu.php"] [unique_id "adlqn2JmwJFFPEgRHfEh5gAAAMo"]
[Sat Apr 11 05:24:47.523036 2026] [:error] [pid 33172:tid 33230] [client 20.111.36.240:16809] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uplozyu.php"] [unique_id "adlqnzn2G0IJw5EZY9ko0wAAAEw"]
[Sat Apr 11 05:24:48.065647 2026] [:error] [pid 33172:tid 33238] [client 20.111.36.240:16806] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adlqoDn2G0IJw5EZY9ko1gAAAFQ"]
[Sat Apr 11 05:24:48.582676 2026] [:error] [pid 15244:tid 15261] [client 20.111.36.240:23120] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adlqoIkdEsz5NeAq8w3yRQAAAQ8"]
[Sat Apr 11 05:24:49.910881 2026] [:error] [pid 33288:tid 33310] [client 20.111.36.240:23048] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adlqoWJmwJFFPEgRHfEiGQAAANQ"]
[Sat Apr 11 05:24:50.683145 2026] [:error] [pid 33288:tid 33293] [client 20.111.36.240:37465] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4oivIQALaOZ.php"] [unique_id "adlqomJmwJFFPEgRHfEiIAAAAMM"]
[Sat Apr 11 05:24:51.160937 2026] [:error] [pid 33173:tid 33256] [client 20.111.36.240:27459] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lpktuneq.php"] [unique_id "adlqo68109xRDP2izWjC0gAAAIs"]
[Sat Apr 11 05:24:51.708516 2026] [:error] [pid 33172:tid 33228] [client 20.111.36.240:16727] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lpktuneq.php"] [unique_id "adlqozn2G0IJw5EZY9ko3gAAAEo"]
[Sat Apr 11 05:24:52.516355 2026] [:error] [pid 33171:tid 33190] [client 20.111.36.240:22775] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lpktuneq.php"] [unique_id "adlqpLoqTMlo30hcVw9OhAAAAAQ"]
[Sat Apr 11 05:24:53.518999 2026] [:error] [pid 33173:tid 33261] [client 20.111.36.240:27850] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lpktuneq.php"] [unique_id "adlqpa8109xRDP2izWjC5AAAAJA"]
[Sat Apr 11 05:24:54.406039 2026] [:error] [pid 15244:tid 15257] [client 20.111.36.240:22768] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adlqpokdEsz5NeAq8w3yZgAAAQs"]
[Sat Apr 11 05:24:54.940421 2026] [:error] [pid 15244:tid 15247] [client 20.111.36.240:23137] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adlqpokdEsz5NeAq8w3yagAAAQE"]
[Sat Apr 11 05:24:56.457207 2026] [:error] [pid 33288:tid 33313] [client 20.111.36.240:23057] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adlqqGJmwJFFPEgRHfEiMQAAANc"]
[Sat Apr 11 05:24:57.818650 2026] [:error] [pid 33288:tid 33314] [client 20.111.36.240:37496] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5cnobsvIfGg.php"] [unique_id "adlqqWJmwJFFPEgRHfEiOgAAANg"]
[Sat Apr 11 05:24:58.669712 2026] [:error] [pid 33173:tid 33246] [client 20.111.36.240:26436] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-widgets.php"] [unique_id "adlqqq8109xRDP2izWjC7QAAAIE"]
[Sat Apr 11 05:24:59.536953 2026] [:error] [pid 33171:tid 33209] [client 20.111.36.240:26481] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-widgets.php"] [unique_id "adlqq7oqTMlo30hcVw9OmgAAABc"]
[Sat Apr 11 05:25:00.745837 2026] [:error] [pid 33172:tid 33229] [client 20.111.36.240:27477] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-widgets.php"] [unique_id "adlqrDn2G0IJw5EZY9ko5QAAAEs"]
[Sat Apr 11 05:25:01.648486 2026] [:error] [pid 33288:tid 33309] [client 20.111.36.240:23827] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-widgets.php"] [unique_id "adlqrWJmwJFFPEgRHfEiRgAAANM"]
[Sat Apr 11 05:25:02.301479 2026] [:error] [pid 15244:tid 15266] [client 20.111.36.240:16736] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tsconfig.php"] [unique_id "adlqrokdEsz5NeAq8w3ylAAAARQ"]
[Sat Apr 11 05:25:03.111386 2026] [:error] [pid 15244:tid 15268] [client 20.111.36.240:16804] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tsconfig.php"] [unique_id "adlqr4kdEsz5NeAq8w3ymgAAARY"]
[Sat Apr 11 05:25:03.988804 2026] [:error] [pid 15244:tid 15263] [client 20.111.36.240:16818] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tsconfig.php"] [unique_id "adlqr4kdEsz5NeAq8w3ynQAAARE"]
[Sat Apr 11 05:25:04.581344 2026] [:error] [pid 33171:tid 33188] [client 20.111.36.240:27849] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tsconfig.php"] [unique_id "adlqsLoqTMlo30hcVw9OrQAAAAI"]
[Sat Apr 11 05:25:05.238955 2026] [:error] [pid 33173:tid 33254] [client 20.111.36.240:23063] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adlqsa8109xRDP2izWjDBQAAAIk"]
[Sat Apr 11 05:25:05.884705 2026] [:error] [pid 33288:tid 33310] [client 20.111.36.240:26781] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adlqsWJmwJFFPEgRHfEiXAAAANQ"]
[Sat Apr 11 05:25:06.444631 2026] [:error] [pid 15244:tid 15256] [client 20.111.36.240:23858] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adlqsokdEsz5NeAq8w3yoQAAAQo"]
[Sat Apr 11 05:25:07.044181 2026] [:error] [pid 33173:tid 33263] [client 20.111.36.240:27879] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ptFWN5XHUb1.php"] [unique_id "adlqs68109xRDP2izWjDBwAAAJI"]
[Sat Apr 11 05:25:07.548386 2026] [:error] [pid 33172:tid 33230] [client 20.111.36.240:26016] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adlqszn2G0IJw5EZY9ko-gAAAEw"]
[Sat Apr 11 05:25:08.112550 2026] [:error] [pid 33172:tid 33218] [client 20.111.36.240:26757] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adlqtDn2G0IJw5EZY9ko_QAAAEA"]
[Sat Apr 11 05:25:08.684510 2026] [:error] [pid 15244:tid 15264] [client 20.111.36.240:26027] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adlqtIkdEsz5NeAq8w3yrwAAARI"]
[Sat Apr 11 05:25:09.448449 2026] [:error] [pid 33171:tid 33210] [client 20.111.36.240:26463] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/YpWD4kv2sPG.php"] [unique_id "adlqtboqTMlo30hcVw9OvQAAABg"]
[Sat Apr 11 05:25:10.018654 2026] [:error] [pid 33288:tid 33312] [client 20.111.36.240:16801] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/turbo.php"] [unique_id "adlqtmJmwJFFPEgRHfEiZAAAANY"]
[Sat Apr 11 05:25:10.516774 2026] [:error] [pid 33173:tid 33251] [client 20.111.36.240:23811] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/turbo.php"] [unique_id "adlqtq8109xRDP2izWjDFAAAAIY"]
[Sat Apr 11 05:25:11.045918 2026] [:error] [pid 15244:tid 15259] [client 20.111.36.240:27200] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/turbo.php"] [unique_id "adlqt4kdEsz5NeAq8w3ysgAAAQ0"]
[Sat Apr 11 05:25:11.527474 2026] [:error] [pid 15244:tid 15255] [client 20.111.36.240:23636] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/turbo.php"] [unique_id "adlqt4kdEsz5NeAq8w3ytQAAAQk"]
[Sat Apr 11 05:25:12.130690 2026] [:error] [pid 15244:tid 15265] [client 20.111.36.240:22673] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/small.php"] [unique_id "adlquIkdEsz5NeAq8w3yuAAAARM"]
[Sat Apr 11 05:25:12.663250 2026] [:error] [pid 15244:tid 15262] [client 20.111.36.240:27241] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/small.php"] [unique_id "adlquIkdEsz5NeAq8w3yvQAAARA"]
[Sat Apr 11 05:25:13.200263 2026] [:error] [pid 15244:tid 15254] [client 20.111.36.240:23104] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/small.php"] [unique_id "adlquYkdEsz5NeAq8w3ywwAAAQg"]
[Sat Apr 11 05:25:13.679925 2026] [:error] [pid 33172:tid 33240] [client 20.111.36.240:27234] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/small.php"] [unique_id "adlquTn2G0IJw5EZY9kpBwAAAFY"]
[Sat Apr 11 05:25:14.193432 2026] [:error] [pid 33172:tid 33233] [client 20.111.36.240:37490] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adlqujn2G0IJw5EZY9kpCwAAAE8"]
[Sat Apr 11 05:25:14.663897 2026] [:error] [pid 33173:tid 33248] [client 20.111.36.240:27841] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adlquq8109xRDP2izWjDJQAAAIM"]
[Sat Apr 11 05:25:15.179266 2026] [:error] [pid 33172:tid 33225] [client 20.111.36.240:27499] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adlquzn2G0IJw5EZY9kpEAAAAEc"]
[Sat Apr 11 05:25:15.714941 2026] [:error] [pid 15244:tid 15253] [client 20.111.36.240:23059] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/SE6yfkFKuQA.php"] [unique_id "adlqu4kdEsz5NeAq8w3yzQAAAQc"]
[Sat Apr 11 05:25:16.342167 2026] [:error] [pid 15244:tid 15264] [client 20.111.36.240:26450] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adlqvIkdEsz5NeAq8w3yzwAAARI"]
[Sat Apr 11 05:25:16.866508 2026] [:error] [pid 33288:tid 33293] [client 20.111.36.240:23100] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adlqvGJmwJFFPEgRHfEidwAAAMM"]
[Sat Apr 11 05:25:17.564342 2026] [:error] [pid 33173:tid 33256] [client 20.111.36.240:22754] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adlqva8109xRDP2izWjDPQAAAIs"]
[Sat Apr 11 05:25:18.152791 2026] [:error] [pid 15244:tid 15258] [client 20.111.36.240:23082] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6Vtfo6i9f2.php"] [unique_id "adlqvokdEsz5NeAq8w3y2gAAAQw"]
[Sat Apr 11 05:25:18.686202 2026] [:error] [pid 33172:tid 33223] [client 20.111.36.240:22667] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/veoblmpa.php"] [unique_id "adlqvjn2G0IJw5EZY9kpEQAAAEU"]
[Sat Apr 11 05:25:19.237389 2026] [:error] [pid 15244:tid 15260] [client 20.111.36.240:23053] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/veoblmpa.php"] [unique_id "adlqv4kdEsz5NeAq8w3y4QAAAQ4"]
[Sat Apr 11 05:25:19.866211 2026] [:error] [pid 15244:tid 15253] [client 20.111.36.240:23155] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/veoblmpa.php"] [unique_id "adlqv4kdEsz5NeAq8w3y6gAAAQc"]
[Sat Apr 11 05:25:20.667401 2026] [:error] [pid 33288:tid 33298] [client 20.111.36.240:23868] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/veoblmpa.php"] [unique_id "adlqwGJmwJFFPEgRHfEijwAAAMg"]
[Sat Apr 11 05:25:21.339250 2026] [:error] [pid 15244:tid 15258] [client 20.111.36.240:23116] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adlqwYkdEsz5NeAq8w3y8wAAAQw"]
[Sat Apr 11 05:25:21.960639 2026] [:error] [pid 33172:tid 33224] [client 20.111.36.240:28024] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adlqwTn2G0IJw5EZY9kpGAAAAEY"]
[Sat Apr 11 05:25:22.577737 2026] [:error] [pid 33171:tid 33204] [client 20.111.36.240:25999] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adlqwroqTMlo30hcVw9O0gAAABI"]
[Sat Apr 11 05:25:23.138772 2026] [:error] [pid 33173:tid 33255] [client 20.111.36.240:22782] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-pagebuilders-1QlZPC.php"] [unique_id "adlqw68109xRDP2izWjDRQAAAIo"]
[Sat Apr 11 05:25:23.789714 2026] [:error] [pid 33288:tid 33301] [client 20.111.36.240:23840] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/levyzxsb.php"] [unique_id "adlqw2JmwJFFPEgRHfEipAAAAMs"]
[Sat Apr 11 05:25:24.347556 2026] [:error] [pid 15244:tid 15251] [client 20.111.36.240:26782] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/levyzxsb.php"] [unique_id "adlqxIkdEsz5NeAq8w3zAAAAAQU"]
[Sat Apr 11 05:25:25.149624 2026] [:error] [pid 33173:tid 33259] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/levyzxsb.php
[Sat Apr 11 05:25:25.434409 2026] [:error] [pid 33173:tid 33257] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/HtQmJOArI4R.php
[Sat Apr 11 05:25:25.694512 2026] [:error] [pid 33173:tid 33246] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/2whl5XBpvzE.php
[Sat Apr 11 05:25:25.931456 2026] [:error] [pid 33173:tid 33247] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/jtMi25FrDCR.php
[Sat Apr 11 05:25:26.168856 2026] [:error] [pid 33173:tid 33253] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/avTptOckufV.php
[Sat Apr 11 05:25:26.405943 2026] [:error] [pid 33173:tid 33260] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/FZH64c5eNOX.php
[Sat Apr 11 05:25:26.647386 2026] [:error] [pid 33173:tid 33266] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/K9s7LSHhmVd.php
[Sat Apr 11 05:25:26.956561 2026] [:error] [pid 33173:tid 33269] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-casper.php
[Sat Apr 11 05:25:27.192948 2026] [:error] [pid 33173:tid 33254] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/Curve25519-items.php
[Sat Apr 11 05:25:27.432428 2026] [:error] [pid 33173:tid 33245] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/end.php
[Sat Apr 11 05:25:27.677852 2026] [:error] [pid 33173:tid 33256] [client 20.111.36.240:16737] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Sat Apr 11 05:25:27.919018 2026] [:error] [pid 33173:tid 33249] [client 20.111.36.240:16737] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/54Y7oaIvRCq.php"] [unique_id "adlqx68109xRDP2izWjDXAAAAIQ"]
[Sat Apr 11 05:25:28.531469 2026] [:error] [pid 15244:tid 15268] [client 20.111.36.240:27516] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/54Y7oaIvRCq.php"] [unique_id "adlqyIkdEsz5NeAq8w3zHgAAARY"]
[Sat Apr 11 05:25:28.999635 2026] [:error] [pid 33172:tid 33229] [client 20.111.36.240:23074] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/54Y7oaIvRCq.php"] [unique_id "adlqyDn2G0IJw5EZY9kpLAAAAEs"]
[Sat Apr 11 05:25:29.464573 2026] [:error] [pid 33173:tid 33258] [client 20.111.36.240:37485] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/54Y7oaIvRCq.php"] [unique_id "adlqya8109xRDP2izWjDZwAAAI0"]
[Sat Apr 11 05:25:29.966171 2026] [:error] [pid 33172:tid 33230] [client 20.111.36.240:23662] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rss-functions-session.php"] [unique_id "adlqyTn2G0IJw5EZY9kpMwAAAEw"]
[Sat Apr 11 05:25:30.605952 2026] [:error] [pid 33171:tid 33208] [client 20.111.36.240:26046] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rss-functions-session.php"] [unique_id "adlqyroqTMlo30hcVw9O5AAAABY"]
[Sat Apr 11 05:25:31.205454 2026] [:error] [pid 33288:tid 33297] [client 20.111.36.240:23051] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rss-functions-session.php"] [unique_id "adlqy2JmwJFFPEgRHfEiuwAAAMc"]
[Sat Apr 11 05:25:31.752477 2026] [:error] [pid 33172:tid 33222] [client 20.111.36.240:20354] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rss-functions-session.php"] [unique_id "adlqyzn2G0IJw5EZY9kpOgAAAEQ"]
[Sat Apr 11 05:25:32.312132 2026] [:error] [pid 33172:tid 33231] [client 20.111.36.240:26803] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/QPGxhzdFios.php"] [unique_id "adlqzDn2G0IJw5EZY9kpPwAAAE0"]
[Sat Apr 11 05:25:32.968772 2026] [:error] [pid 33288:tid 33306] [client 20.111.36.240:26006] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/QPGxhzdFios.php"] [unique_id "adlqzGJmwJFFPEgRHfEiwwAAANA"]
[Sat Apr 11 05:25:33.470418 2026] [:error] [pid 15244:tid 15267] [client 20.111.36.240:23150] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/QPGxhzdFios.php"] [unique_id "adlqzYkdEsz5NeAq8w3zLgAAARU"]
[Sat Apr 11 05:25:33.955564 2026] [:error] [pid 33173:tid 33258] [client 20.111.36.240:23619] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/QPGxhzdFios.php"] [unique_id "adlqza8109xRDP2izWjDcQAAAI0"]
[Sat Apr 11 05:25:34.477860 2026] [:error] [pid 33173:tid 33269] [client 20.111.36.240:23627] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "adlqzq8109xRDP2izWjDdAAAAJg"]
[Sat Apr 11 05:25:35.035264 2026] [:error] [pid 33171:tid 33194] [client 20.111.36.240:26867] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "adlqz7oqTMlo30hcVw9O7QAAAAg"]
[Sat Apr 11 05:25:35.549125 2026] [:error] [pid 15244:tid 15264] [client 20.111.36.240:22666] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "adlqz4kdEsz5NeAq8w3zOQAAARI"]
[Sat Apr 11 05:25:36.055802 2026] [:error] [pid 33171:tid 33206] [client 20.111.36.240:26460] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kmsOihDGg24.php"] [unique_id "adlq0LoqTMlo30hcVw9O8gAAABQ"]
[Sat Apr 11 05:25:36.691368 2026] [:error] [pid 15244:tid 15250] [client 20.111.36.240:23042] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-more.php"] [unique_id "adlq0IkdEsz5NeAq8w3zPQAAAQQ"]
[Sat Apr 11 05:25:37.212572 2026] [:error] [pid 33172:tid 33240] [client 20.111.36.240:26482] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-more.php"] [unique_id "adlq0Tn2G0IJw5EZY9kpTQAAAFY"]
[Sat Apr 11 05:25:37.839000 2026] [:error] [pid 33172:tid 33219] [client 20.111.36.240:27899] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-more.php"] [unique_id "adlq0Tn2G0IJw5EZY9kpUAAAAEE"]
[Sat Apr 11 05:25:38.609920 2026] [:error] [pid 33173:tid 33247] [client 20.111.36.240:27458] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-more.php"] [unique_id "adlq0q8109xRDP2izWjDjwAAAII"]
[Sat Apr 11 05:25:39.113041 2026] [:error] [pid 33173:tid 33260] [client 20.111.36.240:13130] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adlq068109xRDP2izWjDlQAAAI8"]
[Sat Apr 11 05:25:39.889164 2026] [:error] [pid 15244:tid 15259] [client 20.111.36.240:20368] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adlq04kdEsz5NeAq8w3zUgAAAQ0"]
[Sat Apr 11 05:25:40.396757 2026] [:error] [pid 33172:tid 33235] [client 20.111.36.240:37497] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adlq1Dn2G0IJw5EZY9kpWAAAAFE"]
[Sat Apr 11 05:25:40.886806 2026] [:error] [pid 33288:tid 33296] [client 20.111.36.240:26815] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zMjcvbswY.php"] [unique_id "adlq1GJmwJFFPEgRHfEizwAAAMY"]
[Sat Apr 11 05:25:41.399118 2026] [:error] [pid 15244:tid 15254] [client 20.111.36.240:23125] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adlq1YkdEsz5NeAq8w3zWAAAAQg"]
[Sat Apr 11 05:25:41.910584 2026] [:error] [pid 33173:tid 33259] [client 20.111.36.240:26818] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adlq1a8109xRDP2izWjDnAAAAI4"]
[Sat Apr 11 05:25:42.411677 2026] [:error] [pid 33173:tid 33254] [client 20.111.36.240:26862] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adlq1q8109xRDP2izWjDoQAAAIk"]
[Sat Apr 11 05:25:42.889331 2026] [:error] [pid 33288:tid 33291] [client 20.111.36.240:25994] [client 20.111.36.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4SnNfidKMe3.php"] [unique_id "adlq1mJmwJFFPEgRHfEi1wAAAME"]
[Sat Apr 11 08:45:00.853797 2026] [:error] [pid 7946:tid 7978] [client 74.248.145.185:61687] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admZjPrHdDmbz9V-HcGLOwAAAUE"]
[Sat Apr 11 08:45:01.400473 2026] [:error] [pid 7945:tid 7959] [client 74.248.145.185:62446] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admZjbsDeeqOgGBoyiRR8wAAAQo"]
[Sat Apr 11 08:45:01.959422 2026] [:error] [pid 8040:tid 8055] [client 74.248.145.185:61671] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admZjfT4I2pBpREXxbXfrAAAAA0"]
[Sat Apr 11 08:45:02.516553 2026] [:error] [pid 7947:tid 8022] [client 74.248.145.185:61664] [client 74.248.145.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "admZjhCvPKMuu97BGdh8HQAAAZI"]
[Sat Apr 11 09:42:42.451316 2026] [:error] [pid 34822:tid 34836] [client 157.15.40.61:60022] [client 157.15.40.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/system/js/core.js"] [unique_id "admnEtoScBMkNZUKMZ3ZrgAAAQk"]
[Sat Apr 11 13:03:11.830528 2026] [:error] [pid 2297:tid 2323] [client 103.139.11.52:17253] [client 103.139.11.52] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.139.11.52, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adnWD7XJS-Jji11jZk27EAAAARY"]
[Sat Apr 11 13:03:11.834766 2026] [:error] [pid 2297:tid 2323] [client 103.139.11.52:17253] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 11 14:11:36.670246 2026] [:error] [pid 2297:tid 2320] [client 157.15.40.61:55995] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "adnmGLXJS-Jji11jZk3YxwAAARM"]
[Sat Apr 11 14:11:36.939290 2026] [:error] [pid 2187:tid 2237] [client 157.15.40.61:56080] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/style.php"] [unique_id "adnmGA4J29_qQi0FkjiH-AAAAAk"]
[Sat Apr 11 14:11:37.205429 2026] [:error] [pid 2187:tid 2241] [client 157.15.40.61:56152] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/style.php"] [unique_id "adnmGQ4J29_qQi0FkjiIBAAAAA0"]
[Sat Apr 11 14:11:37.480222 2026] [:error] [pid 11067:tid 11073] [client 157.15.40.61:56232] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/style.php"] [unique_id "adnmGcW3w7N67R04YCKQhAAAAEQ"]
[Sat Apr 11 14:11:37.750002 2026] [:error] [pid 2297:tid 2321] [client 157.15.40.61:56336] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style.php"] [unique_id "adnmGbXJS-Jji11jZk3ZDwAAARQ"]
[Sat Apr 11 14:11:38.048974 2026] [:error] [pid 2186:tid 2208] [client 157.15.40.61:56448] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "adnmGsibnOEEvcO8wPL9WwAAAJI"]
[Sat Apr 11 14:11:39.328218 2026] [:error] [pid 2297:tid 2322] [client 157.15.40.61:56540] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adnmG7XJS-Jji11jZk3ZUgAAARU"]
[Sat Apr 11 14:11:39.585794 2026] [:error] [pid 2297:tid 2305] [client 157.15.40.61:56741] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "adnmG7XJS-Jji11jZk3ZhgAAAQQ"]
[Sat Apr 11 14:11:39.842081 2026] [:error] [pid 2188:tid 2268] [client 157.15.40.61:56804] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "adnmG4DhDA-Xtn2nRScJvwAAAMw"]
[Sat Apr 11 14:11:40.172894 2026] [:error] [pid 11067:tid 11086] [client 157.15.40.61:56855] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "adnmHMW3w7N67R04YCKQ2gAAAFE"]
[Sat Apr 11 14:11:41.479110 2026] [:error] [pid 11067:tid 11092] [client 157.15.40.61:56926] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "adnmHcW3w7N67R04YCKRFQAAAFc"]
[Sat Apr 11 14:11:42.937961 2026] [:error] [pid 2188:tid 2261] [client 157.15.40.61:57385] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/blurbs.php"] [unique_id "adnmHoDhDA-Xtn2nRScJ-wAAAMU"]
[Sat Apr 11 14:11:43.717709 2026] [:error] [pid 2297:tid 2310] [client 157.15.40.61:57493] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "adnmH7XJS-Jji11jZk3aCwAAAQk"]
[Sat Apr 11 14:11:43.989598 2026] [:error] [pid 11067:tid 11070] [client 157.15.40.61:57553] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "adnmH8W3w7N67R04YCKRtgAAAEE"]
[Sat Apr 11 14:11:44.243550 2026] [:error] [pid 2188:tid 2257] [client 157.15.40.61:57607] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/shelp.php"] [unique_id "adnmIIDhDA-Xtn2nRScKKAAAAME"]
[Sat Apr 11 14:11:44.537180 2026] [:error] [pid 11067:tid 11078] [client 157.15.40.61:57667] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/cord.php"] [unique_id "adnmIMW3w7N67R04YCKR4wAAAEk"]
[Sat Apr 11 14:11:46.815096 2026] [:error] [pid 2187:tid 2238] [client 157.15.40.61:58035] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/dex.php"] [unique_id "adnmIg4J29_qQi0FkjiIsAAAAAo"]
[Sat Apr 11 14:11:47.077133 2026] [:error] [pid 2187:tid 2246] [client 157.15.40.61:58083] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adnmIw4J29_qQi0FkjiItAAAABI"]
[Sat Apr 11 14:11:47.342298 2026] [:error] [pid 2297:tid 2319] [client 157.15.40.61:58119] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/file2.php"] [unique_id "adnmI7XJS-Jji11jZk3aqwAAARI"]
[Sat Apr 11 14:11:48.670701 2026] [:error] [pid 11067:tid 11082] [client 157.15.40.61:58323] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "adnmJMW3w7N67R04YCKSegAAAE0"]
[Sat Apr 11 14:11:49.677280 2026] [:error] [pid 11067:tid 11076] [client 157.15.40.61:58511] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/zwso.php"] [unique_id "adnmJcW3w7N67R04YCKS0AAAAEc"]
[Sat Apr 11 14:11:50.707412 2026] [:error] [pid 2188:tid 2266] [client 157.15.40.61:58784] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_mna.php"] [unique_id "adnmJoDhDA-Xtn2nRScK0QAAAMo"]
[Sat Apr 11 14:11:51.772589 2026] [:error] [pid 2297:tid 2305] [client 157.15.40.61:59022] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "adnmJ7XJS-Jji11jZk3bbwAAAQQ"]
[Sat Apr 11 14:11:52.837535 2026] [:error] [pid 2186:tid 2201] [client 157.15.40.61:59219] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/shlo.php"] [unique_id "adnmKMibnOEEvcO8wPL-SwAAAIs"]
[Sat Apr 11 14:11:53.095525 2026] [:error] [pid 2187:tid 2252] [client 157.15.40.61:59269] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/133.php"] [unique_id "adnmKQ4J29_qQi0FkjiJFwAAABg"]
[Sat Apr 11 14:11:54.784524 2026] [:error] [pid 11067:tid 11073] [client 157.15.40.61:59553] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "adnmKsW3w7N67R04YCKUEAAAAEQ"]
[Sat Apr 11 14:11:55.053697 2026] [:error] [pid 2186:tid 2202] [client 157.15.40.61:59608] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/php8.php"] [unique_id "adnmK8ibnOEEvcO8wPL-gAAAAIw"]
[Sat Apr 11 14:11:56.400664 2026] [:error] [pid 2187:tid 2235] [client 157.15.40.61:59978] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/lufix1.php"] [unique_id "adnmLA4J29_qQi0FkjiJXAAAAAc"]
[Sat Apr 11 14:11:56.669102 2026] [:error] [pid 11067:tid 11089] [client 157.15.40.61:60025] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/witmm.php"] [unique_id "adnmLMW3w7N67R04YCKU-QAAAFQ"]
[Sat Apr 11 14:11:58.114666 2026] [:error] [pid 2297:tid 2322] [client 157.15.40.61:60370] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "adnmLrXJS-Jji11jZk3cDwAAARU"]
[Sat Apr 11 14:11:59.404288 2026] [:error] [pid 11067:tid 11086] [client 157.15.40.61:60723] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adnmL8W3w7N67R04YCKWAwAAAFE"]
[Sat Apr 11 14:12:00.658761 2026] [:error] [pid 11067:tid 11083] [client 157.15.40.61:60966] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "adnmMMW3w7N67R04YCKWWgAAAE4"]
[Sat Apr 11 14:12:00.915887 2026] [:error] [pid 2187:tid 2245] [client 157.15.40.61:61008] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "adnmMA4J29_qQi0FkjiJ3AAAABE"]
[Sat Apr 11 14:12:01.193031 2026] [:error] [pid 11067:tid 11089] [client 157.15.40.61:61064] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "adnmMcW3w7N67R04YCKWdgAAAFQ"]
[Sat Apr 11 14:12:02.128855 2026] [:error] [pid 2297:tid 2310] [client 157.15.40.61:61213] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/files.php"] [unique_id "adnmMrXJS-Jji11jZk3cTAAAAQk"]
[Sat Apr 11 14:12:02.390985 2026] [:error] [pid 11067:tid 11080] [client 157.15.40.61:61272] [client 157.15.40.61] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-editor.php"] [unique_id "adnmMsW3w7N67R04YCKWoQAAAEs"]
[Sat Apr 11 16:10:04.975249 2026] [:error] [pid 11067:tid 11087] [client 37.32.78.60:61929] [client 37.32.78.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 37.32.78.60, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adoB3MW3w7N67R04YCLjlgAAAFI"]
[Sat Apr 11 16:10:04.980518 2026] [:error] [pid 11067:tid 11087] [client 37.32.78.60:61929] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 11 16:16:39.217774 2026] [:error] [pid 2186:tid 2199] [client 35.224.118.24:64446] [client 35.224.118.24] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.224.118.24, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adoDZ8ibnOEEvcO8wPIdtgAAAIk"]
[Sat Apr 11 16:16:39.221717 2026] [:error] [pid 2186:tid 2199] [client 35.224.118.24:64446] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 11 16:16:41.588932 2026] [:error] [pid 2186:tid 2199] [client 35.224.118.24:64446] [client 35.224.118.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adoDacibnOEEvcO8wPIdyAAAAIk"]
[Sat Apr 11 16:16:42.031969 2026] [:error] [pid 11067:tid 11089] [client 35.224.118.24:59089] [client 35.224.118.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adoDasW3w7N67R04YCLnFQAAAFQ"]
[Sat Apr 11 16:16:42.463440 2026] [:error] [pid 2186:tid 2200] [client 35.224.118.24:54088] [client 35.224.118.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adoDasibnOEEvcO8wPIdygAAAIo"]
[Sat Apr 11 16:16:42.916451 2026] [:error] [pid 2297:tid 2323] [client 35.224.118.24:61865] [client 35.224.118.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adoDarXJS-Jji11jZk0WUQAAARY"]
[Sat Apr 11 16:16:43.314170 2026] [:error] [pid 2188:tid 2256] [client 35.224.118.24:62055] [client 35.224.118.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adoDa4DhDA-Xtn2nRSc1_wAAAMA"]
[Sat Apr 11 16:16:43.820715 2026] [:error] [pid 11067:tid 11086] [client 35.224.118.24:57670] [client 35.224.118.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adoDa8W3w7N67R04YCLnGgAAAFE"]
[Sat Apr 11 16:16:44.220053 2026] [:error] [pid 11067:tid 11082] [client 35.224.118.24:51242] [client 35.224.118.24] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adoDbMW3w7N67R04YCLnHgAAAE0"]
[Sat Apr 11 23:14:26.030177 2026] [:error] [pid 42313:tid 42336] [client 20.220.147.82:39918] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Sat Apr 11 23:14:26.291677 2026] [:error] [pid 42313:tid 42338] [client 20.220.147.82:39918] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Apr 11 23:14:27.118937 2026] [:error] [pid 42313:tid 42323] [client 20.220.147.82:39918] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sat Apr 11 23:14:27.326998 2026] [:error] [pid 42313:tid 42319] [client 20.220.147.82:39918] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Sat Apr 11 23:14:27.540626 2026] [:error] [pid 42313:tid 42317] [client 20.220.147.82:39918] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 11 23:14:28.227671 2026] [:error] [pid 42313:tid 42327] [client 20.220.147.82:39918] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Sat Apr 11 23:14:28.645078 2026] [:error] [pid 42313:tid 42338] [client 20.220.147.82:39918] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Sat Apr 11 23:14:29.078567 2026] [:error] [pid 42313:tid 42334] [client 20.220.147.82:39918] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Sat Apr 11 23:14:29.480202 2026] [:error] [pid 42313:tid 42328] [client 20.220.147.82:39918] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "adplVV2P8TxdbaN018JbiAAAAAw"]
[Sat Apr 11 23:14:30.315611 2026] [:error] [pid 52608:tid 52623] [client 20.220.147.82:39883] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "adplViY5wH-BLt5QEKhvEQAAAQw"]
[Sat Apr 11 23:14:31.260308 2026] [:error] [pid 42219:tid 42244] [client 20.220.147.82:39826] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "adplVw-4IkVbTQx_J-2iMQAAAJU"]
[Sat Apr 11 23:14:31.979207 2026] [:error] [pid 42219:tid 42230] [client 20.220.147.82:39885] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "adplVw-4IkVbTQx_J-2iNwAAAIc"]
[Sat Apr 11 23:14:32.477762 2026] [:error] [pid 42219:tid 42240] [client 20.220.147.82:39818] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "adplWA-4IkVbTQx_J-2iPAAAAJE"]
[Sat Apr 11 23:14:33.596322 2026] [:error] [pid 52608:tid 52629] [client 20.220.147.82:39924] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "adplWSY5wH-BLt5QEKhvGwAAARI"]
[Sat Apr 11 23:14:34.879802 2026] [:error] [pid 42220:tid 42256] [client 20.220.147.82:39884] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "adplWkz5c3Cs6a8B5QuauAAAAMU"]
[Sat Apr 11 23:14:36.088139 2026] [:error] [pid 52608:tid 52632] [client 20.220.147.82:39878] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "adplXCY5wH-BLt5QEKhvHwAAARU"]
[Sat Apr 11 23:14:37.415684 2026] [:error] [pid 42220:tid 42271] [client 20.220.147.82:39810] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "adplXUz5c3Cs6a8B5QuavQAAANQ"]
[Sat Apr 11 23:14:39.464307 2026] [:error] [pid 42313:tid 42325] [client 20.220.147.82:39915] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "adplX12P8TxdbaN018JbpgAAAAk"]
[Sat Apr 11 23:14:40.895096 2026] [:error] [pid 42221:tid 42288] [client 20.220.147.82:39888] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "adplYE2gt0pb_0-cc6mjXAAAAEo"]
[Sat Apr 11 23:14:42.390972 2026] [:error] [pid 42219:tid 42232] [client 20.220.147.82:39925] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "adplYg-4IkVbTQx_J-2iTwAAAIk"]
[Sat Apr 11 23:14:43.456052 2026] [:error] [pid 52608:tid 52614] [client 20.220.147.82:39879] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "adplYyY5wH-BLt5QEKhvOQAAAQM"]
[Sat Apr 11 23:14:45.395291 2026] [:error] [pid 42313:tid 42324] [client 20.220.147.82:39881] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "adplZV2P8TxdbaN018JbugAAAAg"]
[Sat Apr 11 23:14:46.760698 2026] [:error] [pid 52608:tid 52633] [client 20.220.147.82:39911] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "adplZiY5wH-BLt5QEKhvQAAAARY"]
[Sat Apr 11 23:14:48.126588 2026] [:error] [pid 52608:tid 52622] [client 20.220.147.82:39811] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "adplaCY5wH-BLt5QEKhvSgAAAQs"]
[Sat Apr 11 23:14:49.711652 2026] [:error] [pid 42313:tid 42331] [client 20.220.147.82:39887] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "adplaV2P8TxdbaN018JbxAAAAA8"]
[Sat Apr 11 23:14:51.380780 2026] [:error] [pid 42219:tid 42245] [client 20.220.147.82:39819] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "adplaw-4IkVbTQx_J-2iUQAAAJY"]
[Sat Apr 11 23:14:52.698384 2026] [:error] [pid 52608:tid 52624] [client 20.220.147.82:39920] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "adplbCY5wH-BLt5QEKhvZgAAAQ0"]
[Sat Apr 11 23:14:53.979307 2026] [:error] [pid 52608:tid 52634] [client 20.220.147.82:39899] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "adplbSY5wH-BLt5QEKhvbQAAARc"]
[Sat Apr 11 23:14:54.988375 2026] [:error] [pid 52608:tid 52615] [client 20.220.147.82:39880] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "adplbiY5wH-BLt5QEKhvdgAAAQQ"]
[Sat Apr 11 23:14:55.906596 2026] [:error] [pid 42313:tid 42325] [client 20.220.147.82:39903] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "adplb12P8TxdbaN018Jb3AAAAAk"]
[Sat Apr 11 23:14:56.798626 2026] [:error] [pid 42219:tid 42247] [client 20.220.147.82:39747] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "adplcA-4IkVbTQx_J-2iXgAAAJg"]
[Sat Apr 11 23:14:58.043047 2026] [:error] [pid 42313:tid 42328] [client 20.220.147.82:39814] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "adplcl2P8TxdbaN018Jb5QAAAAw"]
[Sat Apr 11 23:14:59.774902 2026] [:error] [pid 52608:tid 52629] [client 20.220.147.82:39905] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "adplcyY5wH-BLt5QEKhvjgAAARI"]
[Sat Apr 11 23:15:00.819864 2026] [:error] [pid 52608:tid 52635] [client 20.220.147.82:39895] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "adpldCY5wH-BLt5QEKhvlQAAARg"]
[Sat Apr 11 23:15:02.983445 2026] [:error] [pid 42313:tid 42332] [client 20.220.147.82:39812] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "adpldl2P8TxdbaN018Jb9QAAABA"]
[Sat Apr 11 23:15:04.747873 2026] [:error] [pid 42221:tid 42279] [client 20.220.147.82:39928] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fv.php"] [unique_id "adpleE2gt0pb_0-cc6mjfgAAAEE"]
[Sat Apr 11 23:15:06.241833 2026] [:error] [pid 52608:tid 52624] [client 20.220.147.82:39907] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adpleiY5wH-BLt5QEKhvpAAAAQ0"]
[Sat Apr 11 23:15:07.411865 2026] [:error] [pid 42221:tid 42278] [client 20.220.147.82:39917] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adple02gt0pb_0-cc6mjiAAAAEA"]
[Sat Apr 11 23:15:08.711024 2026] [:error] [pid 52608:tid 52618] [client 20.220.147.82:39834] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adplfCY5wH-BLt5QEKhvqQAAAQc"]
[Sat Apr 11 23:15:09.517140 2026] [:error] [pid 52608:tid 52624] [client 20.220.147.82:39886] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "adplfSY5wH-BLt5QEKhvsQAAAQ0"]
[Sat Apr 11 23:15:12.307396 2026] [:error] [pid 42219:tid 42225] [client 20.220.147.82:39836] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lsd.php"] [unique_id "adplgA-4IkVbTQx_J-2ieAAAAII"]
[Sat Apr 11 23:15:13.131820 2026] [:error] [pid 52608:tid 52618] [client 20.220.147.82:39839] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lsd.php"] [unique_id "adplgSY5wH-BLt5QEKhvwAAAAQc"]
[Sat Apr 11 23:15:14.178609 2026] [:error] [pid 52608:tid 52617] [client 20.220.147.82:39822] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lsd.php"] [unique_id "adplgiY5wH-BLt5QEKhvyAAAAQY"]
[Sat Apr 11 23:15:15.119252 2026] [:error] [pid 42219:tid 42223] [client 20.220.147.82:39933] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lsd.php"] [unique_id "adplgw-4IkVbTQx_J-2ifwAAAIA"]
[Sat Apr 11 23:15:16.593647 2026] [:error] [pid 42313:tid 42319] [client 20.220.147.82:39876] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "adplhF2P8TxdbaN018JcGQAAAAM"]
[Sat Apr 11 23:15:17.889325 2026] [:error] [pid 42219:tid 42223] [client 20.220.147.82:39919] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "adplhQ-4IkVbTQx_J-2ijAAAAIA"]
[Sat Apr 11 23:15:19.281409 2026] [:error] [pid 42221:tid 42287] [client 20.220.147.82:39892] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "adplh02gt0pb_0-cc6mjogAAAEk"]
[Sat Apr 11 23:15:20.289664 2026] [:error] [pid 42220:tid 42275] [client 20.220.147.82:39772] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "adpliEz5c3Cs6a8B5Qua6wAAANg"]
[Sat Apr 11 23:15:23.506761 2026] [:error] [pid 52608:tid 52631] [client 20.220.147.82:39894] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "adpliyY5wH-BLt5QEKhv5QAAARQ"]
[Sat Apr 11 23:15:26.734047 2026] [:error] [pid 52608:tid 52631] [client 20.220.147.82:39891] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "adpljiY5wH-BLt5QEKhv7wAAARQ"]
[Sat Apr 11 23:15:27.323094 2026] [:error] [pid 42313:tid 42319] [client 20.220.147.82:39828] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "adplj12P8TxdbaN018JcJAAAAAM"]
[Sat Apr 11 23:15:28.635370 2026] [:error] [pid 42221:tid 42295] [client 20.220.147.82:39821] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wsd.php"] [unique_id "adplkE2gt0pb_0-cc6mjsgAAAFE"]
[Sat Apr 11 23:15:29.420332 2026] [:error] [pid 52608:tid 52631] [client 20.220.147.82:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Sat Apr 11 23:15:29.630823 2026] [:error] [pid 52608:tid 52620] [client 20.220.147.82:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/atx.php
[Sat Apr 11 23:15:29.840497 2026] [:error] [pid 52608:tid 52615] [client 20.220.147.82:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Sat Apr 11 23:15:30.049644 2026] [:error] [pid 52608:tid 52618] [client 20.220.147.82:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sat Apr 11 23:15:30.268485 2026] [:error] [pid 52608:tid 52626] [client 20.220.147.82:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Sat Apr 11 23:15:30.487810 2026] [:error] [pid 52608:tid 52614] [client 20.220.147.82:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 11 23:15:31.187954 2026] [:error] [pid 52608:tid 52626] [client 20.220.147.82:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Apr 11 23:15:31.398535 2026] [:error] [pid 52608:tid 52622] [client 20.220.147.82:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Apr 11 23:15:32.622608 2026] [:error] [pid 52608:tid 52622] [client 20.220.147.82:39873] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Apr 11 23:15:32.833932 2026] [:error] [pid 52608:tid 52635] [client 20.220.147.82:39873] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "adpllCY5wH-BLt5QEKhwGAAAARg"]
[Sat Apr 11 23:15:34.330329 2026] [:error] [pid 42219:tid 42247] [client 20.220.147.82:39875] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "adpllg-4IkVbTQx_J-2isgAAAJg"]
[Sat Apr 11 23:15:35.243064 2026] [:error] [pid 42221:tid 42286] [client 20.220.147.82:39909] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "adpll02gt0pb_0-cc6mjuQAAAEg"]
[Sat Apr 11 23:15:36.118128 2026] [:error] [pid 42313:tid 42334] [client 20.220.147.82:39830] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "adplmF2P8TxdbaN018JcTAAAABI"]
[Sat Apr 11 23:15:37.107327 2026] [:error] [pid 42313:tid 42323] [client 20.220.147.82:39904] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adplmV2P8TxdbaN018JcUwAAAAc"]
[Sat Apr 11 23:15:37.817581 2026] [:error] [pid 42219:tid 42243] [client 20.220.147.82:39823] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adplmQ-4IkVbTQx_J-2iwAAAAJQ"]
[Sat Apr 11 23:15:39.365760 2026] [:error] [pid 42313:tid 42323] [client 20.220.147.82:39870] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adplm12P8TxdbaN018JcYgAAAAc"]
[Sat Apr 11 23:15:40.856719 2026] [:error] [pid 42313:tid 42318] [client 20.220.147.82:39916] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adplnF2P8TxdbaN018JcagAAAAI"]
[Sat Apr 11 23:15:41.667435 2026] [:error] [pid 52608:tid 52619] [client 20.220.147.82:39829] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "adplnSY5wH-BLt5QEKhwMgAAAQg"]
[Sat Apr 11 23:15:43.929678 2026] [:error] [pid 52608:tid 52634] [client 20.220.147.82:39931] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "adplnyY5wH-BLt5QEKhwPAAAARc"]
[Sat Apr 11 23:15:44.945929 2026] [:error] [pid 52608:tid 52621] [client 20.220.147.82:39921] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "adploCY5wH-BLt5QEKhwRwAAAQo"]
[Sat Apr 11 23:15:46.070036 2026] [:error] [pid 52608:tid 52625] [client 20.220.147.82:39877] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "adploiY5wH-BLt5QEKhwTgAAAQ4"]
[Sat Apr 11 23:15:46.750562 2026] [:error] [pid 52608:tid 52626] [client 20.220.147.82:39817] [client 20.220.147.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adploiY5wH-BLt5QEKhwUwAAAQ8"]
[Sat Apr 11 23:15:47.799889 2026] [:error] [pid 52608:tid 52612] [client 20.220.147.82:39863] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "adployY5wH-BLt5QEKhwXQAAAQE"]
[Sat Apr 11 23:15:49.519968 2026] [:error] [pid 52608:tid 52635] [client 20.220.147.82:39691] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "adplpSY5wH-BLt5QEKhwXwAAARg"]
[Sat Apr 11 23:15:51.606008 2026] [:error] [pid 42220:tid 42272] [client 20.220.147.82:39866] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "adplp0z5c3Cs6a8B5QubAwAAANU"]
[Sat Apr 11 23:15:52.812975 2026] [:error] [pid 42221:tid 42295] [client 20.220.147.82:39889] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cong.php"] [unique_id "adplqE2gt0pb_0-cc6mjzAAAAFE"]
[Sat Apr 11 23:15:53.651803 2026] [:error] [pid 42221:tid 42285] [client 20.220.147.82:39898] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "adplqU2gt0pb_0-cc6mjzwAAAEc"]
[Sat Apr 11 23:15:54.653839 2026] [:error] [pid 42221:tid 42288] [client 20.220.147.82:39850] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "adplqk2gt0pb_0-cc6mj0wAAAEo"]
[Sat Apr 11 23:15:55.492945 2026] [:error] [pid 42313:tid 42321] [client 20.220.147.82:39897] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "adplq12P8TxdbaN018JcjAAAAAU"]
[Sat Apr 11 23:15:56.142329 2026] [:error] [pid 42221:tid 42299] [client 20.220.147.82:39816] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "adplrE2gt0pb_0-cc6mj2gAAAFU"]
[Sat Apr 11 23:15:56.759923 2026] [:error] [pid 42219:tid 42225] [client 20.220.147.82:39910] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "adplrA-4IkVbTQx_J-2i4wAAAII"]
[Sat Apr 11 23:15:58.439586 2026] [:error] [pid 52608:tid 52614] [client 20.220.147.82:39809] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "adplriY5wH-BLt5QEKhwbAAAAQM"]
[Sat Apr 11 23:15:59.841931 2026] [:error] [pid 52608:tid 52615] [client 20.220.147.82:39846] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "adplryY5wH-BLt5QEKhwcQAAAQQ"]
[Sat Apr 11 23:16:00.584679 2026] [:error] [pid 42219:tid 42245] [client 20.220.147.82:39745] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "adplsA-4IkVbTQx_J-2i8AAAAJY"]
[Sat Apr 11 23:16:01.975468 2026] [:error] [pid 42313:tid 42322] [client 20.220.147.82:39868] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "adplsV2P8TxdbaN018JcoAAAAAY"]
[Sat Apr 11 23:16:02.949861 2026] [:error] [pid 42313:tid 42330] [client 20.220.147.82:39813] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "adplsl2P8TxdbaN018JcqgAAAA4"]
[Sat Apr 11 23:16:04.102317 2026] [:error] [pid 42221:tid 42291] [client 20.220.147.82:39824] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "adpltE2gt0pb_0-cc6mj6wAAAE0"]
[Sat Apr 11 23:16:05.117602 2026] [:error] [pid 42221:tid 42284] [client 20.220.147.82:39934] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "adpltU2gt0pb_0-cc6mj8AAAAEY"]
[Sat Apr 11 23:16:05.700988 2026] [:error] [pid 42221:tid 42286] [client 20.220.147.82:39768] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "adpltU2gt0pb_0-cc6mj8wAAAEg"]
[Sat Apr 11 23:16:06.232470 2026] [:error] [pid 42220:tid 42274] [client 20.220.147.82:39912] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "adpltkz5c3Cs6a8B5QubGgAAANc"]
[Sat Apr 11 23:16:06.965308 2026] [:error] [pid 42313:tid 42327] [client 20.220.147.82:39932] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "adpltl2P8TxdbaN018JcygAAAAs"]
[Sat Apr 11 23:16:07.908890 2026] [:error] [pid 42220:tid 42270] [client 20.220.147.82:39935] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "adplt0z5c3Cs6a8B5QubHgAAANM"]
[Sat Apr 11 23:16:08.645425 2026] [:error] [pid 42313:tid 42316] [client 20.220.147.82:39815] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adpluF2P8TxdbaN018Jc2gAAAAA"]
[Sat Apr 11 23:16:09.476811 2026] [:error] [pid 52608:tid 52631] [client 20.220.147.82:39849] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adpluSY5wH-BLt5QEKhwsQAAARQ"]
[Sat Apr 11 23:16:10.176233 2026] [:error] [pid 52608:tid 52629] [client 20.220.147.82:39851] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adpluiY5wH-BLt5QEKhwtAAAARI"]
[Sat Apr 11 23:16:11.498815 2026] [:error] [pid 42313:tid 42339] [client 20.220.147.82:39825] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css.php"] [unique_id "adplu12P8TxdbaN018Jc5AAAABc"]
[Sat Apr 11 23:16:12.347054 2026] [:error] [pid 52608:tid 52624] [client 20.220.147.82:39774] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "adplvCY5wH-BLt5QEKhwugAAAQ0"]
[Sat Apr 11 23:16:13.380205 2026] [:error] [pid 42219:tid 42242] [client 20.220.147.82:39763] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "adplvQ-4IkVbTQx_J-2jKAAAAJM"]
[Sat Apr 11 23:16:14.434461 2026] [:error] [pid 42220:tid 42259] [client 20.220.147.82:39859] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "adplvkz5c3Cs6a8B5QubLwAAAMg"]
[Sat Apr 11 23:16:15.691104 2026] [:error] [pid 52608:tid 52630] [client 20.220.147.82:39827] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "adplvyY5wH-BLt5QEKhw3AAAARM"]
[Sat Apr 11 23:16:17.074594 2026] [:error] [pid 52608:tid 52612] [client 20.220.147.82:39858] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "adplwSY5wH-BLt5QEKhw5AAAAQE"]
[Sat Apr 11 23:16:18.564386 2026] [:error] [pid 52608:tid 52633] [client 20.220.147.82:39927] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "adplwiY5wH-BLt5QEKhw5gAAARY"]
[Sat Apr 11 23:16:19.488567 2026] [:error] [pid 42221:tid 42288] [client 20.220.147.82:39862] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "adplw02gt0pb_0-cc6mkAwAAAEo"]
[Sat Apr 11 23:16:20.188294 2026] [:error] [pid 42221:tid 42300] [client 20.220.147.82:39926] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "adplxE2gt0pb_0-cc6mkBgAAAFY"]
[Sat Apr 11 23:16:21.131319 2026] [:error] [pid 52608:tid 52617] [client 20.220.147.82:39793] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "adplxSY5wH-BLt5QEKhw7QAAAQY"]
[Sat Apr 11 23:16:21.841622 2026] [:error] [pid 52608:tid 52612] [client 20.220.147.82:39852] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "adplxSY5wH-BLt5QEKhw8QAAAQE"]
[Sat Apr 11 23:16:22.772858 2026] [:error] [pid 42220:tid 42251] [client 20.220.147.82:39929] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "adplxkz5c3Cs6a8B5QubQgAAAMA"]
[Sat Apr 11 23:16:23.867670 2026] [:error] [pid 42221:tid 42297] [client 20.220.147.82:39761] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "adplx02gt0pb_0-cc6mkDQAAAFM"]
[Sat Apr 11 23:16:25.350633 2026] [:error] [pid 42221:tid 42288] [client 20.220.147.82:39752] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adplyU2gt0pb_0-cc6mkDwAAAEo"]
[Sat Apr 11 23:16:26.850787 2026] [:error] [pid 42219:tid 42240] [client 20.220.147.82:39744] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adplyg-4IkVbTQx_J-2jSgAAAJE"]
[Sat Apr 11 23:16:29.979139 2026] [:error] [pid 42221:tid 42279] [client 20.220.147.82:39930] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adplzU2gt0pb_0-cc6mkHAAAAEE"]
[Sat Apr 11 23:16:31.539997 2026] [:error] [pid 42221:tid 42294] [client 20.220.147.82:39890] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "adplz02gt0pb_0-cc6mkIAAAAFA"]
[Sat Apr 11 23:16:32.829340 2026] [:error] [pid 42221:tid 42301] [client 20.220.147.82:39882] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 11 23:16:33.053625 2026] [:error] [pid 42221:tid 42291] [client 20.220.147.82:39882] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Apr 11 23:16:33.269699 2026] [:error] [pid 42221:tid 42283] [client 20.220.147.82:39882] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Apr 11 23:16:33.914796 2026] [:error] [pid 42221:tid 42285] [client 20.220.147.82:39882] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 11 23:16:34.124248 2026] [:error] [pid 42221:tid 42302] [client 20.220.147.82:39882] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Apr 11 23:16:34.333150 2026] [:error] [pid 42221:tid 42294] [client 20.220.147.82:39882] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Apr 11 23:16:35.723330 2026] [:error] [pid 42221:tid 42301] [client 20.220.147.82:39882] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Sat Apr 11 23:16:35.931410 2026] [:error] [pid 42221:tid 42299] [client 20.220.147.82:39882] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "adpl002gt0pb_0-cc6mkNgAAAFU"]
[Sat Apr 11 23:16:37.432079 2026] [:error] [pid 42220:tid 42261] [client 20.220.147.82:39842] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "adpl1Uz5c3Cs6a8B5QubVwAAAMo"]
[Sat Apr 11 23:16:38.177831 2026] [:error] [pid 42220:tid 42270] [client 20.220.147.82:39806] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "adpl1kz5c3Cs6a8B5QubXAAAANM"]
[Sat Apr 11 23:16:40.238850 2026] [:error] [pid 42313:tid 42333] [client 20.220.147.82:39901] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "adpl2F2P8TxdbaN018JdMgAAABE"]
[Sat Apr 11 23:16:41.699579 2026] [:error] [pid 42220:tid 42269] [client 20.220.147.82:39753] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "adpl2Uz5c3Cs6a8B5QubXwAAANI"]
[Sat Apr 11 23:16:43.608798 2026] [:error] [pid 42221:tid 42301] [client 20.220.147.82:39795] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "adpl202gt0pb_0-cc6mkQQAAAFc"]
[Sat Apr 11 23:16:44.915677 2026] [:error] [pid 42220:tid 42261] [client 20.220.147.82:39773] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "adpl3Ez5c3Cs6a8B5QubaAAAAMo"]
[Sat Apr 11 23:16:45.931561 2026] [:error] [pid 42219:tid 42240] [client 20.220.147.82:39831] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "adpl3Q-4IkVbTQx_J-2jbwAAAJE"]
[Sat Apr 11 23:16:47.003735 2026] [:error] [pid 52608:tid 52623] [client 20.220.147.82:39694] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "adpl3yY5wH-BLt5QEKhxHgAAAQw"]
[Sat Apr 11 23:16:48.261208 2026] [:error] [pid 52608:tid 52620] [client 20.220.147.82:39800] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "adpl4CY5wH-BLt5QEKhxHwAAAQk"]
[Sat Apr 11 23:16:48.940022 2026] [:error] [pid 42220:tid 42274] [client 20.220.147.82:39872] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "adpl4Ez5c3Cs6a8B5QubbgAAANc"]
[Sat Apr 11 23:16:49.603014 2026] [:error] [pid 42220:tid 42251] [client 20.220.147.82:39874] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "adpl4Uz5c3Cs6a8B5QubbwAAAMA"]
[Sat Apr 11 23:16:50.491762 2026] [:error] [pid 42220:tid 42269] [client 20.220.147.82:39820] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "adpl4kz5c3Cs6a8B5QubcAAAANI"]
[Sat Apr 11 23:16:51.681059 2026] [:error] [pid 42313:tid 42327] [client 20.220.147.82:39848] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "adpl412P8TxdbaN018JdOAAAAAs"]
[Sat Apr 11 23:16:52.206803 2026] [:error] [pid 42313:tid 42324] [client 20.220.147.82:39837] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "adpl5F2P8TxdbaN018JdOwAAAAg"]
[Sat Apr 11 23:16:52.687379 2026] [:error] [pid 42219:tid 42231] [client 20.220.147.82:39913] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "adpl5A-4IkVbTQx_J-2jfQAAAIg"]
[Sat Apr 11 23:16:53.239303 2026] [:error] [pid 52608:tid 52628] [client 20.220.147.82:39893] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adpl5SY5wH-BLt5QEKhxJgAAARE"]
[Sat Apr 11 23:16:53.816580 2026] [:error] [pid 42219:tid 42246] [client 20.220.147.82:39803] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adpl5Q-4IkVbTQx_J-2jggAAAJc"]
[Sat Apr 11 23:16:54.579895 2026] [:error] [pid 52608:tid 52611] [client 20.220.147.82:39758] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adpl5iY5wH-BLt5QEKhxKQAAAQA"]
[Sat Apr 11 23:16:55.578656 2026] [:error] [pid 42221:tid 42290] [client 20.220.147.82:39906] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "adpl502gt0pb_0-cc6mkXgAAAEw"]
[Sat Apr 11 23:16:56.529701 2026] [:error] [pid 52608:tid 52625] [client 20.220.147.82:39808] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "adpl6CY5wH-BLt5QEKhxLQAAAQ4"]
[Sat Apr 11 23:16:57.415254 2026] [:error] [pid 42313:tid 42326] [client 20.220.147.82:39680] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "adpl6V2P8TxdbaN018JdPQAAAAo"]
[Sat Apr 11 23:16:58.083072 2026] [:error] [pid 52608:tid 52619] [client 20.220.147.82:39853] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "adpl6iY5wH-BLt5QEKhxNgAAAQg"]
[Sat Apr 11 23:16:58.707253 2026] [:error] [pid 42220:tid 42272] [client 20.220.147.82:39845] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sx.php"] [unique_id "adpl6kz5c3Cs6a8B5QubeQAAANU"]
[Sat Apr 11 23:16:59.395755 2026] [:error] [pid 42313:tid 42318] [client 20.220.147.82:39769] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adpl612P8TxdbaN018JdPgAAAAI"]
[Sat Apr 11 23:16:59.893582 2026] [:error] [pid 42221:tid 42301] [client 20.220.147.82:39682] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adpl602gt0pb_0-cc6mkZwAAAFc"]
[Sat Apr 11 23:17:00.575790 2026] [:error] [pid 42221:tid 42286] [client 20.220.147.82:39789] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adpl7E2gt0pb_0-cc6mkagAAAEg"]
[Sat Apr 11 23:17:01.294638 2026] [:error] [pid 42313:tid 42340] [client 20.220.147.82:39750] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "adpl7V2P8TxdbaN018JdQgAAABg"]
[Sat Apr 11 23:17:01.998024 2026] [:error] [pid 52608:tid 52614] [client 20.220.147.82:39757] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "adpl7SY5wH-BLt5QEKhxPAAAAQM"]
[Sat Apr 11 23:17:02.821524 2026] [:error] [pid 42221:tid 42297] [client 20.220.147.82:39688] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "adpl7k2gt0pb_0-cc6mkcAAAAFM"]
[Sat Apr 11 23:17:04.056177 2026] [:error] [pid 52608:tid 52616] [client 20.220.147.82:39760] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "adpl8CY5wH-BLt5QEKhxRQAAAQU"]
[Sat Apr 11 23:17:05.533507 2026] [:error] [pid 42220:tid 42267] [client 20.220.147.82:39908] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "adpl8Uz5c3Cs6a8B5QubiAAAANA"]
[Sat Apr 11 23:17:05.982699 2026] [:error] [pid 52608:tid 52632] [client 20.220.147.82:39766] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "adpl8SY5wH-BLt5QEKhxSQAAARU"]
[Sat Apr 11 23:17:06.749262 2026] [:error] [pid 42313:tid 42337] [client 20.220.147.82:39784] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "adpl8l2P8TxdbaN018JdSgAAABU"]
[Sat Apr 11 23:17:07.833567 2026] [:error] [pid 42313:tid 42316] [client 20.220.147.82:39749] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "adpl812P8TxdbaN018JdTgAAAAA"]
[Sat Apr 11 23:17:08.486584 2026] [:error] [pid 42313:tid 42319] [client 20.220.147.82:39861] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "adpl9F2P8TxdbaN018JdVQAAAAM"]
[Sat Apr 11 23:17:09.145349 2026] [:error] [pid 42220:tid 42253] [client 20.220.147.82:39779] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp.php"] [unique_id "adpl9Uz5c3Cs6a8B5QubjQAAAMI"]
[Sat Apr 11 23:17:09.691026 2026] [:error] [pid 42219:tid 42244] [client 20.220.147.82:39767] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp.php"] [unique_id "adpl9Q-4IkVbTQx_J-2jjQAAAJU"]
[Sat Apr 11 23:17:10.129963 2026] [:error] [pid 42313:tid 42337] [client 20.220.147.82:39869] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp.php"] [unique_id "adpl9l2P8TxdbaN018JdWAAAABU"]
[Sat Apr 11 23:17:11.266062 2026] [:error] [pid 52608:tid 52613] [client 20.220.147.82:39844] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp.php"] [unique_id "adpl9yY5wH-BLt5QEKhxUgAAAQI"]
[Sat Apr 11 23:17:11.966451 2026] [:error] [pid 52608:tid 52617] [client 20.220.147.82:39838] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "adpl9yY5wH-BLt5QEKhxVQAAAQY"]
[Sat Apr 11 23:17:12.630856 2026] [:error] [pid 42220:tid 42254] [client 20.220.147.82:39698] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "adpl-Ez5c3Cs6a8B5QubkQAAAMM"]
[Sat Apr 11 23:17:13.462309 2026] [:error] [pid 42220:tid 42269] [client 20.220.147.82:39781] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "adpl-Uz5c3Cs6a8B5QublAAAANI"]
[Sat Apr 11 23:17:14.118622 2026] [:error] [pid 42313:tid 42338] [client 20.220.147.82:39701] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "adpl-l2P8TxdbaN018JdXAAAABY"]
[Sat Apr 11 23:17:14.833915 2026] [:error] [pid 42220:tid 42252] [client 20.220.147.82:39799] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/index.php"] [unique_id "adpl-kz5c3Cs6a8B5QublgAAAME"]
[Sat Apr 11 23:17:15.553560 2026] [:error] [pid 42219:tid 42223] [client 20.220.147.82:39686] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/index.php"] [unique_id "adpl-w-4IkVbTQx_J-2jmwAAAIA"]
[Sat Apr 11 23:17:16.580835 2026] [:error] [pid 42313:tid 42319] [client 20.220.147.82:39777] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/index.php"] [unique_id "adpl_F2P8TxdbaN018JdYQAAAAM"]
[Sat Apr 11 23:17:17.327931 2026] [:error] [pid 42313:tid 42339] [client 20.220.147.82:39847] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/index.php"] [unique_id "adpl_V2P8TxdbaN018JdYgAAABc"]
[Sat Apr 11 23:17:17.988659 2026] [:error] [pid 42219:tid 42237] [client 20.220.147.82:39725] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adpl_Q-4IkVbTQx_J-2joAAAAI4"]
[Sat Apr 11 23:17:18.742203 2026] [:error] [pid 42313:tid 42328] [client 20.220.147.82:39624] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adpl_l2P8TxdbaN018JdawAAAAw"]
[Sat Apr 11 23:17:19.450576 2026] [:error] [pid 52608:tid 52619] [client 20.220.147.82:39727] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adpl_yY5wH-BLt5QEKhxWQAAAQg"]
[Sat Apr 11 23:17:20.689193 2026] [:error] [pid 42313:tid 42327] [client 20.220.147.82:39782] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/plugins.php"] [unique_id "adpmAF2P8TxdbaN018JddQAAAAs"]
[Sat Apr 11 23:17:21.660436 2026] [:error] [pid 42313:tid 42332] [client 20.220.147.82:39639] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "adpmAV2P8TxdbaN018JdewAAABA"]
[Sat Apr 11 23:17:22.340998 2026] [:error] [pid 42221:tid 42279] [client 20.220.147.82:39827] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "adpmAk2gt0pb_0-cc6mkhgAAAEE"]
[Sat Apr 11 23:17:22.983346 2026] [:error] [pid 42313:tid 42322] [client 20.220.147.82:39854] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "adpmAl2P8TxdbaN018JdhAAAAAY"]
[Sat Apr 11 23:17:23.639157 2026] [:error] [pid 42221:tid 42295] [client 20.220.147.82:39896] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "adpmA02gt0pb_0-cc6mkigAAAFE"]
[Sat Apr 11 23:17:24.575591 2026] [:error] [pid 52608:tid 52612] [client 20.220.147.82:39687] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "adpmBCY5wH-BLt5QEKhxaQAAAQE"]
[Sat Apr 11 23:17:25.442472 2026] [:error] [pid 52608:tid 52615] [client 20.220.147.82:39709] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "adpmBSY5wH-BLt5QEKhxcgAAAQQ"]
[Sat Apr 11 23:17:26.121566 2026] [:error] [pid 42219:tid 42228] [client 20.220.147.82:39801] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "adpmBg-4IkVbTQx_J-2jzgAAAIU"]
[Sat Apr 11 23:17:26.833692 2026] [:error] [pid 52608:tid 52613] [client 20.220.147.82:39699] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gmo.php"] [unique_id "adpmBiY5wH-BLt5QEKhxeAAAAQI"]
[Sat Apr 11 23:17:29.513561 2026] [:error] [pid 42219:tid 42246] [client 20.220.147.82:39751] [client 20.220.147.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adpmCQ-4IkVbTQx_J-2j1gAAAJc"]
[Sat Apr 11 23:17:30.040056 2026] [:error] [pid 52608:tid 52612] [client 20.220.147.82:39697] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "adpmCiY5wH-BLt5QEKhxgQAAAQE"]
[Sat Apr 11 23:17:30.810912 2026] [:error] [pid 52608:tid 52611] [client 20.220.147.82:39755] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "adpmCiY5wH-BLt5QEKhxgwAAAQA"]
[Sat Apr 11 23:17:31.852988 2026] [:error] [pid 42220:tid 42260] [client 20.220.147.82:39802] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "adpmC0z5c3Cs6a8B5QubxQAAAMk"]
[Sat Apr 11 23:17:32.903795 2026] [:error] [pid 42313:tid 42320] [client 20.220.147.82:39841] [client 20.220.147.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "adpmDF2P8TxdbaN018JdpAAAAAQ"]
[Sat Apr 11 23:17:33.570472 2026] [:error] [pid 42220:tid 42272] [client 20.220.147.82:39689] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "adpmDUz5c3Cs6a8B5QubyAAAANU"]
[Sat Apr 11 23:17:34.700208 2026] [:error] [pid 42313:tid 42330] [client 20.220.147.82:39860] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "adpmDl2P8TxdbaN018JdqgAAAA4"]
[Sat Apr 11 23:17:36.911716 2026] [:error] [pid 42313:tid 42320] [client 20.220.147.82:39775] [client 20.220.147.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adpmEF2P8TxdbaN018JdswAAAAQ"]
[Sat Apr 11 23:17:39.503428 2026] [:error] [pid 52608:tid 52631] [client 20.220.147.82:39857] [client 20.220.147.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "adpmEyY5wH-BLt5QEKhxvgAAARQ"]
[Sat Apr 11 23:17:40.386661 2026] [:error] [pid 42313:tid 42322] [client 20.220.147.82:39923] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Sat Apr 11 23:17:41.252411 2026] [:error] [pid 42313:tid 42316] [client 20.220.147.82:39923] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Apr 11 23:17:41.685465 2026] [:error] [pid 42313:tid 42327] [client 20.220.147.82:39923] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Sat Apr 11 23:17:41.916458 2026] [:error] [pid 42313:tid 42330] [client 20.220.147.82:39923] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "adpmFV2P8TxdbaN018JdyQAAAA4"]
[Sat Apr 11 23:17:42.428701 2026] [:error] [pid 52608:tid 52621] [client 20.220.147.82:39790] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "adpmFiY5wH-BLt5QEKhx2QAAAQo"]
[Sat Apr 11 23:17:43.283590 2026] [:error] [pid 52608:tid 52630] [client 20.220.147.82:39780] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "adpmFyY5wH-BLt5QEKhx5QAAARM"]
[Sat Apr 11 23:17:43.758140 2026] [:error] [pid 42221:tid 42284] [client 20.220.147.82:39786] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "adpmF02gt0pb_0-cc6mkxwAAAEY"]
[Sat Apr 11 23:17:44.225894 2026] [:error] [pid 42221:tid 42289] [client 20.220.147.82:39787] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "adpmGE2gt0pb_0-cc6mkygAAAEs"]
[Sat Apr 11 23:17:45.109479 2026] [:error] [pid 42219:tid 42246] [client 20.220.147.82:39721] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "adpmGQ-4IkVbTQx_J-2j4gAAAJc"]
[Sat Apr 11 23:17:46.361399 2026] [:error] [pid 42313:tid 42324] [client 20.220.147.82:39796] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "adpmGl2P8TxdbaN018JdzQAAAAg"]
[Sat Apr 11 23:17:47.590314 2026] [:error] [pid 42219:tid 42228] [client 20.220.147.82:39695] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "adpmGw-4IkVbTQx_J-2j5QAAAIU"]
[Sat Apr 11 23:17:48.474947 2026] [:error] [pid 42219:tid 42237] [client 20.220.147.82:39778] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "adpmHA-4IkVbTQx_J-2j6AAAAI4"]
[Sat Apr 11 23:17:49.402155 2026] [:error] [pid 42219:tid 42231] [client 20.220.147.82:39762] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "adpmHQ-4IkVbTQx_J-2j6gAAAIg"]
[Sat Apr 11 23:17:50.220749 2026] [:error] [pid 42219:tid 42233] [client 20.220.147.82:39865] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "adpmHg-4IkVbTQx_J-2j7wAAAIo"]
[Sat Apr 11 23:17:50.733341 2026] [:error] [pid 52608:tid 52615] [client 20.220.147.82:39705] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "adpmHiY5wH-BLt5QEKhyJQAAAQQ"]
[Sat Apr 11 23:17:51.695145 2026] [:error] [pid 42313:tid 42319] [client 20.220.147.82:39776] [client 20.220.147.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adpmH12P8TxdbaN018Jd0wAAAAM"]
[Sat Apr 11 23:17:52.301164 2026] [:error] [pid 42220:tid 42251] [client 20.220.147.82:39759] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "adpmIEz5c3Cs6a8B5Qub0wAAAMA"]
[Sat Apr 11 23:17:53.211497 2026] [:error] [pid 42219:tid 42228] [client 20.220.147.82:39734] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "adpmIQ-4IkVbTQx_J-2j9QAAAIU"]
[Sat Apr 11 23:17:53.985962 2026] [:error] [pid 42221:tid 42294] [client 20.220.147.82:39731] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "adpmIU2gt0pb_0-cc6mk2AAAAFA"]
[Sat Apr 11 23:17:54.632904 2026] [:error] [pid 42221:tid 42297] [client 20.220.147.82:39722] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "adpmIk2gt0pb_0-cc6mk2wAAAFM"]
[Sat Apr 11 23:17:55.208986 2026] [:error] [pid 42221:tid 42280] [client 20.220.147.82:39660] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adpmI02gt0pb_0-cc6mk3gAAAEI"]
[Sat Apr 11 23:17:56.103968 2026] [:error] [pid 42220:tid 42263] [client 20.220.147.82:39684] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adpmJEz5c3Cs6a8B5Qub2QAAAMw"]
[Sat Apr 11 23:17:56.826133 2026] [:error] [pid 42219:tid 42247] [client 20.220.147.82:39647] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adpmJA-4IkVbTQx_J-2j-QAAAJg"]
[Sat Apr 11 23:17:57.523688 2026] [:error] [pid 42220:tid 42256] [client 20.220.147.82:39867] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adpmJUz5c3Cs6a8B5Qub2wAAAMU"]
[Sat Apr 11 23:17:58.152858 2026] [:error] [pid 42219:tid 42225] [client 20.220.147.82:39710] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/admin.php"] [unique_id "adpmJg-4IkVbTQx_J-2j-wAAAII"]
[Sat Apr 11 23:17:58.765375 2026] [:error] [pid 42220:tid 42273] [client 20.220.147.82:39835] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/admin.php"] [unique_id "adpmJkz5c3Cs6a8B5Qub3QAAANY"]
[Sat Apr 11 23:17:59.913188 2026] [:error] [pid 42313:tid 42335] [client 20.220.147.82:39732] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/admin.php"] [unique_id "adpmJ12P8TxdbaN018Jd2wAAABM"]
[Sat Apr 11 23:18:01.241026 2026] [:error] [pid 42220:tid 42264] [client 20.220.147.82:39726] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/admin.php"] [unique_id "adpmKUz5c3Cs6a8B5Qub4QAAAM0"]
[Sat Apr 11 23:18:02.069316 2026] [:error] [pid 42220:tid 42268] [client 20.220.147.82:39629] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adpmKkz5c3Cs6a8B5Qub4wAAANE"]
[Sat Apr 11 23:18:02.991271 2026] [:error] [pid 42220:tid 42257] [client 20.220.147.82:39788] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adpmKkz5c3Cs6a8B5Qub5gAAAMY"]
[Sat Apr 11 23:18:04.601415 2026] [:error] [pid 42313:tid 42325] [client 20.220.147.82:39794] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adpmLF2P8TxdbaN018Jd5QAAAAk"]
[Sat Apr 11 23:18:06.909847 2026] [:error] [pid 52608:tid 52626] [client 20.220.147.82:39900] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "adpmLiY5wH-BLt5QEKhykwAAAQ8"]
[Sat Apr 11 23:18:08.407800 2026] [:error] [pid 42221:tid 42282] [client 20.220.147.82:39856] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "adpmME2gt0pb_0-cc6mk7AAAAEQ"]
[Sat Apr 11 23:18:09.558430 2026] [:error] [pid 42219:tid 42234] [client 20.220.147.82:39714] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "adpmMQ-4IkVbTQx_J-2kDwAAAIs"]
[Sat Apr 11 23:18:10.374370 2026] [:error] [pid 42313:tid 42337] [client 20.220.147.82:39651] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "adpmMl2P8TxdbaN018Jd_gAAABU"]
[Sat Apr 11 23:18:11.416730 2026] [:error] [pid 42220:tid 42267] [client 20.220.147.82:39765] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "adpmM0z5c3Cs6a8B5Qub8gAAANA"]
[Sat Apr 11 23:18:12.332327 2026] [:error] [pid 42313:tid 42319] [client 20.220.147.82:39792] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "adpmNF2P8TxdbaN018JeCQAAAAM"]
[Sat Apr 11 23:18:12.985522 2026] [:error] [pid 52608:tid 52615] [client 20.220.147.82:39797] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "adpmNCY5wH-BLt5QEKhyqgAAAQQ"]
[Sat Apr 11 23:18:13.446958 2026] [:error] [pid 42221:tid 42281] [client 20.220.147.82:39746] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "adpmNU2gt0pb_0-cc6mk-gAAAEM"]
[Sat Apr 11 23:18:13.905785 2026] [:error] [pid 42221:tid 42302] [client 20.220.147.82:39683] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/index.php"] [unique_id "adpmNU2gt0pb_0-cc6mk-wAAAFg"]
[Sat Apr 11 23:18:14.462584 2026] [:error] [pid 42313:tid 42335] [client 20.220.147.82:39653] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/log.php"] [unique_id "adpmNl2P8TxdbaN018JeGAAAABM"]
[Sat Apr 11 23:18:15.048134 2026] [:error] [pid 42313:tid 42330] [client 20.220.147.82:39833] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/log.php"] [unique_id "adpmN12P8TxdbaN018JeHQAAAA4"]
[Sat Apr 11 23:18:15.892225 2026] [:error] [pid 42220:tid 42260] [client 20.220.147.82:39756] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/log.php"] [unique_id "adpmN0z5c3Cs6a8B5Qub9wAAAMk"]
[Sat Apr 11 23:18:16.757259 2026] [:error] [pid 52608:tid 52629] [client 20.220.147.82:39716] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/log.php"] [unique_id "adpmOCY5wH-BLt5QEKhyuAAAARI"]
[Sat Apr 11 23:18:17.912842 2026] [:error] [pid 42313:tid 42338] [client 20.220.147.82:39707] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "adpmOV2P8TxdbaN018JeLwAAABY"]
[Sat Apr 11 23:18:18.910361 2026] [:error] [pid 42220:tid 42268] [client 20.220.147.82:39703] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "adpmOkz5c3Cs6a8B5QucAAAAANE"]
[Sat Apr 11 23:18:19.895952 2026] [:error] [pid 42220:tid 42263] [client 20.220.147.82:39656] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "adpmO0z5c3Cs6a8B5QucAwAAAMw"]
[Sat Apr 11 23:18:21.486885 2026] [:error] [pid 42220:tid 42254] [client 20.220.147.82:39648] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "adpmPUz5c3Cs6a8B5QucBQAAAMM"]
[Sat Apr 11 23:18:22.432686 2026] [:error] [pid 52608:tid 52627] [client 20.220.147.82:39737] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "adpmPiY5wH-BLt5QEKhyvAAAARA"]
[Sat Apr 11 23:18:23.356709 2026] [:error] [pid 42313:tid 42321] [client 20.220.147.82:39627] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "adpmP12P8TxdbaN018JeUQAAAAU"]
[Sat Apr 11 23:18:24.295347 2026] [:error] [pid 52608:tid 52623] [client 20.220.147.82:39692] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "adpmQCY5wH-BLt5QEKhywgAAAQw"]
[Sat Apr 11 23:18:26.796806 2026] [:error] [pid 42221:tid 42299] [client 20.220.147.82:39783] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "adpmQk2gt0pb_0-cc6mlEgAAAFU"]
[Sat Apr 11 23:18:30.264586 2026] [:error] [pid 42220:tid 42260] [client 20.220.147.82:39864] [client 20.220.147.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adpmRkz5c3Cs6a8B5QucFgAAAMk"]
[Sat Apr 11 23:18:32.376646 2026] [:error] [pid 42313:tid 42335] [client 20.220.147.82:39914] [client 20.220.147.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "adpmSF2P8TxdbaN018JecAAAABM"]
[Sat Apr 11 23:18:34.413882 2026] [:error] [pid 52608:tid 52614] [client 20.220.147.82:39696] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "adpmSiY5wH-BLt5QEKhy1wAAAQM"]
[Sat Apr 11 23:18:35.574372 2026] [:error] [pid 52608:tid 52634] [client 20.220.147.82:39855] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "adpmSyY5wH-BLt5QEKhy4AAAARc"]
[Sat Apr 11 23:18:37.315755 2026] [:error] [pid 42219:tid 42232] [client 20.220.147.82:39668] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "adpmTQ-4IkVbTQx_J-2kJgAAAIk"]
[Sat Apr 11 23:18:39.886416 2026] [:error] [pid 42313:tid 42320] [client 20.220.147.82:39804] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lock360.php"] [unique_id "adpmT12P8TxdbaN018JegAAAAAQ"]
[Sat Apr 11 23:18:41.175680 2026] [:error] [pid 52608:tid 52628] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 11 23:18:41.880424 2026] [:error] [pid 52608:tid 52624] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o1.php
[Sat Apr 11 23:18:42.088512 2026] [:error] [pid 52608:tid 52632] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/juuuu.php
[Sat Apr 11 23:18:42.303817 2026] [:error] [pid 52608:tid 52615] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Sat Apr 11 23:18:42.512636 2026] [:error] [pid 52608:tid 52634] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Sat Apr 11 23:18:42.741191 2026] [:error] [pid 52608:tid 52626] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/we2.php
[Sat Apr 11 23:18:42.961544 2026] [:error] [pid 52608:tid 52621] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/04.php
[Sat Apr 11 23:18:43.170263 2026] [:error] [pid 52608:tid 52622] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Sat Apr 11 23:18:43.586040 2026] [:error] [pid 52608:tid 52627] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/520.php
[Sat Apr 11 23:18:43.799414 2026] [:error] [pid 52608:tid 52629] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Sat Apr 11 23:18:44.022194 2026] [:error] [pid 52608:tid 52611] [client 20.220.147.82:39785] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Apr 11 23:18:44.285287 2026] [:error] [pid 52608:tid 52632] [client 20.220.147.82:39785] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xx.php"] [unique_id "adpmVCY5wH-BLt5QEKhzEAAAARU"]
[Sat Apr 11 23:18:45.447832 2026] [:error] [pid 42313:tid 42335] [client 20.220.147.82:39654] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xx.php"] [unique_id "adpmVV2P8TxdbaN018JeiwAAABM"]
[Sat Apr 11 23:18:46.360000 2026] [:error] [pid 42313:tid 42317] [client 20.220.147.82:39818] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xx.php"] [unique_id "adpmVl2P8TxdbaN018JejwAAAAE"]
[Sat Apr 11 23:18:46.953437 2026] [:error] [pid 42221:tid 42282] [client 20.220.147.82:39888] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xx.php"] [unique_id "adpmVk2gt0pb_0-cc6mlLwAAAEQ"]
[Sat Apr 11 23:18:47.627808 2026] [:error] [pid 52608:tid 52611] [client 20.220.147.82:39704] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass4.php"] [unique_id "adpmVyY5wH-BLt5QEKhzGAAAAQA"]
[Sat Apr 11 23:18:48.695923 2026] [:error] [pid 42313:tid 42338] [client 20.220.147.82:39659] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass4.php"] [unique_id "adpmWF2P8TxdbaN018JelAAAABY"]
[Sat Apr 11 23:18:49.378073 2026] [:error] [pid 42219:tid 42235] [client 20.220.147.82:39840] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass4.php"] [unique_id "adpmWQ-4IkVbTQx_J-2kRwAAAIw"]
[Sat Apr 11 23:18:49.956611 2026] [:error] [pid 42313:tid 42328] [client 20.220.147.82:39655] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass4.php"] [unique_id "adpmWV2P8TxdbaN018JemQAAAAw"]
[Sat Apr 11 23:18:51.179065 2026] [:error] [pid 42219:tid 42223] [client 20.220.147.82:39700] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2clas.php"] [unique_id "adpmWw-4IkVbTQx_J-2kSgAAAIA"]
[Sat Apr 11 23:18:52.408392 2026] [:error] [pid 42219:tid 42244] [client 20.220.147.82:39843] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2clas.php"] [unique_id "adpmXA-4IkVbTQx_J-2kUwAAAJU"]
[Sat Apr 11 23:18:53.850602 2026] [:error] [pid 42313:tid 42323] [client 20.220.147.82:39620] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2clas.php"] [unique_id "adpmXV2P8TxdbaN018JeoQAAAAc"]
[Sat Apr 11 23:18:55.609849 2026] [:error] [pid 42313:tid 42317] [client 20.220.147.82:39807] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2clas.php"] [unique_id "adpmX12P8TxdbaN018JeqQAAAAE"]
[Sat Apr 11 23:18:56.996122 2026] [:error] [pid 42313:tid 42333] [client 20.220.147.82:39911] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ave.php"] [unique_id "adpmYF2P8TxdbaN018JesQAAABE"]
[Sat Apr 11 23:18:58.591260 2026] [:error] [pid 42219:tid 42247] [client 20.220.147.82:39871] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ave.php"] [unique_id "adpmYg-4IkVbTQx_J-2kXgAAAJg"]
[Sat Apr 11 23:18:59.668732 2026] [:error] [pid 52608:tid 52623] [client 20.220.147.82:39829] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ave.php"] [unique_id "adpmYyY5wH-BLt5QEKhzNgAAAQw"]
[Sat Apr 11 23:19:00.570904 2026] [:error] [pid 42313:tid 42336] [client 20.220.147.82:39764] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ave.php"] [unique_id "adpmZF2P8TxdbaN018JevAAAABQ"]
[Sat Apr 11 23:19:02.149612 2026] [:error] [pid 42221:tid 42281] [client 20.220.147.82:39922] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wrt.php"] [unique_id "adpmZk2gt0pb_0-cc6mlOAAAAEM"]
[Sat Apr 11 23:19:02.808557 2026] [:error] [pid 42219:tid 42231] [client 20.220.147.82:39798] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wrt.php"] [unique_id "adpmZg-4IkVbTQx_J-2kZwAAAIg"]
[Sat Apr 11 23:19:03.750378 2026] [:error] [pid 52608:tid 52630] [client 20.220.147.82:39667] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wrt.php"] [unique_id "adpmZyY5wH-BLt5QEKhzRgAAARM"]
[Sat Apr 11 23:19:04.997885 2026] [:error] [pid 42313:tid 42338] [client 20.220.147.82:39740] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wrt.php"] [unique_id "adpmaF2P8TxdbaN018JewwAAABY"]
[Sat Apr 11 23:19:06.413563 2026] [:error] [pid 42221:tid 42280] [client 20.220.147.82:39810] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bibil.php"] [unique_id "adpmak2gt0pb_0-cc6mlPgAAAEI"]
[Sat Apr 11 23:19:09.141718 2026] [:error] [pid 42220:tid 42266] [client 20.220.147.82:39826] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bibil.php"] [unique_id "adpmbUz5c3Cs6a8B5QucKwAAAM8"]
[Sat Apr 11 23:19:10.566479 2026] [:error] [pid 42313:tid 42318] [client 20.220.147.82:39918] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bibil.php"] [unique_id "adpmbl2P8TxdbaN018JezwAAAAI"]
[Sat Apr 11 23:19:12.585774 2026] [:error] [pid 42221:tid 42286] [client 20.220.147.82:39925] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bibil.php"] [unique_id "adpmcE2gt0pb_0-cc6mlSQAAAEg"]
[Sat Apr 11 23:19:13.648501 2026] [:error] [pid 52608:tid 52634] [client 20.220.147.82:39738] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "adpmcSY5wH-BLt5QEKhzVgAAARc"]
[Sat Apr 11 23:19:14.463913 2026] [:error] [pid 52608:tid 52617] [client 20.220.147.82:39712] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "adpmciY5wH-BLt5QEKhzXwAAAQY"]
[Sat Apr 11 23:19:15.317206 2026] [:error] [pid 42220:tid 42264] [client 20.220.147.82:39814] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "adpmc0z5c3Cs6a8B5QucNAAAAM0"]
[Sat Apr 11 23:19:16.119229 2026] [:error] [pid 42220:tid 42263] [client 20.220.147.82:39819] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "adpmdEz5c3Cs6a8B5QucNQAAAMw"]
[Sat Apr 11 23:19:16.737839 2026] [:error] [pid 52608:tid 52620] [client 20.220.147.82:39879] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/files.php"] [unique_id "adpmdCY5wH-BLt5QEKhzZQAAAQk"]
[Sat Apr 11 23:19:17.976507 2026] [:error] [pid 52608:tid 52623] [client 20.220.147.82:39811] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/files.php"] [unique_id "adpmdSY5wH-BLt5QEKhzawAAAQw"]
[Sat Apr 11 23:19:19.719762 2026] [:error] [pid 42313:tid 42328] [client 20.220.147.82:39733] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/files.php"] [unique_id "adpmd12P8TxdbaN018Je4gAAAAw"]
[Sat Apr 11 23:19:20.861932 2026] [:error] [pid 52608:tid 52618] [client 20.220.147.82:39907] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/files.php"] [unique_id "adpmeCY5wH-BLt5QEKhzfQAAAQc"]
[Sat Apr 11 23:19:21.866810 2026] [:error] [pid 52608:tid 52619] [client 20.220.147.82:39718] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "adpmeSY5wH-BLt5QEKhzgQAAAQg"]
[Sat Apr 11 23:19:22.400110 2026] [:error] [pid 42219:tid 42230] [client 20.220.147.82:39634] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "adpmeg-4IkVbTQx_J-2kgQAAAIc"]
[Sat Apr 11 23:19:22.990514 2026] [:error] [pid 52608:tid 52631] [client 20.220.147.82:39920] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "adpmeiY5wH-BLt5QEKhzhQAAARQ"]
[Sat Apr 11 23:19:23.672656 2026] [:error] [pid 52608:tid 52618] [client 20.220.147.82:39902] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file7.php"] [unique_id "adpmeyY5wH-BLt5QEKhzjgAAAQc"]
[Sat Apr 11 23:19:24.414347 2026] [:error] [pid 42219:tid 42242] [client 20.220.147.82:39728] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "adpmfA-4IkVbTQx_J-2kiAAAAJM"]
[Sat Apr 11 23:19:25.516097 2026] [:error] [pid 52608:tid 52615] [client 20.220.147.82:39928] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "adpmfSY5wH-BLt5QEKhzlAAAAQQ"]
[Sat Apr 11 23:19:26.452668 2026] [:error] [pid 52608:tid 52628] [client 20.220.147.82:39881] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "adpmfiY5wH-BLt5QEKhzmQAAARE"]
[Sat Apr 11 23:19:27.326001 2026] [:error] [pid 42221:tid 42301] [client 20.220.147.82:39747] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "adpmf02gt0pb_0-cc6mlUgAAAFc"]
[Sat Apr 11 23:19:28.080066 2026] [:error] [pid 42219:tid 42247] [client 20.220.147.82:39650] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "adpmgA-4IkVbTQx_J-2kkgAAAJg"]
[Sat Apr 11 23:19:29.232297 2026] [:error] [pid 42313:tid 42336] [client 20.220.147.82:39642] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "adpmgV2P8TxdbaN018JfAAAAABQ"]
[Sat Apr 11 23:19:36.545848 2026] [:error] [pid 42313:tid 42322] [client 20.220.147.82:39887] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "adpmiF2P8TxdbaN018JfEAAAAAY"]
[Sat Apr 11 23:20:25.867821 2026] [:error] [pid 42313:tid 42319] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Sat Apr 11 23:20:26.111355 2026] [:error] [pid 42313:tid 42318] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Apr 11 23:20:26.330970 2026] [:error] [pid 42313:tid 42317] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Sat Apr 11 23:20:26.562490 2026] [:error] [pid 42313:tid 42334] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Sat Apr 11 23:20:26.816460 2026] [:error] [pid 42313:tid 42337] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Sat Apr 11 23:20:27.046734 2026] [:error] [pid 42313:tid 42331] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Sat Apr 11 23:20:27.267049 2026] [:error] [pid 42313:tid 42339] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Sat Apr 11 23:20:27.492748 2026] [:error] [pid 42313:tid 42328] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Sat Apr 11 23:20:27.745350 2026] [:error] [pid 42313:tid 42336] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Sat Apr 11 23:20:27.966972 2026] [:error] [pid 42313:tid 42333] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Sat Apr 11 23:20:28.206326 2026] [:error] [pid 42313:tid 42329] [client 20.220.147.82:39813] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Sat Apr 11 23:20:28.434968 2026] [:error] [pid 42313:tid 42326] [client 20.220.147.82:39813] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pop.php"] [unique_id "adpmvF2P8TxdbaN018JffAAAAAo"]
[Sat Apr 11 23:20:51.947563 2026] [:error] [pid 52608:tid 52625] [client 20.220.147.82:39774] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "adpm0yY5wH-BLt5QEKh0mAAAAQ4"]
[Sat Apr 11 23:20:58.794599 2026] [:error] [pid 52608:tid 52615] [client 20.220.147.82:39836] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "adpm2iY5wH-BLt5QEKh0sQAAAQQ"]
[Sat Apr 11 23:21:04.475899 2026] [:error] [pid 42219:tid 42242] [client 20.220.147.82:39874] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xaz.php"] [unique_id "adpm4A-4IkVbTQx_J-2lLgAAAJM"]
[Sat Apr 11 23:21:15.203400 2026] [:error] [pid 42221:tid 42285] [client 20.220.147.82:39870] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xaz.php"] [unique_id "adpm602gt0pb_0-cc6ml4QAAAEc"]
[Sat Apr 11 23:21:39.186272 2026] [:error] [pid 42219:tid 42236] [client 20.220.147.82:39904] File does not exist: /usr/local/apache/htdocs/suspended-page/up4.php
[Sat Apr 11 23:21:39.405373 2026] [:error] [pid 42219:tid 42244] [client 20.220.147.82:39904] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Sat Apr 11 23:21:39.655209 2026] [:error] [pid 42219:tid 42241] [client 20.220.147.82:39904] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sat Apr 11 23:21:39.909795 2026] [:error] [pid 42219:tid 42226] [client 20.220.147.82:39904] File does not exist: /usr/local/apache/htdocs/suspended-page/wtz.php
[Sat Apr 11 23:22:36.157261 2026] [:error] [pid 42221:tid 42301] [client 20.220.147.82:39817] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Sat Apr 11 23:22:36.394982 2026] [:error] [pid 42221:tid 42296] [client 20.220.147.82:39817] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sat Apr 11 23:22:36.634206 2026] [:error] [pid 42221:tid 42287] [client 20.220.147.82:39817] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Sat Apr 11 23:22:36.844312 2026] [:error] [pid 42221:tid 42284] [client 20.220.147.82:39817] File does not exist: /usr/local/apache/htdocs/suspended-page/plugins.php
[Sat Apr 11 23:22:37.064967 2026] [:error] [pid 42221:tid 42289] [client 20.220.147.82:39817] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sat Apr 11 23:22:37.297400 2026] [:error] [pid 42221:tid 42293] [client 20.220.147.82:39817] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 11 23:22:37.525798 2026] [:error] [pid 42221:tid 42297] [client 20.220.147.82:39817] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Sat Apr 11 23:22:41.281012 2026] [:error] [pid 42221:tid 42281] [client 20.220.147.82:39817] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "adpnQU2gt0pb_0-cc6mmUAAAAEM"]
[Sat Apr 11 23:22:47.938297 2026] [:error] [pid 52608:tid 52611] [client 20.220.147.82:39886] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "adpnRyY5wH-BLt5QEKh2WwAAAQA"]
[Sat Apr 11 23:22:50.160054 2026] [:error] [pid 52608:tid 52611] [client 20.220.147.82:39816] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "adpnSiY5wH-BLt5QEKh2aQAAAQA"]
[Sat Apr 11 23:22:51.817798 2026] [:error] [pid 52608:tid 52617] [client 20.220.147.82:39905] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "adpnSyY5wH-BLt5QEKh2bgAAAQY"]
[Sat Apr 11 23:22:52.762447 2026] [:error] [pid 52608:tid 52616] [client 20.220.147.82:39914] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sites.php"] [unique_id "adpnTCY5wH-BLt5QEKh2dQAAAQU"]
[Sat Apr 11 23:22:54.008951 2026] [:error] [pid 42219:tid 42233] [client 20.220.147.82:39897] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sites.php"] [unique_id "adpnTg-4IkVbTQx_J-2mGQAAAIo"]
[Sat Apr 11 23:22:55.061122 2026] [:error] [pid 42219:tid 42232] [client 20.220.147.82:39929] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sites.php"] [unique_id "adpnTw-4IkVbTQx_J-2mJwAAAIk"]
[Sat Apr 11 23:22:56.425838 2026] [:error] [pid 42221:tid 42287] [client 20.220.147.82:39889] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sites.php"] [unique_id "adpnUE2gt0pb_0-cc6mmaQAAAEk"]
[Sat Apr 11 23:22:57.827984 2026] [:error] [pid 42221:tid 42291] [client 20.220.147.82:39894] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp.php"] [unique_id "adpnUU2gt0pb_0-cc6mmcgAAAE0"]
[Sat Apr 11 23:22:58.545693 2026] [:error] [pid 52608:tid 52616] [client 20.220.147.82:39821] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp.php"] [unique_id "adpnUiY5wH-BLt5QEKh2jQAAAQU"]
[Sat Apr 11 23:22:59.400908 2026] [:error] [pid 52608:tid 52626] [client 20.220.147.82:39845] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp.php"] [unique_id "adpnUyY5wH-BLt5QEKh2mQAAAQ8"]
[Sat Apr 11 23:23:00.065271 2026] [:error] [pid 52608:tid 52625] [client 20.220.147.82:39853] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byp.php"] [unique_id "adpnVCY5wH-BLt5QEKh2pAAAAQ4"]
[Sat Apr 11 23:23:00.762726 2026] [:error] [pid 42221:tid 42297] [client 20.220.147.82:39900] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adpnVE2gt0pb_0-cc6mmfgAAAFM"]
[Sat Apr 11 23:23:01.414895 2026] [:error] [pid 52608:tid 52612] [client 20.220.147.82:39916] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adpnVSY5wH-BLt5QEKh2vwAAAQE"]
[Sat Apr 11 23:23:01.988179 2026] [:error] [pid 52608:tid 52611] [client 20.220.147.82:39919] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adpnVSY5wH-BLt5QEKh2xgAAAQA"]
[Sat Apr 11 23:23:02.739592 2026] [:error] [pid 52608:tid 52635] [client 20.220.147.82:39913] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "adpnViY5wH-BLt5QEKh21QAAARg"]
[Sat Apr 11 23:23:03.286832 2026] [:error] [pid 52608:tid 52634] [client 20.220.147.82:39763] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "adpnVyY5wH-BLt5QEKh24QAAARc"]
[Sat Apr 11 23:23:04.252965 2026] [:error] [pid 42219:tid 42228] [client 20.220.147.82:39912] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "adpnWA-4IkVbTQx_J-2mQwAAAIU"]
[Sat Apr 11 23:23:04.798785 2026] [:error] [pid 42221:tid 42289] [client 20.220.147.82:39812] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "adpnWE2gt0pb_0-cc6mmigAAAEs"]
[Sat Apr 11 23:23:05.858814 2026] [:error] [pid 42219:tid 42237] [client 20.220.147.82:39927] [client 20.220.147.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "adpnWQ-4IkVbTQx_J-2mRgAAAI4"]
[Sun Apr 12 07:28:22.685341 2026] [:error] [pid 25328:tid 25368] [client 45.154.98.114:54556] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Sun Apr 12 07:28:24.144813 2026] [:error] [pid 26599:tid 26603] [client 45.154.98.114:61733] [client 45.154.98.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/txets.php"] [unique_id "adrZGHG89LXoQbk_rwBYcgAAAUE"]
[Sun Apr 12 07:28:24.843703 2026] [:error] [pid 25329:tid 25414] [client 45.154.98.114:51767] [client 45.154.98.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/txets.php"] [unique_id "adrZGGdcIYsS8Iyaj11PNgAAAJc"]
[Sun Apr 12 07:28:25.511932 2026] [:error] [pid 25329:tid 25415] [client 45.154.98.114:54878] [client 45.154.98.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/post-template/txets.php"] [unique_id "adrZGWdcIYsS8Iyaj11PNwAAAJg"]
[Sun Apr 12 07:28:26.688873 2026] [:error] [pid 25437:tid 25458] [client 45.154.98.114:49404] [client 45.154.98.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/txets.php"] [unique_id "adrZGnf97wYZje1ep_N1eAAAANM"]
[Sun Apr 12 07:28:27.239642 2026] [:error] [pid 60280:tid 60296] [client 45.154.98.114:57294] File does not exist: /usr/local/apache/htdocs/suspended-page/schallfuns.php
[Sun Apr 12 07:28:27.992964 2026] [:error] [pid 25328:tid 25396] [client 45.154.98.114:55689] File does not exist: /usr/local/apache/htdocs/suspended-page/postnews.php
[Sun Apr 12 12:07:17.627955 2026] [:error] [pid 25437:tid 25442] [client 70.224.198.136:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sun Apr 12 12:07:18.374912 2026] [:error] [pid 25327:tid 25357] [client 70.224.198.136:61121] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sun Apr 12 12:07:19.905213 2026] [:error] [pid 60280:tid 60285] [client 70.224.198.136:63591] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "adsad3BlLnDOYuIykkigLgAAAcM"]
[Sun Apr 12 12:07:20.691898 2026] [:error] [pid 26600:tid 26652] [client 70.224.198.136:64852] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nextspaceconsulting.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/db.sql"] [unique_id "adsaeO1YwAZiXhQKLYrXpQAAAZc"]
[Sun Apr 12 12:07:21.454400 2026] [:error] [pid 25327:tid 25353] [client 70.224.198.136:50392] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nextspaceconsulting.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dump.sql"] [unique_id "adsaeS6h2tZEVJo9JFKTPwAAABE"]
[Sun Apr 12 12:07:22.246423 2026] [:error] [pid 25329:tid 25378] [client 70.224.198.136:50804] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nextspaceconsulting.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/database.sql"] [unique_id "adsaemdcIYsS8Iyaj117bgAAAII"]
[Sun Apr 12 12:07:23.032663 2026] [:error] [pid 26567:tid 26591] [client 70.224.198.136:51313] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nextspaceconsulting.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/backup.sql"] [unique_id "adsae3hRpg6ptWFyFx1dJwAAARY"]
[Sun Apr 12 12:07:23.819429 2026] [:error] [pid 25328:tid 25379] [client 70.224.198.136:51799] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nextspaceconsulting.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/config/db.sql"] [unique_id "adsae8xUaQZxT-e0YsCAAAAAAEs"]
[Sun Apr 12 12:07:24.605716 2026] [:error] [pid 25328:tid 25377] [client 70.224.198.136:52343] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nextspaceconsulting.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sql/db.sql"] [unique_id "adsafMxUaQZxT-e0YsCABgAAAEo"]
[Sun Apr 12 12:07:25.394840 2026] [:error] [pid 25437:tid 25451] [client 70.224.198.136:52855] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nextspaceconsulting.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/data/dump.sql"] [unique_id "adsafXf97wYZje1ep_PF5AAAAMw"]
[Sun Apr 12 12:07:26.185018 2026] [:error] [pid 60280:tid 60300] [client 70.224.198.136:53331] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nextspaceconsulting.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/backups/database.sql"] [unique_id "adsafnBlLnDOYuIykkigQAAAAdI"]
[Sun Apr 12 12:07:26.972114 2026] [:error] [pid 26567:tid 26593] [client 70.224.198.136:53948] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nextspaceconsulting.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mysql.sql"] [unique_id "adsafnhRpg6ptWFyFx1dMQAAARg"]
[Sun Apr 12 12:07:27.728918 2026] [:error] [pid 26567:tid 26591] [client 70.224.198.136:54501] [client 70.224.198.136] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.nextspaceconsulting.com.au|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/db_backup.sql"] [unique_id "adsaf3hRpg6ptWFyFx1dNAAAARY"]
[Sun Apr 12 12:38:53.514848 2026] [:error] [pid 25328:tid 25364] [client 182.78.197.66:10883] [client 182.78.197.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 182.78.197.66, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adsh3cxUaQZxT-e0YsCMDAAAAEA"]
[Sun Apr 12 12:38:53.519751 2026] [:error] [pid 25328:tid 25364] [client 182.78.197.66:10883] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 12 14:13:25.234184 2026] [:error] [pid 26567:tid 26580] [client 102.38.104.251:6437] [client 102.38.104.251] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 102.38.104.251, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ads4BXhRpg6ptWFyFx1ydQAAAQs"]
[Sun Apr 12 14:13:25.244193 2026] [:error] [pid 26567:tid 26580] [client 102.38.104.251:6437] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 12 15:06:49.076978 2026] [:error] [pid 25437:tid 25447] [client 154.57.218.222:35615] [client 154.57.218.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.57.218.222, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adtEiXf97wYZje1ep_P7WwAAAMg"]
[Sun Apr 12 15:06:49.082340 2026] [:error] [pid 25437:tid 25447] [client 154.57.218.222:35615] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 13 03:24:15.957287 2026] [:error] [pid 32010:tid 32024] [client 4.204.201.44:32546] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Mon Apr 13 03:24:16.167627 2026] [:error] [pid 32010:tid 32022] [client 4.204.201.44:32546] File does not exist: /usr/local/apache/htdocs/suspended-page/rkszbxbh.php
[Mon Apr 13 03:24:16.376706 2026] [:error] [pid 32010:tid 32014] [client 4.204.201.44:32546] File does not exist: /usr/local/apache/htdocs/suspended-page/hanna1337.php
[Mon Apr 13 03:24:16.587070 2026] [:error] [pid 32010:tid 32029] [client 4.204.201.44:32546] File does not exist: /usr/local/apache/htdocs/suspended-page/gt.php
[Mon Apr 13 03:24:18.664164 2026] [:error] [pid 32010:tid 32025] [client 4.204.201.44:32546] File does not exist: /usr/local/apache/htdocs/suspended-page/rk1.php
[Mon Apr 13 03:24:19.299154 2026] [:error] [pid 32010:tid 32017] [client 4.204.201.44:32546] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa-rex1.php"] [unique_id "advxYw0nq-t9pXyV1fzFQAAAAMU"]
[Mon Apr 13 03:24:19.713039 2026] [:error] [pid 31606:tid 31711] [client 4.204.201.44:33183] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa-rex1.php"] [unique_id "advxYz9vCsshNhLmCiCR1wAAAEU"]
[Mon Apr 13 03:24:20.124769 2026] [:error] [pid 54671:tid 54691] [client 4.204.201.44:33237] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa-rex1.php"] [unique_id "advxZGyJMmaONUqF0tC0YwAAARA"]
[Mon Apr 13 03:24:20.536203 2026] [:error] [pid 54671:tid 54688] [client 4.204.201.44:32592] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa-rex1.php"] [unique_id "advxZGyJMmaONUqF0tC0ZAAAAQ0"]
[Mon Apr 13 03:24:20.945939 2026] [:error] [pid 31606:tid 31723] [client 4.204.201.44:33197] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/suck.php"] [unique_id "advxZD9vCsshNhLmCiCR2gAAAFE"]
[Mon Apr 13 03:24:21.356920 2026] [:error] [pid 54671:tid 54678] [client 4.204.201.44:33158] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/suck.php"] [unique_id "advxZWyJMmaONUqF0tC0aAAAAQM"]
[Mon Apr 13 03:24:21.766196 2026] [:error] [pid 32010:tid 32030] [client 4.204.201.44:32589] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/suck.php"] [unique_id "advxZQ0nq-t9pXyV1fzFRwAAANI"]
[Mon Apr 13 03:24:22.175541 2026] [:error] [pid 32010:tid 32031] [client 4.204.201.44:32616] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/suck.php"] [unique_id "advxZg0nq-t9pXyV1fzFSQAAANM"]
[Mon Apr 13 03:24:22.590871 2026] [:error] [pid 54671:tid 54684] [client 4.204.201.44:31937] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hikudpno.php"] [unique_id "advxZmyJMmaONUqF0tC0bgAAAQk"]
[Mon Apr 13 03:24:23.001603 2026] [:error] [pid 54671:tid 54694] [client 4.204.201.44:32513] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hikudpno.php"] [unique_id "advxZ2yJMmaONUqF0tC0cwAAARM"]
[Mon Apr 13 03:24:23.413318 2026] [:error] [pid 32010:tid 32018] [client 4.204.201.44:32606] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hikudpno.php"] [unique_id "advxZw0nq-t9pXyV1fzFSwAAAMY"]
[Mon Apr 13 03:24:23.825841 2026] [:error] [pid 54671:tid 54693] [client 4.204.201.44:33241] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hikudpno.php"] [unique_id "advxZ2yJMmaONUqF0tC0eAAAARI"]
[Mon Apr 13 03:24:24.249608 2026] [:error] [pid 31605:tid 31665] [client 4.204.201.44:32594] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/moon.php"] [unique_id "advxaG9Py-Y-9VQ02eHjlgAAABY"]
[Mon Apr 13 03:24:24.664417 2026] [:error] [pid 32010:tid 32030] [client 4.204.201.44:33157] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/moon.php"] [unique_id "advxaA0nq-t9pXyV1fzFUQAAANI"]
[Mon Apr 13 03:24:25.106779 2026] [:error] [pid 54671:tid 54677] [client 4.204.201.44:31958] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/moon.php"] [unique_id "advxaWyJMmaONUqF0tC0egAAAQI"]
[Mon Apr 13 03:24:25.525269 2026] [:error] [pid 31606:tid 31726] [client 4.204.201.44:33180] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/moon.php"] [unique_id "advxaT9vCsshNhLmCiCR3wAAAFQ"]
[Mon Apr 13 03:24:25.938093 2026] [:error] [pid 31605:tid 31657] [client 4.204.201.44:32583] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sure.php"] [unique_id "advxaW9Py-Y-9VQ02eHjmAAAAA4"]
[Mon Apr 13 03:24:26.394315 2026] [:error] [pid 54671:tid 54697] [client 4.204.201.44:31946] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sure.php"] [unique_id "advxamyJMmaONUqF0tC0ggAAARY"]
[Mon Apr 13 03:24:26.811669 2026] [:error] [pid 54671:tid 54695] [client 4.204.201.44:31964] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sure.php"] [unique_id "advxamyJMmaONUqF0tC0hQAAARQ"]
[Mon Apr 13 03:24:27.253503 2026] [:error] [pid 54671:tid 54678] [client 4.204.201.44:31936] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sure.php"] [unique_id "advxa2yJMmaONUqF0tC0hwAAAQM"]
[Mon Apr 13 03:24:27.727659 2026] [:error] [pid 31606:tid 31712] [client 4.204.201.44:33169] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "advxaz9vCsshNhLmCiCR4wAAAEY"]
[Mon Apr 13 03:24:28.246349 2026] [:error] [pid 54671:tid 54682] [client 4.204.201.44:32565] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "advxbGyJMmaONUqF0tC0jAAAAQc"]
[Mon Apr 13 03:24:28.742625 2026] [:error] [pid 31607:tid 31748] [client 4.204.201.44:32513] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "advxbGjn_I-KYTWngjJR3AAAAIs"]
[Mon Apr 13 03:24:29.184351 2026] [:error] [pid 31606:tid 31724] [client 4.204.201.44:33153] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "advxbT9vCsshNhLmCiCR6gAAAFI"]
[Mon Apr 13 03:24:29.635876 2026] [:error] [pid 54671:tid 54693] [client 4.204.201.44:33204] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "advxbWyJMmaONUqF0tC0kAAAARI"]
[Mon Apr 13 03:24:30.069317 2026] [:error] [pid 54671:tid 54691] [client 4.204.201.44:32634] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "advxbmyJMmaONUqF0tC0kgAAARA"]
[Mon Apr 13 03:24:30.482441 2026] [:error] [pid 54671:tid 54688] [client 4.204.201.44:33195] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "advxbmyJMmaONUqF0tC0lAAAAQ0"]
[Mon Apr 13 03:24:30.891008 2026] [:error] [pid 54671:tid 54690] [client 4.204.201.44:33262] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "advxbmyJMmaONUqF0tC0lwAAAQ8"]
[Mon Apr 13 03:24:31.322743 2026] [:error] [pid 54671:tid 54697] [client 4.204.201.44:33277] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wunaivpl.php"] [unique_id "advxb2yJMmaONUqF0tC0mQAAARY"]
[Mon Apr 13 03:24:31.754308 2026] [:error] [pid 31606:tid 31729] [client 4.204.201.44:32622] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wunaivpl.php"] [unique_id "advxbz9vCsshNhLmCiCR7AAAAFc"]
[Mon Apr 13 03:24:32.168286 2026] [:error] [pid 31607:tid 31744] [client 4.204.201.44:32547] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wunaivpl.php"] [unique_id "advxcGjn_I-KYTWngjJR5wAAAIc"]
[Mon Apr 13 03:24:32.598109 2026] [:error] [pid 54671:tid 54675] [client 4.204.201.44:33193] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wunaivpl.php"] [unique_id "advxcGyJMmaONUqF0tC0ngAAAQA"]
[Mon Apr 13 03:24:33.013561 2026] [:error] [pid 32010:tid 32024] [client 4.204.201.44:31962] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reune.php"] [unique_id "advxcQ0nq-t9pXyV1fzFWwAAAMw"]
[Mon Apr 13 03:24:33.424546 2026] [:error] [pid 31607:tid 31753] [client 4.204.201.44:33187] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reune.php"] [unique_id "advxcWjn_I-KYTWngjJR6wAAAJA"]
[Mon Apr 13 03:24:33.835776 2026] [:error] [pid 31605:tid 31656] [client 4.204.201.44:33246] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reune.php"] [unique_id "advxcW9Py-Y-9VQ02eHjnAAAAA0"]
[Mon Apr 13 03:24:34.253826 2026] [:error] [pid 31605:tid 31648] [client 4.204.201.44:33230] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reune.php"] [unique_id "advxcm9Py-Y-9VQ02eHjnwAAAAU"]
[Mon Apr 13 03:24:34.678743 2026] [:error] [pid 32010:tid 32014] [client 4.204.201.44:33179] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dw.php"] [unique_id "advxcg0nq-t9pXyV1fzFXQAAAMI"]
[Mon Apr 13 03:24:35.090442 2026] [:error] [pid 32010:tid 32025] [client 4.204.201.44:32541] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dw.php"] [unique_id "advxcw0nq-t9pXyV1fzFXgAAAM0"]
[Mon Apr 13 03:24:35.501843 2026] [:error] [pid 32010:tid 32019] [client 4.204.201.44:32529] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dw.php"] [unique_id "advxcw0nq-t9pXyV1fzFYAAAAMc"]
[Mon Apr 13 03:24:35.913601 2026] [:error] [pid 32010:tid 32021] [client 4.204.201.44:33176] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dw.php"] [unique_id "advxcw0nq-t9pXyV1fzFYgAAAMk"]
[Mon Apr 13 03:24:36.326772 2026] [:error] [pid 54671:tid 54697] [client 4.204.201.44:32596] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advxdGyJMmaONUqF0tC0nwAAARY"]
[Mon Apr 13 03:24:36.736986 2026] [:error] [pid 54671:tid 54681] [client 4.204.201.44:33191] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advxdGyJMmaONUqF0tC0oAAAAQY"]
[Mon Apr 13 03:24:37.150729 2026] [:error] [pid 54671:tid 54699] [client 4.204.201.44:32535] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advxdWyJMmaONUqF0tC0ogAAARg"]
[Mon Apr 13 03:24:37.575429 2026] [:error] [pid 54671:tid 54693] [client 4.204.201.44:32516] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advxdWyJMmaONUqF0tC0pQAAARI"]
[Mon Apr 13 03:24:37.985916 2026] [:error] [pid 54671:tid 54680] [client 4.204.201.44:32628] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellx.php"] [unique_id "advxdWyJMmaONUqF0tC0pgAAAQU"]
[Mon Apr 13 03:24:38.403230 2026] [:error] [pid 54671:tid 54682] [client 4.204.201.44:32571] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellx.php"] [unique_id "advxdmyJMmaONUqF0tC0qwAAAQc"]
[Mon Apr 13 03:24:44.820493 2026] [:error] [pid 29662:tid 29670] [client 4.204.201.44:32526] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/l.php"] [unique_id "advxfEdwIN-g-lMQUKr2NgAAAAI"]
[Mon Apr 13 03:24:45.399464 2026] [:error] [pid 29662:tid 29688] [client 4.204.201.44:33275] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/l.php"] [unique_id "advxfUdwIN-g-lMQUKr2RAAAABQ"]
[Mon Apr 13 03:24:45.850096 2026] [:error] [pid 29749:tid 29753] [client 4.204.201.44:33201] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/l.php"] [unique_id "advxfQ0_fmrGwaR9DebqiQAAAME"]
[Mon Apr 13 03:24:46.280252 2026] [:error] [pid 29749:tid 29754] [client 4.204.201.44:33181] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/l.php"] [unique_id "advxfg0_fmrGwaR9DebqigAAAMI"]
[Mon Apr 13 03:24:46.763707 2026] [:error] [pid 29749:tid 29758] [client 4.204.201.44:32560] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "advxfg0_fmrGwaR9DebqjQAAAMY"]
[Mon Apr 13 03:24:47.227538 2026] [:error] [pid 29749:tid 29766] [client 4.204.201.44:32608] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "advxfw0_fmrGwaR9DebqkgAAAM4"]
[Mon Apr 13 03:24:47.685421 2026] [:error] [pid 29749:tid 29771] [client 4.204.201.44:33165] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "advxfw0_fmrGwaR9DebqlwAAANM"]
[Mon Apr 13 03:24:48.118559 2026] [:error] [pid 29749:tid 29772] [client 4.204.201.44:32624] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "advxgA0_fmrGwaR9DebqmAAAANQ"]
[Mon Apr 13 03:24:48.542605 2026] [:error] [pid 29664:tid 29727] [client 4.204.201.44:32605] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lnexugel.php"] [unique_id "advxgFtqncBlrAm0UGgyxwAAAIU"]
[Mon Apr 13 03:24:48.959956 2026] [:error] [pid 29749:tid 29774] [client 4.204.201.44:33252] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lnexugel.php"] [unique_id "advxgA0_fmrGwaR9DebqmQAAANY"]
[Mon Apr 13 03:24:49.373368 2026] [:error] [pid 29664:tid 29729] [client 4.204.201.44:31314] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lnexugel.php"] [unique_id "advxgVtqncBlrAm0UGgyyAAAAIc"]
[Mon Apr 13 03:24:49.786244 2026] [:error] [pid 29663:tid 29704] [client 4.204.201.44:32518] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lnexugel.php"] [unique_id "advxgTG2s0zodphfrWsAXQAAAEk"]
[Mon Apr 13 03:24:50.232043 2026] [:error] [pid 29749:tid 29753] [client 4.204.201.44:33249] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/online.php"] [unique_id "advxgg0_fmrGwaR9DebqnAAAAME"]
[Mon Apr 13 03:24:50.655844 2026] [:error] [pid 29664:tid 29734] [client 4.204.201.44:32563] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/online.php"] [unique_id "advxgltqncBlrAm0UGgyywAAAIw"]
[Mon Apr 13 03:24:51.066320 2026] [:error] [pid 29662:tid 29682] [client 4.204.201.44:31943] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/online.php"] [unique_id "advxg0dwIN-g-lMQUKr2SwAAAA4"]
[Mon Apr 13 03:24:51.486284 2026] [:error] [pid 29749:tid 29764] [client 4.204.201.44:32631] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/online.php"] [unique_id "advxgw0_fmrGwaR9DebqngAAAMw"]
[Mon Apr 13 03:24:51.898085 2026] [:error] [pid 29664:tid 29743] [client 4.204.201.44:32602] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/up-kon.php"] [unique_id "advxg1tqncBlrAm0UGgy0AAAAJU"]
[Mon Apr 13 03:24:52.314999 2026] [:error] [pid 29662:tid 29671] [client 4.204.201.44:31261] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/up-kon.php"] [unique_id "advxhEdwIN-g-lMQUKr2TAAAAAM"]
[Mon Apr 13 03:24:52.728921 2026] [:error] [pid 29749:tid 29767] [client 4.204.201.44:33258] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/up-kon.php"] [unique_id "advxhA0_fmrGwaR9DebqogAAAM8"]
[Mon Apr 13 03:24:53.151453 2026] [:error] [pid 29663:tid 29712] [client 4.204.201.44:33190] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/up-kon.php"] [unique_id "advxhTG2s0zodphfrWsAXgAAAFE"]
[Mon Apr 13 03:24:53.563737 2026] [:error] [pid 29664:tid 29729] [client 4.204.201.44:32543] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/word.php"] [unique_id "advxhVtqncBlrAm0UGgy1gAAAIc"]
[Mon Apr 13 03:24:53.975364 2026] [:error] [pid 29749:tid 29771] [client 4.204.201.44:32538] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/word.php"] [unique_id "advxhQ0_fmrGwaR9DebqpQAAANM"]
[Mon Apr 13 03:24:54.411567 2026] [:error] [pid 29663:tid 29713] [client 4.204.201.44:31954] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/word.php"] [unique_id "advxhjG2s0zodphfrWsAXwAAAFI"]
[Mon Apr 13 03:24:54.825382 2026] [:error] [pid 29664:tid 29741] [client 4.204.201.44:32607] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/word.php"] [unique_id "advxhltqncBlrAm0UGgy2gAAAJM"]
[Mon Apr 13 03:24:55.249989 2026] [:error] [pid 29749:tid 29759] [client 4.204.201.44:32570] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "advxhw0_fmrGwaR9DebqpwAAAMc"]
[Mon Apr 13 03:24:55.660335 2026] [:error] [pid 29749:tid 29752] [client 4.204.201.44:32555] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "advxhw0_fmrGwaR9DebqqQAAAMA"]
[Mon Apr 13 03:24:58.965913 2026] [:error] [pid 29867:tid 29873] [client 4.204.201.44:31350] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "advxilpRxgV1HXhfS5QAnQAAAAI"]
[Mon Apr 13 03:24:59.458029 2026] [:error] [pid 29867:tid 29892] [client 4.204.201.44:32542] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "advxi1pRxgV1HXhfS5QApgAAABU"]
[Mon Apr 13 03:24:59.877598 2026] [:error] [pid 29869:tid 29925] [client 4.204.201.44:32527] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jcsonquo.php"] [unique_id "advxi0mQpLLTEg81yTjRlAAAAMA"]
[Mon Apr 13 03:25:00.324182 2026] [:error] [pid 29953:tid 29955] [client 4.204.201.44:31914] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jcsonquo.php"] [unique_id "advxjHX-ZOaJpc-U-douPgAAAQA"]
[Mon Apr 13 03:25:00.741978 2026] [:error] [pid 29867:tid 29878] [client 4.204.201.44:32545] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jcsonquo.php"] [unique_id "advxjFpRxgV1HXhfS5QAsQAAAAc"]
[Mon Apr 13 03:25:01.177520 2026] [:error] [pid 29867:tid 29883] [client 4.204.201.44:31903] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jcsonquo.php"] [unique_id "advxjVpRxgV1HXhfS5QAsgAAAAw"]
[Mon Apr 13 03:25:01.617972 2026] [:error] [pid 29953:tid 29958] [client 4.204.201.44:33256] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "advxjXX-ZOaJpc-U-douQAAAAQM"]
[Mon Apr 13 03:25:02.033761 2026] [:error] [pid 29869:tid 29930] [client 4.204.201.44:33186] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "advxjkmQpLLTEg81yTjRmAAAAMU"]
[Mon Apr 13 03:25:02.466384 2026] [:error] [pid 29867:tid 29885] [client 4.204.201.44:33168] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "advxjlpRxgV1HXhfS5QAtAAAAA4"]
[Mon Apr 13 03:25:02.907625 2026] [:error] [pid 29867:tid 29876] [client 4.204.201.44:33234] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "advxjlpRxgV1HXhfS5QAtQAAAAU"]
[Mon Apr 13 03:25:03.333062 2026] [:error] [pid 29869:tid 29938] [client 4.204.201.44:31337] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advxj0mQpLLTEg81yTjRnQAAAM0"]
[Mon Apr 13 03:25:03.742290 2026] [:error] [pid 29869:tid 29940] [client 4.204.201.44:33274] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advxj0mQpLLTEg81yTjRnwAAAM8"]
[Mon Apr 13 03:25:04.155908 2026] [:error] [pid 29867:tid 29881] [client 4.204.201.44:31957] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advxkFpRxgV1HXhfS5QAtgAAAAo"]
[Mon Apr 13 03:25:04.595925 2026] [:error] [pid 29867:tid 29872] [client 4.204.201.44:31960] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advxkFpRxgV1HXhfS5QAuAAAAAE"]
[Mon Apr 13 03:25:05.008640 2026] [:error] [pid 29867:tid 29888] [client 4.204.201.44:31970] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advxkVpRxgV1HXhfS5QAuQAAABE"]
[Mon Apr 13 03:25:08.182794 2026] [:error] [pid 30106:tid 30111] [client 4.204.201.44:33185] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advxlOktyJnwLkVQMAKzEQAAAAE"]
[Mon Apr 13 03:25:08.625095 2026] [:error] [pid 30106:tid 30124] [client 4.204.201.44:32612] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advxlOktyJnwLkVQMAKzFgAAAA4"]
[Mon Apr 13 03:25:20.331385 2026] [:error] [pid 30430:tid 30450] [client 4.204.201.44:32635] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi.php
[Mon Apr 13 03:25:20.548892 2026] [:error] [pid 30430:tid 30464] [client 4.204.201.44:32635] File does not exist: /usr/local/apache/htdocs/suspended-page/vbv.php
[Mon Apr 13 03:25:20.575479 2026] [:error] [pid 30430:tid 30465] [client 4.204.201.44:31620] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Mon Apr 13 03:25:20.758787 2026] [:error] [pid 30430:tid 30466] [client 4.204.201.44:32635] File does not exist: /usr/local/apache/htdocs/suspended-page/mk.php
[Mon Apr 13 03:25:20.783981 2026] [:error] [pid 30430:tid 30467] [client 4.204.201.44:31620] File does not exist: /usr/local/apache/htdocs/suspended-page/rkszbxbh.php
[Mon Apr 13 03:25:20.970374 2026] [:error] [pid 30430:tid 30469] [client 4.204.201.44:32635] File does not exist: /usr/local/apache/htdocs/suspended-page/moderation.php
[Mon Apr 13 03:25:20.992466 2026] [:error] [pid 30430:tid 30470] [client 4.204.201.44:31620] File does not exist: /usr/local/apache/htdocs/suspended-page/hanna1337.php
[Mon Apr 13 03:25:21.199939 2026] [:error] [pid 30430:tid 30448] [client 4.204.201.44:32635] File does not exist: /usr/local/apache/htdocs/suspended-page/simple-shell.php
[Mon Apr 13 03:25:21.218920 2026] [:error] [pid 30430:tid 30460] [client 4.204.201.44:31620] File does not exist: /usr/local/apache/htdocs/suspended-page/gt.php
[Mon Apr 13 03:25:21.437670 2026] [:error] [pid 30430:tid 30466] [client 4.204.201.44:31620] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/datab"] [unique_id "advxobn0S0M-vj_lJadB2QAAABM"]
[Mon Apr 13 03:25:21.615441 2026] [:error] [pid 30430:tid 30467] [client 4.204.201.44:32635] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2Vu80QG.php"] [unique_id "advxobn0S0M-vj_lJadB2wAAABQ"]
[Mon Apr 13 03:25:22.558697 2026] [:error] [pid 30532:tid 30539] [client 4.204.201.44:32553] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2Vu80QG.php"] [unique_id "advxopGQr51YhOFElOsclgAAAMM"]
[Mon Apr 13 03:25:22.623062 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:31207] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/datab"] [unique_id "advxopGQr51YhOFElOsclwAAAMQ"]
[Mon Apr 13 03:25:22.967963 2026] [:error] [pid 30430:tid 30468] [client 4.204.201.44:33208] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2Vu80QG.php"] [unique_id "advxorn0S0M-vj_lJadB3AAAABU"]
[Mon Apr 13 03:25:23.384400 2026] [:error] [pid 30431:tid 30477] [client 4.204.201.44:31942] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2Vu80QG.php"] [unique_id "advxo1bSTPssf6SS919-CQAAAEM"]
[Mon Apr 13 03:25:23.850579 2026] [:error] [pid 30431:tid 30479] [client 4.204.201.44:32611] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bsr.php"] [unique_id "advxo1bSTPssf6SS919-CwAAAEU"]
[Mon Apr 13 03:25:24.266860 2026] [:error] [pid 30431:tid 30481] [client 4.204.201.44:33235] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bsr.php"] [unique_id "advxpFbSTPssf6SS919-DQAAAEc"]
[Mon Apr 13 03:25:24.685112 2026] [:error] [pid 30432:tid 30506] [client 4.204.201.44:32537] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bsr.php"] [unique_id "advxpPv_BOY8son7cLmR0QAAAIU"]
[Mon Apr 13 03:25:25.026807 2026] [:error] [pid 30430:tid 30470] [client 4.204.201.44:31122] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/datab"] [unique_id "advxpbn0S0M-vj_lJadB3QAAABc"]
[Mon Apr 13 03:25:25.111182 2026] [:error] [pid 30430:tid 30454] [client 4.204.201.44:31947] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bsr.php"] [unique_id "advxpbn0S0M-vj_lJadB3gAAAAc"]
[Mon Apr 13 03:25:25.521679 2026] [:error] [pid 30431:tid 30486] [client 4.204.201.44:35394] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ans.php"] [unique_id "advxpVbSTPssf6SS919-EAAAAEw"]
[Mon Apr 13 03:25:26.069166 2026] [:error] [pid 30532:tid 30547] [client 4.204.201.44:30347] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/datab"] [unique_id "advxppGQr51YhOFElOscmwAAAMs"]
[Mon Apr 13 03:25:26.090095 2026] [:error] [pid 30431:tid 30489] [client 4.204.201.44:30034] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ans.php"] [unique_id "advxplbSTPssf6SS919-EwAAAE8"]
[Mon Apr 13 03:25:26.855992 2026] [:error] [pid 30532:tid 30549] [client 4.204.201.44:33171] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ans.php"] [unique_id "advxppGQr51YhOFElOscnQAAAM0"]
[Mon Apr 13 03:25:27.323116 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:35373] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ans.php"] [unique_id "advxp5GQr51YhOFElOscnwAAANI"]
[Mon Apr 13 03:25:27.442846 2026] [:error] [pid 30532:tid 30555] [client 4.204.201.44:31658] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/sxx.php"] [unique_id "advxp5GQr51YhOFElOscoAAAANM"]
[Mon Apr 13 03:25:27.779349 2026] [:error] [pid 30432:tid 30513] [client 4.204.201.44:33227] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tot.php"] [unique_id "advxp_v_BOY8son7cLmR1QAAAIw"]
[Mon Apr 13 03:25:28.256467 2026] [:error] [pid 30532:tid 30560] [client 4.204.201.44:31975] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tot.php"] [unique_id "advxqJGQr51YhOFElOscpQAAANg"]
[Mon Apr 13 03:25:28.844583 2026] [:error] [pid 30431:tid 30480] [client 4.204.201.44:33206] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tot.php"] [unique_id "advxqFbSTPssf6SS919-GgAAAEY"]
[Mon Apr 13 03:25:28.856390 2026] [:error] [pid 30431:tid 30478] [client 4.204.201.44:30373] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/sxx.php"] [unique_id "advxqFbSTPssf6SS919-GwAAAEQ"]
[Mon Apr 13 03:25:29.280857 2026] [:error] [pid 30532:tid 30538] [client 4.204.201.44:35383] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tot.php"] [unique_id "advxqZGQr51YhOFElOscpgAAAMI"]
[Mon Apr 13 03:25:29.354396 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:30458] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/sxx.php"] [unique_id "advxqZGQr51YhOFElOscpwAAAMU"]
[Mon Apr 13 03:25:29.774668 2026] [:error] [pid 30532:tid 30544] [client 4.204.201.44:35423] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Core-wp.php"] [unique_id "advxqZGQr51YhOFElOscqQAAAMg"]
[Mon Apr 13 03:25:29.807334 2026] [:error] [pid 30432:tid 30519] [client 4.204.201.44:31639] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/sxx.php"] [unique_id "advxqfv_BOY8son7cLmR2QAAAJI"]
[Mon Apr 13 03:25:30.197744 2026] [:error] [pid 30430:tid 30451] [client 4.204.201.44:35413] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Core-wp.php"] [unique_id "advxqrn0S0M-vj_lJadB4wAAAAQ"]
[Mon Apr 13 03:25:30.330328 2026] [:error] [pid 30430:tid 30449] [client 4.204.201.44:31117] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/r1.php"] [unique_id "advxqrn0S0M-vj_lJadB5AAAAAI"]
[Mon Apr 13 03:25:30.619060 2026] [:error] [pid 30431:tid 30487] [client 4.204.201.44:32617] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Core-wp.php"] [unique_id "advxqlbSTPssf6SS919-HQAAAE0"]
[Mon Apr 13 03:25:31.037711 2026] [:error] [pid 30532:tid 30549] [client 4.204.201.44:35377] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Core-wp.php"] [unique_id "advxq5GQr51YhOFElOscqwAAAM0"]
[Mon Apr 13 03:25:31.052408 2026] [:error] [pid 30430:tid 30460] [client 4.204.201.44:31153] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/r1.php"] [unique_id "advxq7n0S0M-vj_lJadB5gAAAA0"]
[Mon Apr 13 03:25:31.446811 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:35355] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/src.php"] [unique_id "advxq5GQr51YhOFElOscrwAAANI"]
[Mon Apr 13 03:25:31.586695 2026] [:error] [pid 30431:tid 30497] [client 4.204.201.44:31155] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/r1.php"] [unique_id "advxq1bSTPssf6SS919-HwAAAFc"]
[Mon Apr 13 03:25:31.919496 2026] [:error] [pid 30432:tid 30511] [client 4.204.201.44:32609] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/src.php"] [unique_id "advxq_v_BOY8son7cLmR4gAAAIo"]
[Mon Apr 13 03:25:32.374116 2026] [:error] [pid 30430:tid 30465] [client 4.204.201.44:32618] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/src.php"] [unique_id "advxrLn0S0M-vj_lJadB5wAAABI"]
[Mon Apr 13 03:25:32.778694 2026] [:error] [pid 30430:tid 30466] [client 4.204.201.44:28609] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/r1.php"] [unique_id "advxrLn0S0M-vj_lJadB6QAAABM"]
[Mon Apr 13 03:25:32.786182 2026] [:error] [pid 30430:tid 30456] [client 4.204.201.44:33182] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/src.php"] [unique_id "advxrLn0S0M-vj_lJadB6gAAAAk"]
[Mon Apr 13 03:25:33.236971 2026] [:error] [pid 30431:tid 30482] [client 4.204.201.44:32619] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/v2.php"] [unique_id "advxrVbSTPssf6SS919-IgAAAEg"]
[Mon Apr 13 03:25:33.504769 2026] [:error] [pid 30431:tid 30485] [client 4.204.201.44:29866] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rk1.php"] [unique_id "advxrVbSTPssf6SS919-JAAAAEs"]
[Mon Apr 13 03:25:33.833740 2026] [:error] [pid 30431:tid 30486] [client 4.204.201.44:35395] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/v2.php"] [unique_id "advxrVbSTPssf6SS919-JQAAAEw"]
[Mon Apr 13 03:25:34.063185 2026] [:error] [pid 30430:tid 30458] [client 4.204.201.44:31671] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rk1.php"] [unique_id "advxrrn0S0M-vj_lJadB7AAAAAs"]
[Mon Apr 13 03:25:34.450218 2026] [:error] [pid 30431:tid 30490] [client 4.204.201.44:33170] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/v2.php"] [unique_id "advxrlbSTPssf6SS919-JgAAAFA"]
[Mon Apr 13 03:25:34.490643 2026] [:error] [pid 30430:tid 30453] [client 4.204.201.44:31121] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rk1.php"] [unique_id "advxrrn0S0M-vj_lJadB7QAAAAY"]
[Mon Apr 13 03:25:35.031447 2026] [:error] [pid 30532:tid 30545] [client 4.204.201.44:30395] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rk1.php"] [unique_id "advxr5GQr51YhOFElOscswAAAMk"]
[Mon Apr 13 03:25:35.047645 2026] [:error] [pid 30532:tid 30548] [client 4.204.201.44:32587] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/v2.php"] [unique_id "advxr5GQr51YhOFElOsctAAAAMw"]
[Mon Apr 13 03:25:35.463871 2026] [:error] [pid 30532:tid 30549] [client 4.204.201.44:31319] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxd.php"] [unique_id "advxr5GQr51YhOFElOsctgAAAM0"]
[Mon Apr 13 03:25:35.508188 2026] [:error] [pid 30532:tid 30546] [client 4.204.201.44:31165] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah/xBrain.php"] [unique_id "advxr5GQr51YhOFElOsctwAAAMo"]
[Mon Apr 13 03:25:35.959840 2026] [:error] [pid 30430:tid 30470] [client 4.204.201.44:35422] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxd.php"] [unique_id "advxr7n0S0M-vj_lJadB7wAAABc"]
[Mon Apr 13 03:25:36.318653 2026] [:error] [pid 30430:tid 30463] [client 4.204.201.44:30356] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah/xBrain.php"] [unique_id "advxsLn0S0M-vj_lJadB8AAAABA"]
[Mon Apr 13 03:25:36.375144 2026] [:error] [pid 30432:tid 30505] [client 4.204.201.44:31315] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxd.php"] [unique_id "advxsPv_BOY8son7cLmR6gAAAIQ"]
[Mon Apr 13 03:25:36.795755 2026] [:error] [pid 30432:tid 30504] [client 4.204.201.44:32586] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxd.php"] [unique_id "advxsPv_BOY8son7cLmR7AAAAIM"]
[Mon Apr 13 03:25:37.185958 2026] [:error] [pid 30431:tid 30488] [client 4.204.201.44:31688] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah/xBrain.php"] [unique_id "advxsVbSTPssf6SS919-JwAAAE4"]
[Mon Apr 13 03:25:37.205774 2026] [:error] [pid 30430:tid 30457] [client 4.204.201.44:35339] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/payout.php"] [unique_id "advxsbn0S0M-vj_lJadB8gAAAAo"]
[Mon Apr 13 03:25:37.673858 2026] [:error] [pid 30432:tid 30513] [client 4.204.201.44:35428] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/payout.php"] [unique_id "advxsfv_BOY8son7cLmR7wAAAIw"]
[Mon Apr 13 03:25:37.743770 2026] [:error] [pid 30532:tid 30559] [client 4.204.201.44:30440] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah/xBrain.php"] [unique_id "advxsZGQr51YhOFElOscuQAAANc"]
[Mon Apr 13 03:25:38.104942 2026] [:error] [pid 30430:tid 30455] [client 4.204.201.44:35444] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/payout.php"] [unique_id "advxsrn0S0M-vj_lJadB9QAAAAg"]
[Mon Apr 13 03:25:38.312239 2026] [:error] [pid 30432:tid 30518] [client 4.204.201.44:30456] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pegi.PhP8"] [unique_id "advxsvv_BOY8son7cLmR8AAAAJE"]
[Mon Apr 13 03:25:38.532887 2026] [:error] [pid 30432:tid 30519] [client 4.204.201.44:32613] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/payout.php"] [unique_id "advxsvv_BOY8son7cLmR8gAAAJI"]
[Mon Apr 13 03:25:38.983674 2026] [:error] [pid 30430:tid 30461] [client 4.204.201.44:32522] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uxquidwa.php"] [unique_id "advxsrn0S0M-vj_lJadB9wAAAA4"]
[Mon Apr 13 03:25:39.401505 2026] [:error] [pid 30431:tid 30477] [client 4.204.201.44:35353] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uxquidwa.php"] [unique_id "advxs1bSTPssf6SS919-LAAAAEM"]
[Mon Apr 13 03:25:39.683662 2026] [:error] [pid 30431:tid 30481] [client 4.204.201.44:31712] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pegi.PhP8"] [unique_id "advxs1bSTPssf6SS919-LgAAAEc"]
[Mon Apr 13 03:25:39.826733 2026] [:error] [pid 30432:tid 30504] [client 4.204.201.44:33253] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uxquidwa.php"] [unique_id "advxs_v_BOY8son7cLmR9wAAAIM"]
[Mon Apr 13 03:25:40.302604 2026] [:error] [pid 30532:tid 30543] [client 4.204.201.44:31304] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uxquidwa.php"] [unique_id "advxtJGQr51YhOFElOscuwAAAMc"]
[Mon Apr 13 03:25:40.326261 2026] [:error] [pid 30432:tid 30507] [client 4.204.201.44:31113] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pegi.PhP8"] [unique_id "advxtPv_BOY8son7cLmR-AAAAIY"]
[Mon Apr 13 03:25:40.833054 2026] [:error] [pid 30432:tid 30511] [client 4.204.201.44:31353] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/combined.php"] [unique_id "advxtPv_BOY8son7cLmR-QAAAIo"]
[Mon Apr 13 03:25:40.880519 2026] [:error] [pid 30432:tid 30513] [client 4.204.201.44:29895] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pegi.PhP8"] [unique_id "advxtPv_BOY8son7cLmR-gAAAIw"]
[Mon Apr 13 03:25:41.347571 2026] [:error] [pid 30431:tid 30483] [client 4.204.201.44:33156] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/combined.php"] [unique_id "advxtVbSTPssf6SS919-MwAAAEk"]
[Mon Apr 13 03:25:41.607363 2026] [:error] [pid 30532:tid 30537] [client 4.204.201.44:29892] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa-rex1.php"] [unique_id "advxtZGQr51YhOFElOscvAAAAME"]
[Mon Apr 13 03:25:41.791087 2026] [:error] [pid 30431:tid 30488] [client 4.204.201.44:31971] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/combined.php"] [unique_id "advxtVbSTPssf6SS919-NgAAAE4"]
[Mon Apr 13 03:25:42.147989 2026] [:error] [pid 30532:tid 30553] [client 4.204.201.44:30366] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa-rex1.php"] [unique_id "advxtpGQr51YhOFElOscvQAAANE"]
[Mon Apr 13 03:25:42.221616 2026] [:error] [pid 30432:tid 30518] [client 4.204.201.44:32614] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/combined.php"] [unique_id "advxtvv_BOY8son7cLmR_QAAAJE"]
[Mon Apr 13 03:25:42.635889 2026] [:error] [pid 30432:tid 30524] [client 4.204.201.44:33152] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mari.php"] [unique_id "advxtvv_BOY8son7cLmR_gAAAJc"]
[Mon Apr 13 03:25:42.871499 2026] [:error] [pid 30431:tid 30497] [client 4.204.201.44:30425] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa-rex1.php"] [unique_id "advxtlbSTPssf6SS919-OQAAAFc"]
[Mon Apr 13 03:25:43.078167 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:32577] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mari.php"] [unique_id "advxt5GQr51YhOFElOscvwAAAM8"]
[Mon Apr 13 03:25:43.460983 2026] [:error] [pid 30432:tid 30514] [client 4.204.201.44:30428] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa-rex1.php"] [unique_id "advxt_v_BOY8son7cLmR_wAAAI0"]
[Mon Apr 13 03:25:43.582537 2026] [:error] [pid 30432:tid 30505] [client 4.204.201.44:33213] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mari.php"] [unique_id "advxt_v_BOY8son7cLmSAAAAAIQ"]
[Mon Apr 13 03:25:44.030400 2026] [:error] [pid 30432:tid 30510] [client 4.204.201.44:31982] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mari.php"] [unique_id "advxuPv_BOY8son7cLmSAwAAAIk"]
[Mon Apr 13 03:25:44.456893 2026] [:error] [pid 30432:tid 30503] [client 4.204.201.44:33276] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kodox.php"] [unique_id "advxuPv_BOY8son7cLmSBQAAAII"]
[Mon Apr 13 03:25:44.765463 2026] [:error] [pid 30532:tid 30559] [client 4.204.201.44:31703] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/suck.php"] [unique_id "advxuJGQr51YhOFElOscwwAAANc"]
[Mon Apr 13 03:25:44.874533 2026] [:error] [pid 30532:tid 30557] [client 4.204.201.44:35384] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kodox.php"] [unique_id "advxuJGQr51YhOFElOscxAAAANU"]
[Mon Apr 13 03:25:45.373844 2026] [:error] [pid 30532:tid 30536] [client 4.204.201.44:33224] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kodox.php"] [unique_id "advxuZGQr51YhOFElOscxwAAAMA"]
[Mon Apr 13 03:25:45.792225 2026] [:error] [pid 30532:tid 30560] [client 4.204.201.44:32636] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kodox.php"] [unique_id "advxuZGQr51YhOFElOscyAAAANg"]
[Mon Apr 13 03:25:46.234743 2026] [:error] [pid 30430:tid 30461] [client 4.204.201.44:30439] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/suck.php"] [unique_id "advxurn0S0M-vj_lJadB_gAAAA4"]
[Mon Apr 13 03:25:46.259514 2026] [:error] [pid 30431:tid 30476] [client 4.204.201.44:32590] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ak47shell.php"] [unique_id "advxulbSTPssf6SS919-PQAAAEI"]
[Mon Apr 13 03:25:46.684363 2026] [:error] [pid 30431:tid 30478] [client 4.204.201.44:35398] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ak47shell.php"] [unique_id "advxulbSTPssf6SS919-PgAAAEQ"]
[Mon Apr 13 03:25:47.096477 2026] [:error] [pid 30430:tid 30451] [client 4.204.201.44:35406] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ak47shell.php"] [unique_id "advxu7n0S0M-vj_lJadCAgAAAAQ"]
[Mon Apr 13 03:25:47.520382 2026] [:error] [pid 30430:tid 30468] [client 4.204.201.44:31158] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/suck.php"] [unique_id "advxu7n0S0M-vj_lJadCBgAAABU"]
[Mon Apr 13 03:25:47.537488 2026] [:error] [pid 30430:tid 30469] [client 4.204.201.44:35446] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ak47shell.php"] [unique_id "advxu7n0S0M-vj_lJadCBwAAABY"]
[Mon Apr 13 03:25:47.968534 2026] [:error] [pid 30532:tid 30544] [client 4.204.201.44:33236] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "advxu5GQr51YhOFElOscygAAAMg"]
[Mon Apr 13 03:25:48.263486 2026] [:error] [pid 30532:tid 30543] [client 4.204.201.44:31625] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/suck.php"] [unique_id "advxvJGQr51YhOFElOsczAAAAMc"]
[Mon Apr 13 03:25:48.415800 2026] [:error] [pid 30430:tid 30454] [client 4.204.201.44:32514] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "advxvLn0S0M-vj_lJadCCQAAAAc"]
[Mon Apr 13 03:25:48.870729 2026] [:error] [pid 30431:tid 30492] [client 4.204.201.44:31629] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hikudpno.php"] [unique_id "advxvFbSTPssf6SS919-QgAAAFI"]
[Mon Apr 13 03:25:48.888825 2026] [:error] [pid 30431:tid 30497] [client 4.204.201.44:35359] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "advxvFbSTPssf6SS919-QwAAAFc"]
[Mon Apr 13 03:25:49.340289 2026] [:error] [pid 30532:tid 30542] [client 4.204.201.44:33161] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "advxvZGQr51YhOFElOsczgAAAMY"]
[Mon Apr 13 03:25:49.788122 2026] [:error] [pid 30432:tid 30507] [client 4.204.201.44:32603] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/log404.php"] [unique_id "advxvfv_BOY8son7cLmSDAAAAIY"]
[Mon Apr 13 03:25:49.836891 2026] [:error] [pid 30431:tid 30474] [client 4.204.201.44:31146] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hikudpno.php"] [unique_id "advxvVbSTPssf6SS919-RwAAAEA"]
[Mon Apr 13 03:25:50.208477 2026] [:error] [pid 30432:tid 30506] [client 4.204.201.44:32585] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/log404.php"] [unique_id "advxvvv_BOY8son7cLmSDQAAAIU"]
[Mon Apr 13 03:25:50.625733 2026] [:error] [pid 30532:tid 30555] [client 4.204.201.44:35342] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/log404.php"] [unique_id "advxvpGQr51YhOFElOsc0gAAANM"]
[Mon Apr 13 03:25:50.794042 2026] [:error] [pid 30432:tid 30502] [client 4.204.201.44:30402] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hikudpno.php"] [unique_id "advxvvv_BOY8son7cLmSDwAAAIE"]
[Mon Apr 13 03:25:51.039034 2026] [:error] [pid 30532:tid 30557] [client 4.204.201.44:32598] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/log404.php"] [unique_id "advxv5GQr51YhOFElOsc1AAAANU"]
[Mon Apr 13 03:25:51.471006 2026] [:error] [pid 30432:tid 30519] [client 4.204.201.44:35340] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wh.php"] [unique_id "advxv_v_BOY8son7cLmSEwAAAJI"]
[Mon Apr 13 03:25:51.909209 2026] [:error] [pid 30432:tid 30520] [client 4.204.201.44:35338] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wh.php"] [unique_id "advxv_v_BOY8son7cLmSFQAAAJM"]
[Mon Apr 13 03:25:52.362959 2026] [:error] [pid 30431:tid 30493] [client 4.204.201.44:31928] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wh.php"] [unique_id "advxwFbSTPssf6SS919-SgAAAFM"]
[Mon Apr 13 03:25:52.811028 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:32599] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wh.php"] [unique_id "advxwJGQr51YhOFElOsc2gAAAM8"]
[Mon Apr 13 03:25:52.995787 2026] [:error] [pid 30532:tid 30547] [client 4.204.201.44:30371] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hikudpno.php"] [unique_id "advxwJGQr51YhOFElOsc2wAAAMs"]
[Mon Apr 13 03:25:53.241178 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:35372] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luf.php"] [unique_id "advxwZGQr51YhOFElOsc3QAAANQ"]
[Mon Apr 13 03:25:53.664844 2026] [:error] [pid 30532:tid 30552] [client 4.204.201.44:32520] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luf.php"] [unique_id "advxwZGQr51YhOFElOsc4AAAANA"]
[Mon Apr 13 03:25:54.097128 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:31217] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/moon.php"] [unique_id "advxwpGQr51YhOFElOsc5AAAAMU"]
[Mon Apr 13 03:25:54.165483 2026] [:error] [pid 30532:tid 30549] [client 4.204.201.44:35433] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luf.php"] [unique_id "advxwpGQr51YhOFElOsc5QAAAM0"]
[Mon Apr 13 03:25:54.594161 2026] [:error] [pid 30532:tid 30553] [client 4.204.201.44:31961] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luf.php"] [unique_id "advxwpGQr51YhOFElOsc5wAAANE"]
[Mon Apr 13 03:25:54.606878 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:31156] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/moon.php"] [unique_id "advxwpGQr51YhOFElOsc6AAAAM8"]
[Mon Apr 13 03:25:55.006166 2026] [:error] [pid 30532:tid 30559] [client 4.204.201.44:35430] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs2.php"] [unique_id "advxw5GQr51YhOFElOsc7QAAANc"]
[Mon Apr 13 03:25:55.164712 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:30431] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/moon.php"] [unique_id "advxw5GQr51YhOFElOsc7wAAANY"]
[Mon Apr 13 03:25:55.431250 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:33200] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs2.php"] [unique_id "advxw5GQr51YhOFElOsc8AAAAMU"]
[Mon Apr 13 03:25:55.880072 2026] [:error] [pid 30532:tid 30557] [client 4.204.201.44:33163] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs2.php"] [unique_id "advxw5GQr51YhOFElOsc9AAAANU"]
[Mon Apr 13 03:25:56.369519 2026] [:error] [pid 30431:tid 30496] [client 4.204.201.44:35376] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs2.php"] [unique_id "advxxFbSTPssf6SS919-TgAAAFY"]
[Mon Apr 13 03:25:56.498001 2026] [:error] [pid 30430:tid 30450] [client 4.204.201.44:30461] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/moon.php"] [unique_id "advxxLn0S0M-vj_lJadCFAAAAAM"]
[Mon Apr 13 03:25:57.006037 2026] [:error] [pid 30430:tid 30451] [client 4.204.201.44:32566] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wf.php"] [unique_id "advxxbn0S0M-vj_lJadCFwAAAAQ"]
[Mon Apr 13 03:25:57.402999 2026] [:error] [pid 30432:tid 30523] [client 4.204.201.44:31115] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sure.php"] [unique_id "advxxfv_BOY8son7cLmSHgAAAJY"]
[Mon Apr 13 03:25:57.528337 2026] [:error] [pid 30430:tid 30461] [client 4.204.201.44:36227] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wf.php"] [unique_id "advxxbn0S0M-vj_lJadCGQAAAA4"]
[Mon Apr 13 03:25:57.889977 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:29861] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sure.php"] [unique_id "advxxZGQr51YhOFElOsc-AAAANY"]
[Mon Apr 13 03:25:58.012585 2026] [:error] [pid 30532:tid 30538] [client 4.204.201.44:36326] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wf.php"] [unique_id "advxxpGQr51YhOFElOsc-QAAAMI"]
[Mon Apr 13 03:25:58.308967 2026] [:error] [pid 30532:tid 30550] [client 4.204.201.44:31680] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sure.php"] [unique_id "advxxpGQr51YhOFElOsc_AAAAM4"]
[Mon Apr 13 03:25:58.490896 2026] [:error] [pid 30431:tid 30480] [client 4.204.201.44:35364] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wf.php"] [unique_id "advxxlbSTPssf6SS919-TwAAAEY"]
[Mon Apr 13 03:25:58.819012 2026] [:error] [pid 30432:tid 30504] [client 4.204.201.44:31624] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sure.php"] [unique_id "advxxvv_BOY8son7cLmSIgAAAIM"]
[Mon Apr 13 03:25:58.914785 2026] [:error] [pid 30432:tid 30510] [client 4.204.201.44:36323] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vcard.php"] [unique_id "advxxvv_BOY8son7cLmSJAAAAIk"]
[Mon Apr 13 03:25:59.356850 2026] [:error] [pid 30430:tid 30449] [client 4.204.201.44:35439] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vcard.php"] [unique_id "advxx7n0S0M-vj_lJadCHQAAAAI"]
[Mon Apr 13 03:25:59.778623 2026] [:error] [pid 30432:tid 30512] [client 4.204.201.44:30390] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "advxx_v_BOY8son7cLmSKQAAAIs"]
[Mon Apr 13 03:25:59.802656 2026] [:error] [pid 30432:tid 30518] [client 4.204.201.44:35367] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vcard.php"] [unique_id "advxx_v_BOY8son7cLmSKgAAAJE"]
[Mon Apr 13 03:26:00.249893 2026] [:error] [pid 30431:tid 30475] [client 4.204.201.44:35436] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vcard.php"] [unique_id "advxyFbSTPssf6SS919-UgAAAEE"]
[Mon Apr 13 03:26:00.309891 2026] [:error] [pid 30431:tid 30487] [client 4.204.201.44:31148] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "advxyFbSTPssf6SS919-VAAAAE0"]
[Mon Apr 13 03:26:00.689933 2026] [:error] [pid 30432:tid 30523] [client 4.204.201.44:29997] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/file2.php"] [unique_id "advxyPv_BOY8son7cLmSLgAAAJY"]
[Mon Apr 13 03:26:00.775445 2026] [:error] [pid 30432:tid 30521] [client 4.204.201.44:30340] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "advxyPv_BOY8son7cLmSLwAAAJQ"]
[Mon Apr 13 03:26:01.117835 2026] [:error] [pid 30431:tid 30474] [client 4.204.201.44:36251] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/file2.php"] [unique_id "advxyVbSTPssf6SS919-WQAAAEA"]
[Mon Apr 13 03:26:01.222324 2026] [:error] [pid 30430:tid 30447] [client 4.204.201.44:30400] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "advxybn0S0M-vj_lJadCIAAAAAA"]
[Mon Apr 13 03:26:01.565582 2026] [:error] [pid 30431:tid 30478] [client 4.204.201.44:36266] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/file2.php"] [unique_id "advxyVbSTPssf6SS919-WwAAAEQ"]
[Mon Apr 13 03:26:01.690816 2026] [:error] [pid 30430:tid 30471] [client 4.204.201.44:31619] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "advxybn0S0M-vj_lJadCIQAAABg"]
[Mon Apr 13 03:26:01.974595 2026] [:error] [pid 30532:tid 30544] [client 4.204.201.44:31279] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/file2.php"] [unique_id "advxyZGQr51YhOFElOsc_wAAAMg"]
[Mon Apr 13 03:26:02.177249 2026] [:error] [pid 30532:tid 30545] [client 4.204.201.44:31663] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "advxypGQr51YhOFElOsdAAAAAMk"]
[Mon Apr 13 03:26:02.454394 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:33218] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ddgg.php"] [unique_id "advxypGQr51YhOFElOsdAQAAAMQ"]
[Mon Apr 13 03:26:02.874941 2026] [:error] [pid 30532:tid 30536] [client 4.204.201.44:35358] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ddgg.php"] [unique_id "advxypGQr51YhOFElOsdBAAAAMA"]
[Mon Apr 13 03:26:02.933345 2026] [:error] [pid 30432:tid 30502] [client 4.204.201.44:31120] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "advxyvv_BOY8son7cLmSNQAAAIE"]
[Mon Apr 13 03:26:03.312101 2026] [:error] [pid 30532:tid 30543] [client 4.204.201.44:35424] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ddgg.php"] [unique_id "advxy5GQr51YhOFElOsdCQAAAMc"]
[Mon Apr 13 03:26:03.690141 2026] [:error] [pid 30432:tid 30516] [client 4.204.201.44:31195] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4563.php"] [unique_id "advxy_v_BOY8son7cLmSOgAAAI8"]
[Mon Apr 13 03:26:03.760984 2026] [:error] [pid 30431:tid 30479] [client 4.204.201.44:35392] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ddgg.php"] [unique_id "advxy1bSTPssf6SS919-XwAAAEU"]
[Mon Apr 13 03:26:04.188420 2026] [:error] [pid 30430:tid 30470] [client 4.204.201.44:31998] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advxzLn0S0M-vj_lJadCJQAAABc"]
[Mon Apr 13 03:26:04.601928 2026] [:error] [pid 30432:tid 30521] [client 4.204.201.44:31144] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wunaivpl.php"] [unique_id "advxzPv_BOY8son7cLmSPwAAAJQ"]
[Mon Apr 13 03:26:04.607504 2026] [:error] [pid 30431:tid 30488] [client 4.204.201.44:31353] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advxzFbSTPssf6SS919-YQAAAE4"]
[Mon Apr 13 03:26:05.036053 2026] [:error] [pid 30431:tid 30475] [client 4.204.201.44:33261] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advxzVbSTPssf6SS919-YwAAAEE"]
[Mon Apr 13 03:26:05.047927 2026] [:error] [pid 30431:tid 30487] [client 4.204.201.44:30396] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wunaivpl.php"] [unique_id "advxzVbSTPssf6SS919-ZAAAAE0"]
[Mon Apr 13 03:26:05.458774 2026] [:error] [pid 30532:tid 30538] [client 4.204.201.44:35366] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advxzZGQr51YhOFElOsdDwAAAMI"]
[Mon Apr 13 03:26:05.622468 2026] [:error] [pid 30432:tid 30512] [client 4.204.201.44:31230] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wunaivpl.php"] [unique_id "advxzfv_BOY8son7cLmSRgAAAIs"]
[Mon Apr 13 03:26:05.912284 2026] [:error] [pid 30432:tid 30508] [client 4.204.201.44:35343] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advxzfv_BOY8son7cLmSRwAAAIc"]
[Mon Apr 13 03:26:06.142402 2026] [:error] [pid 30532:tid 30536] [client 4.204.201.44:31698] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wunaivpl.php"] [unique_id "advxzpGQr51YhOFElOsdFQAAAMA"]
[Mon Apr 13 03:26:06.331816 2026] [:error] [pid 30431:tid 30486] [client 4.204.201.44:36311] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advxzlbSTPssf6SS919-ZgAAAEw"]
[Mon Apr 13 03:26:06.564230 2026] [:error] [pid 30432:tid 30520] [client 4.204.201.44:30455] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reune.php"] [unique_id "advxzvv_BOY8son7cLmSSQAAAJM"]
[Mon Apr 13 03:26:06.770374 2026] [:error] [pid 30432:tid 30521] [client 4.204.201.44:31965] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advxzvv_BOY8son7cLmSSgAAAJQ"]
[Mon Apr 13 03:26:07.014382 2026] [:error] [pid 30432:tid 30514] [client 4.204.201.44:31687] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reune.php"] [unique_id "advxz_v_BOY8son7cLmSTQAAAI0"]
[Mon Apr 13 03:26:07.202822 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:36303] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advxz5GQr51YhOFElOsdGgAAANI"]
[Mon Apr 13 03:26:07.501659 2026] [:error] [pid 30532:tid 30543] [client 4.204.201.44:29096] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reune.php"] [unique_id "advxz5GQr51YhOFElOsdGwAAAMc"]
[Mon Apr 13 03:26:07.640539 2026] [:error] [pid 30532:tid 30542] [client 4.204.201.44:32534] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pu.php"] [unique_id "advxz5GQr51YhOFElOsdHAAAAMY"]
[Mon Apr 13 03:26:08.097712 2026] [:error] [pid 30532:tid 30545] [client 4.204.201.44:29926] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/reune.php"] [unique_id "advx0JGQr51YhOFElOsdIAAAAMk"]
[Mon Apr 13 03:26:08.106817 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:35438] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pu.php"] [unique_id "advx0JGQr51YhOFElOsdIQAAAMQ"]
[Mon Apr 13 03:26:08.536279 2026] [:error] [pid 30532:tid 30536] [client 4.204.201.44:32552] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pu.php"] [unique_id "advx0JGQr51YhOFElOsdJAAAAMA"]
[Mon Apr 13 03:26:08.733372 2026] [:error] [pid 30532:tid 30557] [client 4.204.201.44:29919] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dw.php"] [unique_id "advx0JGQr51YhOFElOsdJgAAANU"]
[Mon Apr 13 03:26:09.028363 2026] [:error] [pid 30532:tid 30542] [client 4.204.201.44:35370] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pu.php"] [unique_id "advx0ZGQr51YhOFElOsdJwAAAMY"]
[Mon Apr 13 03:26:09.450768 2026] [:error] [pid 30532:tid 30546] [client 4.204.201.44:35347] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/docs.php"] [unique_id "advx0ZGQr51YhOFElOsdKwAAAMo"]
[Mon Apr 13 03:26:09.502440 2026] [:error] [pid 30431:tid 30479] [client 4.204.201.44:30342] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dw.php"] [unique_id "advx0VbSTPssf6SS919-ZwAAAEU"]
[Mon Apr 13 03:26:09.889295 2026] [:error] [pid 30431:tid 30482] [client 4.204.201.44:36277] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/docs.php"] [unique_id "advx0VbSTPssf6SS919-aQAAAEg"]
[Mon Apr 13 03:26:10.316055 2026] [:error] [pid 30432:tid 30512] [client 4.204.201.44:36321] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/docs.php"] [unique_id "advx0vv_BOY8son7cLmSYQAAAIs"]
[Mon Apr 13 03:26:10.601515 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:30341] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dw.php"] [unique_id "advx0pGQr51YhOFElOsdLgAAAMU"]
[Mon Apr 13 03:26:10.779851 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:32574] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/docs.php"] [unique_id "advx0pGQr51YhOFElOsdMAAAANQ"]
[Mon Apr 13 03:26:11.268559 2026] [:error] [pid 30532:tid 30542] [client 4.204.201.44:35362] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/cache.php"] [unique_id "advx05GQr51YhOFElOsdMgAAAMY"]
[Mon Apr 13 03:26:11.688913 2026] [:error] [pid 30532:tid 30547] [client 4.204.201.44:33250] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/cache.php"] [unique_id "advx05GQr51YhOFElOsdNQAAAMs"]
[Mon Apr 13 03:26:12.164619 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:33225] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/cache.php"] [unique_id "advx1JGQr51YhOFElOsdOgAAAMQ"]
[Mon Apr 13 03:26:12.200463 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:31665] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dw.php"] [unique_id "advx1JGQr51YhOFElOsdOwAAAM8"]
[Mon Apr 13 03:26:12.716771 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:31661] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advx1JGQr51YhOFElOsdPgAAAMU"]
[Mon Apr 13 03:26:12.761507 2026] [:error] [pid 30532:tid 30539] [client 4.204.201.44:36317] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/cache.php"] [unique_id "advx1JGQr51YhOFElOsdQAAAAMM"]
[Mon Apr 13 03:26:13.178258 2026] [:error] [pid 30432:tid 30504] [client 4.204.201.44:33263] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "advx1fv_BOY8son7cLmScgAAAIM"]
[Mon Apr 13 03:26:13.336041 2026] [:error] [pid 30532:tid 30547] [client 4.204.201.44:31229] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advx1ZGQr51YhOFElOsdQwAAAMs"]
[Mon Apr 13 03:26:13.615699 2026] [:error] [pid 30432:tid 30508] [client 4.204.201.44:35375] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "advx1fv_BOY8son7cLmSdQAAAIc"]
[Mon Apr 13 03:26:13.989589 2026] [:error] [pid 30432:tid 30524] [client 4.204.201.44:29911] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advx1fv_BOY8son7cLmSeAAAAJc"]
[Mon Apr 13 03:26:14.061359 2026] [:error] [pid 30532:tid 30545] [client 4.204.201.44:31939] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "advx1pGQr51YhOFElOsdRwAAAMk"]
[Mon Apr 13 03:26:14.506796 2026] [:error] [pid 30430:tid 30471] [client 4.204.201.44:35331] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "advx1rn0S0M-vj_lJadCLQAAABg"]
[Mon Apr 13 03:26:14.915056 2026] [:error] [pid 30432:tid 30511] [client 4.204.201.44:30394] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "advx1vv_BOY8son7cLmSfQAAAIo"]
[Mon Apr 13 03:26:14.947926 2026] [:error] [pid 30532:tid 30547] [client 4.204.201.44:35434] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/XX.php"] [unique_id "advx1pGQr51YhOFElOsdTgAAAMs"]
[Mon Apr 13 03:26:15.396636 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:35399] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/XX.php"] [unique_id "advx15GQr51YhOFElOsdUwAAAMQ"]
[Mon Apr 13 03:26:15.810527 2026] [:error] [pid 30532:tid 30539] [client 4.204.201.44:31684] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellx.php"] [unique_id "advx15GQr51YhOFElOsdVQAAAMM"]
[Mon Apr 13 03:26:15.898351 2026] [:error] [pid 30532:tid 30546] [client 4.204.201.44:33233] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/XX.php"] [unique_id "advx15GQr51YhOFElOsdVgAAAMo"]
[Mon Apr 13 03:26:16.293785 2026] [:error] [pid 30430:tid 30469] [client 4.204.201.44:31205] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellx.php"] [unique_id "advx2Ln0S0M-vj_lJadCLgAAABY"]
[Mon Apr 13 03:26:16.315238 2026] [:error] [pid 30430:tid 30454] [client 4.204.201.44:35453] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/XX.php"] [unique_id "advx2Ln0S0M-vj_lJadCLwAAAAc"]
[Mon Apr 13 03:26:16.727757 2026] [:error] [pid 30432:tid 30520] [client 4.204.201.44:32567] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php/sts.php"] [unique_id "advx2Pv_BOY8son7cLmSiwAAAJM"]
[Mon Apr 13 03:26:16.833580 2026] [:error] [pid 30532:tid 30542] [client 4.204.201.44:31644] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellx.php"] [unique_id "advx2JGQr51YhOFElOsdWQAAAMY"]
[Mon Apr 13 03:26:17.167135 2026] [:error] [pid 30431:tid 30497] [client 4.204.201.44:35453] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php/sts.php"] [unique_id "advx2VbSTPssf6SS919-agAAAFc"]
[Mon Apr 13 03:26:17.276088 2026] [:error] [pid 30532:tid 30543] [client 4.204.201.44:29133] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellx.php"] [unique_id "advx2ZGQr51YhOFElOsdXAAAAMc"]
[Mon Apr 13 03:26:17.582417 2026] [:error] [pid 30432:tid 30517] [client 4.204.201.44:36344] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php/sts.php"] [unique_id "advx2fv_BOY8son7cLmSjgAAAJA"]
[Mon Apr 13 03:26:18.045518 2026] [:error] [pid 30532:tid 30537] [client 4.204.201.44:36259] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php/sts.php"] [unique_id "advx2pGQr51YhOFElOsdYAAAAME"]
[Mon Apr 13 03:26:18.296798 2026] [:error] [pid 30532:tid 30555] [client 4.204.201.44:31201] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/l.php"] [unique_id "advx2pGQr51YhOFElOsdYgAAANM"]
[Mon Apr 13 03:26:18.468103 2026] [:error] [pid 30432:tid 30509] [client 4.204.201.44:36246] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advx2vv_BOY8son7cLmSlgAAAIg"]
[Mon Apr 13 03:26:18.884545 2026] [:error] [pid 30532:tid 30560] [client 4.204.201.44:35334] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advx2pGQr51YhOFElOsdZQAAANg"]
[Mon Apr 13 03:26:19.272909 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:30459] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/l.php"] [unique_id "advx25GQr51YhOFElOsdaQAAANI"]
[Mon Apr 13 03:26:19.396668 2026] [:error] [pid 30432:tid 30518] [client 4.204.201.44:33240] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advx2_v_BOY8son7cLmSmQAAAJE"]
[Mon Apr 13 03:26:19.807957 2026] [:error] [pid 30532:tid 30559] [client 4.204.201.44:36247] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advx25GQr51YhOFElOsdbAAAANc"]
[Mon Apr 13 03:26:20.232549 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:31323] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/owlmailer.php"] [unique_id "advx3JGQr51YhOFElOsdcAAAAM8"]
[Mon Apr 13 03:26:20.752394 2026] [:error] [pid 30431:tid 30477] [client 4.204.201.44:35390] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/owlmailer.php"] [unique_id "advx3FbSTPssf6SS919-bwAAAEM"]
[Mon Apr 13 03:26:20.937086 2026] [:error] [pid 30431:tid 30478] [client 4.204.201.44:30438] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/l.php"] [unique_id "advx3FbSTPssf6SS919-cAAAAEQ"]
[Mon Apr 13 03:26:21.250129 2026] [:error] [pid 30431:tid 30495] [client 4.204.201.44:31878] File does not exist: /usr/local/apache/htdocs/suspended-page/owlmailer.php
[Mon Apr 13 03:26:21.458575 2026] [:error] [pid 30431:tid 30484] [client 4.204.201.44:31878] File does not exist: /usr/local/apache/htdocs/suspended-page/F0x.php
[Mon Apr 13 03:26:21.668004 2026] [:error] [pid 30431:tid 30490] [client 4.204.201.44:31878] File does not exist: /usr/local/apache/htdocs/suspended-page/rlpc.php
[Mon Apr 13 03:26:22.107058 2026] [:error] [pid 30431:tid 30480] [client 4.204.201.44:31646] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Mon Apr 13 03:26:22.318194 2026] [:error] [pid 30431:tid 30488] [client 4.204.201.44:31646] File does not exist: /usr/local/apache/htdocs/suspended-page/lnexugel.php
[Mon Apr 13 03:26:22.529044 2026] [:error] [pid 30431:tid 30475] [client 4.204.201.44:31646] File does not exist: /usr/local/apache/htdocs/suspended-page/online.php
[Mon Apr 13 03:26:22.737880 2026] [:error] [pid 30431:tid 30497] [client 4.204.201.44:31646] File does not exist: /usr/local/apache/htdocs/suspended-page/up-kon.php
[Mon Apr 13 03:26:22.947305 2026] [:error] [pid 30431:tid 30492] [client 4.204.201.44:31646] File does not exist: /usr/local/apache/htdocs/suspended-page/word.php
[Mon Apr 13 03:26:23.507819 2026] [:error] [pid 30431:tid 30491] [client 4.204.201.44:31878] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "advx31bSTPssf6SS919-gAAAAFE"]
[Mon Apr 13 03:26:23.521192 2026] [:error] [pid 30431:tid 30498] [client 4.204.201.44:31646] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jcsonquo.php"] [unique_id "advx31bSTPssf6SS919-gQAAAFg"]
[Mon Apr 13 03:26:23.919342 2026] [:error] [pid 30431:tid 30477] [client 4.204.201.44:33264] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "advx31bSTPssf6SS919-gwAAAEM"]
[Mon Apr 13 03:26:24.006111 2026] [:error] [pid 30532:tid 30544] [client 4.204.201.44:30372] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jcsonquo.php"] [unique_id "advx4JGQr51YhOFElOsdeAAAAMg"]
[Mon Apr 13 03:26:24.355779 2026] [:error] [pid 30532:tid 30557] [client 4.204.201.44:32528] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "advx4JGQr51YhOFElOsdeQAAANU"]
[Mon Apr 13 03:26:24.435823 2026] [:error] [pid 30532:tid 30543] [client 4.204.201.44:30361] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jcsonquo.php"] [unique_id "advx4JGQr51YhOFElOsdewAAAMc"]
[Mon Apr 13 03:26:24.769669 2026] [:error] [pid 30432:tid 30523] [client 4.204.201.44:35437] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "advx4Pv_BOY8son7cLmSnwAAAJY"]
[Mon Apr 13 03:26:24.913938 2026] [:error] [pid 30432:tid 30509] [client 4.204.201.44:30442] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jcsonquo.php"] [unique_id "advx4Pv_BOY8son7cLmSoAAAAIg"]
[Mon Apr 13 03:26:25.203000 2026] [:error] [pid 30432:tid 30504] [client 4.204.201.44:35442] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ran.php"] [unique_id "advx4fv_BOY8son7cLmSoQAAAIM"]
[Mon Apr 13 03:26:25.450753 2026] [:error] [pid 30432:tid 30510] [client 4.204.201.44:31738] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "advx4fv_BOY8son7cLmSowAAAIk"]
[Mon Apr 13 03:26:25.630733 2026] [:error] [pid 30431:tid 30474] [client 4.204.201.44:35349] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ran.php"] [unique_id "advx4VbSTPssf6SS919-hgAAAEA"]
[Mon Apr 13 03:26:25.919452 2026] [:error] [pid 30532:tid 30559] [client 4.204.201.44:29061] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "advx4ZGQr51YhOFElOsdfQAAANc"]
[Mon Apr 13 03:26:26.061880 2026] [:error] [pid 30532:tid 30546] [client 4.204.201.44:33238] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ran.php"] [unique_id "advx4pGQr51YhOFElOsdfgAAAMo"]
[Mon Apr 13 03:26:26.430826 2026] [:error] [pid 30431:tid 30488] [client 4.204.201.44:29103] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "advx4lbSTPssf6SS919-igAAAE4"]
[Mon Apr 13 03:26:26.510129 2026] [:error] [pid 30430:tid 30464] [client 4.204.201.44:35411] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ran.php"] [unique_id "advx4rn0S0M-vj_lJadCOgAAABE"]
[Mon Apr 13 03:26:26.858961 2026] [:error] [pid 30430:tid 30453] [client 4.204.201.44:31668] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/termps.php"] [unique_id "advx4rn0S0M-vj_lJadCOwAAAAY"]
[Mon Apr 13 03:26:26.930640 2026] [:error] [pid 30432:tid 30525] [client 4.204.201.44:36240] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k90.php"] [unique_id "advx4vv_BOY8son7cLmSpQAAAJg"]
[Mon Apr 13 03:26:27.290860 2026] [:error] [pid 30431:tid 30475] [client 4.204.201.44:30429] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advx41bSTPssf6SS919-jAAAAEE"]
[Mon Apr 13 03:26:27.377269 2026] [:error] [pid 30431:tid 30483] [client 4.204.201.44:36286] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k90.php"] [unique_id "advx41bSTPssf6SS919-jQAAAEk"]
[Mon Apr 13 03:26:27.757377 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:29894] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advx45GQr51YhOFElOsdhwAAAMQ"]
[Mon Apr 13 03:26:28.080457 2026] [:error] [pid 30532:tid 30545] [client 4.204.201.44:35414] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k90.php"] [unique_id "advx5JGQr51YhOFElOsdiAAAAMk"]
[Mon Apr 13 03:26:28.632854 2026] [:error] [pid 30431:tid 30487] [client 4.204.201.44:31626] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advx5FbSTPssf6SS919-kAAAAE0"]
[Mon Apr 13 03:26:28.646053 2026] [:error] [pid 30431:tid 30495] [client 4.204.201.44:36276] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k90.php"] [unique_id "advx5FbSTPssf6SS919-kQAAAFU"]
[Mon Apr 13 03:26:29.114789 2026] [:error] [pid 30532:tid 30559] [client 4.204.201.44:31894] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/taff.php"] [unique_id "advx5ZGQr51YhOFElOsdigAAANc"]
[Mon Apr 13 03:26:29.557882 2026] [:error] [pid 30432:tid 30517] [client 4.204.201.44:35377] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/taff.php"] [unique_id "advx5fv_BOY8son7cLmSrAAAAJA"]
[Mon Apr 13 03:26:29.776558 2026] [:error] [pid 30432:tid 30507] [client 4.204.201.44:31723] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advx5fv_BOY8son7cLmSrQAAAIY"]
[Mon Apr 13 03:26:29.972892 2026] [:error] [pid 30532:tid 30542] [client 4.204.201.44:36790] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/taff.php"] [unique_id "advx5ZGQr51YhOFElOsdkAAAAMY"]
[Mon Apr 13 03:26:30.424853 2026] [:error] [pid 30532:tid 30539] [client 4.204.201.44:36313] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/taff.php"] [unique_id "advx5pGQr51YhOFElOsdkwAAAMM"]
[Mon Apr 13 03:26:30.769562 2026] [:error] [pid 30532:tid 30550] [client 4.204.201.44:29938] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advx5pGQr51YhOFElOsdlAAAAM4"]
[Mon Apr 13 03:26:30.841526 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:35416] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "advx5pGQr51YhOFElOsdlQAAANI"]
[Mon Apr 13 03:26:31.251634 2026] [:error] [pid 30432:tid 30519] [client 4.204.201.44:36795] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "advx5_v_BOY8son7cLmStAAAAJI"]
[Mon Apr 13 03:26:31.497281 2026] [:error] [pid 30532:tid 30537] [client 4.204.201.44:31173] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advx55GQr51YhOFElOsdmQAAAME"]
[Mon Apr 13 03:26:31.673703 2026] [:error] [pid 30532:tid 30559] [client 4.204.201.44:35407] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "advx55GQr51YhOFElOsdmgAAANc"]
[Mon Apr 13 03:26:32.020780 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:31670] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advx6JGQr51YhOFElOsdnwAAANY"]
[Mon Apr 13 03:26:32.095795 2026] [:error] [pid 30532:tid 30539] [client 4.204.201.44:36238] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "advx6JGQr51YhOFElOsdoAAAAMM"]
[Mon Apr 13 03:26:32.513869 2026] [:error] [pid 30431:tid 30495] [client 4.204.201.44:36287] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/133.php"] [unique_id "advx6FbSTPssf6SS919-lgAAAFU"]
[Mon Apr 13 03:26:32.584961 2026] [:error] [pid 30430:tid 30455] [client 4.204.201.44:31691] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advx6Ln0S0M-vj_lJadCRAAAAAg"]
[Mon Apr 13 03:26:32.926109 2026] [:error] [pid 30430:tid 30456] [client 4.204.201.44:36803] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/133.php"] [unique_id "advx6Ln0S0M-vj_lJadCRgAAAAk"]
[Mon Apr 13 03:26:33.138831 2026] [:error] [pid 30432:tid 30521] [client 4.204.201.44:31204] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rin.php"] [unique_id "advx6fv_BOY8son7cLmStwAAAJQ"]
[Mon Apr 13 03:26:33.336891 2026] [:error] [pid 30430:tid 30462] [client 4.204.201.44:36852] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/133.php"] [unique_id "advx6bn0S0M-vj_lJadCRwAAAA8"]
[Mon Apr 13 03:26:33.771173 2026] [:error] [pid 30430:tid 30464] [client 4.204.201.44:36255] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/133.php"] [unique_id "advx6bn0S0M-vj_lJadCSAAAABE"]
[Mon Apr 13 03:26:33.917025 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:28659] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rin.php"] [unique_id "advx6ZGQr51YhOFElOsdrAAAAMU"]
[Mon Apr 13 03:26:34.236560 2026] [:error] [pid 30432:tid 30504] [client 4.204.201.44:36305] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ssxsl.php"] [unique_id "advx6vv_BOY8son7cLmSuQAAAIM"]
[Mon Apr 13 03:26:34.573813 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:31182] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rin.php"] [unique_id "advx6pGQr51YhOFElOsdsQAAAM8"]
[Mon Apr 13 03:26:34.668429 2026] [:error] [pid 30430:tid 30447] [client 4.204.201.44:36300] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ssxsl.php"] [unique_id "advx6rn0S0M-vj_lJadCSQAAAAA"]
[Mon Apr 13 03:26:35.098932 2026] [:error] [pid 30430:tid 30471] [client 4.204.201.44:36289] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ssxsl.php"] [unique_id "advx67n0S0M-vj_lJadCSgAAABg"]
[Mon Apr 13 03:26:35.651284 2026] [:error] [pid 30532:tid 30544] [client 4.204.201.44:36849] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ssxsl.php"] [unique_id "advx65GQr51YhOFElOsdtQAAAMg"]
[Mon Apr 13 03:26:36.125727 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:35420] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/AE5VAL.php"] [unique_id "advx7JGQr51YhOFElOsdugAAANI"]
[Mon Apr 13 03:26:36.591911 2026] [:error] [pid 30432:tid 30520] [client 4.204.201.44:33263] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/AE5VAL.php"] [unique_id "advx7Pv_BOY8son7cLmSvQAAAJM"]
[Mon Apr 13 03:26:36.650985 2026] [:error] [pid 30432:tid 30501] [client 4.204.201.44:29889] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rin.php"] [unique_id "advx7Pv_BOY8son7cLmSvgAAAIA"]
[Mon Apr 13 03:26:37.048141 2026] [:error] [pid 30432:tid 30508] [client 4.204.201.44:36765] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/AE5VAL.php"] [unique_id "advx7fv_BOY8son7cLmSwQAAAIc"]
[Mon Apr 13 03:26:37.459181 2026] [:error] [pid 30432:tid 30522] [client 4.204.201.44:36820] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/AE5VAL.php"] [unique_id "advx7fv_BOY8son7cLmSxAAAAJU"]
[Mon Apr 13 03:26:37.870380 2026] [:error] [pid 30430:tid 30468] [client 4.204.201.44:36316] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gold.php"] [unique_id "advx7bn0S0M-vj_lJadCTQAAABU"]
[Mon Apr 13 03:26:38.004838 2026] [:error] [pid 30431:tid 30478] [client 4.204.201.44:30376] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packages.php"] [unique_id "advx7lbSTPssf6SS919-mQAAAEQ"]
[Mon Apr 13 03:26:38.364851 2026] [:error] [pid 30430:tid 30457] [client 4.204.201.44:36758] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gold.php"] [unique_id "advx7rn0S0M-vj_lJadCTgAAAAo"]
[Mon Apr 13 03:26:38.869165 2026] [:error] [pid 30532:tid 30560] [client 4.204.201.44:36782] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gold.php"] [unique_id "advx7pGQr51YhOFElOsdvgAAANg"]
[Mon Apr 13 03:26:39.321653 2026] [:error] [pid 30430:tid 30455] [client 4.204.201.44:36841] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gold.php"] [unique_id "advx77n0S0M-vj_lJadCUQAAAAg"]
[Mon Apr 13 03:26:40.044315 2026] [:error] [pid 30532:tid 30542] [client 4.204.201.44:36339] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gely.php"] [unique_id "advx8JGQr51YhOFElOsdxAAAAMY"]
[Mon Apr 13 03:26:40.056388 2026] [:error] [pid 30532:tid 30546] [client 4.204.201.44:30369] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packages.php"] [unique_id "advx8JGQr51YhOFElOsdxQAAAMo"]
[Mon Apr 13 03:26:40.497943 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:36283] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gely.php"] [unique_id "advx8JGQr51YhOFElOsdxgAAAM8"]
[Mon Apr 13 03:26:40.853766 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:31701] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packages.php"] [unique_id "advx8JGQr51YhOFElOsdyQAAAMQ"]
[Mon Apr 13 03:26:40.953897 2026] [:error] [pid 30532:tid 30557] [client 4.204.201.44:35391] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gely.php"] [unique_id "advx8JGQr51YhOFElOsdygAAANU"]
[Mon Apr 13 03:26:41.428935 2026] [:error] [pid 30532:tid 30536] [client 4.204.201.44:36245] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gely.php"] [unique_id "advx8ZGQr51YhOFElOsdzQAAAMA"]
[Mon Apr 13 03:26:41.794622 2026] [:error] [pid 30430:tid 30471] [client 4.204.201.44:29893] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packages.php"] [unique_id "advx8bn0S0M-vj_lJadCVgAAABg"]
[Mon Apr 13 03:26:42.244381 2026] [:error] [pid 30430:tid 30451] [client 4.204.201.44:31651] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi.php"] [unique_id "advx8rn0S0M-vj_lJadCWQAAAAQ"]
[Mon Apr 13 03:26:42.264333 2026] [:error] [pid 30431:tid 30480] [client 4.204.201.44:36241] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advx8lbSTPssf6SS919-mgAAAEY"]
[Mon Apr 13 03:26:42.744008 2026] [:error] [pid 30532:tid 30546] [client 4.204.201.44:28656] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi.php"] [unique_id "advx8pGQr51YhOFElOsd0wAAAMo"]
[Mon Apr 13 03:26:42.867875 2026] [:error] [pid 30430:tid 30460] [client 4.204.201.44:35396] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advx8rn0S0M-vj_lJadCXQAAAA0"]
[Mon Apr 13 03:26:43.235892 2026] [:error] [pid 30430:tid 30467] [client 4.204.201.44:30463] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi.php"] [unique_id "advx87n0S0M-vj_lJadCXwAAABQ"]
[Mon Apr 13 03:26:43.309791 2026] [:error] [pid 30430:tid 30463] [client 4.204.201.44:33173] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advx87n0S0M-vj_lJadCYAAAABA"]
[Mon Apr 13 03:26:43.945879 2026] [:error] [pid 30432:tid 30505] [client 4.204.201.44:30383] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi.php"] [unique_id "advx8_v_BOY8son7cLmS1gAAAIQ"]
[Mon Apr 13 03:26:43.973205 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:36780] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advx85GQr51YhOFElOsd1gAAAMQ"]
[Mon Apr 13 03:26:44.770812 2026] [:error] [pid 30431:tid 30492] [client 4.204.201.44:31700] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vbv.php"] [unique_id "advx9FbSTPssf6SS919-nwAAAFI"]
[Mon Apr 13 03:26:44.824757 2026] [:error] [pid 30430:tid 30448] [client 4.204.201.44:35402] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagafif.php"] [unique_id "advx9Ln0S0M-vj_lJadCYwAAAAE"]
[Mon Apr 13 03:26:45.437198 2026] [:error] [pid 30432:tid 30525] [client 4.204.201.44:36828] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagafif.php"] [unique_id "advx9fv_BOY8son7cLmS2wAAAJg"]
[Mon Apr 13 03:26:45.998036 2026] [:error] [pid 30432:tid 30504] [client 4.204.201.44:36273] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagafif.php"] [unique_id "advx9fv_BOY8son7cLmS3AAAAIM"]
[Mon Apr 13 03:26:46.069547 2026] [:error] [pid 30432:tid 30522] [client 4.204.201.44:31157] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vbv.php"] [unique_id "advx9vv_BOY8son7cLmS3QAAAJU"]
[Mon Apr 13 03:26:46.431295 2026] [:error] [pid 30431:tid 30491] [client 4.204.201.44:36772] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagafif.php"] [unique_id "advx9lbSTPssf6SS919-oQAAAFE"]
[Mon Apr 13 03:26:46.559687 2026] [:error] [pid 30431:tid 30498] [client 4.204.201.44:31141] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vbv.php"] [unique_id "advx9lbSTPssf6SS919-ogAAAFg"]
[Mon Apr 13 03:26:46.881546 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:35405] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trc.php"] [unique_id "advx9pGQr51YhOFElOsd3AAAANY"]
[Mon Apr 13 03:26:47.310403 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:36340] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trc.php"] [unique_id "advx95GQr51YhOFElOsd3QAAAMU"]
[Mon Apr 13 03:26:47.590235 2026] [:error] [pid 30532:tid 30550] [client 4.204.201.44:31708] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vbv.php"] [unique_id "advx95GQr51YhOFElOsd3wAAAM4"]
[Mon Apr 13 03:26:48.140934 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:35431] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trc.php"] [unique_id "advx-JGQr51YhOFElOsd4QAAANQ"]
[Mon Apr 13 03:26:48.504824 2026] [:error] [pid 30431:tid 30478] [client 4.204.201.44:28562] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "advx-FbSTPssf6SS919-qAAAAEQ"]
[Mon Apr 13 03:26:49.070625 2026] [:error] [pid 30431:tid 30480] [client 4.204.201.44:30344] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "advx-VbSTPssf6SS919-qwAAAEY"]
[Mon Apr 13 03:26:49.215396 2026] [:error] [pid 30430:tid 30457] [client 4.204.201.44:36745] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trc.php"] [unique_id "advx-bn0S0M-vj_lJadCZgAAAAo"]
[Mon Apr 13 03:26:49.738102 2026] [:error] [pid 30430:tid 30455] [client 4.204.201.44:30420] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "advx-bn0S0M-vj_lJadCaAAAAAg"]
[Mon Apr 13 03:26:50.033420 2026] [:error] [pid 30432:tid 30517] [client 4.204.201.44:32583] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tesla1.php"] [unique_id "advx-vv_BOY8son7cLmS5AAAAJA"]
[Mon Apr 13 03:26:50.457001 2026] [:error] [pid 30432:tid 30515] [client 4.204.201.44:33196] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tesla1.php"] [unique_id "advx-vv_BOY8son7cLmS5QAAAI4"]
[Mon Apr 13 03:26:50.904338 2026] [:error] [pid 30430:tid 30466] [client 4.204.201.44:28618] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "advx-rn0S0M-vj_lJadCbgAAABM"]
[Mon Apr 13 03:26:51.351641 2026] [:error] [pid 30432:tid 30512] [client 4.204.201.44:31333] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tesla1.php"] [unique_id "advx-_v_BOY8son7cLmS5gAAAIs"]
[Mon Apr 13 03:26:51.582010 2026] [:error] [pid 30432:tid 30504] [client 4.204.201.44:30381] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moderation.php"] [unique_id "advx-_v_BOY8son7cLmS6AAAAIM"]
[Mon Apr 13 03:26:52.226220 2026] [:error] [pid 30430:tid 30459] [client 4.204.201.44:35351] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tesla1.php"] [unique_id "advx_Ln0S0M-vj_lJadCcQAAAAw"]
[Mon Apr 13 03:26:52.385774 2026] [:error] [pid 30431:tid 30478] [client 4.204.201.44:30411] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moderation.php"] [unique_id "advx_FbSTPssf6SS919-uQAAAEQ"]
[Mon Apr 13 03:26:52.967946 2026] [:error] [pid 30431:tid 30488] [client 4.204.201.44:36340] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aks.php"] [unique_id "advx_FbSTPssf6SS919-vgAAAE4"]
[Mon Apr 13 03:26:52.977762 2026] [:error] [pid 30431:tid 30485] [client 4.204.201.44:30339] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moderation.php"] [unique_id "advx_FbSTPssf6SS919-vwAAAEs"]
[Mon Apr 13 03:26:53.411180 2026] [:error] [pid 30432:tid 30521] [client 4.204.201.44:36234] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aks.php"] [unique_id "advx_fv_BOY8son7cLmS6gAAAJQ"]
[Mon Apr 13 03:26:53.626644 2026] [:error] [pid 30431:tid 30493] [client 4.204.201.44:31727] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moderation.php"] [unique_id "advx_VbSTPssf6SS919-wwAAAFM"]
[Mon Apr 13 03:26:53.847707 2026] [:error] [pid 30431:tid 30492] [client 4.204.201.44:36224] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aks.php"] [unique_id "advx_VbSTPssf6SS919-xQAAAFI"]
[Mon Apr 13 03:26:54.223451 2026] [:error] [pid 30430:tid 30454] [client 4.204.201.44:31686] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple-shell.php"] [unique_id "advx_rn0S0M-vj_lJadCdQAAAAc"]
[Mon Apr 13 03:26:54.342095 2026] [:error] [pid 30432:tid 30516] [client 4.204.201.44:36784] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aks.php"] [unique_id "advx_vv_BOY8son7cLmS7QAAAI8"]
[Mon Apr 13 03:26:54.902516 2026] [:error] [pid 30532:tid 30537] [client 4.204.201.44:31902] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/l.php"] [unique_id "advx_pGQr51YhOFElOsd4gAAAME"]
[Mon Apr 13 03:26:55.018086 2026] [:error] [pid 30430:tid 30460] [client 4.204.201.44:31162] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple-shell.php"] [unique_id "advx_7n0S0M-vj_lJadCdwAAAA0"]
[Mon Apr 13 03:26:55.322887 2026] [:error] [pid 30430:tid 30469] [client 4.204.201.44:36858] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/l.php"] [unique_id "advx_7n0S0M-vj_lJadCeQAAABY"]
[Mon Apr 13 03:26:55.742584 2026] [:error] [pid 30431:tid 30478] [client 4.204.201.44:35348] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/l.php"] [unique_id "advx_1bSTPssf6SS919-ygAAAEQ"]
[Mon Apr 13 03:26:55.817433 2026] [:error] [pid 30430:tid 30461] [client 4.204.201.44:31636] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple-shell.php"] [unique_id "advx_7n0S0M-vj_lJadCfQAAAA4"]
[Mon Apr 13 03:26:56.300983 2026] [:error] [pid 30532:tid 30555] [client 4.204.201.44:36834] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/l.php"] [unique_id "advyAJGQr51YhOFElOsd4wAAANM"]
[Mon Apr 13 03:26:56.375870 2026] [:error] [pid 30430:tid 30459] [client 4.204.201.44:31142] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple-shell.php"] [unique_id "advyALn0S0M-vj_lJadCfwAAAAw"]
[Mon Apr 13 03:26:56.738120 2026] [:error] [pid 30431:tid 30488] [client 4.204.201.44:36850] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ase.php"] [unique_id "advyAFbSTPssf6SS919-zQAAAE4"]
[Mon Apr 13 03:26:57.166556 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:30401] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advyAZGQr51YhOFElOsd5AAAANI"]
[Mon Apr 13 03:26:57.172590 2026] [:error] [pid 30432:tid 30501] [client 4.204.201.44:31874] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ase.php"] [unique_id "advyAfv_BOY8son7cLmS7wAAAIA"]
[Mon Apr 13 03:26:57.645979 2026] [:error] [pid 30532:tid 30560] [client 4.204.201.44:36810] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ase.php"] [unique_id "advyAZGQr51YhOFElOsd6AAAANg"]
[Mon Apr 13 03:26:57.760935 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:31212] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advyAZGQr51YhOFElOsd6QAAANY"]
[Mon Apr 13 03:26:58.107321 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:36746] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ase.php"] [unique_id "advyApGQr51YhOFElOsd7AAAAMU"]
[Mon Apr 13 03:26:58.460973 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:31679] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advyApGQr51YhOFElOsd7wAAANQ"]
[Mon Apr 13 03:26:58.553440 2026] [:error] [pid 30532:tid 30543] [client 4.204.201.44:36239] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktgob.php"] [unique_id "advyApGQr51YhOFElOsd8QAAAMc"]
[Mon Apr 13 03:26:58.941476 2026] [:error] [pid 30532:tid 30539] [client 4.204.201.44:30379] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/dist/vendor/about.php"] [unique_id "advyApGQr51YhOFElOsd8gAAAMM"]
[Mon Apr 13 03:26:58.983138 2026] [:error] [pid 30432:tid 30511] [client 4.204.201.44:36249] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktgob.php"] [unique_id "advyAvv_BOY8son7cLmS8QAAAIo"]
[Mon Apr 13 03:26:59.454928 2026] [:error] [pid 30432:tid 30512] [client 4.204.201.44:31262] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktgob.php"] [unique_id "advyA_v_BOY8son7cLmS8wAAAIs"]
[Mon Apr 13 03:26:59.566823 2026] [:error] [pid 30432:tid 30504] [client 4.204.201.44:31177] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2Vu80QG.php"] [unique_id "advyA_v_BOY8son7cLmS9AAAAIM"]
[Mon Apr 13 03:26:59.872307 2026] [:error] [pid 30432:tid 30522] [client 4.204.201.44:36330] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktgob.php"] [unique_id "advyA_v_BOY8son7cLmS9wAAAJU"]
[Mon Apr 13 03:27:00.269210 2026] [:error] [pid 30532:tid 30537] [client 4.204.201.44:30387] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2Vu80QG.php"] [unique_id "advyBJGQr51YhOFElOsd9QAAAME"]
[Mon Apr 13 03:27:00.291689 2026] [:error] [pid 30532:tid 30555] [client 4.204.201.44:35403] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "advyBJGQr51YhOFElOsd9gAAANM"]
[Mon Apr 13 03:27:00.748537 2026] [:error] [pid 30431:tid 30489] [client 4.204.201.44:33214] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "advyBFbSTPssf6SS919-0gAAAE8"]
[Mon Apr 13 03:27:01.183812 2026] [:error] [pid 30431:tid 30496] [client 4.204.201.44:36324] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "advyBVbSTPssf6SS919-0wAAAFY"]
[Mon Apr 13 03:27:01.225039 2026] [:error] [pid 30532:tid 30548] [client 4.204.201.44:31135] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2Vu80QG.php"] [unique_id "advyBZGQr51YhOFElOsd-wAAAMw"]
[Mon Apr 13 03:27:01.600554 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:36336] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "advyBZGQr51YhOFElOsd_QAAANY"]
[Mon Apr 13 03:27:01.952008 2026] [:error] [pid 30431:tid 30486] [client 4.204.201.44:31154] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2Vu80QG.php"] [unique_id "advyBVbSTPssf6SS919-1AAAAEw"]
[Mon Apr 13 03:27:02.012482 2026] [:error] [pid 30532:tid 30538] [client 4.204.201.44:36833] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "advyBpGQr51YhOFElOsd_wAAAMI"]
[Mon Apr 13 03:27:02.440346 2026] [:error] [pid 30431:tid 30493] [client 4.204.201.44:36269] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "advyBlbSTPssf6SS919-1wAAAFM"]
[Mon Apr 13 03:27:02.618289 2026] [:error] [pid 30430:tid 30471] [client 4.204.201.44:28596] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bsr.php"] [unique_id "advyBrn0S0M-vj_lJadChQAAABg"]
[Mon Apr 13 03:27:02.867112 2026] [:error] [pid 30430:tid 30465] [client 4.204.201.44:36770] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "advyBrn0S0M-vj_lJadChgAAABI"]
[Mon Apr 13 03:27:03.334714 2026] [:error] [pid 30430:tid 30455] [client 4.204.201.44:35380] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "advyB7n0S0M-vj_lJadCigAAAAg"]
[Mon Apr 13 03:27:03.745902 2026] [:error] [pid 30430:tid 30453] [client 4.204.201.44:36860] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advyB7n0S0M-vj_lJadCjAAAAAY"]
[Mon Apr 13 03:27:03.817072 2026] [:error] [pid 30532:tid 30553] [client 4.204.201.44:31104] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bsr.php"] [unique_id "advyB5GQr51YhOFElOseBwAAANE"]
[Mon Apr 13 03:27:04.156001 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:36258] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advyCJGQr51YhOFElOseCQAAANI"]
[Mon Apr 13 03:27:04.575629 2026] [:error] [pid 30432:tid 30520] [client 4.204.201.44:36742] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advyCPv_BOY8son7cLmS_AAAAJM"]
[Mon Apr 13 03:27:04.641132 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:31630] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bsr.php"] [unique_id "advyCJGQr51YhOFElOseCwAAANY"]
[Mon Apr 13 03:27:05.012905 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:36327] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advyCZGQr51YhOFElOseDwAAAMU"]
[Mon Apr 13 03:27:05.246549 2026] [:error] [pid 30532:tid 30538] [client 4.204.201.44:31131] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bsr.php"] [unique_id "advyCZGQr51YhOFElOseEAAAAMI"]
[Mon Apr 13 03:27:05.426192 2026] [:error] [pid 30532:tid 30550] [client 4.204.201.44:31979] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yunu.php"] [unique_id "advyCZGQr51YhOFElOseEQAAAM4"]
[Mon Apr 13 03:27:05.795884 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:30454] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ans.php"] [unique_id "advyCZGQr51YhOFElOseEgAAAMQ"]
[Mon Apr 13 03:27:05.841427 2026] [:error] [pid 30532:tid 30543] [client 4.204.201.44:36297] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yunu.php"] [unique_id "advyCZGQr51YhOFElOseFAAAAMc"]
[Mon Apr 13 03:27:06.272133 2026] [:error] [pid 30431:tid 30478] [client 4.204.201.44:31154] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ans.php"] [unique_id "advyClbSTPssf6SS919-2wAAAEQ"]
[Mon Apr 13 03:27:06.307684 2026] [:error] [pid 30432:tid 30514] [client 4.204.201.44:36801] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yunu.php"] [unique_id "advyCvv_BOY8son7cLmTAQAAAI0"]
[Mon Apr 13 03:27:06.717194 2026] [:error] [pid 30432:tid 30522] [client 4.204.201.44:33257] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yunu.php"] [unique_id "advyCvv_BOY8son7cLmTAgAAAJU"]
[Mon Apr 13 03:27:06.726556 2026] [:error] [pid 30432:tid 30515] [client 4.204.201.44:30349] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ans.php"] [unique_id "advyCvv_BOY8son7cLmTAwAAAI4"]
[Mon Apr 13 03:27:07.162620 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:36822] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lexy.php"] [unique_id "advyC5GQr51YhOFElOseHAAAAMU"]
[Mon Apr 13 03:27:07.471953 2026] [:error] [pid 30431:tid 30481] [client 4.204.201.44:31124] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ans.php"] [unique_id "advyC1bSTPssf6SS919-3wAAAEc"]
[Mon Apr 13 03:27:07.618230 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:36777] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lexy.php"] [unique_id "advyC5GQr51YhOFElOseHgAAANQ"]
[Mon Apr 13 03:27:08.060711 2026] [:error] [pid 30431:tid 30483] [client 4.204.201.44:29143] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tot.php"] [unique_id "advyDFbSTPssf6SS919-4gAAAEk"]
[Mon Apr 13 03:27:08.067931 2026] [:error] [pid 30431:tid 30477] [client 4.204.201.44:36310] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lexy.php"] [unique_id "advyDFbSTPssf6SS919-4wAAAEM"]
[Mon Apr 13 03:27:08.537828 2026] [:error] [pid 30430:tid 30456] [client 4.204.201.44:36265] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lexy.php"] [unique_id "advyDLn0S0M-vj_lJadCkwAAAAk"]
[Mon Apr 13 03:27:08.768382 2026] [:error] [pid 30431:tid 30480] [client 4.204.201.44:30337] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tot.php"] [unique_id "advyDFbSTPssf6SS919-5AAAAEY"]
[Mon Apr 13 03:27:09.592993 2026] [:error] [pid 30432:tid 30524] [client 4.204.201.44:29869] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tot.php"] [unique_id "advyDfv_BOY8son7cLmTBgAAAJc"]
[Mon Apr 13 03:27:10.273053 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:30393] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tot.php"] [unique_id "advyDpGQr51YhOFElOseJgAAANQ"]
[Mon Apr 13 03:27:10.840373 2026] [:error] [pid 30532:tid 30560] [client 4.204.201.44:31653] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Core-wp.php"] [unique_id "advyDpGQr51YhOFElOseKgAAANg"]
[Mon Apr 13 03:27:11.404040 2026] [:error] [pid 30430:tid 30452] [client 4.204.201.44:30419] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Core-wp.php"] [unique_id "advyD7n0S0M-vj_lJadClwAAAAU"]
[Mon Apr 13 03:27:11.855822 2026] [:error] [pid 30430:tid 30470] [client 4.204.201.44:30357] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Core-wp.php"] [unique_id "advyD7n0S0M-vj_lJadCmgAAABc"]
[Mon Apr 13 03:27:12.727602 2026] [:error] [pid 30431:tid 30476] [client 4.204.201.44:31149] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Core-wp.php"] [unique_id "advyEFbSTPssf6SS919-6QAAAEI"]
[Mon Apr 13 03:27:13.224717 2026] [:error] [pid 30432:tid 30514] [client 4.204.201.44:31716] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/src.php"] [unique_id "advyEfv_BOY8son7cLmTCgAAAI0"]
[Mon Apr 13 03:27:13.885795 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:31108] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/src.php"] [unique_id "advyEZGQr51YhOFElOseMwAAANQ"]
[Mon Apr 13 03:27:14.503748 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:31707] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/src.php"] [unique_id "advyEpGQr51YhOFElOseNgAAANY"]
[Mon Apr 13 03:27:15.029660 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:31622] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/src.php"] [unique_id "advyE5GQr51YhOFElOseOAAAANI"]
[Mon Apr 13 03:27:15.812686 2026] [:error] [pid 30432:tid 30510] [client 4.204.201.44:31196] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/v2.php"] [unique_id "advyE_v_BOY8son7cLmTEAAAAIk"]
[Mon Apr 13 03:27:16.581064 2026] [:error] [pid 30431:tid 30483] [client 4.204.201.44:29839] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/v2.php"] [unique_id "advyFFbSTPssf6SS919-6wAAAEk"]
[Mon Apr 13 03:27:17.125686 2026] [:error] [pid 30432:tid 30514] [client 4.204.201.44:29115] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/v2.php"] [unique_id "advyFfv_BOY8son7cLmTGAAAAI0"]
[Mon Apr 13 03:27:17.619440 2026] [:error] [pid 30431:tid 30482] [client 4.204.201.44:31186] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo/v2.php"] [unique_id "advyFVbSTPssf6SS919-7AAAAEg"]
[Mon Apr 13 03:27:18.094500 2026] [:error] [pid 30532:tid 30552] [client 4.204.201.44:30434] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxd.php"] [unique_id "advyFpGQr51YhOFElOseRQAAANA"]
[Mon Apr 13 03:27:18.885173 2026] [:error] [pid 30532:tid 30550] [client 4.204.201.44:31111] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxd.php"] [unique_id "advyFpGQr51YhOFElOseSgAAAM4"]
[Mon Apr 13 03:27:19.763450 2026] [:error] [pid 30431:tid 30491] [client 4.204.201.44:31674] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxd.php"] [unique_id "advyF1bSTPssf6SS919-8QAAAFE"]
[Mon Apr 13 03:27:20.500343 2026] [:error] [pid 30431:tid 30495] [client 4.204.201.44:28642] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nxd.php"] [unique_id "advyGFbSTPssf6SS919--AAAAFU"]
[Mon Apr 13 03:27:20.984344 2026] [:error] [pid 30431:tid 30496] [client 4.204.201.44:30388] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/payout.php"] [unique_id "advyGFbSTPssf6SS919--gAAAFY"]
[Mon Apr 13 03:27:21.723282 2026] [:error] [pid 30431:tid 30480] [client 4.204.201.44:30413] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/payout.php"] [unique_id "advyGVbSTPssf6SS919-_AAAAEY"]
[Mon Apr 13 03:27:22.661421 2026] [:error] [pid 30431:tid 30482] [client 4.204.201.44:30365] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/payout.php"] [unique_id "advyGlbSTPssf6SS919-_wAAAEg"]
[Mon Apr 13 03:27:23.467296 2026] [:error] [pid 30432:tid 30501] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/payout.php
[Mon Apr 13 03:27:23.695923 2026] [:error] [pid 30432:tid 30508] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/uxquidwa.php
[Mon Apr 13 03:27:24.094705 2026] [:error] [pid 30432:tid 30517] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/combined.php
[Mon Apr 13 03:27:24.303047 2026] [:error] [pid 30432:tid 30516] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/mari.php
[Mon Apr 13 03:27:24.511816 2026] [:error] [pid 30432:tid 30512] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/kodox.php
[Mon Apr 13 03:27:24.748960 2026] [:error] [pid 30432:tid 30505] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/ak47shell.php
[Mon Apr 13 03:27:24.957438 2026] [:error] [pid 30432:tid 30525] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Mon Apr 13 03:27:25.252174 2026] [:error] [pid 30432:tid 30522] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/log404.php
[Mon Apr 13 03:27:25.550554 2026] [:error] [pid 30432:tid 30524] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/wh.php
[Mon Apr 13 03:27:25.850451 2026] [:error] [pid 30432:tid 30511] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/luf.php
[Mon Apr 13 03:27:26.092481 2026] [:error] [pid 30432:tid 30507] [client 4.204.201.44:31621] File does not exist: /usr/local/apache/htdocs/suspended-page/bs2.php
[Mon Apr 13 03:27:26.299119 2026] [:error] [pid 30432:tid 30503] [client 4.204.201.44:31621] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wf.php"] [unique_id "advyHvv_BOY8son7cLmTLQAAAII"]
[Mon Apr 13 03:27:27.039722 2026] [:error] [pid 30430:tid 30458] [client 4.204.201.44:29834] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wf.php"] [unique_id "advyH7n0S0M-vj_lJadCrgAAAAs"]
[Mon Apr 13 03:27:27.483917 2026] [:error] [pid 30431:tid 30490] [client 4.204.201.44:31218] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wf.php"] [unique_id "advyH1bSTPssf6SS919_CQAAAFA"]
[Mon Apr 13 03:27:27.975711 2026] [:error] [pid 30532:tid 30550] [client 4.204.201.44:31107] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wf.php"] [unique_id "advyH5GQr51YhOFElOseWQAAAM4"]
[Mon Apr 13 03:27:28.568322 2026] [:error] [pid 30532:tid 30553] [client 4.204.201.44:31145] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vcard.php"] [unique_id "advyIJGQr51YhOFElOseWwAAANE"]
[Mon Apr 13 03:27:29.017821 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:29085] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vcard.php"] [unique_id "advyIZGQr51YhOFElOseXgAAANI"]
[Mon Apr 13 03:27:29.431170 2026] [:error] [pid 30432:tid 30519] [client 4.204.201.44:30414] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vcard.php"] [unique_id "advyIfv_BOY8son7cLmTMAAAAJI"]
[Mon Apr 13 03:27:29.878079 2026] [:error] [pid 30431:tid 30496] [client 4.204.201.44:30404] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vcard.php"] [unique_id "advyIVbSTPssf6SS919_DwAAAFY"]
[Mon Apr 13 03:27:30.328362 2026] [:error] [pid 30532:tid 30546] [client 4.204.201.44:31733] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/file2.php"] [unique_id "advyIpGQr51YhOFElOseYAAAAMo"]
[Mon Apr 13 03:27:30.982802 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:30355] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/file2.php"] [unique_id "advyIpGQr51YhOFElOseZgAAANQ"]
[Mon Apr 13 03:27:31.404943 2026] [:error] [pid 30532:tid 30553] [client 4.204.201.44:29852] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/file2.php"] [unique_id "advyI5GQr51YhOFElOseagAAANE"]
[Mon Apr 13 03:27:31.865187 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:31199] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/file2.php"] [unique_id "advyI5GQr51YhOFElOsecQAAAM8"]
[Mon Apr 13 03:27:32.309547 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:31692] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ddgg.php"] [unique_id "advyJJGQr51YhOFElOsecwAAANQ"]
[Mon Apr 13 03:27:32.988578 2026] [:error] [pid 30532:tid 30550] [client 4.204.201.44:31107] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ddgg.php"] [unique_id "advyJJGQr51YhOFElOsedgAAAM4"]
[Mon Apr 13 03:27:33.777365 2026] [:error] [pid 30532:tid 30549] [client 4.204.201.44:30336] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ddgg.php"] [unique_id "advyJZGQr51YhOFElOsefAAAAM0"]
[Mon Apr 13 03:27:34.186860 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:28662] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ddgg.php"] [unique_id "advyJpGQr51YhOFElOsefwAAAM8"]
[Mon Apr 13 03:27:34.771947 2026] [:error] [pid 30432:tid 30519] [client 4.204.201.44:30389] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advyJvv_BOY8son7cLmTOQAAAJI"]
[Mon Apr 13 03:27:35.241426 2026] [:error] [pid 30532:tid 30559] [client 4.204.201.44:29132] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advyJ5GQr51YhOFElOsehQAAANc"]
[Mon Apr 13 03:27:35.739783 2026] [:error] [pid 30432:tid 30515] [client 4.204.201.44:29848] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advyJ_v_BOY8son7cLmTPAAAAI4"]
[Mon Apr 13 03:27:36.237760 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:31183] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rc.php7"] [unique_id "advyKJGQr51YhOFElOsejQAAAMU"]
[Mon Apr 13 03:27:36.668909 2026] [:error] [pid 30432:tid 30508] [client 4.204.201.44:29876] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advyKPv_BOY8son7cLmTPwAAAIc"]
[Mon Apr 13 03:27:37.095365 2026] [:error] [pid 30432:tid 30512] [client 4.204.201.44:31192] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advyKfv_BOY8son7cLmTQgAAAIs"]
[Mon Apr 13 03:27:37.593900 2026] [:error] [pid 30431:tid 30475] [client 4.204.201.44:31623] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advyKVbSTPssf6SS919_EgAAAEE"]
[Mon Apr 13 03:27:38.159866 2026] [:error] [pid 30432:tid 30522] [client 4.204.201.44:30430] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/indo.php"] [unique_id "advyKvv_BOY8son7cLmTSAAAAJU"]
[Mon Apr 13 03:27:38.599501 2026] [:error] [pid 30532:tid 30543] [client 4.204.201.44:29910] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pu.php"] [unique_id "advyKpGQr51YhOFElOselQAAAMc"]
[Mon Apr 13 03:27:39.126388 2026] [:error] [pid 30532:tid 30553] [client 4.204.201.44:31642] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pu.php"] [unique_id "advyK5GQr51YhOFElOselwAAANE"]
[Mon Apr 13 03:27:39.537321 2026] [:error] [pid 30432:tid 30516] [client 4.204.201.44:29901] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pu.php"] [unique_id "advyK_v_BOY8son7cLmTTwAAAI8"]
[Mon Apr 13 03:27:40.127141 2026] [:error] [pid 30431:tid 30492] [client 4.204.201.44:29078] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pu.php"] [unique_id "advyLFbSTPssf6SS919_GQAAAFI"]
[Mon Apr 13 03:27:40.721493 2026] [:error] [pid 30432:tid 30507] [client 4.204.201.44:30424] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/docs.php"] [unique_id "advyLPv_BOY8son7cLmTVwAAAIY"]
[Mon Apr 13 03:27:41.280825 2026] [:error] [pid 30432:tid 30521] [client 4.204.201.44:31743] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/docs.php"] [unique_id "advyLfv_BOY8son7cLmTWQAAAJQ"]
[Mon Apr 13 03:27:41.801376 2026] [:error] [pid 30532:tid 30536] [client 4.204.201.44:31175] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/docs.php"] [unique_id "advyLZGQr51YhOFElOsemQAAAMA"]
[Mon Apr 13 03:27:42.233218 2026] [:error] [pid 30431:tid 30478] [client 4.204.201.44:28544] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/docs.php"] [unique_id "advyLlbSTPssf6SS919_HwAAAEQ"]
[Mon Apr 13 03:27:42.659518 2026] [:error] [pid 30431:tid 30485] [client 4.204.201.44:31208] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/cache.php"] [unique_id "advyLlbSTPssf6SS919_IgAAAEs"]
[Mon Apr 13 03:27:43.081315 2026] [:error] [pid 30430:tid 30467] [client 4.204.201.44:31188] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/cache.php"] [unique_id "advyL7n0S0M-vj_lJadCtwAAABQ"]
[Mon Apr 13 03:27:43.681454 2026] [:error] [pid 30431:tid 30493] [client 4.204.201.44:30368] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/cache.php"] [unique_id "advyL1bSTPssf6SS919_JgAAAFM"]
[Mon Apr 13 03:27:44.257331 2026] [:error] [pid 30532:tid 30553] [client 4.204.201.44:30399] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/cache.php"] [unique_id "advyMJGQr51YhOFElOsenQAAANE"]
[Mon Apr 13 03:27:45.068296 2026] [:error] [pid 30430:tid 30452] [client 4.204.201.44:31616] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "advyMbn0S0M-vj_lJadCuwAAAAU"]
[Mon Apr 13 03:27:45.822372 2026] [:error] [pid 30431:tid 30483] [client 4.204.201.44:31170] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "advyMVbSTPssf6SS919_KAAAAEk"]
[Mon Apr 13 03:27:46.543737 2026] [:error] [pid 30532:tid 30552] [client 4.204.201.44:31704] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "advyMpGQr51YhOFElOseogAAANA"]
[Mon Apr 13 03:27:47.112454 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:31206] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "advyM5GQr51YhOFElOsepQAAAM8"]
[Mon Apr 13 03:27:47.959262 2026] [:error] [pid 30431:tid 30491] [client 4.204.201.44:30392] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/XX.php"] [unique_id "advyM1bSTPssf6SS919_LgAAAFE"]
[Mon Apr 13 03:27:48.506792 2026] [:error] [pid 30431:tid 30475] [client 4.204.201.44:31737] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/XX.php"] [unique_id "advyNFbSTPssf6SS919_MQAAAEE"]
[Mon Apr 13 03:27:48.946249 2026] [:error] [pid 30431:tid 30493] [client 4.204.201.44:28550] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/XX.php"] [unique_id "advyNFbSTPssf6SS919_MgAAAFM"]
[Mon Apr 13 03:27:49.395873 2026] [:error] [pid 30430:tid 30462] [client 4.204.201.44:29106] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/XX.php"] [unique_id "advyNbn0S0M-vj_lJadCxAAAAA8"]
[Mon Apr 13 03:27:49.810847 2026] [:error] [pid 30430:tid 30453] [client 4.204.201.44:31194] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php/sts.php"] [unique_id "advyNbn0S0M-vj_lJadCxwAAAAY"]
[Mon Apr 13 03:27:50.292782 2026] [:error] [pid 30430:tid 30470] [client 4.204.201.44:29833] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php/sts.php"] [unique_id "advyNrn0S0M-vj_lJadCygAAABc"]
[Mon Apr 13 03:27:50.848513 2026] [:error] [pid 30532:tid 30557] [client 4.204.201.44:31617] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php/sts.php"] [unique_id "advyNpGQr51YhOFElOseqwAAANU"]
[Mon Apr 13 03:27:51.651716 2026] [:error] [pid 30430:tid 30465] [client 4.204.201.44:31213] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php/sts.php"] [unique_id "advyN7n0S0M-vj_lJadC0gAAABI"]
[Mon Apr 13 03:27:52.723628 2026] [:error] [pid 30431:tid 30484] [client 4.204.201.44:29903] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advyOFbSTPssf6SS919_PQAAAEo"]
[Mon Apr 13 03:27:53.328800 2026] [:error] [pid 30432:tid 30523] [client 4.204.201.44:28565] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advyOfv_BOY8son7cLmTawAAAJY"]
[Mon Apr 13 03:27:54.350497 2026] [:error] [pid 30432:tid 30513] [client 4.204.201.44:28623] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advyOvv_BOY8son7cLmTcAAAAIw"]
[Mon Apr 13 03:27:55.513542 2026] [:error] [pid 30431:tid 30494] [client 4.204.201.44:29168] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/cloud.php"] [unique_id "advyO1bSTPssf6SS919_QAAAAFQ"]
[Mon Apr 13 03:27:56.577876 2026] [:error] [pid 30431:tid 30482] [client 4.204.201.44:30415] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/owlmailer.php"] [unique_id "advyPFbSTPssf6SS919_QgAAAEg"]
[Mon Apr 13 03:27:57.100197 2026] [:error] [pid 30432:tid 30509] [client 4.204.201.44:28555] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/owlmailer.php"] [unique_id "advyPfv_BOY8son7cLmTeQAAAIg"]
[Mon Apr 13 03:27:57.533214 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:29920] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/owlmailer.php"] [unique_id "advyPZGQr51YhOFElOserwAAANY"]
[Mon Apr 13 03:27:58.054742 2026] [:error] [pid 30430:tid 30449] [client 4.204.201.44:28566] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/owlmailer.php"] [unique_id "advyPrn0S0M-vj_lJadC6QAAAAI"]
[Mon Apr 13 03:27:58.624199 2026] [:error] [pid 30430:tid 30453] [client 4.204.201.44:29868] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/F0x.php"] [unique_id "advyPrn0S0M-vj_lJadC6gAAAAY"]
[Mon Apr 13 03:27:59.131643 2026] [:error] [pid 30432:tid 30502] [client 4.204.201.44:29153] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/F0x.php"] [unique_id "advyP_v_BOY8son7cLmTfwAAAIE"]
[Mon Apr 13 03:27:59.602325 2026] [:error] [pid 30431:tid 30474] [client 4.204.201.44:30448] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/F0x.php"] [unique_id "advyP1bSTPssf6SS919_RAAAAEA"]
[Mon Apr 13 03:28:00.152307 2026] [:error] [pid 30532:tid 30552] [client 4.204.201.44:29906] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/F0x.php"] [unique_id "advyQJGQr51YhOFElOsetgAAANA"]
[Mon Apr 13 03:28:01.039741 2026] [:error] [pid 30532:tid 30537] [client 4.204.201.44:31140] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rlpc.php"] [unique_id "advyQZGQr51YhOFElOseuwAAAME"]
[Mon Apr 13 03:28:02.388380 2026] [:error] [pid 30432:tid 30515] [client 4.204.201.44:29890] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rlpc.php"] [unique_id "advyQvv_BOY8son7cLmThwAAAI4"]
[Mon Apr 13 03:28:04.402981 2026] [:error] [pid 30532:tid 30549] [client 4.204.201.44:30436] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rlpc.php"] [unique_id "advyRJGQr51YhOFElOsewwAAAM0"]
[Mon Apr 13 03:28:05.189974 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:31633] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rlpc.php"] [unique_id "advyRZGQr51YhOFElOsexQAAAMQ"]
[Mon Apr 13 03:28:05.748327 2026] [:error] [pid 30431:tid 30479] [client 4.204.201.44:31722] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p.php7"] [unique_id "advyRVbSTPssf6SS919_SwAAAEU"]
[Mon Apr 13 03:28:06.253953 2026] [:error] [pid 30432:tid 30512] [client 4.204.201.44:30358] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p.php7"] [unique_id "advyRvv_BOY8son7cLmTigAAAIs"]
[Mon Apr 13 03:28:06.938976 2026] [:error] [pid 30430:tid 30459] [client 4.204.201.44:30354] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p.php7"] [unique_id "advyRrn0S0M-vj_lJadC8AAAAAw"]
[Mon Apr 13 03:28:07.568575 2026] [:error] [pid 30432:tid 30509] [client 4.204.201.44:29840] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p.php7"] [unique_id "advyR_v_BOY8son7cLmTjAAAAIg"]
[Mon Apr 13 03:28:08.011679 2026] [:error] [pid 30430:tid 30471] [client 4.204.201.44:31697] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "advySLn0S0M-vj_lJadC8wAAABg"]
[Mon Apr 13 03:28:08.612232 2026] [:error] [pid 30532:tid 30559] [client 4.204.201.44:31176] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "advySJGQr51YhOFElOseyAAAANc"]
[Mon Apr 13 03:28:09.117200 2026] [:error] [pid 30532:tid 30547] [client 4.204.201.44:31682] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "advySZGQr51YhOFElOsezAAAAMs"]
[Mon Apr 13 03:28:09.832377 2026] [:error] [pid 30430:tid 30449] [client 4.204.201.44:28635] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "advySbn0S0M-vj_lJadC9QAAAAI"]
[Mon Apr 13 03:28:11.024941 2026] [:error] [pid 30532:tid 30555] [client 4.204.201.44:29076] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ran.php"] [unique_id "advyS5GQr51YhOFElOse0QAAANM"]
[Mon Apr 13 03:28:12.616731 2026] [:error] [pid 30532:tid 30539] [client 4.204.201.44:30352] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ran.php"] [unique_id "advyTJGQr51YhOFElOse2gAAAMM"]
[Mon Apr 13 03:28:13.342389 2026] [:error] [pid 30532:tid 30550] [client 4.204.201.44:31640] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ran.php"] [unique_id "advyTZGQr51YhOFElOse3QAAAM4"]
[Mon Apr 13 03:28:14.182229 2026] [:error] [pid 30432:tid 30509] [client 4.204.201.44:31643] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ran.php"] [unique_id "advyTvv_BOY8son7cLmTlwAAAIg"]
[Mon Apr 13 03:28:15.150354 2026] [:error] [pid 30532:tid 30548] [client 4.204.201.44:31227] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k90.php"] [unique_id "advyT5GQr51YhOFElOse7gAAAMw"]
[Mon Apr 13 03:28:15.578377 2026] [:error] [pid 30532:tid 30552] [client 4.204.201.44:30362] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k90.php"] [unique_id "advyT5GQr51YhOFElOse8AAAANA"]
[Mon Apr 13 03:28:16.145705 2026] [:error] [pid 30532:tid 30537] [client 4.204.201.44:29935] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k90.php"] [unique_id "advyUJGQr51YhOFElOse8wAAAME"]
[Mon Apr 13 03:28:16.748733 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:30386] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k90.php"] [unique_id "advyUJGQr51YhOFElOse9wAAANY"]
[Mon Apr 13 03:28:17.902261 2026] [:error] [pid 30432:tid 30521] [client 4.204.201.44:31228] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/taff.php"] [unique_id "advyUfv_BOY8son7cLmTmAAAAJQ"]
[Mon Apr 13 03:28:18.696289 2026] [:error] [pid 30432:tid 30506] [client 4.204.201.44:29131] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/taff.php"] [unique_id "advyUvv_BOY8son7cLmTmwAAAIU"]
[Mon Apr 13 03:28:19.328231 2026] [:error] [pid 30432:tid 30516] [client 4.204.201.44:30435] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/taff.php"] [unique_id "advyU_v_BOY8son7cLmTnQAAAI8"]
[Mon Apr 13 03:28:19.821800 2026] [:error] [pid 30532:tid 30537] [client 4.204.201.44:31666] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/taff.php"] [unique_id "advyU5GQr51YhOFElOse_AAAAME"]
[Mon Apr 13 03:28:20.465073 2026] [:error] [pid 30532:tid 30542] [client 4.204.201.44:27295] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "advyVJGQr51YhOFElOse_wAAAMY"]
[Mon Apr 13 03:28:21.056799 2026] [:error] [pid 30432:tid 30518] [client 4.204.201.44:29897] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "advyVfv_BOY8son7cLmToAAAAJE"]
[Mon Apr 13 03:28:21.600820 2026] [:error] [pid 30532:tid 30555] [client 4.204.201.44:31109] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "advyVZGQr51YhOFElOsfBwAAANM"]
[Mon Apr 13 03:28:22.082849 2026] [:error] [pid 30432:tid 30520] [client 4.204.201.44:29831] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "advyVvv_BOY8son7cLmTowAAAJM"]
[Mon Apr 13 03:28:22.533047 2026] [:error] [pid 30432:tid 30522] [client 4.204.201.44:31647] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/133.php"] [unique_id "advyVvv_BOY8son7cLmTpAAAAJU"]
[Mon Apr 13 03:28:23.064919 2026] [:error] [pid 30431:tid 30474] [client 4.204.201.44:29824] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/133.php"] [unique_id "advyV1bSTPssf6SS919_XgAAAEA"]
[Mon Apr 13 03:28:23.840759 2026] [:error] [pid 30431:tid 30475] [client 4.204.201.44:31160] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/133.php"] [unique_id "advyV1bSTPssf6SS919_YQAAAEE"]
[Mon Apr 13 03:28:24.645109 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:29126] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/133.php"] [unique_id "advyWJGQr51YhOFElOsfFAAAANQ"]
[Mon Apr 13 03:28:25.237618 2026] [:error] [pid 30532:tid 30550] [client 4.204.201.44:29880] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ssxsl.php"] [unique_id "advyWZGQr51YhOFElOsfFgAAAM4"]
[Mon Apr 13 03:28:25.960011 2026] [:error] [pid 30432:tid 30502] [client 4.204.201.44:31645] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ssxsl.php"] [unique_id "advyWfv_BOY8son7cLmTqAAAAIE"]
[Mon Apr 13 03:28:26.890089 2026] [:error] [pid 30532:tid 30538] [client 4.204.201.44:29172] File does not exist: /usr/local/apache/htdocs/suspended-page/ssxsl.php
[Mon Apr 13 03:28:27.101632 2026] [:error] [pid 30532:tid 30537] [client 4.204.201.44:29172] File does not exist: /usr/local/apache/htdocs/suspended-page/AE5VAL.php
[Mon Apr 13 03:28:27.321926 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:29172] File does not exist: /usr/local/apache/htdocs/suspended-page/gold.php
[Mon Apr 13 03:28:27.535291 2026] [:error] [pid 30532:tid 30543] [client 4.204.201.44:29172] File does not exist: /usr/local/apache/htdocs/suspended-page/gely.php
[Mon Apr 13 03:28:27.744160 2026] [:error] [pid 30532:tid 30539] [client 4.204.201.44:29172] File does not exist: /usr/local/apache/htdocs/suspended-page/xBrain.php
[Mon Apr 13 03:28:27.955576 2026] [:error] [pid 30532:tid 30558] [client 4.204.201.44:29172] File does not exist: /usr/local/apache/htdocs/suspended-page/sagafif.php
[Mon Apr 13 03:28:28.210790 2026] [:error] [pid 30532:tid 30544] [client 4.204.201.44:29172] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trc.php
[Mon Apr 13 03:28:28.470529 2026] [:error] [pid 30532:tid 30559] [client 4.204.201.44:29172] File does not exist: /usr/local/apache/htdocs/suspended-page/tesla1.php
[Mon Apr 13 03:28:28.680010 2026] [:error] [pid 30532:tid 30560] [client 4.204.201.44:29172] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Mon Apr 13 03:28:29.119422 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:29172] File does not exist: /usr/local/apache/htdocs/suspended-page/ase.php
[Mon Apr 13 03:28:29.325437 2026] [:error] [pid 30532:tid 30536] [client 4.204.201.44:29172] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktgob.php"] [unique_id "advyXZGQr51YhOFElOsfLwAAAMA"]
[Mon Apr 13 03:28:30.211441 2026] [:error] [pid 30431:tid 30491] [client 4.204.201.44:29119] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktgob.php"] [unique_id "advyXlbSTPssf6SS919_aQAAAFE"]
[Mon Apr 13 03:28:31.462353 2026] [:error] [pid 30532:tid 30551] [client 4.204.201.44:31106] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktgob.php"] [unique_id "advyX5GQr51YhOFElOsfOAAAAM8"]
[Mon Apr 13 03:28:32.083301 2026] [:error] [pid 30532:tid 30539] [client 4.204.201.44:29166] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktgob.php"] [unique_id "advyYJGQr51YhOFElOsfPQAAAMM"]
[Mon Apr 13 03:28:32.694475 2026] [:error] [pid 30532:tid 30540] [client 4.204.201.44:29072] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "advyYJGQr51YhOFElOsfQgAAAMQ"]
[Mon Apr 13 03:28:33.192957 2026] [:error] [pid 30431:tid 30482] [client 4.204.201.44:30406] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "advyYVbSTPssf6SS919_bgAAAEg"]
[Mon Apr 13 03:28:33.648231 2026] [:error] [pid 30431:tid 30476] [client 4.204.201.44:29898] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "advyYVbSTPssf6SS919_cAAAAEI"]
[Mon Apr 13 03:28:34.257846 2026] [:error] [pid 30430:tid 30461] [client 4.204.201.44:30351] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "advyYrn0S0M-vj_lJadDEAAAAA4"]
[Mon Apr 13 03:28:35.031680 2026] [:error] [pid 30532:tid 30552] [client 4.204.201.44:31638] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "advyY5GQr51YhOFElOsfVwAAANA"]
[Mon Apr 13 03:28:35.787889 2026] [:error] [pid 30532:tid 30556] [client 4.204.201.44:31695] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "advyY5GQr51YhOFElOsfWwAAANQ"]
[Mon Apr 13 03:28:36.382876 2026] [:error] [pid 30430:tid 30462] [client 4.204.201.44:31129] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "advyZLn0S0M-vj_lJadDFgAAAA8"]
[Mon Apr 13 03:28:37.238936 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:28657] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/afile.php"] [unique_id "advyZZGQr51YhOFElOsfYQAAANI"]
[Mon Apr 13 03:28:38.549892 2026] [:error] [pid 30532:tid 30557] [client 4.204.201.44:31681] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advyZpGQr51YhOFElOsfZgAAANU"]
[Mon Apr 13 03:28:39.932340 2026] [:error] [pid 30432:tid 30501] [client 4.204.201.44:31150] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advyZ_v_BOY8son7cLmTvwAAAIA"]
[Mon Apr 13 03:28:40.750314 2026] [:error] [pid 30430:tid 30455] [client 4.204.201.44:29914] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advyaLn0S0M-vj_lJadDHAAAAAg"]
[Mon Apr 13 03:28:41.476063 2026] [:error] [pid 30532:tid 30554] [client 4.204.201.44:29158] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xBrain.php"] [unique_id "advyaZGQr51YhOFElOsfbQAAANI"]
[Mon Apr 13 03:28:41.952378 2026] [:error] [pid 30532:tid 30545] [client 4.204.201.44:30445] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yunu.php"] [unique_id "advyaZGQr51YhOFElOsfcQAAAMk"]
[Mon Apr 13 03:28:42.605532 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:29067] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yunu.php"] [unique_id "advyapGQr51YhOFElOsfeAAAAMU"]
[Mon Apr 13 03:28:43.245640 2026] [:error] [pid 30532:tid 30546] [client 4.204.201.44:30363] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yunu.php"] [unique_id "advya5GQr51YhOFElOsffwAAAMo"]
[Mon Apr 13 03:28:43.840281 2026] [:error] [pid 30431:tid 30476] [client 4.204.201.44:29157] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yunu.php"] [unique_id "advya1bSTPssf6SS919_fAAAAEI"]
[Mon Apr 13 03:28:44.492222 2026] [:error] [pid 30431:tid 30477] [client 4.204.201.44:31676] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lexy.php"] [unique_id "advybFbSTPssf6SS919_fQAAAEM"]
[Mon Apr 13 03:28:45.119328 2026] [:error] [pid 30431:tid 30492] [client 4.204.201.44:30353] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lexy.php"] [unique_id "advybVbSTPssf6SS919_fwAAAFI"]
[Mon Apr 13 03:28:45.850356 2026] [:error] [pid 30430:tid 30456] [client 4.204.201.44:30377] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lexy.php"] [unique_id "advybbn0S0M-vj_lJadDIAAAAAk"]
[Mon Apr 13 03:28:46.263760 2026] [:error] [pid 30532:tid 30541] [client 4.204.201.44:29155] [client 4.204.201.44] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lexy.php"] [unique_id "advybpGQr51YhOFElOsfhQAAAMU"]
[Mon Apr 13 05:31:46.619167 2026] [:error] [pid 11325:tid 11346] [client 20.151.248.149:51138] File does not exist: /usr/local/apache/htdocs/suspended-page/kma.php
[Mon Apr 13 05:31:46.828762 2026] [:error] [pid 11325:tid 11342] [client 20.151.248.149:51138] File does not exist: /usr/local/apache/htdocs/suspended-page/wpls.php
[Mon Apr 13 05:31:47.037112 2026] [:error] [pid 11325:tid 11341] [client 20.151.248.149:51138] File does not exist: /usr/local/apache/htdocs/suspended-page/i6z19N.php
[Mon Apr 13 05:31:47.248061 2026] [:error] [pid 11325:tid 11332] [client 20.151.248.149:51138] File does not exist: /usr/local/apache/htdocs/suspended-page/ssh3ll.php
[Mon Apr 13 05:31:47.456110 2026] [:error] [pid 11325:tid 11336] [client 20.151.248.149:51138] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Mon Apr 13 07:06:22.711713 2026] [:error] [pid 11325:tid 11348] [client 5.155.42.118:22014] [client 5.155.42.118] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.155.42.118, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "adwlbuCGj3EEJtCwa0PFYwAAARU"]
[Mon Apr 13 07:06:22.723890 2026] [:error] [pid 11325:tid 11348] [client 5.155.42.118:22014] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 13 10:58:16.008250 2026] [:error] [pid 63406:tid 63426] [client 104.28.163.29:14821] [client 104.28.163.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "adxbyLHZEIkQ0Zmgp5pdzgAAAM8"]
[Mon Apr 13 12:44:50.561490 2026] [:error] [pid 7228:tid 7246] [client 20.151.248.149:29687] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adx0wgEnn1dQrOSHHNWyqQAAARA"]
[Mon Apr 13 12:44:51.372852 2026] [:error] [pid 63310:tid 63368] [client 20.151.248.149:29675] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adx0w3oXpRU5ztmwPjL1BgAAAFg"]
[Mon Apr 13 12:44:53.549092 2026] [:error] [pid 63309:tid 63327] [client 20.151.248.149:29676] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adx0xUpIKZ10weXpf0XT0AAAAA4"]
[Mon Apr 13 12:44:56.543783 2026] [:error] [pid 63406:tid 63432] [client 20.151.248.149:29632] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adx0yLHZEIkQ0Zmgp5qCjgAAANU"]
[Mon Apr 13 20:39:56.522479 2026] [:error] [pid 63311:tid 63378] [client 103.77.107.178:60226] [client 103.77.107.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "adzkHKHjrGN1MqBCVFkBVAAAAIc"]
[Mon Apr 13 20:39:56.724724 2026] [:error] [pid 63406:tid 63416] [client 103.77.107.178:60240] [client 103.77.107.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.vscode/sftp.json"] [unique_id "adzkHLHZEIkQ0Zmgp5qqMQAAAMU"]
[Mon Apr 13 23:05:38.193815 2026] [:error] [pid 63311:tid 63388] [client 203.83.42.21:49709] [client 203.83.42.21] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 203.83.42.21, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ad0GQqHjrGN1MqBCVFkphQAAAJE"]
[Mon Apr 13 23:05:38.198554 2026] [:error] [pid 63311:tid 63388] [client 203.83.42.21:49709] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 14 00:20:54.997993 2026] [:error] [pid 63406:tid 63424] [client 91.186.252.173:35256] [client 91.186.252.173] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 91.186.252.173, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ad0X5rHZEIkQ0Zmgp5pM6gAAAM0"]
[Tue Apr 14 00:20:55.016938 2026] [:error] [pid 63406:tid 63424] [client 91.186.252.173:35256] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 14 03:34:43.776705 2026] [:error] [pid 19689:tid 19757] [client 62.164.177.15:35130] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax.php
[Tue Apr 14 09:52:19.353152 2026] [:error] [pid 37226:tid 37251] [client 216.73.216.188:61210] [client 216.73.216.188] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||nextspaceconsulting.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/robots.txt"] [unique_id "ad2d05OA5-IQ0IVmQCrfvQAAAVc"]
[Tue Apr 14 14:23:32.251581 2026] [:error] [pid 35629:tid 35665] [client 216.73.163.177:32139] [client 216.73.163.177] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 216.73.163.177, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ad3dZDY8VahzC1YJBSgClAAAAEY"]
[Tue Apr 14 14:23:32.255314 2026] [:error] [pid 35629:tid 35665] [client 216.73.163.177:32139] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 14 16:25:39.247566 2026] [:error] [pid 59986:tid 60038] [client 51.103.165.5:40792] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Tue Apr 14 16:25:39.486829 2026] [:error] [pid 59986:tid 60037] [client 51.103.165.5:40792] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Tue Apr 14 16:25:39.728428 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:40792] File does not exist: /usr/local/apache/htdocs/suspended-page/flox.php
[Tue Apr 14 16:25:39.967588 2026] [:error] [pid 59986:tid 60029] [client 51.103.165.5:40792] File does not exist: /usr/local/apache/htdocs/suspended-page/mff.php
[Tue Apr 14 16:25:40.206317 2026] [:error] [pid 59986:tid 60027] [client 51.103.165.5:40792] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Tue Apr 14 16:25:40.445584 2026] [:error] [pid 59986:tid 60036] [client 51.103.165.5:40792] File does not exist: /usr/local/apache/htdocs/suspended-page/filemanger2.php
[Tue Apr 14 16:25:40.683900 2026] [:error] [pid 59986:tid 60042] [client 51.103.165.5:40792] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Tue Apr 14 16:25:40.923001 2026] [:error] [pid 59986:tid 60035] [client 51.103.165.5:40792] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-vn1.php
[Tue Apr 14 16:25:41.162500 2026] [:error] [pid 59986:tid 60041] [client 51.103.165.5:40792] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Tue Apr 14 16:25:41.402477 2026] [:error] [pid 59986:tid 60025] [client 51.103.165.5:40792] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Tue Apr 14 16:25:41.638610 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:40792] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "ad36BZ6axKeW6bX4H7cDYgAAAFM"]
[Tue Apr 14 16:25:42.112471 2026] [:error] [pid 59987:tid 60056] [client 51.103.165.5:40786] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "ad36BlWpk-Tfi6_vLKrGaAAAAIk"]
[Tue Apr 14 16:25:42.589754 2026] [:error] [pid 60074:tid 60091] [client 51.103.165.5:40795] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "ad36ButqnEmNU9vpHCkL0gAAAM8"]
[Tue Apr 14 16:25:43.067145 2026] [:error] [pid 60074:tid 60087] [client 51.103.165.5:40781] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "ad36B-tqnEmNU9vpHCkL1AAAAMs"]
[Tue Apr 14 16:25:43.539893 2026] [:error] [pid 60074:tid 60084] [client 51.103.165.5:41500] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "ad36B-tqnEmNU9vpHCkL2AAAAMg"]
[Tue Apr 14 16:25:44.017866 2026] [:error] [pid 60074:tid 60089] [client 51.103.165.5:40780] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "ad36COtqnEmNU9vpHCkL3AAAAM0"]
[Tue Apr 14 16:25:44.491654 2026] [:error] [pid 60074:tid 60088] [client 51.103.165.5:41546] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "ad36COtqnEmNU9vpHCkL4AAAAMw"]
[Tue Apr 14 16:25:44.969385 2026] [:error] [pid 60074:tid 60081] [client 51.103.165.5:40777] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "ad36COtqnEmNU9vpHCkL4gAAAMU"]
[Tue Apr 14 16:25:45.442922 2026] [:error] [pid 60074:tid 60080] [client 51.103.165.5:41496] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "ad36CetqnEmNU9vpHCkL5gAAAMQ"]
[Tue Apr 14 16:25:45.919877 2026] [:error] [pid 60074:tid 60084] [client 51.103.165.5:41526] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "ad36CetqnEmNU9vpHCkL5wAAAMg"]
[Tue Apr 14 16:25:46.397378 2026] [:error] [pid 59987:tid 60057] [client 51.103.165.5:41529] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "ad36ClWpk-Tfi6_vLKrGcAAAAIo"]
[Tue Apr 14 16:25:46.869728 2026] [:error] [pid 60074:tid 60078] [client 51.103.165.5:41494] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "ad36CutqnEmNU9vpHCkL6gAAAMI"]
[Tue Apr 14 16:25:47.347666 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:41586] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "ad36C-tqnEmNU9vpHCkL7gAAAMM"]
[Tue Apr 14 16:25:47.818409 2026] [:error] [pid 59986:tid 60044] [client 51.103.165.5:40787] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "ad36C56axKeW6bX4H7cDZAAAAFg"]
[Tue Apr 14 16:25:48.304486 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:41501] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "ad36DOtqnEmNU9vpHCkL8QAAANc"]
[Tue Apr 14 16:25:48.779437 2026] [:error] [pid 60074:tid 60096] [client 51.103.165.5:40773] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "ad36DOtqnEmNU9vpHCkL9gAAANQ"]
[Tue Apr 14 16:25:49.262980 2026] [:error] [pid 59987:tid 60067] [client 51.103.165.5:41550] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "ad36DVWpk-Tfi6_vLKrGcwAAAJQ"]
[Tue Apr 14 16:25:49.736900 2026] [:error] [pid 59987:tid 60050] [client 51.103.165.5:40735] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "ad36DVWpk-Tfi6_vLKrGdQAAAIM"]
[Tue Apr 14 16:25:50.209104 2026] [:error] [pid 59987:tid 60071] [client 51.103.165.5:40799] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "ad36DlWpk-Tfi6_vLKrGdwAAAJg"]
[Tue Apr 14 16:25:50.680365 2026] [:error] [pid 59987:tid 60061] [client 51.103.165.5:41553] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "ad36DlWpk-Tfi6_vLKrGegAAAI4"]
[Tue Apr 14 16:25:51.154933 2026] [:error] [pid 59987:tid 60059] [client 51.103.165.5:41577] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ad36D1Wpk-Tfi6_vLKrGfAAAAIw"]
[Tue Apr 14 16:25:51.632890 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:41490] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ad36D56axKeW6bX4H7cDbAAAAFM"]
[Tue Apr 14 16:25:52.107978 2026] [:error] [pid 59987:tid 60047] [client 51.103.165.5:40715] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ad36EFWpk-Tfi6_vLKrGgQAAAIA"]
[Tue Apr 14 16:25:52.582324 2026] [:error] [pid 59987:tid 60050] [client 51.103.165.5:40779] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ad36EFWpk-Tfi6_vLKrGhAAAAIM"]
[Tue Apr 14 16:25:53.053079 2026] [:error] [pid 59985:tid 59999] [client 51.103.165.5:41567] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "ad36EegHaxkvLE6V1kkg9QAAAAY"]
[Tue Apr 14 16:25:53.524734 2026] [:error] [pid 60074:tid 60098] [client 51.103.165.5:41534] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "ad36EetqnEmNU9vpHCkL-wAAANY"]
[Tue Apr 14 16:25:53.999295 2026] [:error] [pid 59987:tid 60057] [client 51.103.165.5:41589] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "ad36EVWpk-Tfi6_vLKrGiwAAAIo"]
[Tue Apr 14 16:25:54.476083 2026] [:error] [pid 59987:tid 60070] [client 51.103.165.5:41489] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "ad36ElWpk-Tfi6_vLKrGjAAAAJc"]
[Tue Apr 14 16:25:54.948134 2026] [:error] [pid 59985:tid 60010] [client 51.103.165.5:39876] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/water.php"] [unique_id "ad36EugHaxkvLE6V1kkg_AAAABE"]
[Tue Apr 14 16:25:55.419344 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:41499] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/water.php"] [unique_id "ad36E-tqnEmNU9vpHCkL_AAAAMc"]
[Tue Apr 14 16:25:55.893487 2026] [:error] [pid 59985:tid 60017] [client 51.103.165.5:41570] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/water.php"] [unique_id "ad36E-gHaxkvLE6V1kkg_gAAABg"]
[Tue Apr 14 16:25:56.365864 2026] [:error] [pid 60074:tid 60091] [client 51.103.165.5:40705] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/water.php"] [unique_id "ad36FOtqnEmNU9vpHCkMAQAAAM8"]
[Tue Apr 14 16:25:56.860633 2026] [:error] [pid 59986:tid 60044] [client 51.103.165.5:41556] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "ad36FJ6axKeW6bX4H7cDcAAAAFg"]
[Tue Apr 14 16:25:57.338356 2026] [:error] [pid 60074:tid 60097] [client 51.103.165.5:40729] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "ad36FetqnEmNU9vpHCkMBQAAANU"]
[Tue Apr 14 16:25:57.815474 2026] [:error] [pid 59987:tid 60053] [client 51.103.165.5:41588] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "ad36FVWpk-Tfi6_vLKrGlgAAAIY"]
[Tue Apr 14 16:25:58.285947 2026] [:error] [pid 60074:tid 60082] [client 51.103.165.5:41568] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "ad36FutqnEmNU9vpHCkMDAAAAMY"]
[Tue Apr 14 16:25:58.762098 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:41573] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "ad36FutqnEmNU9vpHCkMEAAAANc"]
[Tue Apr 14 16:25:59.235102 2026] [:error] [pid 59986:tid 60037] [client 51.103.165.5:40774] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "ad36F56axKeW6bX4H7cDdQAAAFE"]
[Tue Apr 14 16:25:59.707521 2026] [:error] [pid 59987:tid 60069] [client 51.103.165.5:41507] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "ad36F1Wpk-Tfi6_vLKrGnAAAAJY"]
[Tue Apr 14 16:26:00.180066 2026] [:error] [pid 59986:tid 60042] [client 51.103.165.5:41571] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "ad36GJ6axKeW6bX4H7cDdwAAAFY"]
[Tue Apr 14 16:26:00.653569 2026] [:error] [pid 59986:tid 60041] [client 51.103.165.5:41590] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wert.php"] [unique_id "ad36GJ6axKeW6bX4H7cDeQAAAFU"]
[Tue Apr 14 16:26:01.147735 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:41547] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wert.php"] [unique_id "ad36GZ6axKeW6bX4H7cDegAAAFM"]
[Tue Apr 14 16:26:01.620539 2026] [:error] [pid 59986:tid 60033] [client 51.103.165.5:41486] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wert.php"] [unique_id "ad36GZ6axKeW6bX4H7cDfAAAAE0"]
[Tue Apr 14 16:26:02.096120 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:41544] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wert.php"] [unique_id "ad36Gp6axKeW6bX4H7cDfgAAAEY"]
[Tue Apr 14 16:26:02.567369 2026] [:error] [pid 59986:tid 60024] [client 51.103.165.5:40791] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "ad36Gp6axKeW6bX4H7cDfwAAAEQ"]
[Tue Apr 14 16:26:03.038922 2026] [:error] [pid 59985:tid 59999] [client 51.103.165.5:41504] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "ad36G-gHaxkvLE6V1kkhAQAAAAY"]
[Tue Apr 14 16:26:03.524927 2026] [:error] [pid 59986:tid 60023] [client 51.103.165.5:40813] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "ad36G56axKeW6bX4H7cDgQAAAEM"]
[Tue Apr 14 16:26:03.996441 2026] [:error] [pid 59986:tid 60029] [client 51.103.165.5:41559] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "ad36G56axKeW6bX4H7cDhAAAAEk"]
[Tue Apr 14 16:26:04.473374 2026] [:error] [pid 60074:tid 60093] [client 51.103.165.5:41506] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "ad36HOtqnEmNU9vpHCkMEwAAANE"]
[Tue Apr 14 16:26:04.944451 2026] [:error] [pid 59985:tid 59996] [client 51.103.165.5:41519] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "ad36HOgHaxkvLE6V1kkhAgAAAAM"]
[Tue Apr 14 16:26:05.422298 2026] [:error] [pid 59986:tid 60042] [client 51.103.165.5:41510] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "ad36HZ6axKeW6bX4H7cDhgAAAFY"]
[Tue Apr 14 16:26:05.895303 2026] [:error] [pid 60074:tid 60078] [client 51.103.165.5:41542] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "ad36HetqnEmNU9vpHCkMFQAAAMI"]
[Tue Apr 14 16:26:06.377306 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:40824] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oij98gy.php"] [unique_id "ad36Hp6axKeW6bX4H7cDiAAAAFM"]
[Tue Apr 14 16:26:06.847827 2026] [:error] [pid 60074:tid 60092] [client 51.103.165.5:41472] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oij98gy.php"] [unique_id "ad36HutqnEmNU9vpHCkMGAAAANA"]
[Tue Apr 14 16:26:07.328990 2026] [:error] [pid 59987:tid 60065] [client 51.103.165.5:40771] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oij98gy.php"] [unique_id "ad36H1Wpk-Tfi6_vLKrGtQAAAJI"]
[Tue Apr 14 16:26:07.814749 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:41576] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oij98gy.php"] [unique_id "ad36H-tqnEmNU9vpHCkMGgAAAMo"]
[Tue Apr 14 16:26:08.289522 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:41584] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ad36IJ6axKeW6bX4H7cDigAAAEY"]
[Tue Apr 14 16:26:08.763164 2026] [:error] [pid 59987:tid 60067] [client 51.103.165.5:40798] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ad36IFWpk-Tfi6_vLKrGuQAAAJQ"]
[Tue Apr 14 16:26:09.233780 2026] [:error] [pid 60074:tid 60090] [client 51.103.165.5:40763] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ad36IetqnEmNU9vpHCkMHwAAAM4"]
[Tue Apr 14 16:26:09.718640 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:40830] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ad36IZ6axKeW6bX4H7cDjQAAAE4"]
[Tue Apr 14 16:26:10.192161 2026] [:error] [pid 60074:tid 60089] [client 51.103.165.5:39884] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/turkshell.php"] [unique_id "ad36IutqnEmNU9vpHCkMIQAAAM0"]
[Tue Apr 14 16:26:10.677984 2026] [:error] [pid 59987:tid 60051] [client 51.103.165.5:41525] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/turkshell.php"] [unique_id "ad36IlWpk-Tfi6_vLKrGvQAAAIQ"]
[Tue Apr 14 16:26:11.161940 2026] [:error] [pid 59985:tid 60005] [client 51.103.165.5:40828] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/turkshell.php"] [unique_id "ad36I-gHaxkvLE6V1kkhCAAAAAw"]
[Tue Apr 14 16:26:11.645739 2026] [:error] [pid 59985:tid 60001] [client 51.103.165.5:41538] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/turkshell.php"] [unique_id "ad36I-gHaxkvLE6V1kkhCgAAAAg"]
[Tue Apr 14 16:26:12.127002 2026] [:error] [pid 59985:tid 59998] [client 51.103.165.5:40810] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "ad36JOgHaxkvLE6V1kkhDwAAAAU"]
[Tue Apr 14 16:26:12.616315 2026] [:error] [pid 59986:tid 60042] [client 51.103.165.5:41485] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "ad36JJ6axKeW6bX4H7cDjgAAAFY"]
[Tue Apr 14 16:26:13.090830 2026] [:error] [pid 60074:tid 60087] [client 51.103.165.5:40722] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "ad36JetqnEmNU9vpHCkMJAAAAMs"]
[Tue Apr 14 16:26:13.569508 2026] [:error] [pid 60074:tid 60092] [client 51.103.165.5:40782] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "ad36JetqnEmNU9vpHCkMJgAAANA"]
[Tue Apr 14 16:26:14.047652 2026] [:error] [pid 59986:tid 60025] [client 51.103.165.5:40778] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "ad36Jp6axKeW6bX4H7cDkAAAAEU"]
[Tue Apr 14 16:26:14.520855 2026] [:error] [pid 59987:tid 60055] [client 51.103.165.5:41477] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "ad36JlWpk-Tfi6_vLKrGwQAAAIg"]
[Tue Apr 14 16:26:14.991339 2026] [:error] [pid 59985:tid 60010] [client 51.103.165.5:40818] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "ad36JugHaxkvLE6V1kkhGQAAABE"]
[Tue Apr 14 16:26:15.471704 2026] [:error] [pid 59985:tid 60001] [client 51.103.165.5:41594] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "ad36J-gHaxkvLE6V1kkhGwAAAAg"]
[Tue Apr 14 16:26:15.951609 2026] [:error] [pid 59986:tid 60021] [client 51.103.165.5:41575] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "ad36J56axKeW6bX4H7cDlAAAAEE"]
[Tue Apr 14 16:26:16.423987 2026] [:error] [pid 59985:tid 60016] [client 51.103.165.5:41481] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "ad36KOgHaxkvLE6V1kkhHgAAABc"]
[Tue Apr 14 16:26:16.900062 2026] [:error] [pid 59985:tid 59999] [client 51.103.165.5:40788] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "ad36KOgHaxkvLE6V1kkhIgAAAAY"]
[Tue Apr 14 16:26:17.380710 2026] [:error] [pid 59986:tid 60029] [client 51.103.165.5:40743] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "ad36KZ6axKeW6bX4H7cDmQAAAEk"]
[Tue Apr 14 16:26:17.852679 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:41537] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "ad36KetqnEmNU9vpHCkMKwAAAMA"]
[Tue Apr 14 16:26:18.326940 2026] [:error] [pid 60074:tid 60087] [client 51.103.165.5:41583] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "ad36KutqnEmNU9vpHCkMLgAAAMs"]
[Tue Apr 14 16:26:18.799433 2026] [:error] [pid 60074:tid 60078] [client 51.103.165.5:41593] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "ad36KutqnEmNU9vpHCkMMQAAAMI"]
[Tue Apr 14 16:26:19.274270 2026] [:error] [pid 59986:tid 60037] [client 51.103.165.5:41491] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "ad36K56axKeW6bX4H7cDnQAAAFE"]
[Tue Apr 14 16:26:19.749471 2026] [:error] [pid 60074:tid 60081] [client 51.103.165.5:41482] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "ad36K-tqnEmNU9vpHCkMOAAAAMU"]
[Tue Apr 14 16:26:20.228364 2026] [:error] [pid 59985:tid 60013] [client 51.103.165.5:40794] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "ad36LOgHaxkvLE6V1kkhKgAAABQ"]
[Tue Apr 14 16:26:20.723225 2026] [:error] [pid 59985:tid 60000] [client 51.103.165.5:41539] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "ad36LOgHaxkvLE6V1kkhLAAAAAc"]
[Tue Apr 14 16:26:21.196104 2026] [:error] [pid 60074:tid 60085] [client 51.103.165.5:41545] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "ad36LetqnEmNU9vpHCkMOwAAAMk"]
[Tue Apr 14 16:26:21.667750 2026] [:error] [pid 59985:tid 60010] [client 51.103.165.5:41484] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ad36LegHaxkvLE6V1kkhMAAAABE"]
[Tue Apr 14 16:26:22.155656 2026] [:error] [pid 60074:tid 60098] [client 51.103.165.5:40814] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ad36LutqnEmNU9vpHCkMQAAAANY"]
[Tue Apr 14 16:26:22.626674 2026] [:error] [pid 60074:tid 60089] [client 51.103.165.5:40796] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ad36LutqnEmNU9vpHCkMQQAAAM0"]
[Tue Apr 14 16:26:23.101365 2026] [:error] [pid 60074:tid 60092] [client 51.103.165.5:41512] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ad36L-tqnEmNU9vpHCkMRgAAANA"]
[Tue Apr 14 16:26:23.578829 2026] [:error] [pid 60074:tid 60081] [client 51.103.165.5:40768] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "ad36L-tqnEmNU9vpHCkMSgAAAMU"]
[Tue Apr 14 16:26:24.051372 2026] [:error] [pid 60074:tid 60098] [client 51.103.165.5:40770] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "ad36MOtqnEmNU9vpHCkMTQAAANY"]
[Tue Apr 14 16:26:24.532374 2026] [:error] [pid 60074:tid 60090] [client 51.103.165.5:41564] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "ad36MOtqnEmNU9vpHCkMTwAAAM4"]
[Tue Apr 14 16:26:25.004264 2026] [:error] [pid 59985:tid 60017] [client 51.103.165.5:41535] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "ad36MegHaxkvLE6V1kkhNAAAABg"]
[Tue Apr 14 16:26:25.491885 2026] [:error] [pid 59987:tid 60048] [client 51.103.165.5:41592] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "ad36MVWpk-Tfi6_vLKrGxgAAAIE"]
[Tue Apr 14 16:26:25.980167 2026] [:error] [pid 59987:tid 60055] [client 51.103.165.5:39914] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "ad36MVWpk-Tfi6_vLKrGyAAAAIg"]
[Tue Apr 14 16:26:26.461768 2026] [:error] [pid 59987:tid 60069] [client 51.103.165.5:40815] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "ad36MlWpk-Tfi6_vLKrGyQAAAJY"]
[Tue Apr 14 16:26:26.945273 2026] [:error] [pid 59987:tid 60052] [client 51.103.165.5:41492] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "ad36MlWpk-Tfi6_vLKrGzQAAAIU"]
[Tue Apr 14 16:26:27.418316 2026] [:error] [pid 59986:tid 60025] [client 51.103.165.5:40775] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "ad36M56axKeW6bX4H7cDowAAAEU"]
[Tue Apr 14 16:26:27.889465 2026] [:error] [pid 59986:tid 60022] [client 51.103.165.5:39887] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "ad36M56axKeW6bX4H7cDpAAAAEI"]
[Tue Apr 14 16:26:28.364634 2026] [:error] [pid 59986:tid 60021] [client 51.103.165.5:41595] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "ad36NJ6axKeW6bX4H7cDpQAAAEE"]
[Tue Apr 14 16:26:28.846273 2026] [:error] [pid 59987:tid 60059] [client 51.103.165.5:41536] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "ad36NFWpk-Tfi6_vLKrGzwAAAIw"]
[Tue Apr 14 16:26:29.318319 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:41480] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "ad36NVWpk-Tfi6_vLKrG0AAAAIc"]
[Tue Apr 14 16:26:29.791296 2026] [:error] [pid 59987:tid 60061] [client 51.103.165.5:40809] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "ad36NVWpk-Tfi6_vLKrG0QAAAI4"]
[Tue Apr 14 16:26:30.266803 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:41516] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "ad36Np6axKeW6bX4H7cDrAAAAE4"]
[Tue Apr 14 16:26:30.751278 2026] [:error] [pid 59986:tid 60027] [client 51.103.165.5:41521] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "ad36Np6axKeW6bX4H7cDrQAAAEc"]
[Tue Apr 14 16:26:31.222667 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:40737] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "ad36N56axKeW6bX4H7cDsAAAAFM"]
[Tue Apr 14 16:26:31.696898 2026] [:error] [pid 59986:tid 60025] [client 51.103.165.5:41599] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "ad36N56axKeW6bX4H7cDswAAAEU"]
[Tue Apr 14 16:26:32.176321 2026] [:error] [pid 59985:tid 60008] [client 51.103.165.5:41523] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "ad36OOgHaxkvLE6V1kkhQAAAAA8"]
[Tue Apr 14 16:26:32.652759 2026] [:error] [pid 60074:tid 60087] [client 51.103.165.5:40776] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "ad36OOtqnEmNU9vpHCkMVwAAAMs"]
[Tue Apr 14 16:26:33.129556 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:39816] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "ad36OetqnEmNU9vpHCkMWAAAAMo"]
[Tue Apr 14 16:26:33.625618 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:40738] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "ad36OetqnEmNU9vpHCkMWgAAAMM"]
[Tue Apr 14 16:26:34.096421 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:40724] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "ad36OutqnEmNU9vpHCkMXAAAAMA"]
[Tue Apr 14 16:26:34.568089 2026] [:error] [pid 60074:tid 60085] [client 51.103.165.5:40805] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "ad36OutqnEmNU9vpHCkMXwAAAMk"]
[Tue Apr 14 16:26:35.047487 2026] [:error] [pid 60074:tid 60077] [client 51.103.165.5:41530] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.mopj.php"] [unique_id "ad36O-tqnEmNU9vpHCkMYwAAAME"]
[Tue Apr 14 16:26:35.522075 2026] [:error] [pid 60074:tid 60080] [client 51.103.165.5:39372] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.mopj.php"] [unique_id "ad36O-tqnEmNU9vpHCkMZgAAAMQ"]
[Tue Apr 14 16:26:36.000863 2026] [:error] [pid 60074:tid 60100] [client 51.103.165.5:41531] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.mopj.php"] [unique_id "ad36O-tqnEmNU9vpHCkMaAAAANg"]
[Tue Apr 14 16:26:36.471802 2026] [:error] [pid 59987:tid 60058] [client 51.103.165.5:41483] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.mopj.php"] [unique_id "ad36PFWpk-Tfi6_vLKrG1AAAAIs"]
[Tue Apr 14 16:26:36.945014 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:40758] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "ad36PJ6axKeW6bX4H7cDuQAAAEY"]
[Tue Apr 14 16:26:37.419456 2026] [:error] [pid 59985:tid 60009] [client 51.103.165.5:41495] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "ad36PegHaxkvLE6V1kkhQgAAABA"]
[Tue Apr 14 16:26:37.894331 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:40772] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "ad36PetqnEmNU9vpHCkMagAAAMA"]
[Tue Apr 14 16:26:38.369717 2026] [:error] [pid 59987:tid 60047] [client 51.103.165.5:41474] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "ad36PlWpk-Tfi6_vLKrG2wAAAIA"]
[Tue Apr 14 16:26:38.849893 2026] [:error] [pid 59985:tid 60001] [client 51.103.165.5:40806] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nano.php"] [unique_id "ad36PugHaxkvLE6V1kkhRAAAAAg"]
[Tue Apr 14 16:26:39.335928 2026] [:error] [pid 59986:tid 60020] [client 51.103.165.5:39886] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nano.php"] [unique_id "ad36P56axKeW6bX4H7cDvQAAAEA"]
[Tue Apr 14 16:26:39.811706 2026] [:error] [pid 59986:tid 60029] [client 51.103.165.5:41543] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nano.php"] [unique_id "ad36P56axKeW6bX4H7cDvgAAAEk"]
[Tue Apr 14 16:26:40.296137 2026] [:error] [pid 60074:tid 60084] [client 51.103.165.5:41505] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nano.php"] [unique_id "ad36QOtqnEmNU9vpHCkMcAAAAMg"]
[Tue Apr 14 16:26:40.767799 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:39878] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "ad36QOtqnEmNU9vpHCkMcQAAAMA"]
[Tue Apr 14 16:26:41.241485 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Tue Apr 14 16:26:42.696452 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Tue Apr 14 16:26:42.937712 2026] [:error] [pid 59987:tid 60070] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Tue Apr 14 16:26:43.176251 2026] [:error] [pid 59987:tid 60058] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Tue Apr 14 16:26:43.415411 2026] [:error] [pid 59987:tid 60060] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Tue Apr 14 16:26:43.657680 2026] [:error] [pid 59987:tid 60052] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Tue Apr 14 16:26:43.896788 2026] [:error] [pid 59987:tid 60066] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Tue Apr 14 16:26:44.135077 2026] [:error] [pid 59987:tid 60062] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/ass.php
[Tue Apr 14 16:26:44.379043 2026] [:error] [pid 59987:tid 60059] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 14 16:26:44.623412 2026] [:error] [pid 59987:tid 60048] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Tue Apr 14 16:26:44.872518 2026] [:error] [pid 59987:tid 60067] [client 51.103.165.5:40762] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Tue Apr 14 16:26:45.108458 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:40762] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "ad36RVWpk-Tfi6_vLKrG8QAAAIc"]
[Tue Apr 14 16:26:45.579719 2026] [:error] [pid 59985:tid 60012] [client 51.103.165.5:40784] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "ad36RegHaxkvLE6V1kkhRwAAABM"]
[Tue Apr 14 16:26:46.056859 2026] [:error] [pid 59985:tid 60008] [client 51.103.165.5:41548] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "ad36RugHaxkvLE6V1kkhSAAAAA8"]
[Tue Apr 14 16:26:46.528080 2026] [:error] [pid 59986:tid 60033] [client 51.103.165.5:40816] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "ad36Rp6axKeW6bX4H7cDxwAAAE0"]
[Tue Apr 14 16:26:47.002862 2026] [:error] [pid 59985:tid 60004] [client 51.103.165.5:41488] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "ad36R-gHaxkvLE6V1kkhSgAAAAs"]
[Tue Apr 14 16:26:47.477956 2026] [:error] [pid 59985:tid 60007] [client 51.103.165.5:40706] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "ad36R-gHaxkvLE6V1kkhSwAAAA4"]
[Tue Apr 14 16:26:47.949661 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:41511] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "ad36R1Wpk-Tfi6_vLKrG-QAAAIc"]
[Tue Apr 14 16:26:48.422686 2026] [:error] [pid 59986:tid 60044] [client 51.103.165.5:40728] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "ad36SJ6axKeW6bX4H7cDyQAAAFg"]
[Tue Apr 14 16:26:48.897370 2026] [:error] [pid 59987:tid 60055] [client 51.103.165.5:41533] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "ad36SFWpk-Tfi6_vLKrG_QAAAIg"]
[Tue Apr 14 16:26:49.368397 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:40741] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "ad36SZ6axKeW6bX4H7cDzAAAAE4"]
[Tue Apr 14 16:26:49.846948 2026] [:error] [pid 59987:tid 60056] [client 51.103.165.5:41582] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "ad36SVWpk-Tfi6_vLKrG_gAAAIk"]
[Tue Apr 14 16:26:50.373936 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:41524] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "ad36Sp6axKeW6bX4H7cDzgAAAFc"]
[Tue Apr 14 16:26:50.865801 2026] [:error] [pid 59986:tid 60024] [client 51.103.165.5:41540] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ad36Sp6axKeW6bX4H7cDzwAAAEQ"]
[Tue Apr 14 16:26:51.361169 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:39862] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ad36S56axKeW6bX4H7cD0AAAAFM"]
[Tue Apr 14 16:26:51.842207 2026] [:error] [pid 59987:tid 60057] [client 51.103.165.5:39872] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ad36S1Wpk-Tfi6_vLKrHBAAAAIo"]
[Tue Apr 14 16:26:52.313482 2026] [:error] [pid 59985:tid 60005] [client 51.103.165.5:41541] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ad36TOgHaxkvLE6V1kkhUQAAAAw"]
[Tue Apr 14 16:26:52.916373 2026] [:error] [pid 59985:tid 60017] [client 51.103.165.5:39881] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ad36TOgHaxkvLE6V1kkhUgAAABg"]
[Tue Apr 14 16:26:53.422432 2026] [:error] [pid 59987:tid 60056] [client 51.103.165.5:41566] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ad36TVWpk-Tfi6_vLKrHBwAAAIk"]
[Tue Apr 14 16:26:54.046720 2026] [:error] [pid 59987:tid 60061] [client 51.103.165.5:41596] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ad36TlWpk-Tfi6_vLKrHCQAAAI4"]
[Tue Apr 14 16:26:54.552290 2026] [:error] [pid 59987:tid 60062] [client 51.103.165.5:40709] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "ad36TlWpk-Tfi6_vLKrHCwAAAI8"]
[Tue Apr 14 16:26:55.090817 2026] [:error] [pid 59985:tid 59996] [client 51.103.165.5:40707] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "ad36T-gHaxkvLE6V1kkhVQAAAAM"]
[Tue Apr 14 16:26:55.595202 2026] [:error] [pid 59986:tid 60029] [client 51.103.165.5:39899] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "ad36T56axKeW6bX4H7cD2AAAAEk"]
[Tue Apr 14 16:26:56.094414 2026] [:error] [pid 60074:tid 60085] [client 51.103.165.5:40713] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "ad36UOtqnEmNU9vpHCkMegAAAMk"]
[Tue Apr 14 16:26:56.568380 2026] [:error] [pid 60074:tid 60092] [client 51.103.165.5:41563] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "ad36UOtqnEmNU9vpHCkMfAAAANA"]
[Tue Apr 14 16:26:57.090419 2026] [:error] [pid 59987:tid 60067] [client 51.103.165.5:40712] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "ad36UVWpk-Tfi6_vLKrHDgAAAJQ"]
[Tue Apr 14 16:26:57.565183 2026] [:error] [pid 60074:tid 60096] [client 51.103.165.5:41552] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "ad36UetqnEmNU9vpHCkMfwAAANQ"]
[Tue Apr 14 16:26:58.041772 2026] [:error] [pid 60074:tid 60084] [client 51.103.165.5:41572] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "ad36UutqnEmNU9vpHCkMgQAAAMg"]
[Tue Apr 14 16:26:58.512841 2026] [:error] [pid 59985:tid 59999] [client 51.103.165.5:41560] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "ad36UugHaxkvLE6V1kkhWwAAAAY"]
[Tue Apr 14 16:26:58.984776 2026] [:error] [pid 59985:tid 60006] [client 51.103.165.5:40808] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "ad36UugHaxkvLE6V1kkhXgAAAA0"]
[Tue Apr 14 16:26:59.461156 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:39902] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "ad36U56axKeW6bX4H7cD3QAAAEY"]
[Tue Apr 14 16:26:59.934313 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:40745] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "ad36U-tqnEmNU9vpHCkMhAAAAMA"]
[Tue Apr 14 16:27:00.413562 2026] [:error] [pid 59985:tid 60000] [client 51.103.165.5:40802] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "ad36VOgHaxkvLE6V1kkhYAAAAAc"]
[Tue Apr 14 16:27:00.887673 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:39888] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "ad36VFWpk-Tfi6_vLKrHDwAAAIc"]
[Tue Apr 14 16:27:01.403999 2026] [:error] [pid 59985:tid 60009] [client 51.103.165.5:40803] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "ad36VegHaxkvLE6V1kkhYwAAABA"]
[Tue Apr 14 16:27:01.875801 2026] [:error] [pid 59985:tid 59996] [client 51.103.165.5:41549] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "ad36VegHaxkvLE6V1kkhZQAAAAM"]
[Tue Apr 14 16:27:02.347565 2026] [:error] [pid 59985:tid 60002] [client 51.103.165.5:40817] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "ad36VugHaxkvLE6V1kkhaQAAAAk"]
[Tue Apr 14 16:27:02.820125 2026] [:error] [pid 59987:tid 60063] [client 51.103.165.5:40783] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "ad36VlWpk-Tfi6_vLKrHEgAAAJA"]
[Tue Apr 14 16:27:03.302835 2026] [:error] [pid 59987:tid 60055] [client 51.103.165.5:40812] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "ad36V1Wpk-Tfi6_vLKrHFAAAAIg"]
[Tue Apr 14 16:27:03.776489 2026] [:error] [pid 59985:tid 60000] [client 51.103.165.5:41598] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "ad36V-gHaxkvLE6V1kkhawAAAAc"]
[Tue Apr 14 16:27:04.251721 2026] [:error] [pid 60074:tid 60096] [client 51.103.165.5:40727] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "ad36WOtqnEmNU9vpHCkMigAAANQ"]
[Tue Apr 14 16:27:04.734224 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:40736] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "ad36WOtqnEmNU9vpHCkMjAAAAMA"]
[Tue Apr 14 16:27:05.208823 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:41518] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "ad36WetqnEmNU9vpHCkMkAAAAMc"]
[Tue Apr 14 16:27:05.686446 2026] [:error] [pid 60074:tid 60087] [client 51.103.165.5:39910] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "ad36WetqnEmNU9vpHCkMkwAAAMs"]
[Tue Apr 14 16:27:06.158742 2026] [:error] [pid 60074:tid 60096] [client 51.103.165.5:41585] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "ad36WutqnEmNU9vpHCkMlwAAANQ"]
[Tue Apr 14 16:27:06.630332 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:40744] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "ad36WutqnEmNU9vpHCkMmgAAAMM"]
[Tue Apr 14 16:27:07.104760 2026] [:error] [pid 59987:tid 60069] [client 51.103.165.5:40790] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "ad36W1Wpk-Tfi6_vLKrHFwAAAJY"]
[Tue Apr 14 16:27:07.582927 2026] [:error] [pid 59985:tid 59999] [client 51.103.165.5:41597] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "ad36W-gHaxkvLE6V1kkhcAAAAAY"]
[Tue Apr 14 16:27:08.054770 2026] [:error] [pid 59986:tid 60038] [client 51.103.165.5:39929] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "ad36XJ6axKeW6bX4H7cD4AAAAFI"]
[Tue Apr 14 16:27:08.538962 2026] [:error] [pid 60074:tid 60078] [client 51.103.165.5:40748] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ad36XOtqnEmNU9vpHCkMnwAAAMI"]
[Tue Apr 14 16:27:09.026880 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:41565] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ad36XetqnEmNU9vpHCkMoAAAANc"]
[Tue Apr 14 16:27:09.498863 2026] [:error] [pid 59986:tid 60023] [client 51.103.165.5:40820] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ad36XZ6axKeW6bX4H7cD4wAAAEM"]
[Tue Apr 14 16:27:09.971884 2026] [:error] [pid 60074:tid 60094] [client 51.103.165.5:40769] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ad36XetqnEmNU9vpHCkMogAAANI"]
[Tue Apr 14 16:27:10.444964 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:40821] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ad36XutqnEmNU9vpHCkMowAAAMA"]
[Tue Apr 14 16:27:10.927921 2026] [:error] [pid 59986:tid 60036] [client 51.103.165.5:39822] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ad36Xp6axKeW6bX4H7cD5QAAAFA"]
[Tue Apr 14 16:27:11.403393 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:40746] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ad36X1Wpk-Tfi6_vLKrHGwAAAIc"]
[Tue Apr 14 16:27:11.877539 2026] [:error] [pid 59986:tid 60032] [client 51.103.165.5:40793] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "ad36X56axKeW6bX4H7cD5wAAAEw"]
[Tue Apr 14 16:27:12.350450 2026] [:error] [pid 59986:tid 60041] [client 51.103.165.5:39913] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad36YJ6axKeW6bX4H7cD6AAAAFU"]
[Tue Apr 14 16:27:12.830290 2026] [:error] [pid 59987:tid 60065] [client 51.103.165.5:40826] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad36YFWpk-Tfi6_vLKrHHgAAAJI"]
[Tue Apr 14 16:27:13.310667 2026] [:error] [pid 59987:tid 60055] [client 51.103.165.5:40739] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad36YVWpk-Tfi6_vLKrHIAAAAIg"]
[Tue Apr 14 16:27:13.782096 2026] [:error] [pid 59985:tid 60002] [client 51.103.165.5:40789] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad36YegHaxkvLE6V1kkhdAAAAAk"]
[Tue Apr 14 16:27:14.255068 2026] [:error] [pid 59987:tid 60067] [client 51.103.165.5:39926] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "ad36YlWpk-Tfi6_vLKrHIwAAAJQ"]
[Tue Apr 14 16:27:14.728746 2026] [:error] [pid 59987:tid 60056] [client 51.103.165.5:40785] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "ad36YlWpk-Tfi6_vLKrHJgAAAIk"]
[Tue Apr 14 16:27:15.205429 2026] [:error] [pid 59987:tid 60050] [client 51.103.165.5:41503] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "ad36Y1Wpk-Tfi6_vLKrHKAAAAIM"]
[Tue Apr 14 16:27:15.675795 2026] [:error] [pid 60074:tid 60090] [client 51.103.165.5:40721] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "ad36Y-tqnEmNU9vpHCkMrAAAAM4"]
[Tue Apr 14 16:27:16.148171 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:39836] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "ad36ZJ6axKeW6bX4H7cD6wAAAE4"]
[Tue Apr 14 16:27:16.622208 2026] [:error] [pid 60074:tid 60077] [client 51.103.165.5:39809] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "ad36ZOtqnEmNU9vpHCkMrQAAAME"]
[Tue Apr 14 16:27:17.098317 2026] [:error] [pid 60074:tid 60082] [client 51.103.165.5:41473] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "ad36ZetqnEmNU9vpHCkMrgAAAMY"]
[Tue Apr 14 16:27:17.575533 2026] [:error] [pid 59985:tid 59997] [client 51.103.165.5:39909] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "ad36ZegHaxkvLE6V1kkhdQAAAAQ"]
[Tue Apr 14 16:27:18.052547 2026] [:error] [pid 59985:tid 60010] [client 51.103.165.5:41591] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "ad36ZugHaxkvLE6V1kkheAAAABE"]
[Tue Apr 14 16:27:18.535582 2026] [:error] [pid 60074:tid 60084] [client 51.103.165.5:39853] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "ad36ZutqnEmNU9vpHCkMsAAAAMg"]
[Tue Apr 14 16:27:19.008947 2026] [:error] [pid 60074:tid 60085] [client 51.103.165.5:39931] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "ad36Z-tqnEmNU9vpHCkMsQAAAMk"]
[Tue Apr 14 16:27:19.483591 2026] [:error] [pid 60074:tid 60096] [client 51.103.165.5:41479] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "ad36Z-tqnEmNU9vpHCkMtAAAANQ"]
[Tue Apr 14 16:27:19.955290 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:39897] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "ad36Z-tqnEmNU9vpHCkMtgAAAMo"]
[Tue Apr 14 16:27:20.428600 2026] [:error] [pid 60074:tid 60098] [client 51.103.165.5:39848] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "ad36aOtqnEmNU9vpHCkMuAAAANY"]
[Tue Apr 14 16:27:20.903236 2026] [:error] [pid 59985:tid 60000] [client 51.103.165.5:41551] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "ad36aOgHaxkvLE6V1kkhfAAAAAc"]
[Tue Apr 14 16:27:21.379510 2026] [:error] [pid 59986:tid 60042] [client 51.103.165.5:39921] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "ad36aZ6axKeW6bX4H7cD8wAAAFY"]
[Tue Apr 14 16:27:21.850911 2026] [:error] [pid 59986:tid 60040] [client 51.103.165.5:39829] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ad36aZ6axKeW6bX4H7cD9QAAAFQ"]
[Tue Apr 14 16:27:22.325436 2026] [:error] [pid 59985:tid 60005] [client 51.103.165.5:40804] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ad36augHaxkvLE6V1kkhfQAAAAw"]
[Tue Apr 14 16:27:22.806744 2026] [:error] [pid 59985:tid 60013] [client 51.103.165.5:40704] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ad36augHaxkvLE6V1kkhfgAAABQ"]
[Tue Apr 14 16:27:23.280579 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:39930] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ad36a56axKeW6bX4H7cD-wAAAFM"]
[Tue Apr 14 16:27:23.750893 2026] [:error] [pid 60074:tid 60081] [client 51.103.165.5:39363] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ad36a-tqnEmNU9vpHCkMvAAAAMU"]
[Tue Apr 14 16:27:24.228883 2026] [:error] [pid 59985:tid 60004] [client 51.103.165.5:40723] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ad36bOgHaxkvLE6V1kkhhAAAAAs"]
[Tue Apr 14 16:27:24.702315 2026] [:error] [pid 59985:tid 60010] [client 51.103.165.5:40757] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ad36bOgHaxkvLE6V1kkhhgAAABE"]
[Tue Apr 14 16:27:25.191657 2026] [:error] [pid 59985:tid 60009] [client 51.103.165.5:39817] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ad36begHaxkvLE6V1kkhhwAAABA"]
[Tue Apr 14 16:27:25.663464 2026] [:error] [pid 59985:tid 59999] [client 51.103.165.5:39841] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ad36begHaxkvLE6V1kkhiAAAAAY"]
[Tue Apr 14 16:27:26.136741 2026] [:error] [pid 59985:tid 60005] [client 51.103.165.5:41532] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ad36bugHaxkvLE6V1kkhiQAAAAw"]
[Tue Apr 14 16:27:26.611416 2026] [:error] [pid 60074:tid 60077] [client 51.103.165.5:40742] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ad36butqnEmNU9vpHCkMwwAAAME"]
[Tue Apr 14 16:27:27.086903 2026] [:error] [pid 59985:tid 60017] [client 51.103.165.5:41513] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ad36b-gHaxkvLE6V1kkhjAAAABg"]
[Tue Apr 14 16:27:27.562941 2026] [:error] [pid 59985:tid 59993] [client 51.103.165.5:39916] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ad36b-gHaxkvLE6V1kkhjwAAAAA"]
[Tue Apr 14 16:27:28.040578 2026] [:error] [pid 60074:tid 60091] [client 51.103.165.5:40731] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ad36cOtqnEmNU9vpHCkMxQAAAM8"]
[Tue Apr 14 16:27:28.512004 2026] [:error] [pid 59985:tid 60002] [client 51.103.165.5:40749] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ad36cOgHaxkvLE6V1kkhkwAAAAk"]
[Tue Apr 14 16:27:28.985418 2026] [:error] [pid 60074:tid 60088] [client 51.103.165.5:41558] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ad36cOtqnEmNU9vpHCkMxwAAAMw"]
[Tue Apr 14 16:27:29.457518 2026] [:error] [pid 59985:tid 60010] [client 51.103.165.5:39369] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad36cegHaxkvLE6V1kkhlAAAABE"]
[Tue Apr 14 16:27:29.929494 2026] [:error] [pid 60074:tid 60090] [client 51.103.165.5:41493] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad36cetqnEmNU9vpHCkMywAAAM4"]
[Tue Apr 14 16:27:30.401778 2026] [:error] [pid 60074:tid 60092] [client 51.103.165.5:41517] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad36cutqnEmNU9vpHCkMzQAAANA"]
[Tue Apr 14 16:27:30.873499 2026] [:error] [pid 59987:tid 60055] [client 51.103.165.5:39811] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ad36clWpk-Tfi6_vLKrHMgAAAIg"]
[Tue Apr 14 16:27:31.345212 2026] [:error] [pid 60074:tid 60077] [client 51.103.165.5:39866] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "ad36c-tqnEmNU9vpHCkMzwAAAME"]
[Tue Apr 14 16:27:31.819521 2026] [:error] [pid 59987:tid 60063] [client 51.103.165.5:39407] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "ad36c1Wpk-Tfi6_vLKrHMwAAAJA"]
[Tue Apr 14 16:27:32.291203 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:40766] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "ad36dOtqnEmNU9vpHCkM0QAAAMc"]
[Tue Apr 14 16:27:32.764472 2026] [:error] [pid 60074:tid 60082] [client 51.103.165.5:40710] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "ad36dOtqnEmNU9vpHCkM1AAAAMY"]
[Tue Apr 14 16:27:33.240136 2026] [:error] [pid 59987:tid 60067] [client 51.103.165.5:41476] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ad36dVWpk-Tfi6_vLKrHNAAAAJQ"]
[Tue Apr 14 16:27:33.715528 2026] [:error] [pid 59985:tid 59996] [client 51.103.165.5:41522] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ad36degHaxkvLE6V1kkhlQAAAAM"]
[Tue Apr 14 16:27:34.192473 2026] [:error] [pid 59986:tid 60033] [client 51.103.165.5:41498] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ad36dp6axKeW6bX4H7cECAAAAE0"]
[Tue Apr 14 16:27:34.664769 2026] [:error] [pid 60074:tid 60080] [client 51.103.165.5:39882] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ad36dutqnEmNU9vpHCkM3gAAAMQ"]
[Tue Apr 14 16:27:35.137283 2026] [:error] [pid 59985:tid 59998] [client 51.103.165.5:39814] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "ad36d-gHaxkvLE6V1kkhlgAAAAU"]
[Tue Apr 14 16:27:35.621444 2026] [:error] [pid 59987:tid 60051] [client 51.103.165.5:40823] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "ad36d1Wpk-Tfi6_vLKrHOgAAAIQ"]
[Tue Apr 14 16:27:36.098567 2026] [:error] [pid 59987:tid 60061] [client 51.103.165.5:41528] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "ad36eFWpk-Tfi6_vLKrHPAAAAI4"]
[Tue Apr 14 16:27:36.573933 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:39835] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "ad36eOtqnEmNU9vpHCkM4gAAAMA"]
[Tue Apr 14 16:27:37.047153 2026] [:error] [pid 60074:tid 60093] [client 51.103.165.5:39928] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "ad36eetqnEmNU9vpHCkM5gAAANE"]
[Tue Apr 14 16:27:37.521208 2026] [:error] [pid 60074:tid 60078] [client 51.103.165.5:39919] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "ad36eetqnEmNU9vpHCkM5wAAAMI"]
[Tue Apr 14 16:27:37.993536 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:40753] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "ad36eetqnEmNU9vpHCkM6AAAAMc"]
[Tue Apr 14 16:27:38.467065 2026] [:error] [pid 59987:tid 60047] [client 51.103.165.5:41515] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "ad36elWpk-Tfi6_vLKrHPgAAAIA"]
[Tue Apr 14 16:27:38.944266 2026] [:error] [pid 60074:tid 60097] [client 51.103.165.5:41569] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "ad36eutqnEmNU9vpHCkM7QAAANU"]
[Tue Apr 14 16:27:39.415549 2026] [:error] [pid 59985:tid 60012] [client 51.103.165.5:40827] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "ad36e-gHaxkvLE6V1kkhmAAAABM"]
[Tue Apr 14 16:27:39.887183 2026] [:error] [pid 59986:tid 60031] [client 51.103.165.5:39828] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "ad36e56axKeW6bX4H7cECgAAAEs"]
[Tue Apr 14 16:27:40.365877 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:40734] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "ad36fJ6axKeW6bX4H7cECwAAAFc"]
[Tue Apr 14 16:27:40.838385 2026] [:error] [pid 60074:tid 60089] [client 51.103.165.5:40719] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ad36fOtqnEmNU9vpHCkM9gAAAM0"]
[Tue Apr 14 16:27:41.309655 2026] [:error] [pid 60074:tid 60090] [client 51.103.165.5:40800] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ad36fetqnEmNU9vpHCkM-AAAAM4"]
[Tue Apr 14 16:27:41.785569 2026] [:error] [pid 59985:tid 60009] [client 51.103.165.5:39855] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ad36fegHaxkvLE6V1kkhnAAAABA"]
[Tue Apr 14 16:27:42.258132 2026] [:error] [pid 59986:tid 60020] [client 51.103.165.5:40740] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ad36fp6axKeW6bX4H7cEDgAAAEA"]
[Tue Apr 14 16:27:42.735618 2026] [:error] [pid 60074:tid 60093] [client 51.103.165.5:40764] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad36futqnEmNU9vpHCkM_gAAANE"]
[Tue Apr 14 16:27:43.208480 2026] [:error] [pid 60074:tid 60091] [client 51.103.165.5:40819] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad36f-tqnEmNU9vpHCkNAgAAAM8"]
[Tue Apr 14 16:27:43.688999 2026] [:error] [pid 59985:tid 60007] [client 51.103.165.5:41475] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ad36f-gHaxkvLE6V1kkhngAAAA4"]
[Tue Apr 14 16:27:44.430249 2026] [:error] [pid 60074:tid 60098] [client 51.103.165.5:39903] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Tue Apr 14 16:27:44.669834 2026] [:error] [pid 60074:tid 60092] [client 51.103.165.5:39903] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Tue Apr 14 16:27:44.908740 2026] [:error] [pid 60074:tid 60088] [client 51.103.165.5:39903] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Tue Apr 14 16:27:45.148549 2026] [:error] [pid 60074:tid 60089] [client 51.103.165.5:39903] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue Apr 14 16:27:45.872544 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:39903] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Apr 14 16:27:46.112944 2026] [:error] [pid 60074:tid 60084] [client 51.103.165.5:39903] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Apr 14 16:27:46.352980 2026] [:error] [pid 60074:tid 60094] [client 51.103.165.5:39903] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Apr 14 16:27:46.594348 2026] [:error] [pid 60074:tid 60088] [client 51.103.165.5:39903] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Apr 14 16:27:46.831298 2026] [:error] [pid 60074:tid 60078] [client 51.103.165.5:39903] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "ad36gutqnEmNU9vpHCkNIAAAAMI"]
[Tue Apr 14 16:27:47.305574 2026] [:error] [pid 59985:tid 59998] [client 51.103.165.5:39879] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "ad36g-gHaxkvLE6V1kkhpAAAAAU"]
[Tue Apr 14 16:27:47.804443 2026] [:error] [pid 60074:tid 60077] [client 51.103.165.5:39374] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "ad36g-tqnEmNU9vpHCkNJQAAAME"]
[Tue Apr 14 16:27:48.277444 2026] [:error] [pid 59987:tid 60047] [client 51.103.165.5:40825] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "ad36hFWpk-Tfi6_vLKrHQwAAAIA"]
[Tue Apr 14 16:27:48.748589 2026] [:error] [pid 59987:tid 60068] [client 51.103.165.5:39894] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad36hFWpk-Tfi6_vLKrHRQAAAJU"]
[Tue Apr 14 16:27:49.222544 2026] [:error] [pid 59987:tid 60065] [client 51.103.165.5:39879] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad36hVWpk-Tfi6_vLKrHSQAAAJI"]
[Tue Apr 14 16:27:49.696167 2026] [:error] [pid 59985:tid 60009] [client 51.103.165.5:41557] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad36hegHaxkvLE6V1kkhqQAAABA"]
[Tue Apr 14 16:27:50.169334 2026] [:error] [pid 59987:tid 60058] [client 51.103.165.5:41562] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ad36hlWpk-Tfi6_vLKrHSwAAAIs"]
[Tue Apr 14 16:27:50.641226 2026] [:error] [pid 59987:tid 60057] [client 51.103.165.5:40761] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ad36hlWpk-Tfi6_vLKrHTAAAAIo"]
[Tue Apr 14 16:27:51.139398 2026] [:error] [pid 59985:tid 60001] [client 51.103.165.5:39927] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ad36h-gHaxkvLE6V1kkhrgAAAAg"]
[Tue Apr 14 16:27:51.610603 2026] [:error] [pid 59987:tid 60063] [client 51.103.165.5:39915] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ad36h1Wpk-Tfi6_vLKrHTQAAAJA"]
[Tue Apr 14 16:27:52.081844 2026] [:error] [pid 59985:tid 59997] [client 51.103.165.5:39890] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ad36iOgHaxkvLE6V1kkhtgAAAAQ"]
[Tue Apr 14 16:27:52.553690 2026] [:error] [pid 59986:tid 60038] [client 51.103.165.5:40755] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "ad36iJ6axKeW6bX4H7cEFAAAAFI"]
[Tue Apr 14 16:27:53.027082 2026] [:error] [pid 60074:tid 60082] [client 51.103.165.5:39932] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "ad36ietqnEmNU9vpHCkNKgAAAMY"]
[Tue Apr 14 16:27:53.502338 2026] [:error] [pid 60074:tid 60077] [client 51.103.165.5:41581] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "ad36ietqnEmNU9vpHCkNKwAAAME"]
[Tue Apr 14 16:27:53.976163 2026] [:error] [pid 60074:tid 60081] [client 51.103.165.5:40726] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "ad36ietqnEmNU9vpHCkNLAAAAMU"]
[Tue Apr 14 16:27:54.471835 2026] [:error] [pid 60074:tid 60095] [client 51.103.165.5:39920] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "ad36iutqnEmNU9vpHCkNLQAAANM"]
[Tue Apr 14 16:27:54.944602 2026] [:error] [pid 60074:tid 60076] [client 51.103.165.5:39856] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "ad36iutqnEmNU9vpHCkNLwAAAMA"]
[Tue Apr 14 16:27:55.461353 2026] [:error] [pid 59987:tid 60068] [client 51.103.165.5:41548] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "ad36i1Wpk-Tfi6_vLKrHVQAAAJU"]
[Tue Apr 14 16:27:55.936301 2026] [:error] [pid 59987:tid 60064] [client 51.103.165.5:41487] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "ad36i1Wpk-Tfi6_vLKrHVgAAAJE"]
[Tue Apr 14 16:27:56.409784 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:39367] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "ad36jJ6axKeW6bX4H7cEFwAAAFM"]
[Tue Apr 14 16:27:56.881928 2026] [:error] [pid 59985:tid 59993] [client 51.103.165.5:39346] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "ad36jOgHaxkvLE6V1kkhvAAAAAA"]
[Tue Apr 14 16:27:57.362654 2026] [:error] [pid 59985:tid 60015] [client 51.103.165.5:40720] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "ad36jegHaxkvLE6V1kkhvQAAABY"]
[Tue Apr 14 16:27:57.838837 2026] [:error] [pid 59985:tid 60013] [client 51.103.165.5:40822] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "ad36jegHaxkvLE6V1kkhwAAAABQ"]
[Tue Apr 14 16:27:58.310932 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:39824] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "ad36jp6axKeW6bX4H7cEHQAAAEY"]
[Tue Apr 14 16:27:58.781688 2026] [:error] [pid 59985:tid 60003] [client 51.103.165.5:40759] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "ad36jugHaxkvLE6V1kkhxQAAAAo"]
[Tue Apr 14 16:27:59.254208 2026] [:error] [pid 60074:tid 60094] [client 51.103.165.5:39920] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "ad36j-tqnEmNU9vpHCkNNAAAANI"]
[Tue Apr 14 16:27:59.740949 2026] [:error] [pid 59985:tid 60005] [client 51.103.165.5:39907] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "ad36j-gHaxkvLE6V1kkhxwAAAAw"]
[Tue Apr 14 16:28:00.222359 2026] [:error] [pid 59987:tid 60051] [client 51.103.165.5:40750] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "ad36kFWpk-Tfi6_vLKrHWQAAAIQ"]
[Tue Apr 14 16:28:00.697205 2026] [:error] [pid 59986:tid 60033] [client 51.103.165.5:40747] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "ad36kJ6axKeW6bX4H7cEIAAAAE0"]
[Tue Apr 14 16:28:01.172844 2026] [:error] [pid 60074:tid 60082] [client 51.103.165.5:39895] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "ad36ketqnEmNU9vpHCkNOAAAAMY"]
[Tue Apr 14 16:28:01.646268 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:39892] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "ad36ketqnEmNU9vpHCkNOgAAAMM"]
[Tue Apr 14 16:28:02.120013 2026] [:error] [pid 59985:tid 59999] [client 51.103.165.5:40725] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ad36kugHaxkvLE6V1kkhzQAAAAY"]
[Tue Apr 14 16:28:02.594406 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:39896] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ad36kp6axKeW6bX4H7cEJAAAAE4"]
[Tue Apr 14 16:28:03.087348 2026] [:error] [pid 59985:tid 59998] [client 51.103.165.5:41502] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ad36k-gHaxkvLE6V1kkhzgAAAAU"]
[Tue Apr 14 16:28:03.560153 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:39364] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ad36k-tqnEmNU9vpHCkNQAAAAMc"]
[Tue Apr 14 16:28:04.043784 2026] [:error] [pid 59987:tid 60068] [client 51.103.165.5:39825] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad36lFWpk-Tfi6_vLKrHXAAAAJU"]
[Tue Apr 14 16:28:04.519446 2026] [:error] [pid 59985:tid 59995] [client 51.103.165.5:38608] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad36lOgHaxkvLE6V1kkhzwAAAAI"]
[Tue Apr 14 16:28:04.993845 2026] [:error] [pid 59987:tid 60065] [client 51.103.165.5:39875] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad36lFWpk-Tfi6_vLKrHXgAAAJI"]
[Tue Apr 14 16:28:05.467022 2026] [:error] [pid 60074:tid 60081] [client 51.103.165.5:39858] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ad36letqnEmNU9vpHCkNUAAAAMU"]
[Tue Apr 14 16:28:05.967082 2026] [:error] [pid 60074:tid 60082] [client 51.103.165.5:39935] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad36letqnEmNU9vpHCkNWgAAAMY"]
[Tue Apr 14 16:28:06.439337 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:39393] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad36lutqnEmNU9vpHCkNWwAAAMM"]
[Tue Apr 14 16:28:06.913831 2026] [:error] [pid 59985:tid 59995] [client 51.103.165.5:39905] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad36lugHaxkvLE6V1kkh3gAAAAI"]
[Tue Apr 14 16:28:07.395834 2026] [:error] [pid 59985:tid 60012] [client 51.103.165.5:40718] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "ad36l-gHaxkvLE6V1kkh4QAAABM"]
[Tue Apr 14 16:28:07.870289 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:39908] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad36l1Wpk-Tfi6_vLKrHcQAAAIc"]
[Tue Apr 14 16:28:08.359328 2026] [:error] [pid 59987:tid 60063] [client 51.103.165.5:39904] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad36mFWpk-Tfi6_vLKrHdAAAAJA"]
[Tue Apr 14 16:28:08.856529 2026] [:error] [pid 59987:tid 60059] [client 51.103.165.5:39826] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad36mFWpk-Tfi6_vLKrHdwAAAIw"]
[Tue Apr 14 16:28:09.333986 2026] [:error] [pid 59987:tid 60060] [client 51.103.165.5:39818] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ad36mVWpk-Tfi6_vLKrHeQAAAI0"]
[Tue Apr 14 16:28:09.806099 2026] [:error] [pid 59987:tid 60053] [client 51.103.165.5:40708] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "ad36mVWpk-Tfi6_vLKrHewAAAIY"]
[Tue Apr 14 16:28:10.278018 2026] [:error] [pid 59985:tid 60015] [client 51.103.165.5:39873] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "ad36mugHaxkvLE6V1kkh5gAAABY"]
[Tue Apr 14 16:28:10.749124 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:39373] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "ad36mutqnEmNU9vpHCkNYAAAANc"]
[Tue Apr 14 16:28:11.220062 2026] [:error] [pid 59987:tid 60071] [client 51.103.165.5:40801] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "ad36m1Wpk-Tfi6_vLKrHfQAAAJg"]
[Tue Apr 14 16:28:11.693860 2026] [:error] [pid 59987:tid 60065] [client 51.103.165.5:39874] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ad36m1Wpk-Tfi6_vLKrHgAAAAJI"]
[Tue Apr 14 16:28:12.168429 2026] [:error] [pid 59985:tid 59993] [client 51.103.165.5:40733] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ad36nOgHaxkvLE6V1kkh6AAAAAA"]
[Tue Apr 14 16:28:12.649267 2026] [:error] [pid 59985:tid 60016] [client 51.103.165.5:39880] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ad36nOgHaxkvLE6V1kkh6gAAABc"]
[Tue Apr 14 16:28:13.121901 2026] [:error] [pid 59985:tid 59994] [client 51.103.165.5:39854] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ad36negHaxkvLE6V1kkh7AAAAAE"]
[Tue Apr 14 16:28:13.594947 2026] [:error] [pid 60074:tid 60100] [client 51.103.165.5:39924] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad36netqnEmNU9vpHCkNZgAAANg"]
[Tue Apr 14 16:28:14.080831 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:41514] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad36np6axKeW6bX4H7cELwAAAFc"]
[Tue Apr 14 16:28:14.552838 2026] [:error] [pid 60074:tid 60087] [client 51.103.165.5:39815] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad36nutqnEmNU9vpHCkNaQAAAMs"]
[Tue Apr 14 16:28:15.076156 2026] [:error] [pid 59987:tid 60056] [client 51.103.165.5:41580] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "ad36n1Wpk-Tfi6_vLKrHgwAAAIk"]
[Tue Apr 14 16:28:15.550559 2026] [:error] [pid 59985:tid 60006] [client 51.103.165.5:39809] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "ad36n-gHaxkvLE6V1kkh7gAAAA0"]
[Tue Apr 14 16:28:16.023206 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:39900] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "ad36oOtqnEmNU9vpHCkNbQAAANc"]
[Tue Apr 14 16:28:16.498917 2026] [:error] [pid 59985:tid 60000] [client 51.103.165.5:41554] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "ad36oOgHaxkvLE6V1kkh7wAAAAc"]
[Tue Apr 14 16:28:16.985469 2026] [:error] [pid 59986:tid 60024] [client 51.103.165.5:39813] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "ad36oJ6axKeW6bX4H7cENwAAAEQ"]
[Tue Apr 14 16:28:17.458839 2026] [:error] [pid 59985:tid 59993] [client 51.103.165.5:39820] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad36oegHaxkvLE6V1kkh8gAAAAA"]
[Tue Apr 14 16:28:17.936510 2026] [:error] [pid 60074:tid 60078] [client 51.103.165.5:39839] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad36oetqnEmNU9vpHCkNcAAAAMI"]
[Tue Apr 14 16:28:18.409380 2026] [:error] [pid 59986:tid 60020] [client 51.103.165.5:39925] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad36op6axKeW6bX4H7cEPAAAAEA"]
[Tue Apr 14 16:28:18.880632 2026] [:error] [pid 60074:tid 60092] [client 51.103.165.5:39859] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "ad36outqnEmNU9vpHCkNcgAAANA"]
[Tue Apr 14 16:28:19.353487 2026] [:error] [pid 60074:tid 60100] [client 51.103.165.5:39912] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ad36o-tqnEmNU9vpHCkNdAAAANg"]
[Tue Apr 14 16:28:19.842475 2026] [:error] [pid 60074:tid 60088] [client 51.103.165.5:40754] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ad36o-tqnEmNU9vpHCkNdgAAAMw"]
[Tue Apr 14 16:28:20.316487 2026] [:error] [pid 59985:tid 60017] [client 51.103.165.5:41561] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ad36pOgHaxkvLE6V1kkh-AAAABg"]
[Tue Apr 14 16:28:20.804626 2026] [:error] [pid 59986:tid 60035] [client 51.103.165.5:38615] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ad36pJ6axKeW6bX4H7cEQAAAAE8"]
[Tue Apr 14 16:28:21.302299 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:39844] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "ad36petqnEmNU9vpHCkNegAAAMo"]
[Tue Apr 14 16:28:21.775672 2026] [:error] [pid 59986:tid 60030] [client 51.103.165.5:40717] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "ad36pZ6axKeW6bX4H7cEQgAAAEo"]
[Tue Apr 14 16:28:22.248434 2026] [:error] [pid 60074:tid 60097] [client 51.103.165.5:39313] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "ad36putqnEmNU9vpHCkNfgAAANU"]
[Tue Apr 14 16:28:22.720484 2026] [:error] [pid 59985:tid 60014] [client 51.103.165.5:39417] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "ad36pugHaxkvLE6V1kkh-wAAABU"]
[Tue Apr 14 16:28:23.193195 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:41520] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "ad36p56axKeW6bX4H7cERQAAAE4"]
[Tue Apr 14 16:28:23.676452 2026] [:error] [pid 59986:tid 60028] [client 51.103.165.5:39404] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "ad36p56axKeW6bX4H7cESgAAAEg"]
[Tue Apr 14 16:28:24.149633 2026] [:error] [pid 60074:tid 60088] [client 51.103.165.5:39870] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "ad36qOtqnEmNU9vpHCkNgwAAAMw"]
[Tue Apr 14 16:28:24.621100 2026] [:error] [pid 59986:tid 60042] [client 51.103.165.5:39388] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "ad36qJ6axKeW6bX4H7cEUQAAAFY"]
[Tue Apr 14 16:28:25.092629 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:39389] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "ad36qetqnEmNU9vpHCkNhAAAAMc"]
[Tue Apr 14 16:28:25.572214 2026] [:error] [pid 59987:tid 60060] [client 51.103.165.5:39808] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "ad36qVWpk-Tfi6_vLKrHjQAAAI0"]
[Tue Apr 14 16:28:26.046495 2026] [:error] [pid 60074:tid 60094] [client 51.103.165.5:40714] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "ad36qutqnEmNU9vpHCkNhwAAANI"]
[Tue Apr 14 16:28:26.520186 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:39333] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "ad36qutqnEmNU9vpHCkNiQAAAMo"]
[Tue Apr 14 16:28:26.995616 2026] [:error] [pid 59987:tid 60069] [client 51.103.165.5:39934] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "ad36qlWpk-Tfi6_vLKrHjwAAAJY"]
[Tue Apr 14 16:28:27.477084 2026] [:error] [pid 60074:tid 60089] [client 51.103.165.5:40807] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "ad36q-tqnEmNU9vpHCkNjAAAAM0"]
[Tue Apr 14 16:28:27.950456 2026] [:error] [pid 59987:tid 60067] [client 51.103.165.5:38596] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "ad36q1Wpk-Tfi6_vLKrHkAAAAJQ"]
[Tue Apr 14 16:28:28.421749 2026] [:error] [pid 59987:tid 60066] [client 51.103.165.5:41478] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "ad36rFWpk-Tfi6_vLKrHkQAAAJM"]
[Tue Apr 14 16:28:28.894483 2026] [:error] [pid 59985:tid 60009] [client 51.103.165.5:39332] [client 51.103.165.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ad36rOgHaxkvLE6V1kkiBQAAABA"]
[Tue Apr 14 16:28:29.365507 2026] [:error] [pid 59985:tid 60006] [client 51.103.165.5:39837] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "ad36regHaxkvLE6V1kkiBgAAAA0"]
[Tue Apr 14 16:28:29.842113 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:40765] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "ad36retqnEmNU9vpHCkNkAAAANc"]
[Tue Apr 14 16:28:30.314230 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:41578] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "ad36rutqnEmNU9vpHCkNkgAAAMo"]
[Tue Apr 14 16:28:30.816852 2026] [:error] [pid 59985:tid 60000] [client 51.103.165.5:39911] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad36rugHaxkvLE6V1kkiCwAAAAc"]
[Tue Apr 14 16:28:31.288645 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:39421] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad36r56axKeW6bX4H7cEdAAAAFc"]
[Tue Apr 14 16:28:31.760518 2026] [:error] [pid 59986:tid 60021] [client 51.103.165.5:39319] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad36r56axKeW6bX4H7cEeAAAAEE"]
[Tue Apr 14 16:28:32.232776 2026] [:error] [pid 59987:tid 60065] [client 51.103.165.5:40730] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ad36sFWpk-Tfi6_vLKrHlwAAAJI"]
[Tue Apr 14 16:28:32.709146 2026] [:error] [pid 59985:tid 60016] [client 51.103.165.5:40760] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad36sOgHaxkvLE6V1kkiDQAAABc"]
[Tue Apr 14 16:28:33.182711 2026] [:error] [pid 59987:tid 60064] [client 51.103.165.5:39893] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad36sVWpk-Tfi6_vLKrHmQAAAJE"]
[Tue Apr 14 16:28:33.656232 2026] [:error] [pid 59985:tid 59999] [client 51.103.165.5:39400] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad36segHaxkvLE6V1kkiEgAAAAY"]
[Tue Apr 14 16:28:34.129226 2026] [:error] [pid 59985:tid 59995] [client 51.103.165.5:40751] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ad36sugHaxkvLE6V1kkiFQAAAAI"]
[Tue Apr 14 16:28:34.605903 2026] [:error] [pid 59985:tid 60009] [client 51.103.165.5:39827] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "ad36sugHaxkvLE6V1kkiGAAAABA"]
[Tue Apr 14 16:28:35.089984 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:39819] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "ad36s56axKeW6bX4H7cEiQAAAEY"]
[Tue Apr 14 16:28:35.563936 2026] [:error] [pid 59987:tid 60051] [client 51.103.165.5:39384] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "ad36s1Wpk-Tfi6_vLKrHogAAAIQ"]
[Tue Apr 14 16:28:36.062667 2026] [:error] [pid 59987:tid 60071] [client 51.103.165.5:39358] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "ad36tFWpk-Tfi6_vLKrHpQAAAJg"]
[Tue Apr 14 16:28:36.534736 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:39391] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ad36tOtqnEmNU9vpHCkNlwAAAMc"]
[Tue Apr 14 16:28:37.007579 2026] [:error] [pid 59986:tid 60032] [client 51.103.165.5:39324] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ad36tZ6axKeW6bX4H7cEkwAAAEw"]
[Tue Apr 14 16:28:37.480045 2026] [:error] [pid 59985:tid 60010] [client 51.103.165.5:40811] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ad36tegHaxkvLE6V1kkiIgAAABE"]
[Tue Apr 14 16:28:37.950296 2026] [:error] [pid 60074:tid 60080] [client 51.103.165.5:39864] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ad36tetqnEmNU9vpHCkNnwAAAMQ"]
[Tue Apr 14 16:28:38.459543 2026] [:error] [pid 60074:tid 60090] [client 51.103.165.5:41509] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "ad36tutqnEmNU9vpHCkNogAAAM4"]
[Tue Apr 14 16:28:38.930892 2026] [:error] [pid 59986:tid 60021] [client 51.103.165.5:39868] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "ad36tp6axKeW6bX4H7cEnQAAAEE"]
[Tue Apr 14 16:28:39.404364 2026] [:error] [pid 60074:tid 60087] [client 51.103.165.5:41527] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "ad36t-tqnEmNU9vpHCkNpwAAAMs"]
[Tue Apr 14 16:28:39.877147 2026] [:error] [pid 59987:tid 60054] [client 51.103.165.5:39891] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "ad36t1Wpk-Tfi6_vLKrHsQAAAIc"]
[Tue Apr 14 16:28:40.395583 2026] [:error] [pid 59986:tid 60032] [client 51.103.165.5:39337] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "ad36uJ6axKeW6bX4H7cEpQAAAEw"]
[Tue Apr 14 16:28:40.867905 2026] [:error] [pid 60074:tid 60082] [client 51.103.165.5:39395] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "ad36uOtqnEmNU9vpHCkNqAAAAMY"]
[Tue Apr 14 16:28:41.341700 2026] [:error] [pid 59986:tid 60033] [client 51.103.165.5:40711] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "ad36uZ6axKeW6bX4H7cErAAAAE0"]
[Tue Apr 14 16:28:41.813530 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:40829] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "ad36uetqnEmNU9vpHCkNqwAAAMc"]
[Tue Apr 14 16:28:42.285289 2026] [:error] [pid 59985:tid 60009] [client 51.103.165.5:41579] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "ad36uugHaxkvLE6V1kkiJgAAABA"]
[Tue Apr 14 16:28:42.757847 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:39416] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "ad36uutqnEmNU9vpHCkNrQAAAMM"]
[Tue Apr 14 16:28:43.231887 2026] [:error] [pid 59985:tid 60005] [client 51.103.165.5:38622] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "ad36u-gHaxkvLE6V1kkiJwAAAAw"]
[Tue Apr 14 16:28:43.719213 2026] [:error] [pid 59986:tid 60024] [client 51.103.165.5:40797] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "ad36u56axKeW6bX4H7cEvwAAAEQ"]
[Tue Apr 14 16:28:44.195381 2026] [:error] [pid 59985:tid 60003] [client 51.103.165.5:39901] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "ad36vOgHaxkvLE6V1kkiKQAAAAo"]
[Tue Apr 14 16:28:44.669410 2026] [:error] [pid 59985:tid 60016] [client 51.103.165.5:39413] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "ad36vOgHaxkvLE6V1kkiKwAAABc"]
[Tue Apr 14 16:28:45.141744 2026] [:error] [pid 59985:tid 60008] [client 51.103.165.5:41580] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "ad36vegHaxkvLE6V1kkiMAAAAA8"]
[Tue Apr 14 16:28:45.640971 2026] [:error] [pid 59987:tid 60055] [client 51.103.165.5:39354] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "ad36vVWpk-Tfi6_vLKrHuwAAAIg"]
[Tue Apr 14 16:28:46.116037 2026] [:error] [pid 60074:tid 60086] [client 51.103.165.5:40752] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Tue Apr 14 16:28:46.354848 2026] [:error] [pid 60074:tid 60083] [client 51.103.165.5:40752] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Tue Apr 14 16:28:46.597073 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:40752] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Tue Apr 14 16:28:47.087215 2026] [:error] [pid 60074:tid 60077] [client 51.103.165.5:40752] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Tue Apr 14 16:28:47.326380 2026] [:error] [pid 60074:tid 60080] [client 51.103.165.5:40752] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php
[Tue Apr 14 16:28:47.565647 2026] [:error] [pid 60074:tid 60091] [client 51.103.165.5:40752] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Tue Apr 14 16:28:47.804589 2026] [:error] [pid 60074:tid 60081] [client 51.103.165.5:40752] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Tue Apr 14 16:28:48.042322 2026] [:error] [pid 60074:tid 60092] [client 51.103.165.5:40752] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Tue Apr 14 16:28:48.284732 2026] [:error] [pid 60074:tid 60088] [client 51.103.165.5:40752] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Tue Apr 14 16:28:48.766684 2026] [:error] [pid 60074:tid 60082] [client 51.103.165.5:40752] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ad36wOtqnEmNU9vpHCkNwAAAAMY"]
[Tue Apr 14 16:28:49.273654 2026] [:error] [pid 59986:tid 60028] [client 51.103.165.5:39883] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ad36wZ6axKeW6bX4H7cE3AAAAEg"]
[Tue Apr 14 16:28:49.745616 2026] [:error] [pid 59986:tid 60043] [client 51.103.165.5:39322] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ad36wZ6axKeW6bX4H7cE3QAAAFc"]
[Tue Apr 14 16:28:50.226075 2026] [:error] [pid 59987:tid 60065] [client 51.103.165.5:39298] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ad36wlWpk-Tfi6_vLKrH1gAAAJI"]
[Tue Apr 14 16:28:50.706504 2026] [:error] [pid 60074:tid 60079] [client 51.103.165.5:38638] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "ad36wutqnEmNU9vpHCkNwQAAAMM"]
[Tue Apr 14 16:28:51.182626 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:39922] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "ad36w-tqnEmNU9vpHCkNwwAAANc"]
[Tue Apr 14 16:28:51.657368 2026] [:error] [pid 59985:tid 60007] [client 51.103.165.5:39300] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "ad36w-gHaxkvLE6V1kkiOgAAAA4"]
[Tue Apr 14 16:28:52.130832 2026] [:error] [pid 59986:tid 60021] [client 51.103.165.5:39418] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "ad36xJ6axKeW6bX4H7cE4wAAAEE"]
[Tue Apr 14 16:28:52.624408 2026] [:error] [pid 60074:tid 60095] [client 51.103.165.5:40716] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "ad36xOtqnEmNU9vpHCkNygAAANM"]
[Tue Apr 14 16:28:53.098695 2026] [:error] [pid 60074:tid 60097] [client 51.103.165.5:39842] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "ad36xetqnEmNU9vpHCkNywAAANU"]
[Tue Apr 14 16:28:53.591185 2026] [:error] [pid 59987:tid 60062] [client 51.103.165.5:39831] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "ad36xVWpk-Tfi6_vLKrH4AAAAI8"]
[Tue Apr 14 16:28:54.062019 2026] [:error] [pid 60074:tid 60093] [client 51.103.165.5:39366] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "ad36xutqnEmNU9vpHCkN0AAAANE"]
[Tue Apr 14 16:28:54.563974 2026] [:error] [pid 59987:tid 60056] [client 51.103.165.5:39387] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "ad36xlWpk-Tfi6_vLKrH5AAAAIk"]
[Tue Apr 14 16:28:55.045131 2026] [:error] [pid 59987:tid 60064] [client 51.103.165.5:39302] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "ad36x1Wpk-Tfi6_vLKrH5gAAAJE"]
[Tue Apr 14 16:28:55.517830 2026] [:error] [pid 60074:tid 60099] [client 51.103.165.5:39403] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "ad36x-tqnEmNU9vpHCkN0wAAANc"]
[Tue Apr 14 16:28:55.992995 2026] [:error] [pid 60074:tid 60089] [client 51.103.165.5:39360] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "ad36x-tqnEmNU9vpHCkN1AAAAM0"]
[Tue Apr 14 16:28:56.475881 2026] [:error] [pid 60074:tid 60081] [client 51.103.165.5:40756] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "ad36yOtqnEmNU9vpHCkN1wAAAMU"]
[Tue Apr 14 16:28:56.971537 2026] [:error] [pid 59987:tid 60066] [client 51.103.165.5:41545] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "ad36yFWpk-Tfi6_vLKrH8AAAAJM"]
[Tue Apr 14 16:28:57.443283 2026] [:error] [pid 59987:tid 60061] [client 51.103.165.5:39865] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "ad36yVWpk-Tfi6_vLKrH9AAAAI4"]
[Tue Apr 14 16:28:57.922638 2026] [:error] [pid 59987:tid 60065] [client 51.103.165.5:39325] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class20.php"] [unique_id "ad36yVWpk-Tfi6_vLKrH9wAAAJI"]
[Tue Apr 14 16:28:58.394838 2026] [:error] [pid 59987:tid 60070] [client 51.103.165.5:39830] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "ad36ylWpk-Tfi6_vLKrH-gAAAJc"]
[Tue Apr 14 16:28:58.874876 2026] [:error] [pid 59987:tid 60057] [client 51.103.165.5:40767] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "ad36ylWpk-Tfi6_vLKrH_QAAAIo"]
[Tue Apr 14 16:28:59.357293 2026] [:error] [pid 59986:tid 60034] [client 51.103.165.5:39877] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "ad36y56axKeW6bX4H7cE8QAAAE4"]
[Tue Apr 14 16:28:59.848730 2026] [:error] [pid 59987:tid 60066] [client 51.103.165.5:39392] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "ad36y1Wpk-Tfi6_vLKrIAQAAAJM"]
[Tue Apr 14 16:29:00.325568 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:39840] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "ad36zJ6axKeW6bX4H7cE8wAAAEY"]
[Tue Apr 14 16:29:00.809601 2026] [:error] [pid 59987:tid 60056] [client 51.103.165.5:39398] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "ad36zFWpk-Tfi6_vLKrIFQAAAIk"]
[Tue Apr 14 16:29:01.286067 2026] [:error] [pid 59987:tid 60055] [client 51.103.165.5:39348] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "ad36zVWpk-Tfi6_vLKrIKgAAAIg"]
[Tue Apr 14 16:29:01.759622 2026] [:error] [pid 59986:tid 60031] [client 51.103.165.5:39877] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "ad36zZ6axKeW6bX4H7cE9gAAAEs"]
[Tue Apr 14 16:29:02.256378 2026] [:error] [pid 59986:tid 60020] [client 51.103.165.5:39405] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ad36zp6axKeW6bX4H7cE9wAAAEA"]
[Tue Apr 14 16:29:02.732079 2026] [:error] [pid 59987:tid 60062] [client 51.103.165.5:39339] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ad36zlWpk-Tfi6_vLKrIOgAAAI8"]
[Tue Apr 14 16:29:03.252454 2026] [:error] [pid 59986:tid 60022] [client 51.103.165.5:39412] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ad36z56axKeW6bX4H7cE-AAAAEI"]
[Tue Apr 14 16:29:03.724367 2026] [:error] [pid 60074:tid 60077] [client 51.103.165.5:38609] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "ad36z-tqnEmNU9vpHCkOGQAAAME"]
[Tue Apr 14 16:29:04.197278 2026] [:error] [pid 59987:tid 60063] [client 51.103.165.5:39923] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ad360FWpk-Tfi6_vLKrISgAAAJA"]
[Tue Apr 14 16:29:04.668967 2026] [:error] [pid 59985:tid 60016] [client 51.103.165.5:39420] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ad360OgHaxkvLE6V1kkinQAAABc"]
[Tue Apr 14 16:29:05.150776 2026] [:error] [pid 59987:tid 60060] [client 51.103.165.5:41508] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ad360VWpk-Tfi6_vLKrITwAAAI0"]
[Tue Apr 14 16:29:05.642640 2026] [:error] [pid 59985:tid 59995] [client 51.103.165.5:38640] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "ad360egHaxkvLE6V1kkingAAAAI"]
[Tue Apr 14 16:29:06.129014 2026] [:error] [pid 59985:tid 59997] [client 51.103.165.5:39370] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "ad360ugHaxkvLE6V1kkioQAAAAQ"]
[Tue Apr 14 16:29:06.604523 2026] [:error] [pid 59985:tid 60001] [client 51.103.165.5:39918] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "ad360ugHaxkvLE6V1kkiowAAAAg"]
[Tue Apr 14 16:29:07.077429 2026] [:error] [pid 59985:tid 60008] [client 51.103.165.5:39377] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "ad360-gHaxkvLE6V1kkipgAAAA8"]
[Tue Apr 14 16:29:07.568992 2026] [:error] [pid 60074:tid 60082] [client 51.103.165.5:39309] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "ad360-tqnEmNU9vpHCkOHwAAAMY"]
[Tue Apr 14 16:29:08.040926 2026] [:error] [pid 60074:tid 60089] [client 51.103.165.5:38601] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "ad361OtqnEmNU9vpHCkOIgAAAM0"]
[Tue Apr 14 16:29:08.514280 2026] [:error] [pid 59986:tid 60026] [client 51.103.165.5:38628] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "ad361J6axKeW6bX4H7cFAQAAAEY"]
[Tue Apr 14 16:29:08.986314 2026] [:error] [pid 59986:tid 60037] [client 51.103.165.5:39301] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "ad361J6axKeW6bX4H7cFAgAAAFE"]
[Tue Apr 14 16:29:09.458012 2026] [:error] [pid 59986:tid 60042] [client 51.103.165.5:39296] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "ad361Z6axKeW6bX4H7cFBAAAAFY"]
[Tue Apr 14 16:29:09.930881 2026] [:error] [pid 59986:tid 60039] [client 51.103.165.5:39832] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ad361Z6axKeW6bX4H7cFBgAAAFM"]
[Tue Apr 14 16:29:10.403451 2026] [:error] [pid 59987:tid 60056] [client 51.103.165.5:39410] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ad361lWpk-Tfi6_vLKrIUgAAAIk"]
[Tue Apr 14 16:29:10.884652 2026] [:error] [pid 60074:tid 60088] [client 51.103.165.5:39340] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ad361utqnEmNU9vpHCkOKwAAAMw"]
[Tue Apr 14 16:29:11.358612 2026] [:error] [pid 59987:tid 60058] [client 51.103.165.5:39353] [client 51.103.165.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ad3611Wpk-Tfi6_vLKrIUwAAAIs"]
[Tue Apr 14 16:35:20.073940 2026] [:error] [pid 59985:tid 60000] [client 34.85.144.184:51500] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "ad38SOgHaxkvLE6V1kkkUAAAAAc"]
[Tue Apr 14 16:35:20.507311 2026] [:error] [pid 59985:tid 60013] [client 34.85.144.184:52725] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "ad38SOgHaxkvLE6V1kkkVAAAABQ"]
[Tue Apr 14 16:35:20.950298 2026] [:error] [pid 60074:tid 60087] [client 34.85.144.184:61629] [client 34.85.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 5 at IP:ddos. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "10"] [id "400002"] [msg "DDoS threshold exceeded for 34.85.144.184, counter = 8"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ad38SOtqnEmNU9vpHCkS8QAAAMs"]
[Wed Apr 15 02:53:43.020845 2026] [:error] [pid 62296:tid 62346] [client 157.151.196.46:63948] [client 157.151.196.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.151.196.46, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ad6NN8TNd04nWM2DK4SvCwAAAFM"], referer: https://www.facebook.com/
[Wed Apr 15 02:53:43.025265 2026] [:error] [pid 62296:tid 62346] [client 157.151.196.46:63948] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.facebook.com/
[Wed Apr 15 02:53:43.431431 2026] [:error] [pid 17926:tid 17936] [client 157.151.196.46:64301] [client 157.151.196.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.151.196.46, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ad6NN_KxFvgDwMI04zBkngAAAcM"], referer: https://t.co/
[Wed Apr 15 02:53:43.435254 2026] [:error] [pid 17926:tid 17936] [client 157.151.196.46:64301] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://t.co/
[Wed Apr 15 10:14:27.941706 2026] [:error] [pid 51186:tid 51208] [client 187.45.110.12:49952] [client 187.45.110.12] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 187.45.110.12, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ad70g1fx1CjK_ZPfY1RaXQAAAVQ"]
[Wed Apr 15 10:14:27.947803 2026] [:error] [pid 51186:tid 51208] [client 187.45.110.12:49952] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 16 00:17:01.641849 2026] [:error] [pid 30957:tid 31012] [client 148.227.107.138:4394] [client 148.227.107.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 148.227.107.138, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ad-5_X5gwVEVXHfVSirPiQAAAFc"]
[Thu Apr 16 00:17:01.657060 2026] [:error] [pid 30957:tid 31012] [client 148.227.107.138:4394] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 16 02:43:15.372153 2026] [:error] [pid 792:tid 906] [client 91.200.101.138:55504] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/graphql"] [unique_id "ad_cQ93PZ8z30TezIkZofQAAANg"]
[Thu Apr 16 11:57:34.437985 2026] [:error] [pid 57639:tid 57661] [client 98.93.160.221:53224] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aeBeLqMCQoTw7TsxWuljlwAAAM8"]
[Thu Apr 16 12:09:02.756317 2026] [:error] [pid 57536:tid 57564] [client 98.93.160.221:38710] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aeBg3iQU4faGja6jpDu00gAAABA"]
[Thu Apr 16 17:58:28.019742 2026] [:error] [pid 57537:tid 57598] [client 216.73.216.52:25941] [client 216.73.216.52] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||nextspaceconsulting.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/robots.txt"] [unique_id "aeCyxFVQRS8nm73ENAmWCwAAAFc"]
[Thu Apr 16 18:52:59.766246 2026] [:error] [pid 57536:tid 57570] [client 74.234.86.1:12805] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Apr 16 18:53:00.077571 2026] [:error] [pid 57536:tid 57564] [client 74.234.86.1:12805] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 16 18:53:00.392012 2026] [:error] [pid 57536:tid 57551] [client 74.234.86.1:12805] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 16 18:53:00.692790 2026] [:error] [pid 57536:tid 57548] [client 74.234.86.1:12805] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Thu Apr 16 18:53:01.010244 2026] [:error] [pid 57536:tid 57552] [client 74.234.86.1:12805] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Thu Apr 16 18:53:01.345697 2026] [:error] [pid 57536:tid 57553] [client 74.234.86.1:12805] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Thu Apr 16 18:53:01.651796 2026] [:error] [pid 57536:tid 57571] [client 74.234.86.1:12805] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Thu Apr 16 18:53:01.978845 2026] [:error] [pid 57536:tid 57558] [client 74.234.86.1:12805] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Thu Apr 16 18:53:02.262849 2026] [:error] [pid 57536:tid 57566] [client 74.234.86.1:12805] [client 74.234.86.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeC_jiQU4faGja6jpDs9BAAAABI"]
[Thu Apr 16 18:53:03.261355 2026] [:error] [pid 57536:tid 57549] [client 74.234.86.1:12827] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Thu Apr 16 18:53:03.554794 2026] [:error] [pid 57536:tid 57550] [client 74.234.86.1:12827] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Thu Apr 16 18:53:03.802552 2026] [:error] [pid 57536:tid 57548] [client 74.234.86.1:12827] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeC_jyQU4faGja6jpDs9BwAAAAA"]
[Thu Apr 16 18:53:04.489810 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:12822] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeC_kKMCQoTw7TsxWuky-gAAANg"]
[Thu Apr 16 18:53:05.417952 2026] [:error] [pid 57639:tid 57665] [client 74.234.86.1:12903] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeC_kaMCQoTw7TsxWukzAQAAANM"]
[Thu Apr 16 18:53:06.921368 2026] [:error] [pid 49094:tid 49108] [client 74.234.86.1:12901] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeC_kjbDwvcXorHR_MyINQAAAUw"]
[Thu Apr 16 18:53:09.492425 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:12913] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeC_laMCQoTw7TsxWukzBQAAAMg"]
[Thu Apr 16 18:53:11.451301 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:12865] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeC_l6MCQoTw7TsxWukzDwAAAMc"]
[Thu Apr 16 18:53:12.463303 2026] [:error] [pid 57538:tid 57611] [client 74.234.86.1:12879] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeC_mMuMaiEF5SVR2Be_DgAAAIk"]
[Thu Apr 16 18:53:13.213117 2026] [:error] [pid 57538:tid 57625] [client 74.234.86.1:12897] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeC_mcuMaiEF5SVR2Be_DwAAAJc"]
[Thu Apr 16 18:53:13.859469 2026] [:error] [pid 57639:tid 57649] [client 74.234.86.1:12885] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeC_maMCQoTw7TsxWukzGAAAAMM"]
[Thu Apr 16 18:53:14.665797 2026] [:error] [pid 57537:tid 57587] [client 74.234.86.1:12894] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeC_mlVQRS8nm73ENAmecQAAAEw"]
[Thu Apr 16 18:53:15.512130 2026] [:error] [pid 49094:tid 49115] [client 74.234.86.1:12895] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeC_mzbDwvcXorHR_MyIQQAAAVM"]
[Thu Apr 16 18:53:16.276111 2026] [:error] [pid 49094:tid 49118] [client 74.234.86.1:12890] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeC_nDbDwvcXorHR_MyIQgAAAVY"]
[Thu Apr 16 18:53:17.818855 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:12924] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeC_naMCQoTw7TsxWukzIwAAAMg"]
[Thu Apr 16 18:53:19.399585 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:12802] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeC_n6MCQoTw7TsxWukzLQAAAMk"]
[Thu Apr 16 18:53:20.394403 2026] [:error] [pid 57536:tid 57572] [client 74.234.86.1:12923] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeC_oCQU4faGja6jpDs9KAAAABg"]
[Thu Apr 16 18:53:21.364030 2026] [:error] [pid 57639:tid 57668] [client 74.234.86.1:12874] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeC_oaMCQoTw7TsxWukzNgAAANY"]
[Thu Apr 16 18:53:22.385844 2026] [:error] [pid 29603:tid 29606] [client 74.234.86.1:12829] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeC_olfGOR6fpTWUAzpvPQAAAQE"]
[Thu Apr 16 18:53:24.218349 2026] [:error] [pid 7880:tid 7908] [client 74.234.86.1:12884] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeC_pKaezm4fSGc0yUJ3bwAAAZc"]
[Thu Apr 16 18:53:25.725291 2026] [:error] [pid 57536:tid 57566] [client 74.234.86.1:12828] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeC_pSQU4faGja6jpDs9MwAAABI"]
[Thu Apr 16 18:53:26.852935 2026] [:error] [pid 57536:tid 57557] [client 74.234.86.1:12850] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeC_piQU4faGja6jpDs9OAAAAAk"]
[Thu Apr 16 18:53:29.059272 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:12915] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeC_qaMCQoTw7TsxWukzSQAAAMc"]
[Thu Apr 16 18:53:30.305112 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:12892] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeC_qqMCQoTw7TsxWukzTgAAAMc"]
[Thu Apr 16 18:53:32.219217 2026] [:error] [pid 57536:tid 57556] [client 74.234.86.1:12817] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeC_rCQU4faGja6jpDs9QgAAAAg"]
[Thu Apr 16 18:53:33.440684 2026] [:error] [pid 49094:tid 49109] [client 74.234.86.1:12927] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeC_rTbDwvcXorHR_MyIYAAAAU0"]
[Thu Apr 16 18:53:34.871477 2026] [:error] [pid 57538:tid 57618] [client 74.234.86.1:12810] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeC_rsuMaiEF5SVR2Be_GAAAAJA"]
[Thu Apr 16 18:53:35.553753 2026] [:error] [pid 57639:tid 57647] [client 74.234.86.1:12918] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeC_r6MCQoTw7TsxWukzdQAAAME"]
[Thu Apr 16 18:53:36.286062 2026] [:error] [pid 57537:tid 57592] [client 74.234.86.1:5100] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeC_sFVQRS8nm73ENAmedgAAAFE"]
[Thu Apr 16 18:53:37.110792 2026] [:error] [pid 57536:tid 57549] [client 74.234.86.1:12815] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeC_sSQU4faGja6jpDs9SQAAAAE"]
[Thu Apr 16 18:53:37.793695 2026] [:error] [pid 57538:tid 57620] [client 74.234.86.1:12812] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeC_scuMaiEF5SVR2Be_GwAAAJI"]
[Thu Apr 16 18:53:38.576567 2026] [:error] [pid 7880:tid 7885] [client 74.234.86.1:12878] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeC_sqaezm4fSGc0yUJ3gwAAAYA"]
[Thu Apr 16 18:53:39.770939 2026] [:error] [pid 29603:tid 29613] [client 74.234.86.1:12831] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeC_s1fGOR6fpTWUAzpvSwAAAQg"]
[Thu Apr 16 18:53:40.416872 2026] [:error] [pid 57537:tid 57591] [client 74.234.86.1:12855] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeC_tFVQRS8nm73ENAmeeAAAAFA"]
[Thu Apr 16 18:53:41.260898 2026] [:error] [pid 57536:tid 57561] [client 74.234.86.1:5082] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeC_tSQU4faGja6jpDs9UQAAAA0"]
[Thu Apr 16 18:53:42.185921 2026] [:error] [pid 7880:tid 7892] [client 74.234.86.1:12904] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeC_tqaezm4fSGc0yUJ3iQAAAYc"]
[Thu Apr 16 18:53:43.363919 2026] [:error] [pid 57537:tid 57579] [client 74.234.86.1:12847] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeC_t1VQRS8nm73ENAmefQAAAEQ"]
[Thu Apr 16 18:53:44.748009 2026] [:error] [pid 7880:tid 7903] [client 74.234.86.1:12893] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeC_uKaezm4fSGc0yUJ3lwAAAZI"]
[Thu Apr 16 18:53:45.922329 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:12863] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeC_uaMCQoTw7TsxWukzggAAAMg"]
[Thu Apr 16 18:53:46.624785 2026] [:error] [pid 57639:tid 57664] [client 74.234.86.1:12911] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeC_uqMCQoTw7TsxWukziAAAANI"]
[Thu Apr 16 18:53:47.472817 2026] [:error] [pid 49094:tid 49103] [client 74.234.86.1:12875] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeC_uzbDwvcXorHR_MyIdAAAAUc"]
[Thu Apr 16 18:53:49.558442 2026] [:error] [pid 57536:tid 57560] [client 74.234.86.1:12816] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeC_vSQU4faGja6jpDs9YAAAAAw"]
[Thu Apr 16 18:53:50.652855 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:12870] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeC_vqMCQoTw7TsxWukzkwAAAMc"]
[Thu Apr 16 18:53:51.543729 2026] [:error] [pid 49094:tid 49119] [client 74.234.86.1:12880] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeC_vzbDwvcXorHR_MyIeQAAAVc"]
[Thu Apr 16 18:53:52.274254 2026] [:error] [pid 49094:tid 49107] [client 74.234.86.1:12896] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeC_wDbDwvcXorHR_MyIewAAAUs"]
[Thu Apr 16 18:53:54.172518 2026] [:error] [pid 57639:tid 57647] [client 74.234.86.1:12871] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeC_wqMCQoTw7TsxWukznAAAAME"]
[Thu Apr 16 18:53:55.074370 2026] [:error] [pid 57639:tid 57661] [client 74.234.86.1:12883] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeC_w6MCQoTw7TsxWukzogAAAM8"]
[Thu Apr 16 18:53:55.893520 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:12883] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeC_w6MCQoTw7TsxWukzpgAAANg"]
[Thu Apr 16 18:53:56.677248 2026] [:error] [pid 49094:tid 49103] [client 74.234.86.1:12811] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeC_xDbDwvcXorHR_MyIfgAAAUc"]
[Thu Apr 16 18:53:57.601890 2026] [:error] [pid 57537:tid 57592] [client 74.234.86.1:5063] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeC_xVVQRS8nm73ENAmegQAAAFE"]
[Thu Apr 16 18:53:58.249465 2026] [:error] [pid 49094:tid 49112] [client 74.234.86.1:5074] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeC_xjbDwvcXorHR_MyIgwAAAVA"]
[Thu Apr 16 18:53:59.117297 2026] [:error] [pid 57538:tid 57608] [client 74.234.86.1:12815] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeC_x8uMaiEF5SVR2Be_IwAAAIY"]
[Thu Apr 16 18:53:59.976166 2026] [:error] [pid 49094:tid 49105] [client 74.234.86.1:12906] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeC_xzbDwvcXorHR_MyIhgAAAUk"]
[Thu Apr 16 18:54:00.937470 2026] [:error] [pid 49094:tid 49096] [client 74.234.86.1:12835] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeC_yDbDwvcXorHR_MyIhwAAAUA"]
[Thu Apr 16 18:54:01.971160 2026] [:error] [pid 49094:tid 49107] [client 74.234.86.1:12868] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny"] [unique_id "aeC_yTbDwvcXorHR_MyIiAAAAUs"]
[Thu Apr 16 18:54:02.508864 2026] [:error] [pid 7880:tid 7899] [client 74.234.86.1:12807] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny"] [unique_id "aeC_yqaezm4fSGc0yUJ3pAAAAY4"]
[Thu Apr 16 18:54:03.710079 2026] [:error] [pid 57536:tid 57558] [client 74.234.86.1:12801] [client 74.234.86.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "aeC_yyQU4faGja6jpDs9cgAAAAo"]
[Thu Apr 16 18:54:04.358879 2026] [:error] [pid 7880:tid 7904] [client 74.234.86.1:5059] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Thu Apr 16 18:54:04.697974 2026] [:error] [pid 7880:tid 7887] [client 74.234.86.1:5059] File does not exist: /usr/local/apache/htdocs/suspended-page/class-wp-image.php
[Thu Apr 16 18:54:04.968245 2026] [:error] [pid 7880:tid 7885] [client 74.234.86.1:5059] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Apr 16 18:54:05.267036 2026] [:error] [pid 7880:tid 7903] [client 74.234.86.1:5059] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Thu Apr 16 18:54:05.579579 2026] [:error] [pid 7880:tid 7905] [client 74.234.86.1:5059] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Thu Apr 16 18:54:06.154291 2026] [:error] [pid 7880:tid 7892] [client 74.234.86.1:5059] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Thu Apr 16 18:54:06.448187 2026] [:error] [pid 7880:tid 7898] [client 74.234.86.1:5059] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Thu Apr 16 18:54:06.721162 2026] [:error] [pid 7880:tid 7895] [client 74.234.86.1:5059] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Thu Apr 16 18:54:06.993129 2026] [:error] [pid 7880:tid 7906] [client 74.234.86.1:5059] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Thu Apr 16 18:54:07.263139 2026] [:error] [pid 7880:tid 7888] [client 74.234.86.1:5059] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu Apr 16 18:54:27.954925 2026] [:error] [pid 57536:tid 57555] [client 74.234.86.1:4994] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aeC_4yQU4faGja6jpDs9kwAAAAc"]
[Thu Apr 16 18:54:29.296136 2026] [:error] [pid 57639:tid 57659] [client 74.234.86.1:12917] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aeC_5aMCQoTw7TsxWukzzAAAAM0"]
[Thu Apr 16 18:54:30.300815 2026] [:error] [pid 57639:tid 57656] [client 74.234.86.1:12809] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aeC_5qMCQoTw7TsxWukzzwAAAMo"]
[Thu Apr 16 18:54:31.219653 2026] [:error] [pid 57639:tid 57661] [client 74.234.86.1:5094] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aeC_56MCQoTw7TsxWukz1AAAAM8"]
[Thu Apr 16 18:54:32.044061 2026] [:error] [pid 57639:tid 57649] [client 74.234.86.1:12873] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeC_6KMCQoTw7TsxWukz2AAAAMM"]
[Thu Apr 16 18:54:32.617757 2026] [:error] [pid 57538:tid 57618] [client 74.234.86.1:5023] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeC_6MuMaiEF5SVR2Be_OQAAAJA"]
[Thu Apr 16 18:54:33.308438 2026] [:error] [pid 49094:tid 49096] [client 74.234.86.1:12823] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeC_6TbDwvcXorHR_MyIsgAAAUA"]
[Thu Apr 16 18:54:34.165009 2026] [:error] [pid 49094:tid 49117] [client 74.234.86.1:12889] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeC_6jbDwvcXorHR_MyIuAAAAVU"]
[Thu Apr 16 18:54:34.955803 2026] [:error] [pid 57538:tid 57616] [client 74.234.86.1:12820] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeC_6suMaiEF5SVR2Be_PQAAAI4"]
[Thu Apr 16 18:54:35.624252 2026] [:error] [pid 29603:tid 29615] [client 74.234.86.1:5068] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeC_61fGOR6fpTWUAzpvcQAAAQo"]
[Thu Apr 16 18:54:36.345817 2026] [:error] [pid 49094:tid 49099] [client 74.234.86.1:12825] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeC_7DbDwvcXorHR_MyIvAAAAUM"]
[Thu Apr 16 18:54:36.892630 2026] [:error] [pid 57538:tid 57624] [client 74.234.86.1:12859] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeC_7MuMaiEF5SVR2Be_QAAAAJY"]
[Thu Apr 16 18:54:37.583170 2026] [:error] [pid 29603:tid 29618] [client 74.234.86.1:12852] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeC_7VfGOR6fpTWUAzpvcgAAAQ0"]
[Thu Apr 16 18:54:38.171161 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:12803] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeC_7qMCQoTw7TsxWukz2gAAANg"]
[Thu Apr 16 18:54:38.769939 2026] [:error] [pid 49094:tid 49101] [client 74.234.86.1:12926] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeC_7jbDwvcXorHR_MyIxwAAAUU"]
[Thu Apr 16 18:54:39.456426 2026] [:error] [pid 57536:tid 57563] [client 74.234.86.1:12849] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeC_7yQU4faGja6jpDs9ogAAAA8"]
[Thu Apr 16 18:54:40.073816 2026] [:error] [pid 57536:tid 57565] [client 74.234.86.1:12881] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "aeC_8CQU4faGja6jpDs9pAAAABE"]
[Thu Apr 16 18:54:40.736114 2026] [:error] [pid 57536:tid 57550] [client 74.234.86.1:5095] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "aeC_8CQU4faGja6jpDs9pgAAAAI"]
[Thu Apr 16 18:54:41.499987 2026] [:error] [pid 57536:tid 57558] [client 74.234.86.1:12851] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "aeC_8SQU4faGja6jpDs9qQAAAAo"]
[Thu Apr 16 18:54:42.156012 2026] [:error] [pid 57536:tid 57562] [client 74.234.86.1:5067] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "aeC_8iQU4faGja6jpDs9qwAAAA4"]
[Thu Apr 16 18:54:42.860330 2026] [:error] [pid 57538:tid 57615] [client 74.234.86.1:12818] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "aeC_8suMaiEF5SVR2Be_RQAAAI0"]
[Thu Apr 16 18:54:43.425464 2026] [:error] [pid 29603:tid 29607] [client 74.234.86.1:5102] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "aeC_81fGOR6fpTWUAzpvdQAAAQI"]
[Thu Apr 16 18:54:44.109047 2026] [:error] [pid 29603:tid 29624] [client 74.234.86.1:12848] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "aeC_9FfGOR6fpTWUAzpveQAAARM"]
[Thu Apr 16 18:54:44.798391 2026] [:error] [pid 57536:tid 57565] [client 74.234.86.1:5075] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "aeC_9CQU4faGja6jpDs9tQAAABE"]
[Thu Apr 16 18:54:45.502110 2026] [:error] [pid 57639:tid 57659] [client 74.234.86.1:12861] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeC_9aMCQoTw7TsxWukz3gAAAM0"]
[Thu Apr 16 18:54:46.195851 2026] [:error] [pid 57639:tid 57665] [client 74.234.86.1:5088] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeC_9qMCQoTw7TsxWukz4AAAANM"]
[Thu Apr 16 18:54:47.019851 2026] [:error] [pid 57639:tid 57661] [client 74.234.86.1:12854] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeC_96MCQoTw7TsxWukz5wAAAM8"]
[Thu Apr 16 18:54:47.660978 2026] [:error] [pid 57538:tid 57616] [client 74.234.86.1:12808] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeC_98uMaiEF5SVR2Be_SQAAAI4"]
[Thu Apr 16 18:54:49.485482 2026] [:error] [pid 49094:tid 49106] [client 74.234.86.1:12843] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "aeC_-TbDwvcXorHR_MyI1AAAAUo"]
[Thu Apr 16 18:54:50.097015 2026] [:error] [pid 57639:tid 57658] [client 74.234.86.1:12900] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "aeC_-qMCQoTw7TsxWukz8gAAAMw"]
[Thu Apr 16 18:54:50.890541 2026] [:error] [pid 57536:tid 57566] [client 74.234.86.1:12806] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "aeC_-iQU4faGja6jpDs9wQAAABI"]
[Thu Apr 16 18:54:51.462345 2026] [:error] [pid 57537:tid 57583] [client 74.234.86.1:5057] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "aeC_-1VQRS8nm73ENAmelwAAAEg"]
[Thu Apr 16 18:54:52.019408 2026] [:error] [pid 7880:tid 7894] [client 74.234.86.1:5092] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeC__Kaezm4fSGc0yUJ33AAAAYk"]
[Thu Apr 16 18:54:53.139930 2026] [:error] [pid 7880:tid 7902] [client 74.234.86.1:12804] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeC__aaezm4fSGc0yUJ33gAAAZE"]
[Thu Apr 16 18:54:53.705408 2026] [:error] [pid 7880:tid 7909] [client 74.234.86.1:12919] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeC__aaezm4fSGc0yUJ34AAAAZg"]
[Thu Apr 16 18:54:54.649477 2026] [:error] [pid 57536:tid 57571] [client 74.234.86.1:12902] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeC__iQU4faGja6jpDs9xwAAABc"]
[Thu Apr 16 18:54:55.643743 2026] [:error] [pid 7880:tid 7901] [client 74.234.86.1:12821] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeC__6aezm4fSGc0yUJ35wAAAZA"]
[Thu Apr 16 18:54:56.262204 2026] [:error] [pid 7880:tid 7904] [client 74.234.86.1:12920] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeDAAKaezm4fSGc0yUJ36AAAAZM"]
[Thu Apr 16 18:54:57.986411 2026] [:error] [pid 57536:tid 57555] [client 74.234.86.1:5076] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeDAASQU4faGja6jpDs9zwAAAAc"]
[Thu Apr 16 18:54:58.883725 2026] [:error] [pid 57536:tid 57552] [client 74.234.86.1:12856] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeDAAiQU4faGja6jpDs91AAAAAQ"]
[Thu Apr 16 18:54:59.652044 2026] [:error] [pid 57537:tid 57591] [client 74.234.86.1:5056] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeDAA1VQRS8nm73ENAmemgAAAFA"]
[Thu Apr 16 18:55:00.479778 2026] [:error] [pid 57538:tid 57615] [client 74.234.86.1:5073] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeDABMuMaiEF5SVR2Be_UAAAAI0"]
[Thu Apr 16 18:55:01.114409 2026] [:error] [pid 57536:tid 57553] [client 74.234.86.1:5077] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeDABSQU4faGja6jpDs92QAAAAU"]
[Thu Apr 16 18:55:01.745379 2026] [:error] [pid 57639:tid 57663] [client 74.234.86.1:5078] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeDABaMCQoTw7TsxWukz_gAAANE"]
[Thu Apr 16 18:55:02.348623 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:5098] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeDABqMCQoTw7TsxWuk0AAAAAMk"]
[Thu Apr 16 18:55:02.931088 2026] [:error] [pid 29603:tid 29606] [client 74.234.86.1:5105] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeDABlfGOR6fpTWUAzpvhQAAAQE"]
[Thu Apr 16 18:55:03.523829 2026] [:error] [pid 29603:tid 29605] [client 74.234.86.1:12826] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeDAB1fGOR6fpTWUAzpvhgAAAQA"]
[Thu Apr 16 18:55:04.163855 2026] [:error] [pid 57536:tid 57549] [client 74.234.86.1:12898] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeDACCQU4faGja6jpDs93wAAAAE"]
[Thu Apr 16 18:55:04.888280 2026] [:error] [pid 57538:tid 57620] [client 74.234.86.1:12905] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeDACMuMaiEF5SVR2Be_UgAAAJI"]
[Thu Apr 16 18:55:05.630292 2026] [:error] [pid 57537:tid 57593] [client 74.234.86.1:12832] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeDACVVQRS8nm73ENAmenQAAAFI"]
[Thu Apr 16 18:55:06.364744 2026] [:error] [pid 49094:tid 49119] [client 74.234.86.1:5003] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeDACjbDwvcXorHR_MyI2QAAAVc"]
[Thu Apr 16 18:55:07.217762 2026] [:error] [pid 57536:tid 57562] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Thu Apr 16 18:55:07.488151 2026] [:error] [pid 57536:tid 57555] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Thu Apr 16 18:55:07.758361 2026] [:error] [pid 57536:tid 57556] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Thu Apr 16 18:55:08.050824 2026] [:error] [pid 57536:tid 57567] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/r2.php
[Thu Apr 16 18:55:08.324483 2026] [:error] [pid 57536:tid 57566] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Thu Apr 16 18:55:08.599156 2026] [:error] [pid 57536:tid 57569] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Thu Apr 16 18:55:08.875192 2026] [:error] [pid 57536:tid 57572] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Thu Apr 16 18:55:09.186413 2026] [:error] [pid 57536:tid 57549] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Thu Apr 16 18:55:09.490593 2026] [:error] [pid 57536:tid 57563] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Thu Apr 16 18:55:10.945300 2026] [:error] [pid 57536:tid 57563] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Thu Apr 16 18:55:11.255192 2026] [:error] [pid 57536:tid 57565] [client 74.234.86.1:12866] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Thu Apr 16 18:55:11.539308 2026] [:error] [pid 57536:tid 57548] [client 74.234.86.1:12866] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "aeDADyQU4faGja6jpDs99QAAAAA"]
[Thu Apr 16 18:55:12.127395 2026] [:error] [pid 7880:tid 7906] [client 74.234.86.1:5114] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "aeDAEKaezm4fSGc0yUJ39AAAAZU"]
[Thu Apr 16 18:55:12.756704 2026] [:error] [pid 57536:tid 57570] [client 74.234.86.1:12842] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "aeDAECQU4faGja6jpDs9-gAAABY"]
[Thu Apr 16 18:55:13.481166 2026] [:error] [pid 7880:tid 7890] [client 74.234.86.1:12857] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "aeDAEaaezm4fSGc0yUJ39gAAAYU"]
[Thu Apr 16 18:55:14.125263 2026] [:error] [pid 57536:tid 57559] [client 74.234.86.1:5061] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "aeDAEiQU4faGja6jpDs9_wAAAAs"]
[Thu Apr 16 18:55:14.719720 2026] [:error] [pid 57536:tid 57572] [client 74.234.86.1:12908] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "aeDAEiQU4faGja6jpDs-EQAAABg"]
[Thu Apr 16 18:55:15.590038 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:5080] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "aeDAE6MCQoTw7TsxWuk0CgAAAMg"]
[Thu Apr 16 18:55:16.284668 2026] [:error] [pid 7880:tid 7906] [client 74.234.86.1:5086] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "aeDAFKaezm4fSGc0yUJ4IQAAAZU"]
[Thu Apr 16 18:55:17.191325 2026] [:error] [pid 49094:tid 49100] [client 74.234.86.1:12886] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqa.php"] [unique_id "aeDAFTbDwvcXorHR_MyI-wAAAUQ"]
[Thu Apr 16 18:55:18.832662 2026] [:error] [pid 49094:tid 49098] [client 74.234.86.1:12916] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqa.php"] [unique_id "aeDAFjbDwvcXorHR_MyJAQAAAUI"]
[Thu Apr 16 18:55:19.549979 2026] [:error] [pid 57639:tid 57647] [client 74.234.86.1:12876] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqa.php"] [unique_id "aeDAF6MCQoTw7TsxWuk0DgAAAME"]
[Thu Apr 16 18:55:20.181875 2026] [:error] [pid 57538:tid 57612] [client 74.234.86.1:12800] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqa.php"] [unique_id "aeDAGMuMaiEF5SVR2Be_VQAAAIo"]
[Thu Apr 16 18:55:20.784413 2026] [:error] [pid 29603:tid 29623] [client 74.234.86.1:5085] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeDAGFfGOR6fpTWUAzpvpQAAARI"]
[Thu Apr 16 18:55:21.434391 2026] [:error] [pid 49094:tid 49111] [client 74.234.86.1:4935] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeDAGTbDwvcXorHR_MyJBgAAAU8"]
[Thu Apr 16 18:55:22.066488 2026] [:error] [pid 49094:tid 49107] [client 74.234.86.1:5015] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeDAGjbDwvcXorHR_MyJCgAAAUs"]
[Thu Apr 16 18:55:22.765866 2026] [:error] [pid 49094:tid 49118] [client 74.234.86.1:12910] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeDAGjbDwvcXorHR_MyJDAAAAVY"]
[Thu Apr 16 18:55:23.688331 2026] [:error] [pid 57639:tid 57661] [client 74.234.86.1:5062] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ga.php"] [unique_id "aeDAG6MCQoTw7TsxWuk0HQAAAM8"]
[Thu Apr 16 18:55:24.351858 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:5084] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ga.php"] [unique_id "aeDAHKMCQoTw7TsxWuk0IgAAANc"]
[Thu Apr 16 18:55:25.054247 2026] [:error] [pid 49094:tid 49102] [client 74.234.86.1:12867] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ga.php"] [unique_id "aeDAHTbDwvcXorHR_MyJFQAAAUY"]
[Thu Apr 16 18:55:26.080892 2026] [:error] [pid 49094:tid 49105] [client 74.234.86.1:12814] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ga.php"] [unique_id "aeDAHjbDwvcXorHR_MyJGgAAAUk"]
[Thu Apr 16 18:55:26.622053 2026] [:error] [pid 57639:tid 57661] [client 74.234.86.1:12813] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeDAHqMCQoTw7TsxWuk0JQAAAM8"]
[Thu Apr 16 18:55:27.566952 2026] [:error] [pid 49094:tid 49106] [client 74.234.86.1:12845] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeDAHzbDwvcXorHR_MyJIQAAAUo"]
[Thu Apr 16 18:55:28.255689 2026] [:error] [pid 7880:tid 7895] [client 74.234.86.1:4995] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeDAIKaezm4fSGc0yUJ4MwAAAYo"]
[Thu Apr 16 18:55:28.964349 2026] [:error] [pid 49094:tid 49107] [client 74.234.86.1:12824] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeDAIDbDwvcXorHR_MyJJQAAAUs"]
[Thu Apr 16 18:55:30.141493 2026] [:error] [pid 57536:tid 57572] [client 74.234.86.1:12887] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeDAIiQU4faGja6jpDs-OQAAABg"]
[Thu Apr 16 18:55:30.921697 2026] [:error] [pid 57639:tid 57648] [client 74.234.86.1:12840] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeDAIqMCQoTw7TsxWuk0LgAAAMI"]
[Thu Apr 16 18:55:32.019132 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:5058] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeDAJKMCQoTw7TsxWuk0MAAAANc"]
[Thu Apr 16 18:55:32.727736 2026] [:error] [pid 29603:tid 29611] [client 74.234.86.1:5116] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeDAJFfGOR6fpTWUAzpvswAAAQY"]
[Thu Apr 16 18:55:33.344830 2026] [:error] [pid 57536:tid 57554] [client 74.234.86.1:5060] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeDAJSQU4faGja6jpDs-QAAAAAY"]
[Thu Apr 16 18:55:34.240754 2026] [:error] [pid 29603:tid 29613] [client 74.234.86.1:12834] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeDAJlfGOR6fpTWUAzpvtgAAAQg"]
[Thu Apr 16 18:55:35.066983 2026] [:error] [pid 29603:tid 29629] [client 74.234.86.1:12921] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeDAJ1fGOR6fpTWUAzpvuAAAARg"]
[Thu Apr 16 18:55:35.727549 2026] [:error] [pid 57639:tid 57649] [client 74.234.86.1:4971] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeDAJ6MCQoTw7TsxWuk0NgAAAMM"]
[Thu Apr 16 18:55:36.544479 2026] [:error] [pid 57639:tid 57650] [client 74.234.86.1:12922] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeDAKKMCQoTw7TsxWuk0NwAAAMQ"]
[Thu Apr 16 18:55:37.759595 2026] [:error] [pid 57537:tid 57580] [client 74.234.86.1:12909] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeDAKVVQRS8nm73ENAmepAAAAEU"]
[Thu Apr 16 18:55:38.675461 2026] [:error] [pid 57537:tid 57591] [client 74.234.86.1:12858] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeDAKlVQRS8nm73ENAmepQAAAFA"]
[Thu Apr 16 18:55:40.526823 2026] [:error] [pid 57639:tid 57667] [client 74.234.86.1:12860] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeDALKMCQoTw7TsxWuk0QQAAANU"]
[Thu Apr 16 18:55:41.261672 2026] [:error] [pid 57536:tid 57569] [client 74.234.86.1:5106] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeDALSQU4faGja6jpDs-RgAAABU"]
[Thu Apr 16 18:55:42.892187 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:4944] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeDALqMCQoTw7TsxWuk0RgAAAM4"]
[Thu Apr 16 18:55:43.690143 2026] [:error] [pid 57537:tid 57593] [client 74.234.86.1:5083] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeDAL1VQRS8nm73ENAmeqAAAAFI"]
[Thu Apr 16 18:55:44.723473 2026] [:error] [pid 57537:tid 57589] [client 74.234.86.1:12899] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeDAMFVQRS8nm73ENAmeqgAAAE4"]
[Thu Apr 16 18:55:45.873637 2026] [:error] [pid 49094:tid 49110] [client 74.234.86.1:4993] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-lo.php"] [unique_id "aeDAMTbDwvcXorHR_MyJSAAAAU4"]
[Thu Apr 16 18:55:47.367532 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:5010] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-lo.php"] [unique_id "aeDAM6MCQoTw7TsxWuk0UAAAAMk"]
[Thu Apr 16 18:55:48.320888 2026] [:error] [pid 49094:tid 49102] [client 74.234.86.1:5013] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-lo.php"] [unique_id "aeDANDbDwvcXorHR_MyJTgAAAUY"]
[Thu Apr 16 18:55:50.416083 2026] [:error] [pid 57639:tid 57670] [client 74.234.86.1:5039] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-lo.php"] [unique_id "aeDANqMCQoTw7TsxWuk0VgAAANg"]
[Thu Apr 16 18:55:51.295894 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:5110] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeDAN6MCQoTw7TsxWuk0WwAAAMk"]
[Thu Apr 16 18:55:52.265839 2026] [:error] [pid 57639:tid 57663] [client 74.234.86.1:4949] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeDAOKMCQoTw7TsxWuk0XwAAANE"]
[Thu Apr 16 18:55:53.391743 2026] [:error] [pid 57639:tid 57647] [client 74.234.86.1:5079] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeDAOaMCQoTw7TsxWuk0ZAAAAME"]
[Thu Apr 16 18:55:54.530573 2026] [:error] [pid 57639:tid 57667] [client 74.234.86.1:12925] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeDAOqMCQoTw7TsxWuk0bgAAANU"]
[Thu Apr 16 18:55:55.363236 2026] [:error] [pid 57538:tid 57616] [client 74.234.86.1:12912] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ipv6.php"] [unique_id "aeDAO8uMaiEF5SVR2Be_ZQAAAI4"]
[Thu Apr 16 18:55:57.101485 2026] [:error] [pid 57639:tid 57657] [client 74.234.86.1:12907] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ipv6.php"] [unique_id "aeDAPaMCQoTw7TsxWuk0ewAAAMs"]
[Thu Apr 16 18:55:58.448109 2026] [:error] [pid 57537:tid 57588] [client 74.234.86.1:5066] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ipv6.php"] [unique_id "aeDAPlVQRS8nm73ENAmergAAAE0"]
[Thu Apr 16 18:55:59.392383 2026] [:error] [pid 7880:tid 7898] [client 74.234.86.1:5071] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ipv6.php"] [unique_id "aeDAP6aezm4fSGc0yUJ4PAAAAY0"]
[Thu Apr 16 18:56:00.776612 2026] [:error] [pid 57536:tid 57551] [client 74.234.86.1:5042] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeDAQCQU4faGja6jpDs-VAAAAAM"]
[Thu Apr 16 18:56:01.876074 2026] [:error] [pid 7880:tid 7895] [client 74.234.86.1:12864] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeDAQaaezm4fSGc0yUJ4PwAAAYo"]
[Thu Apr 16 18:56:02.815832 2026] [:error] [pid 57639:tid 57658] [client 74.234.86.1:5000] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeDAQqMCQoTw7TsxWuk0jwAAAMw"]
[Thu Apr 16 18:56:04.723826 2026] [:error] [pid 7880:tid 7900] [client 74.234.86.1:4999] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeDARKaezm4fSGc0yUJ4RAAAAY8"]
[Thu Apr 16 18:56:05.598044 2026] [:error] [pid 49094:tid 49109] [client 74.234.86.1:5022] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeDARTbDwvcXorHR_MyJWwAAAU0"]
[Thu Apr 16 18:56:06.331105 2026] [:error] [pid 57537:tid 57580] [client 74.234.86.1:12869] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeDARlVQRS8nm73ENAmetAAAAEU"]
[Thu Apr 16 18:56:07.665114 2026] [:error] [pid 49094:tid 49117] [client 74.234.86.1:12887] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeDARzbDwvcXorHR_MyJYQAAAVU"]
[Thu Apr 16 18:56:09.089938 2026] [:error] [pid 49094:tid 49119] [client 74.234.86.1:5017] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeDASTbDwvcXorHR_MyJYwAAAVc"]
[Thu Apr 16 18:56:10.200322 2026] [:error] [pid 49094:tid 49105] [client 74.234.86.1:5034] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aeDASjbDwvcXorHR_MyJaQAAAUk"]
[Thu Apr 16 18:56:11.797784 2026] [:error] [pid 57536:tid 57572] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Thu Apr 16 18:56:12.066774 2026] [:error] [pid 57536:tid 57551] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Thu Apr 16 18:56:12.335454 2026] [:error] [pid 57536:tid 57567] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Thu Apr 16 18:56:12.629010 2026] [:error] [pid 57536:tid 57550] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/xper.php
[Thu Apr 16 18:56:12.898716 2026] [:error] [pid 57536:tid 57553] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Thu Apr 16 18:56:13.185132 2026] [:error] [pid 57536:tid 57565] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Thu Apr 16 18:56:13.461402 2026] [:error] [pid 57536:tid 57568] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 16 18:56:13.749912 2026] [:error] [pid 57536:tid 57549] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Thu Apr 16 18:56:14.029206 2026] [:error] [pid 57536:tid 57552] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Thu Apr 16 18:56:14.378796 2026] [:error] [pid 57536:tid 57566] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/global.php
[Thu Apr 16 18:56:14.649711 2026] [:error] [pid 57536:tid 57570] [client 74.234.86.1:5064] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Apr 16 18:56:14.930518 2026] [:error] [pid 57536:tid 57561] [client 74.234.86.1:5064] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "aeDATiQU4faGja6jpDs-aAAAAA0"]
[Thu Apr 16 18:56:16.165469 2026] [:error] [pid 49094:tid 49101] [client 74.234.86.1:5093] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "aeDAUDbDwvcXorHR_MyJfwAAAUU"]
[Thu Apr 16 18:56:16.989628 2026] [:error] [pid 49094:tid 49108] [client 74.234.86.1:5004] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "aeDAUDbDwvcXorHR_MyJgAAAAUw"]
[Thu Apr 16 18:56:17.588883 2026] [:error] [pid 49094:tid 49099] [client 74.234.86.1:12872] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "aeDAUTbDwvcXorHR_MyJggAAAUM"]
[Thu Apr 16 18:56:18.376213 2026] [:error] [pid 57639:tid 57658] [client 74.234.86.1:5104] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeDAUqMCQoTw7TsxWuk0oAAAAMw"]
[Thu Apr 16 18:56:19.177201 2026] [:error] [pid 29603:tid 29615] [client 74.234.86.1:5107] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeDAU1fGOR6fpTWUAzpv2QAAAQo"]
[Thu Apr 16 18:56:19.703044 2026] [:error] [pid 49094:tid 49105] [client 74.234.86.1:4947] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeDAUzbDwvcXorHR_MyJhAAAAUk"]
[Thu Apr 16 18:56:20.422884 2026] [:error] [pid 57536:tid 57550] [client 74.234.86.1:12914] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeDAVCQU4faGja6jpDs-cgAAAAI"]
[Thu Apr 16 18:56:21.149984 2026] [:error] [pid 57538:tid 57619] [client 74.234.86.1:5091] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeDAVcuMaiEF5SVR2Be_dQAAAJE"]
[Thu Apr 16 18:56:21.802619 2026] [:error] [pid 57536:tid 57569] [client 74.234.86.1:4998] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeDAVSQU4faGja6jpDs-eAAAABU"]
[Thu Apr 16 18:56:22.380075 2026] [:error] [pid 7880:tid 7906] [client 74.234.86.1:12819] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeDAVqaezm4fSGc0yUJ4TgAAAZU"]
[Thu Apr 16 18:56:22.978301 2026] [:error] [pid 7880:tid 7894] [client 74.234.86.1:12844] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeDAVqaezm4fSGc0yUJ4UAAAAYk"]
[Thu Apr 16 18:56:23.761033 2026] [:error] [pid 57639:tid 57669] [client 74.234.86.1:12853] [client 74.234.86.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeDAV6MCQoTw7TsxWuk0pwAAANc"]
[Thu Apr 16 18:56:24.414674 2026] [:error] [pid 29603:tid 29605] [client 74.234.86.1:5051] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeDAWFfGOR6fpTWUAzpv3gAAAQA"]
[Thu Apr 16 18:56:25.170732 2026] [:error] [pid 49094:tid 49099] [client 74.234.86.1:5043] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeDAWTbDwvcXorHR_MyJjgAAAUM"]
[Thu Apr 16 18:56:26.641162 2026] [:error] [pid 57536:tid 57552] [client 74.234.86.1:5097] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeDAWiQU4faGja6jpDs-hAAAAAQ"]
[Thu Apr 16 18:56:31.458175 2026] [:error] [pid 57537:tid 57586] [client 74.234.86.1:5081] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeDAX1VQRS8nm73ENAmexgAAAEs"]
[Thu Apr 16 18:56:38.086935 2026] [:error] [pid 57536:tid 57569] [client 74.234.86.1:5024] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeDAZiQU4faGja6jpDs-vQAAABU"]
[Thu Apr 16 18:56:39.745891 2026] [:error] [pid 57639:tid 57651] [client 74.234.86.1:5048] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeDAZ6MCQoTw7TsxWuk0ugAAAMU"]
[Thu Apr 16 18:56:40.738855 2026] [:error] [pid 49094:tid 49111] [client 74.234.86.1:4967] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeDAaDbDwvcXorHR_MyJmwAAAU8"]
[Thu Apr 16 18:56:41.278476 2026] [:error] [pid 57639:tid 57666] [client 74.234.86.1:4952] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeDAaaMCQoTw7TsxWuk0xAAAANQ"]
[Thu Apr 16 18:56:42.057277 2026] [:error] [pid 57639:tid 57662] [client 74.234.86.1:4937] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeDAaqMCQoTw7TsxWuk0yAAAANA"]
[Thu Apr 16 18:56:42.670836 2026] [:error] [pid 57639:tid 57649] [client 74.234.86.1:5103] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeDAaqMCQoTw7TsxWuk0zgAAAMM"]
[Thu Apr 16 18:56:43.444303 2026] [:error] [pid 57537:tid 57581] [client 74.234.86.1:4991] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeDAa1VQRS8nm73ENAme0wAAAEY"]
[Thu Apr 16 18:56:44.133320 2026] [:error] [pid 57639:tid 57666] [client 74.234.86.1:5030] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeDAbKMCQoTw7TsxWuk01gAAANQ"]
[Thu Apr 16 18:56:44.832702 2026] [:error] [pid 29603:tid 29607] [client 74.234.86.1:5001] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeDAbFfGOR6fpTWUAzpv_QAAAQI"]
[Thu Apr 16 18:56:45.571697 2026] [:error] [pid 49094:tid 49100] [client 74.234.86.1:5072] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeDAbTbDwvcXorHR_MyJnwAAAUQ"]
[Thu Apr 16 18:56:46.163606 2026] [:error] [pid 57536:tid 57563] [client 74.234.86.1:5090] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeDAbiQU4faGja6jpDs-yAAAAA8"]
[Thu Apr 16 18:56:46.850986 2026] [:error] [pid 57639:tid 57666] [client 74.234.86.1:4954] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeDAbqMCQoTw7TsxWuk03gAAANQ"]
[Thu Apr 16 18:56:47.624059 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:4932] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeDAb6MCQoTw7TsxWuk04AAAAMA"]
[Thu Apr 16 18:56:48.401363 2026] [:error] [pid 57639:tid 57647] [client 74.234.86.1:4929] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeDAcKMCQoTw7TsxWuk05gAAAME"]
[Thu Apr 16 18:56:49.091866 2026] [:error] [pid 57639:tid 57653] [client 74.234.86.1:5055] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeDAcaMCQoTw7TsxWuk06wAAAMc"]
[Thu Apr 16 18:56:49.885110 2026] [:error] [pid 57639:tid 57647] [client 74.234.86.1:5019] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeDAcaMCQoTw7TsxWuk07QAAAME"]
[Thu Apr 16 18:56:50.694213 2026] [:error] [pid 57639:tid 57662] [client 74.234.86.1:12882] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeDAcqMCQoTw7TsxWuk08wAAANA"]
[Thu Apr 16 18:56:51.392998 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:4941] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeDAc6MCQoTw7TsxWuk09wAAAMA"]
[Thu Apr 16 18:56:52.441173 2026] [:error] [pid 57537:tid 57593] [client 74.234.86.1:5020] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeDAdFVQRS8nm73ENAme2AAAAFI"]
[Thu Apr 16 18:56:53.253133 2026] [:error] [pid 7880:tid 7908] [client 74.234.86.1:12846] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeDAdaaezm4fSGc0yUJ4oAAAAZc"]
[Thu Apr 16 18:56:54.228837 2026] [:error] [pid 49094:tid 49114] [client 74.234.86.1:12839] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeDAdjbDwvcXorHR_MyJqAAAAVI"]
[Thu Apr 16 18:56:55.106858 2026] [:error] [pid 57537:tid 57586] [client 74.234.86.1:5016] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeDAd1VQRS8nm73ENAme3AAAAEs"]
[Thu Apr 16 18:56:56.020898 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:5007] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeDAeKMCQoTw7TsxWuk0_QAAAMg"]
[Thu Apr 16 18:56:56.669682 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:5054] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeDAeKMCQoTw7TsxWuk1AgAAAMk"]
[Thu Apr 16 18:56:57.215379 2026] [:error] [pid 57639:tid 57652] [client 74.234.86.1:5115] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xynz.php"] [unique_id "aeDAeaMCQoTw7TsxWuk1BQAAAMY"]
[Thu Apr 16 18:56:58.215304 2026] [:error] [pid 49094:tid 49104] [client 74.234.86.1:5006] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xynz.php"] [unique_id "aeDAejbDwvcXorHR_MyJswAAAUg"]
[Thu Apr 16 18:56:59.403060 2026] [:error] [pid 29603:tid 29620] [client 74.234.86.1:5026] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xynz.php"] [unique_id "aeDAe1fGOR6fpTWUAzpwAQAAAQ8"]
[Thu Apr 16 18:57:01.268317 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:4951] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xynz.php"] [unique_id "aeDAfaMCQoTw7TsxWuk1EgAAAMA"]
[Thu Apr 16 18:57:02.176190 2026] [:error] [pid 57639:tid 57665] [client 74.234.86.1:4880] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-01ul.php"] [unique_id "aeDAfqMCQoTw7TsxWuk1GAAAANM"]
[Thu Apr 16 18:57:03.027475 2026] [:error] [pid 57639:tid 57651] [client 74.234.86.1:5014] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-01ul.php"] [unique_id "aeDAf6MCQoTw7TsxWuk1HgAAAMU"]
[Thu Apr 16 18:57:03.684979 2026] [:error] [pid 57639:tid 57665] [client 74.234.86.1:5029] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-01ul.php"] [unique_id "aeDAf6MCQoTw7TsxWuk1IgAAANM"]
[Thu Apr 16 18:57:04.910108 2026] [:error] [pid 7880:tid 7887] [client 74.234.86.1:5025] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-01ul.php"] [unique_id "aeDAgKaezm4fSGc0yUJ4pQAAAYI"]
[Thu Apr 16 18:57:05.801835 2026] [:error] [pid 57538:tid 57623] [client 74.234.86.1:4966] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e7.php"] [unique_id "aeDAgcuMaiEF5SVR2Be_mwAAAJU"]
[Thu Apr 16 18:57:06.570001 2026] [:error] [pid 57537:tid 57581] [client 74.234.86.1:4943] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e7.php"] [unique_id "aeDAglVQRS8nm73ENAme3gAAAEY"]
[Thu Apr 16 18:57:07.224463 2026] [:error] [pid 57639:tid 57663] [client 74.234.86.1:4986] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e7.php"] [unique_id "aeDAg6MCQoTw7TsxWuk1LAAAANE"]
[Thu Apr 16 18:57:08.148969 2026] [:error] [pid 57536:tid 57564] [client 74.234.86.1:4810] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e7.php"] [unique_id "aeDAhCQU4faGja6jpDs-0gAAABA"]
[Thu Apr 16 18:57:09.022118 2026] [:error] [pid 29603:tid 29606] [client 74.234.86.1:5053] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "aeDAhVfGOR6fpTWUAzpwCgAAAQE"]
[Thu Apr 16 18:57:09.718259 2026] [:error] [pid 57536:tid 57572] [client 74.234.86.1:5112] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "aeDAhSQU4faGja6jpDs-0wAAABg"]
[Thu Apr 16 18:57:10.754115 2026] [:error] [pid 57639:tid 57647] [client 74.234.86.1:4996] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "aeDAhqMCQoTw7TsxWuk1MgAAAME"]
[Thu Apr 16 18:57:11.728161 2026] [:error] [pid 7880:tid 7888] [client 74.234.86.1:5070] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "aeDAh6aezm4fSGc0yUJ4qQAAAYM"]
[Thu Apr 16 18:57:12.481831 2026] [:error] [pid 57639:tid 57654] [client 74.234.86.1:4961] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "aeDAiKMCQoTw7TsxWuk1OgAAAMg"]
[Thu Apr 16 18:57:13.307490 2026] [:error] [pid 57639:tid 57660] [client 74.234.86.1:4946] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "aeDAiaMCQoTw7TsxWuk1PAAAAM4"]
[Thu Apr 16 18:57:14.373403 2026] [:error] [pid 57639:tid 57662] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Thu Apr 16 18:57:14.693807 2026] [:error] [pid 57639:tid 57667] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Thu Apr 16 18:57:14.953054 2026] [:error] [pid 57639:tid 57659] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 16 18:57:15.210639 2026] [:error] [pid 57639:tid 57646] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Thu Apr 16 18:57:15.467983 2026] [:error] [pid 57639:tid 57652] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Thu Apr 16 18:57:15.729982 2026] [:error] [pid 57639:tid 57666] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Thu Apr 16 18:57:15.987595 2026] [:error] [pid 57639:tid 57651] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Thu Apr 16 18:57:16.247723 2026] [:error] [pid 57639:tid 57656] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Thu Apr 16 18:57:16.508690 2026] [:error] [pid 57639:tid 57655] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Thu Apr 16 18:57:16.767131 2026] [:error] [pid 57639:tid 57665] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Thu Apr 16 18:57:17.048514 2026] [:error] [pid 57639:tid 57661] [client 74.234.86.1:12837] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 16 18:57:17.303399 2026] [:error] [pid 57639:tid 57664] [client 74.234.86.1:12837] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeDAjaMCQoTw7TsxWuk1UQAAANI"]
[Thu Apr 16 18:57:18.202667 2026] [:error] [pid 29603:tid 29609] [client 74.234.86.1:4870] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeDAjlfGOR6fpTWUAzpwEAAAAQQ"]
[Thu Apr 16 18:57:19.127034 2026] [:error] [pid 57538:tid 57605] [client 74.234.86.1:4864] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeDAj8uMaiEF5SVR2Be_qAAAAIM"]
[Thu Apr 16 18:57:19.851981 2026] [:error] [pid 57536:tid 57556] [client 74.234.86.1:5087] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeDAjyQU4faGja6jpDs-3gAAAAg"]
[Thu Apr 16 18:57:20.513102 2026] [:error] [pid 7880:tid 7897] [client 74.234.86.1:5065] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeDAkKaezm4fSGc0yUJ4qwAAAYw"]
[Thu Apr 16 18:57:21.292984 2026] [:error] [pid 29603:tid 29623] [client 74.234.86.1:5113] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeDAkVfGOR6fpTWUAzpwEwAAARI"]
[Thu Apr 16 18:57:22.011860 2026] [:error] [pid 57639:tid 57651] [client 74.234.86.1:12857] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeDAkqMCQoTw7TsxWuk1VwAAAMU"]
[Thu Apr 16 18:57:22.701753 2026] [:error] [pid 29603:tid 29614] [client 74.234.86.1:5009] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeDAklfGOR6fpTWUAzpwFAAAAQk"]
[Thu Apr 16 18:57:23.479307 2026] [:error] [pid 57536:tid 57553] [client 74.234.86.1:12830] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeDAkyQU4faGja6jpDs-4gAAAAU"]
[Thu Apr 16 18:57:24.043245 2026] [:error] [pid 57536:tid 57551] [client 74.234.86.1:5069] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeDAlCQU4faGja6jpDs-5QAAAAM"]
[Thu Apr 16 18:57:24.694509 2026] [:error] [pid 7880:tid 7885] [client 74.234.86.1:5099] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeDAlKaezm4fSGc0yUJ4sQAAAYA"]
[Thu Apr 16 18:57:25.236330 2026] [:error] [pid 57536:tid 57554] [client 74.234.86.1:12833] [client 74.234.86.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeDAlSQU4faGja6jpDs-6AAAAAY"]
[Thu Apr 16 19:21:37.387301 2026] [:error] [pid 57536:tid 57565] [client 59.93.96.139:58165] [client 59.93.96.139] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 59.93.96.139, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeDGQSQU4faGja6jpDtKUQAAABE"]
[Thu Apr 16 19:21:37.393008 2026] [:error] [pid 57536:tid 57565] [client 59.93.96.139:58165] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 16 21:38:25.013410 2026] [:error] [pid 49094:tid 49102] [client 170.64.150.242:61480] [client 170.64.150.242] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 170.64.150.242, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aeDmUTbDwvcXorHR_Mzr1gAAAUY"]
[Thu Apr 16 21:38:25.017530 2026] [:error] [pid 49094:tid 49102] [client 170.64.150.242:61480] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu Apr 16 21:45:49.904011 2026] [:error] [pid 57536:tid 57568] [client 45.130.203.138:36183] [client 45.130.203.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "aeDoDSQU4faGja6jpDuLZQAAABQ"]
[Thu Apr 16 21:45:50.594171 2026] [:error] [pid 49094:tid 49120] [client 45.130.203.130:23861] [client 45.130.203.130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "aeDoDjbDwvcXorHR_MzwCAAAAVg"]
[Thu Apr 16 22:49:54.303703 2026] [:error] [pid 49094:tid 49100] [client 20.166.7.149:45143] File does not exist: /usr/local/apache/htdocs/suspended-page/tymi.php
[Thu Apr 16 22:49:54.561792 2026] [:error] [pid 49094:tid 49109] [client 20.166.7.149:45143] File does not exist: /usr/local/apache/htdocs/suspended-page/4GrJSiwkF3A.php
[Thu Apr 16 22:49:55.279575 2026] [:error] [pid 49094:tid 49110] [client 20.166.7.149:45143] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Thu Apr 16 22:49:55.534103 2026] [:error] [pid 49094:tid 49103] [client 20.166.7.149:45143] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Thu Apr 16 22:49:56.016084 2026] [:error] [pid 49094:tid 49115] [client 20.166.7.149:45143] File does not exist: /usr/local/apache/htdocs/suspended-page/hwjtry0zd1fzeakcuzn8Cdefault.php
[Thu Apr 16 22:49:56.282962 2026] [:error] [pid 49094:tid 49101] [client 20.166.7.149:45143] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Thu Apr 16 22:49:56.560786 2026] [:error] [pid 49094:tid 49120] [client 20.166.7.149:45143] File does not exist: /usr/local/apache/htdocs/suspended-page/oLEzRVqmJJPFSucdefault.php
[Thu Apr 16 22:49:56.826389 2026] [:error] [pid 49094:tid 49111] [client 20.166.7.149:45143] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Thu Apr 16 22:49:57.078913 2026] [:error] [pid 49094:tid 49100] [client 20.166.7.149:45143] File does not exist: /usr/local/apache/htdocs/suspended-page/3akp.php
[Thu Apr 16 22:49:57.354580 2026] [:error] [pid 49094:tid 49113] [client 20.166.7.149:45143] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Thu Apr 16 22:49:57.603177 2026] [:error] [pid 49094:tid 49110] [client 20.166.7.149:45143] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeD3FTbDwvcXorHR_MwWZQAAAU4"]
[Thu Apr 16 22:50:00.522590 2026] [:error] [pid 57639:tid 57650] [client 20.166.7.149:45217] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeD3GKMCQoTw7TsxWun09gAAAMQ"]
[Thu Apr 16 22:50:02.372027 2026] [:error] [pid 49094:tid 49113] [client 20.166.7.149:45121] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeD3GjbDwvcXorHR_MwWcwAAAVE"]
[Thu Apr 16 22:50:03.973636 2026] [:error] [pid 57538:tid 57611] [client 20.166.7.149:45130] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeD3G8uMaiEF5SVR2Bf5_AAAAIk"]
[Thu Apr 16 22:50:05.544980 2026] [:error] [pid 57639:tid 57655] [client 20.166.7.149:45246] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "aeD3HaMCQoTw7TsxWun1DwAAAMk"]
[Thu Apr 16 22:50:06.782007 2026] [:error] [pid 49094:tid 49119] [client 20.166.7.149:45187] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "aeD3HjbDwvcXorHR_MwWhQAAAVc"]
[Thu Apr 16 22:50:07.940108 2026] [:error] [pid 57639:tid 57648] [client 20.166.7.149:45222] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "aeD3H6MCQoTw7TsxWun1FgAAAMI"]
[Thu Apr 16 22:50:09.400802 2026] [:error] [pid 57536:tid 57558] [client 20.166.7.149:45126] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "aeD3ISQU4faGja6jpDuorQAAAAo"]
[Thu Apr 16 22:50:10.483476 2026] [:error] [pid 57639:tid 57649] [client 20.166.7.149:45125] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeD3IqMCQoTw7TsxWun1IAAAAMM"]
[Thu Apr 16 22:50:11.724731 2026] [:error] [pid 29603:tid 29624] [client 20.166.7.149:45193] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeD3I1fGOR6fpTWUAzqyRAAAARM"]
[Thu Apr 16 22:50:12.481168 2026] [:error] [pid 29603:tid 29620] [client 20.166.7.149:45134] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeD3JFfGOR6fpTWUAzqyRQAAAQ8"]
[Thu Apr 16 22:50:13.502292 2026] [:error] [pid 57538:tid 57624] [client 20.166.7.149:45243] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeD3JcuMaiEF5SVR2Bf6BAAAAJY"]
[Thu Apr 16 22:50:14.430677 2026] [:error] [pid 7880:tid 7886] [client 20.166.7.149:45221] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "aeD3Jqaezm4fSGc0yULMDQAAAYE"]
[Thu Apr 16 22:50:15.505799 2026] [:error] [pid 49094:tid 49117] [client 20.166.7.149:45208] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "aeD3JzbDwvcXorHR_MwWtAAAAVU"]
[Thu Apr 16 22:50:16.533169 2026] [:error] [pid 57639:tid 57661] [client 20.166.7.149:45133] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "aeD3KKMCQoTw7TsxWun1QgAAAM8"]
[Thu Apr 16 22:50:17.384524 2026] [:error] [pid 57537:tid 57596] [client 20.166.7.149:45128] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "aeD3KVVQRS8nm73ENAnKnwAAAFU"]
[Thu Apr 16 22:50:18.292848 2026] [:error] [pid 57639:tid 57659] [client 20.166.7.149:45194] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "aeD3KqMCQoTw7TsxWun1SAAAAM0"]
[Thu Apr 16 22:50:19.263054 2026] [:error] [pid 29603:tid 29628] [client 20.166.7.149:45196] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "aeD3K1fGOR6fpTWUAzqyUQAAARc"]
[Thu Apr 16 22:50:20.171495 2026] [:error] [pid 49094:tid 49117] [client 20.166.7.149:45205] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "aeD3LDbDwvcXorHR_MwWwgAAAVU"]
[Thu Apr 16 22:50:20.859788 2026] [:error] [pid 49094:tid 49100] [client 20.166.7.149:45125] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "aeD3LDbDwvcXorHR_MwWxAAAAUQ"]
[Thu Apr 16 22:50:22.101076 2026] [:error] [pid 57536:tid 57560] [client 20.166.7.149:45150] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "aeD3LiQU4faGja6jpDuo0wAAAAw"]
[Thu Apr 16 22:50:22.844175 2026] [:error] [pid 57537:tid 57575] [client 20.166.7.149:45144] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "aeD3LlVQRS8nm73ENAnKpAAAAEA"]
[Thu Apr 16 22:50:23.695441 2026] [:error] [pid 57538:tid 57615] [client 20.166.7.149:45186] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "aeD3L8uMaiEF5SVR2Bf6HwAAAI0"]
[Thu Apr 16 22:50:24.468787 2026] [:error] [pid 7880:tid 7894] [client 20.166.7.149:45214] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "aeD3MKaezm4fSGc0yULMJAAAAYk"]
[Thu Apr 16 22:50:25.697921 2026] [:error] [pid 57538:tid 57611] [client 20.166.7.149:45195] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeD3McuMaiEF5SVR2Bf6JgAAAIk"]
[Thu Apr 16 22:50:26.638299 2026] [:error] [pid 29603:tid 29611] [client 20.166.7.149:45154] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeD3MlfGOR6fpTWUAzqyagAAAQY"]
[Thu Apr 16 22:50:28.593807 2026] [:error] [pid 49094:tid 49101] [client 20.166.7.149:45147] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeD3NDbDwvcXorHR_MwXDAAAAUU"]
[Thu Apr 16 22:50:30.010873 2026] [:error] [pid 7880:tid 7894] [client 20.166.7.149:45229] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeD3Nqaezm4fSGc0yULMPAAAAYk"]
[Thu Apr 16 22:50:30.971712 2026] [:error] [pid 57536:tid 57559] [client 20.166.7.149:45141] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeD3NiQU4faGja6jpDuo4QAAAAs"]
[Thu Apr 16 22:50:32.163147 2026] [:error] [pid 49094:tid 49096] [client 20.166.7.149:45184] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeD3ODbDwvcXorHR_MwXJgAAAUA"]
[Thu Apr 16 22:50:33.519596 2026] [:error] [pid 57536:tid 57554] [client 20.166.7.149:45157] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeD3OSQU4faGja6jpDuo5gAAAAY"]
[Thu Apr 16 22:50:35.997307 2026] [:error] [pid 57639:tid 57652] [client 20.166.7.149:45135] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "aeD3O6MCQoTw7TsxWun1dwAAAMY"]
[Thu Apr 16 22:50:38.353972 2026] [:error] [pid 57639:tid 57651] [client 20.166.7.149:45145] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "aeD3PqMCQoTw7TsxWun1fwAAAMU"]
[Thu Apr 16 22:50:40.561950 2026] [:error] [pid 49094:tid 49113] [client 20.166.7.149:45228] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "aeD3QDbDwvcXorHR_MwXOgAAAVE"]
[Thu Apr 16 22:50:41.913973 2026] [:error] [pid 57536:tid 57569] [client 20.166.7.149:45207] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "aeD3QSQU4faGja6jpDuo_gAAABU"]
[Thu Apr 16 22:50:43.072913 2026] [:error] [pid 57536:tid 57548] [client 20.166.7.149:45162] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "aeD3QyQU4faGja6jpDupAwAAAAA"]
[Thu Apr 16 22:50:44.697466 2026] [:error] [pid 49094:tid 49101] [client 20.166.7.149:45142] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeD3RDbDwvcXorHR_MwXOwAAAUU"]
[Thu Apr 16 22:50:46.399430 2026] [:error] [pid 7880:tid 7893] [client 20.166.7.149:45226] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeD3Rqaezm4fSGc0yULMVgAAAYg"]
[Thu Apr 16 22:50:47.755263 2026] [:error] [pid 57536:tid 57552] [client 20.166.7.149:5062] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeD3RyQU4faGja6jpDupCwAAAAQ"]
[Thu Apr 16 22:50:48.587942 2026] [:error] [pid 49094:tid 49101] [client 20.166.7.149:45245] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeD3SDbDwvcXorHR_MwXUgAAAUU"]
[Thu Apr 16 22:50:49.288181 2026] [:error] [pid 57536:tid 57571] [client 20.166.7.149:45139] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blqjs.php"] [unique_id "aeD3SSQU4faGja6jpDupDwAAABc"]
[Thu Apr 16 22:50:50.075054 2026] [:error] [pid 49094:tid 49108] [client 20.166.7.149:45127] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blqjs.php"] [unique_id "aeD3SjbDwvcXorHR_MwXXQAAAUw"]
[Thu Apr 16 22:50:50.915937 2026] [:error] [pid 57536:tid 57567] [client 20.166.7.149:45129] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blqjs.php"] [unique_id "aeD3SiQU4faGja6jpDupEgAAABM"]
[Thu Apr 16 22:50:52.775648 2026] [:error] [pid 57537:tid 57580] [client 20.166.7.149:45137] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blqjs.php"] [unique_id "aeD3TFVQRS8nm73ENAnKuAAAAEU"]
[Thu Apr 16 22:50:54.313603 2026] [:error] [pid 57639:tid 57656] [client 20.166.7.149:5061] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "aeD3TqMCQoTw7TsxWun1kAAAAMo"]
[Thu Apr 16 22:50:55.929081 2026] [:error] [pid 57639:tid 57652] [client 20.166.7.149:45201] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "aeD3T6MCQoTw7TsxWun1lQAAAMY"]
[Thu Apr 16 22:50:57.129584 2026] [:error] [pid 49094:tid 49115] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/sk25_1.php
[Thu Apr 16 22:50:57.410124 2026] [:error] [pid 49094:tid 49102] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/fetch.php
[Thu Apr 16 22:50:57.697809 2026] [:error] [pid 49094:tid 49097] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/eFpU3yHnriNNLtvdefault.php
[Thu Apr 16 22:50:57.988443 2026] [:error] [pid 49094:tid 49101] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/2nzyHnOkEg.php
[Thu Apr 16 22:50:58.487080 2026] [:error] [pid 49094:tid 49115] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/oircv.php
[Thu Apr 16 22:50:58.756570 2026] [:error] [pid 49094:tid 49120] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/blnux.php
[Thu Apr 16 22:50:59.050354 2026] [:error] [pid 49094:tid 49102] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Thu Apr 16 22:50:59.477035 2026] [:error] [pid 49094:tid 49112] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/Spow_SRw.php
[Thu Apr 16 22:50:59.763324 2026] [:error] [pid 49094:tid 49097] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/albrt.php
[Thu Apr 16 22:51:01.146315 2026] [:error] [pid 49094:tid 49112] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/xxivicLhot.php
[Thu Apr 16 22:51:01.427620 2026] [:error] [pid 49094:tid 49097] [client 20.166.7.149:5084] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Thu Apr 16 22:51:01.693179 2026] [:error] [pid 49094:tid 49111] [client 20.166.7.149:5084] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "aeD3VTbDwvcXorHR_MwXwwAAAU8"]
[Thu Apr 16 22:51:02.797918 2026] [:error] [pid 7880:tid 7891] [client 20.166.7.149:5066] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "aeD3Vqaezm4fSGc0yULMbwAAAYY"]
[Thu Apr 16 22:51:04.165884 2026] [:error] [pid 49094:tid 49114] [client 20.166.7.149:45166] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "aeD3WDbDwvcXorHR_MwX6wAAAVI"]
[Thu Apr 16 22:51:04.859814 2026] [:error] [pid 57639:tid 57663] [client 20.166.7.149:5063] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "aeD3WKMCQoTw7TsxWun1pQAAANE"]
[Thu Apr 16 22:51:05.938194 2026] [:error] [pid 57538:tid 57615] [client 20.166.7.149:5096] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "aeD3WcuMaiEF5SVR2Bf6SQAAAI0"]
[Thu Apr 16 22:51:07.529420 2026] [:error] [pid 57537:tid 57597] [client 20.166.7.149:45224] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "aeD3W1VQRS8nm73ENAnKvgAAAFY"]
[Thu Apr 16 22:51:09.150862 2026] [:error] [pid 57536:tid 57558] [client 20.166.7.149:45240] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "aeD3XSQU4faGja6jpDupTAAAAAo"]
[Thu Apr 16 22:51:10.746310 2026] [:error] [pid 57537:tid 57594] [client 20.166.7.149:45183] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "aeD3XlVQRS8nm73ENAnKxQAAAFM"]
[Thu Apr 16 22:51:13.127111 2026] [:error] [pid 57536:tid 57549] [client 20.166.7.149:5095] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeD3YSQU4faGja6jpDupUgAAAAE"]
[Thu Apr 16 22:51:15.346520 2026] [:error] [pid 57639:tid 57665] [client 20.166.7.149:45202] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeD3Y6MCQoTw7TsxWun1sAAAANM"]
[Thu Apr 16 22:51:16.645292 2026] [:error] [pid 7880:tid 7909] [client 20.166.7.149:45206] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeD3ZKaezm4fSGc0yULMlwAAAZg"]
[Thu Apr 16 22:51:18.261612 2026] [:error] [pid 7880:tid 7893] [client 20.166.7.149:45146] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeD3Zqaezm4fSGc0yULMnAAAAYg"]
[Thu Apr 16 22:51:19.219550 2026] [:error] [pid 49094:tid 49118] [client 20.166.7.149:45233] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeD3ZzbDwvcXorHR_MwYHgAAAVY"]
[Thu Apr 16 22:51:20.890986 2026] [:error] [pid 57639:tid 57666] [client 20.166.7.149:5069] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeD3aKMCQoTw7TsxWun1zQAAANQ"]
[Thu Apr 16 22:51:21.540018 2026] [:error] [pid 49094:tid 49106] [client 20.166.7.149:45188] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeD3aTbDwvcXorHR_MwYQwAAAUo"]
[Thu Apr 16 22:51:22.384859 2026] [:error] [pid 7880:tid 7903] [client 20.166.7.149:5068] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeD3aqaezm4fSGc0yULMoQAAAZI"]
[Thu Apr 16 22:51:24.693150 2026] [:error] [pid 57536:tid 57568] [client 20.166.7.149:45210] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fyflv.php"] [unique_id "aeD3bCQU4faGja6jpDupXgAAABQ"]
[Thu Apr 16 22:51:28.168486 2026] [:error] [pid 29603:tid 29624] [client 20.166.7.149:45136] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fyflv.php"] [unique_id "aeD3cFfGOR6fpTWUAzqyuQAAARM"]
[Thu Apr 16 22:51:32.203759 2026] [:error] [pid 57639:tid 57653] [client 20.166.7.149:45199] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fyflv.php"] [unique_id "aeD3dKMCQoTw7TsxWun2CgAAAMc"]
[Thu Apr 16 22:51:33.612867 2026] [:error] [pid 57639:tid 57652] [client 20.166.7.149:45209] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fyflv.php"] [unique_id "aeD3daMCQoTw7TsxWun2IQAAAMY"]
[Thu Apr 16 22:51:34.723398 2026] [:error] [pid 49094:tid 49107] [client 20.166.7.149:5008] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "aeD3djbDwvcXorHR_MwYpgAAAUs"]
[Thu Apr 16 22:51:36.248932 2026] [:error] [pid 49094:tid 49117] [client 20.166.7.149:45131] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "aeD3eDbDwvcXorHR_MwYsAAAAVU"]
[Thu Apr 16 22:51:37.574386 2026] [:error] [pid 49094:tid 49100] [client 20.166.7.149:45185] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "aeD3eTbDwvcXorHR_MwYugAAAUQ"]
[Thu Apr 16 22:51:41.472953 2026] [:error] [pid 57536:tid 57564] [client 20.166.7.149:5106] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "aeD3fSQU4faGja6jpDupjwAAABA"]
[Thu Apr 16 22:51:43.742648 2026] [:error] [pid 57538:tid 57620] [client 20.166.7.149:45148] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sde.php"] [unique_id "aeD3f8uMaiEF5SVR2Bf6gwAAAJI"]
[Thu Apr 16 22:51:45.921126 2026] [:error] [pid 49094:tid 49107] [client 20.166.7.149:45172] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sde.php"] [unique_id "aeD3gTbDwvcXorHR_MwY4wAAAUs"]
[Thu Apr 16 22:51:47.472466 2026] [:error] [pid 7880:tid 7885] [client 20.166.7.149:45191] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sde.php"] [unique_id "aeD3g6aezm4fSGc0yULMuwAAAYA"]
[Thu Apr 16 22:51:49.080564 2026] [:error] [pid 57538:tid 57623] [client 20.166.7.149:5080] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sde.php"] [unique_id "aeD3hcuMaiEF5SVR2Bf6igAAAJU"]
[Thu Apr 16 22:51:49.802075 2026] [:error] [pid 57639:tid 57660] [client 20.166.7.149:45230] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wpb.php"] [unique_id "aeD3haMCQoTw7TsxWun2dgAAAM4"]
[Thu Apr 16 22:51:50.820683 2026] [:error] [pid 57538:tid 57613] [client 20.166.7.149:45241] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wpb.php"] [unique_id "aeD3hsuMaiEF5SVR2Bf6jQAAAIs"]
[Thu Apr 16 22:51:51.837989 2026] [:error] [pid 57639:tid 57658] [client 20.166.7.149:45124] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wpb.php"] [unique_id "aeD3h6MCQoTw7TsxWun2fgAAAMw"]
[Thu Apr 16 22:51:53.156246 2026] [:error] [pid 57536:tid 57567] [client 20.166.7.149:45168] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wpb.php"] [unique_id "aeD3iSQU4faGja6jpDupzQAAABM"]
[Thu Apr 16 22:51:54.632894 2026] [:error] [pid 57538:tid 57621] [client 20.166.7.149:45169] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "aeD3isuMaiEF5SVR2Bf6lwAAAJM"]
[Thu Apr 16 22:51:55.861399 2026] [:error] [pid 49094:tid 49113] [client 20.166.7.149:5087] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "aeD3izbDwvcXorHR_MwZBgAAAVE"]
[Thu Apr 16 22:51:57.001652 2026] [:error] [pid 57639:tid 57646] [client 20.166.7.149:45242] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "aeD3jaMCQoTw7TsxWun2hAAAAMA"]
[Thu Apr 16 22:51:58.379347 2026] [:error] [pid 57639:tid 57659] [client 20.166.7.149:5112] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "aeD3jqMCQoTw7TsxWun2jAAAAM0"]
[Thu Apr 16 22:51:59.282926 2026] [:error] [pid 57639:tid 57670] [client 20.166.7.149:45223] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeD3j6MCQoTw7TsxWun2kAAAANg"]
[Thu Apr 16 22:52:01.130998 2026] [:error] [pid 29603:tid 29612] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/9EaklzMysJ.php
[Thu Apr 16 22:52:01.401831 2026] [:error] [pid 29603:tid 29621] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Thu Apr 16 22:52:01.768311 2026] [:error] [pid 29603:tid 29611] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/s3FiyJ2WGCnF0p1default.php
[Thu Apr 16 22:52:02.042259 2026] [:error] [pid 29603:tid 29615] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Thu Apr 16 22:52:02.311649 2026] [:error] [pid 29603:tid 29629] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Thu Apr 16 22:52:02.805213 2026] [:error] [pid 29603:tid 29623] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Thu Apr 16 22:52:03.276851 2026] [:error] [pid 29603:tid 29619] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Thu Apr 16 22:52:03.546642 2026] [:error] [pid 29603:tid 29622] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/p14rAeWytPdH5hZcscCFdefault.php
[Thu Apr 16 22:52:03.817932 2026] [:error] [pid 29603:tid 29627] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/iindv.php
[Thu Apr 16 22:52:04.087704 2026] [:error] [pid 29603:tid 29609] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/maintura.php
[Thu Apr 16 22:52:04.441004 2026] [:error] [pid 29603:tid 29618] [client 20.166.7.149:45239] File does not exist: /usr/local/apache/htdocs/suspended-page/iee52ruz0s81ndrdefault.php
[Thu Apr 16 22:52:04.708327 2026] [:error] [pid 29603:tid 29624] [client 20.166.7.149:45239] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeD3lFfGOR6fpTWUAzqy7gAAARM"]
[Thu Apr 16 22:52:05.954997 2026] [:error] [pid 57537:tid 57585] [client 20.166.7.149:45173] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeD3lVVQRS8nm73ENAnK-AAAAEo"]
[Thu Apr 16 22:52:07.369783 2026] [:error] [pid 57639:tid 57655] [client 20.166.7.149:5086] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeD3l6MCQoTw7TsxWun26gAAAMk"]
[Thu Apr 16 22:52:09.070023 2026] [:error] [pid 57537:tid 57577] [client 20.166.7.149:45176] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "aeD3mVVQRS8nm73ENAnK_AAAAEI"]
[Thu Apr 16 22:52:10.350801 2026] [:error] [pid 57639:tid 57652] [client 20.166.7.149:5059] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "aeD3mqMCQoTw7TsxWun2-QAAAMY"]
[Thu Apr 16 22:52:13.512560 2026] [:error] [pid 57536:tid 57564] [client 20.166.7.149:45123] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "aeD3nSQU4faGja6jpDup4gAAABA"]
[Thu Apr 16 22:52:14.627448 2026] [:error] [pid 57639:tid 57657] [client 20.166.7.149:45204] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "aeD3nqMCQoTw7TsxWun3EwAAAMs"]
[Thu Apr 16 22:52:16.199148 2026] [:error] [pid 29603:tid 29621] [client 20.166.7.149:5007] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "aeD3oFfGOR6fpTWUAzqy-AAAARA"]
[Thu Apr 16 22:52:17.247278 2026] [:error] [pid 7880:tid 7886] [client 20.166.7.149:5117] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeD3oaaezm4fSGc0yULM6QAAAYE"]
[Thu Apr 16 22:52:18.126380 2026] [:error] [pid 49094:tid 49115] [client 20.166.7.149:5079] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeD3ojbDwvcXorHR_MwZMQAAAVM"]
[Thu Apr 16 22:52:19.026895 2026] [:error] [pid 57639:tid 57653] [client 20.166.7.149:45216] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeD3o6MCQoTw7TsxWun3LgAAAMc"]
[Thu Apr 16 22:52:19.945678 2026] [:error] [pid 49094:tid 49105] [client 20.166.7.149:45192] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "aeD3ozbDwvcXorHR_MwZPgAAAUk"]
[Thu Apr 16 22:52:21.142340 2026] [:error] [pid 57639:tid 57657] [client 20.166.7.149:5098] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeD3paMCQoTw7TsxWun3OAAAAMs"]
[Thu Apr 16 22:52:23.702293 2026] [:error] [pid 57639:tid 57651] [client 20.166.7.149:45211] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeD3p6MCQoTw7TsxWun3UAAAAMU"]
[Thu Apr 16 22:52:25.124003 2026] [:error] [pid 49094:tid 49105] [client 20.166.7.149:45182] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeD3qTbDwvcXorHR_MwZVwAAAUk"]
[Thu Apr 16 22:52:27.257968 2026] [:error] [pid 49094:tid 49102] [client 20.166.7.149:45219] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeD3qzbDwvcXorHR_MwZZgAAAUY"]
[Thu Apr 16 22:52:29.581214 2026] [:error] [pid 29603:tid 29622] [client 20.166.7.149:45164] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeD3rVfGOR6fpTWUAzqy_QAAARE"]
[Thu Apr 16 22:52:31.462072 2026] [:error] [pid 7880:tid 7885] [client 20.166.7.149:5073] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeD3r6aezm4fSGc0yULNBgAAAYA"]
[Thu Apr 16 22:52:32.319031 2026] [:error] [pid 7880:tid 7889] [client 20.166.7.149:45132] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeD3sKaezm4fSGc0yULNDQAAAYQ"]
[Thu Apr 16 22:52:33.359423 2026] [:error] [pid 57536:tid 57557] [client 20.166.7.149:5113] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeD3sSQU4faGja6jpDuqAAAAAAk"]
[Thu Apr 16 22:52:34.609455 2026] [:error] [pid 57639:tid 57661] [client 20.166.7.149:45225] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeD3sqMCQoTw7TsxWun3jwAAAM8"]
[Thu Apr 16 22:52:36.158036 2026] [:error] [pid 57536:tid 57566] [client 20.166.7.149:5075] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeD3tCQU4faGja6jpDuqBAAAABI"]
[Thu Apr 16 22:52:38.339373 2026] [:error] [pid 57639:tid 57657] [client 20.166.7.149:45167] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeD3tqMCQoTw7TsxWun3mQAAAMs"]
[Thu Apr 16 22:52:39.209891 2026] [:error] [pid 57639:tid 57666] [client 20.166.7.149:5071] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeD3t6MCQoTw7TsxWun3nwAAANQ"]
[Thu Apr 16 22:52:39.758413 2026] [:error] [pid 57639:tid 57646] [client 20.166.7.149:45244] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeD3t6MCQoTw7TsxWun3pAAAAMA"]
[Thu Apr 16 22:52:41.557723 2026] [:error] [pid 57538:tid 57611] [client 20.166.7.149:45158] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeD3ucuMaiEF5SVR2Bf6tAAAAIk"]
[Thu Apr 16 22:52:42.309561 2026] [:error] [pid 57538:tid 57616] [client 20.166.7.149:5094] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeD3usuMaiEF5SVR2Bf6tgAAAI4"]
[Thu Apr 16 22:52:43.273908 2026] [:error] [pid 57538:tid 57603] [client 20.166.7.149:4999] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "aeD3u8uMaiEF5SVR2Bf6uAAAAIE"]
[Thu Apr 16 22:52:44.178218 2026] [:error] [pid 49094:tid 49117] [client 20.166.7.149:5097] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "aeD3vDbDwvcXorHR_MwZjgAAAVU"]
[Thu Apr 16 22:52:46.071146 2026] [:error] [pid 49094:tid 49113] [client 20.166.7.149:5076] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "aeD3vjbDwvcXorHR_MwZlwAAAVE"]
[Thu Apr 16 22:52:47.425198 2026] [:error] [pid 57639:tid 57649] [client 20.166.7.149:45247] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "aeD3v6MCQoTw7TsxWun3vQAAAMM"]
[Thu Apr 16 22:52:49.408854 2026] [:error] [pid 49094:tid 49118] [client 20.166.7.149:5110] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "aeD3wTbDwvcXorHR_MwZpwAAAVY"]
[Thu Apr 16 22:52:50.663002 2026] [:error] [pid 49094:tid 49112] [client 20.166.7.149:5111] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeD3wjbDwvcXorHR_MwZrQAAAVA"]
[Thu Apr 16 22:52:52.513462 2026] [:error] [pid 57639:tid 57646] [client 20.166.7.149:45149] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeD3xKMCQoTw7TsxWun3yAAAAMA"]
[Thu Apr 16 22:52:53.385670 2026] [:error] [pid 7880:tid 7887] [client 20.166.7.149:45189] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeD3xaaezm4fSGc0yULNPwAAAYI"]
[Thu Apr 16 22:52:54.520383 2026] [:error] [pid 29603:tid 29611] [client 20.166.7.149:45181] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeD3xlfGOR6fpTWUAzqzJQAAAQY"]
[Thu Apr 16 22:52:55.486043 2026] [:error] [pid 57537:tid 57587] [client 20.166.7.149:45120] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeD3x1VQRS8nm73ENAnLFQAAAEw"]
[Thu Apr 16 22:52:56.771650 2026] [:error] [pid 57639:tid 57663] [client 20.166.7.149:5002] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeD3yKMCQoTw7TsxWun3ygAAANE"]
[Thu Apr 16 22:52:58.174258 2026] [:error] [pid 49094:tid 49101] [client 20.166.7.149:45234] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeD3yjbDwvcXorHR_MwZugAAAUU"]
[Thu Apr 16 22:52:59.148104 2026] [:error] [pid 57537:tid 57578] [client 20.166.7.149:5101] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeD3y1VQRS8nm73ENAnLGQAAAEM"]
[Thu Apr 16 22:53:01.190451 2026] [:error] [pid 29603:tid 29608] [client 20.166.7.149:45153] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aeD3zVfGOR6fpTWUAzqzOAAAAQM"]
[Thu Apr 16 22:53:02.822488 2026] [:error] [pid 49094:tid 49096] [client 20.166.7.149:45227] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aeD3zjbDwvcXorHR_MwZxQAAAUA"]
[Thu Apr 16 22:53:03.877668 2026] [:error] [pid 29603:tid 29627] [client 20.166.7.149:45200] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aeD3z1fGOR6fpTWUAzqzSQAAARY"]
[Thu Apr 16 22:53:05.322584 2026] [:error] [pid 29603:tid 29607] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Thu Apr 16 22:53:05.614427 2026] [:error] [pid 29603:tid 29605] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/pm90apbv3v5fvgkbguyiCdefault.php
[Thu Apr 16 22:53:05.870589 2026] [:error] [pid 29603:tid 29628] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX1.php
[Thu Apr 16 22:53:06.130766 2026] [:error] [pid 29603:tid 29609] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/gvg1bvpsgtot1rpklCdefault.php
[Thu Apr 16 22:53:06.385300 2026] [:error] [pid 29603:tid 29611] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/6xBAm3vODE05BSzkJZRAws.php
[Thu Apr 16 22:53:06.651709 2026] [:error] [pid 29603:tid 29613] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Thu Apr 16 22:53:06.945219 2026] [:error] [pid 29603:tid 29612] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Thu Apr 16 22:53:07.219668 2026] [:error] [pid 29603:tid 29610] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Thu Apr 16 22:53:07.472958 2026] [:error] [pid 29603:tid 29606] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Thu Apr 16 22:53:07.725865 2026] [:error] [pid 29603:tid 29623] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Thu Apr 16 22:53:08.035446 2026] [:error] [pid 29603:tid 29621] [client 20.166.7.149:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Thu Apr 16 22:53:08.285717 2026] [:error] [pid 29603:tid 29619] [client 20.166.7.149:5014] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "aeD31FfGOR6fpTWUAzqzXwAAAQ4"]
[Thu Apr 16 22:53:09.508150 2026] [:error] [pid 57639:tid 57665] [client 20.166.7.149:5024] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "aeD31aMCQoTw7TsxWun33QAAANM"]
[Thu Apr 16 22:53:10.325003 2026] [:error] [pid 57639:tid 57650] [client 20.166.7.149:5077] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "aeD31qMCQoTw7TsxWun34gAAAMQ"]
[Thu Apr 16 22:53:11.457847 2026] [:error] [pid 57639:tid 57666] [client 20.166.7.149:5100] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "aeD316MCQoTw7TsxWun35wAAANQ"]
[Thu Apr 16 22:53:12.331367 2026] [:error] [pid 57639:tid 57661] [client 20.166.7.149:5023] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "aeD32KMCQoTw7TsxWun37gAAAM8"]
[Thu Apr 16 22:53:13.399658 2026] [:error] [pid 7880:tid 7892] [client 20.166.7.149:45213] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "aeD32aaezm4fSGc0yULNZwAAAYc"]
[Thu Apr 16 22:53:14.336509 2026] [:error] [pid 57639:tid 57647] [client 20.166.7.149:45218] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "aeD32qMCQoTw7TsxWun3-AAAAME"]
[Thu Apr 16 22:53:15.252409 2026] [:error] [pid 57538:tid 57612] [client 20.166.7.149:5099] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "aeD328uMaiEF5SVR2Bf6yQAAAIo"]
[Thu Apr 16 22:53:16.529941 2026] [:error] [pid 57639:tid 57660] [client 20.166.7.149:45165] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeD33KMCQoTw7TsxWun4BAAAAM4"]
[Thu Apr 16 22:53:17.568805 2026] [:error] [pid 57639:tid 57661] [client 20.166.7.149:45220] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeD33aMCQoTw7TsxWun4CgAAAM8"]
[Thu Apr 16 22:53:19.459029 2026] [:error] [pid 49094:tid 49105] [client 20.166.7.149:5074] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeD33zbDwvcXorHR_MwZ8AAAAUk"]
[Thu Apr 16 22:53:20.737793 2026] [:error] [pid 57639:tid 57652] [client 20.166.7.149:45160] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeD34KMCQoTw7TsxWun4HwAAAMY"]
[Thu Apr 16 22:53:22.613973 2026] [:error] [pid 7880:tid 7904] [client 20.166.7.149:4994] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeD34qaezm4fSGc0yULNfwAAAZM"]
[Thu Apr 16 22:53:23.979184 2026] [:error] [pid 57639:tid 57660] [client 20.166.7.149:5013] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeD346MCQoTw7TsxWun4KwAAAM4"]
[Thu Apr 16 22:53:24.871625 2026] [:error] [pid 49094:tid 49114] [client 20.166.7.149:45175] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeD35DbDwvcXorHR_MwaAAAAAVI"]
[Thu Apr 16 22:53:26.605328 2026] [:error] [pid 57639:tid 57665] [client 20.166.7.149:5000] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeD35qMCQoTw7TsxWun4OQAAANM"]
[Thu Apr 16 22:53:27.786359 2026] [:error] [pid 57639:tid 57648] [client 20.166.7.149:45212] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeD356MCQoTw7TsxWun4QQAAAMI"]
[Thu Apr 16 22:53:28.597173 2026] [:error] [pid 7880:tid 7890] [client 20.166.7.149:5034] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeD36Kaezm4fSGc0yULNigAAAYU"]
[Thu Apr 16 22:53:29.509045 2026] [:error] [pid 57537:tid 57599] [client 20.166.7.149:45190] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeD36VVQRS8nm73ENAnLPAAAAFg"]
[Thu Apr 16 22:53:32.082142 2026] [:error] [pid 57639:tid 57648] [client 20.166.7.149:5091] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeD37KMCQoTw7TsxWun4TgAAAMI"]
[Thu Apr 16 22:53:33.156278 2026] [:error] [pid 57536:tid 57554] [client 20.166.7.149:45215] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeD37SQU4faGja6jpDuqiQAAAAY"]
[Thu Apr 16 22:53:34.547337 2026] [:error] [pid 7880:tid 7905] [client 20.166.7.149:5083] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeD37qaezm4fSGc0yULNnQAAAZQ"]
[Thu Apr 16 22:53:35.363369 2026] [:error] [pid 49094:tid 49108] [client 20.166.7.149:45207] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeD37zbDwvcXorHR_MwaFwAAAUw"]
[Thu Apr 16 22:53:36.618629 2026] [:error] [pid 57639:tid 57649] [client 20.166.7.149:5089] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeD38KMCQoTw7TsxWun4YwAAAMM"]
[Thu Apr 16 22:53:37.417645 2026] [:error] [pid 57639:tid 57647] [client 20.166.7.149:45161] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeD38aMCQoTw7TsxWun4awAAAME"]
[Thu Apr 16 22:53:38.413716 2026] [:error] [pid 57536:tid 57570] [client 20.166.7.149:45235] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeD38iQU4faGja6jpDuqlQAAABY"]
[Thu Apr 16 22:53:39.194104 2026] [:error] [pid 29603:tid 29627] [client 20.166.7.149:45159] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeD381fGOR6fpTWUAzqzaQAAARY"]
[Thu Apr 16 22:53:40.087600 2026] [:error] [pid 57537:tid 57578] [client 20.166.7.149:45209] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeD39FVQRS8nm73ENAnLRgAAAEM"]
[Thu Apr 16 22:53:41.334033 2026] [:error] [pid 57536:tid 57563] [client 20.166.7.149:45232] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aeD39SQU4faGja6jpDuqmwAAAA8"]
[Thu Apr 16 22:53:43.062023 2026] [:error] [pid 57639:tid 57657] [client 20.166.7.149:5082] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aeD396MCQoTw7TsxWun4lgAAAMs"]
[Thu Apr 16 22:53:44.199406 2026] [:error] [pid 57537:tid 57599] [client 20.166.7.149:5011] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aeD3-FVQRS8nm73ENAnLTQAAAFg"]
[Thu Apr 16 22:53:45.272168 2026] [:error] [pid 29603:tid 29627] [client 20.166.7.149:4996] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aeD3-VfGOR6fpTWUAzqzfgAAARY"]
[Thu Apr 16 22:53:46.073317 2026] [:error] [pid 57537:tid 57591] [client 20.166.7.149:5001] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeD3-lVQRS8nm73ENAnLUAAAAFA"]
[Thu Apr 16 22:53:47.454019 2026] [:error] [pid 57536:tid 57569] [client 20.166.7.149:45238] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeD3-yQU4faGja6jpDuqqwAAABU"]
[Thu Apr 16 22:53:48.379915 2026] [:error] [pid 57536:tid 57572] [client 20.166.7.149:5102] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeD3_CQU4faGja6jpDuqrQAAABg"]
[Thu Apr 16 22:53:49.256812 2026] [:error] [pid 57639:tid 57663] [client 20.166.7.149:5037] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeD3_aMCQoTw7TsxWun4oAAAANE"]
[Thu Apr 16 22:53:50.067173 2026] [:error] [pid 57639:tid 57659] [client 20.166.7.149:5115] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "aeD3_qMCQoTw7TsxWun4ogAAAM0"]
[Thu Apr 16 22:53:51.583638 2026] [:error] [pid 57639:tid 57660] [client 20.166.7.149:5019] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "aeD3_6MCQoTw7TsxWun4qQAAAM4"]
[Thu Apr 16 22:53:52.484395 2026] [:error] [pid 57536:tid 57553] [client 20.166.7.149:4962] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "aeD4ACQU4faGja6jpDuqsAAAAAU"]
[Thu Apr 16 22:53:54.036544 2026] [:error] [pid 7880:tid 7903] [client 20.166.7.149:45122] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "aeD4Aqaezm4fSGc0yULNrgAAAZI"]
[Thu Apr 16 22:53:55.165064 2026] [:error] [pid 49094:tid 49097] [client 20.166.7.149:4998] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD4AzbDwvcXorHR_MwaZwAAAUE"]
[Thu Apr 16 22:53:56.057637 2026] [:error] [pid 49094:tid 49105] [client 20.166.7.149:45177] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD4BDbDwvcXorHR_MwaawAAAUk"]
[Thu Apr 16 22:53:57.201694 2026] [:error] [pid 57536:tid 57569] [client 20.166.7.149:5064] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD4BSQU4faGja6jpDuqswAAABU"]
[Thu Apr 16 22:53:58.254366 2026] [:error] [pid 57639:tid 57658] [client 20.166.7.149:5052] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeD4BqMCQoTw7TsxWun4twAAAMw"]
[Thu Apr 16 22:53:59.194435 2026] [:error] [pid 49094:tid 49101] [client 20.166.7.149:5020] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeD4BzbDwvcXorHR_MwaeQAAAUU"]
[Thu Apr 16 22:54:01.166523 2026] [:error] [pid 57538:tid 57608] [client 20.166.7.149:5104] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeD4CcuMaiEF5SVR2Bf63wAAAIY"]
[Thu Apr 16 22:54:01.800217 2026] [:error] [pid 57639:tid 57668] [client 20.166.7.149:45185] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeD4CaMCQoTw7TsxWun4yAAAANY"]
[Thu Apr 16 22:54:05.147485 2026] [:error] [pid 57639:tid 57667] [client 20.166.7.149:5081] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeD4DaMCQoTw7TsxWun44QAAANU"]
[Thu Apr 16 22:54:06.800900 2026] [:error] [pid 49094:tid 49111] [client 20.166.7.149:45170] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeD4DjbDwvcXorHR_MwagwAAAU8"]
[Thu Apr 16 22:54:08.160945 2026] [:error] [pid 57536:tid 57555] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 16 22:54:08.593126 2026] [:error] [pid 57536:tid 57556] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Thu Apr 16 22:54:08.847384 2026] [:error] [pid 57536:tid 57565] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Thu Apr 16 22:54:09.120803 2026] [:error] [pid 57536:tid 57566] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Thu Apr 16 22:54:09.376699 2026] [:error] [pid 57536:tid 57559] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Thu Apr 16 22:54:09.631136 2026] [:error] [pid 57536:tid 57558] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Thu Apr 16 22:54:10.046130 2026] [:error] [pid 57536:tid 57552] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Thu Apr 16 22:54:10.299900 2026] [:error] [pid 57536:tid 57554] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Thu Apr 16 22:54:10.571027 2026] [:error] [pid 57536:tid 57556] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Thu Apr 16 22:54:10.954899 2026] [:error] [pid 57536:tid 57568] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Apr 16 22:54:11.264385 2026] [:error] [pid 57536:tid 57565] [client 20.166.7.149:5055] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Thu Apr 16 22:54:12.938464 2026] [:error] [pid 57536:tid 57565] [client 20.166.7.149:5055] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeD4FCQU4faGja6jpDuq7wAAABE"]
[Thu Apr 16 22:54:14.790423 2026] [:error] [pid 29603:tid 29620] [client 20.166.7.149:5105] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeD4FlfGOR6fpTWUAzqzqQAAAQ8"]
[Thu Apr 16 22:54:16.619192 2026] [:error] [pid 57639:tid 57648] [client 20.166.7.149:5056] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeD4GKMCQoTw7TsxWun4-QAAAMI"]
[Thu Apr 16 22:54:19.855838 2026] [:error] [pid 57537:tid 57587] [client 20.166.7.149:45190] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeD4G1VQRS8nm73ENAnLYgAAAEw"]
[Thu Apr 16 22:54:21.269298 2026] [:error] [pid 57639:tid 57661] [client 20.166.7.149:45174] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aeD4HaMCQoTw7TsxWun5DAAAAM8"]
[Thu Apr 16 22:54:22.119983 2026] [:error] [pid 57639:tid 57660] [client 20.166.7.149:5044] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aeD4HqMCQoTw7TsxWun5FwAAAM4"]
[Thu Apr 16 22:54:22.816233 2026] [:error] [pid 57536:tid 57568] [client 20.166.7.149:5078] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aeD4HiQU4faGja6jpDuq-QAAABQ"]
[Thu Apr 16 22:54:24.064596 2026] [:error] [pid 57536:tid 57559] [client 20.166.7.149:5027] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aeD4ICQU4faGja6jpDuq_AAAAAs"]
[Thu Apr 16 22:54:24.944584 2026] [:error] [pid 57536:tid 57565] [client 20.166.7.149:4993] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeD4ICQU4faGja6jpDuq_gAAABE"]
[Thu Apr 16 22:54:25.873783 2026] [:error] [pid 57536:tid 57561] [client 20.166.7.149:5050] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeD4ISQU4faGja6jpDurAgAAAA0"]
[Thu Apr 16 22:54:26.650070 2026] [:error] [pid 7880:tid 7906] [client 20.166.7.149:45155] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeD4Iqaezm4fSGc0yULN6wAAAZU"]
[Thu Apr 16 22:54:27.869798 2026] [:error] [pid 57536:tid 57568] [client 20.166.7.149:5114] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeD4IyQU4faGja6jpDurCQAAABQ"]
[Thu Apr 16 22:54:29.052835 2026] [:error] [pid 57639:tid 57655] [client 20.166.7.149:5041] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeD4JaMCQoTw7TsxWun5JgAAAMk"]
[Thu Apr 16 22:54:31.112167 2026] [:error] [pid 57537:tid 57594] [client 20.166.7.149:5092] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeD4J1VQRS8nm73ENAnLeAAAAFM"]
[Thu Apr 16 22:54:32.164471 2026] [:error] [pid 57639:tid 57665] [client 20.166.7.149:5010] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeD4KKMCQoTw7TsxWun5KQAAANM"]
[Thu Apr 16 22:54:32.881653 2026] [:error] [pid 49094:tid 49102] [client 20.166.7.149:45163] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeD4KDbDwvcXorHR_MwavwAAAUY"]
[Thu Apr 16 22:54:34.204301 2026] [:error] [pid 57639:tid 57667] [client 20.166.7.149:45194] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeD4KqMCQoTw7TsxWun5LQAAANU"]
[Thu Apr 16 22:54:35.993349 2026] [:error] [pid 57639:tid 57648] [client 20.166.7.149:5103] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeD4K6MCQoTw7TsxWun5NwAAAMI"]
[Thu Apr 16 22:54:37.227136 2026] [:error] [pid 49094:tid 49097] [client 20.166.7.149:5107] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeD4LTbDwvcXorHR_Mwa1QAAAUE"]
[Thu Apr 16 22:54:38.937903 2026] [:error] [pid 49094:tid 49115] [client 20.166.7.149:5043] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "aeD4LjbDwvcXorHR_Mwa3gAAAVM"]
[Thu Apr 16 22:54:41.133653 2026] [:error] [pid 57639:tid 57658] [client 20.166.7.149:4940] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aeD4MaMCQoTw7TsxWun5VQAAAMw"]
[Thu Apr 16 22:54:44.199883 2026] [:error] [pid 57639:tid 57649] [client 20.166.7.149:5067] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aeD4NKMCQoTw7TsxWun5XQAAAMM"]
[Thu Apr 16 22:54:46.541313 2026] [:error] [pid 49094:tid 49099] [client 20.166.7.149:5040] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aeD4NjbDwvcXorHR_Mwa9AAAAUM"]
[Thu Apr 16 22:54:47.593590 2026] [:error] [pid 57538:tid 57602] [client 20.166.7.149:5049] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aeD4N8uMaiEF5SVR2Bf7DQAAAIA"]
[Thu Apr 16 22:54:49.656031 2026] [:error] [pid 49094:tid 49113] [client 20.166.7.149:5057] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeD4OTbDwvcXorHR_Mwa-gAAAVE"]
[Thu Apr 16 22:54:50.407394 2026] [:error] [pid 57538:tid 57611] [client 20.166.7.149:5108] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeD4OsuMaiEF5SVR2Bf7FAAAAIk"]
[Thu Apr 16 22:54:51.489840 2026] [:error] [pid 57536:tid 57570] [client 20.166.7.149:5055] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeD4OyQU4faGja6jpDurGwAAABY"]
[Thu Apr 16 22:54:54.424564 2026] [:error] [pid 29603:tid 29614] [client 20.166.7.149:45156] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "aeD4PlfGOR6fpTWUAzqzwQAAAQk"]
[Thu Apr 16 22:54:55.403551 2026] [:error] [pid 49094:tid 49106] [client 20.166.7.149:4972] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "aeD4PzbDwvcXorHR_MwbDQAAAUo"]
[Thu Apr 16 22:54:57.609553 2026] [:error] [pid 29603:tid 29605] [client 20.166.7.149:45197] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "aeD4QVfGOR6fpTWUAzqzxgAAAQA"]
[Thu Apr 16 22:55:01.351935 2026] [:error] [pid 49094:tid 49108] [client 20.166.7.149:5036] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "aeD4RTbDwvcXorHR_MwbNgAAAUw"]
[Thu Apr 16 22:55:06.477060 2026] [:error] [pid 57536:tid 57553] [client 20.166.7.149:45180] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "aeD4SiQU4faGja6jpDurPQAAAAU"]
[Thu Apr 16 22:55:09.405592 2026] [:error] [pid 7880:tid 7900] [client 20.166.7.149:45128] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeD4Taaezm4fSGc0yULOIwAAAY8"]
[Thu Apr 16 22:55:13.099097 2026] [:error] [pid 49094:tid 49116] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Thu Apr 16 22:55:13.376594 2026] [:error] [pid 49094:tid 49096] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Thu Apr 16 22:55:13.657246 2026] [:error] [pid 49094:tid 49115] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Thu Apr 16 22:55:13.937390 2026] [:error] [pid 49094:tid 49119] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 16 22:55:14.219220 2026] [:error] [pid 49094:tid 49099] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Thu Apr 16 22:55:14.489494 2026] [:error] [pid 49094:tid 49117] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/new3.php
[Thu Apr 16 22:55:14.761044 2026] [:error] [pid 49094:tid 49104] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Thu Apr 16 22:55:15.032198 2026] [:error] [pid 49094:tid 49100] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Thu Apr 16 22:55:15.311031 2026] [:error] [pid 49094:tid 49113] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Thu Apr 16 22:55:15.582908 2026] [:error] [pid 49094:tid 49112] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Thu Apr 16 22:55:15.853762 2026] [:error] [pid 49094:tid 49116] [client 20.166.7.149:5015] File does not exist: /usr/local/apache/htdocs/suspended-page/jlex.php
[Thu Apr 16 22:55:16.121031 2026] [:error] [pid 49094:tid 49096] [client 20.166.7.149:5015] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "aeD4VDbDwvcXorHR_MwbZAAAAUA"]
[Thu Apr 16 22:55:17.900873 2026] [:error] [pid 57639:tid 57652] [client 20.166.7.149:4964] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "aeD4VaMCQoTw7TsxWun59wAAAMY"]
[Thu Apr 16 22:55:19.085904 2026] [:error] [pid 49094:tid 49097] [client 20.166.7.149:5022] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "aeD4VzbDwvcXorHR_MwbawAAAUE"]
[Thu Apr 16 22:55:20.199628 2026] [:error] [pid 49094:tid 49110] [client 20.166.7.149:5053] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "aeD4WDbDwvcXorHR_MwbbwAAAU4"]
[Thu Apr 16 22:55:22.432692 2026] [:error] [pid 29603:tid 29607] [client 20.166.7.149:5046] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp/jp.php"] [unique_id "aeD4WlfGOR6fpTWUAzqz3gAAAQI"]
[Thu Apr 16 22:55:23.405881 2026] [:error] [pid 57536:tid 57560] [client 20.166.7.149:45150] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp/jp.php"] [unique_id "aeD4WyQU4faGja6jpDurVAAAAAw"]
[Thu Apr 16 22:55:24.258425 2026] [:error] [pid 29603:tid 29609] [client 20.166.7.149:45229] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp/jp.php"] [unique_id "aeD4XFfGOR6fpTWUAzqz5gAAAQQ"]
[Thu Apr 16 22:55:25.101957 2026] [:error] [pid 57536:tid 57565] [client 20.166.7.149:4929] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp/jp.php"] [unique_id "aeD4XSQU4faGja6jpDurWwAAABE"]
[Thu Apr 16 22:55:26.256025 2026] [:error] [pid 57538:tid 57622] [client 20.166.7.149:4968] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeD4XsuMaiEF5SVR2Bf7QAAAAJQ"]
[Thu Apr 16 22:55:27.181010 2026] [:error] [pid 57536:tid 57563] [client 20.166.7.149:5085] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeD4XyQU4faGja6jpDurYwAAAA8"]
[Thu Apr 16 22:55:28.923982 2026] [:error] [pid 29603:tid 29624] [client 20.166.7.149:45130] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeD4YFfGOR6fpTWUAzqz6QAAARM"]
[Thu Apr 16 22:55:30.211714 2026] [:error] [pid 57538:tid 57626] [client 20.166.7.149:4992] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeD4YsuMaiEF5SVR2Bf7RgAAAJg"]
[Thu Apr 16 22:55:32.151633 2026] [:error] [pid 57639:tid 57661] [client 20.166.7.149:45135] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeD4ZKMCQoTw7TsxWun6VgAAAM8"]
[Thu Apr 16 22:55:33.252746 2026] [:error] [pid 57639:tid 57663] [client 20.166.7.149:4971] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeD4ZaMCQoTw7TsxWun6YgAAANE"]
[Thu Apr 16 22:55:34.102035 2026] [:error] [pid 57639:tid 57663] [client 20.166.7.149:5118] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeD4ZqMCQoTw7TsxWun6awAAANE"]
[Thu Apr 16 22:55:35.722998 2026] [:error] [pid 57538:tid 57609] [client 20.166.7.149:45243] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeD4Z8uMaiEF5SVR2Bf7SgAAAIc"]
[Thu Apr 16 22:55:36.848519 2026] [:error] [pid 57538:tid 57608] [client 20.166.7.149:4997] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "aeD4aMuMaiEF5SVR2Bf7TQAAAIY"]
[Thu Apr 16 22:55:38.068523 2026] [:error] [pid 57538:tid 57611] [client 20.166.7.149:45178] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "aeD4asuMaiEF5SVR2Bf7UgAAAIk"]
[Thu Apr 16 22:55:39.359332 2026] [:error] [pid 57537:tid 57586] [client 20.166.7.149:45126] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "aeD4a1VQRS8nm73ENAnLnQAAAEs"]
[Thu Apr 16 22:55:40.499283 2026] [:error] [pid 49094:tid 49109] [client 20.166.7.149:5116] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "aeD4bDbDwvcXorHR_MwbrAAAAU0"]
[Thu Apr 16 22:55:42.455836 2026] [:error] [pid 57639:tid 57670] [client 20.166.7.149:5006] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeD4bqMCQoTw7TsxWun6oAAAANg"]
[Thu Apr 16 22:55:45.723065 2026] [:error] [pid 57538:tid 57615] [client 20.166.7.149:4947] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeD4ccuMaiEF5SVR2Bf7XwAAAI0"]
[Thu Apr 16 22:55:46.902057 2026] [:error] [pid 57538:tid 57619] [client 20.166.7.149:4945] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeD4csuMaiEF5SVR2Bf7ZwAAAJE"]
[Thu Apr 16 22:55:47.943649 2026] [:error] [pid 7880:tid 7887] [client 20.166.7.149:4951] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeD4c6aezm4fSGc0yULOSgAAAYI"]
[Thu Apr 16 22:55:49.159366 2026] [:error] [pid 57639:tid 57660] [client 20.166.7.149:45125] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeD4daMCQoTw7TsxWun6vwAAAM4"]
[Thu Apr 16 22:55:50.283517 2026] [:error] [pid 29603:tid 29608] [client 20.166.7.149:45237] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeD4dlfGOR6fpTWUAzq0DgAAAQM"]
[Thu Apr 16 22:55:50.954386 2026] [:error] [pid 57536:tid 57564] [client 20.166.7.149:4953] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeD4diQU4faGja6jpDurggAAABA"]
[Thu Apr 16 22:55:52.054355 2026] [:error] [pid 57536:tid 57555] [client 20.166.7.149:45214] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeD4eCQU4faGja6jpDuriQAAAAc"]
[Thu Apr 16 22:55:53.200020 2026] [:error] [pid 7880:tid 7902] [client 20.166.7.149:45142] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeD4eaaezm4fSGc0yULOUgAAAZE"]
[Thu Apr 16 22:55:54.336110 2026] [:error] [pid 57537:tid 57595] [client 20.166.7.149:5093] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeD4elVQRS8nm73ENAnLpgAAAFQ"]
[Thu Apr 16 22:55:55.406586 2026] [:error] [pid 57639:tid 57659] [client 20.166.7.149:5109] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeD4e6MCQoTw7TsxWun61QAAAM0"]
[Thu Apr 16 22:55:57.427744 2026] [:error] [pid 57639:tid 57652] [client 20.166.7.149:4979] [client 20.166.7.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "aeD4faMCQoTw7TsxWun64QAAAMY"]
[Fri Apr 17 00:19:05.571872 2026] [:error] [pid 3245:tid 3283] [client 51.13.190.245:59224] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Fri Apr 17 00:19:05.852166 2026] [:error] [pid 3245:tid 3265] [client 51.13.190.245:59224] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-xme.php
[Fri Apr 17 00:19:06.116396 2026] [:error] [pid 3245:tid 3280] [client 51.13.190.245:59224] File does not exist: /usr/local/apache/htdocs/suspended-page/il.php
[Fri Apr 17 00:19:06.384128 2026] [:error] [pid 3245:tid 3273] [client 51.13.190.245:59224] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Fri Apr 17 00:19:06.908882 2026] [:error] [pid 3245:tid 3282] [client 51.13.190.245:59224] File does not exist: /usr/local/apache/htdocs/suspended-page/ypp.php
[Fri Apr 17 00:19:07.184654 2026] [:error] [pid 3245:tid 3268] [client 51.13.190.245:59224] File does not exist: /usr/local/apache/htdocs/suspended-page/2468.php
[Fri Apr 17 00:19:07.447685 2026] [:error] [pid 3245:tid 3274] [client 51.13.190.245:59224] File does not exist: /usr/local/apache/htdocs/suspended-page/eterezrezt.php
[Fri Apr 17 00:19:07.998999 2026] [:error] [pid 3245:tid 3280] [client 51.13.190.245:59224] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 17 00:19:08.292042 2026] [:error] [pid 3245:tid 3273] [client 51.13.190.245:59224] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeEL_KESOMTHVLs-uFCuJAAAAQs"]
[Fri Apr 17 00:19:08.861973 2026] [:error] [pid 43387:tid 43468] [client 51.13.190.245:40089] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeEL_CBNsONqHxWTakUi4wAAAI8"]
[Fri Apr 17 00:19:09.418852 2026] [:error] [pid 43387:tid 43474] [client 51.13.190.245:32384] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeEL_SBNsONqHxWTakUi6wAAAJU"]
[Fri Apr 17 00:19:10.086633 2026] [:error] [pid 43387:tid 43467] [client 51.13.190.245:39910] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeEL_iBNsONqHxWTakUi8QAAAI4"]
[Fri Apr 17 00:19:10.632972 2026] [:error] [pid 43482:tid 43497] [client 51.13.190.245:40081] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeEL_j9SZnuKxlHrct1x1wAAAM0"]
[Fri Apr 17 00:19:11.193447 2026] [:error] [pid 3245:tid 3281] [client 51.13.190.245:46137] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeEL_6ESOMTHVLs-uFCuLwAAARM"]
[Fri Apr 17 00:19:11.765929 2026] [:error] [pid 3245:tid 3272] [client 51.13.190.245:24122] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeEL_6ESOMTHVLs-uFCuNAAAAQo"]
[Fri Apr 17 00:19:12.426671 2026] [:error] [pid 3245:tid 3268] [client 51.13.190.245:59947] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeEMAKESOMTHVLs-uFCuOgAAAQY"]
[Fri Apr 17 00:19:13.053120 2026] [:error] [pid 3245:tid 3263] [client 51.13.190.245:32400] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeEMAaESOMTHVLs-uFCuPAAAAQE"]
[Fri Apr 17 00:19:13.743488 2026] [:error] [pid 3245:tid 3285] [client 51.13.190.245:59219] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeEMAaESOMTHVLs-uFCuSQAAARc"]
[Fri Apr 17 00:19:14.295198 2026] [:error] [pid 43387:tid 43474] [client 51.13.190.245:32431] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeEMAiBNsONqHxWTakUi_AAAAJU"]
[Fri Apr 17 00:19:14.873519 2026] [:error] [pid 43387:tid 43456] [client 51.13.190.245:32387] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeEMAiBNsONqHxWTakUjAgAAAIU"]
[Fri Apr 17 00:19:15.484781 2026] [:error] [pid 3245:tid 3278] [client 51.13.190.245:39911] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeEMA6ESOMTHVLs-uFCuUAAAARA"]
[Fri Apr 17 00:19:16.033282 2026] [:error] [pid 3245:tid 3277] [client 51.13.190.245:46133] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeEMBKESOMTHVLs-uFCuVQAAAQ8"]
[Fri Apr 17 00:19:16.907583 2026] [:error] [pid 43385:tid 43392] [client 51.13.190.245:32422] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeEMBMnIxkJaUI8KNs7tLAAAAAM"]
[Fri Apr 17 00:19:17.476371 2026] [:error] [pid 43385:tid 43400] [client 51.13.190.245:40069] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeEMBcnIxkJaUI8KNs7tMAAAAAs"]
[Fri Apr 17 00:19:18.179535 2026] [:error] [pid 43385:tid 43403] [client 51.13.190.245:46271] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ewp.php"] [unique_id "aeEMBsnIxkJaUI8KNs7tMwAAAA4"]
[Fri Apr 17 00:19:18.751099 2026] [:error] [pid 3245:tid 3283] [client 51.13.190.245:32410] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ewp.php"] [unique_id "aeEMBqESOMTHVLs-uFCuYAAAARU"]
[Fri Apr 17 00:19:19.549939 2026] [:error] [pid 3245:tid 3276] [client 51.13.190.245:40085] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ewp.php"] [unique_id "aeEMB6ESOMTHVLs-uFCuZwAAAQ4"]
[Fri Apr 17 00:19:20.217814 2026] [:error] [pid 43482:tid 43495] [client 51.13.190.245:39904] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ewp.php"] [unique_id "aeEMCD9SZnuKxlHrct1x_wAAAMs"]
[Fri Apr 17 00:19:20.984347 2026] [:error] [pid 43385:tid 43404] [client 51.13.190.245:40113] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "aeEMCMnIxkJaUI8KNs7tOgAAAA8"]
[Fri Apr 17 00:19:21.833308 2026] [:error] [pid 43385:tid 43407] [client 51.13.190.245:46264] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "aeEMCcnIxkJaUI8KNs7tPQAAABI"]
[Fri Apr 17 00:19:22.637359 2026] [:error] [pid 43482:tid 43501] [client 51.13.190.245:40117] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "aeEMCj9SZnuKxlHrct1yBQAAANE"]
[Fri Apr 17 00:19:23.275699 2026] [:error] [pid 43387:tid 43475] [client 51.13.190.245:40065] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "aeEMCyBNsONqHxWTakUjJwAAAJY"]
[Fri Apr 17 00:19:23.932568 2026] [:error] [pid 43387:tid 43469] [client 51.13.190.245:59948] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "aeEMCyBNsONqHxWTakUjKQAAAJA"]
[Fri Apr 17 00:19:24.557250 2026] [:error] [pid 43482:tid 43493] [client 51.13.190.245:59226] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "aeEMDD9SZnuKxlHrct1yCgAAAMk"]
[Fri Apr 17 00:19:25.091684 2026] [:error] [pid 43482:tid 43491] [client 51.13.190.245:39933] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "aeEMDT9SZnuKxlHrct1yDAAAAMc"]
[Fri Apr 17 00:19:25.771276 2026] [:error] [pid 43482:tid 43498] [client 51.13.190.245:59929] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "aeEMDT9SZnuKxlHrct1yDwAAAM4"]
[Fri Apr 17 00:19:26.342496 2026] [:error] [pid 43482:tid 43492] [client 51.13.190.245:32440] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeEMDj9SZnuKxlHrct1yEwAAAMg"]
[Fri Apr 17 00:19:26.996722 2026] [:error] [pid 43482:tid 43494] [client 51.13.190.245:39875] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeEMDj9SZnuKxlHrct1yFgAAAMo"]
[Fri Apr 17 00:19:27.740380 2026] [:error] [pid 3245:tid 3271] [client 51.13.190.245:46082] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeEMD6ESOMTHVLs-uFCucwAAAQk"]
[Fri Apr 17 00:19:28.378022 2026] [:error] [pid 3245:tid 3285] [client 51.13.190.245:39918] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeEMEKESOMTHVLs-uFCudgAAARc"]
[Fri Apr 17 00:19:28.974532 2026] [:error] [pid 3245:tid 3272] [client 51.13.190.245:46259] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeEMEKESOMTHVLs-uFCudwAAAQo"]
[Fri Apr 17 00:19:29.590115 2026] [:error] [pid 43387:tid 43473] [client 51.13.190.245:32420] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeEMESBNsONqHxWTakUjOQAAAJQ"]
[Fri Apr 17 00:19:30.156015 2026] [:error] [pid 43387:tid 43449] [client 51.13.190.245:32403] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeEMEiBNsONqHxWTakUjPAAAAIE"]
[Fri Apr 17 00:19:30.786841 2026] [:error] [pid 3245:tid 3268] [client 51.13.190.245:59949] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeEMEqESOMTHVLs-uFCufAAAAQY"]
[Fri Apr 17 00:19:31.426940 2026] [:error] [pid 43482:tid 43498] [client 51.13.190.245:59225] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeEMEz9SZnuKxlHrct1yIQAAAM4"]
[Fri Apr 17 00:19:31.995883 2026] [:error] [pid 43482:tid 43492] [client 51.13.190.245:39913] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeEMEz9SZnuKxlHrct1yJAAAAMg"]
[Fri Apr 17 00:19:32.578282 2026] [:error] [pid 3245:tid 3278] [client 51.13.190.245:32390] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeEMFKESOMTHVLs-uFCugAAAARA"]
[Fri Apr 17 00:19:33.262247 2026] [:error] [pid 43386:tid 43420] [client 51.13.190.245:39889] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeEMFe91GAVgUfhPVDGqDQAAAEA"]
[Fri Apr 17 00:19:33.884490 2026] [:error] [pid 43385:tid 43404] [client 51.13.190.245:40122] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeEMFcnIxkJaUI8KNs7tSgAAAA8"]
[Fri Apr 17 00:19:34.503589 2026] [:error] [pid 43386:tid 43431] [client 51.13.190.245:39917] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeEMFu91GAVgUfhPVDGqDwAAAEs"]
[Fri Apr 17 00:19:35.045573 2026] [:error] [pid 3245:tid 3262] [client 51.13.190.245:40078] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeEMF6ESOMTHVLs-uFCuiwAAAQA"]
[Fri Apr 17 00:19:35.672418 2026] [:error] [pid 43482:tid 43487] [client 51.13.190.245:59911] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeEMFz9SZnuKxlHrct1yKQAAAMM"]
[Fri Apr 17 00:19:36.210044 2026] [:error] [pid 3245:tid 3263] [client 51.13.190.245:46253] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeEMGKESOMTHVLs-uFCujgAAAQE"]
[Fri Apr 17 00:19:36.760470 2026] [:error] [pid 43386:tid 43442] [client 51.13.190.245:39883] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeEMGO91GAVgUfhPVDGqEwAAAFU"]
[Fri Apr 17 00:19:37.315911 2026] [:error] [pid 43386:tid 43445] [client 51.13.190.245:59967] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeEMGe91GAVgUfhPVDGqFQAAAFg"]
[Fri Apr 17 00:19:37.890612 2026] [:error] [pid 43386:tid 43422] [client 51.13.190.245:59965] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeEMGe91GAVgUfhPVDGqGQAAAEI"]
[Fri Apr 17 00:19:38.410905 2026] [:error] [pid 43387:tid 43469] [client 51.13.190.245:32394] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeEMGiBNsONqHxWTakUjQQAAAJA"]
[Fri Apr 17 00:19:38.980965 2026] [:error] [pid 43387:tid 43472] [client 51.13.190.245:32399] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeEMGiBNsONqHxWTakUjRAAAAJM"]
[Fri Apr 17 00:19:39.541222 2026] [:error] [pid 43482:tid 43484] [client 51.13.190.245:40105] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeEMGz9SZnuKxlHrct1yLAAAAMA"]
[Fri Apr 17 00:19:40.069112 2026] [:error] [pid 43385:tid 43397] [client 51.13.190.245:39916] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeEMHMnIxkJaUI8KNs7tUQAAAAg"]
[Fri Apr 17 00:19:40.593156 2026] [:error] [pid 43482:tid 43497] [client 51.13.190.245:59950] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aeEMHD9SZnuKxlHrct1yNAAAAM0"]
[Fri Apr 17 00:19:41.117321 2026] [:error] [pid 43482:tid 43484] [client 51.13.190.245:46134] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aeEMHT9SZnuKxlHrct1yNgAAAMA"]
[Fri Apr 17 00:19:41.641088 2026] [:error] [pid 43385:tid 43395] [client 51.13.190.245:59940] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aeEMHcnIxkJaUI8KNs7tWQAAAAY"]
[Fri Apr 17 00:19:42.168490 2026] [:error] [pid 43385:tid 43392] [client 51.13.190.245:39885] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aeEMHsnIxkJaUI8KNs7tXwAAAAM"]
[Fri Apr 17 00:19:42.683886 2026] [:error] [pid 43385:tid 43413] [client 51.13.190.245:46223] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aeEMHsnIxkJaUI8KNs7taQAAABc"]
[Fri Apr 17 00:19:43.204992 2026] [:error] [pid 43385:tid 43399] [client 51.13.190.245:59200] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aeEMH8nIxkJaUI8KNs7tbgAAAAo"]
[Fri Apr 17 00:19:43.726442 2026] [:error] [pid 43386:tid 43438] [client 51.13.190.245:30148] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aeEMH-91GAVgUfhPVDGqIgAAAFI"]
[Fri Apr 17 00:19:44.244592 2026] [:error] [pid 43386:tid 43445] [client 51.13.190.245:46093] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aeEMIO91GAVgUfhPVDGqJAAAAFg"]
[Fri Apr 17 00:19:44.766861 2026] [:error] [pid 43482:tid 43507] [client 51.13.190.245:46109] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEMID9SZnuKxlHrct1yRgAAANc"]
[Fri Apr 17 00:19:45.296492 2026] [:error] [pid 43482:tid 43484] [client 51.13.190.245:46088] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEMIT9SZnuKxlHrct1ySwAAAMA"]
[Fri Apr 17 00:19:45.825014 2026] [:error] [pid 3245:tid 3267] [client 51.13.190.245:46229] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEMIaESOMTHVLs-uFCupAAAAQU"]
[Fri Apr 17 00:19:46.345791 2026] [:error] [pid 3245:tid 3283] [client 51.13.190.245:59927] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeEMIqESOMTHVLs-uFCuqQAAARU"]
[Fri Apr 17 00:19:46.865221 2026] [:error] [pid 43482:tid 43486] [client 51.13.190.245:39912] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeEMIj9SZnuKxlHrct1yUwAAAMI"]
[Fri Apr 17 00:19:47.388938 2026] [:error] [pid 43482:tid 43484] [client 51.13.190.245:40121] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeEMIz9SZnuKxlHrct1yWQAAAMA"]
[Fri Apr 17 00:19:47.909661 2026] [:error] [pid 43387:tid 43473] [client 51.13.190.245:46213] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeEMIyBNsONqHxWTakUjUgAAAJQ"]
[Fri Apr 17 00:19:48.427527 2026] [:error] [pid 43387:tid 43461] [client 51.13.190.245:46121] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeEMJCBNsONqHxWTakUjVQAAAIo"]
[Fri Apr 17 00:19:48.947050 2026] [:error] [pid 43386:tid 43435] [client 51.13.190.245:59202] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeEMJO91GAVgUfhPVDGqLAAAAE8"]
[Fri Apr 17 00:19:49.464878 2026] [:error] [pid 43386:tid 43439] [client 51.13.190.245:46224] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeEMJe91GAVgUfhPVDGqLgAAAFM"]
[Fri Apr 17 00:19:50.005316 2026] [:error] [pid 43387:tid 43468] [client 51.13.190.245:30145] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeEMJiBNsONqHxWTakUjWwAAAI8"]
[Fri Apr 17 00:19:50.548492 2026] [:error] [pid 3245:tid 3264] [client 51.13.190.245:59244] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeEMJqESOMTHVLs-uFCutAAAAQI"]
[Fri Apr 17 00:19:51.104920 2026] [:error] [pid 3245:tid 3266] [client 51.13.190.245:40095] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeEMJ6ESOMTHVLs-uFCutgAAAQQ"]
[Fri Apr 17 00:19:51.621954 2026] [:error] [pid 3245:tid 3280] [client 51.13.190.245:59227] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeEMJ6ESOMTHVLs-uFCuvAAAARI"]
[Fri Apr 17 00:19:52.141673 2026] [:error] [pid 3245:tid 3262] [client 51.13.190.245:59261] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeEMKKESOMTHVLs-uFCuwgAAAQA"]
[Fri Apr 17 00:19:52.664801 2026] [:error] [pid 3245:tid 3274] [client 51.13.190.245:59906] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeEMKKESOMTHVLs-uFCuyAAAAQw"]
[Fri Apr 17 00:19:53.189504 2026] [:error] [pid 3245:tid 3277] [client 51.13.190.245:40099] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeEMKaESOMTHVLs-uFCuyQAAAQ8"]
[Fri Apr 17 00:19:53.710440 2026] [:error] [pid 3245:tid 3285] [client 51.13.190.245:30168] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeEMKaESOMTHVLs-uFCuywAAARc"]
[Fri Apr 17 00:19:54.243098 2026] [:error] [pid 43385:tid 43399] [client 51.13.190.245:46120] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeEMKsnIxkJaUI8KNs7tfAAAAAo"]
[Fri Apr 17 00:19:54.761050 2026] [:error] [pid 43387:tid 43454] [client 51.13.190.245:59928] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeEMKiBNsONqHxWTakUjagAAAIQ"]
[Fri Apr 17 00:19:55.280659 2026] [:error] [pid 43482:tid 43486] [client 51.13.190.245:30146] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeEMKz9SZnuKxlHrct1ybQAAAMI"]
[Fri Apr 17 00:19:55.813675 2026] [:error] [pid 43387:tid 43472] [client 51.13.190.245:39893] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeEMKyBNsONqHxWTakUjcAAAAJM"]
[Fri Apr 17 00:19:56.340023 2026] [:error] [pid 43386:tid 43430] [client 51.13.190.245:46112] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeEMLO91GAVgUfhPVDGqRgAAAEo"]
[Fri Apr 17 00:19:56.868039 2026] [:error] [pid 43387:tid 43473] [client 51.13.190.245:40113] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeEMLCBNsONqHxWTakUjdAAAAJQ"]
[Fri Apr 17 00:19:57.407007 2026] [:error] [pid 43387:tid 43462] [client 51.13.190.245:46114] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeEMLSBNsONqHxWTakUjdwAAAIs"]
[Fri Apr 17 00:19:57.924729 2026] [:error] [pid 43482:tid 43489] [client 51.13.190.245:7493] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeEMLT9SZnuKxlHrct1yeAAAAMU"]
[Fri Apr 17 00:19:58.444091 2026] [:error] [pid 43385:tid 43405] [client 51.13.190.245:32396] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeEMLsnIxkJaUI8KNs7tiQAAABA"]
[Fri Apr 17 00:19:58.981191 2026] [:error] [pid 43385:tid 43400] [client 51.13.190.245:39935] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeEMLsnIxkJaUI8KNs7tiwAAAAs"]
[Fri Apr 17 00:19:59.500134 2026] [:error] [pid 3245:tid 3264] [client 51.13.190.245:30182] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeEML6ESOMTHVLs-uFCu2QAAAQI"]
[Fri Apr 17 00:20:00.031315 2026] [:error] [pid 3245:tid 3275] [client 51.13.190.245:59230] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeEMMKESOMTHVLs-uFCu2wAAAQ0"]
[Fri Apr 17 00:20:00.561518 2026] [:error] [pid 3245:tid 3285] [client 51.13.190.245:40124] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeEMMKESOMTHVLs-uFCu3wAAARc"]
[Fri Apr 17 00:20:01.083519 2026] [:error] [pid 43387:tid 43456] [client 51.13.190.245:39931] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeEMMSBNsONqHxWTakUjfwAAAIU"]
[Fri Apr 17 00:20:01.600835 2026] [:error] [pid 3245:tid 3272] [client 51.13.190.245:46225] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeEMMaESOMTHVLs-uFCu6QAAAQo"]
[Fri Apr 17 00:20:02.119003 2026] [:error] [pid 3245:tid 3280] [client 51.13.190.245:46235] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeEMMqESOMTHVLs-uFCu8gAAARI"]
[Fri Apr 17 00:20:02.636870 2026] [:error] [pid 43387:tid 43462] [client 51.13.190.245:40068] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeEMMiBNsONqHxWTakUjigAAAIs"]
[Fri Apr 17 00:20:03.155362 2026] [:error] [pid 43386:tid 43428] [client 51.13.190.245:59921] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeEMM-91GAVgUfhPVDGqXAAAAEg"]
[Fri Apr 17 00:20:03.673259 2026] [:error] [pid 43385:tid 43408] [client 51.13.190.245:39876] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeEMM8nIxkJaUI8KNs7tjwAAABM"]
[Fri Apr 17 00:20:04.201775 2026] [:error] [pid 3245:tid 3278] [client 51.13.190.245:46250] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeEMNKESOMTHVLs-uFCvBAAAARA"]
[Fri Apr 17 00:20:04.720341 2026] [:error] [pid 43386:tid 43426] [client 51.13.190.245:40111] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeEMNO91GAVgUfhPVDGqYwAAAEY"]
[Fri Apr 17 00:20:05.264741 2026] [:error] [pid 43387:tid 43477] [client 51.13.190.245:40110] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeEMNSBNsONqHxWTakUjjwAAAJg"]
[Fri Apr 17 00:20:05.788638 2026] [:error] [pid 43482:tid 43489] [client 51.13.190.245:46081] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeEMNT9SZnuKxlHrct1yhwAAAMU"]
[Fri Apr 17 00:20:06.307842 2026] [:error] [pid 43387:tid 43468] [client 51.13.190.245:11608] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeEMNiBNsONqHxWTakUjlgAAAI8"]
[Fri Apr 17 00:20:06.833433 2026] [:error] [pid 3245:tid 3283] [client 51.13.190.245:24182] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeEMNqESOMTHVLs-uFCvGQAAARU"]
[Fri Apr 17 00:20:07.352518 2026] [:error] [pid 43386:tid 43441] [client 51.13.190.245:59954] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Fri Apr 17 00:20:07.613786 2026] [:error] [pid 43386:tid 43431] [client 51.13.190.245:59954] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Fri Apr 17 00:20:07.875471 2026] [:error] [pid 43386:tid 43438] [client 51.13.190.245:59954] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Fri Apr 17 00:20:08.139590 2026] [:error] [pid 43386:tid 43436] [client 51.13.190.245:59954] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Fri Apr 17 00:20:08.405045 2026] [:error] [pid 43386:tid 43430] [client 51.13.190.245:59954] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Fri Apr 17 00:20:08.666120 2026] [:error] [pid 43386:tid 43433] [client 51.13.190.245:59954] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Apr 17 00:20:09.194901 2026] [:error] [pid 43386:tid 43423] [client 51.13.190.245:59954] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Fri Apr 17 00:20:09.455858 2026] [:error] [pid 43386:tid 43427] [client 51.13.190.245:59954] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Fri Apr 17 00:20:09.723926 2026] [:error] [pid 43386:tid 43432] [client 51.13.190.245:59954] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Fri Apr 17 00:20:09.985808 2026] [:error] [pid 43386:tid 43435] [client 51.13.190.245:59954] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Fri Apr 17 00:20:10.244252 2026] [:error] [pid 43386:tid 43439] [client 51.13.190.245:59954] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeEMOu91GAVgUfhPVDGqgAAAAFM"]
[Fri Apr 17 00:20:10.760276 2026] [:error] [pid 43387:tid 43466] [client 51.13.190.245:59206] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeEMOiBNsONqHxWTakUjrAAAAI0"]
[Fri Apr 17 00:20:11.277672 2026] [:error] [pid 43386:tid 43437] [client 51.13.190.245:46267] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeEMO-91GAVgUfhPVDGqggAAAFE"]
[Fri Apr 17 00:20:11.794626 2026] [:error] [pid 3245:tid 3286] [client 51.13.190.245:46216] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeEMO6ESOMTHVLs-uFCvOwAAARg"]
[Fri Apr 17 00:20:12.313207 2026] [:error] [pid 3245:tid 3278] [client 51.13.190.245:59958] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeEMPKESOMTHVLs-uFCvQAAAARA"]
[Fri Apr 17 00:20:12.837979 2026] [:error] [pid 3245:tid 3274] [client 51.13.190.245:46105] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeEMPKESOMTHVLs-uFCvSAAAAQw"]
[Fri Apr 17 00:20:13.360469 2026] [:error] [pid 43387:tid 43473] [client 51.13.190.245:39915] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeEMPSBNsONqHxWTakUjtQAAAJQ"]
[Fri Apr 17 00:20:13.878129 2026] [:error] [pid 43385:tid 43395] [client 51.13.190.245:30162] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeEMPcnIxkJaUI8KNs7tlAAAAAY"]
[Fri Apr 17 00:20:14.395974 2026] [:error] [pid 43387:tid 43462] [client 51.13.190.245:59919] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeEMPiBNsONqHxWTakUjtwAAAIs"]
[Fri Apr 17 00:20:14.913978 2026] [:error] [pid 43482:tid 43490] [client 51.13.190.245:40126] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeEMPj9SZnuKxlHrct1yjAAAAMY"]
[Fri Apr 17 00:20:15.439247 2026] [:error] [pid 43482:tid 43491] [client 51.13.190.245:39922] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeEMPz9SZnuKxlHrct1yjgAAAMc"]
[Fri Apr 17 00:20:15.982613 2026] [:error] [pid 43482:tid 43508] [client 51.13.190.245:32423] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeEMPz9SZnuKxlHrct1ylAAAANg"]
[Fri Apr 17 00:20:16.503892 2026] [:error] [pid 3245:tid 3283] [client 51.13.190.245:40076] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeEMQKESOMTHVLs-uFCvWwAAARU"]
[Fri Apr 17 00:20:17.047195 2026] [:error] [pid 3245:tid 3265] [client 51.13.190.245:46263] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeEMQaESOMTHVLs-uFCvYAAAAQM"]
[Fri Apr 17 00:20:17.611817 2026] [:error] [pid 43482:tid 43497] [client 51.13.190.245:11482] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeEMQT9SZnuKxlHrct1ymAAAAM0"]
[Fri Apr 17 00:20:18.139612 2026] [:error] [pid 3245:tid 3274] [client 51.13.190.245:24078] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeEMQqESOMTHVLs-uFCvaAAAAQw"]
[Fri Apr 17 00:20:18.718640 2026] [:error] [pid 43386:tid 43423] [client 51.13.190.245:59936] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeEMQu91GAVgUfhPVDGqiQAAAEM"]
[Fri Apr 17 00:20:19.251988 2026] [:error] [pid 3245:tid 3282] [client 51.13.190.245:59941] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeEMQ6ESOMTHVLs-uFCvdAAAARQ"]
[Fri Apr 17 00:20:19.770788 2026] [:error] [pid 3245:tid 3274] [client 51.13.190.245:32409] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeEMQ6ESOMTHVLs-uFCvegAAAQw"]
[Fri Apr 17 00:20:20.332625 2026] [:error] [pid 3245:tid 3267] [client 51.13.190.245:39932] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeEMRKESOMTHVLs-uFCvfwAAAQU"]
[Fri Apr 17 00:20:20.911696 2026] [:error] [pid 3245:tid 3276] [client 51.13.190.245:59914] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeEMRKESOMTHVLs-uFCvhAAAAQ4"]
[Fri Apr 17 00:20:21.491620 2026] [:error] [pid 3245:tid 3286] [client 51.13.190.245:39920] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeEMRaESOMTHVLs-uFCviAAAARg"]
[Fri Apr 17 00:20:22.081092 2026] [:error] [pid 43482:tid 43508] [client 51.13.190.245:40086] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeEMRj9SZnuKxlHrct1ynwAAANg"]
[Fri Apr 17 00:20:22.679268 2026] [:error] [pid 3245:tid 3272] [client 51.13.190.245:24091] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeEMRqESOMTHVLs-uFCvkgAAAQo"]
[Fri Apr 17 00:20:23.231602 2026] [:error] [pid 43387:tid 43458] [client 51.13.190.245:24142] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeEMRyBNsONqHxWTakUjvQAAAIc"]
[Fri Apr 17 00:20:23.757069 2026] [:error] [pid 43482:tid 43506] [client 51.13.190.245:32417] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeEMRz9SZnuKxlHrct1yoQAAANY"]
[Fri Apr 17 00:20:24.318359 2026] [:error] [pid 43482:tid 43500] [client 51.13.190.245:40064] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeEMSD9SZnuKxlHrct1yogAAANA"]
[Fri Apr 17 00:20:24.919817 2026] [:error] [pid 43482:tid 43504] [client 51.13.190.245:46084] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeEMSD9SZnuKxlHrct1yowAAANQ"]
[Fri Apr 17 00:20:25.488090 2026] [:error] [pid 43482:tid 43496] [client 51.13.190.245:39908] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeEMST9SZnuKxlHrct1ypQAAAMw"]
[Fri Apr 17 00:20:26.036993 2026] [:error] [pid 43482:tid 43485] [client 51.13.190.245:32408] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeEMSj9SZnuKxlHrct1yqAAAAME"]
[Fri Apr 17 00:20:26.563555 2026] [:error] [pid 43387:tid 43472] [client 51.13.190.245:59216] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeEMSiBNsONqHxWTakUjxwAAAJM"]
[Fri Apr 17 00:20:27.195876 2026] [:error] [pid 43482:tid 43508] [client 51.13.190.245:46137] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeEMSz9SZnuKxlHrct1yqwAAANg"]
[Fri Apr 17 00:20:27.745220 2026] [:error] [pid 3245:tid 3282] [client 51.13.190.245:46220] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeEMS6ESOMTHVLs-uFCvrQAAARQ"]
[Fri Apr 17 00:20:28.418035 2026] [:error] [pid 43387:tid 43454] [client 51.13.190.245:32443] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeEMTCBNsONqHxWTakUjzQAAAIQ"]
[Fri Apr 17 00:20:28.956859 2026] [:error] [pid 3245:tid 3273] [client 51.13.190.245:40101] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeEMTKESOMTHVLs-uFCvswAAAQs"]
[Fri Apr 17 00:20:29.546674 2026] [:error] [pid 43482:tid 43500] [client 51.13.190.245:46231] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeEMTT9SZnuKxlHrct1ysQAAANA"]
[Fri Apr 17 00:20:30.294683 2026] [:error] [pid 3245:tid 3282] [client 51.13.190.245:40093] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeEMTqESOMTHVLs-uFCvvgAAARQ"]
[Fri Apr 17 00:20:30.944979 2026] [:error] [pid 43385:tid 43407] [client 51.13.190.245:46123] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeEMTsnIxkJaUI8KNs7toAAAABI"]
[Fri Apr 17 00:20:31.511013 2026] [:error] [pid 43482:tid 43507] [client 51.13.190.245:59237] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeEMTz9SZnuKxlHrct1yuQAAANc"]
[Fri Apr 17 00:20:32.042425 2026] [:error] [pid 43386:tid 43431] [client 51.13.190.245:32418] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeEMUO91GAVgUfhPVDGqnQAAAEs"]
[Fri Apr 17 00:20:32.594882 2026] [:error] [pid 43482:tid 43487] [client 51.13.190.245:39877] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeEMUD9SZnuKxlHrct1ywQAAAMM"]
[Fri Apr 17 00:20:33.157758 2026] [:error] [pid 43387:tid 43473] [client 51.13.190.245:46110] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeEMUSBNsONqHxWTakUj3AAAAJQ"]
[Fri Apr 17 00:20:33.679391 2026] [:error] [pid 3245:tid 3273] [client 51.13.190.245:39919] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeEMUaESOMTHVLs-uFCv1QAAAQs"]
[Fri Apr 17 00:20:34.232117 2026] [:error] [pid 3245:tid 3271] [client 51.13.190.245:40073] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeEMUqESOMTHVLs-uFCv2gAAAQk"]
[Fri Apr 17 00:20:34.816572 2026] [:error] [pid 3245:tid 3272] [client 51.13.190.245:30171] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeEMUqESOMTHVLs-uFCv3wAAAQo"]
[Fri Apr 17 00:20:35.369109 2026] [:error] [pid 43482:tid 43506] [client 51.13.190.245:40071] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeEMUz9SZnuKxlHrct1y0gAAANY"]
[Fri Apr 17 00:20:35.932233 2026] [:error] [pid 43385:tid 43408] [client 51.13.190.245:59221] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeEMU8nIxkJaUI8KNs7tqQAAABM"]
[Fri Apr 17 00:20:36.474207 2026] [:error] [pid 3245:tid 3286] [client 51.13.190.245:46210] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeEMVKESOMTHVLs-uFCv-AAAARg"]
[Fri Apr 17 00:20:36.994897 2026] [:error] [pid 3245:tid 3273] [client 51.13.190.245:32419] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeEMVKESOMTHVLs-uFCwAQAAAQs"]
[Fri Apr 17 00:20:37.520547 2026] [:error] [pid 3245:tid 3279] [client 51.13.190.245:46208] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeEMVaESOMTHVLs-uFCwCwAAARE"]
[Fri Apr 17 00:20:38.046223 2026] [:error] [pid 43482:tid 43495] [client 51.13.190.245:39888] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeEMVj9SZnuKxlHrct1y0wAAAMs"]
[Fri Apr 17 00:20:38.619119 2026] [:error] [pid 43386:tid 43436] [client 51.13.190.245:39892] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeEMVu91GAVgUfhPVDGqowAAAFA"]
[Fri Apr 17 00:20:39.194951 2026] [:error] [pid 43386:tid 43430] [client 51.13.190.245:40083] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "aeEMV-91GAVgUfhPVDGqpAAAAEo"]
[Fri Apr 17 00:20:39.795763 2026] [:error] [pid 43482:tid 43503] [client 51.13.190.245:46096] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "aeEMVz9SZnuKxlHrct1y5AAAANM"]
[Fri Apr 17 00:20:40.337003 2026] [:error] [pid 43482:tid 43507] [client 51.13.190.245:30144] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "aeEMWD9SZnuKxlHrct1y6AAAANc"]
[Fri Apr 17 00:20:40.883388 2026] [:error] [pid 43387:tid 43450] [client 51.13.190.245:46118] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "aeEMWCBNsONqHxWTakUkAwAAAII"]
[Fri Apr 17 00:20:41.420454 2026] [:error] [pid 43482:tid 43496] [client 51.13.190.245:24084] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "aeEMWT9SZnuKxlHrct1y-AAAAMw"]
[Fri Apr 17 00:20:42.017933 2026] [:error] [pid 43387:tid 43448] [client 51.13.190.245:40082] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "aeEMWiBNsONqHxWTakUkDgAAAIA"]
[Fri Apr 17 00:20:42.646227 2026] [:error] [pid 43386:tid 43422] [client 51.13.190.245:32388] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "aeEMWu91GAVgUfhPVDGqqgAAAEI"]
[Fri Apr 17 00:20:43.206787 2026] [:error] [pid 43387:tid 43476] [client 51.13.190.245:24157] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "aeEMWyBNsONqHxWTakUkGQAAAJc"]
[Fri Apr 17 00:20:43.777430 2026] [:error] [pid 3245:tid 3265] [client 51.13.190.245:59957] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "aeEMW6ESOMTHVLs-uFCwOgAAAQM"]
[Fri Apr 17 00:20:44.333971 2026] [:error] [pid 43386:tid 43441] [client 51.13.190.245:32444] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "aeEMXO91GAVgUfhPVDGqrwAAAFQ"]
[Fri Apr 17 00:20:45.027493 2026] [:error] [pid 43482:tid 43494] [client 51.13.190.245:59904] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "aeEMXT9SZnuKxlHrct1zCAAAAMo"]
[Fri Apr 17 00:20:45.580590 2026] [:error] [pid 43482:tid 43492] [client 51.13.190.245:60919] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "aeEMXT9SZnuKxlHrct1zDwAAAMg"]
[Fri Apr 17 00:20:46.167218 2026] [:error] [pid 43482:tid 43507] [client 51.13.190.245:46136] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "aeEMXj9SZnuKxlHrct1zEgAAANc"]
[Fri Apr 17 00:20:46.717851 2026] [:error] [pid 43386:tid 43436] [client 51.13.190.245:46092] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "aeEMXu91GAVgUfhPVDGquAAAAFA"]
[Fri Apr 17 00:20:47.244251 2026] [:error] [pid 43386:tid 43432] [client 51.13.190.245:59930] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "aeEMX-91GAVgUfhPVDGqugAAAEw"]
[Fri Apr 17 00:20:47.768081 2026] [:error] [pid 43386:tid 43433] [client 51.13.190.245:24173] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "aeEMX-91GAVgUfhPVDGqvwAAAE0"]
[Fri Apr 17 00:20:48.311075 2026] [:error] [pid 43387:tid 43461] [client 51.13.190.245:32425] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeEMYCBNsONqHxWTakUkIgAAAIo"]
[Fri Apr 17 00:20:48.842470 2026] [:error] [pid 43482:tid 43487] [client 51.13.190.245:11646] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeEMYD9SZnuKxlHrct1zFwAAAMM"]
[Fri Apr 17 00:20:49.376727 2026] [:error] [pid 3245:tid 3275] [client 51.13.190.245:24089] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeEMYaESOMTHVLs-uFCwSwAAAQ0"]
[Fri Apr 17 00:20:49.971486 2026] [:error] [pid 43387:tid 43471] [client 51.13.190.245:59938] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeEMYSBNsONqHxWTakUkJgAAAJI"]
[Fri Apr 17 00:20:50.664749 2026] [:error] [pid 3245:tid 3262] [client 51.13.190.245:24156] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEMYqESOMTHVLs-uFCwUQAAAQA"]
[Fri Apr 17 00:20:51.216404 2026] [:error] [pid 43385:tid 43394] [client 51.13.190.245:30192] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEMY8nIxkJaUI8KNs7t0AAAAAU"]
[Fri Apr 17 00:20:51.811717 2026] [:error] [pid 3245:tid 3283] [client 51.13.190.245:59203] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEMY6ESOMTHVLs-uFCwVgAAARU"]
[Fri Apr 17 00:20:52.390488 2026] [:error] [pid 43386:tid 43444] [client 51.13.190.245:46104] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeEMZO91GAVgUfhPVDGqyQAAAFc"]
[Fri Apr 17 00:20:52.963435 2026] [:error] [pid 43387:tid 43477] [client 51.13.190.245:40067] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEMZCBNsONqHxWTakUkLgAAAJg"]
[Fri Apr 17 00:20:53.500322 2026] [:error] [pid 43386:tid 43425] [client 51.13.190.245:24097] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEMZe91GAVgUfhPVDGq0AAAAEU"]
[Fri Apr 17 00:20:54.077441 2026] [:error] [pid 43386:tid 43422] [client 51.13.190.245:46095] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEMZu91GAVgUfhPVDGq0gAAAEI"]
[Fri Apr 17 00:20:54.625985 2026] [:error] [pid 43482:tid 43486] [client 51.13.190.245:59952] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEMZj9SZnuKxlHrct1zKwAAAMI"]
[Fri Apr 17 00:20:55.154169 2026] [:error] [pid 43482:tid 43499] [client 51.13.190.245:39898] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeEMZz9SZnuKxlHrct1zLgAAAM8"]
[Fri Apr 17 00:20:55.695529 2026] [:error] [pid 43385:tid 43406] [client 51.13.190.245:32398] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeEMZ8nIxkJaUI8KNs7t2gAAABE"]
[Fri Apr 17 00:20:56.295648 2026] [:error] [pid 43387:tid 43470] [client 51.13.190.245:59211] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeEMaCBNsONqHxWTakUkRgAAAJE"]
[Fri Apr 17 00:20:56.872298 2026] [:error] [pid 43386:tid 43434] [client 51.13.190.245:46243] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeEMaO91GAVgUfhPVDGq3QAAAE4"]
[Fri Apr 17 00:20:57.443781 2026] [:error] [pid 43386:tid 43433] [client 51.13.190.245:59907] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeEMae91GAVgUfhPVDGq4AAAAE0"]
[Fri Apr 17 00:20:57.967722 2026] [:error] [pid 43386:tid 43427] [client 51.13.190.245:30193] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeEMae91GAVgUfhPVDGq4wAAAEc"]
[Fri Apr 17 00:20:58.536802 2026] [:error] [pid 43386:tid 43439] [client 51.13.190.245:24140] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeEMau91GAVgUfhPVDGq5AAAAFM"]
[Fri Apr 17 00:20:59.270943 2026] [:error] [pid 3245:tid 3269] [client 51.13.190.245:59945] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeEMa6ESOMTHVLs-uFCwZQAAAQc"]
[Fri Apr 17 00:20:59.887399 2026] [:error] [pid 43387:tid 43457] [client 51.13.190.245:59955] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeEMayBNsONqHxWTakUkWAAAAIY"]
[Fri Apr 17 00:21:00.508804 2026] [:error] [pid 43386:tid 43437] [client 51.13.190.245:39894] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeEMbO91GAVgUfhPVDGq6QAAAFE"]
[Fri Apr 17 00:21:01.061119 2026] [:error] [pid 43386:tid 43423] [client 51.13.190.245:59912] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeEMbe91GAVgUfhPVDGq8AAAAEM"]
[Fri Apr 17 00:21:01.643530 2026] [:error] [pid 3245:tid 3276] [client 51.13.190.245:59231] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeEMbaESOMTHVLs-uFCwdgAAAQ4"]
[Fri Apr 17 00:21:02.235832 2026] [:error] [pid 43482:tid 43484] [client 51.13.190.245:30196] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeEMbj9SZnuKxlHrct1zPQAAAMA"]
[Fri Apr 17 00:21:03.002635 2026] [:error] [pid 3245:tid 3262] [client 51.13.190.245:59959] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeEMb6ESOMTHVLs-uFCwewAAAQA"]
[Fri Apr 17 00:21:03.566815 2026] [:error] [pid 43386:tid 43437] [client 51.13.190.245:39930] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeEMb-91GAVgUfhPVDGq_AAAAFE"]
[Fri Apr 17 00:21:04.190519 2026] [:error] [pid 3245:tid 3267] [client 51.13.190.245:40074] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeEMcKESOMTHVLs-uFCwfgAAAQU"]
[Fri Apr 17 00:21:04.830892 2026] [:error] [pid 3245:tid 3272] [client 51.13.190.245:11584] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeEMcKESOMTHVLs-uFCwfwAAAQo"]
[Fri Apr 17 00:21:05.367906 2026] [:error] [pid 43385:tid 43405] [client 51.13.190.245:32414] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeEMccnIxkJaUI8KNs7t8gAAABA"]
[Fri Apr 17 00:21:05.920550 2026] [:error] [pid 43482:tid 43493] [client 51.13.190.245:46251] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeEMcT9SZnuKxlHrct1zRQAAAMk"]
[Fri Apr 17 00:21:06.533438 2026] [:error] [pid 43482:tid 43492] [client 51.13.190.245:46143] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeEMcj9SZnuKxlHrct1zSgAAAMg"]
[Fri Apr 17 00:21:07.161449 2026] [:error] [pid 43386:tid 43425] [client 51.13.190.245:39874] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeEMc-91GAVgUfhPVDGrDwAAAEU"]
[Fri Apr 17 00:21:07.836006 2026] [:error] [pid 43387:tid 43472] [client 51.13.190.245:24128] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeEMcyBNsONqHxWTakUkbwAAAJM"]
[Fri Apr 17 00:21:08.384020 2026] [:error] [pid 3245:tid 3276] [client 51.13.190.245:32437] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeEMdKESOMTHVLs-uFCwigAAAQ4"]
[Fri Apr 17 00:21:08.969847 2026] [:error] [pid 43387:tid 43462] [client 51.13.190.245:59250] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeEMdCBNsONqHxWTakUkdQAAAIs"]
[Fri Apr 17 00:21:09.495953 2026] [:error] [pid 43385:tid 43397] [client 51.13.190.245:46222] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Apr 17 00:21:09.771675 2026] [:error] [pid 43385:tid 43403] [client 51.13.190.245:46222] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Apr 17 00:21:10.299217 2026] [:error] [pid 43385:tid 43404] [client 51.13.190.245:46222] File does not exist: /usr/local/apache/htdocs/suspended-page/bless4.php
[Fri Apr 17 00:21:10.560934 2026] [:error] [pid 43385:tid 43398] [client 51.13.190.245:46222] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Fri Apr 17 00:21:10.830953 2026] [:error] [pid 43385:tid 43415] [client 51.13.190.245:46222] File does not exist: /usr/local/apache/htdocs/suspended-page/xqq.php
[Fri Apr 17 00:21:11.099695 2026] [:error] [pid 43385:tid 43400] [client 51.13.190.245:46222] File does not exist: /usr/local/apache/htdocs/suspended-page/plss3.php
[Fri Apr 17 00:21:11.375936 2026] [:error] [pid 43385:tid 43393] [client 51.13.190.245:46222] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Fri Apr 17 00:21:11.862486 2026] [:error] [pid 43385:tid 43393] [client 51.13.190.245:46222] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 17 00:21:12.389802 2026] [:error] [pid 43385:tid 43412] [client 51.13.190.245:46222] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Fri Apr 17 00:21:12.648772 2026] [:error] [pid 43385:tid 43410] [client 51.13.190.245:46222] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeEMeMnIxkJaUI8KNs7uEAAAABQ"]
[Fri Apr 17 00:21:13.183361 2026] [:error] [pid 43386:tid 43442] [client 51.13.190.245:30152] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeEMee91GAVgUfhPVDGrJwAAAFU"]
[Fri Apr 17 00:21:13.712360 2026] [:error] [pid 43482:tid 43485] [client 51.13.190.245:11461] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeEMeT9SZnuKxlHrct1zcAAAAME"]
[Fri Apr 17 00:21:14.301310 2026] [:error] [pid 43385:tid 43399] [client 51.13.190.245:39928] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeEMesnIxkJaUI8KNs7uFgAAAAo"]
[Fri Apr 17 00:21:14.979758 2026] [:error] [pid 43482:tid 43486] [client 51.13.190.245:46247] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeEMej9SZnuKxlHrct1zewAAAMI"]
[Fri Apr 17 00:21:15.561899 2026] [:error] [pid 43482:tid 43503] [client 51.13.190.245:59213] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeEMez9SZnuKxlHrct1zfgAAANM"]
[Fri Apr 17 00:21:16.142367 2026] [:error] [pid 3245:tid 3266] [client 51.13.190.245:59926] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeEMfKESOMTHVLs-uFCwoAAAAQQ"]
[Fri Apr 17 00:21:16.830206 2026] [:error] [pid 43385:tid 43412] [client 51.13.190.245:60882] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeEMfMnIxkJaUI8KNs7uHwAAABY"]
[Fri Apr 17 00:21:17.454011 2026] [:error] [pid 43387:tid 43471] [client 51.13.190.245:59908] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeEMfSBNsONqHxWTakUkhwAAAJI"]
[Fri Apr 17 00:21:18.041069 2026] [:error] [pid 43385:tid 43394] [client 51.13.190.245:24132] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeEMfsnIxkJaUI8KNs7uIgAAAAU"]
[Fri Apr 17 00:21:18.619210 2026] [:error] [pid 43385:tid 43397] [client 51.13.190.245:46089] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeEMfsnIxkJaUI8KNs7uJAAAAAg"]
[Fri Apr 17 00:21:19.219872 2026] [:error] [pid 43482:tid 43496] [client 51.13.190.245:59263] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeEMfz9SZnuKxlHrct1zkgAAAMw"]
[Fri Apr 17 00:21:19.842358 2026] [:error] [pid 43482:tid 43491] [client 51.13.190.245:39900] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeEMfz9SZnuKxlHrct1zlQAAAMc"]
[Fri Apr 17 00:21:20.434777 2026] [:error] [pid 43387:tid 43459] [client 51.13.190.245:59910] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeEMgCBNsONqHxWTakUkigAAAIg"]
[Fri Apr 17 00:21:20.989457 2026] [:error] [pid 43385:tid 43411] [client 51.13.190.245:11613] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeEMgMnIxkJaUI8KNs7uKwAAABU"]
[Fri Apr 17 00:21:21.523607 2026] [:error] [pid 43386:tid 43435] [client 51.13.190.245:30149] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeEMge91GAVgUfhPVDGrPAAAAE8"]
[Fri Apr 17 00:21:22.169182 2026] [:error] [pid 43387:tid 43450] [client 51.13.190.245:24171] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEMgiBNsONqHxWTakUkjwAAAII"]
[Fri Apr 17 00:21:22.700907 2026] [:error] [pid 3245:tid 3266] [client 51.13.190.245:59933] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEMgqESOMTHVLs-uFCwsAAAAQQ"]
[Fri Apr 17 00:21:23.432360 2026] [:error] [pid 3245:tid 3265] [client 51.13.190.245:40125] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEMg6ESOMTHVLs-uFCwswAAAQM"]
[Fri Apr 17 00:21:23.982596 2026] [:error] [pid 3245:tid 3262] [client 51.13.190.245:40097] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeEMg6ESOMTHVLs-uFCwtQAAAQA"]
[Fri Apr 17 00:21:24.603881 2026] [:error] [pid 43482:tid 43505] [client 51.13.190.245:32434] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeEMhD9SZnuKxlHrct1zmwAAANU"]
[Fri Apr 17 00:21:25.214713 2026] [:error] [pid 3245:tid 3266] [client 51.13.190.245:32397] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeEMhaESOMTHVLs-uFCwvgAAAQQ"]
[Fri Apr 17 00:21:25.747005 2026] [:error] [pid 43386:tid 43438] [client 51.13.190.245:60927] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeEMhe91GAVgUfhPVDGrQgAAAFI"]
[Fri Apr 17 00:21:26.289674 2026] [:error] [pid 3245:tid 3280] [client 51.13.190.245:60888] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeEMhqESOMTHVLs-uFCwxQAAARI"]
[Fri Apr 17 00:21:26.836605 2026] [:error] [pid 43386:tid 43439] [client 51.13.190.245:24162] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeEMhu91GAVgUfhPVDGrRAAAAFM"]
[Fri Apr 17 00:21:27.369589 2026] [:error] [pid 43387:tid 43459] [client 51.13.190.245:46218] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeEMhyBNsONqHxWTakUklwAAAIg"]
[Fri Apr 17 00:21:27.910318 2026] [:error] [pid 43386:tid 43445] [client 51.13.190.245:46254] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeEMh-91GAVgUfhPVDGrRQAAAFg"]
[Fri Apr 17 00:21:28.443404 2026] [:error] [pid 43482:tid 43508] [client 51.13.190.245:46100] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeEMiD9SZnuKxlHrct1zoAAAANg"]
[Fri Apr 17 00:21:28.985774 2026] [:error] [pid 43385:tid 43402] [client 51.13.190.245:24141] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeEMiMnIxkJaUI8KNs7uPgAAAA0"]
[Fri Apr 17 00:21:29.523997 2026] [:error] [pid 3245:tid 3268] [client 51.13.190.245:46232] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeEMiaESOMTHVLs-uFCw0QAAAQY"]
[Fri Apr 17 00:21:30.052144 2026] [:error] [pid 3245:tid 3275] [client 51.13.190.245:59943] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeEMiqESOMTHVLs-uFCw0wAAAQ0"]
[Fri Apr 17 00:21:30.669870 2026] [:error] [pid 43386:tid 43423] [client 51.13.190.245:59248] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeEMiu91GAVgUfhPVDGrRwAAAEM"]
[Fri Apr 17 00:21:31.338318 2026] [:error] [pid 43387:tid 43472] [client 51.13.190.245:46106] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeEMiyBNsONqHxWTakUknwAAAJM"]
[Fri Apr 17 00:21:31.863349 2026] [:error] [pid 43482:tid 43506] [client 51.13.190.245:46108] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeEMiz9SZnuKxlHrct1zpwAAANY"]
[Fri Apr 17 00:21:32.432162 2026] [:error] [pid 43387:tid 43471] [client 51.13.190.245:11618] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeEMjCBNsONqHxWTakUkogAAAJI"]
[Fri Apr 17 00:21:32.974559 2026] [:error] [pid 43387:tid 43459] [client 51.13.190.245:46214] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeEMjCBNsONqHxWTakUkpAAAAIg"]
[Fri Apr 17 00:21:33.514786 2026] [:error] [pid 3245:tid 3262] [client 51.13.190.245:59214] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeEMjaESOMTHVLs-uFCw1wAAAQA"]
[Fri Apr 17 00:21:34.047758 2026] [:error] [pid 3245:tid 3283] [client 51.13.190.245:32421] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeEMjqESOMTHVLs-uFCw2wAAARU"]
[Fri Apr 17 00:21:34.594509 2026] [:error] [pid 3245:tid 3280] [client 51.13.190.245:39934] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeEMjqESOMTHVLs-uFCw3QAAARI"]
[Fri Apr 17 00:21:35.166861 2026] [:error] [pid 43386:tid 43444] [client 51.13.190.245:32415] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeEMj-91GAVgUfhPVDGrSgAAAFc"]
[Fri Apr 17 00:21:35.698076 2026] [:error] [pid 43482:tid 43484] [client 51.13.190.245:32427] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeEMjz9SZnuKxlHrct1zsAAAAMA"]
[Fri Apr 17 00:21:36.226116 2026] [:error] [pid 43385:tid 43393] [client 51.13.190.245:59228] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeEMkMnIxkJaUI8KNs7uSAAAAAQ"]
[Fri Apr 17 00:21:36.747254 2026] [:error] [pid 43387:tid 43457] [client 51.13.190.245:40066] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeEMkCBNsONqHxWTakUkqwAAAIY"]
[Fri Apr 17 00:21:37.272334 2026] [:error] [pid 43385:tid 43389] [client 51.13.190.245:46219] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeEMkcnIxkJaUI8KNs7uTQAAAAA"]
[Fri Apr 17 00:21:37.937773 2026] [:error] [pid 43387:tid 43448] [client 51.13.190.245:46126] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeEMkSBNsONqHxWTakUkrgAAAIA"]
[Fri Apr 17 00:21:38.509501 2026] [:error] [pid 43385:tid 43398] [client 51.13.190.245:46257] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeEMksnIxkJaUI8KNs7uUAAAAAk"]
[Fri Apr 17 00:21:39.135643 2026] [:error] [pid 43385:tid 43399] [client 51.13.190.245:60877] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeEMk8nIxkJaUI8KNs7uUwAAAAo"]
[Fri Apr 17 00:21:39.758722 2026] [:error] [pid 43385:tid 43396] [client 51.13.190.245:46135] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeEMk8nIxkJaUI8KNs7uVgAAAAc"]
[Fri Apr 17 00:21:40.372956 2026] [:error] [pid 43482:tid 43486] [client 51.13.190.245:46141] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeEMlD9SZnuKxlHrct1zuAAAAMI"]
[Fri Apr 17 00:21:40.939904 2026] [:error] [pid 43482:tid 43503] [client 51.13.190.245:30195] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeEMlD9SZnuKxlHrct1zugAAANM"]
[Fri Apr 17 00:21:41.465683 2026] [:error] [pid 43386:tid 43424] [client 51.13.190.245:30172] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeEMle91GAVgUfhPVDGrTQAAAEQ"]
[Fri Apr 17 00:21:42.001454 2026] [:error] [pid 3245:tid 3281] [client 51.13.190.245:11489] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeEMlqESOMTHVLs-uFCw4gAAARM"]
[Fri Apr 17 00:21:42.521648 2026] [:error] [pid 43387:tid 43475] [client 51.13.190.245:46103] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeEMliBNsONqHxWTakUktgAAAJY"]
[Fri Apr 17 00:21:43.040579 2026] [:error] [pid 43482:tid 43508] [client 51.13.190.245:24090] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeEMlz9SZnuKxlHrct1zvwAAANg"]
[Fri Apr 17 00:21:43.646393 2026] [:error] [pid 43387:tid 43462] [client 51.13.190.245:32436] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeEMlyBNsONqHxWTakUktwAAAIs"]
[Fri Apr 17 00:21:44.208399 2026] [:error] [pid 43385:tid 43410] [client 51.13.190.245:46236] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeEMmMnIxkJaUI8KNs7uYwAAABQ"]
[Fri Apr 17 00:21:44.798039 2026] [:error] [pid 43385:tid 43391] [client 51.13.190.245:24181] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeEMmMnIxkJaUI8KNs7uZQAAAAI"]
[Fri Apr 17 00:21:45.335545 2026] [:error] [pid 3245:tid 3277] [client 51.13.190.245:60884] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeEMmaESOMTHVLs-uFCw5QAAAQ8"]
[Fri Apr 17 00:21:45.939806 2026] [:error] [pid 43482:tid 43490] [client 51.13.190.245:59932] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeEMmT9SZnuKxlHrct1zxwAAAMY"]
[Fri Apr 17 00:21:46.470169 2026] [:error] [pid 3245:tid 3282] [client 51.13.190.245:39897] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeEMmqESOMTHVLs-uFCw5gAAARQ"]
[Fri Apr 17 00:21:47.025282 2026] [:error] [pid 43482:tid 43486] [client 51.13.190.245:40091] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEMmz9SZnuKxlHrct1zywAAAMI"]
[Fri Apr 17 00:21:47.663348 2026] [:error] [pid 43387:tid 43468] [client 51.13.190.245:11462] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEMmyBNsONqHxWTakUkvwAAAI8"]
[Fri Apr 17 00:21:48.204316 2026] [:error] [pid 43386:tid 43424] [client 51.13.190.245:39880] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEMnO91GAVgUfhPVDGrWgAAAEQ"]
[Fri Apr 17 00:21:48.726864 2026] [:error] [pid 43386:tid 43428] [client 51.13.190.245:59253] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeEMnO91GAVgUfhPVDGrYAAAAEg"]
[Fri Apr 17 00:21:49.266830 2026] [:error] [pid 3245:tid 3265] [client 51.13.190.245:11468] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeEMnaESOMTHVLs-uFCw8AAAAQM"]
[Fri Apr 17 00:21:49.882160 2026] [:error] [pid 43482:tid 43487] [client 51.13.190.245:46252] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeEMnT9SZnuKxlHrct1zzQAAAMM"]
[Fri Apr 17 00:21:50.424541 2026] [:error] [pid 43482:tid 43502] [client 51.13.190.245:24146] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeEMnj9SZnuKxlHrct1z0wAAANI"]
[Fri Apr 17 00:21:50.975762 2026] [:error] [pid 43387:tid 43466] [client 51.13.190.245:59959] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeEMniBNsONqHxWTakUkzgAAAI0"]
[Fri Apr 17 00:21:51.512419 2026] [:error] [pid 43386:tid 43432] [client 51.13.190.245:46268] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aeEMn-91GAVgUfhPVDGrZQAAAEw"]
[Fri Apr 17 00:21:52.049170 2026] [:error] [pid 3245:tid 3284] [client 51.13.190.245:46107] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aeEMoKESOMTHVLs-uFCxBgAAARY"]
[Fri Apr 17 00:21:52.577774 2026] [:error] [pid 3245:tid 3285] [client 51.13.190.245:59916] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aeEMoKESOMTHVLs-uFCxCQAAARc"]
[Fri Apr 17 00:21:53.141239 2026] [:error] [pid 43387:tid 43449] [client 51.13.190.245:46245] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aeEMoSBNsONqHxWTakUk2AAAAIE"]
[Fri Apr 17 00:21:53.688332 2026] [:error] [pid 43385:tid 43395] [client 51.13.190.245:60880] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEMocnIxkJaUI8KNs7udgAAAAY"]
[Fri Apr 17 00:21:54.272869 2026] [:error] [pid 43482:tid 43501] [client 51.13.190.245:59236] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEMoj9SZnuKxlHrct1z3QAAANE"]
[Fri Apr 17 00:21:54.812842 2026] [:error] [pid 3245:tid 3267] [client 51.13.190.245:30157] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEMoqESOMTHVLs-uFCxEQAAAQU"]
[Fri Apr 17 00:21:55.354862 2026] [:error] [pid 43386:tid 43427] [client 51.13.190.245:7513] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeEMo-91GAVgUfhPVDGrZwAAAEc"]
[Fri Apr 17 00:21:55.964035 2026] [:error] [pid 43387:tid 43474] [client 51.13.190.245:46240] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEMoyBNsONqHxWTakUk4gAAAJU"]
[Fri Apr 17 00:21:56.580278 2026] [:error] [pid 43387:tid 43460] [client 51.13.190.245:46215] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEMpCBNsONqHxWTakUk5QAAAIk"]
[Fri Apr 17 00:21:57.160711 2026] [:error] [pid 3245:tid 3280] [client 51.13.190.245:46260] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEMpaESOMTHVLs-uFCxHQAAARI"]
[Fri Apr 17 00:21:57.681656 2026] [:error] [pid 3245:tid 3264] [client 51.13.190.245:39896] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeEMpaESOMTHVLs-uFCxJQAAAQI"]
[Fri Apr 17 00:21:58.218503 2026] [:error] [pid 43387:tid 43468] [client 51.13.190.245:46094] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEMpiBNsONqHxWTakUk6QAAAI8"]
[Fri Apr 17 00:21:58.970663 2026] [:error] [pid 43482:tid 43504] [client 51.13.190.245:59252] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEMpj9SZnuKxlHrct1z9QAAANQ"]
[Fri Apr 17 00:21:59.561270 2026] [:error] [pid 43482:tid 43484] [client 51.13.190.245:46125] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEMpz9SZnuKxlHrct1z-gAAAMA"]
[Fri Apr 17 00:22:00.144654 2026] [:error] [pid 43482:tid 43506] [client 51.13.190.245:24148] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeEMqD9SZnuKxlHrct10AQAAANY"]
[Fri Apr 17 00:22:00.723647 2026] [:error] [pid 43482:tid 43486] [client 51.13.190.245:39907] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeEMqD9SZnuKxlHrct10BAAAAMI"]
[Fri Apr 17 00:22:01.347931 2026] [:error] [pid 43386:tid 43433] [client 51.13.190.245:32392] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeEMqe91GAVgUfhPVDGrdgAAAE0"]
[Fri Apr 17 00:22:01.876751 2026] [:error] [pid 43482:tid 43495] [client 51.13.190.245:60881] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeEMqT9SZnuKxlHrct10CgAAAMs"]
[Fri Apr 17 00:22:02.413761 2026] [:error] [pid 43482:tid 43500] [client 51.13.190.245:40103] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeEMqj9SZnuKxlHrct10GAAAANA"]
[Fri Apr 17 00:22:02.991078 2026] [:error] [pid 43482:tid 43491] [client 51.13.190.245:24080] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeEMqj9SZnuKxlHrct10HgAAAMc"]
[Fri Apr 17 00:22:03.538106 2026] [:error] [pid 43385:tid 43394] [client 51.13.190.245:59256] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeEMq8nIxkJaUI8KNs7ungAAAAU"]
[Fri Apr 17 00:22:04.153780 2026] [:error] [pid 43385:tid 43408] [client 51.13.190.245:46221] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeEMrMnIxkJaUI8KNs7uogAAABM"]
[Fri Apr 17 00:22:04.707353 2026] [:error] [pid 3245:tid 3264] [client 51.13.190.245:40104] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeEMrKESOMTHVLs-uFCxMwAAAQI"]
[Fri Apr 17 00:22:05.278456 2026] [:error] [pid 43385:tid 43402] [client 51.13.190.245:40090] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEMrcnIxkJaUI8KNs7upQAAAA0"]
[Fri Apr 17 00:22:05.830853 2026] [:error] [pid 3245:tid 3277] [client 51.13.190.245:40112] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEMraESOMTHVLs-uFCxPAAAAQ8"]
[Fri Apr 17 00:22:06.460893 2026] [:error] [pid 43385:tid 43413] [client 51.13.190.245:30173] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEMrsnIxkJaUI8KNs7uqQAAABc"]
[Fri Apr 17 00:22:06.998231 2026] [:error] [pid 43385:tid 43400] [client 51.13.190.245:60910] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeEMrsnIxkJaUI8KNs7urwAAAAs"]
[Fri Apr 17 00:22:07.528997 2026] [:error] [pid 43482:tid 43493] [client 51.13.190.245:59913] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeEMrz9SZnuKxlHrct10KQAAAMk"]
[Fri Apr 17 00:22:08.084320 2026] [:error] [pid 3245:tid 3272] [client 51.13.190.245:24174] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeEMsKESOMTHVLs-uFCxTQAAAQo"]
[Fri Apr 17 00:22:08.639868 2026] [:error] [pid 43482:tid 43504] [client 51.13.190.245:11460] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeEMsD9SZnuKxlHrct10LwAAANQ"]
[Fri Apr 17 00:22:09.194665 2026] [:error] [pid 43385:tid 43393] [client 51.13.190.245:11593] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeEMscnIxkJaUI8KNs7uuQAAAAQ"]
[Fri Apr 17 00:22:09.747760 2026] [:error] [pid 43385:tid 43396] [client 51.13.190.245:11644] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEMscnIxkJaUI8KNs7uvQAAAAc"]
[Fri Apr 17 00:22:10.324308 2026] [:error] [pid 3245:tid 3277] [client 51.13.190.245:39895] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEMsqESOMTHVLs-uFCxUwAAAQ8"]
[Fri Apr 17 00:22:10.847009 2026] [:error] [pid 3245:tid 3283] [client 51.13.190.245:46098] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEMsqESOMTHVLs-uFCxVwAAARU"]
[Fri Apr 17 00:22:11.378963 2026] [:error] [pid 3245:tid 3275] [client 51.13.190.245:59912] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeEMs6ESOMTHVLs-uFCxYQAAAQ0"]
[Fri Apr 17 00:22:11.903223 2026] [:error] [pid 43385:tid 43389] [client 51.13.190.245:24136] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeEMs8nIxkJaUI8KNs7uxQAAAAA"]
[Fri Apr 17 00:22:12.458047 2026] [:error] [pid 43385:tid 43398] [client 51.13.190.245:24159] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Apr 17 00:22:12.719652 2026] [:error] [pid 43385:tid 43408] [client 51.13.190.245:24159] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri Apr 17 00:22:12.981324 2026] [:error] [pid 43385:tid 43396] [client 51.13.190.245:24159] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Fri Apr 17 00:22:13.243212 2026] [:error] [pid 43385:tid 43410] [client 51.13.190.245:24159] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Fri Apr 17 00:22:13.763970 2026] [:error] [pid 43385:tid 43412] [client 51.13.190.245:24159] [client 51.13.190.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeEMtcnIxkJaUI8KNs7uzwAAABY"]
[Fri Apr 17 00:22:14.350046 2026] [:error] [pid 43385:tid 43394] [client 51.13.190.245:59223] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Apr 17 00:22:15.439054 2026] [:error] [pid 43385:tid 43399] [client 51.13.190.245:59223] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Apr 17 00:22:15.699184 2026] [:error] [pid 43385:tid 43392] [client 51.13.190.245:59223] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Fri Apr 17 00:22:15.956943 2026] [:error] [pid 43385:tid 43389] [client 51.13.190.245:59223] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeEMt8nIxkJaUI8KNs7u2gAAAAA"]
[Fri Apr 17 00:22:16.488828 2026] [:error] [pid 43387:tid 43461] [client 51.13.190.245:30180] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeEMuCBNsONqHxWTakUlCwAAAIo"]
[Fri Apr 17 00:22:17.132843 2026] [:error] [pid 43387:tid 43448] [client 51.13.190.245:30197] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeEMuSBNsONqHxWTakUlDQAAAIA"]
[Fri Apr 17 00:22:17.667999 2026] [:error] [pid 3245:tid 3277] [client 51.13.190.245:32404] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeEMuaESOMTHVLs-uFCxjwAAAQ8"]
[Fri Apr 17 00:22:18.213430 2026] [:error] [pid 3245:tid 3279] [client 51.13.190.245:24099] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeEMuqESOMTHVLs-uFCxkwAAARE"]
[Fri Apr 17 00:22:18.786642 2026] [:error] [pid 43386:tid 43427] [client 51.13.190.245:11517] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeEMuu91GAVgUfhPVDGroAAAAEc"]
[Fri Apr 17 00:22:19.330718 2026] [:error] [pid 43386:tid 43423] [client 51.13.190.245:46142] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeEMu-91GAVgUfhPVDGroQAAAEM"]
[Fri Apr 17 00:22:19.867452 2026] [:error] [pid 43386:tid 43444] [client 51.13.190.245:7519] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeEMu-91GAVgUfhPVDGrowAAAFc"]
[Fri Apr 17 00:22:20.425660 2026] [:error] [pid 43386:tid 43443] [client 51.13.190.245:46246] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeEMvO91GAVgUfhPVDGrpQAAAFY"]
[Fri Apr 17 00:22:20.959144 2026] [:error] [pid 3245:tid 3266] [client 51.13.190.245:32430] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeEMvKESOMTHVLs-uFCxoQAAAQQ"]
[Fri Apr 17 00:22:21.485955 2026] [:error] [pid 43385:tid 43410] [client 51.13.190.245:59934] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeEMvcnIxkJaUI8KNs7u4AAAABQ"]
[Fri Apr 17 00:22:22.032805 2026] [:error] [pid 43387:tid 43473] [client 51.13.190.245:24085] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeEMviBNsONqHxWTakUlFQAAAJQ"]
[Fri Apr 17 00:22:22.675428 2026] [:error] [pid 3245:tid 3284] [client 51.13.190.245:24120] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEMvqESOMTHVLs-uFCxqAAAARY"]
[Fri Apr 17 00:22:23.207746 2026] [:error] [pid 3245:tid 3279] [client 51.13.190.245:46083] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEMv6ESOMTHVLs-uFCxrgAAARE"]
[Fri Apr 17 00:22:23.824301 2026] [:error] [pid 3245:tid 3273] [client 51.13.190.245:59204] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEMv6ESOMTHVLs-uFCxtAAAAQs"]
[Fri Apr 17 00:22:24.408544 2026] [:error] [pid 3245:tid 3281] [client 51.13.190.245:24102] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeEMwKESOMTHVLs-uFCxuQAAARM"]
[Fri Apr 17 00:22:24.938711 2026] [:error] [pid 43482:tid 43493] [client 51.13.190.245:11644] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aeEMwD9SZnuKxlHrct10TgAAAMk"]
[Fri Apr 17 00:22:25.472795 2026] [:error] [pid 43387:tid 43449] [client 51.13.190.245:30147] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aeEMwSBNsONqHxWTakUlIgAAAIE"]
[Fri Apr 17 00:22:25.998384 2026] [:error] [pid 43482:tid 43496] [client 51.13.190.245:24103] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aeEMwT9SZnuKxlHrct10VwAAAMw"]
[Fri Apr 17 00:22:26.525321 2026] [:error] [pid 43482:tid 43485] [client 51.13.190.245:32428] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aeEMwj9SZnuKxlHrct10WgAAAME"]
[Fri Apr 17 00:22:27.078108 2026] [:error] [pid 43482:tid 43506] [client 51.13.190.245:11594] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bengi.php"] [unique_id "aeEMwz9SZnuKxlHrct10YAAAANY"]
[Fri Apr 17 00:22:27.626601 2026] [:error] [pid 3245:tid 3283] [client 51.13.190.245:46236] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bengi.php"] [unique_id "aeEMw6ESOMTHVLs-uFCxwwAAARU"]
[Fri Apr 17 00:22:28.225126 2026] [:error] [pid 43387:tid 43472] [client 51.13.190.245:11466] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bengi.php"] [unique_id "aeEMxCBNsONqHxWTakUlMgAAAJM"]
[Fri Apr 17 00:22:28.754521 2026] [:error] [pid 43482:tid 43495] [client 51.13.190.245:7491] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bengi.php"] [unique_id "aeEMxD9SZnuKxlHrct10ZwAAAMs"]
[Fri Apr 17 00:22:29.330147 2026] [:error] [pid 43386:tid 43434] [client 51.13.190.245:40123] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEMxe91GAVgUfhPVDGrtgAAAE4"]
[Fri Apr 17 00:22:29.872755 2026] [:error] [pid 43387:tid 43474] [client 51.13.190.245:24117] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEMxSBNsONqHxWTakUlOwAAAJU"]
[Fri Apr 17 00:22:30.403150 2026] [:error] [pid 43386:tid 43422] [client 51.13.190.245:24123] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEMxu91GAVgUfhPVDGruAAAAEI"]
[Fri Apr 17 00:22:30.941634 2026] [:error] [pid 43387:tid 43461] [client 51.13.190.245:24064] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeEMxiBNsONqHxWTakUlQwAAAIo"]
[Fri Apr 17 00:22:31.570900 2026] [:error] [pid 43482:tid 43495] [client 51.13.190.245:60909] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aeEMxz9SZnuKxlHrct10dgAAAMs"]
[Fri Apr 17 00:22:32.126448 2026] [:error] [pid 43385:tid 43415] [client 51.13.190.245:59920] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aeEMyMnIxkJaUI8KNs7u8gAAABg"]
[Fri Apr 17 00:22:32.655533 2026] [:error] [pid 43482:tid 43491] [client 51.13.190.245:32401] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aeEMyD9SZnuKxlHrct10fwAAAMc"]
[Fri Apr 17 00:22:33.215309 2026] [:error] [pid 3245:tid 3268] [client 51.13.190.245:11478] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aeEMyaESOMTHVLs-uFCx3QAAAQY"]
[Fri Apr 17 00:22:33.747902 2026] [:error] [pid 43482:tid 43489] [client 51.13.190.245:32438] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeEMyT9SZnuKxlHrct10ggAAAMU"]
[Fri Apr 17 00:22:34.310557 2026] [:error] [pid 43387:tid 43475] [client 51.13.190.245:40120] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeEMyiBNsONqHxWTakUlUgAAAJY"]
[Fri Apr 17 00:22:34.847988 2026] [:error] [pid 3245:tid 3281] [client 51.13.190.245:39890] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeEMyqESOMTHVLs-uFCx5gAAARM"]
[Fri Apr 17 00:22:35.411080 2026] [:error] [pid 43387:tid 43462] [client 51.13.190.245:46130] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeEMyyBNsONqHxWTakUlXAAAAIs"]
[Fri Apr 17 00:22:35.953951 2026] [:error] [pid 43385:tid 43407] [client 51.13.190.245:39886] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeEMy8nIxkJaUI8KNs7u-wAAABI"]
[Fri Apr 17 00:22:36.500637 2026] [:error] [pid 3245:tid 3280] [client 51.13.190.245:24153] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeEMzKESOMTHVLs-uFCx8AAAARI"]
[Fri Apr 17 00:22:37.032887 2026] [:error] [pid 3245:tid 3268] [client 51.13.190.245:24065] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeEMzaESOMTHVLs-uFCx8gAAAQY"]
[Fri Apr 17 00:22:37.571648 2026] [:error] [pid 3245:tid 3273] [client 51.13.190.245:59233] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeEMzaESOMTHVLs-uFCx9gAAAQs"]
[Fri Apr 17 00:22:38.180526 2026] [:error] [pid 3245:tid 3276] [client 51.13.190.245:24125] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeEMzqESOMTHVLs-uFCx-gAAAQ4"]
[Fri Apr 17 00:22:38.830472 2026] [:error] [pid 43385:tid 43402] [client 51.13.190.245:59964] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeEMzsnIxkJaUI8KNs7u_QAAAA0"]
[Fri Apr 17 00:22:39.428314 2026] [:error] [pid 43385:tid 43404] [client 51.13.190.245:59236] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeEMz8nIxkJaUI8KNs7u_wAAAA8"]
[Fri Apr 17 00:22:40.169628 2026] [:error] [pid 43387:tid 43467] [client 51.13.190.245:24074] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeEM0CBNsONqHxWTakUldQAAAI4"]
[Fri Apr 17 00:22:40.911623 2026] [:error] [pid 43387:tid 43472] [client 51.13.190.245:46090] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeEM0CBNsONqHxWTakUldwAAAJM"]
[Fri Apr 17 00:22:41.624125 2026] [:error] [pid 43482:tid 43493] [client 51.13.190.245:60913] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeEM0T9SZnuKxlHrct10kQAAAMk"]
[Fri Apr 17 00:22:42.177176 2026] [:error] [pid 3245:tid 3284] [client 51.13.190.245:46248] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeEM0qESOMTHVLs-uFCx_wAAARY"]
[Fri Apr 17 00:22:42.769330 2026] [:error] [pid 43385:tid 43410] [client 51.13.190.245:46230] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeEM0snIxkJaUI8KNs7vBAAAABQ"]
[Fri Apr 17 00:22:43.446462 2026] [:error] [pid 43386:tid 43445] [client 51.13.190.245:40102] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeEM0-91GAVgUfhPVDGr4AAAAFg"]
[Fri Apr 17 00:22:44.152103 2026] [:error] [pid 43385:tid 43395] [client 51.13.190.245:32389] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeEM1MnIxkJaUI8KNs7vBgAAAAY"]
[Fri Apr 17 00:22:44.690508 2026] [:error] [pid 43482:tid 43503] [client 51.13.190.245:39906] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeEM1D9SZnuKxlHrct10mAAAANM"]
[Fri Apr 17 00:22:45.218305 2026] [:error] [pid 3245:tid 3285] [client 51.13.190.245:39923] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeEM1aESOMTHVLs-uFCyBAAAARc"]
[Fri Apr 17 00:22:45.790956 2026] [:error] [pid 43482:tid 43484] [client 51.13.190.245:24115] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeEM1T9SZnuKxlHrct10nAAAAMA"]
[Fri Apr 17 00:22:46.361098 2026] [:error] [pid 43387:tid 43477] [client 51.13.190.245:59229] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeEM1iBNsONqHxWTakUlfQAAAJg"]
[Fri Apr 17 00:22:47.017627 2026] [:error] [pid 43386:tid 43432] [client 51.13.190.245:32385] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeEM1-91GAVgUfhPVDGr5gAAAEw"]
[Fri Apr 17 00:22:47.684438 2026] [:error] [pid 43386:tid 43427] [client 51.13.190.245:11630] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeEM1-91GAVgUfhPVDGr6AAAAEc"]
[Fri Apr 17 00:22:48.378695 2026] [:error] [pid 43386:tid 43444] [client 51.13.190.245:46127] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeEM2O91GAVgUfhPVDGr6wAAAFc"]
[Fri Apr 17 00:22:49.014596 2026] [:error] [pid 43386:tid 43421] [client 51.13.190.245:11610] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeEM2e91GAVgUfhPVDGr7AAAAEE"]
[Fri Apr 17 00:22:49.643099 2026] [:error] [pid 3245:tid 3262] [client 51.13.190.245:46233] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeEM2aESOMTHVLs-uFCyCAAAAQA"]
[Fri Apr 17 00:22:50.294735 2026] [:error] [pid 43482:tid 43498] [client 51.13.190.245:59257] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeEM2j9SZnuKxlHrct10oQAAAM4"]
[Fri Apr 17 00:22:50.998899 2026] [:error] [pid 43482:tid 43505] [client 51.13.190.245:24071] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeEM2j9SZnuKxlHrct10ogAAANU"]
[Fri Apr 17 00:22:51.722313 2026] [:error] [pid 43387:tid 43462] [client 51.13.190.245:24079] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeEM2yBNsONqHxWTakUlhQAAAIs"]
[Fri Apr 17 00:22:52.417011 2026] [:error] [pid 43387:tid 43458] [client 51.13.190.245:59944] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeEM3CBNsONqHxWTakUlhwAAAIc"]
[Fri Apr 17 00:22:52.946554 2026] [:error] [pid 3245:tid 3273] [client 51.13.190.245:11607] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeEM3KESOMTHVLs-uFCyDwAAAQs"]
[Fri Apr 17 00:22:53.877459 2026] [:error] [pid 43387:tid 43450] [client 51.13.190.245:59953] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeEM3SBNsONqHxWTakUligAAAII"]
[Fri Apr 17 00:22:54.735287 2026] [:error] [pid 43482:tid 43487] [client 51.13.190.245:11641] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeEM3j9SZnuKxlHrct10qQAAAMM"]
[Fri Apr 17 00:22:55.391225 2026] [:error] [pid 43482:tid 43507] [client 51.13.190.245:11502] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeEM3z9SZnuKxlHrct10qwAAANc"]
[Fri Apr 17 00:22:56.141319 2026] [:error] [pid 3245:tid 3273] [client 51.13.190.245:25835] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeEM4KESOMTHVLs-uFCyHQAAAQs"]
[Fri Apr 17 00:22:57.156423 2026] [:error] [pid 43386:tid 43429] [client 51.13.190.245:40119] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aeEM4e91GAVgUfhPVDGr9QAAAEk"]
[Fri Apr 17 00:22:57.951821 2026] [:error] [pid 43385:tid 43410] [client 51.13.190.245:11485] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aeEM4cnIxkJaUI8KNs7vFQAAABQ"]
[Fri Apr 17 00:22:58.865057 2026] [:error] [pid 3245:tid 3270] [client 51.13.190.245:24088] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aeEM4qESOMTHVLs-uFCyKgAAAQg"]
[Fri Apr 17 00:22:59.522045 2026] [:error] [pid 3245:tid 3280] [client 51.13.190.245:30156] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aeEM46ESOMTHVLs-uFCyLgAAARI"]
[Fri Apr 17 00:23:00.215898 2026] [:error] [pid 3245:tid 3262] [client 51.13.190.245:46227] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aeEM5KESOMTHVLs-uFCyMwAAAQA"]
[Fri Apr 17 00:23:00.856385 2026] [:error] [pid 43385:tid 43392] [client 51.13.190.245:32393] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aeEM5MnIxkJaUI8KNs7vGQAAAAM"]
[Fri Apr 17 00:23:01.492767 2026] [:error] [pid 43482:tid 43499] [client 51.13.190.245:40072] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aeEM5T9SZnuKxlHrct10tQAAAM8"]
[Fri Apr 17 00:23:02.209280 2026] [:error] [pid 3245:tid 3272] [client 51.13.190.245:46086] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aeEM5qESOMTHVLs-uFCyOAAAAQo"]
[Fri Apr 17 00:23:02.941138 2026] [:error] [pid 3245:tid 3278] [client 51.13.190.245:46117] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "aeEM5qESOMTHVLs-uFCyQwAAARA"]
[Fri Apr 17 00:23:03.777254 2026] [:error] [pid 3245:tid 3268] [client 51.13.190.245:39887] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "aeEM56ESOMTHVLs-uFCySQAAAQY"]
[Fri Apr 17 00:23:04.493141 2026] [:error] [pid 3245:tid 3275] [client 51.13.190.245:32429] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "aeEM6KESOMTHVLs-uFCyUAAAAQ0"]
[Fri Apr 17 00:23:05.281143 2026] [:error] [pid 3245:tid 3262] [client 51.13.190.245:24117] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vee.php"] [unique_id "aeEM6aESOMTHVLs-uFCyXQAAAQA"]
[Fri Apr 17 00:23:06.274382 2026] [:error] [pid 43482:tid 43497] [client 51.13.190.245:46119] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "aeEM6j9SZnuKxlHrct10wwAAAM0"]
[Fri Apr 17 00:23:07.397612 2026] [:error] [pid 43385:tid 43412] [client 51.13.190.245:59234] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "aeEM68nIxkJaUI8KNs7vRQAAABY"]
[Fri Apr 17 00:23:08.176957 2026] [:error] [pid 43482:tid 43505] [client 51.13.190.245:7862] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "aeEM7D9SZnuKxlHrct10yAAAANU"]
[Fri Apr 17 00:23:08.988917 2026] [:error] [pid 3245:tid 3271] [client 51.13.190.245:11639] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cabs.php"] [unique_id "aeEM7KESOMTHVLs-uFCyYgAAAQk"]
[Fri Apr 17 00:23:09.559214 2026] [:error] [pid 43482:tid 43491] [client 51.13.190.245:30190] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeEM7T9SZnuKxlHrct10ygAAAMc"]
[Fri Apr 17 00:23:10.184999 2026] [:error] [pid 43385:tid 43405] [client 51.13.190.245:59963] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeEM7snIxkJaUI8KNs7vSwAAABA"]
[Fri Apr 17 00:23:10.797064 2026] [:error] [pid 43482:tid 43490] [client 51.13.190.245:11494] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeEM7j9SZnuKxlHrct10zgAAAMY"]
[Fri Apr 17 00:23:11.395984 2026] [:error] [pid 3245:tid 3272] [client 51.13.190.245:24118] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeEM76ESOMTHVLs-uFCydAAAAQo"]
[Fri Apr 17 00:23:11.955147 2026] [:error] [pid 3245:tid 3270] [client 51.13.190.245:63686] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "aeEM76ESOMTHVLs-uFCyeQAAAQg"]
[Fri Apr 17 00:23:12.639101 2026] [:error] [pid 3245:tid 3285] [client 51.13.190.245:59205] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "aeEM8KESOMTHVLs-uFCyfQAAARc"]
[Fri Apr 17 00:23:13.325724 2026] [:error] [pid 3245:tid 3276] [client 51.13.190.245:40094] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "aeEM8aESOMTHVLs-uFCygQAAAQ4"]
[Fri Apr 17 00:23:14.065781 2026] [:error] [pid 43482:tid 43484] [client 51.13.190.245:11596] [client 51.13.190.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x1da.php"] [unique_id "aeEM8j9SZnuKxlHrct101gAAAMA"]
[Fri Apr 17 00:23:15.167174 2026] [:error] [pid 43386:tid 43433] [client 51.13.190.245:11505] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 17 00:23:15.429207 2026] [:error] [pid 43386:tid 43427] [client 51.13.190.245:11505] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 17 03:29:01.947889 2026] [:error] [pid 5958:tid 5983] [client 4.225.163.126:34691] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Fri Apr 17 03:29:02.215397 2026] [:error] [pid 5958:tid 5980] [client 4.225.163.126:34691] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri Apr 17 03:29:02.481702 2026] [:error] [pid 5958:tid 5966] [client 4.225.163.126:34691] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Fri Apr 17 03:29:02.746784 2026] [:error] [pid 5958:tid 5969] [client 4.225.163.126:34691] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Fri Apr 17 03:29:03.024359 2026] [:error] [pid 5958:tid 5984] [client 4.225.163.126:34691] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Fri Apr 17 03:29:03.290838 2026] [:error] [pid 5958:tid 5987] [client 4.225.163.126:34691] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Fri Apr 17 03:29:03.557463 2026] [:error] [pid 5958:tid 5985] [client 4.225.163.126:34691] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Fri Apr 17 03:29:03.839086 2026] [:error] [pid 5958:tid 5975] [client 4.225.163.126:34691] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Fri Apr 17 03:29:04.128988 2026] [:error] [pid 5958:tid 5964] [client 4.225.163.126:34691] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeE4gOopK-t1vpDHqQq0jwAAAAE"]
[Fri Apr 17 03:29:04.856117 2026] [:error] [pid 5959:tid 5999] [client 4.225.163.126:27294] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Fri Apr 17 03:29:05.121909 2026] [:error] [pid 5959:tid 6011] [client 4.225.163.126:27294] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Fri Apr 17 03:29:05.390428 2026] [:error] [pid 5959:tid 6015] [client 4.225.163.126:27294] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeE4gRh6S7soyvWoUGMObQAAAFg"]
[Fri Apr 17 03:29:06.103121 2026] [:error] [pid 5959:tid 5995] [client 4.225.163.126:50969] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeE4ghh6S7soyvWoUGMObgAAAEQ"]
[Fri Apr 17 03:29:06.929993 2026] [:error] [pid 6075:tid 6080] [client 4.225.163.126:17561] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeE4gpNVPFSfXfMu9CM-wwAAAME"]
[Fri Apr 17 03:29:07.989188 2026] [:error] [pid 6075:tid 6093] [client 4.225.163.126:11820] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeE4g5NVPFSfXfMu9CM-xgAAAM4"]
[Fri Apr 17 03:29:09.191054 2026] [:error] [pid 6075:tid 6083] [client 4.225.163.126:34743] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeE4hZNVPFSfXfMu9CM-ygAAAMQ"]
[Fri Apr 17 03:29:10.083189 2026] [:error] [pid 5960:tid 6037] [client 4.225.163.126:38771] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeE4htAnsOizgdg2T5-N1wAAAJM"]
[Fri Apr 17 03:29:10.701328 2026] [:error] [pid 5960:tid 6040] [client 4.225.163.126:11780] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeE4htAnsOizgdg2T5-N2wAAAJY"]
[Fri Apr 17 03:29:11.321860 2026] [:error] [pid 6075:tid 6082] [client 4.225.163.126:34707] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeE4h5NVPFSfXfMu9CM-0gAAAMM"]
[Fri Apr 17 03:29:11.921298 2026] [:error] [pid 5958:tid 5970] [client 4.225.163.126:38729] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeE4h-opK-t1vpDHqQq0kgAAAAc"]
[Fri Apr 17 03:29:12.545686 2026] [:error] [pid 6075:tid 6099] [client 4.225.163.126:27316] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeE4iJNVPFSfXfMu9CM-2QAAANQ"]
[Fri Apr 17 03:29:13.298747 2026] [:error] [pid 6075:tid 6083] [client 4.225.163.126:34706] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeE4iZNVPFSfXfMu9CM-2wAAAMQ"]
[Fri Apr 17 03:29:14.064585 2026] [:error] [pid 5960:tid 6042] [client 4.225.163.126:50992] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeE4itAnsOizgdg2T5-N4wAAAJg"]
[Fri Apr 17 03:29:15.196264 2026] [:error] [pid 5959:tid 6013] [client 4.225.163.126:24910] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeE4ixh6S7soyvWoUGMOdAAAAFY"]
[Fri Apr 17 03:29:16.999326 2026] [:error] [pid 6075:tid 6081] [client 4.225.163.126:27304] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeE4jJNVPFSfXfMu9CM-5wAAAMI"]
[Fri Apr 17 03:29:17.587043 2026] [:error] [pid 5959:tid 5999] [client 4.225.163.126:35343] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeE4jRh6S7soyvWoUGMOdwAAAEg"]
[Fri Apr 17 03:29:18.633022 2026] [:error] [pid 5960:tid 6026] [client 4.225.163.126:27305] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeE4jtAnsOizgdg2T5-N7wAAAIg"]
[Fri Apr 17 03:29:19.396412 2026] [:error] [pid 5960:tid 6031] [client 4.225.163.126:27314] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeE4j9AnsOizgdg2T5-N8gAAAI0"]
[Fri Apr 17 03:29:20.068248 2026] [:error] [pid 5958:tid 5965] [client 4.225.163.126:27305] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeE4kOopK-t1vpDHqQq0nwAAAAI"]
[Fri Apr 17 03:29:21.049577 2026] [:error] [pid 5960:tid 6028] [client 4.225.163.126:35331] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeE4kdAnsOizgdg2T5-N9QAAAIo"]
[Fri Apr 17 03:29:21.601394 2026] [:error] [pid 6075:tid 6086] [client 4.225.163.126:35351] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeE4kZNVPFSfXfMu9CM-6gAAAMc"]
[Fri Apr 17 03:29:22.220732 2026] [:error] [pid 6075:tid 6088] [client 4.225.163.126:34716] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeE4kpNVPFSfXfMu9CM-8gAAAMk"]
[Fri Apr 17 03:29:22.836552 2026] [:error] [pid 5958:tid 5972] [client 4.225.163.126:17593] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeE4kuopK-t1vpDHqQq0vgAAAAk"]
[Fri Apr 17 03:29:23.447124 2026] [:error] [pid 5958:tid 5978] [client 4.225.163.126:34739] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeE4k-opK-t1vpDHqQq08gAAAA8"]
[Fri Apr 17 03:29:24.120440 2026] [:error] [pid 5960:tid 6025] [client 4.225.163.126:50981] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeE4lNAnsOizgdg2T5-N_gAAAIc"]
[Fri Apr 17 03:29:24.876682 2026] [:error] [pid 5960:tid 6024] [client 4.225.163.126:35346] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeE4lNAnsOizgdg2T5-OBAAAAIY"]
[Fri Apr 17 03:29:25.437209 2026] [:error] [pid 6075:tid 6100] [client 4.225.163.126:27320] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeE4lZNVPFSfXfMu9CM_AAAAANU"]
[Fri Apr 17 03:29:26.000720 2026] [:error] [pid 6075:tid 6094] [client 4.225.163.126:34735] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeE4lZNVPFSfXfMu9CM_AwAAAM8"]
[Fri Apr 17 03:29:26.602339 2026] [:error] [pid 5958:tid 5963] [client 4.225.163.126:34695] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeE4luopK-t1vpDHqQq1ZwAAAAA"]
[Fri Apr 17 03:29:27.535269 2026] [:error] [pid 5958:tid 5987] [client 4.225.163.126:45103] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeE4l-opK-t1vpDHqQq1agAAABg"]
[Fri Apr 17 03:29:28.164022 2026] [:error] [pid 5959:tid 5992] [client 4.225.163.126:11822] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeE4mBh6S7soyvWoUGMOjQAAAEE"]
[Fri Apr 17 03:29:29.008674 2026] [:error] [pid 5960:tid 6030] [client 4.225.163.126:24896] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeE4mdAnsOizgdg2T5-OEgAAAIw"]
[Fri Apr 17 03:29:29.699128 2026] [:error] [pid 5960:tid 6028] [client 4.225.163.126:27301] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeE4mdAnsOizgdg2T5-OFQAAAIo"]
[Fri Apr 17 03:29:30.506642 2026] [:error] [pid 5958:tid 5975] [client 4.225.163.126:38746] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeE4muopK-t1vpDHqQq1dAAAAAw"]
[Fri Apr 17 03:29:31.080746 2026] [:error] [pid 5960:tid 6029] [client 4.225.163.126:17573] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeE4m9AnsOizgdg2T5-OGgAAAIs"]
[Fri Apr 17 03:29:31.985902 2026] [:error] [pid 5959:tid 6006] [client 4.225.163.126:38754] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeE4mxh6S7soyvWoUGMOkQAAAE8"]
[Fri Apr 17 03:29:32.884219 2026] [:error] [pid 5959:tid 6010] [client 4.225.163.126:45100] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeE4nBh6S7soyvWoUGMOkwAAAFM"]
[Fri Apr 17 03:29:33.682605 2026] [:error] [pid 5959:tid 5998] [client 4.225.163.126:24931] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeE4nRh6S7soyvWoUGMOlgAAAEc"]
[Fri Apr 17 03:29:34.292332 2026] [:error] [pid 5959:tid 5992] [client 4.225.163.126:11791] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeE4nhh6S7soyvWoUGMOlwAAAEE"]
[Fri Apr 17 03:29:34.988443 2026] [:error] [pid 5959:tid 6009] [client 4.225.163.126:45078] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeE4nhh6S7soyvWoUGMOmgAAAFI"]
[Fri Apr 17 03:29:35.987207 2026] [:error] [pid 5959:tid 6007] [client 4.225.163.126:50964] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeE4nxh6S7soyvWoUGMOngAAAFA"]
[Fri Apr 17 03:29:36.915537 2026] [:error] [pid 5960:tid 6032] [client 4.225.163.126:11806] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeE4oNAnsOizgdg2T5-OHgAAAI4"]
[Fri Apr 17 03:29:38.125303 2026] [:error] [pid 5958:tid 5977] [client 4.225.163.126:27267] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeE4ouopK-t1vpDHqQq1hAAAAA4"]
[Fri Apr 17 03:29:39.246999 2026] [:error] [pid 6075:tid 6098] [client 4.225.163.126:24900] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeE4o5NVPFSfXfMu9CM_JQAAANM"]
[Fri Apr 17 03:29:40.780384 2026] [:error] [pid 6075:tid 6087] [client 4.225.163.126:27264] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeE4pJNVPFSfXfMu9CM_LAAAAMg"]
[Fri Apr 17 03:29:42.059200 2026] [:error] [pid 6075:tid 6086] [client 4.225.163.126:45108] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeE4ppNVPFSfXfMu9CM_NAAAAMc"]
[Fri Apr 17 03:29:42.789991 2026] [:error] [pid 6075:tid 6090] [client 4.225.163.126:17591] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeE4ppNVPFSfXfMu9CM_NwAAAMs"]
[Fri Apr 17 03:29:44.722125 2026] [:error] [pid 5960:tid 6026] [client 4.225.163.126:24904] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeE4qNAnsOizgdg2T5-OKwAAAIg"]
[Fri Apr 17 03:29:45.512196 2026] [:error] [pid 5960:tid 6023] [client 4.225.163.126:35334] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeE4qdAnsOizgdg2T5-OLQAAAIU"]
[Fri Apr 17 03:29:46.503467 2026] [:error] [pid 6075:tid 6093] [client 4.225.163.126:17565] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeE4qpNVPFSfXfMu9CM_RQAAAM4"]
[Fri Apr 17 03:29:47.175349 2026] [:error] [pid 6075:tid 6091] [client 4.225.163.126:35379] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeE4q5NVPFSfXfMu9CM_SQAAAMw"]
[Fri Apr 17 03:29:48.067021 2026] [:error] [pid 6075:tid 6082] [client 4.225.163.126:50955] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeE4rJNVPFSfXfMu9CM_TgAAAMM"]
[Fri Apr 17 03:29:49.047702 2026] [:error] [pid 6075:tid 6080] [client 4.225.163.126:12015] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeE4rZNVPFSfXfMu9CM_VgAAAME"]
[Fri Apr 17 03:29:49.945663 2026] [:error] [pid 5960:tid 6042] [client 4.225.163.126:45094] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny"] [unique_id "aeE4rdAnsOizgdg2T5-OMAAAAJg"]
[Fri Apr 17 03:29:50.580988 2026] [:error] [pid 6075:tid 6084] [client 4.225.163.126:27318] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny"] [unique_id "aeE4rpNVPFSfXfMu9CM_YAAAAMU"]
[Fri Apr 17 03:29:51.523746 2026] [:error] [pid 5960:tid 6027] [client 4.225.163.126:11794] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny"] [unique_id "aeE4r9AnsOizgdg2T5-ONAAAAIk"]
[Fri Apr 17 03:29:52.345639 2026] [:error] [pid 5959:tid 5999] [client 4.225.163.126:11998] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny"] [unique_id "aeE4sBh6S7soyvWoUGMOowAAAEg"]
[Fri Apr 17 03:29:53.403187 2026] [:error] [pid 6075:tid 6081] [client 4.225.163.126:57151] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "aeE4sZNVPFSfXfMu9CM_aQAAAMI"]
[Fri Apr 17 03:29:54.354849 2026] [:error] [pid 6075:tid 6096] [client 4.225.163.126:40608] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeE4spNVPFSfXfMu9CM_bQAAANE"]
[Fri Apr 17 03:29:55.190030 2026] [:error] [pid 5960:tid 6039] [client 4.225.163.126:27275] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeE4s9AnsOizgdg2T5-OOQAAAJU"]
[Fri Apr 17 03:29:56.076206 2026] [:error] [pid 6075:tid 6087] [client 4.225.163.126:11979] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeE4tJNVPFSfXfMu9CM_dgAAAMg"]
[Fri Apr 17 03:29:56.746352 2026] [:error] [pid 5960:tid 6020] [client 4.225.163.126:27272] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-wp-image.php"] [unique_id "aeE4tNAnsOizgdg2T5-OPgAAAII"]
[Fri Apr 17 03:29:57.425431 2026] [:error] [pid 6075:tid 6093] [client 4.225.163.126:29534] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-wp-image.php"] [unique_id "aeE4tZNVPFSfXfMu9CM_ewAAAM4"]
[Fri Apr 17 03:29:58.531315 2026] [:error] [pid 6075:tid 6084] [client 4.225.163.126:64629] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-wp-image.php"] [unique_id "aeE4tpNVPFSfXfMu9CM_fQAAAMU"]
[Fri Apr 17 03:29:59.276587 2026] [:error] [pid 5960:tid 6042] [client 4.225.163.126:47701] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-wp-image.php"] [unique_id "aeE4t9AnsOizgdg2T5-OQgAAAJg"]
[Fri Apr 17 03:30:00.251546 2026] [:error] [pid 5958:tid 5977] [client 4.225.163.126:31902] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeE4uOopK-t1vpDHqQq1lAAAAA4"]
[Fri Apr 17 03:30:00.991895 2026] [:error] [pid 6075:tid 6081] [client 4.225.163.126:42534] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeE4uJNVPFSfXfMu9CM_hwAAAMI"]
[Fri Apr 17 03:30:01.850928 2026] [:error] [pid 6075:tid 6090] [client 4.225.163.126:42502] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeE4uZNVPFSfXfMu9CM_jAAAAMs"]
[Fri Apr 17 03:30:02.895380 2026] [:error] [pid 5959:tid 5995] [client 4.225.163.126:42517] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeE4uhh6S7soyvWoUGMOpwAAAEQ"]
[Fri Apr 17 03:30:04.104405 2026] [:error] [pid 6075:tid 6089] [client 4.225.163.126:34739] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeE4vJNVPFSfXfMu9CM_lgAAAMo"]
[Fri Apr 17 03:30:04.926585 2026] [:error] [pid 6075:tid 6092] [client 4.225.163.126:14027] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeE4vJNVPFSfXfMu9CM_mgAAAM0"]
[Fri Apr 17 03:30:05.938753 2026] [:error] [pid 5960:tid 6018] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Fri Apr 17 03:30:06.203628 2026] [:error] [pid 5960:tid 6029] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/footer.php
[Fri Apr 17 03:30:06.468479 2026] [:error] [pid 5960:tid 6034] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/img.php
[Fri Apr 17 03:30:06.740164 2026] [:error] [pid 5960:tid 6021] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Fri Apr 17 03:30:07.275442 2026] [:error] [pid 5960:tid 6039] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 17 03:30:07.545147 2026] [:error] [pid 5960:tid 6024] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Fri Apr 17 03:30:07.815958 2026] [:error] [pid 5960:tid 6041] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Fri Apr 17 03:30:08.086851 2026] [:error] [pid 5960:tid 6033] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Fri Apr 17 03:30:08.401255 2026] [:error] [pid 5960:tid 6030] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Fri Apr 17 03:30:08.666442 2026] [:error] [pid 5960:tid 6023] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri Apr 17 03:30:08.932646 2026] [:error] [pid 5960:tid 6031] [client 4.225.163.126:14087] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Fri Apr 17 03:30:09.193927 2026] [:error] [pid 5960:tid 6032] [client 4.225.163.126:14087] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeE4wdAnsOizgdg2T5-OVQAAAI4"]
[Fri Apr 17 03:30:10.743081 2026] [:error] [pid 5959:tid 5994] [client 4.225.163.126:26961] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeE4whh6S7soyvWoUGMOrwAAAEM"]
[Fri Apr 17 03:30:12.755751 2026] [:error] [pid 6075:tid 6085] [client 4.225.163.126:11929] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeE4xJNVPFSfXfMu9CM_tAAAAMY"]
[Fri Apr 17 03:30:14.115803 2026] [:error] [pid 6075:tid 6092] [client 4.225.163.126:50354] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeE4xpNVPFSfXfMu9CM_uwAAAM0"]
[Fri Apr 17 03:30:14.854160 2026] [:error] [pid 5958:tid 5976] [client 4.225.163.126:12096] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "aeE4xuopK-t1vpDHqQq1sAAAAA0"]
[Fri Apr 17 03:30:15.931666 2026] [:error] [pid 6075:tid 6087] [client 4.225.163.126:50325] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "aeE4x5NVPFSfXfMu9CM_vAAAAMg"]
[Fri Apr 17 03:30:16.807321 2026] [:error] [pid 6075:tid 6088] [client 4.225.163.126:62513] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "aeE4yJNVPFSfXfMu9CM_wgAAAMk"]
[Fri Apr 17 03:30:17.841676 2026] [:error] [pid 5960:tid 6030] [client 4.225.163.126:51209] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "aeE4ydAnsOizgdg2T5-OYAAAAIw"]
[Fri Apr 17 03:30:19.788269 2026] [:error] [pid 5959:tid 5994] [client 4.225.163.126:55622] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "aeE4yxh6S7soyvWoUGMOwQAAAEM"]
[Fri Apr 17 03:30:22.660606 2026] [:error] [pid 5960:tid 6027] [client 4.225.163.126:19141] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "aeE4ztAnsOizgdg2T5-OZQAAAIk"]
[Fri Apr 17 03:30:23.706735 2026] [:error] [pid 6075:tid 6090] [client 4.225.163.126:19187] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "aeE4z5NVPFSfXfMu9CM_zQAAAMs"]
[Fri Apr 17 03:30:24.319946 2026] [:error] [pid 5959:tid 6012] [client 4.225.163.126:54862] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "aeE40Bh6S7soyvWoUGMO0wAAAFU"]
[Fri Apr 17 03:30:25.517768 2026] [:error] [pid 5959:tid 6001] [client 4.225.163.126:19174] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeE40Rh6S7soyvWoUGMO3AAAAEo"]
[Fri Apr 17 03:30:26.373721 2026] [:error] [pid 6075:tid 6100] [client 4.225.163.126:12116] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeE40pNVPFSfXfMu9CM_1gAAANU"]
[Fri Apr 17 03:30:27.540833 2026] [:error] [pid 5960:tid 6026] [client 4.225.163.126:47754] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeE409AnsOizgdg2T5-ObgAAAIg"]
[Fri Apr 17 03:30:28.961450 2026] [:error] [pid 5959:tid 6012] [client 4.225.163.126:54891] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeE41Bh6S7soyvWoUGMO5wAAAFU"]
[Fri Apr 17 03:30:29.781153 2026] [:error] [pid 5959:tid 5994] [client 4.225.163.126:60576] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "aeE41Rh6S7soyvWoUGMO6gAAAEM"]
[Fri Apr 17 03:30:30.713685 2026] [:error] [pid 6075:tid 6083] [client 4.225.163.126:23898] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "aeE41pNVPFSfXfMu9CM_6AAAAMQ"]
[Fri Apr 17 03:30:32.034845 2026] [:error] [pid 6075:tid 6081] [client 4.225.163.126:23886] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "aeE42JNVPFSfXfMu9CM_7wAAAMI"]
[Fri Apr 17 03:30:32.836683 2026] [:error] [pid 5958:tid 5981] [client 4.225.163.126:42830] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/maxro.php"] [unique_id "aeE42OopK-t1vpDHqQq1xAAAABI"]
[Fri Apr 17 03:30:34.553301 2026] [:error] [pid 6075:tid 6090] [client 4.225.163.126:29580] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE42pNVPFSfXfMu9CM__wAAAMs"]
[Fri Apr 17 03:30:36.869632 2026] [:error] [pid 6075:tid 6090] [client 4.225.163.126:60603] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE43JNVPFSfXfMu9CNACAAAAMs"]
[Fri Apr 17 03:30:38.108909 2026] [:error] [pid 6075:tid 6095] [client 4.225.163.126:35904] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE43pNVPFSfXfMu9CNAEAAAANA"]
[Fri Apr 17 03:30:38.778198 2026] [:error] [pid 5959:tid 5998] [client 4.225.163.126:42835] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeE43hh6S7soyvWoUGMO8wAAAEc"]
[Fri Apr 17 03:30:39.472082 2026] [:error] [pid 6075:tid 6093] [client 4.225.163.126:47788] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeE435NVPFSfXfMu9CNAFwAAAM4"]
[Fri Apr 17 03:30:40.086027 2026] [:error] [pid 5960:tid 6025] [client 4.225.163.126:42817] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeE44NAnsOizgdg2T5-OdgAAAIc"]
[Fri Apr 17 03:30:41.155961 2026] [:error] [pid 5959:tid 5995] [client 4.225.163.126:14229] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeE44Rh6S7soyvWoUGMO-QAAAEQ"]
[Fri Apr 17 03:30:42.254702 2026] [:error] [pid 5958:tid 5963] [client 4.225.163.126:47769] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeE44uopK-t1vpDHqQq11AAAAAA"]
[Fri Apr 17 03:30:43.190511 2026] [:error] [pid 5960:tid 6042] [client 4.225.163.126:50665] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeE449AnsOizgdg2T5-OgAAAAJg"]
[Fri Apr 17 03:30:44.783711 2026] [:error] [pid 6075:tid 6083] [client 4.225.163.126:29577] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeE45JNVPFSfXfMu9CNAMQAAAMQ"]
[Fri Apr 17 03:30:45.841345 2026] [:error] [pid 5960:tid 6036] [client 4.225.163.126:14189] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeE45dAnsOizgdg2T5-OjQAAAJI"]
[Fri Apr 17 03:30:46.659342 2026] [:error] [pid 5960:tid 6018] [client 4.225.163.126:23931] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeE45tAnsOizgdg2T5-OkQAAAIA"]
[Fri Apr 17 03:30:47.892163 2026] [:error] [pid 5959:tid 6010] [client 4.225.163.126:14169] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeE45xh6S7soyvWoUGMPCgAAAFM"]
[Fri Apr 17 03:30:49.082505 2026] [:error] [pid 6075:tid 6101] [client 4.225.163.126:21152] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeE46ZNVPFSfXfMu9CNASAAAANY"]
[Fri Apr 17 03:30:49.778627 2026] [:error] [pid 6075:tid 6085] [client 4.225.163.126:35966] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeE46ZNVPFSfXfMu9CNATQAAAMY"]
[Fri Apr 17 03:30:50.351575 2026] [:error] [pid 6075:tid 6097] [client 4.225.163.126:14504] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeE46pNVPFSfXfMu9CNAUwAAANI"]
[Fri Apr 17 03:30:50.973471 2026] [:error] [pid 5959:tid 6012] [client 4.225.163.126:47320] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeE46hh6S7soyvWoUGMPEwAAAFU"]
[Fri Apr 17 03:30:51.621164 2026] [:error] [pid 5959:tid 6014] [client 4.225.163.126:12195] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeE46xh6S7soyvWoUGMPFAAAAFc"]
[Fri Apr 17 03:30:52.258971 2026] [:error] [pid 5960:tid 6018] [client 4.225.163.126:35904] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeE47NAnsOizgdg2T5-OmwAAAIA"]
[Fri Apr 17 03:30:53.049021 2026] [:error] [pid 6075:tid 6098] [client 4.225.163.126:35926] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeE47ZNVPFSfXfMu9CNAXwAAANM"]
[Fri Apr 17 03:30:53.939025 2026] [:error] [pid 5958:tid 5966] [client 4.225.163.126:21182] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "aeE47eopK-t1vpDHqQq15QAAAAM"]
[Fri Apr 17 03:30:54.788761 2026] [:error] [pid 5959:tid 6006] [client 4.225.163.126:50651] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "aeE47hh6S7soyvWoUGMPGgAAAE8"]
[Fri Apr 17 03:30:55.529463 2026] [:error] [pid 5960:tid 6041] [client 4.225.163.126:14188] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "aeE479AnsOizgdg2T5-OoQAAAJc"]
[Fri Apr 17 03:30:56.231246 2026] [:error] [pid 6075:tid 6094] [client 4.225.163.126:35940] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "aeE48JNVPFSfXfMu9CNAdQAAAM8"]
[Fri Apr 17 03:30:56.814546 2026] [:error] [pid 5959:tid 6008] [client 4.225.163.126:35916] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "aeE48Bh6S7soyvWoUGMPIAAAAFE"]
[Fri Apr 17 03:30:57.444382 2026] [:error] [pid 5958:tid 5974] [client 4.225.163.126:14487] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "aeE48eopK-t1vpDHqQq18gAAAAs"]
[Fri Apr 17 03:30:58.097117 2026] [:error] [pid 5960:tid 6032] [client 4.225.163.126:47324] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "aeE48tAnsOizgdg2T5-OpAAAAI4"]
[Fri Apr 17 03:30:58.828717 2026] [:error] [pid 5960:tid 6023] [client 4.225.163.126:14468] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "aeE48tAnsOizgdg2T5-OpwAAAIU"]
[Fri Apr 17 03:30:59.573922 2026] [:error] [pid 5960:tid 6042] [client 4.225.163.126:20982] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r2.php"] [unique_id "aeE489AnsOizgdg2T5-OqgAAAJg"]
[Fri Apr 17 03:31:00.365869 2026] [:error] [pid 5959:tid 6001] [client 4.225.163.126:44979] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r2.php"] [unique_id "aeE49Bh6S7soyvWoUGMPMAAAAEo"]
[Fri Apr 17 03:31:01.034862 2026] [:error] [pid 6075:tid 6094] [client 4.225.163.126:47356] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r2.php"] [unique_id "aeE49ZNVPFSfXfMu9CNAfQAAAM8"]
[Fri Apr 17 03:31:01.851720 2026] [:error] [pid 5960:tid 6019] [client 4.225.163.126:21170] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/r2.php"] [unique_id "aeE49dAnsOizgdg2T5-OsAAAAIE"]
[Fri Apr 17 03:31:02.860624 2026] [:error] [pid 5960:tid 6026] [client 4.225.163.126:47352] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeE49tAnsOizgdg2T5-OswAAAIg"]
[Fri Apr 17 03:31:04.508882 2026] [:error] [pid 5959:tid 5997] [client 4.225.163.126:29606] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeE4-Bh6S7soyvWoUGMPOQAAAEY"]
[Fri Apr 17 03:31:05.925685 2026] [:error] [pid 6075:tid 6101] [client 4.225.163.126:14178] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeE4-ZNVPFSfXfMu9CNAlgAAANY"]
[Fri Apr 17 03:31:07.548229 2026] [:error] [pid 5959:tid 6012] [client 4.225.163.126:17121] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeE4-xh6S7soyvWoUGMPRQAAAFU"]
[Fri Apr 17 03:31:08.859320 2026] [:error] [pid 5960:tid 6033] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Fri Apr 17 03:31:09.126430 2026] [:error] [pid 5960:tid 6032] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Fri Apr 17 03:31:09.400748 2026] [:error] [pid 5960:tid 6036] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/zogy1.php
[Fri Apr 17 03:31:09.675153 2026] [:error] [pid 5960:tid 6037] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Fri Apr 17 03:31:09.941293 2026] [:error] [pid 5960:tid 6030] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Fri Apr 17 03:31:10.219334 2026] [:error] [pid 5960:tid 6039] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/gz.php
[Fri Apr 17 03:31:10.485456 2026] [:error] [pid 5960:tid 6018] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Fri Apr 17 03:31:10.751066 2026] [:error] [pid 5960:tid 6029] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/areak1.php
[Fri Apr 17 03:31:11.017201 2026] [:error] [pid 5960:tid 6028] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/qqa.php
[Fri Apr 17 03:31:11.283093 2026] [:error] [pid 5960:tid 6034] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 17 03:31:11.556786 2026] [:error] [pid 5960:tid 6025] [client 4.225.163.126:12220] File does not exist: /usr/local/apache/htdocs/suspended-page/ga.php
[Fri Apr 17 03:31:11.849631 2026] [:error] [pid 5960:tid 6041] [client 4.225.163.126:12220] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeE4_9AnsOizgdg2T5-O0gAAAJc"]
[Fri Apr 17 03:31:13.290112 2026] [:error] [pid 6075:tid 6080] [client 4.225.163.126:12162] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeE5AZNVPFSfXfMu9CNApgAAAME"]
[Fri Apr 17 03:31:14.428188 2026] [:error] [pid 6075:tid 6103] [client 4.225.163.126:21120] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeE5ApNVPFSfXfMu9CNArgAAANg"]
[Fri Apr 17 03:31:15.923611 2026] [:error] [pid 5959:tid 5991] [client 4.225.163.126:20960] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeE5Axh6S7soyvWoUGMPVgAAAEA"]
[Fri Apr 17 03:31:17.073307 2026] [:error] [pid 5959:tid 5994] [client 4.225.163.126:44990] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeE5BRh6S7soyvWoUGMPWgAAAEM"]
[Fri Apr 17 03:31:18.303187 2026] [:error] [pid 5958:tid 5981] [client 4.225.163.126:24857] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeE5BuopK-t1vpDHqQq2CAAAABI"]
[Fri Apr 17 03:31:19.069192 2026] [:error] [pid 5960:tid 6018] [client 4.225.163.126:58355] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeE5B9AnsOizgdg2T5-O3gAAAIA"]
[Fri Apr 17 03:31:19.747294 2026] [:error] [pid 5959:tid 6014] [client 4.225.163.126:24873] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeE5Bxh6S7soyvWoUGMPXwAAAFc"]
[Fri Apr 17 03:31:20.574625 2026] [:error] [pid 5959:tid 6000] [client 4.225.163.126:49772] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeE5CBh6S7soyvWoUGMPYwAAAEk"]
[Fri Apr 17 03:31:21.158571 2026] [:error] [pid 5960:tid 6024] [client 4.225.163.126:24846] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeE5CdAnsOizgdg2T5-O5QAAAIY"]
[Fri Apr 17 03:31:22.095660 2026] [:error] [pid 5959:tid 6005] [client 4.225.163.126:44943] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeE5Chh6S7soyvWoUGMPZgAAAE4"]
[Fri Apr 17 03:31:23.145621 2026] [:error] [pid 5959:tid 5991] [client 4.225.163.126:20957] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeE5Cxh6S7soyvWoUGMPaQAAAEA"]
[Fri Apr 17 03:31:24.359458 2026] [:error] [pid 5958:tid 5986] [client 4.225.163.126:24852] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeE5DOopK-t1vpDHqQq2FwAAABc"]
[Fri Apr 17 03:31:25.223090 2026] [:error] [pid 5959:tid 5998] [client 4.225.163.126:24864] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeE5DRh6S7soyvWoUGMPbAAAAEc"]
[Fri Apr 17 03:31:26.132523 2026] [:error] [pid 5958:tid 5983] [client 4.225.163.126:34739] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeE5DuopK-t1vpDHqQq2HAAAABQ"]
[Fri Apr 17 03:31:26.676897 2026] [:error] [pid 5959:tid 5993] [client 4.225.163.126:20242] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeE5Dhh6S7soyvWoUGMPcwAAAEI"]
[Fri Apr 17 03:31:27.280022 2026] [:error] [pid 6075:tid 6084] [client 4.225.163.126:24859] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeE5D5NVPFSfXfMu9CNAuwAAAMU"]
[Fri Apr 17 03:31:28.059588 2026] [:error] [pid 6075:tid 6079] [client 4.225.163.126:24891] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeE5EJNVPFSfXfMu9CNAvwAAAMA"]
[Fri Apr 17 03:31:28.768228 2026] [:error] [pid 5959:tid 6004] [client 4.225.163.126:48336] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeE5EBh6S7soyvWoUGMPewAAAE0"]
[Fri Apr 17 03:31:29.380184 2026] [:error] [pid 5959:tid 5998] [client 4.225.163.126:20975] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeE5ERh6S7soyvWoUGMPgAAAAEc"]
[Fri Apr 17 03:31:30.056183 2026] [:error] [pid 5958:tid 5964] [client 4.225.163.126:59535] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-lo.php"] [unique_id "aeE5EuopK-t1vpDHqQq2IwAAAAE"]
[Fri Apr 17 03:31:30.764534 2026] [:error] [pid 5958:tid 5966] [client 4.225.163.126:49546] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-lo.php"] [unique_id "aeE5EuopK-t1vpDHqQq2JgAAAAM"]
[Fri Apr 17 03:31:31.593124 2026] [:error] [pid 5959:tid 5992] [client 4.225.163.126:58311] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-lo.php"] [unique_id "aeE5Exh6S7soyvWoUGMPhQAAAEE"]
[Fri Apr 17 03:31:32.417746 2026] [:error] [pid 6075:tid 6085] [client 4.225.163.126:59525] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-lo.php"] [unique_id "aeE5FJNVPFSfXfMu9CNAzgAAAMY"]
[Fri Apr 17 03:31:33.443766 2026] [:error] [pid 5960:tid 6021] [client 4.225.163.126:59581] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeE5FdAnsOizgdg2T5-PCAAAAIM"]
[Fri Apr 17 03:31:34.322871 2026] [:error] [pid 5960:tid 6040] [client 4.225.163.126:49789] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeE5FtAnsOizgdg2T5-PCgAAAJY"]
[Fri Apr 17 03:31:34.933826 2026] [:error] [pid 5960:tid 6018] [client 4.225.163.126:20265] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeE5FtAnsOizgdg2T5-PDQAAAIA"]
[Fri Apr 17 03:31:36.154667 2026] [:error] [pid 5960:tid 6024] [client 4.225.163.126:34695] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeE5GNAnsOizgdg2T5-PEwAAAIY"]
[Fri Apr 17 03:31:37.030401 2026] [:error] [pid 5959:tid 5995] [client 4.225.163.126:58356] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Ipv6.php"] [unique_id "aeE5GRh6S7soyvWoUGMPiAAAAEQ"]
[Fri Apr 17 03:31:38.167251 2026] [:error] [pid 5960:tid 6021] [client 4.225.163.126:49560] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Ipv6.php"] [unique_id "aeE5GtAnsOizgdg2T5-PGwAAAIM"]
[Fri Apr 17 03:31:39.501724 2026] [:error] [pid 6075:tid 6093] [client 4.225.163.126:58329] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Ipv6.php"] [unique_id "aeE5G5NVPFSfXfMu9CNA3AAAAM4"]
[Fri Apr 17 03:31:42.257726 2026] [:error] [pid 5960:tid 6035] [client 4.225.163.126:49559] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Ipv6.php"] [unique_id "aeE5HtAnsOizgdg2T5-PKQAAAJE"]
[Fri Apr 17 03:31:45.385743 2026] [:error] [pid 6075:tid 6084] [client 4.225.163.126:14402] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeE5IZNVPFSfXfMu9CNA6QAAAMU"]
[Fri Apr 17 03:31:46.103886 2026] [:error] [pid 5959:tid 5993] [client 4.225.163.126:20235] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeE5Ihh6S7soyvWoUGMPmQAAAEI"]
[Fri Apr 17 03:31:47.281415 2026] [:error] [pid 5959:tid 6009] [client 4.225.163.126:59550] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeE5Ixh6S7soyvWoUGMPnwAAAFI"]
[Fri Apr 17 03:31:48.265470 2026] [:error] [pid 5959:tid 6004] [client 4.225.163.126:21127] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file-gertdxz.php"] [unique_id "aeE5JBh6S7soyvWoUGMPowAAAE0"]
[Fri Apr 17 03:31:48.930962 2026] [:error] [pid 5960:tid 6023] [client 4.225.163.126:24849] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeE5JNAnsOizgdg2T5-POwAAAIU"]
[Fri Apr 17 03:31:50.527620 2026] [:error] [pid 6075:tid 6103] [client 4.225.163.126:59549] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeE5JpNVPFSfXfMu9CNA_AAAANg"]
[Fri Apr 17 03:31:51.354937 2026] [:error] [pid 5959:tid 5991] [client 4.225.163.126:59548] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeE5Jxh6S7soyvWoUGMPuQAAAEA"]
[Fri Apr 17 03:31:52.174901 2026] [:error] [pid 5959:tid 5997] [client 4.225.163.126:59552] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeE5KBh6S7soyvWoUGMPwAAAAEY"]
[Fri Apr 17 03:31:52.776055 2026] [:error] [pid 5960:tid 6019] [client 4.225.163.126:48358] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aeE5KNAnsOizgdg2T5-PPQAAAIE"]
[Fri Apr 17 03:31:53.903895 2026] [:error] [pid 6075:tid 6087] [client 4.225.163.126:59546] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aeE5KZNVPFSfXfMu9CNBCAAAAMg"]
[Fri Apr 17 03:31:54.861429 2026] [:error] [pid 5958:tid 5987] [client 4.225.163.126:39901] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aeE5KuopK-t1vpDHqQq2OQAAABg"]
[Fri Apr 17 03:31:55.476100 2026] [:error] [pid 5958:tid 5968] [client 4.225.163.126:20250] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aeE5K-opK-t1vpDHqQq2OwAAAAU"]
[Fri Apr 17 03:31:56.060848 2026] [:error] [pid 5958:tid 5974] [client 4.225.163.126:59547] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "aeE5LOopK-t1vpDHqQq2PAAAAAs"]
[Fri Apr 17 03:31:57.025225 2026] [:error] [pid 5958:tid 5972] [client 4.225.163.126:21150] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "aeE5LeopK-t1vpDHqQq2PwAAAAk"]
[Fri Apr 17 03:31:57.599737 2026] [:error] [pid 5959:tid 5998] [client 4.225.163.126:49576] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "aeE5LRh6S7soyvWoUGMP0wAAAEc"]
[Fri Apr 17 03:31:58.346724 2026] [:error] [pid 5959:tid 6006] [client 4.225.163.126:59563] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "aeE5Lhh6S7soyvWoUGMP1gAAAE8"]
[Fri Apr 17 03:31:59.554557 2026] [:error] [pid 6075:tid 6092] [client 4.225.163.126:14409] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aeE5L5NVPFSfXfMu9CNBFgAAAM0"]
[Fri Apr 17 03:32:00.849167 2026] [:error] [pid 5959:tid 5997] [client 4.225.163.126:39891] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aeE5MBh6S7soyvWoUGMP4gAAAEY"]
[Fri Apr 17 03:32:01.850880 2026] [:error] [pid 5959:tid 5996] [client 4.225.163.126:49555] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aeE5MRh6S7soyvWoUGMP6QAAAEU"]
[Fri Apr 17 03:32:02.717527 2026] [:error] [pid 5959:tid 6003] [client 4.225.163.126:49784] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aeE5Mhh6S7soyvWoUGMP7wAAAEw"]
[Fri Apr 17 03:32:03.836679 2026] [:error] [pid 5959:tid 5992] [client 4.225.163.126:20257] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper.php"] [unique_id "aeE5Mxh6S7soyvWoUGMP9QAAAEE"]
[Fri Apr 17 03:32:04.654539 2026] [:error] [pid 6075:tid 6101] [client 4.225.163.126:24838] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper.php"] [unique_id "aeE5NJNVPFSfXfMu9CNBIwAAANY"]
[Fri Apr 17 03:32:05.523953 2026] [:error] [pid 6075:tid 6081] [client 4.225.163.126:12207] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper.php"] [unique_id "aeE5NZNVPFSfXfMu9CNBKQAAAMI"]
[Fri Apr 17 03:32:06.850833 2026] [:error] [pid 5960:tid 6019] [client 4.225.163.126:39881] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper.php"] [unique_id "aeE5NtAnsOizgdg2T5-PUwAAAIE"]
[Fri Apr 17 03:32:08.015632 2026] [:error] [pid 5959:tid 6014] [client 4.225.163.126:14414] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wxpass.php"] [unique_id "aeE5OBh6S7soyvWoUGMQAAAAAFc"]
[Fri Apr 17 03:32:09.561802 2026] [:error] [pid 5959:tid 6000] [client 4.225.163.126:58351] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wxpass.php"] [unique_id "aeE5ORh6S7soyvWoUGMQBAAAAEk"]
[Fri Apr 17 03:32:10.197356 2026] [:error] [pid 5959:tid 6013] [client 4.225.163.126:20230] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wxpass.php"] [unique_id "aeE5Ohh6S7soyvWoUGMQBwAAAFY"]
[Fri Apr 17 03:32:11.137610 2026] [:error] [pid 6075:tid 6102] [client 4.225.163.126:58336] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Fri Apr 17 03:32:11.403209 2026] [:error] [pid 6075:tid 6089] [client 4.225.163.126:58336] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Fri Apr 17 03:32:11.681509 2026] [:error] [pid 6075:tid 6080] [client 4.225.163.126:58336] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Fri Apr 17 03:32:11.947843 2026] [:error] [pid 6075:tid 6086] [client 4.225.163.126:58336] File does not exist: /usr/local/apache/htdocs/suspended-page/x3x.php
[Fri Apr 17 03:32:12.213862 2026] [:error] [pid 6075:tid 6087] [client 4.225.163.126:58336] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Fri Apr 17 03:32:12.478831 2026] [:error] [pid 6075:tid 6096] [client 4.225.163.126:58336] File does not exist: /usr/local/apache/htdocs/suspended-page/global.php
[Fri Apr 17 03:32:12.745769 2026] [:error] [pid 6075:tid 6097] [client 4.225.163.126:58336] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Apr 17 03:32:13.012637 2026] [:error] [pid 6075:tid 6084] [client 4.225.163.126:58336] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Fri Apr 17 03:32:13.279175 2026] [:error] [pid 6075:tid 6094] [client 4.225.163.126:58336] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Fri Apr 17 03:32:13.546006 2026] [:error] [pid 6075:tid 6088] [client 4.225.163.126:58336] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Fri Apr 17 03:32:13.807859 2026] [:error] [pid 6075:tid 6082] [client 4.225.163.126:58336] [client 4.225.163.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeE5PZNVPFSfXfMu9CNBTAAAAMM"]
[Fri Apr 17 03:32:15.061795 2026] [:error] [pid 5958:tid 5970] [client 4.225.163.126:24847] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Fri Apr 17 03:32:15.324705 2026] [:error] [pid 5958:tid 5981] [client 4.225.163.126:24847] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeE5P-opK-t1vpDHqQq2TQAAABI"]
[Fri Apr 17 03:32:17.280767 2026] [:error] [pid 5959:tid 6012] [client 4.225.163.126:14413] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeE5QRh6S7soyvWoUGMQKQAAAFU"]
[Fri Apr 17 03:32:18.239106 2026] [:error] [pid 5960:tid 6042] [client 4.225.163.126:59553] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeE5QtAnsOizgdg2T5-PawAAAJg"]
[Fri Apr 17 03:32:19.530269 2026] [:error] [pid 6075:tid 6099] [client 4.225.163.126:24843] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeE5Q5NVPFSfXfMu9CNBXgAAANQ"]
[Fri Apr 17 03:32:20.761925 2026] [:error] [pid 5958:tid 5979] [client 4.225.163.126:49589] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeE5ROopK-t1vpDHqQq2VQAAABA"]
[Fri Apr 17 03:32:22.108665 2026] [:error] [pid 6075:tid 6081] [client 4.225.163.126:48345] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeE5RpNVPFSfXfMu9CNBYgAAAMI"]
[Fri Apr 17 03:32:22.684425 2026] [:error] [pid 5959:tid 6003] [client 4.225.163.126:20238] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeE5Rhh6S7soyvWoUGMQNQAAAEw"]
[Fri Apr 17 03:32:23.562219 2026] [:error] [pid 6075:tid 6098] [client 4.225.163.126:49756] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeE5R5NVPFSfXfMu9CNBbAAAANM"]
[Fri Apr 17 03:32:24.473186 2026] [:error] [pid 6075:tid 6096] [client 4.225.163.126:49536] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeE5SJNVPFSfXfMu9CNBdwAAANE"]
[Fri Apr 17 03:32:25.149027 2026] [:error] [pid 6075:tid 6090] [client 4.225.163.126:12219] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeE5SZNVPFSfXfMu9CNBfgAAAMs"]
[Fri Apr 17 03:32:25.822353 2026] [:error] [pid 5960:tid 6034] [client 4.225.163.126:59572] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeE5SdAnsOizgdg2T5-PbwAAAJA"]
[Fri Apr 17 03:32:26.413693 2026] [:error] [pid 5959:tid 5992] [client 4.225.163.126:39880] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeE5Shh6S7soyvWoUGMQPgAAAEE"]
[Fri Apr 17 03:32:27.072139 2026] [:error] [pid 6075:tid 6100] [client 4.225.163.126:20263] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeE5S5NVPFSfXfMu9CNBiwAAANU"]
[Fri Apr 17 03:32:27.914927 2026] [:error] [pid 5959:tid 6007] [client 4.225.163.126:14420] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeE5Sxh6S7soyvWoUGMQQwAAAFA"]
[Fri Apr 17 03:32:29.029461 2026] [:error] [pid 5960:tid 6022] [client 4.225.163.126:48382] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeE5TdAnsOizgdg2T5-PdQAAAIQ"]
[Fri Apr 17 03:32:29.954987 2026] [:error] [pid 5959:tid 6006] [client 4.225.163.126:49791] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeE5TRh6S7soyvWoUGMQRwAAAE8"]
[Fri Apr 17 03:32:31.201631 2026] [:error] [pid 6075:tid 6082] [client 4.225.163.126:14415] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeE5T5NVPFSfXfMu9CNBoQAAAMM"]
[Fri Apr 17 03:32:32.034186 2026] [:error] [pid 5959:tid 5997] [client 4.225.163.126:20251] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeE5UBh6S7soyvWoUGMQSwAAAEY"]
[Fri Apr 17 03:32:32.869434 2026] [:error] [pid 5958:tid 5966] [client 4.225.163.126:20259] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeE5UOopK-t1vpDHqQq2ZQAAAAM"]
[Fri Apr 17 03:32:33.630975 2026] [:error] [pid 5960:tid 6042] [client 4.225.163.126:59582] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeE5UdAnsOizgdg2T5-PegAAAJg"]
[Fri Apr 17 03:32:48.868668 2026] [:error] [pid 43741:tid 43756] [client 4.225.163.126:12209] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/e7.php"] [unique_id "aeE5YDKdEhTezRa_qDE-UQAAAEU"]
[Fri Apr 17 03:32:51.130528 2026] [:error] [pid 43837:tid 43843] [client 4.225.163.126:24869] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/e7.php"] [unique_id "aeE5YwYd1hsOG9YcXIA1QQAAAMQ"]
[Fri Apr 17 03:32:52.447602 2026] [:error] [pid 43741:tid 43763] [client 4.225.163.126:24892] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/e7.php"] [unique_id "aeE5ZDKdEhTezRa_qDE-ZAAAAEw"]
[Fri Apr 17 03:32:54.305268 2026] [:error] [pid 43837:tid 43840] [client 4.225.163.126:49743] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/e7.php"] [unique_id "aeE5ZgYd1hsOG9YcXIA1UQAAAME"]
[Fri Apr 17 03:32:55.608991 2026] [:error] [pid 43837:tid 43848] [client 4.225.163.126:49769] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "aeE5ZwYd1hsOG9YcXIA1WQAAAMk"]
[Fri Apr 17 03:32:56.175649 2026] [:error] [pid 43740:tid 43780] [client 4.225.163.126:24839] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "aeE5aPeCQ2FKQU_hK5SegQAAAAI"]
[Fri Apr 17 03:32:56.972958 2026] [:error] [pid 43743:tid 43810] [client 4.225.163.126:58342] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "aeE5aGkwDSHwg5viI8irswAAAIU"]
[Fri Apr 17 03:32:57.588144 2026] [:error] [pid 43740:tid 43790] [client 4.225.163.126:59537] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "aeE5afeCQ2FKQU_hK5SejQAAAAw"]
[Fri Apr 17 03:32:58.279110 2026] [:error] [pid 43743:tid 43820] [client 4.225.163.126:49785] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "aeE5amkwDSHwg5viI8irugAAAI8"]
[Fri Apr 17 03:32:59.106812 2026] [:error] [pid 43743:tid 43823] [client 4.225.163.126:39925] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "aeE5a2kwDSHwg5viI8iruwAAAJI"]
[Fri Apr 17 03:33:00.251315 2026] [:error] [pid 43743:tid 43805] [client 4.225.163.126:14430] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "aeE5bGkwDSHwg5viI8irwQAAAIA"]
[Fri Apr 17 03:33:00.832341 2026] [:error] [pid 43740:tid 43779] [client 4.225.163.126:49587] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "aeE5bPeCQ2FKQU_hK5SemQAAAAE"]
[Fri Apr 17 03:33:01.438894 2026] [:error] [pid 43743:tid 43814] [client 4.225.163.126:49583] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeE5bWkwDSHwg5viI8irxwAAAIk"]
[Fri Apr 17 03:33:02.911796 2026] [:error] [pid 43741:tid 43752] [client 4.225.163.126:48330] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeE5bjKdEhTezRa_qDE-kQAAAEE"]
[Fri Apr 17 03:33:03.710937 2026] [:error] [pid 43743:tid 43819] [client 4.225.163.126:48374] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeE5b2kwDSHwg5viI8ir0gAAAI4"]
[Fri Apr 17 03:33:04.804418 2026] [:error] [pid 43743:tid 43810] [client 4.225.163.126:59549] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeE5cGkwDSHwg5viI8ir2gAAAIU"]
[Fri Apr 17 03:33:05.800294 2026] [:error] [pid 43741:tid 43766] [client 4.225.163.126:39888] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "aeE5cTKdEhTezRa_qDE-nAAAAE8"]
[Fri Apr 17 03:33:06.842710 2026] [:error] [pid 43743:tid 43821] [client 4.225.163.126:49763] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "aeE5cmkwDSHwg5viI8ir4wAAAJA"]
[Fri Apr 17 03:33:07.543577 2026] [:error] [pid 43741:tid 43769] [client 4.225.163.126:48355] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "aeE5czKdEhTezRa_qDE-ngAAAFI"]
[Fri Apr 17 03:33:08.543148 2026] [:error] [pid 43743:tid 43807] [client 4.225.163.126:20229] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "aeE5dGkwDSHwg5viI8ir5QAAAII"]
[Fri Apr 17 03:33:09.280328 2026] [:error] [pid 43741:tid 43764] [client 4.225.163.126:14408] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aeE5dTKdEhTezRa_qDE-oQAAAE0"]
[Fri Apr 17 03:33:10.130222 2026] [:error] [pid 43741:tid 43768] [client 4.225.163.126:48332] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aeE5djKdEhTezRa_qDE-ogAAAFE"]
[Fri Apr 17 03:33:10.951524 2026] [:error] [pid 43837:tid 43861] [client 4.225.163.126:48324] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aeE5dgYd1hsOG9YcXIA1cwAAANY"]
[Fri Apr 17 03:33:12.202813 2026] [:error] [pid 43837:tid 43843] [client 4.225.163.126:59523] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aeE5eAYd1hsOG9YcXIA1eQAAAMQ"]
[Fri Apr 17 03:33:12.945669 2026] [:error] [pid 43740:tid 43797] [client 4.225.163.126:14406] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/d.php"] [unique_id "aeE5ePeCQ2FKQU_hK5SeoQAAABM"]
[Fri Apr 17 03:33:14.222609 2026] [:error] [pid 43837:tid 43850] [client 4.225.163.126:20278] [client 4.225.163.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/d.php"] [unique_id "aeE5egYd1hsOG9YcXIA1fgAAAMs"]
[Fri Apr 17 03:33:15.324560 2026] [:error] [pid 43837:tid 43849] [client 4.225.163.126:24886] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Fri Apr 17 03:33:15.590111 2026] [:error] [pid 43837:tid 43853] [client 4.225.163.126:24886] File does not exist: /usr/local/apache/htdocs/suspended-page/error_log.php
[Fri Apr 17 03:33:16.147413 2026] [:error] [pid 43837:tid 43854] [client 4.225.163.126:24886] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Fri Apr 17 03:33:16.632122 2026] [:error] [pid 43837:tid 43854] [client 4.225.163.126:24886] File does not exist: /usr/local/apache/htdocs/suspended-page/curl.php
[Fri Apr 17 03:33:16.899710 2026] [:error] [pid 43837:tid 43860] [client 4.225.163.126:24886] File does not exist: /usr/local/apache/htdocs/suspended-page/sallu.php
[Fri Apr 17 03:33:17.165941 2026] [:error] [pid 43837:tid 43857] [client 4.225.163.126:24886] File does not exist: /usr/local/apache/htdocs/suspended-page/f6.php
[Fri Apr 17 03:33:17.434011 2026] [:error] [pid 43837:tid 43856] [client 4.225.163.126:24886] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Apr 17 03:33:17.701482 2026] [:error] [pid 43837:tid 43841] [client 4.225.163.126:24886] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri Apr 17 03:33:17.968151 2026] [:error] [pid 43837:tid 43842] [client 4.225.163.126:24886] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260325043000.php
[Fri Apr 17 03:33:18.239858 2026] [:error] [pid 43837:tid 43844] [client 4.225.163.126:24886] File does not exist: /usr/local/apache/htdocs/suspended-page/goods_260401065719.php
[Fri Apr 17 04:01:51.168721 2026] [:error] [pid 9152:tid 9211] [client 209.38.89.62:39632] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/install.php"] [unique_id "aeFAL5JYca8I3TNCwIfMcAAAAFU"]
[Fri Apr 17 04:01:51.322286 2026] [:error] [pid 9263:tid 9282] [client 209.38.89.62:39640] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp/wp-admin/install.php"] [unique_id "aeFALxP68VyHNvj1e56MNwAAANE"]
[Fri Apr 17 04:01:51.462975 2026] [:error] [pid 9263:tid 9285] [client 209.38.89.62:39656] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new/wp-admin/install.php"] [unique_id "aeFALxP68VyHNvj1e56MOAAAANQ"]
[Fri Apr 17 04:01:51.588074 2026] [:error] [pid 9152:tid 9195] [client 209.38.89.62:39664] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/old/wp-admin/install.php"] [unique_id "aeFAL5JYca8I3TNCwIfMcwAAAEU"]
[Fri Apr 17 04:01:51.728503 2026] [:error] [pid 9153:tid 9218] [client 209.38.89.62:39672] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wordpress/wp-admin/install.php"] [unique_id "aeFAL-MHGxkTZX3c45etUgAAAIA"]
[Fri Apr 17 04:01:51.912611 2026] [:error] [pid 9263:tid 9275] [client 209.38.89.62:39688] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-admin/install.php"] [unique_id "aeFALxP68VyHNvj1e56MOwAAAMo"]
[Fri Apr 17 04:01:52.078689 2026] [:error] [pid 9153:tid 9224] [client 209.38.89.62:39696] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blog/wp-admin/install.php"] [unique_id "aeFAMOMHGxkTZX3c45etUwAAAIY"]
[Fri Apr 17 04:01:52.162599 2026] [:error] [pid 9263:tid 9268] [client 209.38.89.62:39712] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-admin/install.php"] [unique_id "aeFAMBP68VyHNvj1e56MPAAAAMM"]
[Fri Apr 17 04:01:52.220155 2026] [:error] [pid 9263:tid 9289] [client 209.38.89.62:39726] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web/wp-admin/install.php"] [unique_id "aeFAMBP68VyHNvj1e56MPQAAANg"]
[Fri Apr 17 04:01:52.392417 2026] [:error] [pid 9152:tid 9212] [client 209.38.89.62:39734] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/backup/wp-admin/install.php"] [unique_id "aeFAMJJYca8I3TNCwIfMdAAAAFY"]
[Fri Apr 17 04:01:52.540989 2026] [:error] [pid 9152:tid 9206] [client 209.38.89.62:39748] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-admin/install.php"] [unique_id "aeFAMJJYca8I3TNCwIfMdgAAAFA"]
[Fri Apr 17 04:01:52.626225 2026] [:error] [pid 9152:tid 9208] [client 209.38.89.62:39760] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oldsite/wp-admin/install.php"] [unique_id "aeFAMJJYca8I3TNCwIfMeAAAAFI"]
[Fri Apr 17 04:01:52.706368 2026] [:error] [pid 9152:tid 9207] [client 209.38.89.62:39776] [client 209.38.89.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shop/wp-admin/install.php"] [unique_id "aeFAMJJYca8I3TNCwIfMeQAAAFE"]
[Fri Apr 17 06:26:35.008171 2026] [:error] [pid 9151:tid 9162] [client 168.197.92.40:47730] [client 168.197.92.40] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 168.197.92.40, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeFiG8hTVuRPkua22vSrVQAAAAE"]
[Fri Apr 17 06:26:35.013705 2026] [:error] [pid 9151:tid 9162] [client 168.197.92.40:47730] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 17 18:25:36.693393 2026] [:error] [pid 9153:tid 9240] [client 4.233.131.49:3392] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Fri Apr 17 18:25:36.990775 2026] [:error] [pid 9153:tid 9236] [client 4.233.131.49:3392] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri Apr 17 18:25:37.256678 2026] [:error] [pid 9153:tid 9242] [client 4.233.131.49:3392] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Apr 17 18:25:37.767361 2026] [:error] [pid 9153:tid 9233] [client 4.233.131.49:3392] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Apr 17 18:25:38.040193 2026] [:error] [pid 9153:tid 9230] [client 4.233.131.49:3392] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Fri Apr 17 18:25:38.593026 2026] [:error] [pid 9153:tid 9238] [client 4.233.131.49:3392] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Fri Apr 17 18:25:38.920451 2026] [:error] [pid 9153:tid 9227] [client 4.233.131.49:3392] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Fri Apr 17 18:25:39.186611 2026] [:error] [pid 9153:tid 9239] [client 4.233.131.49:3392] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri Apr 17 18:25:39.524119 2026] [:error] [pid 9153:tid 9234] [client 4.233.131.49:3392] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Fri Apr 17 18:25:39.798618 2026] [:error] [pid 9153:tid 9241] [client 4.233.131.49:3392] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeIKo-MHGxkTZX3c45fwyAAAAJc"]
[Fri Apr 17 18:25:40.520037 2026] [:error] [pid 51878:tid 51901] [client 4.233.131.49:3075] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeIKpEnQhUtMbw9EsgZOZQAAARU"]
[Fri Apr 17 18:25:41.423323 2026] [:error] [pid 51878:tid 51884] [client 4.233.131.49:3423] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeIKpUnQhUtMbw9EsgZOZwAAAQQ"]
[Fri Apr 17 18:25:42.233110 2026] [:error] [pid 61523:tid 61548] [client 4.233.131.49:3588] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeIKpsOaH-Pgc7WEf4OUSwAAAcY"]
[Fri Apr 17 18:25:42.786057 2026] [:error] [pid 61523:tid 61560] [client 4.233.131.49:3247] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeIKpsOaH-Pgc7WEf4OUTgAAAdI"]
[Fri Apr 17 18:25:43.325027 2026] [:error] [pid 61523:tid 61552] [client 4.233.131.49:3131] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeIKp8OaH-Pgc7WEf4OUUQAAAco"]
[Fri Apr 17 18:25:43.825183 2026] [:error] [pid 61523:tid 61562] [client 4.233.131.49:3500] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeIKp8OaH-Pgc7WEf4OUVAAAAdQ"]
[Fri Apr 17 18:25:44.561616 2026] [:error] [pid 25010:tid 25031] [client 4.233.131.49:3137] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeIKqI-7kkf42RarqQ1hhgAAAVI"]
[Fri Apr 17 18:25:45.101692 2026] [:error] [pid 25010:tid 25034] [client 4.233.131.49:3476] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeIKqY-7kkf42RarqQ1hiAAAAVU"]
[Fri Apr 17 18:25:45.622391 2026] [:error] [pid 34273:tid 34283] [client 4.233.131.49:45099] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeIKqWuQDW686mK3dgHprgAAAYg"]
[Fri Apr 17 18:25:46.449575 2026] [:error] [pid 9263:tid 9271] [client 4.233.131.49:45002] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeIKqhP68VyHNvj1e54N-gAAAMY"]
[Fri Apr 17 18:25:47.023331 2026] [:error] [pid 9151:tid 9171] [client 4.233.131.49:3129] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeIKq8hTVuRPkua22vQsigAAAAo"]
[Fri Apr 17 18:25:47.604843 2026] [:error] [pid 61523:tid 61548] [client 4.233.131.49:3196] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeIKq8OaH-Pgc7WEf4OUWQAAAcY"]
[Fri Apr 17 18:25:48.207526 2026] [:error] [pid 9263:tid 9282] [client 4.233.131.49:44992] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeIKrBP68VyHNvj1e54N_AAAANE"]
[Fri Apr 17 18:25:49.120880 2026] [:error] [pid 51878:tid 51896] [client 4.233.131.49:3119] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeIKrUnQhUtMbw9EsgZOawAAARA"]
[Fri Apr 17 18:25:49.703849 2026] [:error] [pid 34273:tid 34277] [client 4.233.131.49:45042] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeIKrWuQDW686mK3dgHpsQAAAYI"]
[Fri Apr 17 18:25:50.482662 2026] [:error] [pid 9263:tid 9278] [client 4.233.131.49:3141] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeIKrhP68VyHNvj1e54N_wAAAM0"]
[Fri Apr 17 18:25:51.058278 2026] [:error] [pid 9152:tid 9212] [client 4.233.131.49:3573] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeIKr5JYca8I3TNCwIc6GwAAAFY"]
[Fri Apr 17 18:25:51.838355 2026] [:error] [pid 9152:tid 9194] [client 4.233.131.49:3547] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeIKr5JYca8I3TNCwIc6HwAAAEQ"]
[Fri Apr 17 18:25:52.605018 2026] [:error] [pid 61523:tid 61543] [client 4.233.131.49:45018] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeIKsMOaH-Pgc7WEf4OUYQAAAcE"]
[Fri Apr 17 18:25:53.521611 2026] [:error] [pid 9151:tid 9179] [client 4.233.131.49:45080] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeIKschTVuRPkua22vQsjwAAABI"]
[Fri Apr 17 18:25:54.364143 2026] [:error] [pid 9152:tid 9201] [client 4.233.131.49:3861] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeIKspJYca8I3TNCwIc6JAAAAEs"]
[Fri Apr 17 18:25:54.926531 2026] [:error] [pid 9152:tid 9205] [client 4.233.131.49:3537] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeIKspJYca8I3TNCwIc6JwAAAE8"]
[Fri Apr 17 18:25:55.536695 2026] [:error] [pid 61523:tid 61547] [client 4.233.131.49:3597] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeIKs8OaH-Pgc7WEf4OUagAAAcU"]
[Fri Apr 17 18:25:56.169780 2026] [:error] [pid 9263:tid 9272] [client 4.233.131.49:3615] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeIKtBP68VyHNvj1e54OAgAAAMc"]
[Fri Apr 17 18:25:56.728427 2026] [:error] [pid 61523:tid 61559] [client 4.233.131.49:44998] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeIKtMOaH-Pgc7WEf4OUbwAAAdE"]
[Fri Apr 17 18:25:57.289982 2026] [:error] [pid 9263:tid 9277] [client 4.233.131.49:45025] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeIKtRP68VyHNvj1e54OBQAAAMw"]
[Fri Apr 17 18:25:58.091333 2026] [:error] [pid 9263:tid 9269] [client 4.233.131.49:45074] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeIKthP68VyHNvj1e54OCQAAAMQ"]
[Fri Apr 17 18:25:58.617283 2026] [:error] [pid 51878:tid 51895] [client 4.233.131.49:3621] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeIKtknQhUtMbw9EsgZObwAAAQ8"]
[Fri Apr 17 18:25:59.169946 2026] [:error] [pid 51878:tid 51882] [client 4.233.131.49:3076] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeIKt0nQhUtMbw9EsgZOcgAAAQI"]
[Fri Apr 17 18:25:59.720002 2026] [:error] [pid 34273:tid 34293] [client 4.233.131.49:3563] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeIKt2uQDW686mK3dgHptAAAAZI"]
[Fri Apr 17 18:26:00.314690 2026] [:error] [pid 34273:tid 34288] [client 4.233.131.49:3603] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeIKuGuQDW686mK3dgHptgAAAY0"]
[Fri Apr 17 18:26:00.878446 2026] [:error] [pid 51878:tid 51900] [client 4.233.131.49:3262] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "aeIKuEnQhUtMbw9EsgZOdAAAARQ"]
[Fri Apr 17 18:26:01.465787 2026] [:error] [pid 9263:tid 9286] [client 4.233.131.49:45052] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "aeIKuRP68VyHNvj1e54OCwAAANU"]
[Fri Apr 17 18:26:02.289390 2026] [:error] [pid 25010:tid 25023] [client 4.233.131.49:3488] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "aeIKuo-7kkf42RarqQ1hkAAAAUo"]
[Fri Apr 17 18:26:02.816859 2026] [:error] [pid 9153:tid 9237] [client 4.233.131.49:3598] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "aeIKuuMHGxkTZX3c45fwzAAAAJM"]
[Fri Apr 17 18:26:03.326018 2026] [:error] [pid 9153:tid 9232] [client 4.233.131.49:3555] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeIKu-MHGxkTZX3c45fwzQAAAI4"]
[Fri Apr 17 18:26:03.855978 2026] [:error] [pid 9153:tid 9228] [client 4.233.131.49:3607] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeIKu-MHGxkTZX3c45fwzgAAAIo"]
[Fri Apr 17 18:26:04.361105 2026] [:error] [pid 34273:tid 34292] [client 4.233.131.49:3599] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeIKvGuQDW686mK3dgHpuwAAAZE"]
[Fri Apr 17 18:26:04.830078 2026] [:error] [pid 9153:tid 9233] [client 4.233.131.49:3483] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeIKvOMHGxkTZX3c45fw0AAAAI8"]
[Fri Apr 17 18:26:05.533136 2026] [:error] [pid 9152:tid 9204] [client 4.233.131.49:44999] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeIKvZJYca8I3TNCwIc6MAAAAE4"]
[Fri Apr 17 18:26:06.830910 2026] [:error] [pid 9263:tid 9265] [client 4.233.131.49:45023] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeIKvhP68VyHNvj1e54ODQAAAMA"]
[Fri Apr 17 18:26:07.867987 2026] [:error] [pid 61523:tid 61544] [client 4.233.131.49:3160] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeIKv8OaH-Pgc7WEf4OUeQAAAcI"]
[Fri Apr 17 18:26:08.399914 2026] [:error] [pid 9152:tid 9207] [client 4.233.131.49:45053] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeIKwJJYca8I3TNCwIc6NQAAAFE"]
[Fri Apr 17 18:26:09.652327 2026] [:error] [pid 61523:tid 61566] [client 4.233.131.49:3327] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeIKwcOaH-Pgc7WEf4OUfAAAAdg"]
[Fri Apr 17 18:26:10.376082 2026] [:error] [pid 61523:tid 61556] [client 4.233.131.49:3304] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeIKwsOaH-Pgc7WEf4OUgAAAAc4"]
[Fri Apr 17 18:26:11.795333 2026] [:error] [pid 9153:tid 9220] [client 4.233.131.49:45005] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeIKw-MHGxkTZX3c45fw1AAAAII"]
[Fri Apr 17 18:26:12.878376 2026] [:error] [pid 61523:tid 61549] [client 4.233.131.49:3159] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeIKxMOaH-Pgc7WEf4OUhwAAAcc"]
[Fri Apr 17 18:26:13.852771 2026] [:error] [pid 51878:tid 51880] [client 4.233.131.49:45082] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeIKxUnQhUtMbw9EsgZOegAAAQA"]
[Fri Apr 17 18:26:14.659110 2026] [:error] [pid 61523:tid 61560] [client 4.233.131.49:3138] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeIKxsOaH-Pgc7WEf4OUjAAAAdI"]
[Fri Apr 17 18:26:15.355028 2026] [:error] [pid 51878:tid 51890] [client 4.233.131.49:3287] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeIKx0nQhUtMbw9EsgZOewAAAQo"]
[Fri Apr 17 18:26:16.344385 2026] [:error] [pid 61523:tid 61566] [client 4.233.131.49:45109] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeIKyMOaH-Pgc7WEf4OUkwAAAdg"]
[Fri Apr 17 18:26:16.866223 2026] [:error] [pid 9263:tid 9272] [client 4.233.131.49:45094] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeIKyBP68VyHNvj1e54OFQAAAMc"]
[Fri Apr 17 18:26:17.450772 2026] [:error] [pid 9263:tid 9275] [client 4.233.131.49:45443] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeIKyRP68VyHNvj1e54OFgAAAMo"]
[Fri Apr 17 18:26:18.188920 2026] [:error] [pid 51878:tid 51889] [client 4.233.131.49:3593] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeIKyknQhUtMbw9EsgZOfgAAAQk"]
[Fri Apr 17 18:26:18.806607 2026] [:error] [pid 51878:tid 51899] [client 4.233.131.49:3622] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeIKyknQhUtMbw9EsgZOfwAAARM"]
[Fri Apr 17 18:26:19.297763 2026] [:error] [pid 51878:tid 51898] [client 4.233.131.49:45058] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeIKy0nQhUtMbw9EsgZOgQAAARI"]
[Fri Apr 17 18:26:19.834247 2026] [:error] [pid 51878:tid 51885] [client 4.233.131.49:45463] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeIKy0nQhUtMbw9EsgZOgwAAAQU"]
[Fri Apr 17 18:26:20.713297 2026] [:error] [pid 9152:tid 9204] [client 4.233.131.49:3143] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeIKzJJYca8I3TNCwIc6PQAAAE4"]
[Fri Apr 17 18:26:21.319342 2026] [:error] [pid 25010:tid 25014] [client 4.233.131.49:45409] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeIKzY-7kkf42RarqQ1hkwAAAUE"]
[Fri Apr 17 18:26:21.832378 2026] [:error] [pid 51878:tid 51882] [client 4.233.131.49:3612] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeIKzUnQhUtMbw9EsgZOjQAAAQI"]
[Fri Apr 17 18:26:22.575780 2026] [:error] [pid 9152:tid 9193] [client 4.233.131.49:45402] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeIKzpJYca8I3TNCwIc6PgAAAEM"]
[Fri Apr 17 18:26:23.133474 2026] [:error] [pid 9263:tid 9286] [client 4.233.131.49:45461] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeIKzxP68VyHNvj1e54OHAAAANU"]
[Fri Apr 17 18:26:23.694563 2026] [:error] [pid 9263:tid 9270] [client 4.233.131.49:3261] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeIKzxP68VyHNvj1e54OHgAAAMU"]
[Fri Apr 17 18:26:24.322690 2026] [:error] [pid 9152:tid 9211] [client 4.233.131.49:45085] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeIK0JJYca8I3TNCwIc6QgAAAFU"]
[Fri Apr 17 18:26:25.103317 2026] [:error] [pid 9152:tid 9200] [client 4.233.131.49:3589] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeIK0ZJYca8I3TNCwIc6QwAAAEo"]
[Fri Apr 17 18:26:25.647128 2026] [:error] [pid 9152:tid 9201] [client 4.233.131.49:3157] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeIK0ZJYca8I3TNCwIc6RQAAAEs"]
[Fri Apr 17 18:26:26.226174 2026] [:error] [pid 61523:tid 61557] [client 4.233.131.49:32766] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeIK0sOaH-Pgc7WEf4OUnwAAAc8"]
[Fri Apr 17 18:26:26.763796 2026] [:error] [pid 9263:tid 9267] [client 4.233.131.49:45016] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeIK0hP68VyHNvj1e54OIAAAAMI"]
[Fri Apr 17 18:26:27.364479 2026] [:error] [pid 9152:tid 9209] [client 4.233.131.49:45035] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeIK05JYca8I3TNCwIc6SAAAAFM"]
[Fri Apr 17 18:26:27.923418 2026] [:error] [pid 9152:tid 9197] [client 4.233.131.49:45397] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeIK05JYca8I3TNCwIc6SQAAAEc"]
[Fri Apr 17 18:26:28.574634 2026] [:error] [pid 9263:tid 9274] [client 4.233.131.49:45087] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeIK1BP68VyHNvj1e54OJAAAAMk"]
[Fri Apr 17 18:26:29.185901 2026] [:error] [pid 34273:tid 34296] [client 4.233.131.49:3189] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeIK1WuQDW686mK3dgHpwQAAAZU"]
[Fri Apr 17 18:26:29.795784 2026] [:error] [pid 9263:tid 9279] [client 4.233.131.49:3144] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeIK1RP68VyHNvj1e54OJQAAAM4"]
[Fri Apr 17 18:26:30.361012 2026] [:error] [pid 9152:tid 9196] [client 4.233.131.49:45093] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeIK1pJYca8I3TNCwIc6VgAAAEY"]
[Fri Apr 17 18:26:30.831222 2026] [:error] [pid 9152:tid 9205] [client 4.233.131.49:3542] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeIK1pJYca8I3TNCwIc6WgAAAE8"]
[Fri Apr 17 18:26:31.513248 2026] [:error] [pid 9263:tid 9284] [client 4.233.131.49:3526] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeIK1xP68VyHNvj1e54OJwAAANM"]
[Fri Apr 17 18:26:32.161571 2026] [:error] [pid 9263:tid 9270] [client 4.233.131.49:3149] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeIK2BP68VyHNvj1e54OKQAAAMU"]
[Fri Apr 17 18:26:32.794964 2026] [:error] [pid 25010:tid 25025] [client 4.233.131.49:3193] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeIK2I-7kkf42RarqQ1hlQAAAUw"]
[Fri Apr 17 18:26:33.443541 2026] [:error] [pid 25010:tid 25029] [client 4.233.131.49:45378] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeIK2Y-7kkf42RarqQ1hlwAAAVA"]
[Fri Apr 17 18:26:34.121120 2026] [:error] [pid 34273:tid 34298] [client 4.233.131.49:45007] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeIK2muQDW686mK3dgHpyQAAAZc"]
[Fri Apr 17 18:26:34.857009 2026] [:error] [pid 9263:tid 9287] [client 4.233.131.49:3273] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeIK2hP68VyHNvj1e54OKgAAANY"]
[Fri Apr 17 18:26:35.498633 2026] [:error] [pid 34273:tid 34287] [client 4.233.131.49:45499] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeIK22uQDW686mK3dgHpzAAAAYw"]
[Fri Apr 17 18:26:36.145353 2026] [:error] [pid 9263:tid 9282] [client 4.233.131.49:3283] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeIK3BP68VyHNvj1e54OLgAAANE"]
[Fri Apr 17 18:26:36.921377 2026] [:error] [pid 51878:tid 51886] [client 4.233.131.49:3311] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeIK3EnQhUtMbw9EsgZOkQAAAQY"]
[Fri Apr 17 18:26:37.590902 2026] [:error] [pid 9153:tid 9239] [client 4.233.131.49:45386] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeIK3eMHGxkTZX3c45fw3AAAAJU"]
[Fri Apr 17 18:26:38.234010 2026] [:error] [pid 51878:tid 51890] [client 4.233.131.49:3570] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeIK3knQhUtMbw9EsgZOkgAAAQo"]
[Fri Apr 17 18:26:38.708333 2026] [:error] [pid 61523:tid 61550] [client 4.233.131.49:3562] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeIK3sOaH-Pgc7WEf4OUtQAAAcg"]
[Fri Apr 17 18:26:39.242397 2026] [:error] [pid 34273:tid 34279] [client 4.233.131.49:45498] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Fri Apr 17 18:26:39.486720 2026] [:error] [pid 34273:tid 34285] [client 4.233.131.49:45498] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Fri Apr 17 18:26:39.748092 2026] [:error] [pid 34273:tid 34292] [client 4.233.131.49:45498] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Fri Apr 17 18:26:40.004626 2026] [:error] [pid 34273:tid 34282] [client 4.233.131.49:45498] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Fri Apr 17 18:26:40.278937 2026] [:error] [pid 34273:tid 34297] [client 4.233.131.49:45498] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Fri Apr 17 18:26:41.059406 2026] [:error] [pid 34273:tid 34277] [client 4.233.131.49:45498] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Fri Apr 17 18:26:41.559114 2026] [:error] [pid 34273:tid 34281] [client 4.233.131.49:45498] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Fri Apr 17 18:26:41.798536 2026] [:error] [pid 34273:tid 34280] [client 4.233.131.49:45498] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 17 18:26:42.036090 2026] [:error] [pid 34273:tid 34290] [client 4.233.131.49:45498] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeIK4muQDW686mK3dgHp2wAAAY8"]
[Fri Apr 17 18:26:42.996201 2026] [:error] [pid 9151:tid 9180] [client 4.233.131.49:3576] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeIK4shTVuRPkua22vQslgAAABM"]
[Fri Apr 17 18:26:43.472649 2026] [:error] [pid 9152:tid 9199] [client 4.233.131.49:3293] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeIK45JYca8I3TNCwIc6YgAAAEk"]
[Fri Apr 17 18:26:44.078291 2026] [:error] [pid 34273:tid 34293] [client 4.233.131.49:3567] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeIK5GuQDW686mK3dgHp3AAAAZI"]
[Fri Apr 17 18:26:44.634131 2026] [:error] [pid 61523:tid 61547] [client 4.233.131.49:32764] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeIK5MOaH-Pgc7WEf4OUvwAAAcU"]
[Fri Apr 17 18:26:45.186625 2026] [:error] [pid 61523:tid 61546] [client 4.233.131.49:45024] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeIK5cOaH-Pgc7WEf4OUwQAAAcQ"]
[Fri Apr 17 18:26:45.815218 2026] [:error] [pid 34273:tid 34286] [client 4.233.131.49:45013] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeIK5WuQDW686mK3dgHp3QAAAYs"]
[Fri Apr 17 18:26:46.391386 2026] [:error] [pid 9152:tid 9202] [client 4.233.131.49:45000] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeIK5pJYca8I3TNCwIc6YwAAAEw"]
[Fri Apr 17 18:26:46.957729 2026] [:error] [pid 34273:tid 34288] [client 4.233.131.49:45775] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeIK5muQDW686mK3dgHp3gAAAY0"]
[Fri Apr 17 18:26:47.851819 2026] [:error] [pid 9153:tid 9233] [client 4.233.131.49:45379] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeIK5-MHGxkTZX3c45fw4gAAAI8"]
[Fri Apr 17 18:26:48.354569 2026] [:error] [pid 61523:tid 61558] [client 4.233.131.49:45437] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeIK6MOaH-Pgc7WEf4OUygAAAdA"]
[Fri Apr 17 18:26:48.867770 2026] [:error] [pid 25010:tid 25037] [client 4.233.131.49:3305] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeIK6I-7kkf42RarqQ1hnQAAAVg"]
[Fri Apr 17 18:26:49.379009 2026] [:error] [pid 25010:tid 25027] [client 4.233.131.49:45057] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeIK6Y-7kkf42RarqQ1hngAAAU4"]
[Fri Apr 17 18:26:50.078731 2026] [:error] [pid 34273:tid 34295] [client 4.233.131.49:3306] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeIK6muQDW686mK3dgHp3wAAAZQ"]
[Fri Apr 17 18:26:50.618459 2026] [:error] [pid 9153:tid 9230] [client 4.233.131.49:3301] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeIK6uMHGxkTZX3c45fw5gAAAIw"]
[Fri Apr 17 18:26:51.231251 2026] [:error] [pid 25010:tid 25031] [client 4.233.131.49:3487] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeIK64-7kkf42RarqQ1hogAAAVI"]
[Fri Apr 17 18:26:51.770453 2026] [:error] [pid 9153:tid 9229] [client 4.233.131.49:45867] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeIK6-MHGxkTZX3c45fw6QAAAIs"]
[Fri Apr 17 18:26:52.342385 2026] [:error] [pid 9153:tid 9225] [client 4.233.131.49:45859] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeIK7OMHGxkTZX3c45fw7QAAAIc"]
[Fri Apr 17 18:26:52.952913 2026] [:error] [pid 51878:tid 51887] [client 4.233.131.49:45440] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeIK7EnQhUtMbw9EsgZOngAAAQc"]
[Fri Apr 17 18:26:53.512544 2026] [:error] [pid 61523:tid 61543] [client 4.233.131.49:32713] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeIK7cOaH-Pgc7WEf4OU1wAAAcE"]
[Fri Apr 17 18:26:54.252790 2026] [:error] [pid 51878:tid 51883] [client 4.233.131.49:45419] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeIK7knQhUtMbw9EsgZOogAAAQM"]
[Fri Apr 17 18:26:54.772706 2026] [:error] [pid 9263:tid 9269] [client 4.233.131.49:3319] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeIK7hP68VyHNvj1e54ONQAAAMQ"]
[Fri Apr 17 18:26:55.322024 2026] [:error] [pid 51878:tid 51897] [client 4.233.131.49:45059] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeIK70nQhUtMbw9EsgZOpgAAARE"]
[Fri Apr 17 18:26:55.803806 2026] [:error] [pid 51878:tid 51884] [client 4.233.131.49:45095] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeIK70nQhUtMbw9EsgZOpwAAAQQ"]
[Fri Apr 17 18:26:56.621911 2026] [:error] [pid 61523:tid 61555] [client 4.233.131.49:45406] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeIK8MOaH-Pgc7WEf4OU2gAAAc0"]
[Fri Apr 17 18:26:57.202380 2026] [:error] [pid 9152:tid 9209] [client 4.233.131.49:32722] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeIK8ZJYca8I3TNCwIc6ZgAAAFM"]
[Fri Apr 17 18:26:57.703648 2026] [:error] [pid 9152:tid 9211] [client 4.233.131.49:45492] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeIK8ZJYca8I3TNCwIc6ZwAAAFU"]
[Fri Apr 17 18:26:58.610275 2026] [:error] [pid 51878:tid 51899] [client 4.233.131.49:45796] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeIK8knQhUtMbw9EsgZOqQAAARM"]
[Fri Apr 17 18:26:59.325310 2026] [:error] [pid 51878:tid 51898] [client 4.233.131.49:45442] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeIK80nQhUtMbw9EsgZOqgAAARI"]
[Fri Apr 17 18:27:00.291302 2026] [:error] [pid 9152:tid 9210] [client 4.233.131.49:45779] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeIK9JJYca8I3TNCwIc6agAAAFQ"]
[Fri Apr 17 18:27:00.880010 2026] [:error] [pid 9263:tid 9276] [client 4.233.131.49:3275] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeIK9BP68VyHNvj1e54OPQAAAMs"]
[Fri Apr 17 18:27:01.388881 2026] [:error] [pid 9263:tid 9272] [client 4.233.131.49:32742] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeIK9RP68VyHNvj1e54OPwAAAMc"]
[Fri Apr 17 18:27:01.946291 2026] [:error] [pid 9263:tid 9275] [client 4.233.131.49:45501] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeIK9RP68VyHNvj1e54OQQAAAMo"]
[Fri Apr 17 18:27:02.512366 2026] [:error] [pid 34273:tid 34287] [client 4.233.131.49:45497] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeIK9muQDW686mK3dgHp5wAAAYw"]
[Fri Apr 17 18:27:03.187897 2026] [:error] [pid 25010:tid 25023] [client 4.233.131.49:45404] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeIK94-7kkf42RarqQ1hqgAAAUo"]
[Fri Apr 17 18:27:03.806732 2026] [:error] [pid 34273:tid 34288] [client 4.233.131.49:3376] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeIK92uQDW686mK3dgHp6gAAAY0"]
[Fri Apr 17 18:27:04.633650 2026] [:error] [pid 9263:tid 9265] [client 4.233.131.49:45010] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeIK-BP68VyHNvj1e54ORQAAAMA"]
[Fri Apr 17 18:27:05.357017 2026] [:error] [pid 9263:tid 9267] [client 4.233.131.49:45500] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeIK-RP68VyHNvj1e54ORwAAAMI"]
[Fri Apr 17 18:27:06.843436 2026] [:error] [pid 61523:tid 61564] [client 4.233.131.49:45853] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeIK-sOaH-Pgc7WEf4OU4AAAAdY"]
[Fri Apr 17 18:27:08.438458 2026] [:error] [pid 61523:tid 61552] [client 4.233.131.49:3123] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeIK_MOaH-Pgc7WEf4OU5gAAAco"]
[Fri Apr 17 18:27:10.347471 2026] [:error] [pid 9151:tid 9183] [client 4.233.131.49:45393] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeIK_shTVuRPkua22vQspgAAABY"]
[Fri Apr 17 18:27:11.717797 2026] [:error] [pid 61523:tid 61545] [client 4.233.131.49:45478] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeIK_8OaH-Pgc7WEf4OU6wAAAcM"]
[Fri Apr 17 18:27:13.068469 2026] [:error] [pid 61523:tid 61547] [client 4.233.131.49:45399] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeILAcOaH-Pgc7WEf4OU7wAAAcU"]
[Fri Apr 17 18:27:13.882874 2026] [:error] [pid 61523:tid 61548] [client 4.233.131.49:3182] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeILAcOaH-Pgc7WEf4OU8AAAAcY"]
[Fri Apr 17 18:27:14.621559 2026] [:error] [pid 9153:tid 9241] [client 4.233.131.49:45882] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeILAuMHGxkTZX3c45fw8AAAAJc"]
[Fri Apr 17 18:27:15.203065 2026] [:error] [pid 25010:tid 25036] [client 4.233.131.49:3995] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeILA4-7kkf42RarqQ1hswAAAVc"]
[Fri Apr 17 18:27:15.974613 2026] [:error] [pid 25010:tid 25022] [client 4.233.131.49:45884] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeILA4-7kkf42RarqQ1htgAAAUk"]
[Fri Apr 17 18:27:16.925030 2026] [:error] [pid 9263:tid 9289] [client 4.233.131.49:45834] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeILBBP68VyHNvj1e54OTgAAANg"]
[Fri Apr 17 18:27:17.835394 2026] [:error] [pid 25010:tid 25019] [client 4.233.131.49:45415] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeILBY-7kkf42RarqQ1huAAAAUY"]
[Fri Apr 17 18:27:18.480287 2026] [:error] [pid 61523:tid 61547] [client 4.233.131.49:32765] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeILBsOaH-Pgc7WEf4OU9QAAAcU"]
[Fri Apr 17 18:27:19.209997 2026] [:error] [pid 51878:tid 51891] [client 4.233.131.49:45085] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeILB0nQhUtMbw9EsgZOrQAAAQs"]
[Fri Apr 17 18:27:19.827704 2026] [:error] [pid 9151:tid 9179] [client 4.233.131.49:45866] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeILB8hTVuRPkua22vQsqgAAABI"]
[Fri Apr 17 18:27:20.580208 2026] [:error] [pid 25010:tid 25027] [client 4.233.131.49:45799] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeILCI-7kkf42RarqQ1hugAAAU4"]
[Fri Apr 17 18:27:21.610275 2026] [:error] [pid 61523:tid 61562] [client 4.233.131.49:45446] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeILCcOaH-Pgc7WEf4OU-gAAAdQ"]
[Fri Apr 17 18:27:22.698774 2026] [:error] [pid 25010:tid 25014] [client 4.233.131.49:45061] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeILCo-7kkf42RarqQ1huwAAAUE"]
[Fri Apr 17 18:27:23.490312 2026] [:error] [pid 9151:tid 9163] [client 4.233.131.49:3327] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeILC8hTVuRPkua22vQsqwAAAAI"]
[Fri Apr 17 18:27:24.385307 2026] [:error] [pid 34273:tid 34281] [client 4.233.131.49:3671] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeILDGuQDW686mK3dgHp_QAAAYY"]
[Fri Apr 17 18:27:25.065092 2026] [:error] [pid 9151:tid 9173] [client 4.233.131.49:3968] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeILDchTVuRPkua22vQsrAAAAAw"]
[Fri Apr 17 18:27:25.722965 2026] [:error] [pid 61523:tid 61563] [client 4.233.131.49:4026] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeILDcOaH-Pgc7WEf4OVAAAAAdU"]
[Fri Apr 17 18:27:26.374594 2026] [:error] [pid 9152:tid 9193] [client 4.233.131.49:46197] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeILDpJYca8I3TNCwIc6bQAAAEM"]
[Fri Apr 17 18:27:27.156948 2026] [:error] [pid 9152:tid 9206] [client 4.233.131.49:45887] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeILD5JYca8I3TNCwIc6bwAAAFA"]
[Fri Apr 17 18:27:27.742386 2026] [:error] [pid 61523:tid 61566] [client 4.233.131.49:45826] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeILD8OaH-Pgc7WEf4OVBQAAAdg"]
[Fri Apr 17 18:27:28.732834 2026] [:error] [pid 61523:tid 61553] [client 4.233.131.49:3978] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeILEMOaH-Pgc7WEf4OVBwAAAcs"]
[Fri Apr 17 18:27:29.359578 2026] [:error] [pid 61523:tid 61561] [client 4.233.131.49:32386] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeILEcOaH-Pgc7WEf4OVCgAAAdM"]
[Fri Apr 17 18:27:30.082701 2026] [:error] [pid 61523:tid 61549] [client 4.233.131.49:45503] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeILEsOaH-Pgc7WEf4OVDQAAAcc"]
[Fri Apr 17 18:27:30.823031 2026] [:error] [pid 61523:tid 61548] [client 4.233.131.49:32421] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeILEsOaH-Pgc7WEf4OVDwAAAcY"]
[Fri Apr 17 18:27:31.542954 2026] [:error] [pid 51878:tid 51900] [client 4.233.131.49:46174] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeILE0nQhUtMbw9EsgZOugAAARQ"]
[Fri Apr 17 18:27:32.117534 2026] [:error] [pid 51878:tid 51894] [client 4.233.131.49:45441] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeILFEnQhUtMbw9EsgZOvQAAAQ4"]
[Fri Apr 17 18:27:32.689131 2026] [:error] [pid 9152:tid 9210] [client 4.233.131.49:45820] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeILFJJYca8I3TNCwIc6eAAAAFQ"]
[Fri Apr 17 18:27:33.297554 2026] [:error] [pid 9152:tid 9199] [client 4.233.131.49:32427] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeILFZJYca8I3TNCwIc6ewAAAEk"]
[Fri Apr 17 18:27:33.992381 2026] [:error] [pid 9152:tid 9203] [client 4.233.131.49:32394] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeILFZJYca8I3TNCwIc6fAAAAE0"]
[Fri Apr 17 18:27:34.737439 2026] [:error] [pid 9152:tid 9200] [client 4.233.131.49:45821] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeILFpJYca8I3TNCwIc6fwAAAEo"]
[Fri Apr 17 18:27:35.601524 2026] [:error] [pid 51878:tid 51884] [client 4.233.131.49:45801] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeILF0nQhUtMbw9EsgZOvgAAAQQ"]
[Fri Apr 17 18:27:36.216682 2026] [:error] [pid 9153:tid 9231] [client 4.233.131.49:45831] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeILGOMHGxkTZX3c45fw9AAAAI0"]
[Fri Apr 17 18:27:36.751754 2026] [:error] [pid 9153:tid 9223] [client 4.233.131.49:35454] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeILGOMHGxkTZX3c45fw9QAAAIU"]
[Fri Apr 17 18:27:37.661565 2026] [:error] [pid 9151:tid 9167] [client 4.233.131.49:3974] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeILGchTVuRPkua22vQsswAAAAY"]
[Fri Apr 17 18:27:38.422520 2026] [:error] [pid 61523:tid 61548] [client 4.233.131.49:35448] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeILGsOaH-Pgc7WEf4OVEgAAAcY"]
[Fri Apr 17 18:27:39.147564 2026] [:error] [pid 61523:tid 61557] [client 4.233.131.49:46202] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeILG8OaH-Pgc7WEf4OVEwAAAc8"]
[Fri Apr 17 18:27:39.672734 2026] [:error] [pid 61523:tid 61543] [client 4.233.131.49:45395] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeILG8OaH-Pgc7WEf4OVFAAAAcE"]
[Fri Apr 17 18:27:40.584478 2026] [:error] [pid 9152:tid 9213] [client 4.233.131.49:46269] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeILHJJYca8I3TNCwIc6kwAAAFc"]
[Fri Apr 17 18:27:41.375985 2026] [:error] [pid 34273:tid 34292] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Fri Apr 17 18:27:41.649283 2026] [:error] [pid 34273:tid 34298] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Fri Apr 17 18:27:41.922163 2026] [:error] [pid 34273:tid 34277] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Fri Apr 17 18:27:42.194143 2026] [:error] [pid 34273:tid 34280] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Fri Apr 17 18:27:42.467747 2026] [:error] [pid 34273:tid 34281] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Fri Apr 17 18:27:42.739739 2026] [:error] [pid 34273:tid 34291] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/yw5bi63u.php
[Fri Apr 17 18:27:43.052232 2026] [:error] [pid 34273:tid 34293] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Fri Apr 17 18:27:43.325470 2026] [:error] [pid 34273:tid 34283] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Fri Apr 17 18:27:43.597331 2026] [:error] [pid 34273:tid 34288] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Apr 17 18:27:43.870017 2026] [:error] [pid 34273:tid 34290] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Fri Apr 17 18:27:44.371328 2026] [:error] [pid 34273:tid 34286] [client 4.233.131.49:32736] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 17 18:27:44.642430 2026] [:error] [pid 34273:tid 34299] [client 4.233.131.49:32736] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeILIGuQDW686mK3dgHqEAAAAZg"]
[Fri Apr 17 18:27:45.248312 2026] [:error] [pid 9152:tid 9193] [client 4.233.131.49:3987] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeILIZJYca8I3TNCwIc6mAAAAEM"]
[Fri Apr 17 18:27:45.952590 2026] [:error] [pid 9152:tid 9203] [client 4.233.131.49:35306] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeILIZJYca8I3TNCwIc6mgAAAE0"]
[Fri Apr 17 18:27:46.739224 2026] [:error] [pid 9152:tid 9190] [client 4.233.131.49:46263] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeILIpJYca8I3TNCwIc6nAAAAEA"]
[Fri Apr 17 18:27:47.315886 2026] [:error] [pid 61523:tid 61561] [client 4.233.131.49:45812] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeILI8OaH-Pgc7WEf4OVHAAAAdM"]
[Fri Apr 17 18:27:47.863207 2026] [:error] [pid 9153:tid 9220] [client 4.233.131.49:35445] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeILI-MHGxkTZX3c45fw_AAAAII"]
[Fri Apr 17 18:27:48.340944 2026] [:error] [pid 61523:tid 61563] [client 4.233.131.49:31943] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeILJMOaH-Pgc7WEf4OVHgAAAdU"]
[Fri Apr 17 18:27:48.904906 2026] [:error] [pid 9263:tid 9269] [client 4.233.131.49:46151] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeILJBP68VyHNvj1e54OYQAAAMQ"]
[Fri Apr 17 18:27:49.502813 2026] [:error] [pid 25010:tid 25020] [client 4.233.131.49:31950] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeILJY-7kkf42RarqQ1hwgAAAUc"]
[Fri Apr 17 18:27:50.467321 2026] [:error] [pid 51878:tid 51897] [client 4.233.131.49:35295] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeILJknQhUtMbw9EsgZOxwAAARE"]
[Fri Apr 17 18:27:51.039549 2026] [:error] [pid 9153:tid 9223] [client 4.233.131.49:45847] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeILJ-MHGxkTZX3c45fxAAAAAIU"]
[Fri Apr 17 18:27:51.520931 2026] [:error] [pid 9151:tid 9167] [client 4.233.131.49:32399] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeILJ8hTVuRPkua22vQsvAAAAAY"]
[Fri Apr 17 18:27:52.104951 2026] [:error] [pid 9153:tid 9235] [client 4.233.131.49:46262] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "aeILKOMHGxkTZX3c45fxAwAAAJE"]
[Fri Apr 17 18:27:52.799033 2026] [:error] [pid 34273:tid 34284] [client 4.233.131.49:46246] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "aeILKGuQDW686mK3dgHqEgAAAYk"]
[Fri Apr 17 18:27:53.314659 2026] [:error] [pid 25010:tid 25027] [client 4.233.131.49:46158] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "aeILKY-7kkf42RarqQ1hxAAAAU4"]
[Fri Apr 17 18:27:53.793094 2026] [:error] [pid 9151:tid 9177] [client 4.233.131.49:3970] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "aeILKchTVuRPkua22vQsvgAAABA"]
[Fri Apr 17 18:27:54.304754 2026] [:error] [pid 25010:tid 25014] [client 4.233.131.49:35429] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hroxw.php"] [unique_id "aeILKo-7kkf42RarqQ1hxQAAAUE"]
[Fri Apr 17 18:27:54.900691 2026] [:error] [pid 9153:tid 9219] [client 4.233.131.49:35978] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hroxw.php"] [unique_id "aeILKuMHGxkTZX3c45fxBAAAAIE"]
[Fri Apr 17 18:27:55.504888 2026] [:error] [pid 34273:tid 34280] [client 4.233.131.49:46172] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hroxw.php"] [unique_id "aeILK2uQDW686mK3dgHqGAAAAYU"]
[Fri Apr 17 18:27:56.431140 2026] [:error] [pid 34273:tid 34293] [client 4.233.131.49:36025] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hroxw.php"] [unique_id "aeILLGuQDW686mK3dgHqGwAAAZI"]
[Fri Apr 17 18:27:56.968269 2026] [:error] [pid 51878:tid 51890] [client 4.233.131.49:36028] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeILLEnQhUtMbw9EsgZOzAAAAQo"]
[Fri Apr 17 18:27:57.608713 2026] [:error] [pid 9263:tid 9268] [client 4.233.131.49:31969] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeILLRP68VyHNvj1e54OZwAAAMM"]
[Fri Apr 17 18:27:58.187572 2026] [:error] [pid 51878:tid 51887] [client 4.233.131.49:46245] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeILLknQhUtMbw9EsgZOzgAAAQc"]
[Fri Apr 17 18:27:58.723107 2026] [:error] [pid 9153:tid 9227] [client 4.233.131.49:46687] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeILLuMHGxkTZX3c45fxCAAAAIk"]
[Fri Apr 17 18:27:59.276127 2026] [:error] [pid 9151:tid 9164] [client 4.233.131.49:46772] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeILL8hTVuRPkua22vQswQAAAAM"]
[Fri Apr 17 18:28:00.229821 2026] [:error] [pid 51878:tid 51901] [client 4.233.131.49:32435] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeILMEnQhUtMbw9EsgZO0gAAARU"]
[Fri Apr 17 18:28:00.855382 2026] [:error] [pid 9152:tid 9212] [client 4.233.131.49:35410] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeILMJJYca8I3TNCwIc6pAAAAFY"]
[Fri Apr 17 18:28:01.448405 2026] [:error] [pid 25010:tid 25022] [client 4.233.131.49:35288] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeILMY-7kkf42RarqQ1hywAAAUk"]
[Fri Apr 17 18:28:02.002017 2026] [:error] [pid 61523:tid 61566] [client 4.233.131.49:46674] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "aeILMsOaH-Pgc7WEf4OVJAAAAdg"]
[Fri Apr 17 18:28:02.836962 2026] [:error] [pid 9153:tid 9222] [client 4.233.131.49:35264] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "aeILMuMHGxkTZX3c45fxDQAAAIQ"]
[Fri Apr 17 18:28:03.622577 2026] [:error] [pid 9152:tid 9200] [client 4.233.131.49:36031] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "aeILM5JYca8I3TNCwIc6pwAAAEo"]
[Fri Apr 17 18:28:04.244396 2026] [:error] [pid 51878:tid 51892] [client 4.233.131.49:32812] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "aeILNEnQhUtMbw9EsgZO1AAAAQw"]
[Fri Apr 17 18:28:04.752497 2026] [:error] [pid 9151:tid 9161] [client 4.233.131.49:32349] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeILNMhTVuRPkua22vQsyAAAAAA"]
[Fri Apr 17 18:28:05.233659 2026] [:error] [pid 61523:tid 61561] [client 4.233.131.49:35324] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeILNcOaH-Pgc7WEf4OVJgAAAdM"]
[Fri Apr 17 18:28:05.789426 2026] [:error] [pid 9153:tid 9242] [client 4.233.131.49:36008] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeILNeMHGxkTZX3c45fxEgAAAJg"]
[Fri Apr 17 18:28:06.341759 2026] [:error] [pid 61523:tid 61550] [client 4.233.131.49:46771] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeILNsOaH-Pgc7WEf4OVKgAAAcg"]
[Fri Apr 17 18:28:06.839121 2026] [:error] [pid 9152:tid 9195] [client 4.233.131.49:46696] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeILNpJYca8I3TNCwIc6qgAAAEU"]
[Fri Apr 17 18:28:07.364052 2026] [:error] [pid 9153:tid 9230] [client 4.233.131.49:46708] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeILN-MHGxkTZX3c45fxFQAAAIw"]
[Fri Apr 17 18:28:12.896132 2026] [:error] [pid 61523:tid 61561] [client 4.233.131.49:46741] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeILPMOaH-Pgc7WEf4OVRgAAAdM"]
[Fri Apr 17 18:28:13.751965 2026] [:error] [pid 51878:tid 51880] [client 4.233.131.49:31261] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeILPUnQhUtMbw9EsgZO1wAAAQA"]
[Fri Apr 17 18:28:14.305060 2026] [:error] [pid 51878:tid 51885] [client 4.233.131.49:32335] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeILPknQhUtMbw9EsgZO3AAAAQU"]
[Fri Apr 17 18:28:14.869501 2026] [:error] [pid 51878:tid 51898] [client 4.233.131.49:35325] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeILPknQhUtMbw9EsgZO4QAAARI"]
[Fri Apr 17 18:28:15.453698 2026] [:error] [pid 25010:tid 25031] [client 4.233.131.49:46723] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeILP4-7kkf42RarqQ1h0AAAAVI"]
[Fri Apr 17 18:28:15.925803 2026] [:error] [pid 9153:tid 9237] [client 4.233.131.49:31285] [client 4.233.131.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeILP-MHGxkTZX3c45fxGgAAAJM"]
[Fri Apr 17 18:28:16.488973 2026] [:error] [pid 34273:tid 34298] [client 4.233.131.49:32354] [client 4.233.131.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aeILQGuQDW686mK3dgHqLQAAAZc"]
[Sat Apr 18 02:47:23.581718 2026] [:error] [pid 63702:tid 63746] [client 59.126.168.24:52622] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sat Apr 18 02:47:25.980316 2026] [:error] [pid 59136:tid 59162] [client 59.126.168.24:52680] File does not exist: /usr/local/apache/htdocs/suspended-page/luuf.php
[Sat Apr 18 11:14:45.100294 2026] [:error] [pid 34237:tid 34251] [client 20.166.51.62:35800] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat Apr 18 11:14:45.361109 2026] [:error] [pid 34237:tid 34255] [client 20.166.51.62:35800] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 18 11:14:45.637362 2026] [:error] [pid 34237:tid 34254] [client 20.166.51.62:35800] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Apr 18 11:14:45.889973 2026] [:error] [pid 34237:tid 34239] [client 20.166.51.62:35800] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Apr 18 11:14:46.180336 2026] [:error] [pid 34237:tid 34245] [client 20.166.51.62:35800] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sat Apr 18 11:14:46.687369 2026] [:error] [pid 34237:tid 34249] [client 20.166.51.62:35800] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Apr 18 11:14:46.940524 2026] [:error] [pid 34237:tid 34247] [client 20.166.51.62:35800] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Sat Apr 18 11:14:47.265341 2026] [:error] [pid 34237:tid 34263] [client 20.166.51.62:35800] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Apr 18 11:14:47.518393 2026] [:error] [pid 34237:tid 34240] [client 20.166.51.62:35800] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Sat Apr 18 11:14:47.767871 2026] [:error] [pid 34237:tid 34246] [client 20.166.51.62:35800] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeL3JxBmX4Wq5a6rxfYf7gAAAUc"]
[Sat Apr 18 11:14:48.379498 2026] [:error] [pid 34290:tid 34324] [client 20.166.51.62:35718] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeL3KBqX6WpmmAXOBi-ipwAAAcU"]
[Sat Apr 18 11:14:48.888766 2026] [:error] [pid 9864:tid 9929] [client 20.166.51.62:35816] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeL3KICFeowknfXHM7l4mwAAAFc"]
[Sat Apr 18 11:14:49.500272 2026] [:error] [pid 9864:tid 9914] [client 20.166.51.62:35728] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeL3KYCFeowknfXHM7l4nQAAAEg"]
[Sat Apr 18 11:14:50.112854 2026] [:error] [pid 9864:tid 9928] [client 20.166.51.62:35838] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeL3KoCFeowknfXHM7l4ngAAAFY"]
[Sat Apr 18 11:14:50.696351 2026] [:error] [pid 13023:tid 13039] [client 20.166.51.62:35827] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeL3Kv1e7hG8DAeABB-G_wAAAQ4"]
[Sat Apr 18 11:14:51.438105 2026] [:error] [pid 13023:tid 13026] [client 20.166.51.62:35819] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeL3K_1e7hG8DAeABB-HAwAAAQE"]
[Sat Apr 18 11:14:52.115169 2026] [:error] [pid 9865:tid 9950] [client 20.166.51.62:35821] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeL3LKzb5knECIY-C-gCxgAAAI0"]
[Sat Apr 18 11:14:52.990046 2026] [:error] [pid 9970:tid 9990] [client 20.166.51.62:35794] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeL3LCYdRLRhVmaIMx05_wAAANA"]
[Sat Apr 18 11:14:53.873200 2026] [:error] [pid 9865:tid 9958] [client 20.166.51.62:35722] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeL3Lazb5knECIY-C-gCywAAAJU"]
[Sat Apr 18 11:14:54.632252 2026] [:error] [pid 34290:tid 34320] [client 20.166.51.62:35755] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeL3LhqX6WpmmAXOBi-irQAAAcE"]
[Sat Apr 18 11:14:55.874433 2026] [:error] [pid 9863:tid 9873] [client 20.166.51.62:35739] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeL3LzjjiypiFrTucbJjjgAAAAA"]
[Sat Apr 18 11:14:56.727997 2026] [:error] [pid 9865:tid 9940] [client 20.166.51.62:35820] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeL3MKzb5knECIY-C-gC0AAAAIM"]
[Sat Apr 18 11:14:57.852952 2026] [:error] [pid 34290:tid 34341] [client 20.166.51.62:35734] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeL3MRqX6WpmmAXOBi-irwAAAdY"]
[Sat Apr 18 11:14:58.534358 2026] [:error] [pid 9865:tid 9952] [client 20.166.51.62:35837] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeL3Mqzb5knECIY-C-gC2gAAAI8"]
[Sat Apr 18 11:14:59.358490 2026] [:error] [pid 34288:tid 34297] [client 20.166.51.62:35714] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeL3M-TIiy__PtiLmpmE7gAAAYU"]
[Sat Apr 18 11:15:00.091667 2026] [:error] [pid 13023:tid 13029] [client 20.166.51.62:35810] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeL3NP1e7hG8DAeABB-HEwAAAQQ"]
[Sat Apr 18 11:15:00.905714 2026] [:error] [pid 9863:tid 9884] [client 20.166.51.62:35825] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeL3NDjjiypiFrTucbJjlAAAAAs"]
[Sat Apr 18 11:15:01.600860 2026] [:error] [pid 34290:tid 34324] [client 20.166.51.62:35719] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeL3NRqX6WpmmAXOBi-isAAAAcU"]
[Sat Apr 18 11:15:02.514819 2026] [:error] [pid 9863:tid 9882] [client 20.166.51.62:19362] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeL3NjjjiypiFrTucbJjmQAAAAk"]
[Sat Apr 18 11:15:03.317440 2026] [:error] [pid 9865:tid 9957] [client 20.166.51.62:35804] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeL3N6zb5knECIY-C-gC4gAAAJQ"]
[Sat Apr 18 11:15:03.947175 2026] [:error] [pid 9970:tid 9980] [client 20.166.51.62:35779] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeL3NyYdRLRhVmaIMx06CQAAAMY"]
[Sat Apr 18 11:15:04.678339 2026] [:error] [pid 9970:tid 9998] [client 20.166.51.62:35731] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeL3OCYdRLRhVmaIMx06CgAAANg"]
[Sat Apr 18 11:15:05.272655 2026] [:error] [pid 9864:tid 9924] [client 20.166.51.62:35818] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeL3OYCFeowknfXHM7l4sAAAAFI"]
[Sat Apr 18 11:15:05.834161 2026] [:error] [pid 9863:tid 9884] [client 20.166.51.62:35789] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeL3OTjjiypiFrTucbJjpQAAAAs"]
[Sat Apr 18 11:15:06.541452 2026] [:error] [pid 9865:tid 9952] [client 20.166.51.62:35815] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeL3Oqzb5knECIY-C-gC8QAAAI8"]
[Sat Apr 18 11:15:07.207441 2026] [:error] [pid 34290:tid 34331] [client 20.166.51.62:35823] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeL3OxqX6WpmmAXOBi-iswAAAcw"]
[Sat Apr 18 11:15:07.789037 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:35782] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeL3O6zb5knECIY-C-gC9wAAAIQ"]
[Sat Apr 18 11:15:08.394150 2026] [:error] [pid 9865:tid 9946] [client 20.166.51.62:35834] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeL3PKzb5knECIY-C-gC-gAAAIk"]
[Sat Apr 18 11:15:09.244677 2026] [:error] [pid 9865:tid 9957] [client 20.166.51.62:35824] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeL3Pazb5knECIY-C-gC_wAAAJQ"]
[Sat Apr 18 11:15:10.550876 2026] [:error] [pid 9865:tid 9951] [client 20.166.51.62:35741] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeL3Pqzb5knECIY-C-gDAwAAAI4"]
[Sat Apr 18 11:15:11.692547 2026] [:error] [pid 9970:tid 9995] [client 20.166.51.62:35715] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeL3PyYdRLRhVmaIMx06DwAAANU"]
[Sat Apr 18 11:15:12.497794 2026] [:error] [pid 34237:tid 34242] [client 20.166.51.62:35796] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "aeL3QBBmX4Wq5a6rxfYf_AAAAUM"]
[Sat Apr 18 11:15:13.275991 2026] [:error] [pid 34237:tid 34260] [client 20.166.51.62:35720] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "aeL3QRBmX4Wq5a6rxfYf_gAAAVU"]
[Sat Apr 18 11:15:13.984591 2026] [:error] [pid 34288:tid 34316] [client 20.166.51.62:35724] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "aeL3QeTIiy__PtiLmpmE-gAAAZg"]
[Sat Apr 18 11:15:14.611430 2026] [:error] [pid 34288:tid 34301] [client 20.166.51.62:19333] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blogs.php"] [unique_id "aeL3QuTIiy__PtiLmpmE_AAAAYk"]
[Sat Apr 18 11:15:15.477294 2026] [:error] [pid 9970:tid 9975] [client 20.166.51.62:35760] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeL3QyYdRLRhVmaIMx06FAAAAME"]
[Sat Apr 18 11:15:16.026878 2026] [:error] [pid 34237:tid 34253] [client 20.166.51.62:35832] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeL3RBBmX4Wq5a6rxfYgAgAAAU4"]
[Sat Apr 18 11:15:16.712524 2026] [:error] [pid 9865:tid 9956] [client 20.166.51.62:19332] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeL3RKzb5knECIY-C-gDDgAAAJM"]
[Sat Apr 18 11:15:17.565984 2026] [:error] [pid 9865:tid 9946] [client 20.166.51.62:19337] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeL3Razb5knECIY-C-gDEQAAAIk"]
[Sat Apr 18 11:15:18.207661 2026] [:error] [pid 9864:tid 9925] [client 20.166.51.62:35740] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeL3RoCFeowknfXHM7l4wQAAAFM"]
[Sat Apr 18 11:15:18.936584 2026] [:error] [pid 34288:tid 34311] [client 20.166.51.62:35806] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeL3RuTIiy__PtiLmpmFAwAAAZM"]
[Sat Apr 18 11:15:19.554471 2026] [:error] [pid 34288:tid 34313] [client 20.166.51.62:35805] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeL3R-TIiy__PtiLmpmFBQAAAZU"]
[Sat Apr 18 11:15:20.264295 2026] [:error] [pid 9864:tid 9916] [client 20.166.51.62:35817] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeL3SICFeowknfXHM7l4xgAAAEo"]
[Sat Apr 18 11:15:21.016542 2026] [:error] [pid 34237:tid 34250] [client 20.166.51.62:35830] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeL3SRBmX4Wq5a6rxfYgCAAAAUs"]
[Sat Apr 18 11:15:21.623583 2026] [:error] [pid 34237:tid 34255] [client 20.166.51.62:35839] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeL3SRBmX4Wq5a6rxfYgCgAAAVA"]
[Sat Apr 18 11:15:22.243500 2026] [:error] [pid 34288:tid 34307] [client 20.166.51.62:35732] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeL3SuTIiy__PtiLmpmFCwAAAY8"]
[Sat Apr 18 11:15:22.842497 2026] [:error] [pid 34290:tid 34329] [client 20.166.51.62:19335] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeL3ShqX6WpmmAXOBi-ivwAAAco"]
[Sat Apr 18 11:15:23.441849 2026] [:error] [pid 9970:tid 9992] [client 20.166.51.62:35783] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeL3SyYdRLRhVmaIMx06FgAAANI"]
[Sat Apr 18 11:15:24.065461 2026] [:error] [pid 9865:tid 9940] [client 20.166.51.62:35775] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeL3TKzb5knECIY-C-gDGgAAAIM"]
[Sat Apr 18 11:15:24.640531 2026] [:error] [pid 9865:tid 9949] [client 20.166.51.62:19355] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeL3TKzb5knECIY-C-gDHQAAAIw"]
[Sat Apr 18 11:15:25.389413 2026] [:error] [pid 13023:tid 13025] [client 20.166.51.62:35791] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeL3Tf1e7hG8DAeABB-HKgAAAQA"]
[Sat Apr 18 11:15:25.961772 2026] [:error] [pid 9864:tid 9913] [client 20.166.51.62:35738] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeL3TYCFeowknfXHM7l4yQAAAEc"]
[Sat Apr 18 11:15:27.672252 2026] [:error] [pid 9865:tid 9953] [client 20.166.51.62:35751] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeL3T6zb5knECIY-C-gDKQAAAJA"]
[Sat Apr 18 11:15:28.187099 2026] [:error] [pid 9865:tid 9957] [client 20.166.51.62:35833] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeL3UKzb5knECIY-C-gDLAAAAJQ"]
[Sat Apr 18 11:15:28.823728 2026] [:error] [pid 9865:tid 9951] [client 20.166.51.62:19343] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeL3UKzb5knECIY-C-gDMQAAAI4"]
[Sat Apr 18 11:15:29.495263 2026] [:error] [pid 9865:tid 9946] [client 20.166.51.62:35737] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeL3Uazb5knECIY-C-gDNQAAAIk"]
[Sat Apr 18 11:15:30.112015 2026] [:error] [pid 34288:tid 34316] [client 20.166.51.62:35730] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeL3UuTIiy__PtiLmpmFFgAAAZg"]
[Sat Apr 18 11:15:30.889767 2026] [:error] [pid 34288:tid 34302] [client 20.166.51.62:35747] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeL3UuTIiy__PtiLmpmFFwAAAYo"]
[Sat Apr 18 11:15:31.458821 2026] [:error] [pid 9863:tid 9887] [client 20.166.51.62:35767] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeL3UzjjiypiFrTucbJjvwAAAA4"]
[Sat Apr 18 11:15:32.060018 2026] [:error] [pid 34290:tid 34324] [client 20.166.51.62:35736] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeL3VBqX6WpmmAXOBi-i4QAAAcU"]
[Sat Apr 18 11:15:32.640537 2026] [:error] [pid 34290:tid 34333] [client 20.166.51.62:35802] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeL3VBqX6WpmmAXOBi-i4gAAAc4"]
[Sat Apr 18 11:15:33.212358 2026] [:error] [pid 9863:tid 9891] [client 20.166.51.62:35822] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeL3VTjjiypiFrTucbJjwQAAABI"]
[Sat Apr 18 11:15:33.823276 2026] [:error] [pid 34290:tid 34328] [client 20.166.51.62:35754] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeL3VRqX6WpmmAXOBi-i5QAAAck"]
[Sat Apr 18 11:15:34.385708 2026] [:error] [pid 9863:tid 9896] [client 20.166.51.62:35759] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeL3VjjjiypiFrTucbJjxAAAABc"]
[Sat Apr 18 11:15:34.910160 2026] [:error] [pid 9863:tid 9895] [client 20.166.51.62:35812] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeL3VjjjiypiFrTucbJjxQAAABY"]
[Sat Apr 18 11:15:35.502377 2026] [:error] [pid 9863:tid 9883] [client 20.166.51.62:35785] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeL3VzjjiypiFrTucbJjyAAAAAo"]
[Sat Apr 18 11:15:36.216494 2026] [:error] [pid 9865:tid 9943] [client 20.166.51.62:35778] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeL3WKzb5knECIY-C-gDRQAAAIY"]
[Sat Apr 18 11:15:36.786735 2026] [:error] [pid 9863:tid 9889] [client 20.166.51.62:35733] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeL3WDjjiypiFrTucbJjzgAAABA"]
[Sat Apr 18 11:15:37.457808 2026] [:error] [pid 9970:tid 9984] [client 20.166.51.62:19330] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeL3WSYdRLRhVmaIMx06HQAAAMo"]
[Sat Apr 18 11:15:38.078716 2026] [:error] [pid 34290:tid 34332] [client 20.166.51.62:35746] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeL3WhqX6WpmmAXOBi-i6gAAAc0"]
[Sat Apr 18 11:15:38.718650 2026] [:error] [pid 13023:tid 13043] [client 20.166.51.62:35790] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeL3Wv1e7hG8DAeABB-HOgAAARI"]
[Sat Apr 18 11:15:39.403351 2026] [:error] [pid 9863:tid 9881] [client 20.166.51.62:35743] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeL3WzjjiypiFrTucbJj4QAAAAg"]
[Sat Apr 18 11:15:39.996444 2026] [:error] [pid 9863:tid 9884] [client 20.166.51.62:35721] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeL3WzjjiypiFrTucbJj4gAAAAs"]
[Sat Apr 18 11:15:40.578048 2026] [:error] [pid 13023:tid 13040] [client 20.166.51.62:35748] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeL3XP1e7hG8DAeABB-HPgAAAQ8"]
[Sat Apr 18 11:15:41.216529 2026] [:error] [pid 34237:tid 34239] [client 20.166.51.62:35773] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeL3XRBmX4Wq5a6rxfYgRQAAAUA"]
[Sat Apr 18 11:15:41.807744 2026] [:error] [pid 9863:tid 9896] [client 20.166.51.62:35804] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeL3XTjjiypiFrTucbJj6AAAABc"]
[Sat Apr 18 11:15:42.456328 2026] [:error] [pid 13023:tid 13034] [client 20.166.51.62:19370] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeL3Xv1e7hG8DAeABB-HTAAAAQk"]
[Sat Apr 18 11:15:43.148322 2026] [:error] [pid 34288:tid 34292] [client 20.166.51.62:35768] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeL3X-TIiy__PtiLmpmFHQAAAYA"]
[Sat Apr 18 11:15:43.906078 2026] [:error] [pid 9863:tid 9877] [client 20.166.51.62:35836] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeL3XzjjiypiFrTucbJj-gAAAAQ"]
[Sat Apr 18 11:15:44.920963 2026] [:error] [pid 9863:tid 9874] [client 20.166.51.62:35753] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeL3YDjjiypiFrTucbJkBwAAAAE"]
[Sat Apr 18 11:15:46.020293 2026] [:error] [pid 13023:tid 13040] [client 20.166.51.62:19341] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeL3Yv1e7hG8DAeABB-HZQAAAQ8"]
[Sat Apr 18 11:15:47.261807 2026] [:error] [pid 9863:tid 9879] [client 20.166.51.62:19363] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sat Apr 18 11:15:47.514975 2026] [:error] [pid 9863:tid 9890] [client 20.166.51.62:19363] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Sat Apr 18 11:15:47.767633 2026] [:error] [pid 9863:tid 9884] [client 20.166.51.62:19363] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Sat Apr 18 11:15:48.040929 2026] [:error] [pid 9863:tid 9893] [client 20.166.51.62:19363] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Sat Apr 18 11:15:48.346829 2026] [:error] [pid 9863:tid 9892] [client 20.166.51.62:19363] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Apr 18 11:15:48.623702 2026] [:error] [pid 9863:tid 9886] [client 20.166.51.62:19363] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Apr 18 11:15:48.876521 2026] [:error] [pid 9863:tid 9875] [client 20.166.51.62:19363] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Sat Apr 18 11:15:49.666798 2026] [:error] [pid 9863:tid 9880] [client 20.166.51.62:19363] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sat Apr 18 11:15:50.169951 2026] [:error] [pid 9863:tid 9895] [client 20.166.51.62:19363] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "aeL3ZjjjiypiFrTucbJkLQAAABY"]
[Sat Apr 18 11:15:50.796758 2026] [:error] [pid 34290:tid 34343] [client 20.166.51.62:19286] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "aeL3ZhqX6WpmmAXOBi-i9QAAAdg"]
[Sat Apr 18 11:15:51.495135 2026] [:error] [pid 9863:tid 9893] [client 20.166.51.62:19348] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "aeL3ZzjjiypiFrTucbJkMAAAABQ"]
[Sat Apr 18 11:15:52.165543 2026] [:error] [pid 9863:tid 9886] [client 20.166.51.62:35788] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "aeL3aDjjiypiFrTucbJkMwAAAA0"]
[Sat Apr 18 11:15:52.850862 2026] [:error] [pid 9864:tid 9916] [client 20.166.51.62:35757] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeL3aICFeowknfXHM7l4_AAAAEo"]
[Sat Apr 18 11:15:53.441996 2026] [:error] [pid 13023:tid 13040] [client 20.166.51.62:19328] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeL3af1e7hG8DAeABB-HdAAAAQ8"]
[Sat Apr 18 11:15:54.381220 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:19328] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeL3aqzb5knECIY-C-gDgwAAAIQ"]
[Sat Apr 18 11:15:55.078345 2026] [:error] [pid 9863:tid 9897] [client 20.166.51.62:35766] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeL3azjjiypiFrTucbJkRwAAABg"]
[Sat Apr 18 11:15:55.941327 2026] [:error] [pid 9864:tid 9926] [client 20.166.51.62:35793] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeL3a4CFeowknfXHM7l5HAAAAFQ"]
[Sat Apr 18 11:15:56.638041 2026] [:error] [pid 13023:tid 13049] [client 20.166.51.62:35727] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeL3bP1e7hG8DAeABB-HfAAAARg"]
[Sat Apr 18 11:15:57.453175 2026] [:error] [pid 13023:tid 13028] [client 20.166.51.62:19384] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeL3bf1e7hG8DAeABB-HfgAAAQM"]
[Sat Apr 18 11:15:58.133552 2026] [:error] [pid 9863:tid 9890] [client 20.166.51.62:35763] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeL3bjjjiypiFrTucbJkVwAAABE"]
[Sat Apr 18 11:15:58.804772 2026] [:error] [pid 13023:tid 13043] [client 20.166.51.62:35716] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeL3bv1e7hG8DAeABB-HgAAAARI"]
[Sat Apr 18 11:15:59.334774 2026] [:error] [pid 34237:tid 34256] [client 20.166.51.62:19338] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeL3bxBmX4Wq5a6rxfYgSwAAAVE"]
[Sat Apr 18 11:16:00.008775 2026] [:error] [pid 9865:tid 9938] [client 20.166.51.62:19369] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeL3cKzb5knECIY-C-gDlgAAAIE"]
[Sat Apr 18 11:16:00.692552 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:19273] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeL3cKzb5knECIY-C-gDlwAAAIQ"]
[Sat Apr 18 11:16:01.323296 2026] [:error] [pid 9863:tid 9879] [client 20.166.51.62:35787] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeL3cTjjiypiFrTucbJkZAAAAAY"]
[Sat Apr 18 11:16:01.948158 2026] [:error] [pid 9970:tid 9978] [client 20.166.51.62:19321] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeL3cSYdRLRhVmaIMx06JgAAAMQ"]
[Sat Apr 18 11:16:02.554972 2026] [:error] [pid 9864:tid 9908] [client 20.166.51.62:19300] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeL3coCFeowknfXHM7l5MgAAAEM"]
[Sat Apr 18 11:16:03.140691 2026] [:error] [pid 9865:tid 9944] [client 20.166.51.62:35803] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeL3c6zb5knECIY-C-gDngAAAIc"]
[Sat Apr 18 11:16:03.743088 2026] [:error] [pid 9970:tid 9997] [client 20.166.51.62:35797] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeL3cyYdRLRhVmaIMx06JwAAANc"]
[Sat Apr 18 11:16:04.297094 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:35717] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeL3dKzb5knECIY-C-gDowAAAIQ"]
[Sat Apr 18 11:16:04.982976 2026] [:error] [pid 9970:tid 9975] [client 20.166.51.62:35723] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeL3dCYdRLRhVmaIMx06KAAAAME"]
[Sat Apr 18 11:16:05.612036 2026] [:error] [pid 9970:tid 9980] [client 20.166.51.62:19377] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeL3dSYdRLRhVmaIMx06LQAAAMY"]
[Sat Apr 18 11:16:06.194539 2026] [:error] [pid 9863:tid 9879] [client 20.166.51.62:19360] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeL3djjjiypiFrTucbJkbAAAAAY"]
[Sat Apr 18 11:16:06.830555 2026] [:error] [pid 13023:tid 13039] [client 20.166.51.62:19289] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeL3dv1e7hG8DAeABB-HjwAAAQ4"]
[Sat Apr 18 11:16:07.477822 2026] [:error] [pid 34290:tid 34335] [client 20.166.51.62:19315] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeL3dxqX6WpmmAXOBi-i_wAAAdA"]
[Sat Apr 18 11:16:08.064723 2026] [:error] [pid 9865:tid 9960] [client 20.166.51.62:35771] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeL3eKzb5knECIY-C-gDtQAAAJc"]
[Sat Apr 18 11:16:08.585594 2026] [:error] [pid 34290:tid 34319] [client 20.166.51.62:35831] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeL3eBqX6WpmmAXOBi-jAQAAAcA"]
[Sat Apr 18 11:16:09.241811 2026] [:error] [pid 34290:tid 34331] [client 20.166.51.62:35774] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeL3eRqX6WpmmAXOBi-jBAAAAcw"]
[Sat Apr 18 11:16:09.759904 2026] [:error] [pid 34290:tid 34326] [client 20.166.51.62:35809] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeL3eRqX6WpmmAXOBi-jBgAAAcc"]
[Sat Apr 18 11:16:10.477513 2026] [:error] [pid 34290:tid 34334] [client 20.166.51.62:35807] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeL3ehqX6WpmmAXOBi-jCQAAAc8"]
[Sat Apr 18 11:16:11.005047 2026] [:error] [pid 9970:tid 9986] [client 20.166.51.62:35765] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeL3eyYdRLRhVmaIMx06QQAAAMw"]
[Sat Apr 18 11:16:11.547667 2026] [:error] [pid 9970:tid 9991] [client 20.166.51.62:19386] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeL3eyYdRLRhVmaIMx06QgAAANE"]
[Sat Apr 18 11:16:12.127341 2026] [:error] [pid 34237:tid 34249] [client 20.166.51.62:35758] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeL3fBBmX4Wq5a6rxfYgZAAAAUo"]
[Sat Apr 18 11:16:12.756590 2026] [:error] [pid 9863:tid 9896] [client 20.166.51.62:19374] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeL3fDjjiypiFrTucbJkdAAAABc"]
[Sat Apr 18 11:16:13.379794 2026] [:error] [pid 34290:tid 34337] [client 20.166.51.62:35750] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeL3fRqX6WpmmAXOBi-jDwAAAdI"]
[Sat Apr 18 11:16:13.943095 2026] [:error] [pid 13023:tid 13037] [client 20.166.51.62:35798] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeL3ff1e7hG8DAeABB-HmQAAAQw"]
[Sat Apr 18 11:16:14.597182 2026] [:error] [pid 13023:tid 13025] [client 20.166.51.62:19390] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeL3fv1e7hG8DAeABB-HnAAAAQA"]
[Sat Apr 18 11:16:15.138732 2026] [:error] [pid 9864:tid 9925] [client 20.166.51.62:35725] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeL3f4CFeowknfXHM7l5QQAAAFM"]
[Sat Apr 18 11:16:15.742077 2026] [:error] [pid 9865:tid 9951] [client 20.166.51.62:35814] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeL3f6zb5knECIY-C-gDuwAAAI4"]
[Sat Apr 18 11:16:16.340201 2026] [:error] [pid 9863:tid 9894] [client 20.166.51.62:19334] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeL3gDjjiypiFrTucbJkeAAAABU"]
[Sat Apr 18 11:16:16.965277 2026] [:error] [pid 9863:tid 9873] [client 20.166.51.62:19351] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeL3gDjjiypiFrTucbJkfAAAAAA"]
[Sat Apr 18 11:16:17.485589 2026] [:error] [pid 9863:tid 9876] [client 20.166.51.62:35769] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeL3gTjjiypiFrTucbJkgAAAAAM"]
[Sat Apr 18 11:16:18.031040 2026] [:error] [pid 13023:tid 13038] [client 20.166.51.62:19328] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeL3gv1e7hG8DAeABB-HogAAAQ0"]
[Sat Apr 18 11:16:18.691997 2026] [:error] [pid 9865:tid 9945] [client 20.166.51.62:35799] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeL3gqzb5knECIY-C-gDwQAAAIg"]
[Sat Apr 18 11:16:19.237824 2026] [:error] [pid 34237:tid 34260] [client 20.166.51.62:19383] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeL3gxBmX4Wq5a6rxfYgagAAAVU"]
[Sat Apr 18 11:16:19.817100 2026] [:error] [pid 9864:tid 9905] [client 20.166.51.62:35726] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeL3g4CFeowknfXHM7l5RQAAAEA"]
[Sat Apr 18 11:16:20.388074 2026] [:error] [pid 34288:tid 34295] [client 20.166.51.62:19288] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeL3hOTIiy__PtiLmpmFOAAAAYM"]
[Sat Apr 18 11:16:20.933705 2026] [:error] [pid 13023:tid 13041] [client 20.166.51.62:19323] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeL3hP1e7hG8DAeABB-HxAAAARA"]
[Sat Apr 18 11:16:21.591492 2026] [:error] [pid 9864:tid 9906] [client 20.166.51.62:19213] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeL3hYCFeowknfXHM7l5SgAAAEE"]
[Sat Apr 18 11:16:22.299756 2026] [:error] [pid 34237:tid 34250] [client 20.166.51.62:19220] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeL3hhBmX4Wq5a6rxfYgawAAAUs"]
[Sat Apr 18 11:16:22.963496 2026] [:error] [pid 13023:tid 13027] [client 20.166.51.62:35772] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeL3hv1e7hG8DAeABB-HyQAAAQI"]
[Sat Apr 18 11:16:23.529818 2026] [:error] [pid 9863:tid 9888] [client 20.166.51.62:19336] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeL3hzjjiypiFrTucbJkogAAAA8"]
[Sat Apr 18 11:16:24.061715 2026] [:error] [pid 34288:tid 34314] [client 20.166.51.62:35792] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeL3iOTIiy__PtiLmpmFPAAAAZY"]
[Sat Apr 18 11:16:24.633291 2026] [:error] [pid 13023:tid 13030] [client 20.166.51.62:35795] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeL3iP1e7hG8DAeABB-HzAAAAQU"]
[Sat Apr 18 11:16:25.281839 2026] [:error] [pid 34290:tid 34321] [client 20.166.51.62:19282] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeL3iRqX6WpmmAXOBi-jGAAAAcI"]
[Sat Apr 18 11:16:25.822445 2026] [:error] [pid 9863:tid 9879] [client 20.166.51.62:35792] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeL3iTjjiypiFrTucbJkpQAAAAY"]
[Sat Apr 18 11:16:26.411864 2026] [:error] [pid 9865:tid 9944] [client 20.166.51.62:19345] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeL3iqzb5knECIY-C-gDzAAAAIc"]
[Sat Apr 18 11:16:27.004462 2026] [:error] [pid 9970:tid 9982] [client 20.166.51.62:19361] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeL3iyYdRLRhVmaIMx06XwAAAMg"]
[Sat Apr 18 11:16:27.596729 2026] [:error] [pid 34237:tid 34263] [client 20.166.51.62:19353] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeL3ixBmX4Wq5a6rxfYgdQAAAVg"]
[Sat Apr 18 11:16:28.168989 2026] [:error] [pid 9864:tid 9930] [client 20.166.51.62:19298] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeL3jICFeowknfXHM7l5UgAAAFg"]
[Sat Apr 18 11:16:28.734558 2026] [:error] [pid 34237:tid 34254] [client 20.166.51.62:19391] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeL3jBBmX4Wq5a6rxfYgeQAAAU8"]
[Sat Apr 18 11:16:29.349181 2026] [:error] [pid 34290:tid 34329] [client 20.166.51.62:19342] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeL3jRqX6WpmmAXOBi-jHQAAAco"]
[Sat Apr 18 11:16:29.943445 2026] [:error] [pid 9864:tid 9930] [client 20.166.51.62:19349] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeL3jYCFeowknfXHM7l5YgAAAFg"]
[Sat Apr 18 11:16:30.558062 2026] [:error] [pid 9863:tid 9877] [client 20.166.51.62:35780] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeL3jjjjiypiFrTucbJkqwAAAAQ"]
[Sat Apr 18 11:16:31.311764 2026] [:error] [pid 9863:tid 9885] [client 20.166.51.62:35826] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeL3jzjjiypiFrTucbJkrAAAAAw"]
[Sat Apr 18 11:16:31.998550 2026] [:error] [pid 13023:tid 13028] [client 20.166.51.62:19367] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeL3j_1e7hG8DAeABB-H0gAAAQM"]
[Sat Apr 18 11:16:32.648100 2026] [:error] [pid 34237:tid 34241] [client 20.166.51.62:19283] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeL3kBBmX4Wq5a6rxfYgfAAAAUI"]
[Sat Apr 18 11:16:33.448530 2026] [:error] [pid 34288:tid 34293] [client 20.166.51.62:35729] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeL3keTIiy__PtiLmpmFQQAAAYE"]
[Sat Apr 18 11:16:34.078002 2026] [:error] [pid 9970:tid 9998] [client 20.166.51.62:19359] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeL3kiYdRLRhVmaIMx06YQAAANg"]
[Sat Apr 18 11:16:34.673806 2026] [:error] [pid 13023:tid 13034] [client 20.166.51.62:35770] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeL3kv1e7hG8DAeABB-H2QAAAQk"]
[Sat Apr 18 11:16:35.214850 2026] [:error] [pid 9864:tid 9924] [client 20.166.51.62:35755] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeL3k4CFeowknfXHM7l5cwAAAFI"]
[Sat Apr 18 11:16:35.758145 2026] [:error] [pid 9863:tid 9895] [client 20.166.51.62:19272] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeL3kzjjiypiFrTucbJkvAAAABY"]
[Sat Apr 18 11:16:36.352361 2026] [:error] [pid 9864:tid 9913] [client 20.166.51.62:19373] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeL3lICFeowknfXHM7l5eAAAAEc"]
[Sat Apr 18 11:16:37.042333 2026] [:error] [pid 9864:tid 9918] [client 20.166.51.62:19346] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeL3lYCFeowknfXHM7l5fAAAAEw"]
[Sat Apr 18 11:16:37.677347 2026] [:error] [pid 9863:tid 9887] [client 20.166.51.62:19312] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeL3lTjjiypiFrTucbJkxQAAAA4"]
[Sat Apr 18 11:16:38.305160 2026] [:error] [pid 9864:tid 9925] [client 20.166.51.62:19226] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeL3loCFeowknfXHM7l5ggAAAFM"]
[Sat Apr 18 11:16:39.964679 2026] [:error] [pid 9863:tid 9877] [client 20.166.51.62:19285] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeL3lzjjiypiFrTucbJk0wAAAAQ"]
[Sat Apr 18 11:16:40.598285 2026] [:error] [pid 34237:tid 34260] [client 20.166.51.62:35712] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeL3mBBmX4Wq5a6rxfYghAAAAVU"]
[Sat Apr 18 11:16:41.170179 2026] [:error] [pid 13023:tid 13034] [client 20.166.51.62:19376] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeL3mf1e7hG8DAeABB-H5AAAAQk"]
[Sat Apr 18 11:16:41.872125 2026] [:error] [pid 9865:tid 9956] [client 20.166.51.62:19294] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeL3mazb5knECIY-C-gD1gAAAJM"]
[Sat Apr 18 11:16:42.443935 2026] [:error] [pid 9865:tid 9944] [client 20.166.51.62:19356] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeL3mqzb5knECIY-C-gD2AAAAIc"]
[Sat Apr 18 11:16:42.997769 2026] [:error] [pid 9970:tid 9981] [client 20.166.51.62:35745] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeL3miYdRLRhVmaIMx06ZQAAAMc"]
[Sat Apr 18 11:16:43.597794 2026] [:error] [pid 9864:tid 9926] [client 20.166.51.62:19274] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeL3m4CFeowknfXHM7l5lgAAAFQ"]
[Sat Apr 18 11:16:44.278247 2026] [:error] [pid 9864:tid 9921] [client 20.166.51.62:19269] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeL3nICFeowknfXHM7l5mwAAAE8"]
[Sat Apr 18 11:16:44.860051 2026] [:error] [pid 9864:tid 9906] [client 20.166.51.62:19372] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeL3nICFeowknfXHM7l5nwAAAEE"]
[Sat Apr 18 11:16:45.422964 2026] [:error] [pid 34288:tid 34314] [client 20.166.51.62:19364] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeL3neTIiy__PtiLmpmFRgAAAZY"]
[Sat Apr 18 11:16:45.938869 2026] [:error] [pid 13023:tid 13043] [client 20.166.51.62:35761] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeL3nf1e7hG8DAeABB-H8wAAARI"]
[Sat Apr 18 11:16:46.527560 2026] [:error] [pid 9970:tid 9978] [client 20.166.51.62:19292] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeL3niYdRLRhVmaIMx06agAAAMQ"]
[Sat Apr 18 11:16:47.422638 2026] [:error] [pid 9863:tid 9884] [client 20.166.51.62:35752] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeL3nzjjiypiFrTucbJk5QAAAAs"]
[Sat Apr 18 11:16:48.115286 2026] [:error] [pid 9865:tid 9958] [client 20.166.51.62:19308] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeL3oKzb5knECIY-C-gD4QAAAJU"]
[Sat Apr 18 11:16:48.975968 2026] [:error] [pid 9863:tid 9894] [client 20.166.51.62:35713] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "aeL3oDjjiypiFrTucbJk6wAAABU"]
[Sat Apr 18 11:16:49.975848 2026] [:error] [pid 9865:tid 9960] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sat Apr 18 11:16:50.374976 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Sat Apr 18 11:16:50.659979 2026] [:error] [pid 9865:tid 9953] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/tt.php
[Sat Apr 18 11:16:50.928540 2026] [:error] [pid 9865:tid 9940] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Sat Apr 18 11:16:51.205767 2026] [:error] [pid 9865:tid 9954] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/yw5bi63u.php
[Sat Apr 18 11:16:51.507786 2026] [:error] [pid 9865:tid 9951] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Apr 18 11:16:51.796169 2026] [:error] [pid 9865:tid 9959] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Sat Apr 18 11:16:52.064250 2026] [:error] [pid 9865:tid 9957] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat Apr 18 11:16:52.332713 2026] [:error] [pid 9865:tid 9952] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sat Apr 18 11:16:52.602498 2026] [:error] [pid 9865:tid 9958] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sat Apr 18 11:16:52.871059 2026] [:error] [pid 9865:tid 9960] [client 20.166.51.62:19375] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Sat Apr 18 11:16:53.137474 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:19375] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeL3pazb5knECIY-C-gD-wAAAIQ"]
[Sat Apr 18 11:16:53.991390 2026] [:error] [pid 13023:tid 13039] [client 20.166.51.62:35776] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeL3pf1e7hG8DAeABB-IDgAAAQ4"]
[Sat Apr 18 11:16:54.861685 2026] [:error] [pid 34290:tid 34338] [client 20.166.51.62:19311] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeL3phqX6WpmmAXOBi-jNQAAAdM"]
[Sat Apr 18 11:16:56.395605 2026] [:error] [pid 9864:tid 9925] [client 20.166.51.62:19381] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeL3qICFeowknfXHM7l5qgAAAFM"]
[Sat Apr 18 11:16:57.053417 2026] [:error] [pid 9864:tid 9921] [client 20.166.51.62:19378] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeL3qYCFeowknfXHM7l5rQAAAE8"]
[Sat Apr 18 11:16:57.670465 2026] [:error] [pid 9864:tid 9906] [client 20.166.51.62:35835] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeL3qYCFeowknfXHM7l5sQAAAEE"]
[Sat Apr 18 11:16:58.294700 2026] [:error] [pid 9863:tid 9874] [client 20.166.51.62:19259] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeL3qjjjiypiFrTucbJlKgAAAAE"]
[Sat Apr 18 11:16:58.962449 2026] [:error] [pid 34288:tid 34294] [client 20.166.51.62:19371] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeL3quTIiy__PtiLmpmFUwAAAYI"]
[Sat Apr 18 11:16:59.570496 2026] [:error] [pid 9865:tid 9938] [client 20.166.51.62:19287] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "aeL3q6zb5knECIY-C-gEHAAAAIE"]
[Sat Apr 18 11:17:00.243266 2026] [:error] [pid 13023:tid 13045] [client 20.166.51.62:19331] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "aeL3rP1e7hG8DAeABB-IGAAAARQ"]
[Sat Apr 18 11:17:00.833164 2026] [:error] [pid 9863:tid 9893] [client 20.166.51.62:35786] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "aeL3rDjjiypiFrTucbJlMgAAABQ"]
[Sat Apr 18 11:17:01.539414 2026] [:error] [pid 34237:tid 34260] [client 20.166.51.62:35828] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/set.php"] [unique_id "aeL3rRBmX4Wq5a6rxfYgkgAAAVU"]
[Sat Apr 18 11:17:02.192613 2026] [:error] [pid 34237:tid 34254] [client 20.166.51.62:19224] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hroxw.php"] [unique_id "aeL3rhBmX4Wq5a6rxfYgkwAAAU8"]
[Sat Apr 18 11:17:02.840071 2026] [:error] [pid 34237:tid 34252] [client 20.166.51.62:19306] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hroxw.php"] [unique_id "aeL3rhBmX4Wq5a6rxfYglAAAAU0"]
[Sat Apr 18 11:17:03.752880 2026] [:error] [pid 9865:tid 9957] [client 20.166.51.62:35829] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hroxw.php"] [unique_id "aeL3r6zb5knECIY-C-gENAAAAJQ"]
[Sat Apr 18 11:17:04.364232 2026] [:error] [pid 9865:tid 9948] [client 20.166.51.62:19387] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hroxw.php"] [unique_id "aeL3sKzb5knECIY-C-gEOQAAAIs"]
[Sat Apr 18 11:17:05.102734 2026] [:error] [pid 34237:tid 34246] [client 20.166.51.62:19382] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeL3sRBmX4Wq5a6rxfYgmAAAAUc"]
[Sat Apr 18 11:17:05.725183 2026] [:error] [pid 34288:tid 34294] [client 20.166.51.62:19320] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeL3seTIiy__PtiLmpmFXwAAAYI"]
[Sat Apr 18 11:17:06.380973 2026] [:error] [pid 34237:tid 34258] [client 20.166.51.62:19317] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeL3shBmX4Wq5a6rxfYgmgAAAVM"]
[Sat Apr 18 11:17:06.999487 2026] [:error] [pid 9863:tid 9876] [client 20.166.51.62:19329] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeL3sjjjiypiFrTucbJlPAAAAAM"]
[Sat Apr 18 11:17:07.646677 2026] [:error] [pid 9864:tid 9928] [client 20.166.51.62:19290] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeL3s4CFeowknfXHM7l57AAAAFY"]
[Sat Apr 18 11:17:08.386021 2026] [:error] [pid 9865:tid 9961] [client 20.166.51.62:35808] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeL3tKzb5knECIY-C-gEVQAAAJg"]
[Sat Apr 18 11:17:08.998259 2026] [:error] [pid 9863:tid 9880] [client 20.166.51.62:35813] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeL3tDjjiypiFrTucbJlQgAAAAc"]
[Sat Apr 18 11:17:09.681180 2026] [:error] [pid 9863:tid 9895] [client 20.166.51.62:19304] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeL3tTjjiypiFrTucbJlSQAAABY"]
[Sat Apr 18 11:17:10.398874 2026] [:error] [pid 34290:tid 34326] [client 20.166.51.62:19322] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "aeL3thqX6WpmmAXOBi-jOAAAAcc"]
[Sat Apr 18 11:17:11.094799 2026] [:error] [pid 9865:tid 9944] [client 20.166.51.62:19277] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "aeL3t6zb5knECIY-C-gEYAAAAIc"]
[Sat Apr 18 11:17:11.688958 2026] [:error] [pid 9864:tid 9910] [client 20.166.51.62:19366] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "aeL3t4CFeowknfXHM7l58AAAAEU"]
[Sat Apr 18 11:17:12.571989 2026] [:error] [pid 34237:tid 34257] [client 20.166.51.62:19271] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gaza.php"] [unique_id "aeL3uBBmX4Wq5a6rxfYgpQAAAVI"]
[Sat Apr 18 11:17:13.251743 2026] [:error] [pid 34237:tid 34252] [client 20.166.51.62:19350] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeL3uRBmX4Wq5a6rxfYgpwAAAU0"]
[Sat Apr 18 11:17:13.942182 2026] [:error] [pid 9864:tid 9928] [client 20.166.51.62:19340] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeL3uYCFeowknfXHM7l59QAAAFY"]
[Sat Apr 18 11:17:14.543030 2026] [:error] [pid 9863:tid 9887] [client 20.166.51.62:35744] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeL3ujjjiypiFrTucbJlXAAAAA4"]
[Sat Apr 18 11:17:15.110328 2026] [:error] [pid 9864:tid 9917] [client 20.166.51.62:19295] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeL3u4CFeowknfXHM7l5-AAAAEs"]
[Sat Apr 18 11:17:16.117379 2026] [:error] [pid 9970:tid 9988] [client 20.166.51.62:19257] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeL3vCYdRLRhVmaIMx06eAAAAM4"]
[Sat Apr 18 11:17:16.642502 2026] [:error] [pid 9970:tid 9985] [client 20.166.51.62:19326] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeL3vCYdRLRhVmaIMx06egAAAMs"]
[Sat Apr 18 11:17:17.241511 2026] [:error] [pid 9863:tid 9886] [client 20.166.51.62:19324] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeL3vTjjiypiFrTucbJlZgAAAA0"]
[Sat Apr 18 11:17:17.838114 2026] [:error] [pid 9863:tid 9894] [client 20.166.51.62:19229] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeL3vTjjiypiFrTucbJlawAAABU"]
[Sat Apr 18 11:17:18.544335 2026] [:error] [pid 9863:tid 9897] [client 20.166.51.62:19264] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeL3vjjjiypiFrTucbJldQAAABg"]
[Sat Apr 18 11:17:19.072077 2026] [:error] [pid 9863:tid 9893] [client 20.166.51.62:19220] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeL3vzjjiypiFrTucbJleQAAABQ"]
[Sat Apr 18 11:17:19.609001 2026] [:error] [pid 9863:tid 9894] [client 20.166.51.62:35742] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeL3vzjjiypiFrTucbJliAAAABU"]
[Sat Apr 18 11:17:20.187315 2026] [:error] [pid 9864:tid 9917] [client 20.166.51.62:35811] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeL3wICFeowknfXHM7l6AwAAAEs"]
[Sat Apr 18 11:17:20.801936 2026] [:error] [pid 9864:tid 9929] [client 20.166.51.62:19379] [client 20.166.51.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aeL3wICFeowknfXHM7l6BQAAAFc"]
[Sat Apr 18 11:38:50.310167 2026] [:error] [pid 9865:tid 9948] [client 98.63.65.249:7425] [client 98.63.65.249] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 98.63.65.249, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeL8yqzb5knECIY-C-gL7AAAAIs"]
[Sat Apr 18 11:38:50.318286 2026] [:error] [pid 9865:tid 9948] [client 98.63.65.249:7425] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 18 12:22:37.873367 2026] [:error] [pid 9863:tid 9895] [client 172.213.226.43:17771] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Apr 18 12:22:38.134290 2026] [:error] [pid 9863:tid 9892] [client 172.213.226.43:17771] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat Apr 18 12:22:38.370320 2026] [:error] [pid 9863:tid 9880] [client 172.213.226.43:17771] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Apr 18 12:22:38.609541 2026] [:error] [pid 9863:tid 9897] [client 172.213.226.43:17771] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Sat Apr 18 12:22:38.905155 2026] [:error] [pid 9863:tid 9882] [client 172.213.226.43:17771] File does not exist: /usr/local/apache/htdocs/suspended-page/Geforce.php
[Sat Apr 18 12:22:39.147942 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:17771] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sat Apr 18 12:22:41.366484 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:17771] File does not exist: /usr/local/apache/htdocs/suspended-page/xs.php
[Sat Apr 18 12:22:41.642776 2026] [:error] [pid 9863:tid 9875] [client 172.213.226.43:17771] File does not exist: /usr/local/apache/htdocs/suspended-page/son1.php
[Sat Apr 18 12:22:41.875509 2026] [:error] [pid 9863:tid 9897] [client 172.213.226.43:17771] [client 172.213.226.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeMHETjjiypiFrTucbKD9AAAABg"]
[Sat Apr 18 12:22:42.499693 2026] [:error] [pid 9865:tid 9961] [client 172.213.226.43:17737] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Sat Apr 18 12:22:42.795782 2026] [:error] [pid 9865:tid 9957] [client 172.213.226.43:17737] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Sat Apr 18 12:22:43.036113 2026] [:error] [pid 9865:tid 9954] [client 172.213.226.43:17737] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeMHE6zb5knECIY-C-gXQgAAAJE"]
[Sat Apr 18 12:22:43.617044 2026] [:error] [pid 9863:tid 9881] [client 172.213.226.43:65092] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeMHEzjjiypiFrTucbKEAwAAAAg"]
[Sat Apr 18 12:22:44.168395 2026] [:error] [pid 9863:tid 9887] [client 172.213.226.43:17735] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeMHFDjjiypiFrTucbKEBAAAAA4"]
[Sat Apr 18 12:22:44.798210 2026] [:error] [pid 9970:tid 9991] [client 172.213.226.43:17738] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ng.php"] [unique_id "aeMHFCYdRLRhVmaIMx1O-QAAANE"]
[Sat Apr 18 12:22:45.425330 2026] [:error] [pid 9865:tid 9951] [client 172.213.226.43:17750] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeMHFazb5knECIY-C-gXRQAAAI4"]
[Sat Apr 18 12:22:46.217002 2026] [:error] [pid 9864:tid 9919] [client 172.213.226.43:22527] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeMHFoCFeowknfXHM7mUCgAAAE0"]
[Sat Apr 18 12:22:47.236209 2026] [:error] [pid 9864:tid 9909] [client 172.213.226.43:65077] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeMHF4CFeowknfXHM7mUEAAAAEQ"]
[Sat Apr 18 12:22:47.921540 2026] [:error] [pid 9863:tid 9890] [client 172.213.226.43:22493] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny2.php"] [unique_id "aeMHFzjjiypiFrTucbKECgAAABE"]
[Sat Apr 18 12:22:49.024875 2026] [:error] [pid 9865:tid 9950] [client 172.213.226.43:17789] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeMHGazb5knECIY-C-gXRwAAAI0"]
[Sat Apr 18 12:22:49.760599 2026] [:error] [pid 9865:tid 9948] [client 172.213.226.43:17780] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeMHGazb5knECIY-C-gXSQAAAIs"]
[Sat Apr 18 12:22:50.321892 2026] [:error] [pid 9865:tid 9947] [client 172.213.226.43:17732] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeMHGqzb5knECIY-C-gXSgAAAIo"]
[Sat Apr 18 12:22:51.087263 2026] [:error] [pid 9865:tid 9940] [client 172.213.226.43:22526] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/state.php"] [unique_id "aeMHG6zb5knECIY-C-gXTwAAAIM"]
[Sat Apr 18 12:22:51.776361 2026] [:error] [pid 9865:tid 9944] [client 172.213.226.43:65142] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeMHG6zb5knECIY-C-gXUwAAAIc"]
[Sat Apr 18 12:22:52.537896 2026] [:error] [pid 9863:tid 9879] [client 172.213.226.43:65033] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeMHHDjjiypiFrTucbKEEAAAAAY"]
[Sat Apr 18 12:22:53.089052 2026] [:error] [pid 13023:tid 13042] [client 172.213.226.43:65087] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeMHHf1e7hG8DAeABB-hfgAAARE"]
[Sat Apr 18 12:22:53.699826 2026] [:error] [pid 9863:tid 9892] [client 172.213.226.43:65038] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeMHHTjjiypiFrTucbKEEgAAABM"]
[Sat Apr 18 12:22:54.472342 2026] [:error] [pid 9863:tid 9875] [client 172.213.226.43:65071] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeMHHjjjiypiFrTucbKEHAAAAAI"]
[Sat Apr 18 12:22:55.144376 2026] [:error] [pid 9863:tid 9895] [client 172.213.226.43:22523] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeMHHzjjiypiFrTucbKEIgAAABY"]
[Sat Apr 18 12:22:55.711533 2026] [:error] [pid 9970:tid 9989] [client 172.213.226.43:22467] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeMHHyYdRLRhVmaIMx1O_QAAAM8"]
[Sat Apr 18 12:22:56.317527 2026] [:error] [pid 9865:tid 9943] [client 172.213.226.43:17790] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wps.php"] [unique_id "aeMHIKzb5knECIY-C-gXVwAAAIY"]
[Sat Apr 18 12:22:56.903831 2026] [:error] [pid 34288:tid 34303] [client 172.213.226.43:17768] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeMHIOTIiy__PtiLmpmSfAAAAYs"]
[Sat Apr 18 12:22:57.406484 2026] [:error] [pid 9863:tid 9876] [client 172.213.226.43:65123] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeMHITjjiypiFrTucbKEKQAAAAM"]
[Sat Apr 18 12:22:57.905307 2026] [:error] [pid 9863:tid 9894] [client 172.213.226.43:65085] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeMHITjjiypiFrTucbKEQwAAABU"]
[Sat Apr 18 12:22:58.515806 2026] [:error] [pid 34237:tid 34258] [client 172.213.226.43:65110] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeMHIhBmX4Wq5a6rxfYo2wAAAVM"]
[Sat Apr 18 12:22:59.150706 2026] [:error] [pid 13023:tid 13040] [client 172.213.226.43:64544] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeMHI_1e7hG8DAeABB-higAAAQ8"]
[Sat Apr 18 12:22:59.839349 2026] [:error] [pid 9865:tid 9957] [client 172.213.226.43:65034] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeMHI6zb5knECIY-C-gXWQAAAJQ"]
[Sat Apr 18 12:23:00.419021 2026] [:error] [pid 9970:tid 9996] [client 172.213.226.43:65079] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeMHJCYdRLRhVmaIMx1PAgAAANY"]
[Sat Apr 18 12:23:00.967173 2026] [:error] [pid 9863:tid 9887] [client 172.213.226.43:22481] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "aeMHJDjjiypiFrTucbKEeAAAAA4"]
[Sat Apr 18 12:23:01.660298 2026] [:error] [pid 34237:tid 34245] [client 172.213.226.43:65039] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeMHJRBmX4Wq5a6rxfYo5AAAAUY"]
[Sat Apr 18 12:23:02.253748 2026] [:error] [pid 9864:tid 9919] [client 172.213.226.43:65109] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeMHJoCFeowknfXHM7mUIwAAAE0"]
[Sat Apr 18 12:23:02.739835 2026] [:error] [pid 9864:tid 9910] [client 172.213.226.43:17746] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeMHJoCFeowknfXHM7mUKgAAAEU"]
[Sat Apr 18 12:23:03.401176 2026] [:error] [pid 9864:tid 9928] [client 172.213.226.43:64625] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "aeMHJ4CFeowknfXHM7mULgAAAFY"]
[Sat Apr 18 12:23:03.997487 2026] [:error] [pid 34288:tid 34312] [client 172.213.226.43:65031] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeMHJ-TIiy__PtiLmpmSlQAAAZQ"]
[Sat Apr 18 12:23:04.515897 2026] [:error] [pid 34288:tid 34302] [client 172.213.226.43:65146] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeMHKOTIiy__PtiLmpmSlgAAAYo"]
[Sat Apr 18 12:23:05.016363 2026] [:error] [pid 9865:tid 9942] [client 172.213.226.43:17765] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeMHKazb5knECIY-C-gXXAAAAIU"]
[Sat Apr 18 12:23:05.646869 2026] [:error] [pid 34288:tid 34304] [client 172.213.226.43:64553] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeMHKeTIiy__PtiLmpmSmQAAAYw"]
[Sat Apr 18 12:23:06.342928 2026] [:error] [pid 9863:tid 9885] [client 172.213.226.43:65093] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeMHKjjjiypiFrTucbKEegAAAAw"]
[Sat Apr 18 12:23:06.990673 2026] [:error] [pid 34288:tid 34295] [client 172.213.226.43:65149] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeMHKuTIiy__PtiLmpmSmwAAAYM"]
[Sat Apr 18 12:23:07.751472 2026] [:error] [pid 13023:tid 13033] [client 172.213.226.43:22468] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeMHK_1e7hG8DAeABB-hjgAAAQg"]
[Sat Apr 18 12:23:08.310604 2026] [:error] [pid 34288:tid 34315] [client 172.213.226.43:65061] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeMHLOTIiy__PtiLmpmSnAAAAZc"]
[Sat Apr 18 12:23:08.862448 2026] [:error] [pid 9863:tid 9890] [client 172.213.226.43:22472] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeMHLDjjiypiFrTucbKEfgAAABE"]
[Sat Apr 18 12:23:09.448212 2026] [:error] [pid 34290:tid 34330] [client 172.213.226.43:65051] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeMHLRqX6WpmmAXOBi-v2wAAAcs"]
[Sat Apr 18 12:23:09.939628 2026] [:error] [pid 9863:tid 9884] [client 172.213.226.43:22499] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeMHLTjjiypiFrTucbKEhAAAAAs"]
[Sat Apr 18 12:23:10.419430 2026] [:error] [pid 9863:tid 9892] [client 172.213.226.43:17782] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeMHLjjjiypiFrTucbKEhwAAABM"]
[Sat Apr 18 12:23:10.900506 2026] [:error] [pid 9863:tid 9891] [client 172.213.226.43:64517] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeMHLjjjiypiFrTucbKEiwAAABI"]
[Sat Apr 18 12:23:11.423186 2026] [:error] [pid 34288:tid 34296] [client 172.213.226.43:22473] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeMHL-TIiy__PtiLmpmSngAAAYQ"]
[Sat Apr 18 12:23:11.917315 2026] [:error] [pid 13023:tid 13025] [client 172.213.226.43:65100] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeMHL_1e7hG8DAeABB-hkQAAAQA"]
[Sat Apr 18 12:23:12.440157 2026] [:error] [pid 34288:tid 34312] [client 172.213.226.43:65082] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeMHMOTIiy__PtiLmpmSnwAAAZQ"]
[Sat Apr 18 12:23:13.090030 2026] [:error] [pid 9863:tid 9879] [client 172.213.226.43:65088] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeMHMTjjiypiFrTucbKEjwAAAAY"]
[Sat Apr 18 12:23:13.743169 2026] [:error] [pid 9863:tid 9892] [client 172.213.226.43:65043] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeMHMTjjiypiFrTucbKEkgAAABM"]
[Sat Apr 18 12:23:14.228805 2026] [:error] [pid 13023:tid 13047] [client 172.213.226.43:64578] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeMHMv1e7hG8DAeABB-hlwAAARY"]
[Sat Apr 18 12:23:14.719915 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:65151] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gecko.php"] [unique_id "aeMHMjjjiypiFrTucbKElgAAAAo"]
[Sat Apr 18 12:23:15.234391 2026] [:error] [pid 9863:tid 9896] [client 172.213.226.43:22514] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny"] [unique_id "aeMHMzjjiypiFrTucbKEmAAAABc"]
[Sat Apr 18 12:23:15.711365 2026] [:error] [pid 34288:tid 34304] [client 172.213.226.43:22500] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny"] [unique_id "aeMHM-TIiy__PtiLmpmSoQAAAYw"]
[Sat Apr 18 12:23:16.256970 2026] [:error] [pid 9970:tid 9978] [client 172.213.226.43:17731] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny"] [unique_id "aeMHNCYdRLRhVmaIMx1PGAAAAMQ"]
[Sat Apr 18 12:23:16.748082 2026] [:error] [pid 9863:tid 9887] [client 172.213.226.43:65127] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny"] [unique_id "aeMHNDjjiypiFrTucbKEpAAAAA4"]
[Sat Apr 18 12:23:17.290955 2026] [:error] [pid 34237:tid 34244] [client 172.213.226.43:65076] [client 172.213.226.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "aeMHNRBmX4Wq5a6rxfYo6AAAAUU"]
[Sat Apr 18 12:23:17.795861 2026] [:error] [pid 34290:tid 34332] [client 172.213.226.43:17783] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeMHNRqX6WpmmAXOBi-v3AAAAc0"]
[Sat Apr 18 12:23:18.322077 2026] [:error] [pid 9863:tid 9878] [client 172.213.226.43:17747] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeMHNjjjiypiFrTucbKEqgAAAAU"]
[Sat Apr 18 12:23:18.831406 2026] [:error] [pid 9863:tid 9874] [client 172.213.226.43:65042] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "aeMHNjjjiypiFrTucbKErgAAAAE"]
[Sat Apr 18 12:23:19.451918 2026] [:error] [pid 9863:tid 9881] [client 172.213.226.43:17760] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-image.php"] [unique_id "aeMHNzjjiypiFrTucbKEtAAAAAg"]
[Sat Apr 18 12:23:20.198364 2026] [:error] [pid 9863:tid 9876] [client 172.213.226.43:64086] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-image.php"] [unique_id "aeMHODjjiypiFrTucbKEvQAAAAM"]
[Sat Apr 18 12:23:20.756514 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:17767] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-image.php"] [unique_id "aeMHODjjiypiFrTucbKEwgAAAAo"]
[Sat Apr 18 12:23:21.376615 2026] [:error] [pid 9864:tid 9917] [client 172.213.226.43:65107] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp-image.php"] [unique_id "aeMHOYCFeowknfXHM7mUNQAAAEs"]
[Sat Apr 18 12:23:21.940776 2026] [:error] [pid 9865:tid 9956] [client 172.213.226.43:65120] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeMHOazb5knECIY-C-gXaQAAAJM"]
[Sat Apr 18 12:23:22.535903 2026] [:error] [pid 34288:tid 34314] [client 172.213.226.43:65145] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeMHOuTIiy__PtiLmpmSowAAAZY"]
[Sat Apr 18 12:23:23.233422 2026] [:error] [pid 34237:tid 34262] [client 172.213.226.43:65030] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeMHOxBmX4Wq5a6rxfYo7AAAAVc"]
[Sat Apr 18 12:23:24.108767 2026] [:error] [pid 9864:tid 9914] [client 172.213.226.43:17741] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeMHPICFeowknfXHM7mUOAAAAEg"]
[Sat Apr 18 12:23:24.879050 2026] [:error] [pid 9865:tid 9938] [client 172.213.226.43:22497] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeMHPKzb5knECIY-C-gXcwAAAIE"]
[Sat Apr 18 12:23:25.574155 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:65027] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeMHPSYdRLRhVmaIMx1PHwAAAMs"]
[Sat Apr 18 12:23:26.191929 2026] [:error] [pid 9865:tid 9944] [client 172.213.226.43:64512] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeMHPqzb5knECIY-C-gXegAAAIc"]
[Sat Apr 18 12:23:26.741587 2026] [:error] [pid 9865:tid 9950] [client 172.213.226.43:17728] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeMHPqzb5knECIY-C-gXfgAAAI0"]
[Sat Apr 18 12:23:27.631492 2026] [:error] [pid 9863:tid 9879] [client 172.213.226.43:65135] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/footer.php"] [unique_id "aeMHPzjjiypiFrTucbKE0AAAAAY"]
[Sat Apr 18 12:23:28.426702 2026] [:error] [pid 9865:tid 9947] [client 172.213.226.43:65144] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/footer.php"] [unique_id "aeMHQKzb5knECIY-C-gXggAAAIo"]
[Sat Apr 18 12:23:29.029704 2026] [:error] [pid 9865:tid 9955] [client 172.213.226.43:22464] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/footer.php"] [unique_id "aeMHQazb5knECIY-C-gXhAAAAJI"]
[Sat Apr 18 12:23:29.732750 2026] [:error] [pid 9865:tid 9939] [client 172.213.226.43:22466] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/footer.php"] [unique_id "aeMHQazb5knECIY-C-gXiQAAAII"]
[Sat Apr 18 12:23:30.505686 2026] [:error] [pid 9864:tid 9929] [client 172.213.226.43:17772] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/img.php"] [unique_id "aeMHQoCFeowknfXHM7mUOgAAAFc"]
[Sat Apr 18 12:23:31.282116 2026] [:error] [pid 34237:tid 34245] [client 172.213.226.43:17745] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/img.php"] [unique_id "aeMHQxBmX4Wq5a6rxfYo7gAAAUY"]
[Sat Apr 18 12:23:31.986197 2026] [:error] [pid 9864:tid 9921] [client 172.213.226.43:64606] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/img.php"] [unique_id "aeMHQ4CFeowknfXHM7mUPAAAAE8"]
[Sat Apr 18 12:23:32.577129 2026] [:error] [pid 34288:tid 34305] [client 172.213.226.43:17742] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/img.php"] [unique_id "aeMHROTIiy__PtiLmpmSqQAAAY0"]
[Sat Apr 18 12:23:33.126340 2026] [:error] [pid 34288:tid 34302] [client 172.213.226.43:17761] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "aeMHReTIiy__PtiLmpmSqgAAAYo"]
[Sat Apr 18 12:23:34.027377 2026] [:error] [pid 9863:tid 9881] [client 172.213.226.43:65112] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "aeMHRjjjiypiFrTucbKE1wAAAAg"]
[Sat Apr 18 12:23:34.951582 2026] [:error] [pid 9864:tid 9917] [client 172.213.226.43:22476] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "aeMHRoCFeowknfXHM7mUQgAAAEs"]
[Sat Apr 18 12:23:36.086872 2026] [:error] [pid 34288:tid 34313] [client 172.213.226.43:65054] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/12.php"] [unique_id "aeMHSOTIiy__PtiLmpmSrAAAAZU"]
[Sat Apr 18 12:23:37.090983 2026] [:error] [pid 9970:tid 9976] [client 172.213.226.43:65057] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeMHSSYdRLRhVmaIMx1PJQAAAMI"]
[Sat Apr 18 12:23:37.728305 2026] [:error] [pid 9970:tid 9991] [client 172.213.226.43:17776] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeMHSSYdRLRhVmaIMx1PJgAAANE"]
[Sat Apr 18 12:23:38.650817 2026] [:error] [pid 34288:tid 34300] [client 172.213.226.43:64566] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeMHSuTIiy__PtiLmpmSrwAAAYg"]
[Sat Apr 18 12:23:39.254080 2026] [:error] [pid 9864:tid 9916] [client 172.213.226.43:22512] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeMHS4CFeowknfXHM7mUUgAAAEo"]
[Sat Apr 18 12:23:40.696634 2026] [:error] [pid 9970:tid 9998] [client 172.213.226.43:65132] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeMHTCYdRLRhVmaIMx1PKgAAANg"]
[Sat Apr 18 12:23:41.285297 2026] [:error] [pid 9970:tid 9997] [client 172.213.226.43:22509] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeMHTSYdRLRhVmaIMx1PLgAAANc"]
[Sat Apr 18 12:23:41.983059 2026] [:error] [pid 9864:tid 9916] [client 172.213.226.43:17764] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeMHTYCFeowknfXHM7mUWgAAAEo"]
[Sat Apr 18 12:23:43.183984 2026] [:error] [pid 34288:tid 34297] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Sat Apr 18 12:23:43.419831 2026] [:error] [pid 34288:tid 34312] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sat Apr 18 12:23:43.655405 2026] [:error] [pid 34288:tid 34302] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/roksad1.php
[Sat Apr 18 12:23:45.158527 2026] [:error] [pid 34288:tid 34302] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sat Apr 18 12:23:45.400295 2026] [:error] [pid 34288:tid 34293] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Apr 18 12:23:45.636490 2026] [:error] [pid 34288:tid 34292] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 18 12:23:45.871877 2026] [:error] [pid 34288:tid 34301] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sat Apr 18 12:23:46.108098 2026] [:error] [pid 34288:tid 34314] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Apr 18 12:23:46.344271 2026] [:error] [pid 34288:tid 34307] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Sat Apr 18 12:23:46.633904 2026] [:error] [pid 34288:tid 34298] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sat Apr 18 12:23:46.869594 2026] [:error] [pid 34288:tid 34315] [client 172.213.226.43:65056] File does not exist: /usr/local/apache/htdocs/suspended-page/maxro.php
[Sat Apr 18 12:23:47.102708 2026] [:error] [pid 34288:tid 34306] [client 172.213.226.43:65056] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeMHU-TIiy__PtiLmpmSyQAAAY4"]
[Sat Apr 18 12:23:47.937160 2026] [:error] [pid 13023:tid 13046] [client 172.213.226.43:17743] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeMHU_1e7hG8DAeABB-htgAAARU"]
[Sat Apr 18 12:23:49.042985 2026] [:error] [pid 9970:tid 9992] [client 172.213.226.43:22475] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeMHVSYdRLRhVmaIMx1PMgAAANI"]
[Sat Apr 18 12:23:49.763269 2026] [:error] [pid 34288:tid 34312] [client 172.213.226.43:22520] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeMHVeTIiy__PtiLmpmSzQAAAZQ"]
[Sat Apr 18 12:23:50.741393 2026] [:error] [pid 34288:tid 34309] [client 172.213.226.43:65040] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeMHVuTIiy__PtiLmpmS0QAAAZE"]
[Sat Apr 18 12:23:51.273490 2026] [:error] [pid 13023:tid 13049] [client 172.213.226.43:65097] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeMHV_1e7hG8DAeABB-htwAAARg"]
[Sat Apr 18 12:23:51.890370 2026] [:error] [pid 9863:tid 9884] [client 172.213.226.43:64568] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeMHVzjjiypiFrTucbKE9AAAAAs"]
[Sat Apr 18 12:23:52.953302 2026] [:error] [pid 9863:tid 9896] [client 172.213.226.43:17729] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "aeMHWDjjiypiFrTucbKE-wAAABc"]
[Sat Apr 18 12:23:54.225458 2026] [:error] [pid 9863:tid 9882] [client 172.213.226.43:65111] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeMHWjjjiypiFrTucbKE_wAAAAk"]
[Sat Apr 18 12:23:54.775725 2026] [:error] [pid 9863:tid 9874] [client 172.213.226.43:65072] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeMHWjjjiypiFrTucbKFAwAAAAE"]
[Sat Apr 18 12:23:55.532604 2026] [:error] [pid 34288:tid 34297] [client 172.213.226.43:17791] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeMHW-TIiy__PtiLmpmS2QAAAYU"]
[Sat Apr 18 12:23:56.264707 2026] [:error] [pid 34237:tid 34248] [client 172.213.226.43:65137] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdktk.php"] [unique_id "aeMHXBBmX4Wq5a6rxfYo-QAAAUk"]
[Sat Apr 18 12:23:56.815009 2026] [:error] [pid 9863:tid 9886] [client 172.213.226.43:17733] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeMHXDjjiypiFrTucbKFCAAAAA0"]
[Sat Apr 18 12:23:57.393753 2026] [:error] [pid 9865:tid 9941] [client 172.213.226.43:64127] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeMHXazb5knECIY-C-gXsAAAAIQ"]
[Sat Apr 18 12:23:57.892962 2026] [:error] [pid 9865:tid 9940] [client 172.213.226.43:65024] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeMHXazb5knECIY-C-gXtAAAAIM"]
[Sat Apr 18 12:23:58.412756 2026] [:error] [pid 9865:tid 9937] [client 172.213.226.43:64620] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v5.php"] [unique_id "aeMHXqzb5knECIY-C-gXuAAAAIA"]
[Sat Apr 18 12:23:59.055394 2026] [:error] [pid 9864:tid 9919] [client 172.213.226.43:65140] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeMHX4CFeowknfXHM7mUaAAAAE0"]
[Sat Apr 18 12:23:59.794210 2026] [:error] [pid 9865:tid 9939] [client 172.213.226.43:22482] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeMHX6zb5knECIY-C-gXvAAAAII"]
[Sat Apr 18 12:24:00.502927 2026] [:error] [pid 9865:tid 9958] [client 172.213.226.43:64550] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeMHYKzb5knECIY-C-gXvgAAAJU"]
[Sat Apr 18 12:24:01.084336 2026] [:error] [pid 9863:tid 9880] [client 172.213.226.43:65104] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeMHYTjjiypiFrTucbKFCQAAAAc"]
[Sat Apr 18 12:24:01.786412 2026] [:error] [pid 9865:tid 9960] [client 172.213.226.43:65055] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "aeMHYazb5knECIY-C-gXxQAAAJc"]
[Sat Apr 18 12:24:02.278489 2026] [:error] [pid 9863:tid 9888] [client 172.213.226.43:22469] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "aeMHYjjjiypiFrTucbKFDAAAAA8"]
[Sat Apr 18 12:24:02.913481 2026] [:error] [pid 13023:tid 13045] [client 172.213.226.43:22472] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "aeMHYv1e7hG8DAeABB-hvgAAARQ"]
[Sat Apr 18 12:24:03.640591 2026] [:error] [pid 9863:tid 9897] [client 172.213.226.43:65086] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "aeMHYzjjiypiFrTucbKFEQAAABg"]
[Sat Apr 18 12:24:04.312323 2026] [:error] [pid 9863:tid 9890] [client 172.213.226.43:65113] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "aeMHZDjjiypiFrTucbKFEgAAABE"]
[Sat Apr 18 12:24:04.941150 2026] [:error] [pid 34290:tid 34324] [client 172.213.226.43:65075] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "aeMHZBqX6WpmmAXOBi-v8AAAAcU"]
[Sat Apr 18 12:24:05.505221 2026] [:error] [pid 9864:tid 9914] [client 172.213.226.43:65117] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "aeMHZYCFeowknfXHM7mUcAAAAEg"]
[Sat Apr 18 12:24:05.996986 2026] [:error] [pid 9970:tid 9987] [client 172.213.226.43:64525] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "aeMHZSYdRLRhVmaIMx1PRgAAAM0"]
[Sat Apr 18 12:24:06.674348 2026] [:error] [pid 34290:tid 34326] [client 172.213.226.43:65083] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r2.php"] [unique_id "aeMHZhqX6WpmmAXOBi-v9gAAAcc"]
[Sat Apr 18 12:24:07.405015 2026] [:error] [pid 34290:tid 34321] [client 172.213.226.43:64120] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r2.php"] [unique_id "aeMHZxqX6WpmmAXOBi-v-QAAAcI"]
[Sat Apr 18 12:24:08.209551 2026] [:error] [pid 34290:tid 34339] [client 172.213.226.43:17739] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r2.php"] [unique_id "aeMHaBqX6WpmmAXOBi-v_wAAAdQ"]
[Sat Apr 18 12:24:08.852536 2026] [:error] [pid 34290:tid 34327] [client 172.213.226.43:65073] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r2.php"] [unique_id "aeMHaBqX6WpmmAXOBi-wAQAAAcg"]
[Sat Apr 18 12:24:09.467778 2026] [:error] [pid 34288:tid 34299] [client 172.213.226.43:64635] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeMHaeTIiy__PtiLmpmS4AAAAYc"]
[Sat Apr 18 12:24:10.584497 2026] [:error] [pid 9863:tid 9893] [client 172.213.226.43:64586] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeMHajjjiypiFrTucbKFFwAAABQ"]
[Sat Apr 18 12:24:11.653148 2026] [:error] [pid 9863:tid 9882] [client 172.213.226.43:64543] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeMHazjjiypiFrTucbKFIgAAAAk"]
[Sat Apr 18 12:24:12.235851 2026] [:error] [pid 9863:tid 9879] [client 172.213.226.43:65129] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeMHbDjjiypiFrTucbKFJgAAAAY"]
[Sat Apr 18 12:24:12.767191 2026] [:error] [pid 9863:tid 9892] [client 172.213.226.43:65078] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/006.php"] [unique_id "aeMHbDjjiypiFrTucbKFMAAAABM"]
[Sat Apr 18 12:24:13.332987 2026] [:error] [pid 13023:tid 13026] [client 172.213.226.43:64514] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/006.php"] [unique_id "aeMHbf1e7hG8DAeABB-hxQAAAQE"]
[Sat Apr 18 12:24:13.939582 2026] [:error] [pid 34290:tid 34323] [client 172.213.226.43:64561] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/006.php"] [unique_id "aeMHbRqX6WpmmAXOBi-wBwAAAcQ"]
[Sat Apr 18 12:24:14.492360 2026] [:error] [pid 34288:tid 34310] [client 172.213.226.43:65036] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/006.php"] [unique_id "aeMHbuTIiy__PtiLmpmS5AAAAZI"]
[Sat Apr 18 12:24:15.053130 2026] [:error] [pid 13023:tid 13032] [client 172.213.226.43:64559] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "aeMHb_1e7hG8DAeABB-hxgAAAQc"]
[Sat Apr 18 12:24:15.635828 2026] [:error] [pid 9970:tid 9996] [client 172.213.226.43:64119] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "aeMHbyYdRLRhVmaIMx1PSwAAANY"]
[Sat Apr 18 12:24:16.200176 2026] [:error] [pid 13023:tid 13031] [client 172.213.226.43:64570] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "aeMHcP1e7hG8DAeABB-hyAAAAQY"]
[Sat Apr 18 12:24:16.735514 2026] [:error] [pid 34237:tid 34256] [client 172.213.226.43:22507] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "aeMHcBBmX4Wq5a6rxfYo_gAAAVE"]
[Sat Apr 18 12:24:17.270665 2026] [:error] [pid 34237:tid 34240] [client 172.213.226.43:65032] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "aeMHcRBmX4Wq5a6rxfYpAQAAAUE"]
[Sat Apr 18 12:24:17.737926 2026] [:error] [pid 9865:tid 9952] [client 172.213.226.43:65070] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "aeMHcazb5knECIY-C-gXyQAAAI8"]
[Sat Apr 18 12:24:18.245754 2026] [:error] [pid 9864:tid 9924] [client 172.213.226.43:17749] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "aeMHcoCFeowknfXHM7mUcwAAAFI"]
[Sat Apr 18 12:24:18.753809 2026] [:error] [pid 9864:tid 9928] [client 172.213.226.43:22521] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "aeMHcoCFeowknfXHM7mUdgAAAFY"]
[Sat Apr 18 12:24:19.446432 2026] [:error] [pid 9970:tid 9987] [client 172.213.226.43:65044] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeMHcyYdRLRhVmaIMx1PUwAAAM0"]
[Sat Apr 18 12:24:20.007294 2026] [:error] [pid 9864:tid 9918] [client 172.213.226.43:17779] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeMHdICFeowknfXHM7mUegAAAEw"]
[Sat Apr 18 12:24:20.576463 2026] [:error] [pid 9865:tid 9945] [client 172.213.226.43:65048] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeMHdKzb5knECIY-C-gX0AAAAIg"]
[Sat Apr 18 12:24:21.165389 2026] [:error] [pid 9970:tid 9977] [client 172.213.226.43:22486] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeMHdSYdRLRhVmaIMx1PVwAAAMM"]
[Sat Apr 18 12:24:21.695381 2026] [:error] [pid 9864:tid 9907] [client 172.213.226.43:22488] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rh.php"] [unique_id "aeMHdYCFeowknfXHM7mUfAAAAEI"]
[Sat Apr 18 12:24:22.335695 2026] [:error] [pid 9864:tid 9923] [client 172.213.226.43:64634] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rh.php"] [unique_id "aeMHdoCFeowknfXHM7mUfQAAAFE"]
[Sat Apr 18 12:24:22.812218 2026] [:error] [pid 9863:tid 9887] [client 172.213.226.43:65133] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rh.php"] [unique_id "aeMHdjjjiypiFrTucbKFTgAAAA4"]
[Sat Apr 18 12:24:23.370100 2026] [:error] [pid 9863:tid 9876] [client 172.213.226.43:65081] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rh.php"] [unique_id "aeMHdzjjiypiFrTucbKFUQAAAAM"]
[Sat Apr 18 12:24:23.860288 2026] [:error] [pid 9863:tid 9886] [client 172.213.226.43:65064] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gz.php"] [unique_id "aeMHdzjjiypiFrTucbKFVQAAAA0"]
[Sat Apr 18 12:24:24.416184 2026] [:error] [pid 9863:tid 9895] [client 172.213.226.43:64535] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gz.php"] [unique_id "aeMHeDjjiypiFrTucbKFVwAAABY"]
[Sat Apr 18 12:24:24.885817 2026] [:error] [pid 9863:tid 9891] [client 172.213.226.43:64576] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gz.php"] [unique_id "aeMHeDjjiypiFrTucbKFXAAAABI"]
[Sat Apr 18 12:24:25.362335 2026] [:error] [pid 9864:tid 9929] [client 172.213.226.43:64021] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gz.php"] [unique_id "aeMHeYCFeowknfXHM7mUfwAAAFc"]
[Sat Apr 18 12:24:25.833570 2026] [:error] [pid 9865:tid 9959] [client 172.213.226.43:65074] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "aeMHeazb5knECIY-C-gX1QAAAJY"]
[Sat Apr 18 12:24:26.302815 2026] [:error] [pid 9865:tid 9942] [client 172.213.226.43:64081] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "aeMHeqzb5knECIY-C-gX2QAAAIU"]
[Sat Apr 18 12:24:26.768543 2026] [:error] [pid 9970:tid 9976] [client 172.213.226.43:65141] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "aeMHeiYdRLRhVmaIMx1PWQAAAMI"]
[Sat Apr 18 12:24:27.255214 2026] [:error] [pid 9865:tid 9947] [client 172.213.226.43:64599] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelio1.php"] [unique_id "aeMHe6zb5knECIY-C-gX4AAAAIo"]
[Sat Apr 18 12:24:27.777456 2026] [:error] [pid 13023:tid 13028] [client 172.213.226.43:64621] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "aeMHe_1e7hG8DAeABB-hzQAAAQM"]
[Sat Apr 18 12:24:28.250132 2026] [:error] [pid 34290:tid 34338] [client 172.213.226.43:64633] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "aeMHfBqX6WpmmAXOBi-wDAAAAdM"]
[Sat Apr 18 12:24:28.721845 2026] [:error] [pid 34290:tid 34323] [client 172.213.226.43:64113] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "aeMHfBqX6WpmmAXOBi-wDwAAAcQ"]
[Sat Apr 18 12:24:29.192175 2026] [:error] [pid 34290:tid 34325] [client 172.213.226.43:22525] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "aeMHfRqX6WpmmAXOBi-wEgAAAcY"]
[Sat Apr 18 12:24:29.670605 2026] [:error] [pid 34288:tid 34298] [client 172.213.226.43:22515] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqa.php"] [unique_id "aeMHfeTIiy__PtiLmpmS6AAAAYY"]
[Sat Apr 18 12:24:30.152394 2026] [:error] [pid 9865:tid 9955] [client 172.213.226.43:64513] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqa.php"] [unique_id "aeMHfqzb5knECIY-C-gX5QAAAJI"]
[Sat Apr 18 12:24:30.635559 2026] [:error] [pid 9864:tid 9927] [client 172.213.226.43:64607] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqa.php"] [unique_id "aeMHfoCFeowknfXHM7mUhQAAAFU"]
[Sat Apr 18 12:24:31.105834 2026] [:error] [pid 9970:tid 9980] [client 172.213.226.43:65099] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qqa.php"] [unique_id "aeMHfyYdRLRhVmaIMx1PXgAAAMY"]
[Sat Apr 18 12:24:31.585480 2026] [:error] [pid 34237:tid 34246] [client 172.213.226.43:64554] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeMHfxBmX4Wq5a6rxfYpBgAAAUc"]
[Sat Apr 18 12:24:32.069549 2026] [:error] [pid 9970:tid 9998] [client 172.213.226.43:64583] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeMHgCYdRLRhVmaIMx1PYAAAANg"]
[Sat Apr 18 12:24:32.556281 2026] [:error] [pid 34290:tid 34331] [client 172.213.226.43:17755] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeMHgBqX6WpmmAXOBi-wGAAAAcw"]
[Sat Apr 18 12:24:33.050715 2026] [:error] [pid 9865:tid 9951] [client 172.213.226.43:22502] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeMHgazb5knECIY-C-gX6wAAAI4"]
[Sat Apr 18 12:24:33.536351 2026] [:error] [pid 9865:tid 9960] [client 172.213.226.43:64082] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ga.php"] [unique_id "aeMHgazb5knECIY-C-gX7QAAAJc"]
[Sat Apr 18 12:24:34.011272 2026] [:error] [pid 9865:tid 9949] [client 172.213.226.43:64609] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ga.php"] [unique_id "aeMHgqzb5knECIY-C-gX8QAAAIw"]
[Sat Apr 18 12:24:34.505997 2026] [:error] [pid 9863:tid 9897] [client 172.213.226.43:65101] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ga.php"] [unique_id "aeMHgjjjiypiFrTucbKFYQAAABg"]
[Sat Apr 18 12:24:35.009690 2026] [:error] [pid 9970:tid 9993] [client 172.213.226.43:64571] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ga.php"] [unique_id "aeMHgyYdRLRhVmaIMx1PYgAAANM"]
[Sat Apr 18 12:24:35.519219 2026] [:error] [pid 9864:tid 9920] [client 172.213.226.43:64516] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeMHg4CFeowknfXHM7mUigAAAE4"]
[Sat Apr 18 12:24:35.991996 2026] [:error] [pid 9864:tid 9910] [client 172.213.226.43:22490] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeMHg4CFeowknfXHM7mUiwAAAEU"]
[Sat Apr 18 12:24:36.498040 2026] [:error] [pid 34237:tid 34243] [client 172.213.226.43:22510] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeMHhBBmX4Wq5a6rxfYpCwAAAUQ"]
[Sat Apr 18 12:24:37.020649 2026] [:error] [pid 9864:tid 9906] [client 172.213.226.43:64608] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeMHhYCFeowknfXHM7mUkAAAAEE"]
[Sat Apr 18 12:24:37.526121 2026] [:error] [pid 9865:tid 9950] [client 172.213.226.43:64526] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeMHhazb5knECIY-C-gX9gAAAI0"]
[Sat Apr 18 12:24:37.999927 2026] [:error] [pid 9970:tid 9986] [client 172.213.226.43:64604] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeMHhSYdRLRhVmaIMx1PaAAAAMw"]
[Sat Apr 18 12:24:38.506765 2026] [:error] [pid 9970:tid 9974] [client 172.213.226.43:64073] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeMHhiYdRLRhVmaIMx1PaQAAAMA"]
[Sat Apr 18 12:24:38.985215 2026] [:error] [pid 9865:tid 9955] [client 172.213.226.43:65102] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeMHhqzb5knECIY-C-gX-QAAAJI"]
[Sat Apr 18 12:24:39.476360 2026] [:error] [pid 9864:tid 9921] [client 172.213.226.43:22511] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeMHh4CFeowknfXHM7mUkwAAAE8"]
[Sat Apr 18 12:24:39.961046 2026] [:error] [pid 9865:tid 9958] [client 172.213.226.43:65062] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeMHh6zb5knECIY-C-gX_AAAAJU"]
[Sat Apr 18 12:24:40.428233 2026] [:error] [pid 9970:tid 9988] [client 172.213.226.43:22522] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeMHiCYdRLRhVmaIMx1PbwAAAM4"]
[Sat Apr 18 12:24:40.896120 2026] [:error] [pid 9865:tid 9949] [client 172.213.226.43:65131] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeMHiKzb5knECIY-C-gX_gAAAIw"]
[Sat Apr 18 12:24:41.364704 2026] [:error] [pid 9865:tid 9960] [client 172.213.226.43:64567] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeMHiazb5knECIY-C-gYAAAAAJc"]
[Sat Apr 18 12:24:41.841309 2026] [:error] [pid 9864:tid 9920] [client 172.213.226.43:65091] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeMHiYCFeowknfXHM7mUlQAAAE4"]
[Sat Apr 18 12:24:42.318548 2026] [:error] [pid 9864:tid 9909] [client 172.213.226.43:65063] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeMHioCFeowknfXHM7mUmAAAAEQ"]
[Sat Apr 18 12:24:42.786978 2026] [:error] [pid 9865:tid 9939] [client 172.213.226.43:65121] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeMHiqzb5knECIY-C-gYAgAAAII"]
[Sat Apr 18 12:24:43.255968 2026] [:error] [pid 13023:tid 13030] [client 172.213.226.43:64584] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeMHi_1e7hG8DAeABB-h0wAAAQU"]
[Sat Apr 18 12:24:43.733827 2026] [:error] [pid 9864:tid 9918] [client 172.213.226.43:64067] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeMHi4CFeowknfXHM7mUnAAAAEw"]
[Sat Apr 18 12:24:44.199617 2026] [:error] [pid 9864:tid 9917] [client 172.213.226.43:65128] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeMHjICFeowknfXHM7mUnwAAAEs"]
[Sat Apr 18 12:24:44.672348 2026] [:error] [pid 9864:tid 9907] [client 172.213.226.43:22513] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "aeMHjICFeowknfXHM7mUowAAAEI"]
[Sat Apr 18 12:24:45.140092 2026] [:error] [pid 9864:tid 9923] [client 172.213.226.43:64099] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-lo.php"] [unique_id "aeMHjYCFeowknfXHM7mUpAAAAFE"]
[Sat Apr 18 12:24:45.640088 2026] [:error] [pid 9865:tid 9947] [client 172.213.226.43:65025] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-lo.php"] [unique_id "aeMHjazb5knECIY-C-gYBwAAAIo"]
[Sat Apr 18 12:24:46.126696 2026] [:error] [pid 9863:tid 9882] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lo.php
[Sat Apr 18 12:24:46.363960 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Sat Apr 18 12:24:47.845394 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/Ipv6.php
[Sat Apr 18 12:24:48.105228 2026] [:error] [pid 9863:tid 9885] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/file-gertdxz.php
[Sat Apr 18 12:24:48.357590 2026] [:error] [pid 9863:tid 9886] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sat Apr 18 12:24:48.602810 2026] [:error] [pid 9863:tid 9895] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sat Apr 18 12:24:48.847340 2026] [:error] [pid 9863:tid 9896] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Sat Apr 18 12:24:49.086479 2026] [:error] [pid 9863:tid 9877] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sat Apr 18 12:24:49.325176 2026] [:error] [pid 9863:tid 9893] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/xper.php
[Sat Apr 18 12:24:49.559790 2026] [:error] [pid 9863:tid 9891] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/wxpass.php
[Sat Apr 18 12:24:49.798398 2026] [:error] [pid 9863:tid 9897] [client 172.213.226.43:65096] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Sat Apr 18 12:24:50.030201 2026] [:error] [pid 9863:tid 9894] [client 172.213.226.43:65096] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeMHkjjjiypiFrTucbKFdgAAABU"]
[Sat Apr 18 12:24:50.517813 2026] [:error] [pid 9863:tid 9892] [client 172.213.226.43:63569] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeMHkjjjiypiFrTucbKFdwAAABM"]
[Sat Apr 18 12:24:51.004414 2026] [:error] [pid 9863:tid 9876] [client 172.213.226.43:65138] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeMHkzjjiypiFrTucbKFewAAAAM"]
[Sat Apr 18 12:24:51.477200 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:17757] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "aeMHkzjjiypiFrTucbKFfAAAAAo"]
[Sat Apr 18 12:24:51.945458 2026] [:error] [pid 9863:tid 9895] [client 172.213.226.43:65106] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x3x.php"] [unique_id "aeMHkzjjiypiFrTucbKFfwAAABY"]
[Sat Apr 18 12:24:52.432736 2026] [:error] [pid 9863:tid 9890] [client 172.213.226.43:64539] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x3x.php"] [unique_id "aeMHlDjjiypiFrTucbKFhgAAABE"]
[Sat Apr 18 12:24:52.904195 2026] [:error] [pid 9863:tid 9894] [client 172.213.226.43:17736] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x3x.php"] [unique_id "aeMHlDjjiypiFrTucbKFlAAAABU"]
[Sat Apr 18 12:24:53.372067 2026] [:error] [pid 9865:tid 9940] [client 172.213.226.43:64589] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x3x.php"] [unique_id "aeMHlazb5knECIY-C-gYGwAAAIM"]
[Sat Apr 18 12:24:53.843646 2026] [:error] [pid 9865:tid 9938] [client 172.213.226.43:65090] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "aeMHlazb5knECIY-C-gYHgAAAIE"]
[Sat Apr 18 12:24:54.339414 2026] [:error] [pid 34237:tid 34261] [client 172.213.226.43:64611] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "aeMHlhBmX4Wq5a6rxfYpDgAAAVY"]
[Sat Apr 18 12:24:54.815454 2026] [:error] [pid 34288:tid 34313] [client 172.213.226.43:65150] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "aeMHluTIiy__PtiLmpmS7AAAAZU"]
[Sat Apr 18 12:24:55.290423 2026] [:error] [pid 9865:tid 9943] [client 172.213.226.43:65119] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "aeMHl6zb5knECIY-C-gYIQAAAIY"]
[Sat Apr 18 12:24:55.766032 2026] [:error] [pid 9865:tid 9960] [client 172.213.226.43:65147] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/global.php"] [unique_id "aeMHl6zb5knECIY-C-gYJQAAAJc"]
[Sat Apr 18 12:24:56.244054 2026] [:error] [pid 9865:tid 9940] [client 172.213.226.43:64596] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/global.php"] [unique_id "aeMHmKzb5knECIY-C-gYJwAAAIM"]
[Sat Apr 18 12:24:56.714196 2026] [:error] [pid 34288:tid 34302] [client 172.213.226.43:17769] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/global.php"] [unique_id "aeMHmOTIiy__PtiLmpmS7wAAAYo"]
[Sat Apr 18 12:24:57.188079 2026] [:error] [pid 9970:tid 9975] [client 172.213.226.43:65046] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/global.php"] [unique_id "aeMHmSYdRLRhVmaIMx1PhgAAAME"]
[Sat Apr 18 12:24:57.653146 2026] [:error] [pid 9865:tid 9949] [client 172.213.226.43:64032] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeMHmazb5knECIY-C-gYMAAAAIw"]
[Sat Apr 18 12:24:58.125262 2026] [:error] [pid 9865:tid 9952] [client 172.213.226.43:64623] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeMHmqzb5knECIY-C-gYMwAAAI8"]
[Sat Apr 18 12:24:58.590166 2026] [:error] [pid 9865:tid 9950] [client 172.213.226.43:65098] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeMHmqzb5knECIY-C-gYNAAAAI0"]
[Sat Apr 18 12:24:59.088816 2026] [:error] [pid 9865:tid 9945] [client 172.213.226.43:64551] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeMHm6zb5knECIY-C-gYNQAAAIg"]
[Sat Apr 18 12:24:59.571836 2026] [:error] [pid 9865:tid 9953] [client 172.213.226.43:64105] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "aeMHm6zb5knECIY-C-gYOAAAAJA"]
[Sat Apr 18 12:25:00.047878 2026] [:error] [pid 9863:tid 9886] [client 172.213.226.43:17749] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "aeMHnDjjiypiFrTucbKFpQAAAA0"]
[Sat Apr 18 12:25:00.553134 2026] [:error] [pid 9863:tid 9893] [client 172.213.226.43:64602] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "aeMHnDjjiypiFrTucbKFpgAAABQ"]
[Sat Apr 18 12:25:01.035113 2026] [:error] [pid 9863:tid 9897] [client 172.213.226.43:64572] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "aeMHnTjjiypiFrTucbKFqQAAABg"]
[Sat Apr 18 12:25:01.515609 2026] [:error] [pid 9864:tid 9908] [client 172.213.226.43:22465] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeMHnYCFeowknfXHM7mUrQAAAEM"]
[Sat Apr 18 12:25:02.015475 2026] [:error] [pid 9864:tid 9922] [client 172.213.226.43:22505] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeMHnoCFeowknfXHM7mUsAAAAFA"]
[Sat Apr 18 12:25:02.493659 2026] [:error] [pid 9864:tid 9923] [client 172.213.226.43:65105] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeMHnoCFeowknfXHM7mUsQAAAFE"]
[Sat Apr 18 12:25:02.979414 2026] [:error] [pid 9864:tid 9929] [client 172.213.226.43:65089] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeMHnoCFeowknfXHM7mUtQAAAFc"]
[Sat Apr 18 12:25:03.444974 2026] [:error] [pid 34290:tid 34333] [client 172.213.226.43:65084] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeMHnxqX6WpmmAXOBi-wHQAAAc4"]
[Sat Apr 18 12:25:03.925065 2026] [:error] [pid 34237:tid 34257] [client 172.213.226.43:64582] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeMHnxBmX4Wq5a6rxfYpEQAAAVI"]
[Sat Apr 18 12:25:04.401779 2026] [:error] [pid 9970:tid 9977] [client 172.213.226.43:64107] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeMHoCYdRLRhVmaIMx1PiAAAAMM"]
[Sat Apr 18 12:25:04.869226 2026] [:error] [pid 9865:tid 9949] [client 172.213.226.43:64112] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeMHoKzb5knECIY-C-gYOwAAAIw"]
[Sat Apr 18 12:25:05.336472 2026] [:error] [pid 9865:tid 9952] [client 172.213.226.43:65050] [client 172.213.226.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeMHoazb5knECIY-C-gYPAAAAI8"]
[Sat Apr 18 12:25:05.801073 2026] [:error] [pid 34290:tid 34321] [client 172.213.226.43:64003] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeMHoRqX6WpmmAXOBi-wIAAAAcI"]
[Sat Apr 18 12:25:06.279524 2026] [:error] [pid 9865:tid 9950] [client 172.213.226.43:17777] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeMHoqzb5knECIY-C-gYPwAAAI0"]
[Sat Apr 18 12:25:06.755169 2026] [:error] [pid 13023:tid 13026] [client 172.213.226.43:65094] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeMHov1e7hG8DAeABB-h4QAAAQE"]
[Sat Apr 18 12:25:07.234745 2026] [:error] [pid 9863:tid 9880] [client 172.213.226.43:64598] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeMHozjjiypiFrTucbKFrAAAAAc"]
[Sat Apr 18 12:25:07.699136 2026] [:error] [pid 9865:tid 9947] [client 172.213.226.43:64555] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeMHo6zb5knECIY-C-gYQgAAAIo"]
[Sat Apr 18 12:25:08.179039 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:64594] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeMHpDjjiypiFrTucbKFrgAAAAo"]
[Sat Apr 18 12:25:08.662378 2026] [:error] [pid 9865:tid 9960] [client 172.213.226.43:64109] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeMHpKzb5knECIY-C-gYSgAAAJc"]
[Sat Apr 18 12:25:09.153153 2026] [:error] [pid 9865:tid 9944] [client 172.213.226.43:64077] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeMHpazb5knECIY-C-gYSwAAAIc"]
[Sat Apr 18 12:25:09.639103 2026] [:error] [pid 9865:tid 9952] [client 172.213.226.43:17773] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeMHpazb5knECIY-C-gYTAAAAI8"]
[Sat Apr 18 12:25:10.119437 2026] [:error] [pid 9865:tid 9957] [client 172.213.226.43:64515] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeMHpqzb5knECIY-C-gYTQAAAJQ"]
[Sat Apr 18 12:25:10.606428 2026] [:error] [pid 9863:tid 9890] [client 172.213.226.43:17759] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeMHpjjjiypiFrTucbKFtQAAABE"]
[Sat Apr 18 12:25:11.072796 2026] [:error] [pid 34290:tid 34323] [client 172.213.226.43:17748] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeMHpxqX6WpmmAXOBi-wIgAAAcQ"]
[Sat Apr 18 12:25:11.551725 2026] [:error] [pid 9863:tid 9882] [client 172.213.226.43:65118] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeMHpzjjiypiFrTucbKFuwAAAAk"]
[Sat Apr 18 12:25:12.023438 2026] [:error] [pid 9864:tid 9925] [client 172.213.226.43:64041] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeMHqICFeowknfXHM7mUvAAAAFM"]
[Sat Apr 18 12:25:12.495041 2026] [:error] [pid 9865:tid 9960] [client 172.213.226.43:64085] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeMHqKzb5knECIY-C-gYUQAAAJc"]
[Sat Apr 18 12:25:12.967676 2026] [:error] [pid 9864:tid 9920] [client 172.213.226.43:17787] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeMHqICFeowknfXHM7mUwQAAAE4"]
[Sat Apr 18 12:25:13.436564 2026] [:error] [pid 34290:tid 34332] [client 172.213.226.43:64563] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeMHqRqX6WpmmAXOBi-wJAAAAc0"]
[Sat Apr 18 12:25:13.926882 2026] [:error] [pid 9863:tid 9886] [client 172.213.226.43:64548] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeMHqTjjiypiFrTucbKFwQAAAA0"]
[Sat Apr 18 12:25:14.401042 2026] [:error] [pid 9865:tid 9951] [client 172.213.226.43:65066] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeMHqqzb5knECIY-C-gYUwAAAI4"]
[Sat Apr 18 12:25:14.868678 2026] [:error] [pid 9970:tid 9975] [client 172.213.226.43:17788] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws61.php"] [unique_id "aeMHqiYdRLRhVmaIMx1PkAAAAME"]
[Sat Apr 18 12:25:15.336957 2026] [:error] [pid 9863:tid 9880] [client 172.213.226.43:22474] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeMHqzjjiypiFrTucbKFxAAAAAc"]
[Sat Apr 18 12:25:15.802247 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:64630] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeMHqzjjiypiFrTucbKFxgAAAAo"]
[Sat Apr 18 12:25:16.298295 2026] [:error] [pid 9970:tid 9976] [client 172.213.226.43:64108] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeMHrCYdRLRhVmaIMx1PkwAAAMI"]
[Sat Apr 18 12:25:16.763148 2026] [:error] [pid 9970:tid 9977] [client 172.213.226.43:65136] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeMHrCYdRLRhVmaIMx1PlgAAAMM"]
[Sat Apr 18 12:25:17.247061 2026] [:error] [pid 9863:tid 9889] [client 172.213.226.43:22516] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeMHrTjjiypiFrTucbKFygAAABA"]
[Sat Apr 18 12:25:17.715313 2026] [:error] [pid 9863:tid 9880] [client 172.213.226.43:65122] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeMHrTjjiypiFrTucbKFzAAAAAc"]
[Sat Apr 18 12:25:18.187018 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:17740] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeMHrjjjiypiFrTucbKF0AAAAAo"]
[Sat Apr 18 12:25:18.660417 2026] [:error] [pid 9863:tid 9891] [client 172.213.226.43:64538] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeMHrjjjiypiFrTucbKF0QAAABI"]
[Sat Apr 18 12:25:19.136917 2026] [:error] [pid 9865:tid 9955] [client 172.213.226.43:17754] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xynz.php"] [unique_id "aeMHr6zb5knECIY-C-gYVwAAAJI"]
[Sat Apr 18 12:25:19.634961 2026] [:error] [pid 34290:tid 34321] [client 172.213.226.43:17730] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xynz.php"] [unique_id "aeMHrxqX6WpmmAXOBi-wKgAAAcI"]
[Sat Apr 18 12:25:20.107169 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:64580] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xynz.php"] [unique_id "aeMHsCYdRLRhVmaIMx1PlwAAAMs"]
[Sat Apr 18 12:25:20.593017 2026] [:error] [pid 9865:tid 9944] [client 172.213.226.43:65048] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xynz.php"] [unique_id "aeMHsKzb5knECIY-C-gYWwAAAIc"]
[Sat Apr 18 12:25:21.078248 2026] [:error] [pid 9970:tid 9982] [client 172.213.226.43:63574] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-01ul.php"] [unique_id "aeMHsSYdRLRhVmaIMx1PmQAAAMg"]
[Sat Apr 18 12:25:21.553321 2026] [:error] [pid 9970:tid 9979] [client 172.213.226.43:65065] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-01ul.php"] [unique_id "aeMHsSYdRLRhVmaIMx1PmgAAAMU"]
[Sat Apr 18 15:08:40.046713 2026] [:error] [pid 9865:tid 9954] [client 49.36.112.1:59057] [client 49.36.112.1] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 49.36.112.1, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeMt-Kzb5knECIY-C-hDGwAAAJE"]
[Sat Apr 18 15:08:40.052609 2026] [:error] [pid 9865:tid 9954] [client 49.36.112.1:59057] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat Apr 18 17:21:50.247879 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:5115] File does not exist: /usr/local/apache/htdocs/suspended-page/prosellers8.php
[Sat Apr 18 17:21:50.506936 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:5115] File does not exist: /usr/local/apache/htdocs/suspended-page/utchiha_py4mE1XY.php
[Sat Apr 18 17:21:50.766685 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:5115] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Apr 18 17:21:51.028852 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:5115] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat Apr 18 17:21:51.287160 2026] [:error] [pid 34237:tid 34255] [client 20.215.249.162:5115] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Apr 18 17:21:51.546549 2026] [:error] [pid 34237:tid 34241] [client 20.215.249.162:5115] File does not exist: /usr/local/apache/htdocs/suspended-page/defeg.php
[Sat Apr 18 17:21:51.811795 2026] [:error] [pid 34237:tid 34258] [client 20.215.249.162:5115] File does not exist: /usr/local/apache/htdocs/suspended-page/C1.php
[Sat Apr 18 17:21:52.073950 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:5115] File does not exist: /usr/local/apache/htdocs/suspended-page/bfasb.php
[Sat Apr 18 17:21:52.393083 2026] [:error] [pid 34237:tid 34262] [client 20.215.249.162:5115] File does not exist: /usr/local/apache/htdocs/suspended-page/clcdu.php
[Sat Apr 18 17:21:52.651165 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:5115] File does not exist: /usr/local/apache/htdocs/suspended-page/dgmry.php
[Sat Apr 18 17:21:52.947179 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:5115] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eursi.php"] [unique_id "aeNNMBBmX4Wq5a6rxfZazgAAAU0"]
[Sat Apr 18 17:21:53.648268 2026] [:error] [pid 9970:tid 9986] [client 20.215.249.162:5092] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eursi.php"] [unique_id "aeNNMSYdRLRhVmaIMx2N3QAAAMw"]
[Sat Apr 18 17:21:54.295893 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:5011] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eursi.php"] [unique_id "aeNNMoCFeowknfXHM7nZfgAAAFM"]
[Sat Apr 18 17:21:54.875034 2026] [:error] [pid 34237:tid 34262] [client 20.215.249.162:5008] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eursi.php"] [unique_id "aeNNMhBmX4Wq5a6rxfZa1wAAAVc"]
[Sat Apr 18 17:21:55.462564 2026] [:error] [pid 34237:tid 34250] [client 20.215.249.162:5067] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gkojz.php"] [unique_id "aeNNMxBmX4Wq5a6rxfZa2QAAAUs"]
[Sat Apr 18 17:21:56.106224 2026] [:error] [pid 34237:tid 34241] [client 20.215.249.162:5101] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gkojz.php"] [unique_id "aeNNNBBmX4Wq5a6rxfZa3gAAAUI"]
[Sat Apr 18 17:21:56.691786 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:5112] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gkojz.php"] [unique_id "aeNNNBBmX4Wq5a6rxfZa4gAAAUg"]
[Sat Apr 18 17:21:57.270000 2026] [:error] [pid 9864:tid 9927] [client 20.215.249.162:5007] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gkojz.php"] [unique_id "aeNNNYCFeowknfXHM7nZhQAAAFU"]
[Sat Apr 18 17:21:57.883198 2026] [:error] [pid 9863:tid 9896] [client 20.215.249.162:5091] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/isvqf.php"] [unique_id "aeNNNTjjiypiFrTucbK0BQAAABc"]
[Sat Apr 18 17:21:58.480399 2026] [:error] [pid 13023:tid 13044] [client 20.215.249.162:4999] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/isvqf.php"] [unique_id "aeNNNv1e7hG8DAeABB_aTgAAARM"]
[Sat Apr 18 17:21:59.020079 2026] [:error] [pid 9864:tid 9913] [client 20.215.249.162:5066] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/isvqf.php"] [unique_id "aeNNN4CFeowknfXHM7nZhwAAAEc"]
[Sat Apr 18 17:21:59.702468 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:5105] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/isvqf.php"] [unique_id "aeNNNxBmX4Wq5a6rxfZa5gAAAUU"]
[Sat Apr 18 17:22:00.329805 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:5096] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ppxhp.php"] [unique_id "aeNNOBBmX4Wq5a6rxfZa6AAAAUg"]
[Sat Apr 18 17:22:00.923538 2026] [:error] [pid 34237:tid 34248] [client 20.215.249.162:5012] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ppxhp.php"] [unique_id "aeNNOBBmX4Wq5a6rxfZa7AAAAUk"]
[Sat Apr 18 17:22:01.495565 2026] [:error] [pid 34237:tid 34253] [client 20.215.249.162:5088] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ppxhp.php"] [unique_id "aeNNORBmX4Wq5a6rxfZa7wAAAU4"]
[Sat Apr 18 17:22:02.110250 2026] [:error] [pid 13023:tid 13025] [client 20.215.249.162:5000] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ppxhp.php"] [unique_id "aeNNOv1e7hG8DAeABB_aUAAAAQA"]
[Sat Apr 18 17:22:02.703791 2026] [:error] [pid 13023:tid 13043] [client 20.215.249.162:4993] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/whtrq.php"] [unique_id "aeNNOv1e7hG8DAeABB_aUgAAARI"]
[Sat Apr 18 17:22:03.247464 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:5104] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/whtrq.php"] [unique_id "aeNNOxBmX4Wq5a6rxfZa9QAAAUA"]
[Sat Apr 18 17:22:03.816397 2026] [:error] [pid 9865:tid 9946] [client 20.215.249.162:5095] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/whtrq.php"] [unique_id "aeNNO6zb5knECIY-C-hkKAAAAIk"]
[Sat Apr 18 17:22:04.364707 2026] [:error] [pid 9865:tid 9959] [client 20.215.249.162:5010] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/whtrq.php"] [unique_id "aeNNPKzb5knECIY-C-hkLAAAAJY"]
[Sat Apr 18 17:22:04.953345 2026] [:error] [pid 9864:tid 9918] [client 20.215.249.162:5033] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rkiea.php"] [unique_id "aeNNPICFeowknfXHM7nZjwAAAEw"]
[Sat Apr 18 17:22:05.525666 2026] [:error] [pid 34290:tid 34332] [client 20.215.249.162:5111] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rkiea.php"] [unique_id "aeNNPRqX6WpmmAXOBi_nngAAAc0"]
[Sat Apr 18 17:22:06.077172 2026] [:error] [pid 34290:tid 34320] [client 20.215.249.162:5022] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rkiea.php"] [unique_id "aeNNPhqX6WpmmAXOBi_noAAAAcE"]
[Sat Apr 18 17:22:06.724031 2026] [:error] [pid 13023:tid 13030] [client 20.215.249.162:5035] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rkiea.php"] [unique_id "aeNNPv1e7hG8DAeABB_aVgAAAQU"]
[Sat Apr 18 17:22:07.381599 2026] [:error] [pid 9865:tid 9938] [client 20.215.249.162:5102] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckk.php"] [unique_id "aeNNP6zb5knECIY-C-hkLgAAAIE"]
[Sat Apr 18 17:22:07.973605 2026] [:error] [pid 34290:tid 34322] [client 20.215.249.162:4995] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckk.php"] [unique_id "aeNNPxqX6WpmmAXOBi_npQAAAcM"]
[Sat Apr 18 17:22:08.563199 2026] [:error] [pid 9863:tid 9894] [client 20.215.249.162:5060] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckk.php"] [unique_id "aeNNQDjjiypiFrTucbK0CgAAABU"]
[Sat Apr 18 17:22:09.324729 2026] [:error] [pid 9864:tid 9917] [client 20.215.249.162:5056] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckk.php"] [unique_id "aeNNQYCFeowknfXHM7nZlQAAAEs"]
[Sat Apr 18 17:22:10.173171 2026] [:error] [pid 34290:tid 34324] [client 20.215.249.162:5082] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/baixy.php"] [unique_id "aeNNQhqX6WpmmAXOBi_nqwAAAcU"]
[Sat Apr 18 17:22:10.918347 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:5009] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/baixy.php"] [unique_id "aeNNQhBmX4Wq5a6rxfZa-AAAAUY"]
[Sat Apr 18 17:22:11.684876 2026] [:error] [pid 34288:tid 34294] [client 20.215.249.162:5025] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/baixy.php"] [unique_id "aeNNQ-TIiy__PtiLmpm-HQAAAYI"]
[Sat Apr 18 17:22:12.498394 2026] [:error] [pid 9863:tid 9892] [client 20.215.249.162:5065] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/baixy.php"] [unique_id "aeNNRDjjiypiFrTucbK0EwAAABM"]
[Sat Apr 18 17:22:13.269838 2026] [:error] [pid 9970:tid 9982] [client 20.215.249.162:4932] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8xyz.php"] [unique_id "aeNNRSYdRLRhVmaIMx2N6AAAAMg"]
[Sat Apr 18 17:22:14.157750 2026] [:error] [pid 34290:tid 34337] [client 20.215.249.162:5080] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8xyz.php"] [unique_id "aeNNRhqX6WpmmAXOBi_nrwAAAdI"]
[Sat Apr 18 17:22:14.803586 2026] [:error] [pid 9970:tid 9974] [client 20.215.249.162:5103] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8xyz.php"] [unique_id "aeNNRiYdRLRhVmaIMx2N6gAAAMA"]
[Sat Apr 18 17:22:15.502711 2026] [:error] [pid 9970:tid 9995] [client 20.215.249.162:5058] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8xyz.php"] [unique_id "aeNNRyYdRLRhVmaIMx2N7QAAANU"]
[Sat Apr 18 17:22:16.081395 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:5018] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/106.php"] [unique_id "aeNNSICFeowknfXHM7nZmgAAAFE"]
[Sat Apr 18 17:22:16.727353 2026] [:error] [pid 13023:tid 13039] [client 20.215.249.162:5023] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/106.php"] [unique_id "aeNNSP1e7hG8DAeABB_aYwAAAQ4"]
[Sat Apr 18 17:22:17.298136 2026] [:error] [pid 34290:tid 34329] [client 20.215.249.162:5038] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/106.php"] [unique_id "aeNNSRqX6WpmmAXOBi_ntAAAAco"]
[Sat Apr 18 17:22:17.855494 2026] [:error] [pid 34288:tid 34305] [client 20.215.249.162:5106] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/106.php"] [unique_id "aeNNSeTIiy__PtiLmpm-HwAAAY0"]
[Sat Apr 18 17:22:18.671369 2026] [:error] [pid 9864:tid 9927] [client 20.215.249.162:5002] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeNNSoCFeowknfXHM7nZnAAAAFU"]
[Sat Apr 18 17:22:19.342771 2026] [:error] [pid 9970:tid 9981] [client 20.215.249.162:4939] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeNNSyYdRLRhVmaIMx2N9QAAAMc"]
[Sat Apr 18 17:22:19.929810 2026] [:error] [pid 9865:tid 9941] [client 20.215.249.162:5013] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeNNS6zb5knECIY-C-hkNwAAAIQ"]
[Sat Apr 18 17:22:20.523369 2026] [:error] [pid 9863:tid 9892] [client 20.215.249.162:5040] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeNNTDjjiypiFrTucbK0GwAAABM"]
[Sat Apr 18 17:22:21.156371 2026] [:error] [pid 34288:tid 34314] [client 20.215.249.162:5113] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cwclass.php"] [unique_id "aeNNTeTIiy__PtiLmpm-KgAAAZY"]
[Sat Apr 18 17:22:21.789253 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:5063] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cwclass.php"] [unique_id "aeNNTRBmX4Wq5a6rxfZbAwAAAUc"]
[Sat Apr 18 17:22:22.430649 2026] [:error] [pid 34237:tid 34262] [client 20.215.249.162:5041] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cwclass.php"] [unique_id "aeNNThBmX4Wq5a6rxfZbBQAAAVc"]
[Sat Apr 18 17:22:23.025313 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:5011] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cwclass.php"] [unique_id "aeNNTxBmX4Wq5a6rxfZbCQAAAUA"]
[Sat Apr 18 17:22:23.651748 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4974] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aeNNTxBmX4Wq5a6rxfZbDAAAAUQ"]
[Sat Apr 18 17:22:24.280056 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:5075] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aeNNUBBmX4Wq5a6rxfZbDgAAAU0"]
[Sat Apr 18 17:22:25.000587 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:5071] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aeNNUBBmX4Wq5a6rxfZbFgAAAUc"]
[Sat Apr 18 17:22:25.609309 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:5049] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aeNNURBmX4Wq5a6rxfZbGQAAAUY"]
[Sat Apr 18 17:22:26.222950 2026] [:error] [pid 34288:tid 34313] [client 20.215.249.162:5093] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/41.php"] [unique_id "aeNNUuTIiy__PtiLmpm-OAAAAZU"]
[Sat Apr 18 17:22:26.989139 2026] [:error] [pid 34237:tid 34253] [client 20.215.249.162:5073] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/41.php"] [unique_id "aeNNUhBmX4Wq5a6rxfZbIQAAAU4"]
[Sat Apr 18 17:22:27.621690 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:5094] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/41.php"] [unique_id "aeNNUxBmX4Wq5a6rxfZbJQAAAUc"]
[Sat Apr 18 17:22:28.444543 2026] [:error] [pid 9863:tid 9884] [client 20.215.249.162:5068] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/41.php"] [unique_id "aeNNVDjjiypiFrTucbK0IQAAAAs"]
[Sat Apr 18 17:22:29.432783 2026] [:error] [pid 34290:tid 34327] [client 20.215.249.162:5064] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww.php"] [unique_id "aeNNVRqX6WpmmAXOBi_nuQAAAcg"]
[Sat Apr 18 17:22:30.289881 2026] [:error] [pid 34237:tid 34256] [client 20.215.249.162:5001] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww.php"] [unique_id "aeNNVhBmX4Wq5a6rxfZbWAAAAVE"]
[Sat Apr 18 17:22:31.089070 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:4992] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww.php"] [unique_id "aeNNVxqX6WpmmAXOBi_nuwAAAdE"]
[Sat Apr 18 17:22:31.677593 2026] [:error] [pid 9863:tid 9886] [client 20.215.249.162:4945] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww.php"] [unique_id "aeNNVzjjiypiFrTucbK0MwAAAA0"]
[Sat Apr 18 17:22:32.275980 2026] [:error] [pid 34290:tid 34332] [client 20.215.249.162:5021] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeNNWBqX6WpmmAXOBi_nwQAAAc0"]
[Sat Apr 18 17:22:32.861555 2026] [:error] [pid 9864:tid 9920] [client 20.215.249.162:4934] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeNNWICFeowknfXHM7nZrAAAAE4"]
[Sat Apr 18 17:22:33.413393 2026] [:error] [pid 34290:tid 34325] [client 20.215.249.162:4998] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeNNWRqX6WpmmAXOBi_nxwAAAcY"]
[Sat Apr 18 17:22:34.019779 2026] [:error] [pid 34290:tid 34343] [client 20.215.249.162:5109] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeNNWhqX6WpmmAXOBi_nygAAAdg"]
[Sat Apr 18 17:22:34.587663 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:4938] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "aeNNWoCFeowknfXHM7nZrwAAAE0"]
[Sat Apr 18 17:22:35.170042 2026] [:error] [pid 9864:tid 9909] [client 20.215.249.162:4997] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "aeNNW4CFeowknfXHM7nZsgAAAEQ"]
[Sat Apr 18 17:22:35.808098 2026] [:error] [pid 9864:tid 9908] [client 20.215.249.162:4950] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "aeNNW4CFeowknfXHM7nZtQAAAEM"]
[Sat Apr 18 17:22:36.425114 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:5048] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "aeNNXICFeowknfXHM7nZuQAAAFM"]
[Sat Apr 18 17:22:37.047876 2026] [:error] [pid 9970:tid 9975] [client 20.215.249.162:5076] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mjq.php"] [unique_id "aeNNXSYdRLRhVmaIMx2OBgAAAME"]
[Sat Apr 18 17:22:37.619454 2026] [:error] [pid 34290:tid 34335] [client 20.215.249.162:4977] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mjq.php"] [unique_id "aeNNXRqX6WpmmAXOBi_nzwAAAdA"]
[Sat Apr 18 17:22:38.241373 2026] [:error] [pid 34288:tid 34303] [client 20.215.249.162:5039] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mjq.php"] [unique_id "aeNNXuTIiy__PtiLmpm-SQAAAYs"]
[Sat Apr 18 17:22:38.928422 2026] [:error] [pid 34290:tid 34325] [client 20.215.249.162:5006] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mjq.php"] [unique_id "aeNNXhqX6WpmmAXOBi_n0QAAAcY"]
[Sat Apr 18 17:22:39.555800 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:5016] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zu.php"] [unique_id "aeNNXxqX6WpmmAXOBi_n1AAAAdE"]
[Sat Apr 18 17:22:40.281267 2026] [:error] [pid 34288:tid 34310] [client 20.215.249.162:5031] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zu.php"] [unique_id "aeNNYOTIiy__PtiLmpm-SgAAAZI"]
[Sat Apr 18 17:22:40.968770 2026] [:error] [pid 9865:tid 9942] [client 20.215.249.162:5016] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zu.php"] [unique_id "aeNNYKzb5knECIY-C-hkRAAAAIU"]
[Sat Apr 18 17:22:41.611931 2026] [:error] [pid 34288:tid 34313] [client 20.215.249.162:5054] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zu.php"] [unique_id "aeNNYeTIiy__PtiLmpm-TAAAAZU"]
[Sat Apr 18 17:22:42.174983 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:4963] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws53.php"] [unique_id "aeNNYhBmX4Wq5a6rxfZbbgAAAUo"]
[Sat Apr 18 17:22:42.753263 2026] [:error] [pid 13023:tid 13040] [client 20.215.249.162:5100] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws53.php"] [unique_id "aeNNYv1e7hG8DAeABB_aegAAAQ8"]
[Sat Apr 18 17:22:43.430612 2026] [:error] [pid 34290:tid 34331] [client 20.215.249.162:5086] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws53.php"] [unique_id "aeNNYxqX6WpmmAXOBi_n1wAAAcw"]
[Sat Apr 18 17:22:44.415342 2026] [:error] [pid 9970:tid 9998] [client 20.215.249.162:5003] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws53.php"] [unique_id "aeNNZCYdRLRhVmaIMx2ODAAAANg"]
[Sat Apr 18 17:22:45.236524 2026] [:error] [pid 34290:tid 34337] [client 20.215.249.162:5015] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws56.php"] [unique_id "aeNNZRqX6WpmmAXOBi_n2AAAAdI"]
[Sat Apr 18 17:22:46.052490 2026] [:error] [pid 9970:tid 9974] [client 20.215.249.162:5053] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws56.php"] [unique_id "aeNNZiYdRLRhVmaIMx2ODwAAAMA"]
[Sat Apr 18 17:22:46.950261 2026] [:error] [pid 9864:tid 9918] [client 20.215.249.162:5019] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws56.php"] [unique_id "aeNNZoCFeowknfXHM7nZzgAAAEw"]
[Sat Apr 18 17:22:47.706455 2026] [:error] [pid 9970:tid 9975] [client 20.215.249.162:5107] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws56.php"] [unique_id "aeNNZyYdRLRhVmaIMx2OEgAAAME"]
[Sat Apr 18 17:22:48.403607 2026] [:error] [pid 9970:tid 9988] [client 20.215.249.162:4949] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws58.php"] [unique_id "aeNNaCYdRLRhVmaIMx2OFQAAAM4"]
[Sat Apr 18 17:22:49.023530 2026] [:error] [pid 9864:tid 9915] [client 20.215.249.162:4928] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws58.php"] [unique_id "aeNNaYCFeowknfXHM7nZ0AAAAEk"]
[Sat Apr 18 17:22:49.622904 2026] [:error] [pid 34237:tid 34251] [client 20.215.249.162:4970] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws58.php"] [unique_id "aeNNaRBmX4Wq5a6rxfZbdQAAAUw"]
[Sat Apr 18 17:22:50.385535 2026] [:error] [pid 34290:tid 34341] [client 20.215.249.162:5052] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws58.php"] [unique_id "aeNNahqX6WpmmAXOBi_n3AAAAdY"]
[Sat Apr 18 17:22:51.044847 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:5034] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws59.php"] [unique_id "aeNNa4CFeowknfXHM7nZ2gAAAE0"]
[Sat Apr 18 17:22:51.606826 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:4931] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws59.php"] [unique_id "aeNNa4CFeowknfXHM7nZ3QAAAFY"]
[Sat Apr 18 17:22:52.237330 2026] [:error] [pid 13023:tid 13032] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/ws59.php
[Sat Apr 18 17:22:52.494884 2026] [:error] [pid 13023:tid 13034] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/utchiha_O1JFaUaF.php
[Sat Apr 18 17:22:52.756146 2026] [:error] [pid 13023:tid 13035] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/mga.php
[Sat Apr 18 17:22:53.014111 2026] [:error] [pid 13023:tid 13037] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/mds.php
[Sat Apr 18 17:22:53.279505 2026] [:error] [pid 13023:tid 13046] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Sat Apr 18 17:22:53.545455 2026] [:error] [pid 13023:tid 13025] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/iov.php
[Sat Apr 18 17:22:53.939841 2026] [:error] [pid 13023:tid 13025] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/jodohghi.php
[Sat Apr 18 17:22:54.212349 2026] [:error] [pid 13023:tid 13027] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/lmlwpbmm.php
[Sat Apr 18 17:22:54.471571 2026] [:error] [pid 13023:tid 13034] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Sat Apr 18 17:22:54.742180 2026] [:error] [pid 13023:tid 13028] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Sat Apr 18 17:22:55.017501 2026] [:error] [pid 13023:tid 13037] [client 20.215.249.162:5020] File does not exist: /usr/local/apache/htdocs/suspended-page/kbfr.php
[Sat Apr 18 17:22:55.271696 2026] [:error] [pid 13023:tid 13048] [client 20.215.249.162:5020] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abhjr.php"] [unique_id "aeNNb_1e7hG8DAeABB_anAAAARc"]
[Sat Apr 18 17:22:55.912716 2026] [:error] [pid 13023:tid 13039] [client 20.215.249.162:5024] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abhjr.php"] [unique_id "aeNNb_1e7hG8DAeABB_angAAAQ4"]
[Sat Apr 18 17:22:56.467549 2026] [:error] [pid 9864:tid 9918] [client 20.215.249.162:5119] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abhjr.php"] [unique_id "aeNNcICFeowknfXHM7nZ6QAAAEw"]
[Sat Apr 18 17:22:57.064205 2026] [:error] [pid 9864:tid 9906] [client 20.215.249.162:5108] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abhjr.php"] [unique_id "aeNNcYCFeowknfXHM7nZ7AAAAEE"]
[Sat Apr 18 17:22:57.621452 2026] [:error] [pid 34290:tid 34339] [client 20.215.249.162:5055] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/anczg.php"] [unique_id "aeNNcRqX6WpmmAXOBi_n4QAAAdQ"]
[Sat Apr 18 17:22:58.275445 2026] [:error] [pid 34288:tid 34305] [client 20.215.249.162:5045] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/anczg.php"] [unique_id "aeNNcuTIiy__PtiLmpm-VwAAAY0"]
[Sat Apr 18 17:22:59.014229 2026] [:error] [pid 34290:tid 34333] [client 20.215.249.162:5072] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/anczg.php"] [unique_id "aeNNcxqX6WpmmAXOBi_n4gAAAc4"]
[Sat Apr 18 17:22:59.671527 2026] [:error] [pid 34290:tid 34326] [client 20.215.249.162:5079] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/anczg.php"] [unique_id "aeNNcxqX6WpmmAXOBi_n5AAAAcc"]
[Sat Apr 18 17:23:00.310898 2026] [:error] [pid 9864:tid 9909] [client 20.215.249.162:5077] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ardsw.php"] [unique_id "aeNNdICFeowknfXHM7nZ-gAAAEQ"]
[Sat Apr 18 17:23:01.079487 2026] [:error] [pid 9864:tid 9930] [client 20.215.249.162:4935] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ardsw.php"] [unique_id "aeNNdYCFeowknfXHM7nZ_wAAAFg"]
[Sat Apr 18 17:23:01.722078 2026] [:error] [pid 9865:tid 9949] [client 20.215.249.162:4994] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ardsw.php"] [unique_id "aeNNdazb5knECIY-C-hkTwAAAIw"]
[Sat Apr 18 17:23:02.335554 2026] [:error] [pid 9863:tid 9881] [client 20.215.249.162:4942] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ardsw.php"] [unique_id "aeNNdjjjiypiFrTucbK0TAAAAAg"]
[Sat Apr 18 17:23:02.881848 2026] [:error] [pid 34237:tid 34248] [client 20.215.249.162:5044] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atfis.php"] [unique_id "aeNNdhBmX4Wq5a6rxfZbhQAAAUk"]
[Sat Apr 18 17:23:03.468970 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:5114] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atfis.php"] [unique_id "aeNNdxBmX4Wq5a6rxfZbjAAAAUU"]
[Sat Apr 18 17:23:04.105939 2026] [:error] [pid 34237:tid 34261] [client 20.215.249.162:4930] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atfis.php"] [unique_id "aeNNeBBmX4Wq5a6rxfZbjwAAAVY"]
[Sat Apr 18 17:23:04.795859 2026] [:error] [pid 9864:tid 9917] [client 20.215.249.162:4868] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atfis.php"] [unique_id "aeNNeICFeowknfXHM7naCQAAAEs"]
[Sat Apr 18 17:23:05.532880 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:5074] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/azpaq.php"] [unique_id "aeNNeYCFeowknfXHM7naCgAAAFE"]
[Sat Apr 18 17:23:06.112311 2026] [:error] [pid 34290:tid 34327] [client 20.215.249.162:4967] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/azpaq.php"] [unique_id "aeNNehqX6WpmmAXOBi_n6QAAAcg"]
[Sat Apr 18 17:23:06.690483 2026] [:error] [pid 34288:tid 34309] [client 20.215.249.162:5017] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/azpaq.php"] [unique_id "aeNNeuTIiy__PtiLmpm-WQAAAZE"]
[Sat Apr 18 17:23:07.294081 2026] [:error] [pid 9863:tid 9878] [client 20.215.249.162:5036] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/azpaq.php"] [unique_id "aeNNezjjiypiFrTucbK0TQAAAAU"]
[Sat Apr 18 17:23:07.849284 2026] [:error] [pid 9864:tid 9930] [client 20.215.249.162:5004] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bclms.php"] [unique_id "aeNNe4CFeowknfXHM7naEAAAAFg"]
[Sat Apr 18 17:23:08.420647 2026] [:error] [pid 9865:tid 9952] [client 20.215.249.162:4953] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bclms.php"] [unique_id "aeNNfKzb5knECIY-C-hkVAAAAI8"]
[Sat Apr 18 17:23:08.954228 2026] [:error] [pid 9970:tid 9985] [client 20.215.249.162:4872] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bclms.php"] [unique_id "aeNNfCYdRLRhVmaIMx2OHQAAAMs"]
[Sat Apr 18 17:23:09.529738 2026] [:error] [pid 9863:tid 9873] [client 20.215.249.162:5089] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bclms.php"] [unique_id "aeNNfTjjiypiFrTucbK0TgAAAAA"]
[Sat Apr 18 17:23:10.191460 2026] [:error] [pid 9864:tid 9920] [client 20.215.249.162:5043] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bivvw.php"] [unique_id "aeNNfoCFeowknfXHM7naEQAAAE4"]
[Sat Apr 18 17:23:10.764437 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:4969] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bivvw.php"] [unique_id "aeNNfhBmX4Wq5a6rxfZbmgAAAUM"]
[Sat Apr 18 17:23:11.371036 2026] [:error] [pid 34290:tid 34340] [client 20.215.249.162:5087] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bivvw.php"] [unique_id "aeNNfxqX6WpmmAXOBi_n9wAAAdU"]
[Sat Apr 18 17:23:11.963439 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:4957] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bivvw.php"] [unique_id "aeNNf4CFeowknfXHM7naEgAAAFE"]
[Sat Apr 18 17:23:12.552896 2026] [:error] [pid 9970:tid 9998] [client 20.215.249.162:5118] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bykdo.php"] [unique_id "aeNNgCYdRLRhVmaIMx2OIwAAANg"]
[Sat Apr 18 17:23:13.113929 2026] [:error] [pid 9970:tid 9974] [client 20.215.249.162:5098] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bykdo.php"] [unique_id "aeNNgSYdRLRhVmaIMx2OJwAAAMA"]
[Sat Apr 18 17:23:13.691749 2026] [:error] [pid 9970:tid 9997] [client 20.215.249.162:5057] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bykdo.php"] [unique_id "aeNNgSYdRLRhVmaIMx2OKwAAANc"]
[Sat Apr 18 17:23:14.280828 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:5099] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bykdo.php"] [unique_id "aeNNghBmX4Wq5a6rxfZboAAAAUY"]
[Sat Apr 18 17:23:14.852306 2026] [:error] [pid 34288:tid 34314] [client 20.215.249.162:4933] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byueb.php"] [unique_id "aeNNguTIiy__PtiLmpm-XgAAAZY"]
[Sat Apr 18 17:23:15.487152 2026] [:error] [pid 34290:tid 34323] [client 20.215.249.162:4893] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byueb.php"] [unique_id "aeNNgxqX6WpmmAXOBi_n-gAAAcQ"]
[Sat Apr 18 17:23:16.119900 2026] [:error] [pid 9970:tid 9974] [client 20.215.249.162:4947] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byueb.php"] [unique_id "aeNNhCYdRLRhVmaIMx2OMgAAAMA"]
[Sat Apr 18 17:23:16.789902 2026] [:error] [pid 13023:tid 13034] [client 20.215.249.162:4946] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byueb.php"] [unique_id "aeNNhP1e7hG8DAeABB_aqwAAAQk"]
[Sat Apr 18 17:23:17.445414 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:5042] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cjndd.php"] [unique_id "aeNNhYCFeowknfXHM7naFgAAAE0"]
[Sat Apr 18 17:23:18.021868 2026] [:error] [pid 34237:tid 34240] [client 20.215.249.162:5047] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cjndd.php"] [unique_id "aeNNhhBmX4Wq5a6rxfZbpQAAAUE"]
[Sat Apr 18 17:23:18.662806 2026] [:error] [pid 9970:tid 9989] [client 20.215.249.162:4985] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cjndd.php"] [unique_id "aeNNhiYdRLRhVmaIMx2ONgAAAM8"]
[Sat Apr 18 17:23:19.232387 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:5085] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cjndd.php"] [unique_id "aeNNhxBmX4Wq5a6rxfZbsAAAAUo"]
[Sat Apr 18 17:23:19.825847 2026] [:error] [pid 34237:tid 34255] [client 20.215.249.162:4991] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/coiuz.php"] [unique_id "aeNNhxBmX4Wq5a6rxfZbswAAAVA"]
[Sat Apr 18 17:23:20.509724 2026] [:error] [pid 34290:tid 34334] [client 20.215.249.162:5026] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/coiuz.php"] [unique_id "aeNNiBqX6WpmmAXOBi_n_QAAAc8"]
[Sat Apr 18 17:23:21.193687 2026] [:error] [pid 13023:tid 13039] [client 20.215.249.162:5062] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/coiuz.php"] [unique_id "aeNNif1e7hG8DAeABB_aswAAAQ4"]
[Sat Apr 18 17:23:21.935861 2026] [:error] [pid 9863:tid 9887] [client 20.215.249.162:5032] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/coiuz.php"] [unique_id "aeNNiTjjiypiFrTucbK0VgAAAA4"]
[Sat Apr 18 17:23:22.885416 2026] [:error] [pid 9864:tid 9907] [client 20.215.249.162:4937] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "aeNNioCFeowknfXHM7naFwAAAEI"]
[Sat Apr 18 17:23:23.519731 2026] [:error] [pid 9864:tid 9909] [client 20.215.249.162:4996] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "aeNNi4CFeowknfXHM7naGAAAAEQ"]
[Sat Apr 18 17:23:24.106062 2026] [:error] [pid 34290:tid 34337] [client 20.215.249.162:5097] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "aeNNjBqX6WpmmAXOBi_oAAAAAdI"]
[Sat Apr 18 17:23:24.680752 2026] [:error] [pid 34290:tid 34327] [client 20.215.249.162:4951] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "aeNNjBqX6WpmmAXOBi_oAgAAAcg"]
[Sat Apr 18 17:23:25.231199 2026] [:error] [pid 9864:tid 9924] [client 20.215.249.162:4866] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctjpseby.php"] [unique_id "aeNNjYCFeowknfXHM7naHQAAAFI"]
[Sat Apr 18 17:23:25.853747 2026] [:error] [pid 9970:tid 9994] [client 20.215.249.162:4867] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctjpseby.php"] [unique_id "aeNNjSYdRLRhVmaIMx2OOgAAANQ"]
[Sat Apr 18 17:23:26.462027 2026] [:error] [pid 9970:tid 9989] [client 20.215.249.162:4929] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctjpseby.php"] [unique_id "aeNNjiYdRLRhVmaIMx2OPQAAAM8"]
[Sat Apr 18 17:23:27.032657 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:4956] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctjpseby.php"] [unique_id "aeNNjxBmX4Wq5a6rxfZbxgAAAUc"]
[Sat Apr 18 17:23:27.602643 2026] [:error] [pid 9864:tid 9912] [client 20.215.249.162:4983] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cxxuv.php"] [unique_id "aeNNj4CFeowknfXHM7naLwAAAEY"]
[Sat Apr 18 17:23:28.278744 2026] [:error] [pid 9863:tid 9873] [client 20.215.249.162:5117] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cxxuv.php"] [unique_id "aeNNkDjjiypiFrTucbK0XgAAAAA"]
[Sat Apr 18 17:23:28.957324 2026] [:error] [pid 9864:tid 9905] [client 20.215.249.162:4896] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cxxuv.php"] [unique_id "aeNNkICFeowknfXHM7naMwAAAEA"]
[Sat Apr 18 17:23:29.555379 2026] [:error] [pid 9864:tid 9912] [client 20.215.249.162:4962] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cxxuv.php"] [unique_id "aeNNkYCFeowknfXHM7naNgAAAEY"]
[Sat Apr 18 17:23:30.147013 2026] [:error] [pid 9970:tid 9979] [client 20.215.249.162:5110] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dawvg.php"] [unique_id "aeNNkiYdRLRhVmaIMx2OQgAAAMU"]
[Sat Apr 18 17:23:30.731119 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:4803] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dawvg.php"] [unique_id "aeNNkhBmX4Wq5a6rxfZbywAAAUA"]
[Sat Apr 18 17:23:31.306394 2026] [:error] [pid 34237:tid 34248] [client 20.215.249.162:5050] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dawvg.php"] [unique_id "aeNNkxBmX4Wq5a6rxfZb0AAAAUk"]
[Sat Apr 18 17:23:31.860624 2026] [:error] [pid 34237:tid 34261] [client 20.215.249.162:4979] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dawvg.php"] [unique_id "aeNNkxBmX4Wq5a6rxfZb0gAAAVY"]
[Sat Apr 18 17:23:32.457216 2026] [:error] [pid 34290:tid 34325] [client 20.215.249.162:5027] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dhjqs.php"] [unique_id "aeNNlBqX6WpmmAXOBi_oJAAAAcY"]
[Sat Apr 18 17:23:33.073694 2026] [:error] [pid 34288:tid 34305] [client 20.215.249.162:4954] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dhjqs.php"] [unique_id "aeNNleTIiy__PtiLmpm-YgAAAY0"]
[Sat Apr 18 17:23:33.665125 2026] [:error] [pid 34237:tid 34250] [client 20.215.249.162:5030] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dhjqs.php"] [unique_id "aeNNlRBmX4Wq5a6rxfZb2gAAAUs"]
[Sat Apr 18 17:23:34.299728 2026] [:error] [pid 9864:tid 9912] [client 20.215.249.162:4898] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dhjqs.php"] [unique_id "aeNNloCFeowknfXHM7naQQAAAEY"]
[Sat Apr 18 17:23:34.906392 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:5083] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/diayd.php"] [unique_id "aeNNlhBmX4Wq5a6rxfZb3AAAAUY"]
[Sat Apr 18 17:23:35.480252 2026] [:error] [pid 9970:tid 9993] [client 20.215.249.162:4810] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/diayd.php"] [unique_id "aeNNlyYdRLRhVmaIMx2OTAAAANM"]
[Sat Apr 18 17:23:36.066739 2026] [:error] [pid 9970:tid 9979] [client 20.215.249.162:4936] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/diayd.php"] [unique_id "aeNNmCYdRLRhVmaIMx2OTgAAAMU"]
[Sat Apr 18 17:23:36.669323 2026] [:error] [pid 9864:tid 9914] [client 20.215.249.162:4959] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/diayd.php"] [unique_id "aeNNmICFeowknfXHM7naSgAAAEg"]
[Sat Apr 18 17:23:37.240898 2026] [:error] [pid 9970:tid 9991] [client 20.215.249.162:4871] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dljpy.php"] [unique_id "aeNNmSYdRLRhVmaIMx2OVQAAANE"]
[Sat Apr 18 17:23:37.793078 2026] [:error] [pid 9863:tid 9895] [client 20.215.249.162:4886] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dljpy.php"] [unique_id "aeNNmTjjiypiFrTucbK0ZAAAABY"]
[Sat Apr 18 17:23:38.392167 2026] [:error] [pid 9863:tid 9882] [client 20.215.249.162:4990] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dljpy.php"] [unique_id "aeNNmjjjiypiFrTucbK0ZgAAAAk"]
[Sat Apr 18 17:23:39.003910 2026] [:error] [pid 9970:tid 9974] [client 20.215.249.162:5027] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dljpy.php"] [unique_id "aeNNmyYdRLRhVmaIMx2OWwAAAMA"]
[Sat Apr 18 17:23:39.611450 2026] [:error] [pid 9865:tid 9961] [client 20.215.249.162:4986] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dqagu.php"] [unique_id "aeNNm6zb5knECIY-C-hkdgAAAJg"]
[Sat Apr 18 17:23:40.242728 2026] [:error] [pid 34237:tid 34241] [client 20.215.249.162:4955] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dqagu.php"] [unique_id "aeNNnBBmX4Wq5a6rxfZb4wAAAUI"]
[Sat Apr 18 17:23:40.848356 2026] [:error] [pid 9863:tid 9881] [client 20.215.249.162:5090] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dqagu.php"] [unique_id "aeNNnDjjiypiFrTucbK0aQAAAAg"]
[Sat Apr 18 17:23:41.455931 2026] [:error] [pid 34237:tid 34253] [client 20.215.249.162:4961] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dqagu.php"] [unique_id "aeNNnRBmX4Wq5a6rxfZb5wAAAU4"]
[Sat Apr 18 17:23:42.022554 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:4971] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/druqr.php"] [unique_id "aeNNnhBmX4Wq5a6rxfZb7gAAAUc"]
[Sat Apr 18 17:23:42.634758 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:4877] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/druqr.php"] [unique_id "aeNNnoCFeowknfXHM7naVwAAAE0"]
[Sat Apr 18 17:23:43.240114 2026] [:error] [pid 9970:tid 9991] [client 20.215.249.162:4965] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/druqr.php"] [unique_id "aeNNnyYdRLRhVmaIMx2OXAAAANE"]
[Sat Apr 18 17:23:43.848684 2026] [:error] [pid 34237:tid 34250] [client 20.215.249.162:5084] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/druqr.php"] [unique_id "aeNNnxBmX4Wq5a6rxfZb-QAAAUs"]
[Sat Apr 18 17:23:44.441607 2026] [:error] [pid 34237:tid 34254] [client 20.215.249.162:4960] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dyxbc.php"] [unique_id "aeNNoBBmX4Wq5a6rxfZb_QAAAU8"]
[Sat Apr 18 17:23:44.998164 2026] [:error] [pid 9865:tid 9951] [client 20.215.249.162:4980] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dyxbc.php"] [unique_id "aeNNoKzb5knECIY-C-hkegAAAI4"]
[Sat Apr 18 17:23:45.577935 2026] [:error] [pid 9863:tid 9883] [client 20.215.249.162:5051] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dyxbc.php"] [unique_id "aeNNoTjjiypiFrTucbK0cAAAAAo"]
[Sat Apr 18 17:23:46.126527 2026] [:error] [pid 34237:tid 34250] [client 20.215.249.162:4911] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dyxbc.php"] [unique_id "aeNNohBmX4Wq5a6rxfZcAAAAAUs"]
[Sat Apr 18 17:23:46.705425 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:4879] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eapjf.php"] [unique_id "aeNNooCFeowknfXHM7naYgAAAE8"]
[Sat Apr 18 17:23:47.300579 2026] [:error] [pid 34290:tid 34321] [client 20.215.249.162:4875] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eapjf.php"] [unique_id "aeNNoxqX6WpmmAXOBi_oMAAAAcI"]
[Sat Apr 18 17:23:47.920890 2026] [:error] [pid 9864:tid 9916] [client 20.215.249.162:4958] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eapjf.php"] [unique_id "aeNNo4CFeowknfXHM7naaAAAAEo"]
[Sat Apr 18 17:23:48.538723 2026] [:error] [pid 13023:tid 13030] [client 20.215.249.162:4978] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eapjf.php"] [unique_id "aeNNpP1e7hG8DAeABB_ayQAAAQU"]
[Sat Apr 18 17:23:49.089030 2026] [:error] [pid 34288:tid 34316] [client 20.215.249.162:4918] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ebuom.php"] [unique_id "aeNNpeTIiy__PtiLmpm-agAAAZg"]
[Sat Apr 18 17:23:49.863569 2026] [:error] [pid 34290:tid 34327] [client 20.215.249.162:4817] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ebuom.php"] [unique_id "aeNNpRqX6WpmmAXOBi_oMQAAAcg"]
[Sat Apr 18 17:23:50.480184 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:4973] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ebuom.php"] [unique_id "aeNNphBmX4Wq5a6rxfZcCgAAAUc"]
[Sat Apr 18 17:23:51.120937 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:4989] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ebuom.php"] [unique_id "aeNNp4CFeowknfXHM7nacQAAAFE"]
[Sat Apr 18 17:23:51.685133 2026] [:error] [pid 34237:tid 34248] [client 20.215.249.162:4907] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/emcgm.php"] [unique_id "aeNNpxBmX4Wq5a6rxfZcEwAAAUk"]
[Sat Apr 18 17:23:52.325540 2026] [:error] [pid 9970:tid 9988] [client 20.215.249.162:4870] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/emcgm.php"] [unique_id "aeNNqCYdRLRhVmaIMx2OZAAAAM4"]
[Sat Apr 18 17:23:52.940055 2026] [:error] [pid 34290:tid 34320] [client 20.215.249.162:5024] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/emcgm.php"] [unique_id "aeNNqBqX6WpmmAXOBi_oNwAAAcE"]
[Sat Apr 18 17:23:53.580484 2026] [:error] [pid 34290:tid 34323] [client 20.215.249.162:5046] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/emcgm.php"] [unique_id "aeNNqRqX6WpmmAXOBi_oOAAAAcQ"]
[Sat Apr 18 17:23:54.181334 2026] [:error] [pid 34237:tid 34257] [client 20.215.249.162:5116] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/euocu.php"] [unique_id "aeNNqhBmX4Wq5a6rxfZcIgAAAVI"]
[Sat Apr 18 17:23:54.824009 2026] [:error] [pid 9864:tid 9927] [client 20.215.249.162:4941] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/euocu.php"] [unique_id "aeNNqoCFeowknfXHM7naeQAAAFU"]
[Sat Apr 18 17:23:55.451861 2026] [:error] [pid 9864:tid 9913] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/euocu.php
[Sat Apr 18 17:23:55.761643 2026] [:error] [pid 9864:tid 9905] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 18 17:23:56.044495 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/frdyx.php
[Sat Apr 18 17:23:56.345332 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjzs.php
[Sat Apr 18 17:23:56.700745 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/fwtoa.php
[Sat Apr 18 17:23:56.983125 2026] [:error] [pid 9864:tid 9930] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/gbhyv.php
[Sat Apr 18 17:23:57.302709 2026] [:error] [pid 9864:tid 9922] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/gedim.php
[Sat Apr 18 17:23:57.585352 2026] [:error] [pid 9864:tid 9907] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/ibano.php
[Sat Apr 18 17:23:57.882965 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/ifrea.php
[Sat Apr 18 17:23:58.165054 2026] [:error] [pid 9864:tid 9914] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/itlvk.php
[Sat Apr 18 17:23:58.467919 2026] [:error] [pid 9864:tid 9918] [client 20.215.249.162:4897] File does not exist: /usr/local/apache/htdocs/suspended-page/jctyd.php
[Sat Apr 18 17:23:58.808697 2026] [:error] [pid 9864:tid 9908] [client 20.215.249.162:4897] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jtfocpif.php"] [unique_id "aeNNroCFeowknfXHM7naiQAAAEM"]
[Sat Apr 18 17:23:59.509061 2026] [:error] [pid 34237:tid 34250] [client 20.215.249.162:5061] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jtfocpif.php"] [unique_id "aeNNrxBmX4Wq5a6rxfZcLAAAAUs"]
[Sat Apr 18 17:24:00.405608 2026] [:error] [pid 9865:tid 9946] [client 20.215.249.162:4920] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jtfocpif.php"] [unique_id "aeNNsKzb5knECIY-C-hkhgAAAIk"]
[Sat Apr 18 17:24:01.121909 2026] [:error] [pid 34237:tid 34261] [client 20.215.249.162:4888] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jtfocpif.php"] [unique_id "aeNNsRBmX4Wq5a6rxfZcMwAAAVY"]
[Sat Apr 18 17:24:01.744526 2026] [:error] [pid 34237:tid 34258] [client 20.215.249.162:4889] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/junvh.php"] [unique_id "aeNNsRBmX4Wq5a6rxfZcNgAAAVM"]
[Sat Apr 18 17:24:02.290903 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:4878] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/junvh.php"] [unique_id "aeNNshBmX4Wq5a6rxfZcOQAAAU0"]
[Sat Apr 18 17:24:02.900651 2026] [:error] [pid 9864:tid 9917] [client 20.215.249.162:4809] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/junvh.php"] [unique_id "aeNNsoCFeowknfXHM7namQAAAEs"]
[Sat Apr 18 17:24:03.542083 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:5028] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/junvh.php"] [unique_id "aeNNs4CFeowknfXHM7namwAAAE0"]
[Sat Apr 18 17:24:04.189434 2026] [:error] [pid 34237:tid 34241] [client 20.215.249.162:5037] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jvtsa.php"] [unique_id "aeNNtBBmX4Wq5a6rxfZcTQAAAUI"]
[Sat Apr 18 17:24:04.735101 2026] [:error] [pid 34290:tid 34321] [client 20.215.249.162:4899] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jvtsa.php"] [unique_id "aeNNtBqX6WpmmAXOBi_oZQAAAcI"]
[Sat Apr 18 17:24:05.326770 2026] [:error] [pid 13023:tid 13043] [client 20.215.249.162:4943] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jvtsa.php"] [unique_id "aeNNtf1e7hG8DAeABB_bEgAAARI"]
[Sat Apr 18 17:24:06.013298 2026] [:error] [pid 9970:tid 9975] [client 20.215.249.162:4903] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jvtsa.php"] [unique_id "aeNNtiYdRLRhVmaIMx2ObgAAAME"]
[Sat Apr 18 17:24:06.625778 2026] [:error] [pid 34290:tid 34332] [client 20.215.249.162:4972] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kaduu.php"] [unique_id "aeNNthqX6WpmmAXOBi_oawAAAc0"]
[Sat Apr 18 17:24:07.211033 2026] [:error] [pid 34290:tid 34334] [client 20.215.249.162:4739] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kaduu.php"] [unique_id "aeNNtxqX6WpmmAXOBi_obAAAAc8"]
[Sat Apr 18 17:24:07.794317 2026] [:error] [pid 9865:tid 9949] [client 20.215.249.162:4968] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kaduu.php"] [unique_id "aeNNt6zb5knECIY-C-hkjAAAAIw"]
[Sat Apr 18 17:24:08.375147 2026] [:error] [pid 9970:tid 9997] [client 20.215.249.162:4921] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kaduu.php"] [unique_id "aeNNuCYdRLRhVmaIMx2OdQAAANc"]
[Sat Apr 18 17:24:08.988293 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4869] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kagug.php"] [unique_id "aeNNuBBmX4Wq5a6rxfZcbAAAAUQ"]
[Sat Apr 18 17:24:09.568887 2026] [:error] [pid 9864:tid 9920] [client 20.215.249.162:4806] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kagug.php"] [unique_id "aeNNuYCFeowknfXHM7naqwAAAE4"]
[Sat Apr 18 17:24:10.163328 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:4891] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kagug.php"] [unique_id "aeNNuhBmX4Wq5a6rxfZccAAAAUU"]
[Sat Apr 18 17:24:10.727594 2026] [:error] [pid 9864:tid 9922] [client 20.215.249.162:4944] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kagug.php"] [unique_id "aeNNuoCFeowknfXHM7nargAAAFA"]
[Sat Apr 18 17:24:11.313028 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4885] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kandw.php"] [unique_id "aeNNuxBmX4Wq5a6rxfZceAAAAUQ"]
[Sat Apr 18 17:24:11.946216 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4880] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kandw.php"] [unique_id "aeNNuxBmX4Wq5a6rxfZcfwAAAUQ"]
[Sat Apr 18 17:24:12.508625 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:4808] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kandw.php"] [unique_id "aeNNvBBmX4Wq5a6rxfZchgAAAUo"]
[Sat Apr 18 17:24:13.161303 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:4873] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kandw.php"] [unique_id "aeNNvRBmX4Wq5a6rxfZcjQAAAUo"]
[Sat Apr 18 17:24:13.768358 2026] [:error] [pid 34288:tid 34292] [client 20.215.249.162:4966] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kduhq.php"] [unique_id "aeNNveTIiy__PtiLmpm-dwAAAYA"]
[Sat Apr 18 17:24:14.387493 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:5081] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kduhq.php"] [unique_id "aeNNvhBmX4Wq5a6rxfZckwAAAUc"]
[Sat Apr 18 17:24:14.961669 2026] [:error] [pid 34290:tid 34339] [client 20.215.249.162:4831] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kduhq.php"] [unique_id "aeNNvhqX6WpmmAXOBi_ocAAAAdQ"]
[Sat Apr 18 17:24:15.522973 2026] [:error] [pid 9970:tid 9976] [client 20.215.249.162:4826] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kduhq.php"] [unique_id "aeNNvyYdRLRhVmaIMx2OewAAAMI"]
[Sat Apr 18 17:24:16.098694 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:4892] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rgjrq.php"] [unique_id "aeNNwBBmX4Wq5a6rxfZcmQAAAUM"]
[Sat Apr 18 17:24:16.761837 2026] [:error] [pid 34237:tid 34262] [client 20.215.249.162:4923] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rgjrq.php"] [unique_id "aeNNwBBmX4Wq5a6rxfZcngAAAVc"]
[Sat Apr 18 17:24:17.389640 2026] [:error] [pid 34237:tid 34240] [client 20.215.249.162:4900] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rgjrq.php"] [unique_id "aeNNwRBmX4Wq5a6rxfZcpgAAAUE"]
[Sat Apr 18 17:24:17.966692 2026] [:error] [pid 34290:tid 34341] [client 20.215.249.162:4906] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rgjrq.php"] [unique_id "aeNNwRqX6WpmmAXOBi_oeAAAAdY"]
[Sat Apr 18 17:24:18.606935 2026] [:error] [pid 9864:tid 9929] [client 20.215.249.162:4976] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vopxx.php"] [unique_id "aeNNwoCFeowknfXHM7natAAAAFc"]
[Sat Apr 18 17:24:19.236710 2026] [:error] [pid 34290:tid 34326] [client 20.215.249.162:4981] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vopxx.php"] [unique_id "aeNNwxqX6WpmmAXOBi_oewAAAcc"]
[Sat Apr 18 17:24:19.811055 2026] [:error] [pid 13023:tid 13029] [client 20.215.249.162:4818] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vopxx.php"] [unique_id "aeNNw_1e7hG8DAeABB_bGwAAAQQ"]
[Sat Apr 18 17:24:20.439772 2026] [:error] [pid 13023:tid 13030] [client 20.215.249.162:4832] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vopxx.php"] [unique_id "aeNNxP1e7hG8DAeABB_bHAAAAQU"]
[Sat Apr 18 17:24:21.130500 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:4890] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wcoiw.php"] [unique_id "aeNNxRBmX4Wq5a6rxfZcrgAAAU0"]
[Sat Apr 18 17:24:21.823444 2026] [:error] [pid 34237:tid 34240] [client 20.215.249.162:4902] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wcoiw.php"] [unique_id "aeNNxRBmX4Wq5a6rxfZcswAAAUE"]
[Sat Apr 18 17:24:22.466086 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:4905] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wcoiw.php"] [unique_id "aeNNxhBmX4Wq5a6rxfZctwAAAUM"]
[Sat Apr 18 17:24:23.054689 2026] [:error] [pid 9864:tid 9909] [client 20.215.249.162:4988] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wcoiw.php"] [unique_id "aeNNx4CFeowknfXHM7nauAAAAEQ"]
[Sat Apr 18 17:24:23.625637 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:4805] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtogs.php"] [unique_id "aeNNxxBmX4Wq5a6rxfZcvwAAAUY"]
[Sat Apr 18 17:24:24.181681 2026] [:error] [pid 9864:tid 9913] [client 20.215.249.162:4741] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtogs.php"] [unique_id "aeNNyICFeowknfXHM7nauwAAAEc"]
[Sat Apr 18 17:24:24.902022 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:4940] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtogs.php"] [unique_id "aeNNyBBmX4Wq5a6rxfZcxQAAAU0"]
[Sat Apr 18 17:24:25.525948 2026] [:error] [pid 34288:tid 34308] [client 20.215.249.162:4834] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtogs.php"] [unique_id "aeNNyeTIiy__PtiLmpm-fwAAAZA"]
[Sat Apr 18 17:24:26.101401 2026] [:error] [pid 34290:tid 34322] [client 20.215.249.162:4984] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xbbih.php"] [unique_id "aeNNyhqX6WpmmAXOBi_ohQAAAcM"]
[Sat Apr 18 17:24:26.665661 2026] [:error] [pid 34290:tid 34319] [client 20.215.249.162:4922] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xbbih.php"] [unique_id "aeNNyhqX6WpmmAXOBi_oiQAAAcA"]
[Sat Apr 18 17:24:27.226541 2026] [:error] [pid 9865:tid 9956] [client 20.215.249.162:4865] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xbbih.php"] [unique_id "aeNNy6zb5knECIY-C-hklgAAAJM"]
[Sat Apr 18 17:24:27.821019 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:4857] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xbbih.php"] [unique_id "aeNNyxBmX4Wq5a6rxfZczAAAAUg"]
[Sat Apr 18 17:24:28.392041 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:4774] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xcakx.php"] [unique_id "aeNNzBBmX4Wq5a6rxfZczQAAAUA"]
[Sat Apr 18 17:24:29.078129 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:4864] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xcakx.php"] [unique_id "aeNNzRqX6WpmmAXOBi_ojwAAAdE"]
[Sat Apr 18 17:24:29.718847 2026] [:error] [pid 34288:tid 34313] [client 20.215.249.162:4925] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xcakx.php"] [unique_id "aeNNzeTIiy__PtiLmpm-iwAAAZU"]
[Sat Apr 18 17:24:30.281633 2026] [:error] [pid 34290:tid 34323] [client 20.215.249.162:4901] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xcakx.php"] [unique_id "aeNNzhqX6WpmmAXOBi_okgAAAcQ"]
[Sat Apr 18 17:24:30.879063 2026] [:error] [pid 9865:tid 9955] [client 20.215.249.162:4827] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xjgdw.php"] [unique_id "aeNNzqzb5knECIY-C-hklwAAAJI"]
[Sat Apr 18 17:24:31.433514 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:4861] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xjgdw.php"] [unique_id "aeNNzxBmX4Wq5a6rxfZczgAAAUg"]
[Sat Apr 18 17:24:32.015344 2026] [:error] [pid 34237:tid 34255] [client 20.215.249.162:4825] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xjgdw.php"] [unique_id "aeNN0BBmX4Wq5a6rxfZc1AAAAVA"]
[Sat Apr 18 17:24:32.575187 2026] [:error] [pid 34288:tid 34295] [client 20.215.249.162:4884] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xjgdw.php"] [unique_id "aeNN0OTIiy__PtiLmpm-jAAAAYM"]
[Sat Apr 18 17:24:33.121083 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4926] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xopgt.php"] [unique_id "aeNN0YCFeowknfXHM7nayQAAAEU"]
[Sat Apr 18 17:24:33.689576 2026] [:error] [pid 13023:tid 13025] [client 20.215.249.162:4830] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xopgt.php"] [unique_id "aeNN0f1e7hG8DAeABB_bKQAAAQA"]
[Sat Apr 18 17:24:34.259860 2026] [:error] [pid 9864:tid 9912] [client 20.215.249.162:4828] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xopgt.php"] [unique_id "aeNN0oCFeowknfXHM7nazwAAAEY"]
[Sat Apr 18 17:24:34.859728 2026] [:error] [pid 34288:tid 34298] [client 20.215.249.162:4916] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xopgt.php"] [unique_id "aeNN0uTIiy__PtiLmpm-jQAAAYY"]
[Sat Apr 18 17:24:35.443218 2026] [:error] [pid 34237:tid 34255] [client 20.215.249.162:4816] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsjtz.php"] [unique_id "aeNN0xBmX4Wq5a6rxfZc5QAAAVA"]
[Sat Apr 18 17:24:36.091846 2026] [:error] [pid 9864:tid 9906] [client 20.215.249.162:4811] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsjtz.php"] [unique_id "aeNN1ICFeowknfXHM7na0wAAAEE"]
[Sat Apr 18 17:24:36.722762 2026] [:error] [pid 9865:tid 9958] [client 20.215.249.162:4841] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsjtz.php"] [unique_id "aeNN1Kzb5knECIY-C-hkmwAAAJU"]
[Sat Apr 18 17:24:37.281450 2026] [:error] [pid 9864:tid 9909] [client 20.215.249.162:4964] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsjtz.php"] [unique_id "aeNN1YCFeowknfXHM7na1gAAAEQ"]
[Sat Apr 18 17:24:37.923306 2026] [:error] [pid 9864:tid 9916] [client 20.215.249.162:4952] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zvinn.php"] [unique_id "aeNN1YCFeowknfXHM7na2gAAAEo"]
[Sat Apr 18 17:24:38.486980 2026] [:error] [pid 9865:tid 9959] [client 20.215.249.162:4982] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zvinn.php"] [unique_id "aeNN1qzb5knECIY-C-hknAAAAJY"]
[Sat Apr 18 17:24:39.065034 2026] [:error] [pid 9864:tid 9917] [client 20.215.249.162:4852] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zvinn.php"] [unique_id "aeNN14CFeowknfXHM7na3AAAAEs"]
[Sat Apr 18 17:24:39.617056 2026] [:error] [pid 34290:tid 34338] [client 20.215.249.162:4919] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zvinn.php"] [unique_id "aeNN1xqX6WpmmAXOBi_onAAAAdM"]
[Sat Apr 18 17:24:40.190742 2026] [:error] [pid 34290:tid 34337] [client 20.215.249.162:4849] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/balin.php"] [unique_id "aeNN2BqX6WpmmAXOBi_onQAAAdI"]
[Sat Apr 18 17:24:40.813812 2026] [:error] [pid 34237:tid 34241] [client 20.215.249.162:4912] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/balin.php"] [unique_id "aeNN2BBmX4Wq5a6rxfZc9QAAAUI"]
[Sat Apr 18 17:24:41.372008 2026] [:error] [pid 34237:tid 34261] [client 20.215.249.162:4882] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/balin.php"] [unique_id "aeNN2RBmX4Wq5a6rxfZc-wAAAVY"]
[Sat Apr 18 17:24:41.991881 2026] [:error] [pid 9865:tid 9947] [client 20.215.249.162:4908] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/balin.php"] [unique_id "aeNN2azb5knECIY-C-hkngAAAIo"]
[Sat Apr 18 17:24:42.595101 2026] [:error] [pid 9864:tid 9927] [client 20.215.249.162:4758] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeNN2oCFeowknfXHM7na5AAAAFU"]
[Sat Apr 18 17:24:43.243051 2026] [:error] [pid 13023:tid 13029] [client 20.215.249.162:4836] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeNN2_1e7hG8DAeABB_bMwAAAQQ"]
[Sat Apr 18 17:24:44.080317 2026] [:error] [pid 13023:tid 13046] [client 20.215.249.162:4915] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeNN3P1e7hG8DAeABB_bNQAAARU"]
[Sat Apr 18 17:24:44.852481 2026] [:error] [pid 9865:tid 9951] [client 20.215.249.162:4874] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x19493QU8ZQ.php"] [unique_id "aeNN3Kzb5knECIY-C-hkpgAAAI4"]
[Sat Apr 18 17:24:45.508620 2026] [:error] [pid 34288:tid 34316] [client 20.215.249.162:4917] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13ede.php"] [unique_id "aeNN3eTIiy__PtiLmpm-lgAAAZg"]
[Sat Apr 18 17:24:46.121956 2026] [:error] [pid 9864:tid 9912] [client 20.215.249.162:4876] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13ede.php"] [unique_id "aeNN3oCFeowknfXHM7na5gAAAEY"]
[Sat Apr 18 17:24:46.704369 2026] [:error] [pid 34237:tid 34250] [client 20.215.249.162:4801] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13ede.php"] [unique_id "aeNN3hBmX4Wq5a6rxfZdBQAAAUs"]
[Sat Apr 18 17:24:47.392249 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:4883] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13ede.php"] [unique_id "aeNN34CFeowknfXHM7na6gAAAE0"]
[Sat Apr 18 17:24:48.048994 2026] [:error] [pid 34290:tid 34341] [client 20.215.249.162:4737] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akhvg.php"] [unique_id "aeNN4BqX6WpmmAXOBi_ooQAAAdY"]
[Sat Apr 18 17:24:48.602153 2026] [:error] [pid 34237:tid 34256] [client 20.215.249.162:4846] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akhvg.php"] [unique_id "aeNN4BBmX4Wq5a6rxfZdBwAAAVE"]
[Sat Apr 18 17:24:49.174083 2026] [:error] [pid 34237:tid 34240] [client 20.215.249.162:4812] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akhvg.php"] [unique_id "aeNN4RBmX4Wq5a6rxfZdCgAAAUE"]
[Sat Apr 18 17:24:50.241392 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:4820] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akhvg.php"] [unique_id "aeNN4hBmX4Wq5a6rxfZdEAAAAUA"]
[Sat Apr 18 17:24:50.876283 2026] [:error] [pid 34237:tid 34258] [client 20.215.249.162:4736] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assacc.php"] [unique_id "aeNN4hBmX4Wq5a6rxfZdFAAAAVM"]
[Sat Apr 18 17:24:51.506324 2026] [:error] [pid 34288:tid 34299] [client 20.215.249.162:4843] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assacc.php"] [unique_id "aeNN4-TIiy__PtiLmpm-mgAAAYc"]
[Sat Apr 18 17:24:52.089847 2026] [:error] [pid 9970:tid 9978] [client 20.215.249.162:4747] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assacc.php"] [unique_id "aeNN5CYdRLRhVmaIMx2OjAAAAMQ"]
[Sat Apr 18 17:24:52.676779 2026] [:error] [pid 34290:tid 34335] [client 20.215.249.162:4848] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assacc.php"] [unique_id "aeNN5BqX6WpmmAXOBi_opwAAAdA"]
[Sat Apr 18 17:24:53.300701 2026] [:error] [pid 34290:tid 34333] [client 20.215.249.162:5005] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "aeNN5RqX6WpmmAXOBi_oqgAAAc4"]
[Sat Apr 18 17:24:53.923415 2026] [:error] [pid 34237:tid 34256] [client 20.215.249.162:4771] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "aeNN5RBmX4Wq5a6rxfZdGQAAAVE"]
[Sat Apr 18 17:24:54.487703 2026] [:error] [pid 34237:tid 34255] [client 20.215.249.162:4738] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "aeNN5hBmX4Wq5a6rxfZdGwAAAVA"]
[Sat Apr 18 17:24:55.030477 2026] [:error] [pid 34290:tid 34327] [client 20.215.249.162:4767] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "aeNN5xqX6WpmmAXOBi_orAAAAcg"]
[Sat Apr 18 17:24:55.761737 2026] [:error] [pid 34237:tid 34262] [client 20.215.249.162:4744] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "aeNN5xBmX4Wq5a6rxfZdIAAAAVc"]
[Sat Apr 18 17:24:56.339422 2026] [:error] [pid 9865:tid 9955] [client 20.215.249.162:4845] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "aeNN6Kzb5knECIY-C-hksgAAAJI"]
[Sat Apr 18 17:24:56.919420 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:4914] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "aeNN6BBmX4Wq5a6rxfZdIQAAAUM"]
[Sat Apr 18 17:24:57.571205 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4813] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "aeNN6RBmX4Wq5a6rxfZdJAAAAUQ"]
[Sat Apr 18 17:24:58.144648 2026] [:error] [pid 9970:tid 9981] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Apr 18 17:24:58.402108 2026] [:error] [pid 9970:tid 9980] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/fetch.php
[Sat Apr 18 17:24:58.660366 2026] [:error] [pid 9970:tid 9979] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/jnhddqyz.php
[Sat Apr 18 17:24:58.927414 2026] [:error] [pid 9970:tid 9974] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/cgi-bin_bkp.php
[Sat Apr 18 17:24:59.184317 2026] [:error] [pid 9970:tid 9993] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/l10n.php
[Sat Apr 18 17:24:59.453856 2026] [:error] [pid 9970:tid 9986] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/abpxrnwe.php
[Sat Apr 18 17:24:59.735103 2026] [:error] [pid 9970:tid 9989] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/abalqdol.php
[Sat Apr 18 17:24:59.991716 2026] [:error] [pid 9970:tid 9991] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/aqotrjkg.php
[Sat Apr 18 17:25:00.250343 2026] [:error] [pid 9970:tid 9976] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/bhigtouj.php
[Sat Apr 18 17:25:00.517021 2026] [:error] [pid 9970:tid 9987] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/bxhnfdgd.php
[Sat Apr 18 17:25:00.787318 2026] [:error] [pid 9970:tid 9988] [client 20.215.249.162:4790] File does not exist: /usr/local/apache/htdocs/suspended-page/ccrheegr.php
[Sat Apr 18 17:25:01.053654 2026] [:error] [pid 9970:tid 9994] [client 20.215.249.162:4790] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeNN7SYdRLRhVmaIMx2OnAAAANQ"]
[Sat Apr 18 17:25:01.599083 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:4794] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeNN7RBmX4Wq5a6rxfZdPAAAAUU"]
[Sat Apr 18 17:25:02.151390 2026] [:error] [pid 13023:tid 13043] [client 20.215.249.162:4895] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeNN7v1e7hG8DAeABB_bRwAAARI"]
[Sat Apr 18 17:25:02.702414 2026] [:error] [pid 13023:tid 13028] [client 20.215.249.162:4743] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckmtelzy.php"] [unique_id "aeNN7v1e7hG8DAeABB_bTAAAAQM"]
[Sat Apr 18 17:25:03.391718 2026] [:error] [pid 9865:tid 9953] [client 20.215.249.162:4802] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggddssvl.php"] [unique_id "aeNN76zb5knECIY-C-hktgAAAJA"]
[Sat Apr 18 17:25:03.939352 2026] [:error] [pid 34288:tid 34292] [client 20.215.249.162:4975] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggddssvl.php"] [unique_id "aeNN7-TIiy__PtiLmpm-pwAAAYA"]
[Sat Apr 18 17:25:04.564427 2026] [:error] [pid 34290:tid 34335] [client 20.215.249.162:4855] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggddssvl.php"] [unique_id "aeNN8BqX6WpmmAXOBi_ovQAAAdA"]
[Sat Apr 18 17:25:05.129896 2026] [:error] [pid 9864:tid 9905] [client 20.215.249.162:4675] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggddssvl.php"] [unique_id "aeNN8YCFeowknfXHM7na_QAAAEA"]
[Sat Apr 18 17:25:05.704065 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:4797] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeNN8RBmX4Wq5a6rxfZdQAAAAUg"]
[Sat Apr 18 17:25:06.294271 2026] [:error] [pid 34288:tid 34293] [client 20.215.249.162:4760] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeNN8uTIiy__PtiLmpm-qQAAAYE"]
[Sat Apr 18 17:25:06.996243 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:4887] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeNN8hBmX4Wq5a6rxfZdSAAAAUU"]
[Sat Apr 18 17:25:07.561473 2026] [:error] [pid 9864:tid 9907] [client 20.215.249.162:4909] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajckrrj.php"] [unique_id "aeNN84CFeowknfXHM7na_wAAAEI"]
[Sat Apr 18 17:25:08.116535 2026] [:error] [pid 34237:tid 34258] [client 20.215.249.162:4814] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeNN9BBmX4Wq5a6rxfZdTwAAAVM"]
[Sat Apr 18 17:25:08.670118 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:5014] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeNN9BBmX4Wq5a6rxfZdWQAAAUQ"]
[Sat Apr 18 17:25:09.209171 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:4821] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeNN9RBmX4Wq5a6rxfZdXQAAAUY"]
[Sat Apr 18 17:25:09.794490 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:4839] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajelmxf.php"] [unique_id "aeNN9RBmX4Wq5a6rxfZdYAAAAUc"]
[Sat Apr 18 17:25:10.361107 2026] [:error] [pid 34288:tid 34307] [client 20.215.249.162:4837] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeNN9uTIiy__PtiLmpm-qwAAAY8"]
[Sat Apr 18 17:25:10.918229 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:4764] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeNN9hBmX4Wq5a6rxfZdaAAAAUU"]
[Sat Apr 18 17:25:11.489269 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:4853] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeNN94CFeowknfXHM7nbBAAAAE8"]
[Sat Apr 18 17:25:12.095018 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:4838] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ovajkgsbb.php"] [unique_id "aeNN-ICFeowknfXHM7nbBgAAAFM"]
[Sat Apr 18 17:25:12.676475 2026] [:error] [pid 34288:tid 34304] [client 20.215.249.162:4844] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "aeNN-OTIiy__PtiLmpm-rQAAAYw"]
[Sat Apr 18 17:25:13.440410 2026] [:error] [pid 13023:tid 13028] [client 20.215.249.162:4881] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "aeNN-f1e7hG8DAeABB_bWgAAAQM"]
[Sat Apr 18 17:25:14.154659 2026] [:error] [pid 9864:tid 9909] [client 20.215.249.162:4678] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "aeNN-oCFeowknfXHM7nbEAAAAEQ"]
[Sat Apr 18 17:25:14.717755 2026] [:error] [pid 9864:tid 9916] [client 20.215.249.162:4862] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/erty.php"] [unique_id "aeNN-oCFeowknfXHM7nbEwAAAEo"]
[Sat Apr 18 17:25:15.275215 2026] [:error] [pid 9864:tid 9912] [client 20.215.249.162:4987] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shop.php"] [unique_id "aeNN-4CFeowknfXHM7nbFgAAAEY"]
[Sat Apr 18 17:25:15.904154 2026] [:error] [pid 9970:tid 9989] [client 20.215.249.162:4850] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shop.php"] [unique_id "aeNN-yYdRLRhVmaIMx2OuwAAAM8"]
[Sat Apr 18 17:25:16.469886 2026] [:error] [pid 34237:tid 34261] [client 20.215.249.162:4924] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shop.php"] [unique_id "aeNN_BBmX4Wq5a6rxfZdcgAAAVY"]
[Sat Apr 18 17:25:17.042075 2026] [:error] [pid 13023:tid 13037] [client 20.215.249.162:4772] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shop.php"] [unique_id "aeNN_f1e7hG8DAeABB_bXQAAAQw"]
[Sat Apr 18 17:25:17.569045 2026] [:error] [pid 9865:tid 9961] [client 20.215.249.162:4753] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "aeNN_azb5knECIY-C-hkvwAAAJg"]
[Sat Apr 18 17:25:18.149789 2026] [:error] [pid 9970:tid 9996] [client 20.215.249.162:4910] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "aeNN_iYdRLRhVmaIMx2OwQAAANY"]
[Sat Apr 18 17:25:18.709052 2026] [:error] [pid 13023:tid 13044] [client 20.215.249.162:4793] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "aeNN_v1e7hG8DAeABB_bYAAAARM"]
[Sat Apr 18 17:25:19.263037 2026] [:error] [pid 9863:tid 9886] [client 20.215.249.162:4763] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "aeNN_zjjiypiFrTucbK0jgAAAA0"]
[Sat Apr 18 17:25:19.809654 2026] [:error] [pid 13023:tid 13043] [client 20.215.249.162:5029] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0xD.php"] [unique_id "aeNN__1e7hG8DAeABB_bZgAAARI"]
[Sat Apr 18 17:25:20.386390 2026] [:error] [pid 34290:tid 34335] [client 20.215.249.162:4856] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0xD.php"] [unique_id "aeNOABqX6WpmmAXOBi_oygAAAdA"]
[Sat Apr 18 17:25:20.928320 2026] [:error] [pid 13023:tid 13028] [client 20.215.249.162:5069] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0xD.php"] [unique_id "aeNOAP1e7hG8DAeABB_bawAAAQM"]
[Sat Apr 18 17:25:21.490970 2026] [:error] [pid 13023:tid 13026] [client 20.215.249.162:4746] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0xD.php"] [unique_id "aeNOAf1e7hG8DAeABB_bbwAAAQE"]
[Sat Apr 18 17:25:22.045581 2026] [:error] [pid 9863:tid 9884] [client 20.215.249.162:4948] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gh.php"] [unique_id "aeNOAjjjiypiFrTucbK0kAAAAAs"]
[Sat Apr 18 17:25:22.559285 2026] [:error] [pid 34237:tid 34263] [client 20.215.249.162:4842] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gh.php"] [unique_id "aeNOAhBmX4Wq5a6rxfZddgAAAVg"]
[Sat Apr 18 17:25:23.125891 2026] [:error] [pid 13023:tid 13035] [client 20.215.249.162:4769] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gh.php"] [unique_id "aeNOA_1e7hG8DAeABB_bcwAAAQo"]
[Sat Apr 18 17:25:23.732710 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:4795] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gh.php"] [unique_id "aeNOAxBmX4Wq5a6rxfZdewAAAUA"]
[Sat Apr 18 17:25:24.273689 2026] [:error] [pid 34290:tid 34338] [client 20.215.249.162:4751] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeNOBBqX6WpmmAXOBi_ozAAAAdM"]
[Sat Apr 18 17:25:24.832060 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:4750] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeNOBICFeowknfXHM7nbKQAAAFY"]
[Sat Apr 18 17:25:25.421403 2026] [:error] [pid 34290:tid 34327] [client 20.215.249.162:4749] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeNOBRqX6WpmmAXOBi_ozQAAAcg"]
[Sat Apr 18 17:25:25.968330 2026] [:error] [pid 9863:tid 9889] [client 20.215.249.162:4765] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeNOBTjjiypiFrTucbK0nwAAABA"]
[Sat Apr 18 17:25:26.480362 2026] [:error] [pid 9863:tid 9895] [client 20.215.249.162:4787] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "aeNOBjjjiypiFrTucbK0pAAAABY"]
[Sat Apr 18 17:25:27.040048 2026] [:error] [pid 34288:tid 34310] [client 20.215.249.162:4800] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "aeNOB-TIiy__PtiLmpm-uAAAAZI"]
[Sat Apr 18 17:25:27.624516 2026] [:error] [pid 34288:tid 34309] [client 20.215.249.162:4798] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "aeNOB-TIiy__PtiLmpm-uQAAAZE"]
[Sat Apr 18 17:25:28.250573 2026] [:error] [pid 9865:tid 9951] [client 20.215.249.162:4682] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "aeNOCKzb5knECIY-C-hkyAAAAI4"]
[Sat Apr 18 17:25:28.881155 2026] [:error] [pid 9865:tid 9955] [client 20.215.249.162:4913] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xigmltad.php"] [unique_id "aeNOCKzb5knECIY-C-hkzAAAAJI"]
[Sat Apr 18 17:25:29.647895 2026] [:error] [pid 9970:tid 9977] [client 20.215.249.162:4851] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xigmltad.php"] [unique_id "aeNOCSYdRLRhVmaIMx2OzwAAAMM"]
[Sat Apr 18 17:25:30.199562 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:4768] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xigmltad.php"] [unique_id "aeNOCoCFeowknfXHM7nbLQAAAE8"]
[Sat Apr 18 17:25:30.731472 2026] [:error] [pid 34288:tid 34311] [client 20.215.249.162:5070] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xigmltad.php"] [unique_id "aeNOCuTIiy__PtiLmpm-vwAAAZM"]
[Sat Apr 18 17:25:31.336605 2026] [:error] [pid 34290:tid 34320] [client 20.215.249.162:4904] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aeNOCxqX6WpmmAXOBi_o0QAAAcE"]
[Sat Apr 18 17:25:31.878704 2026] [:error] [pid 34290:tid 34329] [client 20.215.249.162:4854] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aeNOCxqX6WpmmAXOBi_o0wAAAco"]
[Sat Apr 18 17:25:32.402761 2026] [:error] [pid 34290:tid 34335] [client 20.215.249.162:4676] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aeNODBqX6WpmmAXOBi_o2AAAAdA"]
[Sat Apr 18 17:25:33.017796 2026] [:error] [pid 9970:tid 9985] [client 20.215.249.162:4761] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aeNODSYdRLRhVmaIMx2O1QAAAMs"]
[Sat Apr 18 17:25:33.662633 2026] [:error] [pid 34237:tid 34253] [client 20.215.249.162:4755] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeNODRBmX4Wq5a6rxfZdigAAAU4"]
[Sat Apr 18 17:25:34.269667 2026] [:error] [pid 9863:tid 9880] [client 20.215.249.162:4777] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeNODjjjiypiFrTucbK0vAAAAAc"]
[Sat Apr 18 17:25:34.861752 2026] [:error] [pid 34290:tid 34340] [client 20.215.249.162:4694] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeNODhqX6WpmmAXOBi_o2gAAAdU"]
[Sat Apr 18 17:25:35.588159 2026] [:error] [pid 9864:tid 9918] [client 20.215.249.162:4780] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeNOD4CFeowknfXHM7nbMgAAAEw"]
[Sat Apr 18 17:25:36.381559 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:4819] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad.php"] [unique_id "aeNOEBBmX4Wq5a6rxfZdkAAAAU0"]
[Sat Apr 18 17:25:36.959695 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:4773] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad.php"] [unique_id "aeNOEBBmX4Wq5a6rxfZdkwAAAUY"]
[Sat Apr 18 17:25:37.624890 2026] [:error] [pid 34290:tid 34334] [client 20.215.249.162:4684] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad.php"] [unique_id "aeNOERqX6WpmmAXOBi_o3gAAAc8"]
[Sat Apr 18 17:25:38.238604 2026] [:error] [pid 9970:tid 9990] [client 20.215.249.162:4792] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad.php"] [unique_id "aeNOEiYdRLRhVmaIMx2O3AAAANA"]
[Sat Apr 18 17:25:38.885327 2026] [:error] [pid 9863:tid 9894] [client 20.215.249.162:4698] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "aeNOEjjjiypiFrTucbK0xgAAABU"]
[Sat Apr 18 17:25:39.445968 2026] [:error] [pid 9970:tid 9978] [client 20.215.249.162:4690] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "aeNOEyYdRLRhVmaIMx2O3gAAAMQ"]
[Sat Apr 18 17:25:40.223721 2026] [:error] [pid 9864:tid 9916] [client 20.215.249.162:4610] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "aeNOFICFeowknfXHM7nbOAAAAEo"]
[Sat Apr 18 17:25:41.141158 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:4779] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws77.php"] [unique_id "aeNOFRqX6WpmmAXOBi_o5wAAAdE"]
[Sat Apr 18 17:25:41.764662 2026] [:error] [pid 34237:tid 34240] [client 20.215.249.162:4807] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gi.php"] [unique_id "aeNOFRBmX4Wq5a6rxfZdmgAAAUE"]
[Sat Apr 18 17:25:42.497704 2026] [:error] [pid 34288:tid 34294] [client 20.215.249.162:4716] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gi.php"] [unique_id "aeNOFuTIiy__PtiLmpm-xwAAAYI"]
[Sat Apr 18 17:25:43.157656 2026] [:error] [pid 34290:tid 34341] [client 20.215.249.162:4728] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gi.php"] [unique_id "aeNOFxqX6WpmmAXOBi_o7AAAAdY"]
[Sat Apr 18 17:25:43.737846 2026] [:error] [pid 34237:tid 34257] [client 20.215.249.162:4757] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gi.php"] [unique_id "aeNOFxBmX4Wq5a6rxfZdnwAAAVI"]
[Sat Apr 18 17:25:44.353029 2026] [:error] [pid 9970:tid 9994] [client 20.215.249.162:4860] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeNOGCYdRLRhVmaIMx2O5gAAANQ"]
[Sat Apr 18 17:25:44.904890 2026] [:error] [pid 9863:tid 9888] [client 20.215.249.162:4804] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeNOGDjjiypiFrTucbK0ygAAAA8"]
[Sat Apr 18 17:25:45.433569 2026] [:error] [pid 9864:tid 9924] [client 20.215.249.162:4824] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeNOGYCFeowknfXHM7nbPwAAAFI"]
[Sat Apr 18 17:25:46.021232 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:4847] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeNOGoCFeowknfXHM7nbQAAAAFM"]
[Sat Apr 18 17:25:46.571214 2026] [:error] [pid 9865:tid 9961] [client 20.215.249.162:4723] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "aeNOGqzb5knECIY-C-hk2AAAAJg"]
[Sat Apr 18 17:25:47.119471 2026] [:error] [pid 9970:tid 9988] [client 20.215.249.162:4859] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "aeNOGyYdRLRhVmaIMx2O8gAAAM4"]
[Sat Apr 18 17:25:47.636784 2026] [:error] [pid 9865:tid 9953] [client 20.215.249.162:4789] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "aeNOG6zb5knECIY-C-hk4AAAAJA"]
[Sat Apr 18 17:25:48.168734 2026] [:error] [pid 9970:tid 9974] [client 20.215.249.162:5078] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lp6.php"] [unique_id "aeNOHCYdRLRhVmaIMx2O-AAAAMA"]
[Sat Apr 18 17:25:48.749085 2026] [:error] [pid 34288:tid 34296] [client 20.215.249.162:4705] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "aeNOHOTIiy__PtiLmpm-ywAAAYQ"]
[Sat Apr 18 17:25:49.267034 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:4706] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "aeNOHRBmX4Wq5a6rxfZdqAAAAUY"]
[Sat Apr 18 17:25:49.815563 2026] [:error] [pid 34290:tid 34339] [client 20.215.249.162:4622] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "aeNOHRqX6WpmmAXOBi_o_AAAAdQ"]
[Sat Apr 18 17:25:50.371903 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:4770] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "aeNOHhBmX4Wq5a6rxfZdrAAAAUA"]
[Sat Apr 18 17:25:50.884386 2026] [:error] [pid 9865:tid 9954] [client 20.215.249.162:4718] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeNOHqzb5knECIY-C-hk5gAAAJE"]
[Sat Apr 18 17:25:51.419803 2026] [:error] [pid 13023:tid 13032] [client 20.215.249.162:4702] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeNOH_1e7hG8DAeABB_blAAAAQc"]
[Sat Apr 18 17:25:52.012878 2026] [:error] [pid 34237:tid 34260] [client 20.215.249.162:4781] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeNOIBBmX4Wq5a6rxfZdrgAAAVU"]
[Sat Apr 18 17:25:52.621672 2026] [:error] [pid 34290:tid 34343] [client 20.215.249.162:4699] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeNOIBqX6WpmmAXOBi_o_gAAAdg"]
[Sat Apr 18 17:25:53.180464 2026] [:error] [pid 34288:tid 34292] [client 20.215.249.162:4927] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh.php"] [unique_id "aeNOIeTIiy__PtiLmpm-zwAAAYA"]
[Sat Apr 18 17:25:53.720402 2026] [:error] [pid 9970:tid 9977] [client 20.215.249.162:4629] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh.php"] [unique_id "aeNOISYdRLRhVmaIMx2PCAAAAMM"]
[Sat Apr 18 17:25:54.250313 2026] [:error] [pid 34237:tid 34257] [client 20.215.249.162:4894] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh.php"] [unique_id "aeNOIhBmX4Wq5a6rxfZdvAAAAVI"]
[Sat Apr 18 17:25:54.771052 2026] [:error] [pid 34237:tid 34253] [client 20.215.249.162:4786] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sh.php"] [unique_id "aeNOIhBmX4Wq5a6rxfZdxAAAAU4"]
[Sat Apr 18 17:25:55.382191 2026] [:error] [pid 34290:tid 34333] [client 20.215.249.162:4863] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uujuu.php"] [unique_id "aeNOIxqX6WpmmAXOBi_pBwAAAc4"]
[Sat Apr 18 17:25:55.917316 2026] [:error] [pid 9863:tid 9881] [client 20.215.249.162:4748] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uujuu.php"] [unique_id "aeNOIzjjiypiFrTucbK02AAAAAg"]
[Sat Apr 18 17:25:56.448849 2026] [:error] [pid 9865:tid 9947] [client 20.215.249.162:4624] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uujuu.php"] [unique_id "aeNOJKzb5knECIY-C-hk6gAAAIo"]
[Sat Apr 18 17:25:57.058359 2026] [:error] [pid 13023:tid 13048] [client 20.215.249.162:4719] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uujuu.php"] [unique_id "aeNOJf1e7hG8DAeABB_brgAAARc"]
[Sat Apr 18 17:25:57.638710 2026] [:error] [pid 34288:tid 34313] [client 20.215.249.162:4756] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdf.php"] [unique_id "aeNOJeTIiy__PtiLmpm-0AAAAZU"]
[Sat Apr 18 17:25:58.203537 2026] [:error] [pid 9970:tid 9991] [client 20.215.249.162:4829] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdf.php"] [unique_id "aeNOJiYdRLRhVmaIMx2PEwAAANE"]
[Sat Apr 18 17:25:58.721520 2026] [:error] [pid 9865:tid 9942] [client 20.215.249.162:4840] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdf.php"] [unique_id "aeNOJqzb5knECIY-C-hk6wAAAIU"]
[Sat Apr 18 17:25:59.274881 2026] [:error] [pid 34290:tid 34342] [client 20.215.249.162:4791] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdf.php"] [unique_id "aeNOJxqX6WpmmAXOBi_pCwAAAdc"]
[Sat Apr 18 17:25:59.832685 2026] [:error] [pid 34290:tid 34327] [client 20.215.249.162:4778] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nc4.php"] [unique_id "aeNOJxqX6WpmmAXOBi_pDwAAAcg"]
[Sat Apr 18 17:26:00.386469 2026] [:error] [pid 34237:tid 34257] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/nc4.php
[Sat Apr 18 17:26:00.676452 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat Apr 18 17:26:00.964555 2026] [:error] [pid 34237:tid 34253] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/zyjhr.php
[Sat Apr 18 17:26:01.252873 2026] [:error] [pid 34237:tid 34251] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/b7cdb465.php
[Sat Apr 18 17:26:01.541707 2026] [:error] [pid 34237:tid 34248] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/x123.php
[Sat Apr 18 17:26:01.848523 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Sat Apr 18 17:26:02.136995 2026] [:error] [pid 34237:tid 34260] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/lp5.php
[Sat Apr 18 17:26:02.427090 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Sat Apr 18 17:26:02.723126 2026] [:error] [pid 34237:tid 34258] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sat Apr 18 17:26:03.021229 2026] [:error] [pid 34237:tid 34263] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Sat Apr 18 17:26:03.316399 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:4823] File does not exist: /usr/local/apache/htdocs/suspended-page/wpc2.php
[Sat Apr 18 17:26:03.608745 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:4823] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/intall.php"] [unique_id "aeNOKxBmX4Wq5a6rxfZd9AAAAUU"]
[Sat Apr 18 17:26:04.154486 2026] [:error] [pid 9970:tid 9978] [client 20.215.249.162:4667] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/intall.php"] [unique_id "aeNOLCYdRLRhVmaIMx2PHAAAAMQ"]
[Sat Apr 18 17:26:04.682510 2026] [:error] [pid 13023:tid 13035] [client 20.215.249.162:4710] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/intall.php"] [unique_id "aeNOLP1e7hG8DAeABB_bsgAAAQo"]
[Sat Apr 18 17:26:05.197112 2026] [:error] [pid 13023:tid 13048] [client 20.215.249.162:4835] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/intall.php"] [unique_id "aeNOLf1e7hG8DAeABB_bswAAARc"]
[Sat Apr 18 17:26:05.713712 2026] [:error] [pid 34288:tid 34298] [client 20.215.249.162:5066] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "aeNOLeTIiy__PtiLmpm-1AAAAYY"]
[Sat Apr 18 17:26:06.233135 2026] [:error] [pid 13023:tid 13046] [client 20.215.249.162:5091] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "aeNOLv1e7hG8DAeABB_buAAAARU"]
[Sat Apr 18 17:26:06.776026 2026] [:error] [pid 9863:tid 9884] [client 20.215.249.162:4742] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "aeNOLjjjiypiFrTucbK05AAAAAs"]
[Sat Apr 18 17:26:07.353358 2026] [:error] [pid 9864:tid 9922] [client 20.215.249.162:4686] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "aeNOL4CFeowknfXHM7nbTQAAAFA"]
[Sat Apr 18 17:26:07.921214 2026] [:error] [pid 9970:tid 9992] [client 20.215.249.162:4673] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/callback.php"] [unique_id "aeNOLyYdRLRhVmaIMx2PIgAAANI"]
[Sat Apr 18 17:26:08.502542 2026] [:error] [pid 34237:tid 34257] [client 20.215.249.162:4740] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/callback.php"] [unique_id "aeNOMBBmX4Wq5a6rxfZd-wAAAVI"]
[Sat Apr 18 17:26:09.078803 2026] [:error] [pid 9863:tid 9885] [client 20.215.249.162:4703] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/callback.php"] [unique_id "aeNOMTjjiypiFrTucbK06AAAAAw"]
[Sat Apr 18 17:26:09.623113 2026] [:error] [pid 34237:tid 34260] [client 20.215.249.162:4634] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/callback.php"] [unique_id "aeNOMRBmX4Wq5a6rxfZd_QAAAVU"]
[Sat Apr 18 17:26:10.148129 2026] [:error] [pid 9865:tid 9960] [client 20.215.249.162:5088] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeNOMqzb5knECIY-C-hk-gAAAJc"]
[Sat Apr 18 17:26:10.671121 2026] [:error] [pid 13023:tid 13035] [client 20.215.249.162:4714] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeNOMv1e7hG8DAeABB_bxAAAAQo"]
[Sat Apr 18 17:26:11.191931 2026] [:error] [pid 9865:tid 9952] [client 20.215.249.162:4782] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeNOM6zb5knECIY-C-hk_gAAAI8"]
[Sat Apr 18 17:26:11.747854 2026] [:error] [pid 9864:tid 9924] [client 20.215.249.162:5115] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeNOM4CFeowknfXHM7nbVgAAAFI"]
[Sat Apr 18 17:26:12.284152 2026] [:error] [pid 9863:tid 9896] [client 20.215.249.162:4677] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "aeNONDjjiypiFrTucbK07gAAABc"]
[Sat Apr 18 17:26:12.827770 2026] [:error] [pid 13023:tid 13042] [client 20.215.249.162:4796] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "aeNONP1e7hG8DAeABB_bzQAAARE"]
[Sat Apr 18 17:26:13.388307 2026] [:error] [pid 34288:tid 34313] [client 20.215.249.162:4693] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "aeNONeTIiy__PtiLmpm-4wAAAZU"]
[Sat Apr 18 17:26:13.906830 2026] [:error] [pid 9865:tid 9939] [client 20.215.249.162:5095] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "aeNONazb5knECIY-C-hlAQAAAII"]
[Sat Apr 18 17:26:14.451391 2026] [:error] [pid 9865:tid 9940] [client 20.215.249.162:4712] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/camara.php"] [unique_id "aeNONqzb5knECIY-C-hlAgAAAIM"]
[Sat Apr 18 17:26:14.993950 2026] [:error] [pid 34237:tid 34240] [client 20.215.249.162:5035] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/camara.php"] [unique_id "aeNONhBmX4Wq5a6rxfZeBwAAAUE"]
[Sat Apr 18 17:26:15.536616 2026] [:error] [pid 13023:tid 13041] [client 20.215.249.162:5016] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/camara.php"] [unique_id "aeNON_1e7hG8DAeABB_bzwAAARA"]
[Sat Apr 18 17:26:16.052537 2026] [:error] [pid 9970:tid 9995] [client 20.215.249.162:4647] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/camara.php"] [unique_id "aeNOOCYdRLRhVmaIMx2PLwAAANU"]
[Sat Apr 18 17:26:16.595070 2026] [:error] [pid 34290:tid 34323] [client 20.215.249.162:5012] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assacc.php"] [unique_id "aeNOOBqX6WpmmAXOBi_paAAAAcQ"]
[Sat Apr 18 17:26:17.108539 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:5112] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assacc.php"] [unique_id "aeNOOYCFeowknfXHM7nbbQAAAFM"]
[Sat Apr 18 17:26:17.646025 2026] [:error] [pid 9970:tid 9978] [client 20.215.249.162:5008] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assacc.php"] [unique_id "aeNOOSYdRLRhVmaIMx2PNgAAAMQ"]
[Sat Apr 18 17:26:18.166850 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:5009] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assacc.php"] [unique_id "aeNOOhBmX4Wq5a6rxfZeGwAAAUU"]
[Sat Apr 18 17:26:18.708435 2026] [:error] [pid 34290:tid 34338] [client 20.215.249.162:5010] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "aeNOOhqX6WpmmAXOBi_pawAAAdM"]
[Sat Apr 18 17:26:19.231142 2026] [:error] [pid 34290:tid 34340] [client 20.215.249.162:4745] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "aeNOOxqX6WpmmAXOBi_pbwAAAdU"]
[Sat Apr 18 17:26:19.805147 2026] [:error] [pid 34290:tid 34343] [client 20.215.249.162:4672] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "aeNOOxqX6WpmmAXOBi_peAAAAdg"]
[Sat Apr 18 17:26:20.368012 2026] [:error] [pid 9970:tid 9976] [client 20.215.249.162:5060] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "aeNOPCYdRLRhVmaIMx2POgAAAMI"]
[Sat Apr 18 17:26:20.913869 2026] [:error] [pid 34290:tid 34335] [client 20.215.249.162:5025] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeNOPBqX6WpmmAXOBi_pfwAAAdA"]
[Sat Apr 18 17:26:21.459123 2026] [:error] [pid 34290:tid 34326] [client 20.215.249.162:4689] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeNOPRqX6WpmmAXOBi_pgwAAAcc"]
[Sat Apr 18 17:26:22.003989 2026] [:error] [pid 9864:tid 9917] [client 20.215.249.162:4727] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeNOPoCFeowknfXHM7nbeAAAAEs"]
[Sat Apr 18 17:26:22.544089 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:5111] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeNOPhBmX4Wq5a6rxfZeHgAAAUo"]
[Sat Apr 18 17:26:23.068658 2026] [:error] [pid 34237:tid 34241] [client 20.215.249.162:4799] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeNOPxBmX4Wq5a6rxfZeIgAAAUI"]
[Sat Apr 18 17:26:23.627502 2026] [:error] [pid 9863:tid 9897] [client 20.215.249.162:4724] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeNOPzjjiypiFrTucbK0_gAAABg"]
[Sat Apr 18 17:26:24.183683 2026] [:error] [pid 9863:tid 9889] [client 20.215.249.162:5000] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeNOQDjjiypiFrTucbK1AgAAABA"]
[Sat Apr 18 17:26:24.714412 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:4785] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/%E3%81%AE.php"] [unique_id "aeNOQICFeowknfXHM7nbewAAAFM"]
[Sat Apr 18 17:26:25.268773 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:5096] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xtsr.php"] [unique_id "aeNOQRBmX4Wq5a6rxfZeJgAAAUU"]
[Sat Apr 18 17:26:25.943491 2026] [:error] [pid 13023:tid 13049] [client 20.215.249.162:5106] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xtsr.php"] [unique_id "aeNOQf1e7hG8DAeABB_b0gAAARg"]
[Sat Apr 18 17:26:26.529953 2026] [:error] [pid 9864:tid 9930] [client 20.215.249.162:4754] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xtsr.php"] [unique_id "aeNOQoCFeowknfXHM7nbnQAAAFg"]
[Sat Apr 18 17:26:27.074397 2026] [:error] [pid 13023:tid 13038] [client 20.215.249.162:5082] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xtsr.php"] [unique_id "aeNOQ_1e7hG8DAeABB_b2AAAAQ0"]
[Sat Apr 18 17:26:27.601498 2026] [:error] [pid 9970:tid 9989] [client 20.215.249.162:4695] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zz8.php"] [unique_id "aeNOQyYdRLRhVmaIMx2PTQAAAM8"]
[Sat Apr 18 17:26:28.125616 2026] [:error] [pid 34237:tid 34261] [client 20.215.249.162:4939] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zz8.php"] [unique_id "aeNORBBmX4Wq5a6rxfZebgAAAVY"]
[Sat Apr 18 17:26:28.663087 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:4620] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zz8.php"] [unique_id "aeNORBBmX4Wq5a6rxfZegQAAAUY"]
[Sat Apr 18 17:26:29.192309 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:4999] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zz8.php"] [unique_id "aeNORYCFeowknfXHM7nb8wAAAE0"]
[Sat Apr 18 17:26:29.747940 2026] [:error] [pid 9864:tid 9927] [client 20.215.249.162:5101] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeNORYCFeowknfXHM7nb-AAAAFU"]
[Sat Apr 18 17:26:30.300586 2026] [:error] [pid 9864:tid 9924] [client 20.215.249.162:4621] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeNORoCFeowknfXHM7nb-wAAAFI"]
[Sat Apr 18 17:26:30.877866 2026] [:error] [pid 9864:tid 9917] [client 20.215.249.162:5040] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeNORoCFeowknfXHM7ncAAAAAEs"]
[Sat Apr 18 17:26:31.452812 2026] [:error] [pid 9970:tid 9979] [client 20.215.249.162:4626] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aeNORyYdRLRhVmaIMx2PagAAAMU"]
[Sat Apr 18 17:26:32.006532 2026] [:error] [pid 9865:tid 9957] [client 20.215.249.162:5013] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeNOSKzb5knECIY-C-hlOAAAAJQ"]
[Sat Apr 18 17:26:32.238648 2026] [:error] [pid 13023:tid 13037] [client 20.100.187.5:5000] [client 20.100.187.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeNOSP1e7hG8DAeABB_b_QAAAQw"]
[Sat Apr 18 17:26:32.522171 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:4858] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeNOSICFeowknfXHM7ncBQAAAE0"]
[Sat Apr 18 17:26:32.757126 2026] [:error] [pid 9970:tid 9994] [client 20.100.187.5:5066] [client 20.100.187.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeNOSCYdRLRhVmaIMx2PawAAANQ"]
[Sat Apr 18 17:26:33.034154 2026] [:error] [pid 34290:tid 34324] [client 20.215.249.162:4783] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeNOSRqX6WpmmAXOBi_pvwAAAcU"]
[Sat Apr 18 17:26:33.292160 2026] [:error] [pid 9864:tid 9927] [client 20.100.187.5:4997] [client 20.100.187.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeNOSYCFeowknfXHM7ncCQAAAFU"]
[Sat Apr 18 17:26:33.545965 2026] [:error] [pid 9863:tid 9877] [client 20.215.249.162:4656] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeNOSTjjiypiFrTucbK1IAAAAAQ"]
[Sat Apr 18 17:26:33.813094 2026] [:error] [pid 34237:tid 34245] [client 20.100.187.5:5110] [client 20.100.187.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeNOSRBmX4Wq5a6rxfZemAAAAUY"]
[Sat Apr 18 17:26:34.057917 2026] [:error] [pid 34237:tid 34258] [client 20.215.249.162:5033] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aeNOShBmX4Wq5a6rxfZemQAAAVM"]
[Sat Apr 18 17:26:34.578149 2026] [:error] [pid 34237:tid 34248] [client 20.215.249.162:4680] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aeNOShBmX4Wq5a6rxfZemwAAAUk"]
[Sat Apr 18 17:26:35.098859 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:5023] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aeNOSxBmX4Wq5a6rxfZenwAAAU0"]
[Sat Apr 18 17:26:35.618951 2026] [:error] [pid 34290:tid 34337] [client 20.215.249.162:4766] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aeNOSxqX6WpmmAXOBi_pxgAAAdI"]
[Sat Apr 18 17:26:36.141448 2026] [:error] [pid 34290:tid 34343] [client 20.215.249.162:4775] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aeNOTBqX6WpmmAXOBi_pyAAAAdg"]
[Sat Apr 18 17:26:36.700860 2026] [:error] [pid 9865:tid 9953] [client 20.215.249.162:5093] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aeNOTKzb5knECIY-C-hlOwAAAJA"]
[Sat Apr 18 17:26:37.292487 2026] [:error] [pid 9865:tid 9958] [client 20.215.249.162:4762] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aeNOTazb5knECIY-C-hlPwAAAJU"]
[Sat Apr 18 17:26:37.873762 2026] [:error] [pid 13023:tid 13040] [client 20.215.249.162:4730] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aeNOTf1e7hG8DAeABB_cBgAAAQ8"]
[Sat Apr 18 17:26:38.420154 2026] [:error] [pid 13023:tid 13026] [client 20.215.249.162:4707] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awdld.php"] [unique_id "aeNOTv1e7hG8DAeABB_cCAAAAQE"]
[Sat Apr 18 17:26:38.971477 2026] [:error] [pid 9863:tid 9891] [client 20.215.249.162:5065] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awdld.php"] [unique_id "aeNOTjjjiypiFrTucbK1MwAAABI"]
[Sat Apr 18 17:26:39.485464 2026] [:error] [pid 9865:tid 9943] [client 20.215.249.162:4995] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awdld.php"] [unique_id "aeNOT6zb5knECIY-C-hlRAAAAIY"]
[Sat Apr 18 17:26:40.022824 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:4733] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awdld.php"] [unique_id "aeNOUICFeowknfXHM7ncDwAAAE8"]
[Sat Apr 18 17:26:40.550176 2026] [:error] [pid 9865:tid 9954] [client 20.215.249.162:4669] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bkyac.php"] [unique_id "aeNOUKzb5knECIY-C-hlRwAAAJE"]
[Sat Apr 18 17:26:41.073442 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:5063] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bkyac.php"] [unique_id "aeNOURBmX4Wq5a6rxfZeogAAAUg"]
[Sat Apr 18 17:26:41.615021 2026] [:error] [pid 9863:tid 9892] [client 20.215.249.162:4715] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bkyac.php"] [unique_id "aeNOUTjjiypiFrTucbK1NwAAABM"]
[Sat Apr 18 17:26:42.189135 2026] [:error] [pid 9864:tid 9927] [client 20.215.249.162:4997] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bkyac.php"] [unique_id "aeNOUoCFeowknfXHM7ncEwAAAFU"]
[Sat Apr 18 17:26:42.782653 2026] [:error] [pid 9864:tid 9924] [client 20.215.249.162:4932] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/krntz.php"] [unique_id "aeNOUoCFeowknfXHM7ncFQAAAFI"]
[Sat Apr 18 17:26:43.305159 2026] [:error] [pid 13023:tid 13049] [client 20.215.249.162:4683] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/krntz.php"] [unique_id "aeNOU_1e7hG8DAeABB_cFAAAARg"]
[Sat Apr 18 17:26:43.859023 2026] [:error] [pid 34237:tid 34248] [client 20.215.249.162:4709] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/krntz.php"] [unique_id "aeNOUxBmX4Wq5a6rxfZepgAAAUk"]
[Sat Apr 18 17:26:44.421839 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:5011] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/krntz.php"] [unique_id "aeNOVBBmX4Wq5a6rxfZeqgAAAUM"]
[Sat Apr 18 17:26:44.982026 2026] [:error] [pid 34237:tid 34256] [client 20.215.249.162:4692] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeNOVBBmX4Wq5a6rxfZeqwAAAVE"]
[Sat Apr 18 17:26:45.512948 2026] [:error] [pid 9863:tid 9884] [client 20.215.249.162:4998] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeNOVTjjiypiFrTucbK1QAAAAAs"]
[Sat Apr 18 17:26:46.076471 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:4788] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeNOVhBmX4Wq5a6rxfZergAAAU0"]
[Sat Apr 18 17:26:46.622760 2026] [:error] [pid 9863:tid 9878] [client 20.215.249.162:5058] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vhwwnrnmqc.php"] [unique_id "aeNOVjjjiypiFrTucbK1RAAAAAU"]
[Sat Apr 18 17:26:47.168940 2026] [:error] [pid 13023:tid 13033] [client 20.215.249.162:4613] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xenium4.php"] [unique_id "aeNOV_1e7hG8DAeABB_cIwAAAQg"]
[Sat Apr 18 17:26:47.700357 2026] [:error] [pid 13023:tid 13040] [client 20.215.249.162:5073] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xenium4.php"] [unique_id "aeNOV_1e7hG8DAeABB_cJwAAAQ8"]
[Sat Apr 18 17:26:48.234267 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:4662] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xenium4.php"] [unique_id "aeNOWICFeowknfXHM7ncGAAAAFE"]
[Sat Apr 18 17:26:48.785158 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:5092] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xenium4.php"] [unique_id "aeNOWICFeowknfXHM7ncGwAAAEU"]
[Sat Apr 18 17:26:49.339012 2026] [:error] [pid 34290:tid 34340] [client 20.215.249.162:4625] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "aeNOWRqX6WpmmAXOBi_p2gAAAdU"]
[Sat Apr 18 17:26:49.918043 2026] [:error] [pid 9863:tid 9897] [client 20.215.249.162:4674] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "aeNOWTjjiypiFrTucbK1RgAAABg"]
[Sat Apr 18 17:26:50.506445 2026] [:error] [pid 9970:tid 9983] [client 20.215.249.162:5102] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "aeNOWiYdRLRhVmaIMx2PewAAAMk"]
[Sat Apr 18 17:26:51.076955 2026] [:error] [pid 9864:tid 9909] [client 20.215.249.162:5001] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vaza.php"] [unique_id "aeNOW4CFeowknfXHM7ncIgAAAEQ"]
[Sat Apr 18 17:26:51.635964 2026] [:error] [pid 9865:tid 9942] [client 20.215.249.162:4993] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeNOW6zb5knECIY-C-hlSgAAAIU"]
[Sat Apr 18 17:26:52.181785 2026] [:error] [pid 9863:tid 9894] [client 20.215.249.162:5001] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeNOXDjjiypiFrTucbK1SQAAABU"]
[Sat Apr 18 17:26:52.745110 2026] [:error] [pid 34290:tid 34337] [client 20.215.249.162:4642] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeNOXBqX6WpmmAXOBi_p3QAAAdI"]
[Sat Apr 18 17:26:53.340092 2026] [:error] [pid 34290:tid 34322] [client 20.215.249.162:5056] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeNOXRqX6WpmmAXOBi_p4AAAAcM"]
[Sat Apr 18 17:26:53.918194 2026] [:error] [pid 9864:tid 9915] [client 20.215.249.162:4700] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aeNOXYCFeowknfXHM7ncKgAAAEk"]
[Sat Apr 18 17:26:54.433977 2026] [:error] [pid 34290:tid 34324] [client 20.215.249.162:5015] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aeNOXhqX6WpmmAXOBi_p5gAAAcU"]
[Sat Apr 18 17:26:55.029483 2026] [:error] [pid 34290:tid 34326] [client 20.215.249.162:5021] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aeNOXxqX6WpmmAXOBi_p7AAAAcc"]
[Sat Apr 18 17:26:55.581060 2026] [:error] [pid 9970:tid 9982] [client 20.215.249.162:5059] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aeNOXyYdRLRhVmaIMx2PgwAAAMg"]
[Sat Apr 18 17:26:56.118272 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:4759] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/drhunthq.php"] [unique_id "aeNOYBBmX4Wq5a6rxfZezgAAAUc"]
[Sat Apr 18 17:26:56.679391 2026] [:error] [pid 34237:tid 34262] [client 20.215.249.162:5105] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/drhunthq.php"] [unique_id "aeNOYBBmX4Wq5a6rxfZe1AAAAVc"]
[Sat Apr 18 17:26:57.238311 2026] [:error] [pid 34288:tid 34302] [client 20.215.249.162:5038] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/drhunthq.php"] [unique_id "aeNOYeTIiy__PtiLmpm_DAAAAYo"]
[Sat Apr 18 17:26:57.752674 2026] [:error] [pid 9864:tid 9926] [client 20.215.249.162:4711] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/drhunthq.php"] [unique_id "aeNOYYCFeowknfXHM7ncLgAAAFQ"]
[Sat Apr 18 17:26:58.296649 2026] [:error] [pid 9864:tid 9906] [client 20.215.249.162:5075] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeNOYoCFeowknfXHM7ncMwAAAEE"]
[Sat Apr 18 17:26:58.846573 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:4950] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeNOYoCFeowknfXHM7ncNwAAAFE"]
[Sat Apr 18 17:26:59.403550 2026] [:error] [pid 9864:tid 9920] [client 20.215.249.162:4977] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeNOY4CFeowknfXHM7ncPAAAAE4"]
[Sat Apr 18 17:26:59.946900 2026] [:error] [pid 9864:tid 9929] [client 20.215.249.162:5080] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeNOY4CFeowknfXHM7ncQwAAAFc"]
[Sat Apr 18 17:27:00.505720 2026] [:error] [pid 9864:tid 9915] [client 20.215.249.162:4685] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "aeNOZICFeowknfXHM7ncSgAAAEk"]
[Sat Apr 18 17:27:01.016790 2026] [:error] [pid 9865:tid 9947] [client 20.215.249.162:4717] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "aeNOZazb5knECIY-C-hlUQAAAIo"]
[Sat Apr 18 17:27:01.578174 2026] [:error] [pid 9865:tid 9955] [client 20.215.249.162:4833] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "aeNOZazb5knECIY-C-hlUgAAAJI"]
[Sat Apr 18 17:27:02.152523 2026] [:error] [pid 9864:tid 9907] [client 20.215.249.162:5039] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hots.php"] [unique_id "aeNOZoCFeowknfXHM7ncVAAAAEI"]
[Sat Apr 18 17:27:02.700907 2026] [:error] [pid 9970:tid 9995] [client 20.215.249.162:4931] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeNOZiYdRLRhVmaIMx2PhAAAANU"]
[Sat Apr 18 17:27:03.441414 2026] [:error] [pid 34237:tid 34240] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sat Apr 18 17:27:03.737191 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Sat Apr 18 17:27:04.027755 2026] [:error] [pid 34237:tid 34263] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/c4.php
[Sat Apr 18 17:27:04.332690 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/lclnqiii.php
[Sat Apr 18 17:27:04.635190 2026] [:error] [pid 34237:tid 34255] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Sat Apr 18 17:27:04.954149 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tot.php
[Sat Apr 18 17:27:05.273290 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-tap.php
[Sat Apr 18 17:27:05.561464 2026] [:error] [pid 34237:tid 34262] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/vrhiw.php
[Sat Apr 18 17:27:05.849250 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/qqjki.php
[Sat Apr 18 17:27:06.138110 2026] [:error] [pid 34237:tid 34250] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Sat Apr 18 17:27:06.442420 2026] [:error] [pid 34237:tid 34263] [client 20.215.249.162:5068] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Sat Apr 18 17:27:06.728130 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:5068] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeNOahBmX4Wq5a6rxfZe_QAAAU0"]
[Sat Apr 18 17:27:07.301783 2026] [:error] [pid 34290:tid 34340] [client 20.215.249.162:5045] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeNOaxqX6WpmmAXOBi_p7wAAAdU"]
[Sat Apr 18 17:27:07.899031 2026] [:error] [pid 34290:tid 34334] [client 20.215.249.162:4545] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeNOaxqX6WpmmAXOBi_p8wAAAc8"]
[Sat Apr 18 17:27:08.446906 2026] [:error] [pid 9970:tid 9998] [client 20.215.249.162:4691] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeNObCYdRLRhVmaIMx2PhwAAANg"]
[Sat Apr 18 17:27:09.006808 2026] [:error] [pid 13023:tid 13032] [client 20.215.249.162:4918] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "aeNObf1e7hG8DAeABB_cQgAAAQc"]
[Sat Apr 18 17:27:09.569481 2026] [:error] [pid 9864:tid 9908] [client 20.215.249.162:4653] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "aeNObYCFeowknfXHM7ncagAAAEM"]
[Sat Apr 18 17:27:10.115707 2026] [:error] [pid 34290:tid 34319] [client 20.215.249.162:4572] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "aeNObhqX6WpmmAXOBi_p9gAAAcA"]
[Sat Apr 18 17:27:10.637940 2026] [:error] [pid 34290:tid 34321] [client 20.215.249.162:5119] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/torsa1.php"] [unique_id "aeNObhqX6WpmmAXOBi_p-gAAAcI"]
[Sat Apr 18 17:27:11.213564 2026] [:error] [pid 13023:tid 13045] [client 20.215.249.162:4701] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bjfl.php"] [unique_id "aeNOb_1e7hG8DAeABB_cQwAAARQ"]
[Sat Apr 18 17:27:11.822752 2026] [:error] [pid 9863:tid 9894] [client 20.215.249.162:5079] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bjfl.php"] [unique_id "aeNObzjjiypiFrTucbK1UgAAABU"]
[Sat Apr 18 17:27:12.439304 2026] [:error] [pid 13023:tid 13034] [client 20.215.249.162:5052] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bjfl.php"] [unique_id "aeNOcP1e7hG8DAeABB_cRgAAAQk"]
[Sat Apr 18 17:27:13.021534 2026] [:error] [pid 9864:tid 9913] [client 20.215.249.162:4928] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bjfl.php"] [unique_id "aeNOcYCFeowknfXHM7nccgAAAEc"]
[Sat Apr 18 17:27:13.607482 2026] [:error] [pid 9864:tid 9916] [client 20.215.249.162:4994] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/buc.php"] [unique_id "aeNOcYCFeowknfXHM7nceAAAAEo"]
[Sat Apr 18 17:27:14.158148 2026] [:error] [pid 9864:tid 9922] [client 20.215.249.162:5054] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/buc.php"] [unique_id "aeNOcoCFeowknfXHM7ncfwAAAFA"]
[Sat Apr 18 17:27:14.812562 2026] [:error] [pid 9863:tid 9893] [client 20.215.249.162:4553] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/buc.php"] [unique_id "aeNOcjjjiypiFrTucbK1WAAAABQ"]
[Sat Apr 18 17:27:15.342986 2026] [:error] [pid 34290:tid 34334] [client 20.215.249.162:4704] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/buc.php"] [unique_id "aeNOcxqX6WpmmAXOBi_p_wAAAc8"]
[Sat Apr 18 17:27:15.878015 2026] [:error] [pid 13023:tid 13046] [client 20.215.249.162:4872] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "aeNOc_1e7hG8DAeABB_cSwAAARU"]
[Sat Apr 18 17:27:16.448455 2026] [:error] [pid 9970:tid 9974] [client 20.215.249.162:4708] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "aeNOdCYdRLRhVmaIMx2PjQAAAMA"]
[Sat Apr 18 17:27:17.031181 2026] [:error] [pid 9865:tid 9958] [client 20.215.249.162:4639] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "aeNOdazb5knECIY-C-hlawAAAJU"]
[Sat Apr 18 17:27:17.541923 2026] [:error] [pid 9970:tid 9991] [client 20.215.249.162:5067] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rithin.php"] [unique_id "aeNOdSYdRLRhVmaIMx2PkQAAANE"]
[Sat Apr 18 17:27:18.082448 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:5076] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aeNOdoCFeowknfXHM7nchQAAAFE"]
[Sat Apr 18 17:27:18.664786 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:5098] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aeNOdoCFeowknfXHM7nciAAAAEU"]
[Sat Apr 18 17:27:19.244767 2026] [:error] [pid 34288:tid 34307] [client 20.215.249.162:4638] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aeNOd-TIiy__PtiLmpm_GQAAAY8"]
[Sat Apr 18 17:27:19.797206 2026] [:error] [pid 13023:tid 13049] [client 20.215.249.162:5003] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aeNOd_1e7hG8DAeABB_cUQAAARg"]
[Sat Apr 18 17:27:20.308754 2026] [:error] [pid 34290:tid 34341] [client 20.215.249.162:4992] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xfun.php"] [unique_id "aeNOeBqX6WpmmAXOBi_qCAAAAdY"]
[Sat Apr 18 17:27:20.827303 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:4725] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xfun.php"] [unique_id "aeNOeICFeowknfXHM7nckwAAAFE"]
[Sat Apr 18 17:27:21.454569 2026] [:error] [pid 9970:tid 9996] [client 20.215.249.162:5087] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xfun.php"] [unique_id "aeNOeSYdRLRhVmaIMx2PlgAAANY"]
[Sat Apr 18 17:27:22.064021 2026] [:error] [pid 9970:tid 9995] [client 20.215.249.162:4635] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xfun.php"] [unique_id "aeNOeiYdRLRhVmaIMx2PmAAAANU"]
[Sat Apr 18 17:27:22.642251 2026] [:error] [pid 9863:tid 9892] [client 20.215.249.162:4612] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeNOejjjiypiFrTucbK1YQAAABM"]
[Sat Apr 18 17:27:23.202633 2026] [:error] [pid 9863:tid 9886] [client 20.215.249.162:4721] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeNOezjjiypiFrTucbK1YwAAAA0"]
[Sat Apr 18 17:27:23.779800 2026] [:error] [pid 9863:tid 9888] [client 20.215.249.162:4603] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeNOezjjiypiFrTucbK1ZwAAAA8"]
[Sat Apr 18 17:27:24.330303 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:5099] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeNOfICFeowknfXHM7ncnAAAAE8"]
[Sat Apr 18 17:27:24.888546 2026] [:error] [pid 9864:tid 9907] [client 20.215.249.162:4663] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeNOfICFeowknfXHM7ncoQAAAEI"]
[Sat Apr 18 17:27:25.497795 2026] [:error] [pid 9864:tid 9922] [client 20.215.249.162:4946] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeNOfYCFeowknfXHM7ncowAAAFA"]
[Sat Apr 18 17:27:26.293698 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:4822] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeNOfoCFeowknfXHM7ncqQAAAE8"]
[Sat Apr 18 17:27:26.840503 2026] [:error] [pid 9864:tid 9917] [client 20.215.249.162:4735] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws86.php"] [unique_id "aeNOfoCFeowknfXHM7ncrwAAAEs"]
[Sat Apr 18 17:27:27.660119 2026] [:error] [pid 34290:tid 34331] [client 20.215.249.162:4615] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeNOfxqX6WpmmAXOBi_qGgAAAcw"]
[Sat Apr 18 17:27:28.195274 2026] [:error] [pid 9970:tid 9983] [client 20.215.249.162:5104] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeNOgCYdRLRhVmaIMx2PmQAAAMk"]
[Sat Apr 18 17:27:28.795342 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4930] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeNOgICFeowknfXHM7ncswAAAEU"]
[Sat Apr 18 17:27:29.358907 2026] [:error] [pid 34290:tid 34325] [client 20.215.249.162:5042] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws85.php"] [unique_id "aeNOgRqX6WpmmAXOBi_qIAAAAcY"]
[Sat Apr 18 17:27:29.920806 2026] [:error] [pid 9863:tid 9894] [client 20.215.249.162:4947] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aeNOgTjjiypiFrTucbK1dAAAABU"]
[Sat Apr 18 17:27:30.516619 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:5041] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aeNOgoCFeowknfXHM7nctwAAAFM"]
[Sat Apr 18 17:27:31.068112 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:4938] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aeNOg4CFeowknfXHM7ncugAAAFY"]
[Sat Apr 18 17:27:31.591946 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4893] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aeNOgxBmX4Wq5a6rxfZfEgAAAUQ"]
[Sat Apr 18 17:27:32.187991 2026] [:error] [pid 9864:tid 9916] [client 20.215.249.162:5097] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h2.php"] [unique_id "aeNOhICFeowknfXHM7ncvQAAAEo"]
[Sat Apr 18 17:27:32.758663 2026] [:error] [pid 9970:tid 9975] [client 20.215.249.162:5044] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h2.php"] [unique_id "aeNOhCYdRLRhVmaIMx2PngAAAME"]
[Sat Apr 18 17:27:33.321496 2026] [:error] [pid 9864:tid 9922] [client 20.215.249.162:5022] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h2.php"] [unique_id "aeNOhYCFeowknfXHM7ncwgAAAFA"]
[Sat Apr 18 17:27:33.848283 2026] [:error] [pid 34237:tid 34250] [client 20.215.249.162:5020] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h2.php"] [unique_id "aeNOhRBmX4Wq5a6rxfZfGgAAAUs"]
[Sat Apr 18 17:27:34.390821 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:5057] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeNOhhBmX4Wq5a6rxfZfHQAAAUg"]
[Sat Apr 18 17:27:34.972400 2026] [:error] [pid 13023:tid 13037] [client 20.215.249.162:5019] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeNOhv1e7hG8DAeABB_cXAAAAQw"]
[Sat Apr 18 17:27:35.506552 2026] [:error] [pid 9864:tid 9920] [client 20.215.249.162:5026] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeNOh4CFeowknfXHM7ncxwAAAE4"]
[Sat Apr 18 17:27:36.028437 2026] [:error] [pid 9864:tid 9930] [client 20.215.249.162:4953] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeNOiICFeowknfXHM7nczAAAAFg"]
[Sat Apr 18 17:27:36.558292 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4561] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeNOiICFeowknfXHM7nc0QAAAEU"]
[Sat Apr 18 17:27:37.107939 2026] [:error] [pid 9864:tid 9909] [client 20.215.249.162:4942] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeNOiYCFeowknfXHM7nc2AAAAEQ"]
[Sat Apr 18 17:27:37.680051 2026] [:error] [pid 9864:tid 9906] [client 20.215.249.162:4866] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeNOiYCFeowknfXHM7nc3wAAAEE"]
[Sat Apr 18 17:27:38.257686 2026] [:error] [pid 34290:tid 34343] [client 20.215.249.162:4934] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "aeNOihqX6WpmmAXOBi_qOgAAAdg"]
[Sat Apr 18 17:27:38.860935 2026] [:error] [pid 34290:tid 34342] [client 20.215.249.162:4933] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeNOihqX6WpmmAXOBi_qPwAAAdc"]
[Sat Apr 18 17:27:39.409795 2026] [:error] [pid 34237:tid 34257] [client 20.215.249.162:5030] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeNOixBmX4Wq5a6rxfZfLAAAAVI"]
[Sat Apr 18 17:27:39.955801 2026] [:error] [pid 34237:tid 34253] [client 20.215.249.162:4631] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeNOixBmX4Wq5a6rxfZfMAAAAU4"]
[Sat Apr 18 17:27:40.623462 2026] [:error] [pid 9970:tid 9981] [client 20.215.249.162:5047] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeNOjCYdRLRhVmaIMx2PogAAAMc"]
[Sat Apr 18 17:27:41.202914 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:4560] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lowpr.php"] [unique_id "aeNOjRBmX4Wq5a6rxfZfOwAAAUA"]
[Sat Apr 18 17:27:41.803848 2026] [:error] [pid 9970:tid 9992] [client 20.215.249.162:5053] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lowpr.php"] [unique_id "aeNOjSYdRLRhVmaIMx2PpQAAANI"]
[Sat Apr 18 17:27:42.361598 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:5050] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lowpr.php"] [unique_id "aeNOjoCFeowknfXHM7nc7gAAAE0"]
[Sat Apr 18 17:27:42.902014 2026] [:error] [pid 9865:tid 9945] [client 20.215.249.162:5100] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lowpr.php"] [unique_id "aeNOjqzb5knECIY-C-hlfAAAAIg"]
[Sat Apr 18 17:27:43.451075 2026] [:error] [pid 34290:tid 34331] [client 20.215.249.162:5118] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "aeNOjxqX6WpmmAXOBi_qRQAAAcw"]
[Sat Apr 18 17:27:44.010530 2026] [:error] [pid 34237:tid 34261] [client 20.215.249.162:5043] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "aeNOkBBmX4Wq5a6rxfZfQQAAAVY"]
[Sat Apr 18 17:27:44.558644 2026] [:error] [pid 34290:tid 34334] [client 20.215.249.162:5074] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "aeNOkBqX6WpmmAXOBi_qSQAAAc8"]
[Sat Apr 18 17:27:45.154038 2026] [:error] [pid 34290:tid 34326] [client 20.215.249.162:4956] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "aeNOkRqX6WpmmAXOBi_qUAAAAcc"]
[Sat Apr 18 17:27:45.681717 2026] [:error] [pid 34237:tid 34240] [client 20.215.249.162:5034] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "aeNOkRBmX4Wq5a6rxfZfRwAAAUE"]
[Sat Apr 18 17:27:46.250724 2026] [:error] [pid 34290:tid 34323] [client 20.215.249.162:4969] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "aeNOkhqX6WpmmAXOBi_qVQAAAcQ"]
[Sat Apr 18 17:27:46.769962 2026] [:error] [pid 9863:tid 9874] [client 20.215.249.162:5103] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "aeNOkjjjiypiFrTucbK1iQAAAAE"]
[Sat Apr 18 17:27:47.309675 2026] [:error] [pid 9863:tid 9889] [client 20.215.249.162:4636] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "aeNOkzjjiypiFrTucbK1jAAAABA"]
[Sat Apr 18 17:27:47.899158 2026] [:error] [pid 34237:tid 34258] [client 20.215.249.162:4957] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aeNOkxBmX4Wq5a6rxfZfUgAAAVM"]
[Sat Apr 18 17:27:48.662288 2026] [:error] [pid 9863:tid 9881] [client 20.215.249.162:4954] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aeNOlDjjiypiFrTucbK1kQAAAAg"]
[Sat Apr 18 17:27:49.262042 2026] [:error] [pid 9863:tid 9886] [client 20.215.249.162:4592] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aeNOlTjjiypiFrTucbK1lQAAAA0"]
[Sat Apr 18 17:27:49.859048 2026] [:error] [pid 9970:tid 9983] [client 20.215.249.162:4936] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aeNOlSYdRLRhVmaIMx2PqAAAAMk"]
[Sat Apr 18 17:27:51.606797 2026] [:error] [pid 9865:tid 9956] [client 20.215.249.162:5085] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/csv.php"] [unique_id "aeNOl6zb5knECIY-C-hlhQAAAJM"]
[Sat Apr 18 17:27:52.147711 2026] [:error] [pid 9865:tid 9961] [client 20.215.249.162:4960] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/csv.php"] [unique_id "aeNOmKzb5knECIY-C-hliAAAAJg"]
[Sat Apr 18 17:27:52.684664 2026] [:error] [pid 34237:tid 34262] [client 20.215.249.162:4985] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/csv.php"] [unique_id "aeNOmBBmX4Wq5a6rxfZfWwAAAVc"]
[Sat Apr 18 17:27:53.241111 2026] [:error] [pid 34290:tid 34325] [client 20.215.249.162:5048] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/csv.php"] [unique_id "aeNOmRqX6WpmmAXOBi_qWwAAAcY"]
[Sat Apr 18 17:27:54.285119 2026] [:error] [pid 9865:tid 9959] [client 20.215.249.162:5018] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "aeNOmqzb5knECIY-C-hljgAAAJY"]
[Sat Apr 18 17:27:54.814429 2026] [:error] [pid 13023:tid 13040] [client 20.215.249.162:4652] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "aeNOmv1e7hG8DAeABB_cZAAAAQ8"]
[Sat Apr 18 17:27:55.384549 2026] [:error] [pid 9863:tid 9878] [client 20.215.249.162:5089] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "aeNOmzjjiypiFrTucbK1rAAAAAU"]
[Sat Apr 18 17:27:56.047802 2026] [:error] [pid 9863:tid 9877] [client 20.215.249.162:4632] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sale.php"] [unique_id "aeNOnDjjiypiFrTucbK1rQAAAAQ"]
[Sat Apr 18 17:27:56.627585 2026] [:error] [pid 9864:tid 9917] [client 20.215.249.162:4991] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa21.php"] [unique_id "aeNOnICFeowknfXHM7ndAwAAAEs"]
[Sat Apr 18 17:27:57.218577 2026] [:error] [pid 9864:tid 9914] [client 20.215.249.162:5032] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa21.php"] [unique_id "aeNOnYCFeowknfXHM7ndCgAAAEg"]
[Sat Apr 18 17:27:57.819774 2026] [:error] [pid 9864:tid 9909] [client 20.215.249.162:5090] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa21.php"] [unique_id "aeNOnYCFeowknfXHM7ndEAAAAEQ"]
[Sat Apr 18 17:27:58.390785 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:5108] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa21.php"] [unique_id "aeNOnoCFeowknfXHM7ndGAAAAFE"]
[Sat Apr 18 17:27:59.007798 2026] [:error] [pid 9864:tid 9926] [client 20.215.249.162:4780] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws73.php"] [unique_id "aeNOn4CFeowknfXHM7ndHAAAAFQ"]
[Sat Apr 18 17:27:59.699104 2026] [:error] [pid 9863:tid 9895] [client 20.215.249.162:4657] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws73.php"] [unique_id "aeNOnzjjiypiFrTucbK1rgAAABY"]
[Sat Apr 18 17:28:00.273442 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:4907] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws73.php"] [unique_id "aeNOoBBmX4Wq5a6rxfZfbgAAAUc"]
[Sat Apr 18 17:28:00.849787 2026] [:error] [pid 9970:tid 9977] [client 20.215.249.162:5031] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws73.php"] [unique_id "aeNOoCYdRLRhVmaIMx2PrgAAAMM"]
[Sat Apr 18 17:28:01.411400 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:5049] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bootstrap.php"] [unique_id "aeNOoYCFeowknfXHM7ndKAAAAFE"]
[Sat Apr 18 17:28:01.947739 2026] [:error] [pid 34237:tid 34253] [client 20.215.249.162:4679] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bootstrap.php"] [unique_id "aeNOoRBmX4Wq5a6rxfZfdQAAAU4"]
[Sat Apr 18 17:28:02.485175 2026] [:error] [pid 34237:tid 34254] [client 20.215.249.162:5007] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bootstrap.php"] [unique_id "aeNOohBmX4Wq5a6rxfZfegAAAU8"]
[Sat Apr 18 17:28:03.027402 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:5072] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bootstrap.php"] [unique_id "aeNOoxBmX4Wq5a6rxfZffwAAAUU"]
[Sat Apr 18 17:28:03.627515 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:5002] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "aeNOo4CFeowknfXHM7ndMwAAAFE"]
[Sat Apr 18 17:28:04.164212 2026] [:error] [pid 9864:tid 9905] [client 20.215.249.162:4951] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "aeNOpICFeowknfXHM7ndOAAAAEA"]
[Sat Apr 18 17:28:04.724038 2026] [:error] [pid 9864:tid 9929] [client 20.215.249.162:4731] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "aeNOpICFeowknfXHM7ndOwAAAFc"]
[Sat Apr 18 17:28:05.301864 2026] [:error] [pid 9865:tid 9950] [client 20.215.249.162:4949] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "aeNOpazb5knECIY-C-hlkAAAAI0"]
[Sat Apr 18 17:28:05.878850 2026] [:error] [pid 13023:tid 13030] [client 20.215.249.162:4935] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "aeNOpf1e7hG8DAeABB_cbQAAAQU"]
[Sat Apr 18 17:28:06.451901 2026] [:error] [pid 13023:tid 13033] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Apr 18 17:28:06.896817 2026] [:error] [pid 13023:tid 13049] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Sat Apr 18 17:28:07.154747 2026] [:error] [pid 13023:tid 13032] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/ws87.php
[Sat Apr 18 17:28:07.436425 2026] [:error] [pid 13023:tid 13041] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/wxfyf.php
[Sat Apr 18 17:28:07.695100 2026] [:error] [pid 13023:tid 13047] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Apr 18 17:28:07.952589 2026] [:error] [pid 13023:tid 13043] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Sat Apr 18 17:28:08.225456 2026] [:error] [pid 13023:tid 13037] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/ne2026.php
[Sat Apr 18 17:28:08.513181 2026] [:error] [pid 13023:tid 13044] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/2ksm17n.php
[Sat Apr 18 17:28:08.800633 2026] [:error] [pid 13023:tid 13045] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/less.php
[Sat Apr 18 17:28:10.391559 2026] [:error] [pid 13023:tid 13045] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Apr 18 17:28:10.650622 2026] [:error] [pid 13023:tid 13030] [client 20.215.249.162:4945] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sat Apr 18 17:28:10.914051 2026] [:error] [pid 13023:tid 13036] [client 20.215.249.162:4945] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeNOqv1e7hG8DAeABB_cfwAAAQs"]
[Sat Apr 18 17:28:11.425545 2026] [:error] [pid 9864:tid 9916] [client 20.215.249.162:4962] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeNOq4CFeowknfXHM7ndTQAAAEo"]
[Sat Apr 18 17:28:11.972148 2026] [:error] [pid 9865:tid 9946] [client 20.215.249.162:4888] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeNOq6zb5knECIY-C-hlkwAAAIk"]
[Sat Apr 18 17:28:12.531943 2026] [:error] [pid 34288:tid 34297] [client 20.215.249.162:5110] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fsgdjkl.php"] [unique_id "aeNOrOTIiy__PtiLmpm_IgAAAYU"]
[Sat Apr 18 17:28:13.097572 2026] [:error] [pid 9864:tid 9914] [client 20.215.249.162:4625] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "aeNOrYCFeowknfXHM7ndVAAAAEg"]
[Sat Apr 18 17:28:13.672342 2026] [:error] [pid 9864:tid 9924] [client 20.215.249.162:5113] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "aeNOrYCFeowknfXHM7ndXAAAAFI"]
[Sat Apr 18 17:28:14.282400 2026] [:error] [pid 9864:tid 9905] [client 20.215.249.162:4986] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "aeNOroCFeowknfXHM7ndYgAAAEA"]
[Sat Apr 18 17:28:14.852852 2026] [:error] [pid 34237:tid 34262] [client 20.215.249.162:5046] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "aeNOrhBmX4Wq5a6rxfZflgAAAVc"]
[Sat Apr 18 17:28:15.363579 2026] [:error] [pid 34288:tid 34294] [client 20.215.249.162:4965] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jlex.php"] [unique_id "aeNOr-TIiy__PtiLmpm_JgAAAYI"]
[Sat Apr 18 17:28:15.892430 2026] [:error] [pid 9864:tid 9907] [client 20.215.249.162:4655] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jlex.php"] [unique_id "aeNOr4CFeowknfXHM7nddQAAAEI"]
[Sat Apr 18 17:28:16.437192 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:5028] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jlex.php"] [unique_id "aeNOsBBmX4Wq5a6rxfZfmwAAAUA"]
[Sat Apr 18 17:28:17.013413 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:5006] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jlex.php"] [unique_id "aeNOsRqX6WpmmAXOBi_qhwAAAdE"]
[Sat Apr 18 17:28:17.557928 2026] [:error] [pid 9864:tid 9920] [client 20.215.249.162:5051] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "aeNOsYCFeowknfXHM7ndfgAAAE4"]
[Sat Apr 18 17:28:18.115943 2026] [:error] [pid 9863:tid 9891] [client 20.215.249.162:4752] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "aeNOsjjjiypiFrTucbK1uwAAABI"]
[Sat Apr 18 17:28:18.655506 2026] [:error] [pid 13023:tid 13029] [client 20.215.249.162:4623] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "aeNOsv1e7hG8DAeABB_cggAAAQQ"]
[Sat Apr 18 17:28:19.164368 2026] [:error] [pid 9864:tid 9926] [client 20.215.249.162:5055] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "aeNOs4CFeowknfXHM7ndhQAAAFQ"]
[Sat Apr 18 17:28:19.692462 2026] [:error] [pid 9864:tid 9912] [client 20.215.249.162:4968] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a6.php"] [unique_id "aeNOs4CFeowknfXHM7ndiAAAAEY"]
[Sat Apr 18 17:28:20.216359 2026] [:error] [pid 34288:tid 34308] [client 20.215.249.162:4963] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a6.php"] [unique_id "aeNOtOTIiy__PtiLmpm_LwAAAZA"]
[Sat Apr 18 17:28:20.739132 2026] [:error] [pid 34290:tid 34331] [client 20.215.249.162:4955] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a6.php"] [unique_id "aeNOtBqX6WpmmAXOBi_qiwAAAcw"]
[Sat Apr 18 17:28:21.274221 2026] [:error] [pid 9865:tid 9948] [client 20.215.249.162:4627] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a6.php"] [unique_id "aeNOtazb5knECIY-C-hlnQAAAIs"]
[Sat Apr 18 17:28:21.785961 2026] [:error] [pid 9865:tid 9955] [client 20.215.249.162:5064] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "aeNOtazb5knECIY-C-hlnwAAAJI"]
[Sat Apr 18 17:28:22.326301 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:4967] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "aeNOtoCFeowknfXHM7ndlAAAAE0"]
[Sat Apr 18 17:28:22.889972 2026] [:error] [pid 9970:tid 9996] [client 20.215.249.162:4869] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "aeNOtiYdRLRhVmaIMx2PxAAAANY"]
[Sat Apr 18 17:28:23.455298 2026] [:error] [pid 34290:tid 34322] [client 20.215.249.162:4871] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "aeNOtxqX6WpmmAXOBi_qoQAAAcM"]
[Sat Apr 18 17:28:23.995399 2026] [:error] [pid 34237:tid 34241] [client 20.215.249.162:4958] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a8.php"] [unique_id "aeNOtxBmX4Wq5a6rxfZfoAAAAUI"]
[Sat Apr 18 17:28:24.559213 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:4978] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a8.php"] [unique_id "aeNOuBBmX4Wq5a6rxfZfogAAAUM"]
[Sat Apr 18 17:28:25.098904 2026] [:error] [pid 9863:tid 9897] [client 20.215.249.162:4886] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a8.php"] [unique_id "aeNOuTjjiypiFrTucbK1vQAAABg"]
[Sat Apr 18 17:28:25.655744 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:5024] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a8.php"] [unique_id "aeNOuYCFeowknfXHM7ndoQAAAFY"]
[Sat Apr 18 17:28:26.231286 2026] [:error] [pid 34237:tid 34256] [client 20.215.249.162:4877] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a9.php"] [unique_id "aeNOuhBmX4Wq5a6rxfZfpwAAAVE"]
[Sat Apr 18 17:28:26.756824 2026] [:error] [pid 34288:tid 34309] [client 20.215.249.162:4577] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a9.php"] [unique_id "aeNOuuTIiy__PtiLmpm_MAAAAZE"]
[Sat Apr 18 17:28:27.309376 2026] [:error] [pid 9863:tid 9896] [client 20.215.249.162:4803] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a9.php"] [unique_id "aeNOuzjjiypiFrTucbK1vwAAABc"]
[Sat Apr 18 17:28:27.863383 2026] [:error] [pid 34288:tid 34297] [client 20.215.249.162:4983] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a9.php"] [unique_id "aeNOu-TIiy__PtiLmpm_MQAAAYU"]
[Sat Apr 18 17:28:28.391139 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:4713] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hnphq.php"] [unique_id "aeNOvICFeowknfXHM7ndrQAAAE8"]
[Sat Apr 18 17:28:28.931289 2026] [:error] [pid 9864:tid 9920] [client 20.215.249.162:5004] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hnphq.php"] [unique_id "aeNOvICFeowknfXHM7ndsQAAAE4"]
[Sat Apr 18 17:28:29.462775 2026] [:error] [pid 34237:tid 34251] [client 20.215.249.162:4961] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hnphq.php"] [unique_id "aeNOvRBmX4Wq5a6rxfZfsgAAAUw"]
[Sat Apr 18 17:28:29.976397 2026] [:error] [pid 9864:tid 9914] [client 20.215.249.162:4937] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hnphq.php"] [unique_id "aeNOvYCFeowknfXHM7ndvQAAAEg"]
[Sat Apr 18 17:28:30.512211 2026] [:error] [pid 9864:tid 9913] [client 20.215.249.162:4981] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luyuc.php"] [unique_id "aeNOvoCFeowknfXHM7ndwwAAAEc"]
[Sat Apr 18 17:28:31.046245 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:4873] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luyuc.php"] [unique_id "aeNOv4CFeowknfXHM7ndyQAAAFY"]
[Sat Apr 18 17:28:31.593659 2026] [:error] [pid 34290:tid 34337] [client 20.215.249.162:4980] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luyuc.php"] [unique_id "aeNOvxqX6WpmmAXOBi_qrAAAAdI"]
[Sat Apr 18 17:28:32.109312 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:4974] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luyuc.php"] [unique_id "aeNOwBBmX4Wq5a6rxfZftQAAAUY"]
[Sat Apr 18 17:28:32.639597 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:4865] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-moonka.php"] [unique_id "aeNOwBBmX4Wq5a6rxfZftgAAAUo"]
[Sat Apr 18 17:28:33.166079 2026] [:error] [pid 34237:tid 34263] [client 20.215.249.162:5086] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-moonka.php"] [unique_id "aeNOwRBmX4Wq5a6rxfZfuQAAAVg"]
[Sat Apr 18 17:28:33.698908 2026] [:error] [pid 9863:tid 9893] [client 20.215.249.162:5081] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-moonka.php"] [unique_id "aeNOwTjjiypiFrTucbK1wwAAABQ"]
[Sat Apr 18 17:28:34.241561 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:5036] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-moonka.php"] [unique_id "aeNOwoCFeowknfXHM7nd1gAAAE0"]
[Sat Apr 18 17:28:34.802707 2026] [:error] [pid 9865:tid 9946] [client 20.215.249.162:4996] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "aeNOwqzb5knECIY-C-hlrgAAAIk"]
[Sat Apr 18 17:28:35.316936 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:5071] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "aeNOwxqX6WpmmAXOBi_qrQAAAdE"]
[Sat Apr 18 17:28:35.889753 2026] [:error] [pid 13023:tid 13043] [client 20.215.249.162:5027] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "aeNOw_1e7hG8DAeABB_chwAAARI"]
[Sat Apr 18 17:28:36.438791 2026] [:error] [pid 13023:tid 13034] [client 20.215.249.162:5094] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "aeNOxP1e7hG8DAeABB_ciAAAAQk"]
[Sat Apr 18 17:28:36.971045 2026] [:error] [pid 9970:tid 9980] [client 20.215.249.162:4880] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX2.php"] [unique_id "aeNOxCYdRLRhVmaIMx2PzwAAAMY"]
[Sat Apr 18 17:28:37.485011 2026] [:error] [pid 9864:tid 9918] [client 20.215.249.162:4648] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX2.php"] [unique_id "aeNOxYCFeowknfXHM7nd5AAAAEw"]
[Sat Apr 18 17:28:38.035906 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:4616] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX2.php"] [unique_id "aeNOxoCFeowknfXHM7nd6QAAAFE"]
[Sat Apr 18 17:28:38.613854 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4864] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX2.php"] [unique_id "aeNOxoCFeowknfXHM7nd7QAAAEU"]
[Sat Apr 18 17:28:39.210757 2026] [:error] [pid 34290:tid 34321] [client 20.215.249.162:4658] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/only.php"] [unique_id "aeNOxxqX6WpmmAXOBi_qswAAAcI"]
[Sat Apr 18 17:28:39.835095 2026] [:error] [pid 34288:tid 34301] [client 20.215.249.162:4902] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/only.php"] [unique_id "aeNOx-TIiy__PtiLmpm_OgAAAYk"]
[Sat Apr 18 17:28:40.376881 2026] [:error] [pid 9865:tid 9942] [client 20.215.249.162:4546] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/only.php"] [unique_id "aeNOyKzb5knECIY-C-hltQAAAIU"]
[Sat Apr 18 17:28:41.031956 2026] [:error] [pid 34288:tid 34293] [client 20.215.249.162:4959] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/only.php"] [unique_id "aeNOyeTIiy__PtiLmpm_PAAAAYE"]
[Sat Apr 18 17:28:41.601652 2026] [:error] [pid 9864:tid 9913] [client 20.215.249.162:4989] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sts.php"] [unique_id "aeNOyYCFeowknfXHM7nd8QAAAEc"]
[Sat Apr 18 17:28:42.118568 2026] [:error] [pid 34290:tid 34343] [client 20.215.249.162:4660] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sts.php"] [unique_id "aeNOyhqX6WpmmAXOBi_qvgAAAdg"]
[Sat Apr 18 17:28:42.649736 2026] [:error] [pid 9864:tid 9918] [client 20.215.249.162:4720] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sts.php"] [unique_id "aeNOyoCFeowknfXHM7nd8wAAAEw"]
[Sat Apr 18 17:28:43.169591 2026] [:error] [pid 9865:tid 9948] [client 20.215.249.162:4559] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sts.php"] [unique_id "aeNOy6zb5knECIY-C-hluQAAAIs"]
[Sat Apr 18 17:28:43.729451 2026] [:error] [pid 34237:tid 34257] [client 20.215.249.162:4990] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "aeNOyxBmX4Wq5a6rxfZfxgAAAVI"]
[Sat Apr 18 17:28:44.332066 2026] [:error] [pid 34290:tid 34338] [client 20.215.249.162:5017] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "aeNOzBqX6WpmmAXOBi_qwgAAAdM"]
[Sat Apr 18 17:28:44.868223 2026] [:error] [pid 9865:tid 9955] [client 20.215.249.162:4885] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "aeNOzKzb5knECIY-C-hlugAAAJI"]
[Sat Apr 18 17:28:45.421449 2026] [:error] [pid 9864:tid 9929] [client 20.215.249.162:4796] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Geforce.php"] [unique_id "aeNOzYCFeowknfXHM7nd-gAAAFc"]
[Sat Apr 18 17:28:45.992695 2026] [:error] [pid 9864:tid 9912] [client 20.215.249.162:4944] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dichku.php"] [unique_id "aeNOzYCFeowknfXHM7nd_wAAAEY"]
[Sat Apr 18 17:28:46.547852 2026] [:error] [pid 34237:tid 34258] [client 20.215.249.162:4897] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dichku.php"] [unique_id "aeNOzhBmX4Wq5a6rxfZf0wAAAVM"]
[Sat Apr 18 17:28:47.151813 2026] [:error] [pid 34290:tid 34325] [client 20.215.249.162:5114] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dichku.php"] [unique_id "aeNOzxqX6WpmmAXOBi_qxQAAAcY"]
[Sat Apr 18 17:28:47.800698 2026] [:error] [pid 9970:tid 9986] [client 20.215.249.162:4687] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dichku.php"] [unique_id "aeNOzyYdRLRhVmaIMx2P3AAAAMw"]
[Sat Apr 18 17:28:48.353777 2026] [:error] [pid 34237:tid 34242] [client 20.215.249.162:4867] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "aeNO0BBmX4Wq5a6rxfZf2gAAAUM"]
[Sat Apr 18 17:28:48.916226 2026] [:error] [pid 34237:tid 34257] [client 20.215.249.162:4646] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "aeNO0BBmX4Wq5a6rxfZf2wAAAVI"]
[Sat Apr 18 17:28:49.470835 2026] [:error] [pid 34237:tid 34261] [client 20.215.249.162:4870] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "aeNO0RBmX4Wq5a6rxfZf3gAAAVY"]
[Sat Apr 18 17:28:50.078766 2026] [:error] [pid 9865:tid 9946] [client 20.215.249.162:4670] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "aeNO0qzb5knECIY-C-hluwAAAIk"]
[Sat Apr 18 17:28:50.655379 2026] [:error] [pid 9864:tid 9908] [client 20.215.249.162:4925] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "aeNO0oCFeowknfXHM7neBwAAAEM"]
[Sat Apr 18 17:28:51.241551 2026] [:error] [pid 34237:tid 34254] [client 20.215.249.162:4890] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "aeNO0xBmX4Wq5a6rxfZf5gAAAU8"]
[Sat Apr 18 17:28:51.825401 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:4892] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "aeNO0xBmX4Wq5a6rxfZf6gAAAUA"]
[Sat Apr 18 17:28:52.396142 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:4929] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "aeNO1BBmX4Wq5a6rxfZf7gAAAUg"]
[Sat Apr 18 17:28:52.939141 2026] [:error] [pid 9864:tid 9913] [client 20.215.249.162:4649] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-ccv.php"] [unique_id "aeNO1ICFeowknfXHM7neDAAAAEc"]
[Sat Apr 18 17:28:53.470452 2026] [:error] [pid 34288:tid 34311] [client 20.215.249.162:5109] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-ccv.php"] [unique_id "aeNO1eTIiy__PtiLmpm_QwAAAZM"]
[Sat Apr 18 17:28:53.995523 2026] [:error] [pid 9864:tid 9905] [client 20.215.249.162:4883] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-ccv.php"] [unique_id "aeNO1YCFeowknfXHM7neEQAAAEA"]
[Sat Apr 18 17:28:54.555616 2026] [:error] [pid 9864:tid 9926] [client 20.215.249.162:5083] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-ccv.php"] [unique_id "aeNO1oCFeowknfXHM7neFQAAAFQ"]
[Sat Apr 18 17:28:55.152790 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:4896] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hfles.php"] [unique_id "aeNO14CFeowknfXHM7neGAAAAFY"]
[Sat Apr 18 17:28:55.722871 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:4941] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hfles.php"] [unique_id "aeNO1xqX6WpmmAXOBi_q0AAAAdE"]
[Sat Apr 18 17:28:56.274376 2026] [:error] [pid 34290:tid 34321] [client 20.215.249.162:4817] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hfles.php"] [unique_id "aeNO2BqX6WpmmAXOBi_q0QAAAcI"]
[Sat Apr 18 17:28:56.897757 2026] [:error] [pid 9970:tid 9981] [client 20.215.249.162:4923] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hfles.php"] [unique_id "aeNO2CYdRLRhVmaIMx2P6wAAAMc"]
[Sat Apr 18 17:28:57.456038 2026] [:error] [pid 13023:tid 13044] [client 20.215.249.162:4915] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeNO2f1e7hG8DAeABB_ckwAAARM"]
[Sat Apr 18 17:28:58.039114 2026] [:error] [pid 9864:tid 9905] [client 20.215.249.162:4801] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeNO2oCFeowknfXHM7neIQAAAEA"]
[Sat Apr 18 17:28:58.638017 2026] [:error] [pid 9864:tid 9907] [client 20.215.249.162:4875] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeNO2oCFeowknfXHM7neJQAAAEI"]
[Sat Apr 18 17:28:59.205289 2026] [:error] [pid 13023:tid 13025] [client 20.215.249.162:4899] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "aeNO2_1e7hG8DAeABB_clQAAAQA"]
[Sat Apr 18 17:28:59.722470 2026] [:error] [pid 9864:tid 9913] [client 20.215.249.162:4810] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeNO24CFeowknfXHM7neKwAAAEc"]
[Sat Apr 18 17:29:00.296985 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4979] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeNO3ICFeowknfXHM7neLwAAAEU"]
[Sat Apr 18 17:29:00.885310 2026] [:error] [pid 34237:tid 34259] [client 20.215.249.162:4809] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeNO3BBmX4Wq5a6rxfZf9QAAAVQ"]
[Sat Apr 18 17:29:01.457046 2026] [:error] [pid 9970:tid 9979] [client 20.215.249.162:4921] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeNO3SYdRLRhVmaIMx2P7gAAAMU"]
[Sat Apr 18 17:29:01.988607 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:4973] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeNO3YCFeowknfXHM7neNwAAAFY"]
[Sat Apr 18 17:29:02.522372 2026] [:error] [pid 9865:tid 9949] [client 20.215.249.162:4972] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeNO3qzb5knECIY-C-hlvwAAAIw"]
[Sat Apr 18 17:29:03.036803 2026] [:error] [pid 34237:tid 34263] [client 20.215.249.162:4582] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeNO3xBmX4Wq5a6rxfZf-wAAAVg"]
[Sat Apr 18 17:29:03.578487 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:5116] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeNO3xBmX4Wq5a6rxfZf_wAAAUA"]
[Sat Apr 18 17:29:04.129157 2026] [:error] [pid 34288:tid 34295] [client 20.215.249.162:4976] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeNO4OTIiy__PtiLmpm_UgAAAYM"]
[Sat Apr 18 17:29:04.701774 2026] [:error] [pid 9863:tid 9893] [client 20.215.249.162:4943] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeNO4DjjiypiFrTucbK1zQAAABQ"]
[Sat Apr 18 17:29:05.241984 2026] [:error] [pid 34290:tid 34341] [client 20.215.249.162:4609] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeNO4RqX6WpmmAXOBi_q2AAAAdY"]
[Sat Apr 18 17:29:05.840400 2026] [:error] [pid 34290:tid 34329] [client 20.215.249.162:4834] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeNO4RqX6WpmmAXOBi_q3AAAAco"]
[Sat Apr 18 17:29:06.408920 2026] [:error] [pid 9970:tid 9991] [client 20.215.249.162:5084] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "aeNO4iYdRLRhVmaIMx2P8wAAANE"]
[Sat Apr 18 17:29:06.950172 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:4970] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "aeNO4hBmX4Wq5a6rxfZgBwAAAUU"]
[Sat Apr 18 17:29:07.501780 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4555] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "aeNO44CFeowknfXHM7neRQAAAEU"]
[Sat Apr 18 17:29:08.033583 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:4608] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "aeNO5BBmX4Wq5a6rxfZgCwAAAU0"]
[Sat Apr 18 17:29:08.555324 2026] [:error] [pid 9970:tid 9995] [client 20.215.249.162:4820] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tdsaz.php"] [unique_id "aeNO5CYdRLRhVmaIMx2P9QAAANU"]
[Sat Apr 18 17:29:09.067708 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4911] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tdsaz.php"] [unique_id "aeNO5YCFeowknfXHM7neUQAAAEU"]
[Sat Apr 18 17:29:09.602503 2026] [:error] [pid 9864:tid 9914] [client 20.215.249.162:4908] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tdsaz.php"] [unique_id "aeNO5YCFeowknfXHM7neVwAAAEg"]
[Sat Apr 18 17:29:10.152310 2026] [:error] [pid 9865:tid 9953] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/tdsaz.php
[Sat Apr 18 17:29:10.447390 2026] [:error] [pid 9865:tid 9939] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/ynjli.php
[Sat Apr 18 17:29:10.737043 2026] [:error] [pid 9865:tid 9938] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sat Apr 18 17:29:11.033945 2026] [:error] [pid 9865:tid 9950] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/rogsa.php
[Sat Apr 18 17:29:11.322568 2026] [:error] [pid 9865:tid 9948] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/zoper1.php
[Sat Apr 18 17:29:11.610771 2026] [:error] [pid 9865:tid 9955] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/new3.php
[Sat Apr 18 17:29:11.902385 2026] [:error] [pid 9865:tid 9958] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/0yellow.php
[Sat Apr 18 17:29:12.210735 2026] [:error] [pid 9865:tid 9956] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sat Apr 18 17:29:12.512300 2026] [:error] [pid 9865:tid 9943] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sat Apr 18 17:29:12.804841 2026] [:error] [pid 9865:tid 9937] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/wziar1.php
[Sat Apr 18 17:29:13.101460 2026] [:error] [pid 9865:tid 9941] [client 20.215.249.162:4874] File does not exist: /usr/local/apache/htdocs/suspended-page/repurify.php
[Sat Apr 18 17:29:13.390387 2026] [:error] [pid 9865:tid 9954] [client 20.215.249.162:4874] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeNO6azb5knECIY-C-hl1QAAAJE"]
[Sat Apr 18 17:29:13.968652 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4645] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeNO6RBmX4Wq5a6rxfZgEgAAAUQ"]
[Sat Apr 18 17:29:14.564468 2026] [:error] [pid 9970:tid 9994] [client 20.215.249.162:4878] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeNO6iYdRLRhVmaIMx2P-AAAANQ"]
[Sat Apr 18 17:29:15.075714 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:4919] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4GrJSiwkF3A.php"] [unique_id "aeNO6xqX6WpmmAXOBi_q9wAAAdE"]
[Sat Apr 18 17:29:15.628608 2026] [:error] [pid 34237:tid 34256] [client 20.215.249.162:4964] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeNO6xBmX4Wq5a6rxfZgGAAAAVE"]
[Sat Apr 18 17:29:16.185122 2026] [:error] [pid 34288:tid 34297] [client 20.215.249.162:4697] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeNO7OTIiy__PtiLmpm_VgAAAYU"]
[Sat Apr 18 17:29:16.702685 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:5037] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeNO7BBmX4Wq5a6rxfZgHgAAAUo"]
[Sat Apr 18 17:29:17.245055 2026] [:error] [pid 9864:tid 9915] [client 20.215.249.162:4898] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeNO7YCFeowknfXHM7neZAAAAEk"]
[Sat Apr 18 17:29:17.820370 2026] [:error] [pid 13023:tid 13029] [client 20.215.249.162:4738] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpxl.php"] [unique_id "aeNO7f1e7hG8DAeABB_cmgAAAQQ"]
[Sat Apr 18 17:29:18.380849 2026] [:error] [pid 13023:tid 13039] [client 20.215.249.162:4724] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpxl.php"] [unique_id "aeNO7v1e7hG8DAeABB_cnAAAAQ4"]
[Sat Apr 18 17:29:18.965200 2026] [:error] [pid 13023:tid 13041] [client 20.215.249.162:5061] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpxl.php"] [unique_id "aeNO7v1e7hG8DAeABB_cnwAAARA"]
[Sat Apr 18 17:29:19.507825 2026] [:error] [pid 9865:tid 9956] [client 20.215.249.162:4926] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpxl.php"] [unique_id "aeNO76zb5knECIY-C-hl2gAAAJM"]
[Sat Apr 18 17:29:20.083572 2026] [:error] [pid 9970:tid 9978] [client 20.215.249.162:4868] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeNO8CYdRLRhVmaIMx2P_gAAAMQ"]
[Sat Apr 18 17:29:20.668048 2026] [:error] [pid 9865:tid 9943] [client 20.215.249.162:4815] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeNO8Kzb5knECIY-C-hl3gAAAIY"]
[Sat Apr 18 17:29:21.177542 2026] [:error] [pid 9864:tid 9923] [client 20.215.249.162:4879] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeNO8YCFeowknfXHM7neZwAAAFE"]
[Sat Apr 18 17:29:21.719086 2026] [:error] [pid 9865:tid 9941] [client 20.215.249.162:4729] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeNO8azb5knECIY-C-hl4QAAAIQ"]
[Sat Apr 18 17:29:22.243886 2026] [:error] [pid 13023:tid 13049] [client 20.215.249.162:4884] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "aeNO8v1e7hG8DAeABB_cowAAARg"]
[Sat Apr 18 17:29:22.784677 2026] [:error] [pid 34290:tid 34319] [client 20.215.249.162:4573] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "aeNO8hqX6WpmmAXOBi_rBgAAAcA"]
[Sat Apr 18 17:29:23.382375 2026] [:error] [pid 9970:tid 9980] [client 20.215.249.162:4940] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "aeNO8yYdRLRhVmaIMx2QAwAAAMY"]
[Sat Apr 18 17:29:23.934697 2026] [:error] [pid 9970:tid 9998] [client 20.215.249.162:4816] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upll22.php"] [unique_id "aeNO8yYdRLRhVmaIMx2QBgAAANg"]
[Sat Apr 18 17:29:24.516471 2026] [:error] [pid 9863:tid 9889] [client 20.215.249.162:4811] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeNO9DjjiypiFrTucbK13AAAABA"]
[Sat Apr 18 17:29:25.034407 2026] [:error] [pid 34237:tid 34258] [client 20.215.249.162:4984] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeNO9RBmX4Wq5a6rxfZgJgAAAVM"]
[Sat Apr 18 17:29:25.627059 2026] [:error] [pid 9864:tid 9905] [client 20.215.249.162:4772] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeNO9YCFeowknfXHM7neawAAAEA"]
[Sat Apr 18 17:29:26.150099 2026] [:error] [pid 34290:tid 34330] [client 20.215.249.162:4912] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeNO9hqX6WpmmAXOBi_rDAAAAcs"]
[Sat Apr 18 17:29:26.663936 2026] [:error] [pid 9970:tid 9985] [client 20.215.249.162:4844] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aeNO9iYdRLRhVmaIMx2QDAAAAMs"]
[Sat Apr 18 17:29:27.275711 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:4987] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aeNO9xBmX4Wq5a6rxfZgKgAAAUA"]
[Sat Apr 18 17:29:27.830731 2026] [:error] [pid 34290:tid 34320] [client 20.215.249.162:4821] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aeNO9xqX6WpmmAXOBi_rEAAAAcE"]
[Sat Apr 18 17:29:28.385535 2026] [:error] [pid 9863:tid 9894] [client 20.215.249.162:4988] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aeNO-DjjiypiFrTucbK13QAAABU"]
[Sat Apr 18 17:29:28.908881 2026] [:error] [pid 34290:tid 34338] [client 20.215.249.162:4971] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "aeNO-BqX6WpmmAXOBi_rFAAAAdM"]
[Sat Apr 18 17:29:29.457860 2026] [:error] [pid 34290:tid 34329] [client 20.215.249.162:4975] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "aeNO-RqX6WpmmAXOBi_rFwAAAco"]
[Sat Apr 18 17:29:29.996839 2026] [:error] [pid 34290:tid 34325] [client 20.215.249.162:4846] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "aeNO-RqX6WpmmAXOBi_rGQAAAcY"]
[Sat Apr 18 17:29:30.514291 2026] [:error] [pid 9864:tid 9906] [client 20.215.249.162:4914] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-942.php"] [unique_id "aeNO-oCFeowknfXHM7necgAAAEE"]
[Sat Apr 18 17:29:31.049365 2026] [:error] [pid 34237:tid 34256] [client 20.215.249.162:4948] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aeNO-xBmX4Wq5a6rxfZgLwAAAVE"]
[Sat Apr 18 17:29:31.581467 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4900] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aeNO-4CFeowknfXHM7necwAAAEU"]
[Sat Apr 18 17:29:32.108007 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:4813] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aeNO_BBmX4Wq5a6rxfZgNgAAAUo"]
[Sat Apr 18 17:29:32.654897 2026] [:error] [pid 34237:tid 34247] [client 20.215.249.162:4845] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aeNO_BBmX4Wq5a6rxfZgNwAAAUg"]
[Sat Apr 18 17:29:33.197448 2026] [:error] [pid 9864:tid 9916] [client 20.215.249.162:4831] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeNO_YCFeowknfXHM7neeAAAAEo"]
[Sat Apr 18 17:29:33.715294 2026] [:error] [pid 34237:tid 34248] [client 20.215.249.162:4861] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeNO_RBmX4Wq5a6rxfZgOwAAAUk"]
[Sat Apr 18 17:29:34.236928 2026] [:error] [pid 13023:tid 13049] [client 20.215.249.162:4827] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeNO_v1e7hG8DAeABB_crwAAARg"]
[Sat Apr 18 17:29:34.766810 2026] [:error] [pid 34290:tid 34334] [client 20.215.249.162:4818] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hanyatersenyum.php"] [unique_id "aeNO_hqX6WpmmAXOBi_rIgAAAc8"]
[Sat Apr 18 17:29:35.276017 2026] [:error] [pid 9864:tid 9905] [client 20.215.249.162:4806] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "aeNO_4CFeowknfXHM7nefAAAAEA"]
[Sat Apr 18 17:29:35.833806 2026] [:error] [pid 34290:tid 34343] [client 20.215.249.162:5117] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "aeNO_xqX6WpmmAXOBi_rIwAAAdg"]
[Sat Apr 18 17:29:36.378997 2026] [:error] [pid 34290:tid 34319] [client 20.215.249.162:4418] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "aeNPABqX6WpmmAXOBi_rJQAAAcA"]
[Sat Apr 18 17:29:36.898546 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:4637] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/161dfd072f.php"] [unique_id "aeNPABqX6WpmmAXOBi_rJwAAAdE"]
[Sat Apr 18 17:29:37.417112 2026] [:error] [pid 9970:tid 9975] [client 20.215.249.162:4922] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maintura.php"] [unique_id "aeNPASYdRLRhVmaIMx2QFAAAAME"]
[Sat Apr 18 17:29:37.931070 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4903] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maintura.php"] [unique_id "aeNPAYCFeowknfXHM7nehgAAAEU"]
[Sat Apr 18 17:29:38.444865 2026] [:error] [pid 9970:tid 9992] [client 20.215.249.162:4854] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maintura.php"] [unique_id "aeNPAiYdRLRhVmaIMx2QGQAAANI"]
[Sat Apr 18 17:29:38.964624 2026] [:error] [pid 34290:tid 34324] [client 20.215.249.162:5005] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/maintura.php"] [unique_id "aeNPAhqX6WpmmAXOBi_rKwAAAcU"]
[Sat Apr 18 17:29:39.479760 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:4802] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "aeNPA4CFeowknfXHM7neiwAAAFM"]
[Sat Apr 18 17:29:40.017108 2026] [:error] [pid 9970:tid 9987] [client 20.215.249.162:4747] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "aeNPBCYdRLRhVmaIMx2QHgAAAM0"]
[Sat Apr 18 17:29:40.547921 2026] [:error] [pid 9970:tid 9994] [client 20.215.249.162:4790] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "aeNPBCYdRLRhVmaIMx2QIAAAANQ"]
[Sat Apr 18 17:29:41.102359 2026] [:error] [pid 9863:tid 9883] [client 20.215.249.162:4857] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/RIP.php"] [unique_id "aeNPBTjjiypiFrTucbK14QAAAAo"]
[Sat Apr 18 17:29:41.697208 2026] [:error] [pid 9970:tid 9996] [client 20.215.249.162:4881] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "aeNPBSYdRLRhVmaIMx2QIwAAANY"]
[Sat Apr 18 17:29:42.246537 2026] [:error] [pid 9864:tid 9929] [client 20.215.249.162:4876] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "aeNPBoCFeowknfXHM7nemwAAAFc"]
[Sat Apr 18 17:29:42.757533 2026] [:error] [pid 34288:tid 34301] [client 20.215.249.162:4982] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "aeNPBuTIiy__PtiLmpm_cAAAAYk"]
[Sat Apr 18 17:29:43.299387 2026] [:error] [pid 9865:tid 9940] [client 20.215.249.162:4891] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "aeNPB6zb5knECIY-C-hl8QAAAIM"]
[Sat Apr 18 17:29:43.963723 2026] [:error] [pid 34288:tid 34316] [client 20.215.249.162:4905] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeNPB-TIiy__PtiLmpm_cgAAAZg"]
[Sat Apr 18 17:29:44.536447 2026] [:error] [pid 9863:tid 9875] [client 20.215.249.162:4918] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeNPCDjjiypiFrTucbK15gAAAAI"]
[Sat Apr 18 17:29:45.147481 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:4678] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeNPCRBmX4Wq5a6rxfZgRAAAAUc"]
[Sat Apr 18 17:29:45.709465 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4768] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeNPCRBmX4Wq5a6rxfZgRwAAAUQ"]
[Sat Apr 18 17:29:46.276116 2026] [:error] [pid 9865:tid 9949] [client 20.215.249.162:4688] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "aeNPCqzb5knECIY-C-hl-wAAAIw"]
[Sat Apr 18 17:29:46.821998 2026] [:error] [pid 9970:tid 9991] [client 20.215.249.162:4792] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "aeNPCiYdRLRhVmaIMx2QJAAAANE"]
[Sat Apr 18 17:29:47.418518 2026] [:error] [pid 9863:tid 9889] [client 20.215.249.162:4489] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "aeNPCzjjiypiFrTucbK16gAAABA"]
[Sat Apr 18 17:29:47.945735 2026] [:error] [pid 9865:tid 9938] [client 20.215.249.162:4856] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "aeNPC6zb5knECIY-C-hl_wAAAIE"]
[Sat Apr 18 17:29:48.461438 2026] [:error] [pid 9970:tid 9994] [client 20.215.249.162:4913] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeNPDCYdRLRhVmaIMx2QLQAAANQ"]
[Sat Apr 18 17:29:49.040381 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4722] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeNPDYCFeowknfXHM7neoQAAAEU"]
[Sat Apr 18 17:29:49.626151 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:4751] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeNPDYCFeowknfXHM7nepgAAAFM"]
[Sat Apr 18 17:29:50.172760 2026] [:error] [pid 34290:tid 34330] [client 20.215.249.162:4860] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "aeNPDhqX6WpmmAXOBi_rOwAAAcs"]
[Sat Apr 18 17:29:50.710333 2026] [:error] [pid 34290:tid 34321] [client 20.215.249.162:4906] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "aeNPDhqX6WpmmAXOBi_rPgAAAcI"]
[Sat Apr 18 17:29:51.253987 2026] [:error] [pid 34237:tid 34257] [client 20.215.249.162:4794] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "aeNPDxBmX4Wq5a6rxfZgTAAAAVI"]
[Sat Apr 18 17:29:51.825003 2026] [:error] [pid 34290:tid 34323] [client 20.215.249.162:4836] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "aeNPDxqX6WpmmAXOBi_rQwAAAcQ"]
[Sat Apr 18 17:29:52.344991 2026] [:error] [pid 34288:tid 34305] [client 20.215.249.162:4807] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/beerd.php"] [unique_id "aeNPEOTIiy__PtiLmpm_iQAAAY0"]
[Sat Apr 18 17:29:52.887670 2026] [:error] [pid 34288:tid 34298] [client 20.215.249.162:4910] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeNPEOTIiy__PtiLmpm_jQAAAYY"]
[Sat Apr 18 17:29:53.428167 2026] [:error] [pid 9864:tid 9906] [client 20.215.249.162:4889] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeNPEYCFeowknfXHM7netAAAAEE"]
[Sat Apr 18 17:29:53.944909 2026] [:error] [pid 34288:tid 34310] [client 20.215.249.162:4904] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeNPEeTIiy__PtiLmpm_kgAAAZI"]
[Sat Apr 18 17:29:54.459852 2026] [:error] [pid 34290:tid 34331] [client 20.215.249.162:4804] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "aeNPEhqX6WpmmAXOBi_rUAAAAcw"]
[Sat Apr 18 17:29:54.980018 2026] [:error] [pid 9865:tid 9959] [client 20.215.249.162:4895] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpb.php"] [unique_id "aeNPEqzb5knECIY-C-hmAwAAAJY"]
[Sat Apr 18 17:29:55.551779 2026] [:error] [pid 34290:tid 34321] [client 20.215.249.162:4741] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpb.php"] [unique_id "aeNPExqX6WpmmAXOBi_rVgAAAcI"]
[Sat Apr 18 17:29:56.105832 2026] [:error] [pid 9865:tid 9953] [client 20.215.249.162:4567] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpb.php"] [unique_id "aeNPFKzb5knECIY-C-hmBgAAAJA"]
[Sat Apr 18 17:29:56.624404 2026] [:error] [pid 34288:tid 34297] [client 20.215.249.162:4841] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpb.php"] [unique_id "aeNPFOTIiy__PtiLmpm_lAAAAYU"]
[Sat Apr 18 17:29:57.156224 2026] [:error] [pid 9863:tid 9884] [client 20.215.249.162:4675] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oircv.php"] [unique_id "aeNPFTjjiypiFrTucbK17QAAAAs"]
[Sat Apr 18 17:29:57.690077 2026] [:error] [pid 9863:tid 9886] [client 20.215.249.162:4629] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oircv.php"] [unique_id "aeNPFTjjiypiFrTucbK18AAAAA0"]
[Sat Apr 18 17:29:58.207205 2026] [:error] [pid 9863:tid 9896] [client 20.215.249.162:4753] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oircv.php"] [unique_id "aeNPFjjjiypiFrTucbK18gAAABc"]
[Sat Apr 18 17:29:58.736092 2026] [:error] [pid 9863:tid 9892] [client 20.215.249.162:4916] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oircv.php"] [unique_id "aeNPFjjjiypiFrTucbK19QAAABM"]
[Sat Apr 18 17:29:59.252897 2026] [:error] [pid 9863:tid 9876] [client 20.215.249.162:4842] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bfil.php"] [unique_id "aeNPFzjjiypiFrTucbK19gAAAAM"]
[Sat Apr 18 17:29:59.812026 2026] [:error] [pid 9863:tid 9893] [client 20.215.249.162:4832] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bfil.php"] [unique_id "aeNPFzjjiypiFrTucbK19wAAABQ"]
[Sat Apr 18 17:30:00.421920 2026] [:error] [pid 34290:tid 34335] [client 20.215.249.162:4726] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bfil.php"] [unique_id "aeNPGBqX6WpmmAXOBi_raQAAAdA"]
[Sat Apr 18 17:30:01.007385 2026] [:error] [pid 34288:tid 34310] [client 20.215.249.162:4808] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bfil.php"] [unique_id "aeNPGeTIiy__PtiLmpm_nQAAAZI"]
[Sat Apr 18 17:30:01.596477 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:4850] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeNPGRqX6WpmmAXOBi_ragAAAdE"]
[Sat Apr 18 17:30:02.136809 2026] [:error] [pid 34237:tid 34239] [client 20.215.249.162:5107] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeNPGhBmX4Wq5a6rxfZgTQAAAUA"]
[Sat Apr 18 17:30:02.658347 2026] [:error] [pid 9864:tid 9929] [client 20.215.249.162:4644] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeNPGoCFeowknfXHM7nevgAAAFc"]
[Sat Apr 18 17:30:03.183129 2026] [:error] [pid 13023:tid 13049] [client 20.215.249.162:4563] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeNPG_1e7hG8DAeABB_cxAAAARg"]
[Sat Apr 18 17:30:03.734170 2026] [:error] [pid 9970:tid 9975] [client 20.215.249.162:4828] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albrt.php"] [unique_id "aeNPGyYdRLRhVmaIMx2QMwAAAME"]
[Sat Apr 18 17:30:04.283565 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4843] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albrt.php"] [unique_id "aeNPHICFeowknfXHM7newgAAAEU"]
[Sat Apr 18 17:30:04.818553 2026] [:error] [pid 13023:tid 13027] [client 20.215.249.162:4838] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albrt.php"] [unique_id "aeNPHP1e7hG8DAeABB_cxgAAAQI"]
[Sat Apr 18 17:30:05.371747 2026] [:error] [pid 9970:tid 9976] [client 20.215.249.162:4966] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albrt.php"] [unique_id "aeNPHSYdRLRhVmaIMx2QNQAAAMI"]
[Sat Apr 18 17:30:05.903708 2026] [:error] [pid 34290:tid 34324] [client 20.215.249.162:4952] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "aeNPHRqX6WpmmAXOBi_rbwAAAcU"]
[Sat Apr 18 17:30:06.467600 2026] [:error] [pid 34290:tid 34319] [client 20.215.249.162:4917] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "aeNPHhqX6WpmmAXOBi_rcQAAAcA"]
[Sat Apr 18 17:30:07.032699 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:4814] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "aeNPH4CFeowknfXHM7ne0gAAAE8"]
[Sat Apr 18 17:30:07.603165 2026] [:error] [pid 34237:tid 34256] [client 20.215.249.162:4848] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hhxc.php"] [unique_id "aeNPHxBmX4Wq5a6rxfZgUQAAAVE"]
[Sat Apr 18 17:30:08.201151 2026] [:error] [pid 34237:tid 34260] [client 20.215.249.162:4760] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeNPIBBmX4Wq5a6rxfZgUwAAAVU"]
[Sat Apr 18 17:30:08.766756 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:4826] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeNPIICFeowknfXHM7ne3gAAAFY"]
[Sat Apr 18 17:30:09.282804 2026] [:error] [pid 9970:tid 9982] [client 20.215.249.162:4830] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeNPISYdRLRhVmaIMx2QOQAAAMg"]
[Sat Apr 18 17:30:09.801414 2026] [:error] [pid 9970:tid 9981] [client 20.215.249.162:4630] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "aeNPISYdRLRhVmaIMx2QOwAAAMc"]
[Sat Apr 18 17:30:10.328498 2026] [:error] [pid 34288:tid 34314] [client 20.215.249.162:4819] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeNPIuTIiy__PtiLmpm_pgAAAZY"]
[Sat Apr 18 17:30:10.852316 2026] [:error] [pid 34288:tid 34310] [client 20.215.249.162:4847] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeNPIuTIiy__PtiLmpm_pwAAAZI"]
[Sat Apr 18 17:30:11.412910 2026] [:error] [pid 34290:tid 34323] [client 20.215.249.162:5029] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeNPIxqX6WpmmAXOBi_rcwAAAcQ"]
[Sat Apr 18 17:30:11.955041 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:4793] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "aeNPI4CFeowknfXHM7ne5gAAAE8"]
[Sat Apr 18 17:30:12.488339 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:4825] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "aeNPJBqX6WpmmAXOBi_rdQAAAdE"]
[Sat Apr 18 17:30:13.023016 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Sat Apr 18 17:30:13.278919 2026] [:error] [pid 9864:tid 9929] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/HLA-dd.php
[Sat Apr 18 17:30:13.539079 2026] [:error] [pid 9864:tid 9906] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sat Apr 18 17:30:13.794536 2026] [:error] [pid 9864:tid 9916] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/SS72_kKKjT.php
[Sat Apr 18 17:30:14.063170 2026] [:error] [pid 9864:tid 9917] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/Spow_SRw.php
[Sat Apr 18 17:30:14.337820 2026] [:error] [pid 9864:tid 9913] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/blnux.php
[Sat Apr 18 17:30:14.592966 2026] [:error] [pid 9864:tid 9918] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/blqjs.php
[Sat Apr 18 17:30:14.848807 2026] [:error] [pid 9864:tid 9930] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/fyflv.php
[Sat Apr 18 17:30:15.122196 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/iindv.php
[Sat Apr 18 17:30:15.377477 2026] [:error] [pid 9864:tid 9914] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/wkogn.php
[Sat Apr 18 17:30:15.707523 2026] [:error] [pid 9864:tid 9922] [client 20.215.249.162:5014] File does not exist: /usr/local/apache/htdocs/suspended-page/wwdgl.php
[Sat Apr 18 17:30:16.005519 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:5014] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "aeNPKICFeowknfXHM7ne-QAAAFY"]
[Sat Apr 18 17:30:16.557157 2026] [:error] [pid 9864:tid 9925] [client 20.215.249.162:4887] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "aeNPKICFeowknfXHM7nfBwAAAFM"]
[Sat Apr 18 17:30:17.132080 2026] [:error] [pid 9864:tid 9927] [client 20.215.249.162:4862] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "aeNPKYCFeowknfXHM7nfIwAAAFU"]
[Sat Apr 18 17:30:17.729837 2026] [:error] [pid 9864:tid 9917] [client 20.215.249.162:4672] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxeyc.php"] [unique_id "aeNPKYCFeowknfXHM7nfLAAAAEs"]
[Sat Apr 18 17:30:18.329812 2026] [:error] [pid 9864:tid 9926] [client 20.215.249.162:4849] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeNPKoCFeowknfXHM7nfMQAAAFQ"]
[Sat Apr 18 17:30:18.991935 2026] [:error] [pid 9970:tid 9996] [client 20.215.249.162:4795] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeNPKiYdRLRhVmaIMx2QUQAAANY"]
[Sat Apr 18 17:30:19.546463 2026] [:error] [pid 9970:tid 9985] [client 20.215.249.162:4829] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeNPKyYdRLRhVmaIMx2QUgAAAMs"]
[Sat Apr 18 17:30:20.120733 2026] [:error] [pid 9865:tid 9942] [client 20.215.249.162:4851] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxiviLDIot.php"] [unique_id "aeNPLKzb5knECIY-C-hmEAAAAIU"]
[Sat Apr 18 17:30:20.661545 2026] [:error] [pid 34290:tid 34326] [client 20.215.249.162:4763] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeNPLBqX6WpmmAXOBi_rjQAAAcc"]
[Sat Apr 18 17:30:21.191040 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:4677] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeNPLYCFeowknfXHM7nfOAAAAFY"]
[Sat Apr 18 17:30:21.713253 2026] [:error] [pid 34290:tid 34324] [client 20.215.249.162:4924] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeNPLRqX6WpmmAXOBi_rkQAAAcU"]
[Sat Apr 18 17:30:22.232930 2026] [:error] [pid 34290:tid 34338] [client 20.215.249.162:5077] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxivicLhot.php"] [unique_id "aeNPLhqX6WpmmAXOBi_rlAAAAdM"]
[Sat Apr 18 17:30:22.800404 2026] [:error] [pid 13023:tid 13041] [client 20.215.249.162:4736] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3akp.php"] [unique_id "aeNPLv1e7hG8DAeABB_czwAAARA"]
[Sat Apr 18 17:30:23.384765 2026] [:error] [pid 9970:tid 9998] [client 20.215.249.162:4761] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3akp.php"] [unique_id "aeNPLyYdRLRhVmaIMx2QVwAAANg"]
[Sat Apr 18 17:30:23.937726 2026] [:error] [pid 13023:tid 13031] [client 20.215.249.162:5112] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3akp.php"] [unique_id "aeNPL_1e7hG8DAeABB_c0gAAAQY"]
[Sat Apr 18 17:30:24.493337 2026] [:error] [pid 34237:tid 34255] [client 20.215.249.162:4855] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3akp.php"] [unique_id "aeNPMBBmX4Wq5a6rxfZgXQAAAVA"]
[Sat Apr 18 17:30:25.055568 2026] [:error] [pid 9863:tid 9886] [client 20.215.249.162:5008] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sde.php"] [unique_id "aeNPMTjjiypiFrTucbK1_gAAAA0"]
[Sat Apr 18 17:30:25.607137 2026] [:error] [pid 9970:tid 9985] [client 20.215.249.162:4737] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sde.php"] [unique_id "aeNPMSYdRLRhVmaIMx2QWgAAAMs"]
[Sat Apr 18 17:30:26.162355 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:4927] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sde.php"] [unique_id "aeNPMoCFeowknfXHM7nfPQAAAE0"]
[Sat Apr 18 17:30:26.696901 2026] [:error] [pid 9864:tid 9914] [client 20.215.249.162:4758] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sde.php"] [unique_id "aeNPMoCFeowknfXHM7nfQQAAAEg"]
[Sat Apr 18 17:30:27.243294 2026] [:error] [pid 9970:tid 9984] [client 20.215.249.162:4776] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "aeNPMyYdRLRhVmaIMx2QXAAAAMo"]
[Sat Apr 18 17:30:27.787847 2026] [:error] [pid 9864:tid 9930] [client 20.215.249.162:4744] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "aeNPM4CFeowknfXHM7nfRwAAAFg"]
[Sat Apr 18 17:30:28.319196 2026] [:error] [pid 9865:tid 9946] [client 20.215.249.162:5009] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "aeNPNKzb5knECIY-C-hmFwAAAIk"]
[Sat Apr 18 17:30:28.859030 2026] [:error] [pid 9865:tid 9943] [client 20.215.249.162:5035] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cdn3.php"] [unique_id "aeNPNKzb5knECIY-C-hmGQAAAIY"]
[Sat Apr 18 17:30:29.379912 2026] [:error] [pid 9970:tid 9997] [client 20.215.249.162:4812] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeNPNSYdRLRhVmaIMx2QYAAAANc"]
[Sat Apr 18 17:30:29.963838 2026] [:error] [pid 9970:tid 9995] [client 20.215.249.162:4782] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeNPNSYdRLRhVmaIMx2QYgAAANU"]
[Sat Apr 18 17:30:30.500675 2026] [:error] [pid 9863:tid 9894] [client 20.215.249.162:5115] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeNPNjjjiypiFrTucbK1_wAAABU"]
[Sat Apr 18 17:30:31.032369 2026] [:error] [pid 9970:tid 9994] [client 20.215.249.162:5088] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "aeNPNyYdRLRhVmaIMx2QZgAAANQ"]
[Sat Apr 18 17:30:31.573330 2026] [:error] [pid 34288:tid 34299] [client 20.215.249.162:5060] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "aeNPN-TIiy__PtiLmpm_sAAAAYc"]
[Sat Apr 18 17:30:32.106474 2026] [:error] [pid 34288:tid 34314] [client 20.215.249.162:5000] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "aeNPOOTIiy__PtiLmpm_sQAAAZY"]
[Sat Apr 18 17:30:32.626098 2026] [:error] [pid 13023:tid 13025] [client 20.215.249.162:4718] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "aeNPOP1e7hG8DAeABB_c2QAAAQA"]
[Sat Apr 18 17:30:33.160508 2026] [:error] [pid 9970:tid 9985] [client 20.215.249.162:5096] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-220.php"] [unique_id "aeNPOSYdRLRhVmaIMx2QaAAAAMs"]
[Sat Apr 18 17:30:33.705356 2026] [:error] [pid 34237:tid 34240] [client 20.215.249.162:4774] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeNPORBmX4Wq5a6rxfZgYwAAAUE"]
[Sat Apr 18 17:30:34.268827 2026] [:error] [pid 9864:tid 9913] [client 20.215.249.162:4769] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeNPOoCFeowknfXHM7nfUgAAAEc"]
[Sat Apr 18 17:30:34.851013 2026] [:error] [pid 34237:tid 34263] [client 20.215.249.162:5069] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeNPOhBmX4Wq5a6rxfZgZgAAAVg"]
[Sat Apr 18 17:30:35.417289 2026] [:error] [pid 9864:tid 9918] [client 20.215.249.162:4853] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeNPO4CFeowknfXHM7nfVgAAAEw"]
[Sat Apr 18 17:30:35.952280 2026] [:error] [pid 9863:tid 9892] [client 20.215.249.162:4882] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uazsl.php"] [unique_id "aeNPOzjjiypiFrTucbK2AwAAABM"]
[Sat Apr 18 17:30:36.488107 2026] [:error] [pid 34290:tid 34334] [client 20.215.249.162:4703] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uazsl.php"] [unique_id "aeNPPBqX6WpmmAXOBi_rxQAAAc8"]
[Sat Apr 18 17:30:37.045330 2026] [:error] [pid 9970:tid 9974] [client 20.215.249.162:4619] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uazsl.php"] [unique_id "aeNPPSYdRLRhVmaIMx2QawAAAMA"]
[Sat Apr 18 17:30:37.589909 2026] [:error] [pid 9864:tid 9924] [client 20.215.249.162:4743] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uazsl.php"] [unique_id "aeNPPYCFeowknfXHM7nfXgAAAFI"]
[Sat Apr 18 17:30:38.138282 2026] [:error] [pid 34237:tid 34256] [client 20.215.249.162:5082] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aeNPPhBmX4Wq5a6rxfZgaQAAAVE"]
[Sat Apr 18 17:30:38.673550 2026] [:error] [pid 34290:tid 34319] [client 20.215.249.162:4557] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aeNPPhqX6WpmmAXOBi_r0QAAAcA"]
[Sat Apr 18 17:30:39.204345 2026] [:error] [pid 34237:tid 34261] [client 20.215.249.162:5091] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aeNPPxBmX4Wq5a6rxfZgagAAAVY"]
[Sat Apr 18 17:30:39.747316 2026] [:error] [pid 9864:tid 9927] [client 20.215.249.162:5106] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aeNPP4CFeowknfXHM7nfaAAAAFU"]
[Sat Apr 18 17:30:40.327689 2026] [:error] [pid 34237:tid 34262] [client 20.215.249.162:4746] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-denmono.php"] [unique_id "aeNPQBBmX4Wq5a6rxfZgbgAAAVc"]
[Sat Apr 18 17:30:40.869202 2026] [:error] [pid 9865:tid 9943] [client 20.215.249.162:4767] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-denmono.php"] [unique_id "aeNPQKzb5knECIY-C-hmJQAAAIY"]
[Sat Apr 18 17:30:41.451484 2026] [:error] [pid 34290:tid 34335] [client 20.215.249.162:4756] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-denmono.php"] [unique_id "aeNPQRqX6WpmmAXOBi_r4AAAAdA"]
[Sat Apr 18 17:30:42.022287 2026] [:error] [pid 34290:tid 34322] [client 20.215.249.162:5101] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-denmono.php"] [unique_id "aeNPQhqX6WpmmAXOBi_r4gAAAcM"]
[Sat Apr 18 17:30:42.609464 2026] [:error] [pid 34237:tid 34249] [client 20.215.249.162:5025] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeNPQhBmX4Wq5a6rxfZgcQAAAUo"]
[Sat Apr 18 17:30:43.151493 2026] [:error] [pid 9970:tid 9995] [client 20.215.249.162:4775] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeNPQyYdRLRhVmaIMx2QbQAAANU"]
[Sat Apr 18 17:30:43.708631 2026] [:error] [pid 34237:tid 34263] [client 20.215.249.162:4484] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeNPQxBmX4Wq5a6rxfZgdgAAAVg"]
[Sat Apr 18 17:30:44.269082 2026] [:error] [pid 9864:tid 9926] [client 20.215.249.162:5033] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aeNPRICFeowknfXHM7nfbwAAAFQ"]
[Sat Apr 18 17:30:44.805720 2026] [:error] [pid 9864:tid 9920] [client 20.215.249.162:4698] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypltspd.php"] [unique_id "aeNPRICFeowknfXHM7nfcgAAAE4"]
[Sat Apr 18 17:30:45.344422 2026] [:error] [pid 34290:tid 34332] [client 20.215.249.162:4696] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypltspd.php"] [unique_id "aeNPRRqX6WpmmAXOBi_r7wAAAc0"]
[Sat Apr 18 17:30:45.918417 2026] [:error] [pid 13023:tid 13040] [client 20.215.249.162:4777] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypltspd.php"] [unique_id "aeNPRf1e7hG8DAeABB_c3wAAAQ8"]
[Sat Apr 18 17:30:46.499202 2026] [:error] [pid 9863:tid 9882] [client 20.215.249.162:5010] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bypltspd.php"] [unique_id "aeNPRjjjiypiFrTucbK2BQAAAAk"]
[Sat Apr 18 17:30:47.010163 2026] [:error] [pid 34288:tid 34295] [client 20.215.249.162:4647] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yee.php"] [unique_id "aeNPR-TIiy__PtiLmpm_twAAAYM"]
[Sat Apr 18 17:30:47.557841 2026] [:error] [pid 9865:tid 9959] [client 20.215.249.162:4754] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yee.php"] [unique_id "aeNPR6zb5knECIY-C-hmKQAAAJY"]
[Sat Apr 18 17:30:48.098333 2026] [:error] [pid 9864:tid 9916] [client 20.215.249.162:4765] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yee.php"] [unique_id "aeNPSICFeowknfXHM7nfewAAAEo"]
[Sat Apr 18 17:30:48.614437 2026] [:error] [pid 13023:tid 13037] [client 20.215.249.162:4812] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yee.php"] [unique_id "aeNPSP1e7hG8DAeABB_c4gAAAQw"]
[Sat Apr 18 17:30:49.125361 2026] [:error] [pid 34290:tid 34322] [client 20.215.249.162:4787] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aeNPSRqX6WpmmAXOBi_r_wAAAcM"]
[Sat Apr 18 17:30:49.636421 2026] [:error] [pid 34290:tid 34336] [client 20.215.249.162:5012] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aeNPSRqX6WpmmAXOBi_sAwAAAdE"]
[Sat Apr 18 17:30:50.152093 2026] [:error] [pid 34290:tid 34337] [client 20.215.249.162:4680] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aeNPShqX6WpmmAXOBi_sBgAAAdI"]
[Sat Apr 18 17:30:50.669691 2026] [:error] [pid 9864:tid 9920] [client 20.215.249.162:5023] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aeNPSoCFeowknfXHM7nfgAAAAE4"]
[Sat Apr 18 17:30:51.176561 2026] [:error] [pid 9864:tid 9919] [client 20.215.249.162:4755] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aeNPS4CFeowknfXHM7nfgwAAAE0"]
[Sat Apr 18 17:30:51.698457 2026] [:error] [pid 34290:tid 34328] [client 20.215.249.162:4839] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aeNPSxqX6WpmmAXOBi_sDwAAAck"]
[Sat Apr 18 17:30:52.211161 2026] [:error] [pid 9970:tid 9985] [client 20.215.249.162:5013] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aeNPTCYdRLRhVmaIMx2QdwAAAMs"]
[Sat Apr 18 17:30:52.751753 2026] [:error] [pid 34237:tid 34254] [client 20.215.249.162:4837] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aeNPTBBmX4Wq5a6rxfZgfAAAAU8"]
[Sat Apr 18 17:30:53.288262 2026] [:error] [pid 34290:tid 34337] [client 20.215.249.162:4835] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "aeNPTRqX6WpmmAXOBi_sGgAAAdI"]
[Sat Apr 18 17:30:53.815263 2026] [:error] [pid 34290:tid 34319] [client 20.215.249.162:4750] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "aeNPTRqX6WpmmAXOBi_sHgAAAcA"]
[Sat Apr 18 17:30:54.325362 2026] [:error] [pid 34290:tid 34341] [client 20.215.249.162:5065] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "aeNPThqX6WpmmAXOBi_sIAAAAdY"]
[Sat Apr 18 17:30:54.848950 2026] [:error] [pid 9970:tid 9993] [client 20.215.249.162:5062] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wglum1.php"] [unique_id "aeNPTiYdRLRhVmaIMx2QeQAAANM"]
[Sat Apr 18 17:30:55.383685 2026] [:error] [pid 9864:tid 9908] [client 20.215.249.162:5011] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeNPT4CFeowknfXHM7nflAAAAEM"]
[Sat Apr 18 17:30:55.923026 2026] [:error] [pid 9864:tid 9921] [client 20.215.249.162:4692] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeNPT4CFeowknfXHM7nfmQAAAE8"]
[Sat Apr 18 17:30:56.436561 2026] [:error] [pid 9864:tid 9920] [client 20.215.249.162:4773] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeNPUICFeowknfXHM7nfngAAAE4"]
[Sat Apr 18 17:30:56.953824 2026] [:error] [pid 9864:tid 9928] [client 20.215.249.162:4995] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aeNPUICFeowknfXHM7nfowAAAFY"]
[Sat Apr 18 17:30:57.470297 2026] [:error] [pid 13023:tid 13042] [client 20.215.249.162:4901] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aeNPUf1e7hG8DAeABB_c4wAAARE"]
[Sat Apr 18 17:30:57.988217 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4705] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aeNPURBmX4Wq5a6rxfZggQAAAUQ"]
[Sat Apr 18 17:30:58.516664 2026] [:error] [pid 9865:tid 9939] [client 20.215.249.162:4643] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aeNPUqzb5knECIY-C-hmKgAAAII"]
[Sat Apr 18 17:30:59.076036 2026] [:error] [pid 9970:tid 9988] [client 20.215.249.162:4715] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aeNPUyYdRLRhVmaIMx2QfAAAAM4"]
[Sat Apr 18 17:30:59.648021 2026] [:error] [pid 9865:tid 9944] [client 20.215.249.162:4742] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oco.php"] [unique_id "aeNPU6zb5knECIY-C-hmLQAAAIc"]
[Sat Apr 18 17:31:00.193840 2026] [:error] [pid 34288:tid 34293] [client 20.215.249.162:4764] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oco.php"] [unique_id "aeNPVOTIiy__PtiLmpm_ugAAAYE"]
[Sat Apr 18 17:31:00.705068 2026] [:error] [pid 9865:tid 9958] [client 20.215.249.162:5070] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oco.php"] [unique_id "aeNPVKzb5knECIY-C-hmMgAAAJU"]
[Sat Apr 18 17:31:01.221651 2026] [:error] [pid 9864:tid 9930] [client 20.215.249.162:4993] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oco.php"] [unique_id "aeNPVYCFeowknfXHM7nftwAAAFg"]
[Sat Apr 18 17:31:01.765550 2026] [:error] [pid 9864:tid 9929] [client 20.215.249.162:4740] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogr.php"] [unique_id "aeNPVYCFeowknfXHM7nfugAAAFc"]
[Sat Apr 18 17:31:02.304005 2026] [:error] [pid 13023:tid 13038] [client 20.215.249.162:5015] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogr.php"] [unique_id "aeNPVv1e7hG8DAeABB_c5wAAAQ0"]
[Sat Apr 18 17:31:02.856761 2026] [:error] [pid 9864:tid 9914] [client 20.215.249.162:5021] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogr.php"] [unique_id "aeNPVoCFeowknfXHM7nfwgAAAEg"]
[Sat Apr 18 17:31:03.428219 2026] [:error] [pid 9970:tid 9996] [client 20.215.249.162:4673] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ogr.php"] [unique_id "aeNPVyYdRLRhVmaIMx2QgQAAANY"]
[Sat Apr 18 17:31:03.994175 2026] [:error] [pid 34237:tid 34258] [client 20.215.249.162:4823] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oti.php"] [unique_id "aeNPVxBmX4Wq5a6rxfZghwAAAVM"]
[Sat Apr 18 17:31:04.531955 2026] [:error] [pid 34237:tid 34240] [client 20.215.249.162:4586] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oti.php"] [unique_id "aeNPWBBmX4Wq5a6rxfZgiQAAAUE"]
[Sat Apr 18 17:31:05.071931 2026] [:error] [pid 34237:tid 34255] [client 20.215.249.162:5001] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oti.php"] [unique_id "aeNPWRBmX4Wq5a6rxfZgjAAAAVA"]
[Sat Apr 18 17:31:05.650653 2026] [:error] [pid 34237:tid 34243] [client 20.215.249.162:4689] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oti.php"] [unique_id "aeNPWRBmX4Wq5a6rxfZgjgAAAUQ"]
[Sat Apr 18 17:31:06.190189 2026] [:error] [pid 34237:tid 34261] [client 20.215.249.162:5056] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-124.php"] [unique_id "aeNPWhBmX4Wq5a6rxfZgkAAAAVY"]
[Sat Apr 18 17:31:06.742091 2026] [:error] [pid 34237:tid 34245] [client 20.215.249.162:4681] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-124.php"] [unique_id "aeNPWhBmX4Wq5a6rxfZglAAAAUY"]
[Sat Apr 18 17:31:07.284631 2026] [:error] [pid 34237:tid 34252] [client 20.215.249.162:5080] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-124.php"] [unique_id "aeNPWxBmX4Wq5a6rxfZgmAAAAU0"]
[Sat Apr 18 17:31:07.859845 2026] [:error] [pid 34237:tid 34253] [client 20.215.249.162:4745] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zc-124.php"] [unique_id "aeNPWxBmX4Wq5a6rxfZgnAAAAU4"]
[Sat Apr 18 17:31:08.395544 2026] [:error] [pid 34237:tid 34246] [client 20.215.249.162:5092] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpls.php"] [unique_id "aeNPXBBmX4Wq5a6rxfZgoAAAAUc"]
[Sat Apr 18 17:31:08.969248 2026] [:error] [pid 34237:tid 34244] [client 20.215.249.162:4931] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpls.php"] [unique_id "aeNPXBBmX4Wq5a6rxfZgpgAAAUU"]
[Sat Apr 18 17:31:09.506870 2026] [:error] [pid 34290:tid 34319] [client 20.215.249.162:5111] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpls.php"] [unique_id "aeNPXRqX6WpmmAXOBi_sIwAAAcA"]
[Sat Apr 18 17:31:10.054680 2026] [:error] [pid 9865:tid 9939] [client 20.215.249.162:4798] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpls.php"] [unique_id "aeNPXqzb5knECIY-C-hmNgAAAII"]
[Sat Apr 18 17:31:10.568865 2026] [:error] [pid 13023:tid 13029] [client 20.215.249.162:5078] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "aeNPXv1e7hG8DAeABB_c6AAAAQQ"]
[Sat Apr 18 17:31:11.090874 2026] [:error] [pid 13023:tid 13043] [client 20.215.249.162:4852] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "aeNPX_1e7hG8DAeABB_c6wAAARI"]
[Sat Apr 18 17:31:11.627816 2026] [:error] [pid 13023:tid 13047] [client 20.215.249.162:4622] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "aeNPX_1e7hG8DAeABB_c7QAAARY"]
[Sat Apr 18 17:31:12.163883 2026] [:error] [pid 9863:tid 9897] [client 20.215.249.162:5038] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "aeNPYDjjiypiFrTucbK2CQAAABg"]
[Sat Apr 18 17:31:12.679405 2026] [:error] [pid 34290:tid 34330] [client 20.215.249.162:4799] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeNPYBqX6WpmmAXOBi_sJQAAAcs"]
[Sat Apr 18 17:31:13.220900 2026] [:error] [pid 9864:tid 9910] [client 20.215.249.162:4686] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeNPYYCFeowknfXHM7nf8QAAAEU"]
[Sat Apr 18 17:31:13.756097 2026] [:error] [pid 9970:tid 9983] [client 20.215.249.162:4859] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeNPYSYdRLRhVmaIMx2QiQAAAMk"]
[Sat Apr 18 17:31:14.323898 2026] [:error] [pid 9863:tid 9886] [client 20.215.249.162:4771] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeNPYjjjiypiFrTucbK2CgAAAA0"]
[Sat Apr 18 17:31:14.861083 2026] [:error] [pid 34288:tid 34310] [client 20.215.249.162:4840] [client 20.215.249.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fss.php"] [unique_id "aeNPYuTIiy__PtiLmpm_vAAAAZI"]
[Sat Apr 18 17:31:15.374143 2026] [:error] [pid 9865:tid 9937] [client 20.215.249.162:4894] File does not exist: /usr/local/apache/htdocs/suspended-page/fss.php
[Sat Apr 18 17:31:15.631500 2026] [:error] [pid 9865:tid 9947] [client 20.215.249.162:4894] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Sat Apr 18 17:31:15.905776 2026] [:error] [pid 9865:tid 9950] [client 20.215.249.162:4894] File does not exist: /usr/local/apache/htdocs/suspended-page/011i.php
[Sat Apr 18 17:31:16.163264 2026] [:error] [pid 9865:tid 9954] [client 20.215.249.162:4894] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Sat Apr 18 17:31:16.423147 2026] [:error] [pid 9865:tid 9953] [client 20.215.249.162:4894] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Sat Apr 18 17:31:16.680665 2026] [:error] [pid 9865:tid 9941] [client 20.215.249.162:4894] File does not exist: /usr/local/apache/htdocs/suspended-page/fssxwoyh.php
[Sat Apr 18 17:31:16.944710 2026] [:error] [pid 9865:tid 9940] [client 20.215.249.162:4894] File does not exist: /usr/local/apache/htdocs/suspended-page/wcvejtpr.php
[Sat Apr 18 17:31:17.212585 2026] [:error] [pid 9865:tid 9942] [client 20.215.249.162:4894] File does not exist: /usr/local/apache/htdocs/suspended-page/home.php
[Sat Apr 18 18:18:05.106700 2026] [:error] [pid 34237:tid 34252] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Sat Apr 18 18:18:05.382087 2026] [:error] [pid 34237:tid 34249] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Sat Apr 18 18:18:05.650925 2026] [:error] [pid 34237:tid 34246] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Sat Apr 18 18:18:07.235141 2026] [:error] [pid 34237:tid 34246] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Sat Apr 18 18:18:07.502817 2026] [:error] [pid 34237:tid 34241] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sat Apr 18 18:18:07.771725 2026] [:error] [pid 34237:tid 34262] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Sat Apr 18 18:18:08.038563 2026] [:error] [pid 34237:tid 34250] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 18 18:18:08.304724 2026] [:error] [pid 34237:tid 34254] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Sat Apr 18 18:18:08.841830 2026] [:error] [pid 34237:tid 34251] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Sat Apr 18 18:18:09.118110 2026] [:error] [pid 34237:tid 34252] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Sat Apr 18 18:18:09.386131 2026] [:error] [pid 34237:tid 34240] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 18 18:18:09.661938 2026] [:error] [pid 34237:tid 34248] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Apr 18 18:18:09.928600 2026] [:error] [pid 34237:tid 34250] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Apr 18 18:18:10.193808 2026] [:error] [pid 34237:tid 34247] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Sat Apr 18 18:18:11.770767 2026] [:error] [pid 34237:tid 34247] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Sat Apr 18 18:18:12.037938 2026] [:error] [pid 34237:tid 34246] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 18 18:18:12.309250 2026] [:error] [pid 34237:tid 34254] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Apr 18 18:18:12.576212 2026] [:error] [pid 34237:tid 34263] [client 45.133.183.236:60898] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Apr 18 18:18:16.321288 2026] [:error] [pid 34237:tid 34250] [client 45.133.183.236:60898] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeNaaBBmX4Wq5a6rxfZySgAAAUs"]
[Sat Apr 18 18:18:17.656034 2026] [:error] [pid 9970:tid 9992] [client 45.133.183.236:7437] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeNaaSYdRLRhVmaIMx2ekgAAANI"]
[Sat Apr 18 18:18:19.010620 2026] [:error] [pid 34237:tid 34246] [client 45.133.183.236:51116] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat Apr 18 18:18:19.823623 2026] [:error] [pid 34237:tid 34245] [client 45.133.183.236:51116] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeNaaxBmX4Wq5a6rxfZyXAAAAUY"]
[Sat Apr 18 18:18:21.040411 2026] [:error] [pid 34290:tid 34334] [client 45.133.183.236:14915] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat Apr 18 18:18:21.316557 2026] [:error] [pid 34290:tid 34330] [client 45.133.183.236:14915] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeNabRqX6WpmmAXOBi_7HwAAAcs"]
[Sat Apr 18 18:18:22.120575 2026] [:error] [pid 34288:tid 34293] [client 45.133.183.236:51144] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Sat Apr 18 18:18:23.470196 2026] [:error] [pid 34288:tid 34305] [client 45.133.183.236:51144] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeNab-TIiy__PtiLmpnFtwAAAY0"]
[Sat Apr 18 18:18:24.264287 2026] [:error] [pid 34288:tid 34301] [client 45.133.183.236:12617] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeNacOTIiy__PtiLmpnFugAAAYk"]
[Sat Apr 18 18:18:24.795125 2026] [:error] [pid 34288:tid 34294] [client 45.133.183.236:42290] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeNacOTIiy__PtiLmpnFvAAAAYI"]
[Sat Apr 18 18:18:25.327511 2026] [:error] [pid 34237:tid 34245] [client 45.133.183.236:42294] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aeNacRBmX4Wq5a6rxfZyagAAAUY"]
[Sat Apr 18 18:18:25.864118 2026] [:error] [pid 34237:tid 34242] [client 45.133.183.236:42308] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aeNacRBmX4Wq5a6rxfZybAAAAUM"]
[Sat Apr 18 18:18:26.402315 2026] [:error] [pid 9864:tid 9915] [client 45.133.183.236:42312] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aeNacoCFeowknfXHM7nwzAAAAEk"]
[Sat Apr 18 18:18:27.221407 2026] [:error] [pid 9863:tid 9897] [client 45.133.183.236:42316] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aeNaczjjiypiFrTucbK9VAAAABg"]
[Sat Apr 18 18:18:27.752303 2026] [:error] [pid 13023:tid 13036] [client 45.133.183.236:42330] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Sat Apr 18 18:18:28.280092 2026] [:error] [pid 13023:tid 13041] [client 45.133.183.236:42330] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "aeNadP1e7hG8DAeABB_rywAAARA"]
[Sat Apr 18 18:18:29.356648 2026] [:error] [pid 9864:tid 9920] [client 45.133.183.236:42332] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aeNadYCFeowknfXHM7nw1gAAAE4"]
[Sat Apr 18 18:18:30.177298 2026] [:error] [pid 34290:tid 34340] [client 45.133.183.236:42346] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aeNadhqX6WpmmAXOBi_7JAAAAdU"]
[Sat Apr 18 18:18:30.718467 2026] [:error] [pid 34237:tid 34254] [client 45.133.183.236:42348] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Sat Apr 18 18:18:30.986901 2026] [:error] [pid 34237:tid 34243] [client 45.133.183.236:42348] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aeNadhBmX4Wq5a6rxfZyeAAAAUQ"]
[Sat Apr 18 18:18:31.524395 2026] [:error] [pid 9863:tid 9879] [client 45.133.183.236:11161] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Sat Apr 18 18:18:32.336957 2026] [:error] [pid 9863:tid 9876] [client 45.133.183.236:11161] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Apr 18 18:18:33.145571 2026] [:error] [pid 9863:tid 9890] [client 45.133.183.236:11161] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aeNaeTjjiypiFrTucbK9XQAAABE"]
[Sat Apr 18 18:18:33.678355 2026] [:error] [pid 34237:tid 34259] [client 45.133.183.236:42362] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Sat Apr 18 18:18:33.943149 2026] [:error] [pid 34237:tid 34248] [client 45.133.183.236:42362] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aeNaeRBmX4Wq5a6rxfZyiAAAAUk"]
[Sat Apr 18 18:18:34.476791 2026] [:error] [pid 9863:tid 9891] [client 45.133.183.236:57830] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sat Apr 18 18:18:35.014986 2026] [:error] [pid 9863:tid 9889] [client 45.133.183.236:57830] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aeNaezjjiypiFrTucbK9YAAAABA"]
[Sat Apr 18 18:18:35.825252 2026] [:error] [pid 34237:tid 34244] [client 45.133.183.236:57844] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aeNaexBmX4Wq5a6rxfZykQAAAUU"]
[Sat Apr 18 18:18:36.636991 2026] [:error] [pid 9864:tid 9922] [client 45.133.183.236:57860] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Sat Apr 18 18:18:36.906767 2026] [:error] [pid 9864:tid 9906] [client 45.133.183.236:57860] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Sat Apr 18 18:18:37.446674 2026] [:error] [pid 9864:tid 9913] [client 45.133.183.236:57860] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aeNafYCFeowknfXHM7nw4wAAAEc"]
[Sat Apr 18 18:18:38.258871 2026] [:error] [pid 34237:tid 34247] [client 45.133.183.236:57868] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aeNafhBmX4Wq5a6rxfZyoAAAAUg"]
[Sat Apr 18 18:18:39.068790 2026] [:error] [pid 34288:tid 34304] [client 45.133.183.236:57870] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aeNaf-TIiy__PtiLmpnFxQAAAYw"]
[Sat Apr 18 18:18:39.598791 2026] [:error] [pid 34237:tid 34258] [client 45.133.183.236:57880] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aeNafxBmX4Wq5a6rxfZypwAAAVM"]
[Sat Apr 18 18:18:40.136711 2026] [:error] [pid 34288:tid 34307] [client 45.133.183.236:57894] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aeNagOTIiy__PtiLmpnFxwAAAY8"]
[Sat Apr 18 18:18:41.232928 2026] [:error] [pid 9863:tid 9893] [client 45.133.183.236:57902] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Sat Apr 18 18:18:41.503730 2026] [:error] [pid 9863:tid 9891] [client 45.133.183.236:57902] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aeNagTjjiypiFrTucbK9bwAAABI"]
[Sat Apr 18 18:18:42.040683 2026] [:error] [pid 9970:tid 9981] [client 45.133.183.236:57906] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aeNagiYdRLRhVmaIMx2eowAAAMc"]
[Sat Apr 18 18:18:42.574817 2026] [:error] [pid 34288:tid 34297] [client 45.133.183.236:57912] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aeNaguTIiy__PtiLmpnFyAAAAYU"]
[Sat Apr 18 18:18:43.660712 2026] [:error] [pid 9864:tid 9915] [client 45.133.183.236:57922] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Sat Apr 18 18:18:44.204336 2026] [:error] [pid 9864:tid 9907] [client 45.133.183.236:57922] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat Apr 18 18:18:45.309144 2026] [:error] [pid 9864:tid 9916] [client 45.133.183.236:57922] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aeNahYCFeowknfXHM7nxDwAAAEo"]
[Sat Apr 18 18:18:46.673010 2026] [:error] [pid 13023:tid 13025] [client 45.133.183.236:48606] [client 45.133.183.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.183.236, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aeNahv1e7hG8DAeABB_r7QAAAQA"]
[Sat Apr 18 18:18:46.951929 2026] [:error] [pid 13023:tid 13042] [client 45.133.183.236:48606] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat Apr 18 18:18:48.322633 2026] [:error] [pid 13023:tid 13033] [client 45.133.183.236:48606] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Sat Apr 18 18:18:48.595402 2026] [:error] [pid 13023:tid 13048] [client 45.133.183.236:48606] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Sat Apr 18 18:18:49.974296 2026] [:error] [pid 13023:tid 13044] [client 45.133.183.236:48606] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aeNaif1e7hG8DAeABB_r_AAAARM"]
[Sat Apr 18 18:18:50.775990 2026] [:error] [pid 34290:tid 34332] [client 45.133.183.236:48612] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Sat Apr 18 18:18:51.040941 2026] [:error] [pid 34290:tid 34333] [client 45.133.183.236:48612] [client 45.133.183.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.183.236, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aeNaixqX6WpmmAXOBi_7YgAAAc4"]
[Sat Apr 18 18:18:51.574673 2026] [:error] [pid 34290:tid 34334] [client 45.133.183.236:48612] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/item.php"] [unique_id "aeNaixqX6WpmmAXOBi_7ZQAAAc8"]
[Sat Apr 18 18:18:53.212431 2026] [:error] [pid 34237:tid 34260] [client 45.133.183.236:48626] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Apr 18 18:18:53.758847 2026] [:error] [pid 34237:tid 34259] [client 45.133.183.236:48626] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Sat Apr 18 18:18:54.303701 2026] [:error] [pid 34237:tid 34249] [client 45.133.183.236:48626] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aeNajhBmX4Wq5a6rxfZy0AAAAUo"]
[Sat Apr 18 18:18:54.839670 2026] [:error] [pid 9865:tid 9956] [client 45.133.183.236:9353] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Apr 18 18:18:55.645884 2026] [:error] [pid 9865:tid 9953] [client 45.133.183.236:9353] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Sat Apr 18 18:18:56.184660 2026] [:error] [pid 9865:tid 9941] [client 45.133.183.236:9353] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Apr 18 18:18:56.725996 2026] [:error] [pid 9865:tid 9948] [client 45.133.183.236:9353] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Sat Apr 18 18:18:56.993421 2026] [:error] [pid 9865:tid 9951] [client 45.133.183.236:9353] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aeNakKzb5knECIY-C-hv4QAAAI4"]
[Sat Apr 18 18:18:57.529443 2026] [:error] [pid 34237:tid 34242] [client 45.133.183.236:54734] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Apr 18 18:18:57.800073 2026] [:error] [pid 34237:tid 34254] [client 45.133.183.236:54734] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Sat Apr 18 18:18:58.066458 2026] [:error] [pid 34237:tid 34256] [client 45.133.183.236:54734] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aeNakhBmX4Wq5a6rxfZy4wAAAVE"]
[Sat Apr 18 18:18:58.877832 2026] [:error] [pid 9864:tid 9920] [client 45.133.183.236:54750] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Sat Apr 18 18:18:59.419811 2026] [:error] [pid 9864:tid 9906] [client 45.133.183.236:54750] [client 45.133.183.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.183.236, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aeNak4CFeowknfXHM7nxUgAAAEE"]
[Sat Apr 18 18:18:59.692698 2026] [:error] [pid 9864:tid 9913] [client 45.133.183.236:54750] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aeNak4CFeowknfXHM7nxVQAAAEc"]
[Sat Apr 18 18:19:02.921109 2026] [:error] [pid 9864:tid 9926] [client 45.133.183.236:54756] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Sat Apr 18 18:19:04.536566 2026] [:error] [pid 9864:tid 9923] [client 45.133.183.236:54756] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sat Apr 18 18:19:04.801724 2026] [:error] [pid 9864:tid 9907] [client 45.133.183.236:54756] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aeNamICFeowknfXHM7nxewAAAEI"]
[Sat Apr 18 18:19:05.340936 2026] [:error] [pid 9863:tid 9891] [client 45.133.183.236:42310] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Sat Apr 18 18:19:06.155138 2026] [:error] [pid 9863:tid 9877] [client 45.133.183.236:42310] [client 45.133.183.236] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.183.236, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aeNamjjjiypiFrTucbK9gQAAAAQ"]
[Sat Apr 18 18:19:06.430460 2026] [:error] [pid 9863:tid 9883] [client 45.133.183.236:42310] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Sat Apr 18 18:19:06.703017 2026] [:error] [pid 9863:tid 9886] [client 45.133.183.236:42310] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Sat Apr 18 18:19:06.976593 2026] [:error] [pid 9863:tid 9879] [client 45.133.183.236:42310] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Sat Apr 18 18:19:07.244793 2026] [:error] [pid 9863:tid 9874] [client 45.133.183.236:42310] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aeNamzjjiypiFrTucbK9hQAAAAE"]
[Sat Apr 18 18:19:07.777641 2026] [:error] [pid 34237:tid 34261] [client 45.133.183.236:42326] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Sat Apr 18 18:19:08.040821 2026] [:error] [pid 34237:tid 34239] [client 45.133.183.236:42326] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aeNanBBmX4Wq5a6rxfZy8gAAAUA"]
[Sat Apr 18 18:19:08.849837 2026] [:error] [pid 34237:tid 34248] [client 45.133.183.236:42336] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sat Apr 18 18:19:09.117012 2026] [:error] [pid 34237:tid 34241] [client 45.133.183.236:42336] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aeNanRBmX4Wq5a6rxfZy-AAAAUI"]
[Sat Apr 18 18:19:10.210792 2026] [:error] [pid 9970:tid 9990] [client 45.133.183.236:42346] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Sat Apr 18 18:19:10.479373 2026] [:error] [pid 9970:tid 9977] [client 45.133.183.236:42346] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aeNaniYdRLRhVmaIMx2eugAAAMM"]
[Sat Apr 18 18:19:11.008101 2026] [:error] [pid 34237:tid 34250] [client 45.133.183.236:42356] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aeNanxBmX4Wq5a6rxfZzAwAAAUs"]
[Sat Apr 18 18:19:11.549543 2026] [:error] [pid 9864:tid 9930] [client 45.133.183.236:42366] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Sat Apr 18 18:19:11.819362 2026] [:error] [pid 9864:tid 9910] [client 45.133.183.236:42366] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Sat Apr 18 18:19:12.896905 2026] [:error] [pid 9864:tid 9924] [client 45.133.183.236:42366] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aeNaoICFeowknfXHM7nxqQAAAFI"]
[Sat Apr 18 18:19:13.708017 2026] [:error] [pid 34290:tid 34328] [client 45.133.183.236:42382] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aeNaoRqX6WpmmAXOBi_7dgAAAck"]
[Sat Apr 18 18:19:15.055600 2026] [:error] [pid 13023:tid 13031] [client 45.133.183.236:49996] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aeNao_1e7hG8DAeABB_sDwAAAQY"]
[Sat Apr 18 18:19:15.595172 2026] [:error] [pid 9865:tid 9961] [client 45.133.183.236:50010] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Sat Apr 18 18:19:16.135307 2026] [:error] [pid 9865:tid 9953] [client 45.133.183.236:50010] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Apr 18 18:19:16.402093 2026] [:error] [pid 9865:tid 9941] [client 45.133.183.236:50010] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aeNapKzb5knECIY-C-hwBgAAAIQ"]
[Sat Apr 18 18:19:16.940049 2026] [:error] [pid 9864:tid 9922] [client 45.133.183.236:50012] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Sat Apr 18 18:19:17.479609 2026] [:error] [pid 9864:tid 9929] [client 45.133.183.236:50012] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/click.php"] [unique_id "aeNapYCFeowknfXHM7nxugAAAFc"]
[Sat Apr 18 18:19:20.599059 2026] [:error] [pid 9863:tid 9890] [client 45.133.183.236:50024] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aeNaqDjjiypiFrTucbK9jQAAABE"]
[Sat Apr 18 18:19:21.407228 2026] [:error] [pid 9970:tid 9979] [client 45.133.183.236:50036] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Apr 18 18:19:22.218895 2026] [:error] [pid 9970:tid 9997] [client 45.133.183.236:50036] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Sat Apr 18 18:19:22.816682 2026] [:error] [pid 9970:tid 9976] [client 45.133.183.236:50036] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat Apr 18 18:19:23.084261 2026] [:error] [pid 9970:tid 9975] [client 45.133.183.236:50036] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aeNaqyYdRLRhVmaIMx2exwAAAME"]
[Sat Apr 18 18:19:23.617025 2026] [:error] [pid 34290:tid 34337] [client 45.133.183.236:50044] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aeNaqxqX6WpmmAXOBi_7jQAAAdI"]
[Sat Apr 18 18:19:24.146301 2026] [:error] [pid 9863:tid 9893] [client 45.133.183.236:52258] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aeNarDjjiypiFrTucbK9kAAAABQ"]
[Sat Apr 18 18:19:24.675759 2026] [:error] [pid 34288:tid 34308] [client 45.133.183.236:52260] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aeNarOTIiy__PtiLmpnF5wAAAZA"]
[Sat Apr 18 18:19:25.215331 2026] [:error] [pid 34290:tid 34329] [client 45.133.183.236:52272] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Sat Apr 18 18:19:25.484523 2026] [:error] [pid 34290:tid 34320] [client 45.133.183.236:52272] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aeNarRqX6WpmmAXOBi_7kAAAAcE"]
[Sat Apr 18 18:19:26.021165 2026] [:error] [pid 34237:tid 34260] [client 45.133.183.236:52274] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aeNarhBmX4Wq5a6rxfZzKAAAAVU"]
[Sat Apr 18 18:19:26.559326 2026] [:error] [pid 34290:tid 34323] [client 45.133.183.236:52280] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Sat Apr 18 18:19:27.099365 2026] [:error] [pid 34290:tid 34341] [client 45.133.183.236:52280] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeNarxqX6WpmmAXOBi_7mQAAAdY"]
[Sat Apr 18 18:19:27.626738 2026] [:error] [pid 34237:tid 34247] [client 45.133.183.236:52290] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aeNarxBmX4Wq5a6rxfZzLgAAAUg"]
[Sat Apr 18 18:19:28.163622 2026] [:error] [pid 9864:tid 9907] [client 45.133.183.236:52306] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aeNasICFeowknfXHM7nx1AAAAEI"]
[Sat Apr 18 18:19:28.697921 2026] [:error] [pid 9863:tid 9875] [client 45.133.183.236:52310] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aeNasDjjiypiFrTucbK9mQAAAAI"]
[Sat Apr 18 18:19:29.526141 2026] [:error] [pid 9864:tid 9923] [client 45.133.183.236:52326] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aeNasYCFeowknfXHM7nx3wAAAFE"]
[Sat Apr 18 18:19:30.601026 2026] [:error] [pid 13023:tid 13041] [client 45.133.183.236:14376] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aeNasv1e7hG8DAeABB_sKwAAARA"]
[Sat Apr 18 18:19:31.142071 2026] [:error] [pid 34288:tid 34296] [client 45.133.183.236:52338] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Sat Apr 18 18:19:31.965856 2026] [:error] [pid 34288:tid 34306] [client 45.133.183.236:52338] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Sat Apr 18 18:19:32.251288 2026] [:error] [pid 34288:tid 34298] [client 45.133.183.236:52338] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aeNatOTIiy__PtiLmpnF7wAAAYY"]
[Sat Apr 18 18:19:33.064545 2026] [:error] [pid 34288:tid 34305] [client 45.133.183.236:52346] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Sat Apr 18 18:19:33.340051 2026] [:error] [pid 34288:tid 34313] [client 45.133.183.236:52346] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Sat Apr 18 18:19:34.704105 2026] [:error] [pid 34288:tid 34316] [client 45.133.183.236:52346] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aeNatuTIiy__PtiLmpnF9wAAAZg"]
[Sat Apr 18 18:19:36.046702 2026] [:error] [pid 9864:tid 9907] [client 45.133.183.236:3674] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aeNauICFeowknfXHM7nx8AAAAEI"]
[Sat Apr 18 18:19:36.572150 2026] [:error] [pid 13023:tid 13025] [client 45.133.183.236:53656] [client 45.133.183.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aeNauP1e7hG8DAeABB_sNgAAAQA"]
[Sat Apr 18 18:19:43.479675 2026] [:error] [pid 34290:tid 34325] [client 141.98.100.4:53676] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aeNavxqX6WpmmAXOBi_7rwAAAcY"]
[Sat Apr 18 18:19:44.563116 2026] [:error] [pid 9865:tid 9939] [client 141.98.100.4:53690] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Sat Apr 18 18:19:44.834432 2026] [:error] [pid 9865:tid 9958] [client 141.98.100.4:53690] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Sat Apr 18 18:19:45.106611 2026] [:error] [pid 9865:tid 9957] [client 141.98.100.4:53690] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Sat Apr 18 18:19:45.379521 2026] [:error] [pid 9865:tid 9944] [client 141.98.100.4:53690] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Sat Apr 18 18:19:47.907007 2026] [:error] [pid 9865:tid 9938] [client 141.98.100.4:53690] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aeNaw6zb5knECIY-C-hwTQAAAIE"]
[Sat Apr 18 18:19:48.448653 2026] [:error] [pid 13023:tid 13044] [client 141.98.100.4:59568] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aeNaxP1e7hG8DAeABB_sRwAAARM"]
[Sat Apr 18 18:19:48.990447 2026] [:error] [pid 9970:tid 9984] [client 141.98.100.4:59578] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aeNaxCYdRLRhVmaIMx2e0wAAAMo"]
[Sat Apr 18 18:19:49.527335 2026] [:error] [pid 13023:tid 13049] [client 141.98.100.4:59592] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aeNaxf1e7hG8DAeABB_sSQAAARg"]
[Sat Apr 18 18:19:50.067088 2026] [:error] [pid 9864:tid 9928] [client 141.98.100.4:59608] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aeNaxoCFeowknfXHM7nyEQAAAFY"]
[Sat Apr 18 18:19:50.601466 2026] [:error] [pid 9864:tid 9918] [client 141.98.100.4:59622] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aeNaxoCFeowknfXHM7nyEwAAAEw"]
[Sat Apr 18 18:19:51.416285 2026] [:error] [pid 9865:tid 9944] [client 141.98.100.4:59638] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aeNax6zb5knECIY-C-hwUwAAAIc"]
[Sat Apr 18 18:19:51.944010 2026] [:error] [pid 34288:tid 34315] [client 141.98.100.4:25902] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aeNax-TIiy__PtiLmpnF-gAAAZc"]
[Sat Apr 18 18:19:52.471445 2026] [:error] [pid 9865:tid 9941] [client 141.98.100.4:59656] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aeNayKzb5knECIY-C-hwVgAAAIQ"]
[Sat Apr 18 18:19:53.008582 2026] [:error] [pid 34290:tid 34341] [client 141.98.100.4:59666] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aeNayRqX6WpmmAXOBi_7twAAAdY"]
[Sat Apr 18 18:19:54.103034 2026] [:error] [pid 34237:tid 34255] [client 141.98.100.4:59672] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aeNayhBmX4Wq5a6rxfZzZwAAAVA"]
[Sat Apr 18 18:19:54.916376 2026] [:error] [pid 34290:tid 34323] [client 141.98.100.4:47384] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aeNayhqX6WpmmAXOBi_7wAAAAcQ"]
[Sat Apr 18 18:19:55.450043 2026] [:error] [pid 34290:tid 34339] [client 141.98.100.4:47400] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Sat Apr 18 18:19:55.981149 2026] [:error] [pid 34290:tid 34337] [client 141.98.100.4:47400] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aeNayxqX6WpmmAXOBi_7yQAAAdI"]
[Sat Apr 18 18:19:57.056455 2026] [:error] [pid 9865:tid 9946] [client 141.98.100.4:47404] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aeNazazb5knECIY-C-hwXgAAAIk"]
[Sat Apr 18 18:19:58.136348 2026] [:error] [pid 34237:tid 34250] [client 141.98.100.4:47410] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Sat Apr 18 18:19:58.403579 2026] [:error] [pid 34237:tid 34244] [client 141.98.100.4:47410] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aeNazhBmX4Wq5a6rxfZzcAAAAUU"]
[Sat Apr 18 18:19:59.225816 2026] [:error] [pid 34237:tid 34253] [client 141.98.100.4:47418] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Sat Apr 18 18:19:59.501229 2026] [:error] [pid 34237:tid 34243] [client 141.98.100.4:47418] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Sat Apr 18 18:19:59.775449 2026] [:error] [pid 34237:tid 34252] [client 141.98.100.4:47418] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Sat Apr 18 18:20:00.045759 2026] [:error] [pid 34237:tid 34248] [client 141.98.100.4:47418] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aeNa0BBmX4Wq5a6rxfZzdwAAAUk"]
[Sat Apr 18 18:20:00.587973 2026] [:error] [pid 34237:tid 34262] [client 141.98.100.4:47420] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Sat Apr 18 18:20:00.853402 2026] [:error] [pid 34237:tid 34254] [client 141.98.100.4:47420] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aeNa0BBmX4Wq5a6rxfZzewAAAU8"]
[Sat Apr 18 18:20:01.927603 2026] [:error] [pid 34237:tid 34260] [client 141.98.100.4:47436] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Apr 18 18:20:02.205684 2026] [:error] [pid 34237:tid 34247] [client 141.98.100.4:47436] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat Apr 18 18:20:02.477353 2026] [:error] [pid 34237:tid 34253] [client 141.98.100.4:47436] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Sat Apr 18 18:20:03.844141 2026] [:error] [pid 34237:tid 34256] [client 141.98.100.4:47436] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Sat Apr 18 18:20:04.114158 2026] [:error] [pid 34237:tid 34249] [client 141.98.100.4:47436] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Sat Apr 18 18:20:04.657082 2026] [:error] [pid 34237:tid 34255] [client 141.98.100.4:47436] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Sat Apr 18 18:20:05.475443 2026] [:error] [pid 34237:tid 34248] [client 141.98.100.4:47436] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sat Apr 18 18:20:05.741994 2026] [:error] [pid 34237:tid 34263] [client 141.98.100.4:47436] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aeNa1RBmX4Wq5a6rxfZzmAAAAVg"]
[Sat Apr 18 18:20:06.274888 2026] [:error] [pid 34237:tid 34242] [client 141.98.100.4:41084] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aeNa1hBmX4Wq5a6rxfZzmwAAAUM"]
[Sat Apr 18 18:20:06.810782 2026] [:error] [pid 34237:tid 34253] [client 141.98.100.4:41092] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Sat Apr 18 18:20:07.079100 2026] [:error] [pid 34237:tid 34252] [client 141.98.100.4:41092] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aeNa1xBmX4Wq5a6rxfZzogAAAU0"]
[Sat Apr 18 18:20:07.884097 2026] [:error] [pid 34237:tid 34256] [client 141.98.100.4:41102] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Apr 18 18:20:08.149370 2026] [:error] [pid 34237:tid 34246] [client 141.98.100.4:41102] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aeNa2BBmX4Wq5a6rxfZzqgAAAUc"]
[Sat Apr 18 18:20:08.689143 2026] [:error] [pid 34237:tid 34254] [client 141.98.100.4:41110] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aeNa2BBmX4Wq5a6rxfZzrAAAAU8"]
[Sat Apr 18 18:20:10.297534 2026] [:error] [pid 34290:tid 34334] [client 141.98.100.4:41118] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeNa2hqX6WpmmAXOBi_7-QAAAc8"]
[Sat Apr 18 18:20:10.840047 2026] [:error] [pid 9863:tid 9878] [client 141.98.100.4:41128] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aeNa2jjjiypiFrTucbK9sQAAAAU"]
[Sat Apr 18 18:20:12.193152 2026] [:error] [pid 9864:tid 9907] [client 141.98.100.4:41136] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Sat Apr 18 18:20:12.733091 2026] [:error] [pid 9864:tid 9912] [client 141.98.100.4:41136] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aeNa3ICFeowknfXHM7nyJQAAAEY"]
[Sat Apr 18 18:20:13.553468 2026] [:error] [pid 34237:tid 34243] [client 141.98.100.4:41140] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Sat Apr 18 18:20:14.105295 2026] [:error] [pid 34237:tid 34250] [client 141.98.100.4:41140] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/function.php"] [unique_id "aeNa3hBmX4Wq5a6rxfZztQAAAUs"]
[Sat Apr 18 18:20:14.641816 2026] [:error] [pid 34288:tid 34299] [client 141.98.100.4:37914] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aeNa3uTIiy__PtiLmpnGGwAAAYc"]
[Sat Apr 18 18:20:15.451720 2026] [:error] [pid 34290:tid 34340] [client 141.98.100.4:37924] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Sat Apr 18 18:20:15.717961 2026] [:error] [pid 34290:tid 34325] [client 141.98.100.4:37924] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aeNa3xqX6WpmmAXOBi_8DwAAAcY"]
[Sat Apr 18 18:20:16.258042 2026] [:error] [pid 34237:tid 34252] [client 141.98.100.4:37932] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aeNa4BBmX4Wq5a6rxfZztwAAAU0"]
[Sat Apr 18 18:20:17.349949 2026] [:error] [pid 9970:tid 9994] [client 141.98.100.4:37940] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Sat Apr 18 18:20:17.617686 2026] [:error] [pid 9970:tid 9997] [client 141.98.100.4:37940] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Sat Apr 18 18:20:18.154316 2026] [:error] [pid 9970:tid 9975] [client 141.98.100.4:37940] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Sat Apr 18 18:20:18.689225 2026] [:error] [pid 9970:tid 9982] [client 141.98.100.4:37940] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aeNa4iYdRLRhVmaIMx2e8wAAAMg"]
[Sat Apr 18 18:20:19.226922 2026] [:error] [pid 13023:tid 13033] [client 141.98.100.4:37954] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aeNa4_1e7hG8DAeABB_sVQAAAQg"]
[Sat Apr 18 18:20:20.603384 2026] [:error] [pid 9864:tid 9919] [client 141.98.100.4:37962] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat Apr 18 18:20:20.874633 2026] [:error] [pid 9864:tid 9912] [client 141.98.100.4:37962] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/index.php"] [unique_id "aeNa5ICFeowknfXHM7nyMgAAAEY"]
[Sat Apr 18 18:20:21.406776 2026] [:error] [pid 34290:tid 34328] [client 141.98.100.4:37976] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aeNa5RqX6WpmmAXOBi_8IQAAAck"]
[Sat Apr 18 18:20:21.945619 2026] [:error] [pid 34290:tid 34324] [client 141.98.100.4:37984] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aeNa5RqX6WpmmAXOBi_8JwAAAcU"]
[Sat Apr 18 18:20:23.971457 2026] [:error] [pid 34288:tid 34309] [client 141.98.100.4:37994] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Sat Apr 18 18:20:24.237608 2026] [:error] [pid 34288:tid 34312] [client 141.98.100.4:37994] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aeNa6OTIiy__PtiLmpnGNAAAAZQ"]
[Sat Apr 18 18:20:25.041784 2026] [:error] [pid 34290:tid 34342] [client 141.98.100.4:59696] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aeNa6RqX6WpmmAXOBi_8OQAAAdc"]
[Sat Apr 18 18:20:25.583181 2026] [:error] [pid 34290:tid 34343] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sat Apr 18 18:20:25.856679 2026] [:error] [pid 34290:tid 34320] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Sat Apr 18 18:20:26.402770 2026] [:error] [pid 34290:tid 34319] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Sat Apr 18 18:20:27.484296 2026] [:error] [pid 34290:tid 34340] [client 141.98.100.4:59710] [client 141.98.100.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.100.4, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/js/wp-login.php"] [unique_id "aeNa6xqX6WpmmAXOBi_8SwAAAdU"]
[Sat Apr 18 18:20:28.031826 2026] [:error] [pid 34290:tid 34320] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Sat Apr 18 18:20:28.303457 2026] [:error] [pid 34290:tid 34334] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sat Apr 18 18:20:28.575696 2026] [:error] [pid 34290:tid 34338] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Sat Apr 18 18:20:29.115856 2026] [:error] [pid 34290:tid 34333] [client 141.98.100.4:59710] [client 141.98.100.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.100.4, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aeNa7RqX6WpmmAXOBi_8VQAAAc4"]
[Sat Apr 18 18:20:30.141767 2026] [:error] [pid 34290:tid 34323] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat Apr 18 18:20:30.412988 2026] [:error] [pid 34290:tid 34326] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Sat Apr 18 18:20:30.957200 2026] [:error] [pid 34290:tid 34327] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Sat Apr 18 18:20:31.499868 2026] [:error] [pid 34290:tid 34335] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Sat Apr 18 18:20:32.318310 2026] [:error] [pid 34290:tid 34321] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Sat Apr 18 18:20:34.220252 2026] [:error] [pid 34290:tid 34329] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Sat Apr 18 18:20:34.493688 2026] [:error] [pid 34290:tid 34333] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Sat Apr 18 18:20:35.853849 2026] [:error] [pid 34290:tid 34335] [client 141.98.100.4:59710] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sat Apr 18 18:20:36.392465 2026] [:error] [pid 34290:tid 34329] [client 141.98.100.4:59710] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aeNa9BqX6WpmmAXOBi_8ggAAAco"]
[Sat Apr 18 18:20:37.467117 2026] [:error] [pid 9864:tid 9930] [client 141.98.100.4:35562] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat Apr 18 18:20:37.732581 2026] [:error] [pid 9864:tid 9912] [client 141.98.100.4:35562] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aeNa9YCFeowknfXHM7nyWAAAAEY"]
[Sat Apr 18 18:20:38.560265 2026] [:error] [pid 9865:tid 9961] [client 141.98.100.4:35570] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Sat Apr 18 18:20:38.827321 2026] [:error] [pid 9865:tid 9942] [client 141.98.100.4:35570] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aeNa9qzb5knECIY-C-hwfwAAAIU"]
[Sat Apr 18 18:20:39.899786 2026] [:error] [pid 34237:tid 34240] [client 141.98.100.4:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Sat Apr 18 18:20:40.437908 2026] [:error] [pid 34237:tid 34262] [client 141.98.100.4:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Sat Apr 18 18:20:40.974716 2026] [:error] [pid 34237:tid 34246] [client 141.98.100.4:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Sat Apr 18 18:20:41.242392 2026] [:error] [pid 34237:tid 34252] [client 141.98.100.4:35574] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Sat Apr 18 18:20:41.776889 2026] [:error] [pid 34237:tid 34251] [client 141.98.100.4:35574] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aeNa-RBmX4Wq5a6rxfZz9QAAAUw"]
[Sat Apr 18 18:20:42.310291 2026] [:error] [pid 9864:tid 9925] [client 141.98.100.4:35584] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Sat Apr 18 18:20:42.577701 2026] [:error] [pid 9864:tid 9928] [client 141.98.100.4:35584] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Sat Apr 18 18:20:42.840858 2026] [:error] [pid 9864:tid 9905] [client 141.98.100.4:35584] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aeNa-oCFeowknfXHM7nyXgAAAEA"]
[Sat Apr 18 18:20:43.646787 2026] [:error] [pid 34290:tid 34340] [client 141.98.100.4:35600] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aeNa-xqX6WpmmAXOBi_8iAAAAdU"]
[Sat Apr 18 18:20:44.445124 2026] [:error] [pid 9970:tid 9975] [client 141.98.100.4:55286] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat Apr 18 18:20:45.249606 2026] [:error] [pid 9970:tid 9992] [client 141.98.100.4:55286] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Sat Apr 18 18:20:45.518168 2026] [:error] [pid 9970:tid 9982] [client 141.98.100.4:55286] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Sat Apr 18 18:20:45.782103 2026] [:error] [pid 9970:tid 9989] [client 141.98.100.4:55286] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aeNa_SYdRLRhVmaIMx2fEAAAAM8"]
[Sat Apr 18 18:20:46.310810 2026] [:error] [pid 34288:tid 34296] [client 141.98.100.4:55290] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aeNa_uTIiy__PtiLmpnGQAAAAYQ"]
[Sat Apr 18 18:20:48.203564 2026] [:error] [pid 34288:tid 34292] [client 141.98.100.4:55304] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Sat Apr 18 18:20:48.740049 2026] [:error] [pid 34288:tid 34314] [client 141.98.100.4:55304] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aeNbAOTIiy__PtiLmpnGSgAAAZY"]
[Sat Apr 18 18:20:49.542814 2026] [:error] [pid 9865:tid 9961] [client 141.98.100.4:55310] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "aeNbAazb5knECIY-C-hwkgAAAJg"]
[Sat Apr 18 18:20:50.352704 2026] [:error] [pid 9970:tid 9995] [client 141.98.100.4:55316] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 18 18:20:50.645304 2026] [:error] [pid 9970:tid 9992] [client 141.98.100.4:55316] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Sat Apr 18 18:20:50.913201 2026] [:error] [pid 9970:tid 9989] [client 141.98.100.4:55316] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aeNbAiYdRLRhVmaIMx2fHgAAAM8"]
[Sat Apr 18 18:20:51.727132 2026] [:error] [pid 34237:tid 34241] [client 141.98.100.4:55320] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Sat Apr 18 18:20:52.001573 2026] [:error] [pid 34237:tid 34240] [client 141.98.100.4:55320] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Sat Apr 18 18:20:52.608118 2026] [:error] [pid 34237:tid 34262] [client 141.98.100.4:55320] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Apr 18 18:20:53.421976 2026] [:error] [pid 34237:tid 34259] [client 141.98.100.4:55320] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aeNbBRBmX4Wq5a6rxfZ0FAAAAVQ"]
[Sat Apr 18 18:20:53.953972 2026] [:error] [pid 34288:tid 34309] [client 141.98.100.4:55334] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Sat Apr 18 18:20:54.750836 2026] [:error] [pid 34288:tid 34306] [client 141.98.100.4:55334] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aeNbBuTIiy__PtiLmpnGUQAAAY4"]
[Sat Apr 18 18:20:55.566535 2026] [:error] [pid 34288:tid 34295] [client 141.98.100.4:44130] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Sat Apr 18 18:20:56.397822 2026] [:error] [pid 34288:tid 34308] [client 141.98.100.4:44130] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Sat Apr 18 18:20:56.672326 2026] [:error] [pid 34288:tid 34294] [client 141.98.100.4:44130] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Sat Apr 18 18:20:57.219005 2026] [:error] [pid 34288:tid 34297] [client 141.98.100.4:44130] [client 141.98.100.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.100.4, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aeNbCeTIiy__PtiLmpnGYAAAAYU"]
[Sat Apr 18 18:20:58.609843 2026] [:error] [pid 34288:tid 34305] [client 141.98.100.4:44130] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aeNbCuTIiy__PtiLmpnGZwAAAY0"]
[Sat Apr 18 18:20:59.151869 2026] [:error] [pid 13023:tid 13035] [client 141.98.100.4:44132] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Sat Apr 18 18:20:59.418971 2026] [:error] [pid 13023:tid 13032] [client 141.98.100.4:44132] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aeNbC_1e7hG8DAeABB_slgAAAQc"]
[Sat Apr 18 18:20:59.956556 2026] [:error] [pid 9970:tid 9974] [client 141.98.100.4:44138] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sat Apr 18 18:21:00.503147 2026] [:error] [pid 9970:tid 9977] [client 141.98.100.4:44138] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Sat Apr 18 18:21:01.045746 2026] [:error] [pid 9970:tid 9975] [client 141.98.100.4:44138] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aeNbDSYdRLRhVmaIMx2fMQAAAME"]
[Sat Apr 18 18:21:01.852915 2026] [:error] [pid 9864:tid 9910] [client 141.98.100.4:44154] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Sat Apr 18 18:21:03.106521 2026] [:error] [pid 9864:tid 9910] [client 141.98.100.4:44154] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Sat Apr 18 18:21:03.373723 2026] [:error] [pid 9864:tid 9906] [client 141.98.100.4:44154] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aeNbD4CFeowknfXHM7nybQAAAEE"]
[Sat Apr 18 18:21:03.906016 2026] [:error] [pid 9864:tid 9925] [client 141.98.100.4:44164] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aeNbD4CFeowknfXHM7nycAAAAFM"]
[Sat Apr 18 18:21:04.436973 2026] [:error] [pid 34237:tid 34262] [client 141.98.100.4:44580] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Sat Apr 18 18:21:04.708350 2026] [:error] [pid 34237:tid 34261] [client 141.98.100.4:44580] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Sat Apr 18 18:21:05.237496 2026] [:error] [pid 34237:tid 34246] [client 141.98.100.4:44580] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aeNbERBmX4Wq5a6rxfZ0IwAAAUc"]
[Sat Apr 18 18:21:05.766715 2026] [:error] [pid 34237:tid 34243] [client 141.98.100.4:44582] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Sat Apr 18 18:21:06.296486 2026] [:error] [pid 34237:tid 34257] [client 141.98.100.4:44582] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Sat Apr 18 18:21:06.558974 2026] [:error] [pid 34237:tid 34260] [client 141.98.100.4:44582] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aeNbEhBmX4Wq5a6rxfZ0KQAAAVU"]
[Sat Apr 18 18:21:07.360439 2026] [:error] [pid 13023:tid 13042] [client 141.98.100.4:44592] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/db.php"] [unique_id "aeNbE_1e7hG8DAeABB_spgAAARE"]
[Sat Apr 18 18:21:07.888327 2026] [:error] [pid 9863:tid 9875] [client 141.98.100.4:44608] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aeNbEzjjiypiFrTucbK9xQAAAAI"]
[Sat Apr 18 18:21:08.418037 2026] [:error] [pid 13023:tid 13026] [client 141.98.100.4:44622] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aeNbFP1e7hG8DAeABB_sqQAAAQE"]
[Sat Apr 18 18:21:08.955785 2026] [:error] [pid 34290:tid 34341] [client 141.98.100.4:44638] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aeNbFBqX6WpmmAXOBi_8kgAAAdY"]
[Sat Apr 18 18:21:09.486881 2026] [:error] [pid 13023:tid 13046] [client 141.98.100.4:44646] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aeNbFf1e7hG8DAeABB_srwAAARU"]
[Sat Apr 18 18:21:10.021846 2026] [:error] [pid 13023:tid 13036] [client 141.98.100.4:44650] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aeNbFv1e7hG8DAeABB_ssgAAAQs"]
[Sat Apr 18 18:21:11.111501 2026] [:error] [pid 34237:tid 34240] [client 141.98.100.4:44666] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aeNbFxBmX4Wq5a6rxfZ0MQAAAUE"]
[Sat Apr 18 18:21:11.653055 2026] [:error] [pid 9863:tid 9885] [client 141.98.100.4:44676] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aeNbFzjjiypiFrTucbK9yQAAAAw"]
[Sat Apr 18 18:21:12.190920 2026] [:error] [pid 9864:tid 9908] [client 141.98.100.4:44682] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aeNbGICFeowknfXHM7nydgAAAEM"]
[Sat Apr 18 18:21:12.721612 2026] [:error] [pid 9865:tid 9938] [client 141.98.100.4:44692] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aeNbGKzb5knECIY-C-hwxQAAAIE"]
[Sat Apr 18 18:21:13.261428 2026] [:error] [pid 9863:tid 9888] [client 141.98.100.4:44706] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aeNbGTjjiypiFrTucbK9ywAAAA8"]
[Sat Apr 18 18:21:13.800190 2026] [:error] [pid 34290:tid 34335] [client 141.98.100.4:44716] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Sat Apr 18 18:21:14.604484 2026] [:error] [pid 34290:tid 34334] [client 141.98.100.4:44716] [client 141.98.100.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.100.4, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aeNbGhqX6WpmmAXOBi_8mAAAAc8"]
[Sat Apr 18 18:21:15.954616 2026] [:error] [pid 34290:tid 34340] [client 141.98.100.4:44716] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aeNbGxqX6WpmmAXOBi_8nwAAAdU"]
[Sat Apr 18 18:21:17.026059 2026] [:error] [pid 34237:tid 34239] [client 141.98.100.4:34818] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat Apr 18 18:21:17.294556 2026] [:error] [pid 34237:tid 34252] [client 141.98.100.4:34818] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Sat Apr 18 18:21:18.369014 2026] [:error] [pid 34237:tid 34245] [client 141.98.100.4:34818] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Sat Apr 18 18:21:18.637510 2026] [:error] [pid 34237:tid 34249] [client 141.98.100.4:34818] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Sat Apr 18 18:21:19.710655 2026] [:error] [pid 34237:tid 34247] [client 141.98.100.4:34818] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Sat Apr 18 18:21:19.979391 2026] [:error] [pid 34237:tid 34241] [client 141.98.100.4:34818] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Sat Apr 18 18:21:20.253485 2026] [:error] [pid 34237:tid 34243] [client 141.98.100.4:34818] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Sat Apr 18 18:21:20.523619 2026] [:error] [pid 34237:tid 34254] [client 141.98.100.4:34818] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Sat Apr 18 18:21:20.789454 2026] [:error] [pid 34237:tid 34248] [client 141.98.100.4:34818] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aeNbIBBmX4Wq5a6rxfZ0SgAAAUk"]
[Sat Apr 18 18:21:21.316305 2026] [:error] [pid 9864:tid 9923] [client 141.98.100.4:34824] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aeNbIYCFeowknfXHM7nyiAAAAFE"]
[Sat Apr 18 18:21:21.855131 2026] [:error] [pid 34290:tid 34343] [client 141.98.100.4:34828] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aeNbIRqX6WpmmAXOBi_8ogAAAdg"]
[Sat Apr 18 18:21:22.661659 2026] [:error] [pid 13023:tid 13030] [client 141.98.100.4:34830] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Sat Apr 18 18:21:22.931396 2026] [:error] [pid 13023:tid 13046] [client 141.98.100.4:34830] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sat Apr 18 18:21:23.472408 2026] [:error] [pid 13023:tid 13035] [client 141.98.100.4:34830] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Sat Apr 18 18:21:24.009446 2026] [:error] [pid 13023:tid 13045] [client 141.98.100.4:34830] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aeNbJP1e7hG8DAeABB_s1gAAARQ"]
[Sat Apr 18 18:21:24.551766 2026] [:error] [pid 34288:tid 34292] [client 141.98.100.4:58358] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aeNbJOTIiy__PtiLmpnGbQAAAYA"]
[Sat Apr 18 18:21:25.084332 2026] [:error] [pid 9863:tid 9877] [client 141.98.100.4:58366] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aeNbJTjjiypiFrTucbK90gAAAAQ"]
[Sat Apr 18 18:21:26.703592 2026] [:error] [pid 34290:tid 34333] [client 141.98.100.4:58378] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aeNbJhqX6WpmmAXOBi_8rQAAAc4"]
[Sat Apr 18 18:21:27.498301 2026] [:error] [pid 34237:tid 34247] [client 141.98.100.4:58394] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aeNbJxBmX4Wq5a6rxfZ0UgAAAUg"]
[Sat Apr 18 18:21:29.392994 2026] [:error] [pid 9970:tid 9988] [client 141.98.100.4:36786] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aeNbKSYdRLRhVmaIMx2fRQAAAM4"]
[Sat Apr 18 18:21:32.941168 2026] [:error] [pid 9864:tid 9927] [client 141.98.100.4:58410] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aeNbLICFeowknfXHM7nyqwAAAFU"]
[Sat Apr 18 18:21:33.476870 2026] [:error] [pid 9864:tid 9918] [client 141.98.100.4:58424] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Sat Apr 18 18:21:33.744600 2026] [:error] [pid 9864:tid 9919] [client 141.98.100.4:58424] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/about.php"] [unique_id "aeNbLYCFeowknfXHM7nysAAAAE0"]
[Sat Apr 18 18:21:34.818347 2026] [:error] [pid 34290:tid 34336] [client 141.98.100.4:36746] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Sat Apr 18 18:21:35.626222 2026] [:error] [pid 34290:tid 34334] [client 141.98.100.4:36746] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Sat Apr 18 18:21:35.890031 2026] [:error] [pid 34290:tid 34333] [client 141.98.100.4:36746] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aeNbLxqX6WpmmAXOBi_8uAAAAc4"]
[Sat Apr 18 18:21:36.958388 2026] [:error] [pid 34288:tid 34295] [client 141.98.100.4:36750] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aeNbMOTIiy__PtiLmpnGdgAAAYM"]
[Sat Apr 18 18:21:38.585973 2026] [:error] [pid 34288:tid 34301] [client 141.98.100.4:36756] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aeNbMuTIiy__PtiLmpnGewAAAYk"]
[Sat Apr 18 18:21:40.190757 2026] [:error] [pid 9863:tid 9885] [client 141.98.100.4:36768] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aeNbNDjjiypiFrTucbK93AAAAAw"]
[Sat Apr 18 18:21:40.988856 2026] [:error] [pid 9863:tid 9894] [client 141.98.100.4:36782] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Sat Apr 18 18:21:41.255326 2026] [:error] [pid 9863:tid 9888] [client 141.98.100.4:36782] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aeNbNTjjiypiFrTucbK93wAAAA8"]
[Sat Apr 18 18:21:41.784621 2026] [:error] [pid 34290:tid 34337] [client 141.98.100.4:36360] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aeNbNRqX6WpmmAXOBi_8vQAAAdI"]
[Sat Apr 18 18:21:43.680629 2026] [:error] [pid 9865:tid 9946] [client 141.98.100.4:36792] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aeNbN6zb5knECIY-C-hw-AAAAIk"]
[Sat Apr 18 18:21:44.214883 2026] [:error] [pid 34290:tid 34342] [client 141.98.100.4:49000] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Sat Apr 18 18:21:45.325704 2026] [:error] [pid 34290:tid 34326] [client 141.98.100.4:49000] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Sat Apr 18 18:21:45.591343 2026] [:error] [pid 34290:tid 34343] [client 141.98.100.4:49000] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aeNbORqX6WpmmAXOBi_8yAAAAdg"]
[Sat Apr 18 18:21:46.668656 2026] [:error] [pid 34237:tid 34258] [client 141.98.100.4:49002] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Sat Apr 18 18:21:47.206420 2026] [:error] [pid 34237:tid 34251] [client 141.98.100.4:49002] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aeNbOxBmX4Wq5a6rxfZ0XgAAAUw"]
[Sat Apr 18 18:21:47.740761 2026] [:error] [pid 13023:tid 13027] [client 141.98.100.4:49016] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aeNbO_1e7hG8DAeABB_s5gAAAQI"]
[Sat Apr 18 18:21:48.554751 2026] [:error] [pid 9864:tid 9928] [client 141.98.100.4:49024] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aeNbPICFeowknfXHM7nyvgAAAFY"]
[Sat Apr 18 18:21:49.650739 2026] [:error] [pid 9864:tid 9909] [client 141.98.100.4:49032] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aeNbPYCFeowknfXHM7nyxAAAAEQ"]
[Sat Apr 18 18:21:50.184123 2026] [:error] [pid 9864:tid 9907] [client 141.98.100.4:49046] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aeNbPoCFeowknfXHM7nyxgAAAEI"]
[Sat Apr 18 18:21:50.997743 2026] [:error] [pid 9864:tid 9918] [client 141.98.100.4:24696] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Sat Apr 18 18:21:52.352814 2026] [:error] [pid 9864:tid 9921] [client 141.98.100.4:24696] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aeNbQICFeowknfXHM7ny0wAAAE8"]
[Sat Apr 18 18:21:53.429413 2026] [:error] [pid 9864:tid 9917] [client 141.98.100.4:49058] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aeNbQYCFeowknfXHM7ny2wAAAEs"]
[Sat Apr 18 18:21:53.960077 2026] [:error] [pid 9970:tid 9985] [client 141.98.100.4:49074] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aeNbQSYdRLRhVmaIMx2fRwAAAMs"]
[Sat Apr 18 18:21:54.764444 2026] [:error] [pid 9864:tid 9919] [client 141.98.100.4:56652] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Sat Apr 18 18:21:55.028336 2026] [:error] [pid 9864:tid 9924] [client 141.98.100.4:56652] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aeNbQ4CFeowknfXHM7ny5QAAAFI"]
[Sat Apr 18 18:21:55.832914 2026] [:error] [pid 9864:tid 9926] [client 141.98.100.4:56666] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aeNbQ4CFeowknfXHM7ny6gAAAFQ"]
[Sat Apr 18 18:21:58.870646 2026] [:error] [pid 34237:tid 34249] [client 141.98.100.4:56682] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aeNbRhBmX4Wq5a6rxfZ0ZQAAAUo"]
[Sat Apr 18 18:21:59.682904 2026] [:error] [pid 9863:tid 9885] [client 141.98.100.4:56694] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Sat Apr 18 18:21:59.953470 2026] [:error] [pid 9863:tid 9873] [client 141.98.100.4:56694] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aeNbRzjjiypiFrTucbK95gAAAAA"]
[Sat Apr 18 18:22:01.043460 2026] [:error] [pid 34237:tid 34251] [client 141.98.100.4:56702] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aeNbSRBmX4Wq5a6rxfZ0awAAAUw"]
[Sat Apr 18 18:22:01.859497 2026] [:error] [pid 34290:tid 34335] [client 141.98.100.4:56704] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/as.php"] [unique_id "aeNbSRqX6WpmmAXOBi_8zwAAAdA"]
[Sat Apr 18 18:22:02.663143 2026] [:error] [pid 34237:tid 34240] [client 141.98.100.4:56708] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aeNbShBmX4Wq5a6rxfZ0cwAAAUE"]
[Sat Apr 18 18:22:03.195305 2026] [:error] [pid 9970:tid 9991] [client 141.98.100.4:56712] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/install.php"] [unique_id "aeNbSyYdRLRhVmaIMx2fSAAAANE"]
[Sat Apr 18 18:22:03.723691 2026] [:error] [pid 9970:tid 9980] [client 141.98.100.4:56726] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aeNbSyYdRLRhVmaIMx2fSgAAAMY"]
[Sat Apr 18 18:22:05.890862 2026] [:error] [pid 13023:tid 13047] [client 141.98.100.4:42004] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aeNbTf1e7hG8DAeABB_s8gAAARY"]
[Sat Apr 18 18:22:07.228362 2026] [:error] [pid 9863:tid 9890] [client 141.98.100.4:42018] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aeNbTzjjiypiFrTucbK97gAAABE"]
[Sat Apr 18 18:22:08.047754 2026] [:error] [pid 34288:tid 34294] [client 141.98.100.4:42020] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sat Apr 18 18:22:08.314937 2026] [:error] [pid 34288:tid 34308] [client 141.98.100.4:42020] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aeNbUOTIiy__PtiLmpnGiwAAAZA"]
[Sat Apr 18 18:22:09.379999 2026] [:error] [pid 9865:tid 9948] [client 141.98.100.4:42028] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aeNbUazb5knECIY-C-hw_wAAAIs"]
[Sat Apr 18 18:22:09.924661 2026] [:error] [pid 9864:tid 9927] [client 141.98.100.4:42032] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Sat Apr 18 18:22:11.283379 2026] [:error] [pid 9864:tid 9910] [client 141.98.100.4:42032] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aeNbU4CFeowknfXHM7ny9wAAAEU"]
[Sat Apr 18 18:22:12.092204 2026] [:error] [pid 9970:tid 9991] [client 141.98.100.4:42036] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aeNbVCYdRLRhVmaIMx2fUgAAANE"]
[Sat Apr 18 18:22:12.895321 2026] [:error] [pid 34290:tid 34327] [client 141.98.100.4:42040] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aeNbVBqX6WpmmAXOBi_81wAAAcg"]
[Sat Apr 18 18:22:13.989706 2026] [:error] [pid 9970:tid 9984] [client 141.98.100.4:42044] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aeNbVSYdRLRhVmaIMx2fVQAAAMo"]
[Sat Apr 18 18:22:16.670309 2026] [:error] [pid 9864:tid 9924] [client 141.98.100.4:49534] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aeNbWICFeowknfXHM7nzBgAAAFI"]
[Sat Apr 18 18:22:17.198461 2026] [:error] [pid 34237:tid 34246] [client 141.98.100.4:49544] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aeNbWRBmX4Wq5a6rxfZ0gQAAAUc"]
[Sat Apr 18 18:22:18.547201 2026] [:error] [pid 34290:tid 34342] [client 141.98.100.4:49558] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aeNbWhqX6WpmmAXOBi_83gAAAdc"]
[Sat Apr 18 18:22:19.077786 2026] [:error] [pid 34237:tid 34245] [client 141.98.100.4:49568] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aeNbWxBmX4Wq5a6rxfZ0hAAAAUY"]
[Sat Apr 18 18:22:20.159489 2026] [:error] [pid 34237:tid 34256] [client 141.98.100.4:49584] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aeNbXBBmX4Wq5a6rxfZ0iQAAAVE"]
[Sat Apr 18 18:22:20.698141 2026] [:error] [pid 34237:tid 34246] [client 141.98.100.4:49586] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aeNbXBBmX4Wq5a6rxfZ0iwAAAUc"]
[Sat Apr 18 18:22:21.230508 2026] [:error] [pid 34237:tid 34239] [client 141.98.100.4:49602] [client 141.98.100.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.100.4, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aeNbXRBmX4Wq5a6rxfZ0jQAAAUA"]
[Sat Apr 18 18:22:21.234938 2026] [:error] [pid 34237:tid 34239] [client 141.98.100.4:49602] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Sat Apr 18 18:22:21.503208 2026] [:error] [pid 34237:tid 34248] [client 141.98.100.4:49602] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aeNbXRBmX4Wq5a6rxfZ0jgAAAUk"]
[Sat Apr 18 18:22:22.306397 2026] [:error] [pid 34237:tid 34258] [client 141.98.100.4:49606] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sat Apr 18 18:22:22.572257 2026] [:error] [pid 34237:tid 34242] [client 141.98.100.4:49606] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aeNbXhBmX4Wq5a6rxfZ0kwAAAUM"]
[Sat Apr 18 18:22:23.108102 2026] [:error] [pid 34288:tid 34307] [client 141.98.100.4:24784] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/network.php"] [unique_id "aeNbX-TIiy__PtiLmpnGjgAAAY8"]
[Sat Apr 18 18:22:23.646825 2026] [:error] [pid 13023:tid 13036] [client 141.98.100.4:49618] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Sat Apr 18 18:22:25.540987 2026] [:error] [pid 13023:tid 13039] [client 141.98.100.4:49618] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aeNbYf1e7hG8DAeABB_tBwAAAQ4"]
[Sat Apr 18 18:22:26.074322 2026] [:error] [pid 9865:tid 9939] [client 141.98.100.4:39852] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aeNbYqzb5knECIY-C-hxDAAAAII"]
[Sat Apr 18 18:22:27.159490 2026] [:error] [pid 9865:tid 9957] [client 141.98.100.4:39858] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aeNbY6zb5knECIY-C-hxEwAAAJQ"]
[Sat Apr 18 18:22:27.690119 2026] [:error] [pid 9863:tid 9896] [client 141.98.100.4:39872] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aeNbYzjjiypiFrTucbK98wAAABc"]
[Sat Apr 18 18:22:28.223692 2026] [:error] [pid 34237:tid 34261] [client 141.98.100.4:39882] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Sat Apr 18 18:22:28.490662 2026] [:error] [pid 34237:tid 34244] [client 141.98.100.4:39882] [client 141.98.100.4] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 141.98.100.4, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aeNbZBBmX4Wq5a6rxfZ0mwAAAUU"]
[Sat Apr 18 18:22:29.031228 2026] [:error] [pid 34237:tid 34259] [client 141.98.100.4:39882] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aeNbZRBmX4Wq5a6rxfZ0nwAAAVQ"]
[Sat Apr 18 18:22:30.382603 2026] [:error] [pid 9970:tid 9979] [client 141.98.100.4:39898] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aeNbZiYdRLRhVmaIMx2fXQAAAMU"]
[Sat Apr 18 18:22:30.915794 2026] [:error] [pid 9865:tid 9937] [client 141.98.100.4:39906] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Sat Apr 18 18:22:32.359748 2026] [:error] [pid 9865:tid 9937] [client 141.98.100.4:39906] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aeNbaKzb5knECIY-C-hxHgAAAIA"]
[Sat Apr 18 18:22:32.898073 2026] [:error] [pid 9865:tid 9958] [client 141.98.100.4:39920] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aeNbaKzb5knECIY-C-hxHwAAAJU"]
[Sat Apr 18 18:22:33.437936 2026] [:error] [pid 9864:tid 9922] [client 141.98.100.4:39934] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sat Apr 18 18:22:34.248719 2026] [:error] [pid 9864:tid 9906] [client 141.98.100.4:39934] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aeNbaoCFeowknfXHM7nzEwAAAEE"]
[Sat Apr 18 18:22:35.333914 2026] [:error] [pid 34237:tid 34253] [client 141.98.100.4:52494] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aeNbaxBmX4Wq5a6rxfZ0pgAAAU4"]
[Sat Apr 18 18:22:35.869894 2026] [:error] [pid 9863:tid 9894] [client 141.98.100.4:52506] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Sat Apr 18 18:22:36.409855 2026] [:error] [pid 9863:tid 9892] [client 141.98.100.4:52506] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Sat Apr 18 18:22:36.947113 2026] [:error] [pid 9863:tid 9896] [client 141.98.100.4:52506] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aeNbbDjjiypiFrTucbK9_QAAABc"]
[Sat Apr 18 18:22:37.481646 2026] [:error] [pid 34237:tid 34256] [client 141.98.100.4:16419] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aeNbbRBmX4Wq5a6rxfZ0qQAAAVE"]
[Sat Apr 18 18:22:38.276625 2026] [:error] [pid 13023:tid 13025] [client 141.98.100.4:52528] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/count.php"] [unique_id "aeNbbv1e7hG8DAeABB_tEAAAAQA"]
[Sat Apr 18 18:22:38.810649 2026] [:error] [pid 9864:tid 9915] [client 141.98.100.4:52536] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Sat Apr 18 18:22:40.418167 2026] [:error] [pid 9864:tid 9922] [client 141.98.100.4:52536] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aeNbcICFeowknfXHM7nzIAAAAFA"]
[Sat Apr 18 18:22:42.807080 2026] [:error] [pid 34237:tid 34249] [client 141.98.100.4:52548] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||nextspaceconsulting.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "nextspaceconsulting.com.au"] [uri "/images/stories/themes.php"] [unique_id "aeNbchBmX4Wq5a6rxfZ0tAAAAUo"]
[Sat Apr 18 18:22:43.072657 2026] [:error] [pid 34237:tid 34258] [client 141.98.100.4:52548] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aeNbcxBmX4Wq5a6rxfZ0tQAAAVM"]
[Sat Apr 18 18:22:44.140359 2026] [:error] [pid 34288:tid 34304] [client 141.98.100.4:52564] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aeNbdOTIiy__PtiLmpnGlQAAAYw"]
[Sat Apr 18 18:22:44.673308 2026] [:error] [pid 9970:tid 9978] [client 141.98.100.4:57022] [client 141.98.100.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aeNbdCYdRLRhVmaIMx2fXwAAAMQ"]
[Sat Apr 18 18:22:45.209819 2026] [:error] [pid 9970:tid 9994] [client 141.98.100.4:57026] [client 141.98.100.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/av.php"] [unique_id "aeNbdSYdRLRhVmaIMx2fYAAAANQ"]
[Sat Apr 18 18:22:45.744282 2026] [:error] [pid 34290:tid 34320] [client 141.98.100.4:57032] [client 141.98.100.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/av.php"] [unique_id "aeNbdRqX6WpmmAXOBi_8-wAAAcE"]
[Sat Apr 18 18:22:46.276583 2026] [:error] [pid 9864:tid 9909] [client 141.98.100.4:57034] [client 141.98.100.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/av.php"] [unique_id "aeNbdoCFeowknfXHM7nzJQAAAEQ"]
[Sat Apr 18 18:22:46.809790 2026] [:error] [pid 9864:tid 9925] [client 141.98.100.4:57042] [client 141.98.100.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/av.php"] [unique_id "aeNbdoCFeowknfXHM7nzJgAAAFM"]
[Sat Apr 18 18:22:48.666730 2026] [:error] [pid 9864:tid 9918] [client 141.98.100.4:57052] [client 141.98.100.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/"] [unique_id "aeNbeICFeowknfXHM7nzLQAAAEw"]
[Sat Apr 18 18:22:49.202844 2026] [:error] [pid 34290:tid 34342] [client 141.98.100.4:57060] [client 141.98.100.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/"] [unique_id "aeNbeRqX6WpmmAXOBi_8_wAAAdc"]
[Sat Apr 18 18:22:49.736100 2026] [:error] [pid 34290:tid 34331] [client 141.98.100.4:57062] [client 141.98.100.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/"] [unique_id "aeNbeRqX6WpmmAXOBi_9AAAAAcw"]
[Sat Apr 18 18:22:50.265149 2026] [:error] [pid 34290:tid 34338] [client 141.98.100.4:57074] [client 141.98.100.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/"] [unique_id "aeNbehqX6WpmmAXOBi_9AgAAAdM"]
[Sat Apr 18 18:22:50.797316 2026] [:error] [pid 13023:tid 13026] [client 141.98.100.4:57082] [client 141.98.100.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/"] [unique_id "aeNbev1e7hG8DAeABB_tHQAAAQE"]
[Sun Apr 19 03:17:05.454308 2026] [:error] [pid 32252:tid 32271] [client 172.98.33.61:27217] [client 172.98.33.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.33.61, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aePYseXl4Yc-Lt5fJ9i0UQAAARE"]
[Sun Apr 19 03:17:05.493049 2026] [:error] [pid 32252:tid 32271] [client 172.98.33.61:27217] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sun Apr 19 05:14:47.700410 2026] [:error] [pid 47772:tid 47793] [client 44.247.9.38:47852] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aeP0R4c0L16cb4smAz-XaQAAAAQ"]
[Sun Apr 19 05:14:48.628304 2026] [:error] [pid 15764:tid 15834] [client 44.247.9.38:47858] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aeP0SGLL_sqdSHoVp-TnRAAAAkg"]
[Sun Apr 19 05:14:49.365636 2026] [:error] [pid 15760:tid 15784] [client 44.247.9.38:47874] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "aeP0SfSdD_XHQMJ_ISsWHQAAAdA"]
[Sun Apr 19 05:14:50.098860 2026] [:error] [pid 47772:tid 47803] [client 44.247.9.38:47884] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "aeP0Soc0L16cb4smAz-XdAAAAA4"]
[Sun Apr 19 05:14:50.824562 2026] [:error] [pid 47886:tid 47898] [client 44.247.9.38:47888] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "aeP0SkSe8yiyuPrD7yPmUwAAAMo"]
[Sun Apr 19 05:14:51.562641 2026] [:error] [pid 15760:tid 15782] [client 44.247.9.38:47898] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "aeP0S_SdD_XHQMJ_ISsWHgAAAc4"]
[Sun Apr 19 05:14:52.298173 2026] [:error] [pid 47773:tid 47820] [client 44.247.9.38:49076] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "aeP0TOiBHdnCJDuPq9BH_AAAAEQ"]
[Sun Apr 19 05:14:53.030357 2026] [:error] [pid 47773:tid 47830] [client 44.247.9.38:49088] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.remote"] [unique_id "aeP0TeiBHdnCJDuPq9BIAAAAAE4"]
[Sun Apr 19 05:14:53.763074 2026] [:error] [pid 15765:tid 15865] [client 44.247.9.38:49100] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "aeP0TfRqinw-W5EwQ759hgAAAow"]
[Sun Apr 19 05:14:54.495134 2026] [:error] [pid 47773:tid 47820] [client 44.247.9.38:49110] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "aeP0TuiBHdnCJDuPq9BICgAAAEQ"]
[Sun Apr 19 05:14:55.228136 2026] [:error] [pid 47773:tid 47836] [client 44.247.9.38:49126] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "aeP0T-iBHdnCJDuPq9BIDQAAAFQ"]
[Sun Apr 19 05:14:55.956094 2026] [:error] [pid 47886:tid 47899] [client 44.247.9.38:49136] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "aeP0T0Se8yiyuPrD7yPmXAAAAMs"]
[Sun Apr 19 05:14:56.678562 2026] [:error] [pid 47773:tid 47827] [client 44.247.9.38:49140] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.sample"] [unique_id "aeP0UOiBHdnCJDuPq9BIEQAAAEs"]
[Sun Apr 19 05:14:57.411449 2026] [:error] [pid 47773:tid 47834] [client 44.247.9.38:49152] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "aeP0UeiBHdnCJDuPq9BIFgAAAFI"]
[Sun Apr 19 05:14:58.152112 2026] [:error] [pid 47773:tid 47835] [client 44.247.9.38:49156] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "aeP0UuiBHdnCJDuPq9BIHQAAAFM"]
[Sun Apr 19 05:14:58.878156 2026] [:error] [pid 47773:tid 47837] [client 44.247.9.38:49162] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "aeP0UuiBHdnCJDuPq9BIJQAAAFU"]
[Sun Apr 19 05:14:59.601917 2026] [:error] [pid 47773:tid 47830] [client 44.247.9.38:49178] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.stage"] [unique_id "aeP0U-iBHdnCJDuPq9BIJwAAAE4"]
[Sun Apr 19 05:15:00.336231 2026] [:error] [pid 47772:tid 47813] [client 44.247.9.38:49180] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.ci"] [unique_id "aeP0VIc0L16cb4smAz-XiQAAABg"]
[Sun Apr 19 05:15:01.067852 2026] [:error] [pid 47773:tid 47834] [client 44.247.9.38:49184] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.docker"] [unique_id "aeP0VeiBHdnCJDuPq9BIKwAAAFI"]
[Sun Apr 19 05:15:01.795438 2026] [:error] [pid 47773:tid 47817] [client 44.247.9.38:60046] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.live"] [unique_id "aeP0VeiBHdnCJDuPq9BIMgAAAEE"]
[Sun Apr 19 05:15:02.520732 2026] [:error] [pid 47773:tid 47816] [client 44.247.9.38:60058] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.preprod"] [unique_id "aeP0VuiBHdnCJDuPq9BIOgAAAEA"]
[Sun Apr 19 05:15:03.245581 2026] [:error] [pid 15763:tid 15805] [client 44.247.9.38:60074] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.uat"] [unique_id "aeP0V7MXv1Y1THOoxaAgTgAAAgk"]
[Sun Apr 19 05:15:03.974851 2026] [:error] [pid 47772:tid 47809] [client 44.247.9.38:60086] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "aeP0V4c0L16cb4smAz-XkAAAABQ"]
[Sun Apr 19 05:15:04.698068 2026] [:error] [pid 47773:tid 47816] [client 44.247.9.38:60094] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.swp"] [unique_id "aeP0WOiBHdnCJDuPq9BIRwAAAEA"]
[Sun Apr 19 05:15:05.420590 2026] [:error] [pid 47886:tid 47890] [client 44.247.9.38:60102] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "aeP0WUSe8yiyuPrD7yPmbgAAAMI"]
[Sun Apr 19 05:15:06.157412 2026] [:error] [pid 47886:tid 47893] [client 44.247.9.38:60118] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "aeP0WkSe8yiyuPrD7yPmcQAAAMU"]
[Sun Apr 19 05:15:06.888675 2026] [:error] [pid 15693:tid 15720] [client 44.247.9.38:60130] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/apps/.env"] [unique_id "aeP0WsNMD-ccazQlTskUGwAAAVg"]
[Sun Apr 19 05:15:07.624197 2026] [:error] [pid 15694:tid 15735] [client 44.247.9.38:60138] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "aeP0W7imB-jol1fwqAq40QAAAYk"]
[Sun Apr 19 05:15:08.350699 2026] [:error] [pid 15693:tid 15715] [client 44.247.9.38:60144] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/web/.env"] [unique_id "aeP0XMNMD-ccazQlTskUHAAAAVM"]
[Sun Apr 19 05:15:09.087416 2026] [:error] [pid 47775:tid 47853] [client 44.247.9.38:60150] [client 44.247.9.38] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/site/.env"] [unique_id "aeP0Xbmztjlk9tsmoexqYQAAAIo"]
[Sun Apr 19 08:37:27.085379 2026] [:error] [pid 15693:tid 15699] [client 20.215.64.52:50744] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeQjx8NMD-ccazQlTskiCAAAAUM"]
[Sun Apr 19 08:37:27.595453 2026] [:error] [pid 47775:tid 47854] [client 20.215.64.52:30422] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeQjx7mztjlk9tsmoeyf2QAAAIs"]
[Sun Apr 19 08:37:28.104758 2026] [:error] [pid 15763:tid 15797] [client 20.215.64.52:50737] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeQjyLMXv1Y1THOoxaA9oAAAAgE"]
[Sun Apr 19 08:37:28.619784 2026] [:error] [pid 47775:tid 47864] [client 20.215.64.52:41811] [client 20.215.64.52] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeQjyLmztjlk9tsmoeyf3AAAAJU"]
[Sun Apr 19 13:51:17.504498 2026] [:error] [pid 15693:tid 15716] [client 222.127.94.123:4975] [client 222.127.94.123] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 222.127.94.123, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeRtVcNMD-ccazQlTsk5BQAAAVQ"]
[Sun Apr 19 13:51:17.509094 2026] [:error] [pid 15693:tid 15716] [client 222.127.94.123:4975] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 19 17:59:41.107654 2026] [:error] [pid 47886:tid 47890] [client 74.248.99.90:9206] File does not exist: /usr/local/apache/htdocs/suspended-page/file6.php
[Sun Apr 19 17:59:41.366112 2026] [:error] [pid 47886:tid 47889] [client 74.248.99.90:9206] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Sun Apr 19 17:59:41.629034 2026] [:error] [pid 47886:tid 47905] [client 74.248.99.90:9206] File does not exist: /usr/local/apache/htdocs/suspended-page/flox.php
[Sun Apr 19 17:59:41.890405 2026] [:error] [pid 47886:tid 47893] [client 74.248.99.90:9206] File does not exist: /usr/local/apache/htdocs/suspended-page/mff.php
[Sun Apr 19 17:59:42.152859 2026] [:error] [pid 47886:tid 47910] [client 74.248.99.90:9206] File does not exist: /usr/local/apache/htdocs/suspended-page/aq.php
[Sun Apr 19 17:59:42.414495 2026] [:error] [pid 47886:tid 47896] [client 74.248.99.90:9206] File does not exist: /usr/local/apache/htdocs/suspended-page/filemanger2.php
[Sun Apr 19 17:59:42.678304 2026] [:error] [pid 47886:tid 47888] [client 74.248.99.90:9206] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sun Apr 19 17:59:42.936762 2026] [:error] [pid 47886:tid 47901] [client 74.248.99.90:9206] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-vn1.php
[Sun Apr 19 17:59:43.195225 2026] [:error] [pid 47886:tid 47892] [client 74.248.99.90:9206] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Sun Apr 19 17:59:43.471996 2026] [:error] [pid 47886:tid 47890] [client 74.248.99.90:9206] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Sun Apr 19 17:59:43.727884 2026] [:error] [pid 47886:tid 47889] [client 74.248.99.90:9206] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "aeSnj0Se8yiyuPrD7yNbwAAAAME"]
[Sun Apr 19 17:59:45.039557 2026] [:error] [pid 47886:tid 47895] [client 74.248.99.90:9215] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "aeSnkUSe8yiyuPrD7yNbxAAAAMc"]
[Sun Apr 19 17:59:48.014612 2026] [:error] [pid 15760:tid 15788] [client 74.248.99.90:9198] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "aeSnlPSdD_XHQMJ_ISvJ9gAAAdQ"]
[Sun Apr 19 17:59:50.159081 2026] [:error] [pid 47886:tid 47898] [client 74.248.99.90:9208] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/nwflm.php"] [unique_id "aeSnlkSe8yiyuPrD7yNbxwAAAMo"]
[Sun Apr 19 17:59:52.420905 2026] [:error] [pid 15694:tid 15731] [client 74.248.99.90:9204] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeSnmLimB-jol1fwqAr4tAAAAYU"]
[Sun Apr 19 17:59:53.850780 2026] [:error] [pid 15764:tid 15826] [client 74.248.99.90:9180] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeSnmWLL_sqdSHoVp-TKwwAAAkA"]
[Sun Apr 19 17:59:56.026447 2026] [:error] [pid 15765:tid 15864] [client 74.248.99.90:9170] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeSnnPRqinw-W5EwQ77iNgAAAos"]
[Sun Apr 19 17:59:57.540886 2026] [:error] [pid 47886:tid 47906] [client 74.248.99.90:9160] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeSnnUSe8yiyuPrD7yNbzwAAANI"]
[Sun Apr 19 17:59:58.802047 2026] [:error] [pid 47772:tid 47805] [client 74.248.99.90:9213] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeSnnoc0L16cb4smAz9_vQAAABA"]
[Sun Apr 19 17:59:59.943163 2026] [:error] [pid 47772:tid 47806] [client 74.248.99.90:9092] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeSnn4c0L16cb4smAz9_wgAAABE"]
[Sun Apr 19 18:00:01.941844 2026] [:error] [pid 47775:tid 47865] [client 74.248.99.90:9164] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeSnobmztjlk9tsmoez0_QAAAJY"]
[Sun Apr 19 18:00:02.927029 2026] [:error] [pid 47775:tid 47851] [client 74.248.99.90:9094] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeSnormztjlk9tsmoez0_gAAAIg"]
[Sun Apr 19 18:00:03.995259 2026] [:error] [pid 15764:tid 15831] [client 74.248.99.90:9156] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeSno2LL_sqdSHoVp-TKzgAAAkU"]
[Sun Apr 19 18:00:05.030072 2026] [:error] [pid 15764:tid 15828] [client 74.248.99.90:9089] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeSnpWLL_sqdSHoVp-TK0gAAAkI"]
[Sun Apr 19 18:00:06.302909 2026] [:error] [pid 47775:tid 47848] [client 74.248.99.90:9095] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeSnprmztjlk9tsmoez0_wAAAIU"]
[Sun Apr 19 18:00:07.614481 2026] [:error] [pid 15763:tid 15816] [client 74.248.99.90:9109] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeSnp7MXv1Y1THOoxaDGwQAAAhQ"]
[Sun Apr 19 18:00:09.192412 2026] [:error] [pid 15764:tid 15843] [client 74.248.99.90:9195] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeSnqWLL_sqdSHoVp-TK2AAAAlE"]
[Sun Apr 19 18:00:10.985267 2026] [:error] [pid 15764:tid 15839] [client 74.248.99.90:9108] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeSnqmLL_sqdSHoVp-TK3QAAAk0"]
[Sun Apr 19 18:00:13.161207 2026] [:error] [pid 47773:tid 47819] [client 74.248.99.90:9141] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeSnreiBHdnCJDuPq9AamQAAAEM"]
[Sun Apr 19 18:00:14.210044 2026] [:error] [pid 15765:tid 15858] [client 74.248.99.90:9106] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeSnrvRqinw-W5EwQ77iOQAAAoU"]
[Sun Apr 19 18:00:15.218904 2026] [:error] [pid 47773:tid 47829] [client 74.248.99.90:9155] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeSnr-iBHdnCJDuPq9AanQAAAE0"]
[Sun Apr 19 18:00:16.489299 2026] [:error] [pid 15694:tid 15735] [client 74.248.99.90:9193] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeSnsLimB-jol1fwqAr4ugAAAYk"]
[Sun Apr 19 18:00:17.442383 2026] [:error] [pid 15764:tid 15827] [client 74.248.99.90:9105] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeSnsWLL_sqdSHoVp-TK5QAAAkE"]
[Sun Apr 19 18:00:18.570277 2026] [:error] [pid 15763:tid 15810] [client 74.248.99.90:9179] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "aeSnsrMXv1Y1THOoxaDGzwAAAg4"]
[Sun Apr 19 18:00:19.938476 2026] [:error] [pid 47773:tid 47832] [client 74.248.99.90:9139] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeSns-iBHdnCJDuPq9AaoQAAAFA"]
[Sun Apr 19 18:00:22.350722 2026] [:error] [pid 15765:tid 15864] [client 74.248.99.90:9181] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeSntvRqinw-W5EwQ77iPAAAAos"]
[Sun Apr 19 18:00:23.792199 2026] [:error] [pid 15765:tid 15859] [client 74.248.99.90:9182] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeSnt_Rqinw-W5EwQ77iPgAAAoY"]
[Sun Apr 19 18:00:24.947393 2026] [:error] [pid 47772:tid 47795] [client 74.248.99.90:9196] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeSnuIc0L16cb4smAz9_zwAAAAY"]
[Sun Apr 19 18:00:26.540878 2026] [:error] [pid 15764:tid 15846] [client 74.248.99.90:9189] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/water.php"] [unique_id "aeSnumLL_sqdSHoVp-TK6gAAAlQ"]
[Sun Apr 19 18:00:27.659127 2026] [:error] [pid 47886:tid 47893] [client 74.248.99.90:9030] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/water.php"] [unique_id "aeSnu0Se8yiyuPrD7yNb2QAAAMU"]
[Sun Apr 19 18:00:29.116376 2026] [:error] [pid 15764:tid 15827] [client 74.248.99.90:9209] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/water.php"] [unique_id "aeSnvWLL_sqdSHoVp-TK8AAAAkE"]
[Sun Apr 19 18:00:30.819829 2026] [:error] [pid 47886:tid 47904] [client 74.248.99.90:9185] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/water.php"] [unique_id "aeSnvkSe8yiyuPrD7yNb3AAAANA"]
[Sun Apr 19 18:00:32.372199 2026] [:error] [pid 15764:tid 15844] [client 74.248.99.90:9171] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "aeSnwGLL_sqdSHoVp-TK8wAAAlI"]
[Sun Apr 19 18:00:33.753719 2026] [:error] [pid 47773:tid 47822] [client 74.248.99.90:9169] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "aeSnweiBHdnCJDuPq9AaqwAAAEY"]
[Sun Apr 19 18:00:35.441137 2026] [:error] [pid 15760:tid 15785] [client 74.248.99.90:9168] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "aeSnw_SdD_XHQMJ_ISvKGwAAAdE"]
[Sun Apr 19 18:00:36.407649 2026] [:error] [pid 15693:tid 15717] [client 74.248.99.90:9101] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "aeSnxMNMD-ccazQlTslIcQAAAVU"]
[Sun Apr 19 18:00:37.569289 2026] [:error] [pid 15763:tid 15805] [client 74.248.99.90:9143] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeSnxbMXv1Y1THOoxaDG8QAAAgk"]
[Sun Apr 19 18:00:38.947811 2026] [:error] [pid 15763:tid 15819] [client 74.248.99.90:9112] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeSnxrMXv1Y1THOoxaDG9AAAAhc"]
[Sun Apr 19 18:00:41.094347 2026] [:error] [pid 15694:tid 15751] [client 74.248.99.90:9093] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeSnybimB-jol1fwqAr4yAAAAZg"]
[Sun Apr 19 18:00:43.377402 2026] [:error] [pid 47772:tid 47805] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Sun Apr 19 18:00:43.636373 2026] [:error] [pid 47772:tid 47790] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/wert.php
[Sun Apr 19 18:00:43.908144 2026] [:error] [pid 47772:tid 47796] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Sun Apr 19 18:00:44.178383 2026] [:error] [pid 47772:tid 47797] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sun Apr 19 18:00:44.438727 2026] [:error] [pid 47772:tid 47803] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/oij98gy.php
[Sun Apr 19 18:00:44.698674 2026] [:error] [pid 47772:tid 47793] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sun Apr 19 18:00:44.958642 2026] [:error] [pid 47772:tid 47810] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/turkshell.php
[Sun Apr 19 18:00:45.217828 2026] [:error] [pid 47772:tid 47802] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/tea.php
[Sun Apr 19 18:00:45.477416 2026] [:error] [pid 47772:tid 47804] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/seo.php
[Sun Apr 19 18:00:45.997741 2026] [:error] [pid 47772:tid 47798] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Sun Apr 19 18:00:46.256949 2026] [:error] [pid 47772:tid 47789] [client 74.248.99.90:9091] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Apr 19 18:00:46.649951 2026] [:error] [pid 47772:tid 47808] [client 74.248.99.90:9091] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeSnzoc0L16cb4smAz9_5gAAABM"]
[Sun Apr 19 18:00:48.054223 2026] [:error] [pid 47775:tid 47860] [client 74.248.99.90:9191] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeSn0Lmztjlk9tsmoez1CAAAAJE"]
[Sun Apr 19 18:00:50.162715 2026] [:error] [pid 15693:tid 15697] [client 74.248.99.90:9107] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeSn0sNMD-ccazQlTslIdQAAAUE"]
[Sun Apr 19 18:00:52.516912 2026] [:error] [pid 15764:tid 15828] [client 74.248.99.90:9176] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeSn1GLL_sqdSHoVp-TLAQAAAkI"]
[Sun Apr 19 18:00:54.927014 2026] [:error] [pid 47775:tid 47861] [client 74.248.99.90:9175] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeSn1rmztjlk9tsmoez1DQAAAJI"]
[Sun Apr 19 18:00:57.947761 2026] [:error] [pid 47775:tid 47867] [client 74.248.99.90:9120] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeSn2bmztjlk9tsmoez1DwAAAJg"]
[Sun Apr 19 18:01:01.450152 2026] [:error] [pid 47772:tid 47800] [client 74.248.99.90:9183] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeSn3Yc0L16cb4smAz9_6gAAAAs"]
[Sun Apr 19 18:01:03.429988 2026] [:error] [pid 47772:tid 47793] [client 74.248.99.90:9048] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeSn34c0L16cb4smAz9_7AAAAAQ"]
[Sun Apr 19 18:01:06.190125 2026] [:error] [pid 47775:tid 47863] [client 74.248.99.90:9040] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeSn4rmztjlk9tsmoez1EgAAAJQ"]
[Sun Apr 19 18:01:09.364647 2026] [:error] [pid 15763:tid 15796] [client 74.248.99.90:9165] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeSn5bMXv1Y1THOoxaDHBAAAAgA"]
[Sun Apr 19 18:01:10.683187 2026] [:error] [pid 15765:tid 15857] [client 74.248.99.90:9214] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeSn5vRqinw-W5EwQ77iSQAAAoQ"]
[Sun Apr 19 18:01:13.161741 2026] [:error] [pid 15764:tid 15828] [client 74.248.99.90:9088] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeSn6WLL_sqdSHoVp-TLGgAAAkI"]
[Sun Apr 19 18:01:14.695323 2026] [:error] [pid 15764:tid 15844] [client 74.248.99.90:9119] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeSn6mLL_sqdSHoVp-TLIAAAAlI"]
[Sun Apr 19 18:01:15.583707 2026] [:error] [pid 15763:tid 15817] [client 74.248.99.90:9194] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeSn67MXv1Y1THOoxaDHCQAAAhU"]
[Sun Apr 19 18:01:16.793064 2026] [:error] [pid 15765:tid 15858] [client 74.248.99.90:9103] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeSn7PRqinw-W5EwQ77iSwAAAoU"]
[Sun Apr 19 18:01:18.553245 2026] [:error] [pid 15764:tid 15839] [client 74.248.99.90:9200] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeSn7mLL_sqdSHoVp-TLLgAAAk0"]
[Sun Apr 19 18:01:20.030079 2026] [:error] [pid 47773:tid 47830] [client 74.248.99.90:9167] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeSn8OiBHdnCJDuPq9AaygAAAE4"]
[Sun Apr 19 18:01:21.416680 2026] [:error] [pid 15763:tid 15804] [client 74.248.99.90:9116] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeSn8bMXv1Y1THOoxaDHDQAAAgg"]
[Sun Apr 19 18:01:23.403887 2026] [:error] [pid 15763:tid 15803] [client 74.248.99.90:9129] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeSn87MXv1Y1THOoxaDHEAAAAgc"]
[Sun Apr 19 18:01:25.350810 2026] [:error] [pid 15760:tid 15771] [client 74.248.99.90:9123] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeSn9fSdD_XHQMJ_ISvKUQAAAcM"]
[Sun Apr 19 18:01:26.900549 2026] [:error] [pid 15694:tid 15735] [client 74.248.99.90:9163] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeSn9rimB-jol1fwqAr41AAAAYk"]
[Sun Apr 19 18:01:31.677570 2026] [:error] [pid 15763:tid 15796] [client 74.248.99.90:9122] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeSn-7MXv1Y1THOoxaDHHAAAAgA"]
[Sun Apr 19 18:01:33.903561 2026] [:error] [pid 47772:tid 47810] [client 74.248.99.90:9212] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeSn_Yc0L16cb4smAz-AGAAAABU"]
[Sun Apr 19 18:01:37.270041 2026] [:error] [pid 15693:tid 15719] [client 74.248.99.90:9190] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeSoAcNMD-ccazQlTslIfgAAAVc"]
[Sun Apr 19 18:01:40.720251 2026] [:error] [pid 15693:tid 15715] [client 74.248.99.90:9172] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeSoBMNMD-ccazQlTslIgQAAAVM"]
[Sun Apr 19 18:01:42.123367 2026] [:error] [pid 47773:tid 47827] [client 74.248.99.90:9098] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeSoBuiBHdnCJDuPq9Aa1wAAAEs"]
[Sun Apr 19 18:01:43.411507 2026] [:error] [pid 47772:tid 47789] [client 74.248.99.90:9201] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeSoB4c0L16cb4smAz-AJwAAAAA"]
[Sun Apr 19 18:01:44.924779 2026] [:error] [pid 47772:tid 47795] [client 74.248.99.90:9063] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeSoCIc0L16cb4smAz-ALAAAAAY"]
[Sun Apr 19 18:01:46.255863 2026] [:error] [pid 15764:tid 15848] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Sun Apr 19 18:01:46.516417 2026] [:error] [pid 15764:tid 15847] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/.mopj.php
[Sun Apr 19 18:01:46.774648 2026] [:error] [pid 15764:tid 15839] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sun Apr 19 18:01:47.045654 2026] [:error] [pid 15764:tid 15843] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/nano.php
[Sun Apr 19 18:01:47.306686 2026] [:error] [pid 15764:tid 15827] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Sun Apr 19 18:01:47.566980 2026] [:error] [pid 15764:tid 15829] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Sun Apr 19 18:01:48.479546 2026] [:error] [pid 15764:tid 15833] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Sun Apr 19 18:01:48.737650 2026] [:error] [pid 15764:tid 15850] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Sun Apr 19 18:01:48.998103 2026] [:error] [pid 15764:tid 15834] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Sun Apr 19 18:01:49.257763 2026] [:error] [pid 15764:tid 15838] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/byrgo.php
[Sun Apr 19 18:01:49.520335 2026] [:error] [pid 15764:tid 15842] [client 74.248.99.90:9153] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Sun Apr 19 18:01:49.775978 2026] [:error] [pid 15764:tid 15840] [client 74.248.99.90:9153] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeSoDWLL_sqdSHoVp-TLSQAAAk4"]
[Sun Apr 19 18:01:51.372405 2026] [:error] [pid 15694:tid 15741] [client 74.248.99.90:9126] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeSoD7imB-jol1fwqAr43AAAAY8"]
[Sun Apr 19 18:01:55.520990 2026] [:error] [pid 15765:tid 15861] [client 74.248.99.90:9128] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeSoE_Rqinw-W5EwQ77iXAAAAog"]
[Sun Apr 19 18:01:56.478104 2026] [:error] [pid 47772:tid 47797] [client 74.248.99.90:9024] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeSoFIc0L16cb4smAz-ALQAAAAg"]
[Sun Apr 19 18:01:57.656169 2026] [:error] [pid 15765:tid 15871] [client 74.248.99.90:9113] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeSoFfRqinw-W5EwQ77iXQAAApI"]
[Sun Apr 19 18:01:59.160544 2026] [:error] [pid 47775:tid 47865] [client 74.248.99.90:9097] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeSoF7mztjlk9tsmoez1LAAAAJY"]
[Sun Apr 19 18:02:01.661027 2026] [:error] [pid 15764:tid 15844] [client 74.248.99.90:9104] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeSoGWLL_sqdSHoVp-TLVgAAAlI"]
[Sun Apr 19 18:02:03.389512 2026] [:error] [pid 15765:tid 15852] [client 74.248.99.90:9059] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeSoG_Rqinw-W5EwQ77iXwAAAoA"]
[Sun Apr 19 18:02:05.004574 2026] [:error] [pid 47775:tid 47867] [client 74.248.99.90:9174] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeSoHbmztjlk9tsmoez1MgAAAJg"]
[Sun Apr 19 18:02:06.278405 2026] [:error] [pid 15764:tid 15831] [client 74.248.99.90:9186] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeSoHmLL_sqdSHoVp-TLWQAAAkU"]
[Sun Apr 19 18:02:08.149099 2026] [:error] [pid 47775:tid 47860] [client 74.248.99.90:9154] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeSoILmztjlk9tsmoez1NQAAAJE"]
[Sun Apr 19 18:02:11.125441 2026] [:error] [pid 15764:tid 15851] [client 74.248.99.90:9067] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeSoI2LL_sqdSHoVp-TLYgAAAlg"]
[Sun Apr 19 18:02:14.275151 2026] [:error] [pid 15765:tid 15869] [client 74.248.99.90:9065] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeSoJvRqinw-W5EwQ77iYQAAApA"]
[Sun Apr 19 18:02:17.576568 2026] [:error] [pid 15764:tid 15842] [client 74.248.99.90:9099] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeSoKWLL_sqdSHoVp-TLbAAAAlA"]
[Sun Apr 19 18:02:18.902347 2026] [:error] [pid 15760:tid 15773] [client 74.248.99.90:9134] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeSoKvSdD_XHQMJ_ISvKZgAAAcU"]
[Sun Apr 19 18:02:19.964225 2026] [:error] [pid 15764:tid 15839] [client 74.248.99.90:9038] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeSoK2LL_sqdSHoVp-TLbwAAAk0"]
[Sun Apr 19 18:02:21.008273 2026] [:error] [pid 15760:tid 15785] [client 74.248.99.90:9133] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "aeSoLfSdD_XHQMJ_ISvKagAAAdE"]
[Sun Apr 19 18:02:22.504116 2026] [:error] [pid 47773:tid 47822] [client 74.248.99.90:9149] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "aeSoLuiBHdnCJDuPq9Aa8AAAAEY"]
[Sun Apr 19 18:02:23.633161 2026] [:error] [pid 47772:tid 47793] [client 74.248.99.90:9166] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "aeSoL4c0L16cb4smAz-AQAAAAAQ"]
[Sun Apr 19 18:02:24.704135 2026] [:error] [pid 15760:tid 15768] [client 74.248.99.90:9210] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zample.php"] [unique_id "aeSoMPSdD_XHQMJ_ISvKcgAAAcA"]
[Sun Apr 19 18:02:25.844353 2026] [:error] [pid 47772:tid 47808] [client 74.248.99.90:9140] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeSoMYc0L16cb4smAz-AQwAAABM"]
[Sun Apr 19 18:02:26.829831 2026] [:error] [pid 15765:tid 15861] [client 74.248.99.90:9037] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeSoMvRqinw-W5EwQ77iZQAAAog"]
[Sun Apr 19 18:02:28.038675 2026] [:error] [pid 47772:tid 47802] [client 74.248.99.90:9133] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeSoNIc0L16cb4smAz-ARgAAAA0"]
[Sun Apr 19 18:02:29.592559 2026] [:error] [pid 15764:tid 15836] [client 74.248.99.90:9090] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeSoNWLL_sqdSHoVp-TLdgAAAko"]
[Sun Apr 19 18:02:30.766883 2026] [:error] [pid 47773:tid 47827] [client 74.248.99.90:9114] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeSoNuiBHdnCJDuPq9Aa_AAAAEs"]
[Sun Apr 19 18:02:33.066489 2026] [:error] [pid 15763:tid 15796] [client 74.248.99.90:9147] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeSoObMXv1Y1THOoxaDHxAAAAgA"]
[Sun Apr 19 18:02:34.156282 2026] [:error] [pid 15764:tid 15829] [client 74.248.99.90:9061] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeSoOmLL_sqdSHoVp-TLfgAAAkM"]
[Sun Apr 19 18:02:35.423938 2026] [:error] [pid 15760:tid 15781] [client 74.248.99.90:9064] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeSoO_SdD_XHQMJ_ISvKtwAAAc0"]
[Sun Apr 19 18:02:37.623286 2026] [:error] [pid 15694:tid 15743] [client 74.248.99.90:9044] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeSoPbimB-jol1fwqAr45QAAAZE"]
[Sun Apr 19 18:02:38.518803 2026] [:error] [pid 47775:tid 47867] [client 74.248.99.90:9161] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeSoPrmztjlk9tsmoez1QwAAAJg"]
[Sun Apr 19 18:02:39.735474 2026] [:error] [pid 15764:tid 15841] [client 74.248.99.90:9192] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeSoP2LL_sqdSHoVp-TLhQAAAk8"]
[Sun Apr 19 18:02:41.637752 2026] [:error] [pid 47772:tid 47798] [client 74.248.99.90:9117] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeSoQYc0L16cb4smAz-ATgAAAAk"]
[Sun Apr 19 18:02:43.541065 2026] [:error] [pid 15765:tid 15863] [client 74.248.99.90:9070] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeSoQ_Rqinw-W5EwQ77icQAAAoo"]
[Sun Apr 19 18:02:44.490909 2026] [:error] [pid 47773:tid 47839] [client 74.248.99.90:9121] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeSoROiBHdnCJDuPq9AbGwAAAFc"]
[Sun Apr 19 18:02:45.972279 2026] [:error] [pid 47886:tid 47910] [client 74.248.99.90:9135] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeSoRUSe8yiyuPrD7yNcCwAAANY"]
[Sun Apr 19 18:02:47.228619 2026] [:error] [pid 47773:tid 47823] [client 74.248.99.90:9029] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeSoR-iBHdnCJDuPq9AbLAAAAEc"]
[Sun Apr 19 18:02:48.819542 2026] [:error] [pid 15760:tid 15771] [client 74.248.99.90:9197] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeSoSPSdD_XHQMJ_ISvK1AAAAcM"]
[Sun Apr 19 18:02:51.111253 2026] [:error] [pid 15764:tid 15826] [client 74.248.99.90:9076] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Sun Apr 19 18:02:52.573078 2026] [:error] [pid 15764:tid 15826] [client 74.248.99.90:9076] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sun Apr 19 18:02:52.837674 2026] [:error] [pid 15764:tid 15831] [client 74.248.99.90:9076] File does not exist: /usr/local/apache/htdocs/suspended-page/sf.php
[Sun Apr 19 18:02:53.095474 2026] [:error] [pid 15764:tid 15833] [client 74.248.99.90:9076] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Sun Apr 19 18:02:53.354352 2026] [:error] [pid 15764:tid 15834] [client 74.248.99.90:9076] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Sun Apr 19 18:02:53.613194 2026] [:error] [pid 15764:tid 15837] [client 74.248.99.90:9076] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Sun Apr 19 18:02:53.876351 2026] [:error] [pid 15764:tid 15832] [client 74.248.99.90:9076] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sun Apr 19 18:02:54.134535 2026] [:error] [pid 15764:tid 15843] [client 74.248.99.90:9076] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sun Apr 19 18:02:54.402471 2026] [:error] [pid 15764:tid 15828] [client 74.248.99.90:9076] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Apr 19 18:02:55.309431 2026] [:error] [pid 15764:tid 15839] [client 74.248.99.90:9076] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sun Apr 19 18:02:55.564483 2026] [:error] [pid 15764:tid 15830] [client 74.248.99.90:9076] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeSoT2LL_sqdSHoVp-TLpwAAAkQ"]
[Sun Apr 19 18:02:57.590692 2026] [:error] [pid 15760:tid 15771] [client 74.248.99.90:9069] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeSoUfSdD_XHQMJ_ISvK4AAAAcM"]
[Sun Apr 19 18:02:59.338100 2026] [:error] [pid 15764:tid 15834] [client 74.248.99.90:9115] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeSoU2LL_sqdSHoVp-TLqwAAAkg"]
[Sun Apr 19 18:03:00.761492 2026] [:error] [pid 15694:tid 15747] [client 74.248.99.90:9027] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeSoVLimB-jol1fwqAr47QAAAZU"]
[Sun Apr 19 18:03:02.390646 2026] [:error] [pid 15764:tid 15845] [client 74.248.99.90:8991] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeSoVmLL_sqdSHoVp-TLsQAAAlM"]
[Sun Apr 19 18:03:03.878624 2026] [:error] [pid 47773:tid 47833] [client 74.248.99.90:9045] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeSoV-iBHdnCJDuPq9AbMgAAAFE"]
[Sun Apr 19 18:03:04.844987 2026] [:error] [pid 15694:tid 15742] [client 74.248.99.90:9159] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeSoWLimB-jol1fwqAr47wAAAZA"]
[Sun Apr 19 18:03:06.190029 2026] [:error] [pid 15764:tid 15836] [client 74.248.99.90:9137] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeSoWmLL_sqdSHoVp-TLtAAAAko"]
[Sun Apr 19 18:03:08.038415 2026] [:error] [pid 15760:tid 15783] [client 74.248.99.90:9011] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeSoXPSdD_XHQMJ_ISvK7gAAAc8"]
[Sun Apr 19 18:03:10.076881 2026] [:error] [pid 15765:tid 15872] [client 74.248.99.90:9124] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeSoXvRqinw-W5EwQ77iugAAApM"]
[Sun Apr 19 18:03:11.534453 2026] [:error] [pid 47886:tid 47900] [client 74.248.99.90:9032] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeSoX0Se8yiyuPrD7yNcFQAAAMw"]
[Sun Apr 19 18:03:13.106483 2026] [:error] [pid 15760:tid 15785] [client 74.248.99.90:9187] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeSoYfSdD_XHQMJ_ISvK-wAAAdE"]
[Sun Apr 19 18:03:14.236708 2026] [:error] [pid 47773:tid 47831] [client 74.248.99.90:8986] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeSoYuiBHdnCJDuPq9AbNwAAAE8"]
[Sun Apr 19 18:03:15.777165 2026] [:error] [pid 15764:tid 15840] [client 74.248.99.90:9050] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeSoY2LL_sqdSHoVp-TLuAAAAk4"]
[Sun Apr 19 18:03:17.530629 2026] [:error] [pid 15765:tid 15864] [client 74.248.99.90:8974] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeSoZfRqinw-W5EwQ77izAAAAos"]
[Sun Apr 19 18:03:20.319674 2026] [:error] [pid 47772:tid 47810] [client 74.248.99.90:9188] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeSoaIc0L16cb4smAz-AZwAAABU"]
[Sun Apr 19 18:03:21.649051 2026] [:error] [pid 47772:tid 47790] [client 74.248.99.90:9078] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeSoaYc0L16cb4smAz-AagAAAAE"]
[Sun Apr 19 18:03:23.143426 2026] [:error] [pid 15760:tid 15786] [client 74.248.99.90:9138] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeSoa_SdD_XHQMJ_ISvLBQAAAdI"]
[Sun Apr 19 18:03:23.900783 2026] [:error] [pid 15763:tid 15803] [client 74.248.99.90:8963] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeSoa7MXv1Y1THOoxaDH3AAAAgc"]
[Sun Apr 19 18:03:24.529306 2026] [:error] [pid 47886:tid 47901] [client 74.248.99.90:9062] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeSobESe8yiyuPrD7yNcFgAAAM0"]
[Sun Apr 19 18:03:25.237317 2026] [:error] [pid 47772:tid 47799] [client 74.248.99.90:9026] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeSobYc0L16cb4smAz-AdQAAAAo"]
[Sun Apr 19 18:03:26.335701 2026] [:error] [pid 15765:tid 15860] [client 74.248.99.90:9102] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeSobvRqinw-W5EwQ77i0AAAAoc"]
[Sun Apr 19 18:03:27.578063 2026] [:error] [pid 15763:tid 15802] [client 74.248.99.90:9146] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeSob7MXv1Y1THOoxaDH3gAAAgY"]
[Sun Apr 19 18:03:28.412560 2026] [:error] [pid 15764:tid 15837] [client 74.248.99.90:8968] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeSocGLL_sqdSHoVp-TLxQAAAks"]
[Sun Apr 19 18:03:29.881152 2026] [:error] [pid 15764:tid 15843] [client 74.248.99.90:9035] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeSocWLL_sqdSHoVp-TLxgAAAlE"]
[Sun Apr 19 18:03:30.717148 2026] [:error] [pid 47886:tid 47893] [client 74.248.99.90:9151] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeSockSe8yiyuPrD7yNcJAAAAMU"]
[Sun Apr 19 18:03:31.440906 2026] [:error] [pid 15760:tid 15774] [client 74.248.99.90:9125] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeSoc_SdD_XHQMJ_ISvLDAAAAcY"]
[Sun Apr 19 18:03:32.359036 2026] [:error] [pid 15763:tid 15804] [client 74.248.99.90:9056] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeSodLMXv1Y1THOoxaDH4gAAAgg"]
[Sun Apr 19 18:03:33.120997 2026] [:error] [pid 15760:tid 15771] [client 74.248.99.90:9074] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeSodfSdD_XHQMJ_ISvLDQAAAcM"]
[Sun Apr 19 18:03:34.015959 2026] [:error] [pid 15760:tid 15784] [client 74.248.99.90:9158] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeSodvSdD_XHQMJ_ISvLEAAAAdA"]
[Sun Apr 19 18:03:35.013946 2026] [:error] [pid 47772:tid 47798] [client 74.248.99.90:9177] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeSod4c0L16cb4smAz-AgwAAAAk"]
[Sun Apr 19 18:03:36.055384 2026] [:error] [pid 15763:tid 15811] [client 74.248.99.90:8982] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeSoeLMXv1Y1THOoxaDH5AAAAg8"]
[Sun Apr 19 18:03:37.195468 2026] [:error] [pid 47772:tid 47793] [client 74.248.99.90:9058] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "aeSoeYc0L16cb4smAz-AiAAAAAQ"]
[Sun Apr 19 18:03:38.867641 2026] [:error] [pid 15764:tid 15832] [client 74.248.99.90:9145] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "aeSoemLL_sqdSHoVp-TL1gAAAkY"]
[Sun Apr 19 18:03:39.822978 2026] [:error] [pid 15763:tid 15812] [client 74.248.99.90:9086] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "aeSoe7MXv1Y1THOoxaDH5QAAAhA"]
[Sun Apr 19 18:03:40.990621 2026] [:error] [pid 15694:tid 15724] [client 74.248.99.90:9199] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bless4.php"] [unique_id "aeSofLimB-jol1fwqAr4-AAAAYE"]
[Sun Apr 19 18:03:41.875966 2026] [:error] [pid 15760:tid 15788] [client 74.248.99.90:9207] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeSoffSdD_XHQMJ_ISvLEwAAAdQ"]
[Sun Apr 19 18:03:42.814225 2026] [:error] [pid 15764:tid 15837] [client 74.248.99.90:9005] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeSofmLL_sqdSHoVp-TL6gAAAks"]
[Sun Apr 19 18:03:43.973170 2026] [:error] [pid 15763:tid 15800] [client 74.248.99.90:8987] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeSof7MXv1Y1THOoxaDH6QAAAgQ"]
[Sun Apr 19 18:03:45.260633 2026] [:error] [pid 15693:tid 15710] [client 74.248.99.90:8983] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeSogcNMD-ccazQlTslIlgAAAU4"]
[Sun Apr 19 18:03:46.157059 2026] [:error] [pid 47886:tid 47897] [client 74.248.99.90:9130] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeSogkSe8yiyuPrD7yNcKAAAAMk"]
[Sun Apr 19 18:03:47.156338 2026] [:error] [pid 47772:tid 47792] [client 74.248.99.90:8977] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeSog4c0L16cb4smAz-AlQAAAAM"]
[Sun Apr 19 18:03:47.858940 2026] [:error] [pid 15694:tid 15751] [client 74.248.99.90:9127] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeSog7imB-jol1fwqAr4-wAAAZg"]
[Sun Apr 19 18:03:48.986787 2026] [:error] [pid 15763:tid 15819] [client 74.248.99.90:9142] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeSohLMXv1Y1THOoxaDH6gAAAhc"]
[Sun Apr 19 18:03:49.939376 2026] [:error] [pid 47773:tid 47831] [client 74.248.99.90:9046] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeSoheiBHdnCJDuPq9AbVwAAAE8"]
[Sun Apr 19 18:03:50.846803 2026] [:error] [pid 47773:tid 47837] [client 74.248.99.90:9014] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeSohuiBHdnCJDuPq9AbWQAAAFU"]
[Sun Apr 19 18:03:52.179085 2026] [:error] [pid 15764:tid 15850] [client 74.248.99.90:9178] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeSoiGLL_sqdSHoVp-TMEAAAAlc"]
[Sun Apr 19 18:03:53.943193 2026] [:error] [pid 15760:tid 15790] [client 74.248.99.90:9051] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeSoifSdD_XHQMJ_ISvLGAAAAdY"]
[Sun Apr 19 18:03:56.972798 2026] [:error] [pid 15763:tid 15797] [client 74.248.99.90:8980] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Sun Apr 19 18:03:57.245638 2026] [:error] [pid 15763:tid 15819] [client 74.248.99.90:8980] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sun Apr 19 18:03:57.768941 2026] [:error] [pid 15763:tid 15809] [client 74.248.99.90:8980] File does not exist: /usr/local/apache/htdocs/suspended-page/tinyfilemanager.php
[Sun Apr 19 18:03:58.031118 2026] [:error] [pid 15763:tid 15813] [client 74.248.99.90:8980] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Sun Apr 19 18:03:58.290639 2026] [:error] [pid 15763:tid 15815] [client 74.248.99.90:8980] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Sun Apr 19 18:03:58.560728 2026] [:error] [pid 15763:tid 15798] [client 74.248.99.90:8980] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sun Apr 19 18:04:00.022397 2026] [:error] [pid 15763:tid 15814] [client 74.248.99.90:8980] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sun Apr 19 18:04:00.284809 2026] [:error] [pid 15763:tid 15799] [client 74.248.99.90:8980] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sun Apr 19 18:04:00.544333 2026] [:error] [pid 15763:tid 15803] [client 74.248.99.90:8980] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeSokLMXv1Y1THOoxaDIAwAAAgc"]
[Sun Apr 19 18:04:02.231497 2026] [:error] [pid 15760:tid 15788] [client 74.248.99.90:8964] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeSokvSdD_XHQMJ_ISvLHAAAAdQ"]
[Sun Apr 19 18:04:03.556199 2026] [:error] [pid 15764:tid 15851] [client 74.248.99.90:9041] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeSok2LL_sqdSHoVp-TMOwAAAlg"]
[Sun Apr 19 18:04:04.651391 2026] [:error] [pid 15760:tid 15789] [client 74.248.99.90:9021] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeSolPSdD_XHQMJ_ISvLJwAAAdU"]
[Sun Apr 19 18:04:05.320400 2026] [:error] [pid 15763:tid 15813] [client 74.248.99.90:9052] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeSolbMXv1Y1THOoxaDIBgAAAhE"]
[Sun Apr 19 18:04:06.651430 2026] [:error] [pid 15694:tid 15736] [client 74.248.99.90:9053] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeSolrimB-jol1fwqAr5CgAAAYo"]
[Sun Apr 19 18:04:07.471755 2026] [:error] [pid 15765:tid 15868] [client 74.248.99.90:9205] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeSol_Rqinw-W5EwQ77i2wAAAo8"]
[Sun Apr 19 18:04:08.636813 2026] [:error] [pid 15760:tid 15769] [client 74.248.99.90:8967] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeSomPSdD_XHQMJ_ISvLOAAAAcE"]
[Sun Apr 19 18:04:09.662957 2026] [:error] [pid 15764:tid 15845] [client 74.248.99.90:8970] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeSomWLL_sqdSHoVp-TMYQAAAlM"]
[Sun Apr 19 18:04:10.656173 2026] [:error] [pid 47773:tid 47822] [client 74.248.99.90:9092] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeSomuiBHdnCJDuPq9AbYgAAAEY"]
[Sun Apr 19 18:04:11.807225 2026] [:error] [pid 15693:tid 15715] [client 74.248.99.90:9208] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeSom8NMD-ccazQlTslIoQAAAVM"]
[Sun Apr 19 18:04:13.398780 2026] [:error] [pid 15760:tid 15790] [client 74.248.99.90:9047] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeSonfSdD_XHQMJ_ISvLRAAAAdY"]
[Sun Apr 19 18:04:14.577198 2026] [:error] [pid 47772:tid 47791] [client 74.248.99.90:9184] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeSonoc0L16cb4smAz-AogAAAAI"]
[Sun Apr 19 18:04:16.747113 2026] [:error] [pid 15765:tid 15858] [client 74.248.99.90:9162] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeSooPRqinw-W5EwQ77i4QAAAoU"]
[Sun Apr 19 18:04:18.378929 2026] [:error] [pid 15760:tid 15791] [client 74.248.99.90:9055] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeSoovSdD_XHQMJ_ISvLSQAAAdc"]
[Sun Apr 19 18:04:20.326935 2026] [:error] [pid 47886:tid 47904] [client 74.248.99.90:9108] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeSopESe8yiyuPrD7yNcPgAAANA"]
[Sun Apr 19 18:04:21.689330 2026] [:error] [pid 15764:tid 15833] [client 74.248.99.90:9215] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeSopWLL_sqdSHoVp-TMjwAAAkc"]
[Sun Apr 19 18:04:23.052315 2026] [:error] [pid 15763:tid 15804] [client 74.248.99.90:9083] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeSop7MXv1Y1THOoxaDIEAAAAgg"]
[Sun Apr 19 18:04:23.934081 2026] [:error] [pid 15765:tid 15861] [client 74.248.99.90:9039] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeSop_Rqinw-W5EwQ77i5AAAAog"]
[Sun Apr 19 18:04:25.009968 2026] [:error] [pid 15765:tid 15866] [client 74.248.99.90:9034] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeSoqfRqinw-W5EwQ77i5QAAAo0"]
[Sun Apr 19 18:04:26.992193 2026] [:error] [pid 47775:tid 47859] [client 74.248.99.90:9109] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeSoqrmztjlk9tsmoez1nQAAAJA"]
[Sun Apr 19 18:04:28.273894 2026] [:error] [pid 47773:tid 47817] [client 74.248.99.90:8902] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeSorOiBHdnCJDuPq9AbbgAAAEE"]
[Sun Apr 19 18:04:29.166013 2026] [:error] [pid 47773:tid 47824] [client 74.248.99.90:9084] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeSoreiBHdnCJDuPq9AbcgAAAEg"]
[Sun Apr 19 18:04:30.786402 2026] [:error] [pid 15693:tid 15704] [client 74.248.99.90:9157] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeSorsNMD-ccazQlTslIpwAAAUg"]
[Sun Apr 19 18:04:32.287577 2026] [:error] [pid 15763:tid 15815] [client 74.248.99.90:9089] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeSosLMXv1Y1THOoxaDIHAAAAhM"]
[Sun Apr 19 18:04:33.940952 2026] [:error] [pid 15765:tid 15862] [client 74.248.99.90:9203] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeSosfRqinw-W5EwQ77i6wAAAok"]
[Sun Apr 19 18:04:35.414724 2026] [:error] [pid 15764:tid 15831] [client 74.248.99.90:9071] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeSos2LL_sqdSHoVp-TMnAAAAkU"]
[Sun Apr 19 18:04:38.318553 2026] [:error] [pid 47886:tid 47898] [client 74.248.99.90:9179] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeSotkSe8yiyuPrD7yNcRwAAAMo"]
[Sun Apr 19 18:04:39.862210 2026] [:error] [pid 47773:tid 47832] [client 74.248.99.90:9170] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeSot-iBHdnCJDuPq9AbewAAAFA"]
[Sun Apr 19 18:04:41.213043 2026] [:error] [pid 15764:tid 15833] [client 74.248.99.90:9020] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeSouWLL_sqdSHoVp-TMpQAAAkc"]
[Sun Apr 19 18:04:42.787754 2026] [:error] [pid 15763:tid 15811] [client 74.248.99.90:9152] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeSourMXv1Y1THOoxaDIKgAAAg8"]
[Sun Apr 19 18:04:46.943843 2026] [:error] [pid 15763:tid 15815] [client 74.248.99.90:8997] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeSovrMXv1Y1THOoxaDILwAAAhM"]
[Sun Apr 19 18:04:48.264216 2026] [:error] [pid 15760:tid 15776] [client 74.248.99.90:9025] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeSowPSdD_XHQMJ_ISvLVQAAAcg"]
[Sun Apr 19 18:04:49.418407 2026] [:error] [pid 15760:tid 15792] [client 74.248.99.90:9112] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeSowfSdD_XHQMJ_ISvLWAAAAdg"]
[Sun Apr 19 18:04:50.662920 2026] [:error] [pid 15765:tid 15871] [client 74.248.99.90:9148] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeSowvRqinw-W5EwQ77i-AAAApI"]
[Sun Apr 19 18:04:51.538816 2026] [:error] [pid 15760:tid 15778] [client 74.248.99.90:9148] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeSow_SdD_XHQMJ_ISvLWQAAAco"]
[Sun Apr 19 18:04:52.257238 2026] [:error] [pid 15765:tid 15876] [client 74.248.99.90:9164] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeSoxPRqinw-W5EwQ77i_AAAApc"]
[Sun Apr 19 18:04:53.300826 2026] [:error] [pid 15765:tid 15852] [client 74.248.99.90:9068] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeSoxfRqinw-W5EwQ77i_QAAAoA"]
[Sun Apr 19 18:04:54.599014 2026] [:error] [pid 15763:tid 15805] [client 74.248.99.90:8994] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeSoxrMXv1Y1THOoxaDINQAAAgk"]
[Sun Apr 19 18:04:57.694083 2026] [:error] [pid 47773:tid 47829] [client 74.248.99.90:9198] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeSoyeiBHdnCJDuPq9AbiAAAAE0"]
[Sun Apr 19 18:04:59.375305 2026] [:error] [pid 15760:tid 15772] [client 74.248.99.90:9023] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeSoy_SdD_XHQMJ_ISvLdwAAAcQ"]
[Sun Apr 19 18:05:01.196138 2026] [:error] [pid 47773:tid 47823] [client 74.248.99.90:9185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sun Apr 19 18:05:02.028874 2026] [:error] [pid 47773:tid 47825] [client 74.248.99.90:9185] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Sun Apr 19 18:05:02.826530 2026] [:error] [pid 47773:tid 47838] [client 74.248.99.90:9185] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Sun Apr 19 18:05:03.084862 2026] [:error] [pid 47773:tid 47822] [client 74.248.99.90:9185] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sun Apr 19 18:05:03.600512 2026] [:error] [pid 47773:tid 47828] [client 74.248.99.90:9185] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Sun Apr 19 18:05:04.361485 2026] [:error] [pid 47773:tid 47829] [client 74.248.99.90:9185] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sun Apr 19 18:05:04.619336 2026] [:error] [pid 47773:tid 47824] [client 74.248.99.90:9185] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sun Apr 19 18:05:04.892469 2026] [:error] [pid 47773:tid 47836] [client 74.248.99.90:9185] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeSo0OiBHdnCJDuPq9AblwAAAFQ"]
[Sun Apr 19 18:05:06.413528 2026] [:error] [pid 15763:tid 15820] [client 74.248.99.90:9036] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeSo0rMXv1Y1THOoxaDIOwAAAhg"]
[Sun Apr 19 18:05:07.829786 2026] [:error] [pid 15763:tid 15804] [client 74.248.99.90:9091] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeSo07MXv1Y1THOoxaDIPgAAAgg"]
[Sun Apr 19 18:05:09.006671 2026] [:error] [pid 15760:tid 15771] [client 74.248.99.90:9175] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeSo1fSdD_XHQMJ_ISvLigAAAcM"]
[Sun Apr 19 18:05:10.734288 2026] [:error] [pid 15760:tid 15787] [client 74.248.99.90:9144] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeSo1vSdD_XHQMJ_ISvLkgAAAdM"]
[Sun Apr 19 18:05:12.408852 2026] [:error] [pid 47772:tid 47793] [client 74.248.99.90:9100] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeSo2Ic0L16cb4smAz-AvQAAAAQ"]
[Sun Apr 19 18:05:13.937131 2026] [:error] [pid 15760:tid 15779] [client 74.248.99.90:8905] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeSo2fSdD_XHQMJ_ISvLoQAAAcs"]
[Sun Apr 19 18:05:15.165075 2026] [:error] [pid 15760:tid 15778] [client 74.248.99.90:9095] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeSo2_SdD_XHQMJ_ISvLrAAAAco"]
[Sun Apr 19 18:05:16.993794 2026] [:error] [pid 15760:tid 15791] [client 74.248.99.90:9060] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeSo3PSdD_XHQMJ_ISvLuAAAAdc"]
[Sun Apr 19 18:05:18.020206 2026] [:error] [pid 47773:tid 47816] [client 74.248.99.90:9168] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeSo3uiBHdnCJDuPq9AbnAAAAEA"]
[Sun Apr 19 18:05:19.654102 2026] [:error] [pid 15760:tid 15776] [client 74.248.99.90:9180] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeSo3_SdD_XHQMJ_ISvLvwAAAcg"]
[Sun Apr 19 18:05:21.303728 2026] [:error] [pid 15763:tid 15806] [client 74.248.99.90:9073] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeSo4bMXv1Y1THOoxaDIQQAAAgo"]
[Sun Apr 19 18:05:23.127903 2026] [:error] [pid 15760:tid 15769] [client 74.248.99.90:9006] [client 74.248.99.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeSo4_SdD_XHQMJ_ISvLyAAAAcE"]
[Sun Apr 19 18:05:26.648100 2026] [:error] [pid 47775:tid 47844] [client 74.248.99.90:9181] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeSo5rmztjlk9tsmoez1rgAAAIE"]
[Sun Apr 19 18:05:28.922176 2026] [:error] [pid 15765:tid 15875] [client 74.248.99.90:9000] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeSo6PRqinw-W5EwQ77jAwAAApY"]
[Sun Apr 19 18:05:32.826880 2026] [:error] [pid 47773:tid 47817] [client 74.248.99.90:9129] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeSo7OiBHdnCJDuPq9AbpwAAAEE"]
[Sun Apr 19 18:05:34.818566 2026] [:error] [pid 15760:tid 15788] [client 74.248.99.90:9100] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeSo7vSdD_XHQMJ_ISvL3QAAAdQ"]
[Sun Apr 19 18:05:36.424705 2026] [:error] [pid 15765:tid 15873] [client 74.248.99.90:9204] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeSo8PRqinw-W5EwQ77jBgAAApQ"]
[Sun Apr 19 18:05:37.401446 2026] [:error] [pid 47773:tid 47831] [client 74.248.99.90:9155] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeSo8eiBHdnCJDuPq9AbqQAAAE8"]
[Sun Apr 19 18:05:39.180447 2026] [:error] [pid 15763:tid 15803] [client 74.248.99.90:9213] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeSo87MXv1Y1THOoxaDITgAAAgc"]
[Sun Apr 19 18:05:40.786127 2026] [:error] [pid 15763:tid 15810] [client 74.248.99.90:8969] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeSo9LMXv1Y1THOoxaDIUwAAAg4"]
[Sun Apr 19 18:05:41.751217 2026] [:error] [pid 15763:tid 15809] [client 74.248.99.90:9006] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeSo9bMXv1Y1THOoxaDIVwAAAg0"]
[Sun Apr 19 18:05:43.239945 2026] [:error] [pid 47775:tid 47857] [client 74.248.99.90:9119] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeSo97mztjlk9tsmoez1uAAAAI4"]
[Sun Apr 19 18:05:44.603434 2026] [:error] [pid 47772:tid 47806] [client 74.248.99.90:8985] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeSo-Ic0L16cb4smAz-BAgAAABE"]
[Sun Apr 19 18:05:45.402608 2026] [:error] [pid 15765:tid 15859] [client 74.248.99.90:8934] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "aeSo-fRqinw-W5EwQ77jCAAAAoY"]
[Sun Apr 19 18:05:46.334590 2026] [:error] [pid 47775:tid 47852] [client 74.248.99.90:9007] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "aeSo-rmztjlk9tsmoez1xwAAAIk"]
[Sun Apr 19 18:05:47.472791 2026] [:error] [pid 47775:tid 47858] [client 74.248.99.90:9212] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "aeSo-7mztjlk9tsmoez1zwAAAI8"]
[Sun Apr 19 18:05:48.713765 2026] [:error] [pid 47773:tid 47830] [client 74.248.99.90:9106] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/prv8.php"] [unique_id "aeSo_OiBHdnCJDuPq9AbrgAAAE4"]
[Sun Apr 19 18:05:50.164961 2026] [:error] [pid 47886:tid 47893] [client 74.248.99.90:9214] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeSo_kSe8yiyuPrD7yNcewAAAMU"]
[Sun Apr 19 18:05:51.620970 2026] [:error] [pid 47772:tid 47794] [client 74.248.99.90:8997] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeSo_4c0L16cb4smAz-BCgAAAAU"]
[Sun Apr 19 18:05:53.456212 2026] [:error] [pid 15763:tid 15798] [client 74.248.99.90:9101] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeSpAbMXv1Y1THOoxaDIYQAAAgI"]
[Sun Apr 19 18:05:54.992082 2026] [:error] [pid 15763:tid 15812] [client 74.248.99.90:9079] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeSpArMXv1Y1THOoxaDIYgAAAhA"]
[Sun Apr 19 18:05:55.712410 2026] [:error] [pid 15765:tid 15852] [client 74.248.99.90:9033] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeSpA_Rqinw-W5EwQ77jEAAAAoA"]
[Sun Apr 19 18:05:56.849160 2026] [:error] [pid 15763:tid 15810] [client 74.248.99.90:9193] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeSpBLMXv1Y1THOoxaDIZQAAAg4"]
[Sun Apr 19 18:05:59.577477 2026] [:error] [pid 47886:tid 47912] [client 74.248.99.90:9169] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeSpB0Se8yiyuPrD7yNcgwAAANg"]
[Sun Apr 19 18:06:00.278799 2026] [:error] [pid 15694:tid 15726] [client 74.248.99.90:9143] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeSpCLimB-jol1fwqAr5NQAAAYM"]
[Sun Apr 19 18:06:04.047739 2026] [:error] [pid 47775:tid 47843] [client 74.248.99.90:9123] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Sun Apr 19 18:06:04.306495 2026] [:error] [pid 47775:tid 47844] [client 74.248.99.90:9123] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Sun Apr 19 18:06:04.563535 2026] [:error] [pid 47775:tid 47849] [client 74.248.99.90:9123] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Sun Apr 19 18:06:04.842847 2026] [:error] [pid 47775:tid 47856] [client 74.248.99.90:9123] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sun Apr 19 18:06:05.107889 2026] [:error] [pid 47775:tid 47866] [client 74.248.99.90:9123] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Sun Apr 19 18:06:05.377122 2026] [:error] [pid 47775:tid 47847] [client 74.248.99.90:9123] File does not exist: /usr/local/apache/htdocs/suspended-page/bengi.php
[Sun Apr 19 18:06:05.907255 2026] [:error] [pid 47775:tid 47844] [client 74.248.99.90:9123] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Sun Apr 19 18:06:06.175038 2026] [:error] [pid 47775:tid 47852] [client 74.248.99.90:9123] File does not exist: /usr/local/apache/htdocs/suspended-page/alfashell.php
[Sun Apr 19 18:06:06.434804 2026] [:error] [pid 47775:tid 47851] [client 74.248.99.90:9123] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sun Apr 19 18:06:06.706650 2026] [:error] [pid 47775:tid 47863] [client 74.248.99.90:9123] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sun Apr 19 18:06:06.962149 2026] [:error] [pid 47775:tid 47849] [client 74.248.99.90:9123] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeSpDrmztjlk9tsmoez2DAAAAIY"]
[Sun Apr 19 18:06:10.272070 2026] [:error] [pid 47775:tid 47860] [client 74.248.99.90:8961] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeSpErmztjlk9tsmoez2EwAAAJE"]
[Sun Apr 19 18:06:20.774205 2026] [:error] [pid 47772:tid 47798] [client 74.248.99.90:8906] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeSpHIc0L16cb4smAz-BEwAAAAk"]
[Sun Apr 19 18:06:23.020141 2026] [:error] [pid 47775:tid 47848] [client 74.248.99.90:8944] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeSpH7mztjlk9tsmoez2IgAAAIU"]
[Sun Apr 19 18:06:24.152835 2026] [:error] [pid 15764:tid 15850] [client 74.248.99.90:9059] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeSpIGLL_sqdSHoVp-TM1wAAAlc"]
[Sun Apr 19 18:06:25.348769 2026] [:error] [pid 47775:tid 47863] [client 74.248.99.90:9186] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeSpIbmztjlk9tsmoez2JQAAAJQ"]
[Sun Apr 19 18:06:27.504505 2026] [:error] [pid 15763:tid 15799] [client 74.248.99.90:9194] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeSpI7MXv1Y1THOoxaDIgQAAAgM"]
[Sun Apr 19 18:06:29.458124 2026] [:error] [pid 47773:tid 47837] [client 74.248.99.90:9103] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeSpJeiBHdnCJDuPq9Ab6QAAAFU"]
[Sun Apr 19 18:06:30.958745 2026] [:error] [pid 47775:tid 47854] [client 74.248.99.90:9211] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeSpJrmztjlk9tsmoez2LwAAAIs"]
[Sun Apr 19 18:06:36.922344 2026] [:error] [pid 15693:tid 15697] [client 74.248.99.90:9105] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeSpLMNMD-ccazQlTslIuwAAAUE"]
[Sun Apr 19 18:06:39.454330 2026] [:error] [pid 15764:tid 15840] [client 74.248.99.90:9019] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeSpL2LL_sqdSHoVp-TM7gAAAk4"]
[Sun Apr 19 18:06:41.848716 2026] [:error] [pid 15764:tid 15832] [client 74.248.99.90:9118] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeSpMWLL_sqdSHoVp-TM8wAAAkY"]
[Sun Apr 19 18:06:46.632721 2026] [:error] [pid 15765:tid 15868] [client 74.248.99.90:9200] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeSpNvRqinw-W5EwQ77jJAAAAo8"]
[Sun Apr 19 18:06:48.506872 2026] [:error] [pid 15760:tid 15786] [client 74.248.99.90:9128] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeSpOPSdD_XHQMJ_ISvMFwAAAdI"]
[Sun Apr 19 18:06:49.578974 2026] [:error] [pid 15694:tid 15734] [client 74.248.99.90:9163] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeSpObimB-jol1fwqAr5QwAAAYg"]
[Sun Apr 19 18:06:50.636463 2026] [:error] [pid 47886:tid 47911] [client 74.248.99.90:9195] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeSpOkSe8yiyuPrD7yNclAAAANc"]
[Sun Apr 19 18:06:51.618786 2026] [:error] [pid 15760:tid 15773] [client 74.248.99.90:9191] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeSpO_SdD_XHQMJ_ISvMHAAAAcU"]
[Sun Apr 19 18:06:52.506171 2026] [:error] [pid 47772:tid 47795] [client 74.248.99.90:9192] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeSpPIc0L16cb4smAz-BIwAAAAY"]
[Sun Apr 19 18:06:53.607022 2026] [:error] [pid 47772:tid 47809] [client 74.248.99.90:9088] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeSpPYc0L16cb4smAz-BJAAAABQ"]
[Sun Apr 19 18:06:55.384192 2026] [:error] [pid 47772:tid 47811] [client 74.248.99.90:9174] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeSpP4c0L16cb4smAz-BLQAAABY"]
[Sun Apr 19 18:06:56.460451 2026] [:error] [pid 15764:tid 15827] [client 74.248.99.90:9154] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeSpQGLL_sqdSHoVp-TNHgAAAkE"]
[Sun Apr 19 18:06:58.061291 2026] [:error] [pid 15694:tid 15748] [client 74.248.99.90:9030] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeSpQrimB-jol1fwqAr5SAAAAZY"]
[Sun Apr 19 18:06:59.082191 2026] [:error] [pid 47772:tid 47809] [client 74.248.99.90:9141] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeSpQ4c0L16cb4smAz-BOgAAABQ"]
[Sun Apr 19 18:07:01.465269 2026] [:error] [pid 15763:tid 15804] [client 74.248.99.90:9028] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "aeSpRbMXv1Y1THOoxaDIjgAAAgg"]
[Sun Apr 19 18:07:03.617952 2026] [:error] [pid 15694:tid 15730] [client 74.248.99.90:9189] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "aeSpR7imB-jol1fwqAr5TQAAAYQ"]
[Sun Apr 19 18:07:05.288086 2026] [:error] [pid 47772:tid 47801] [client 74.248.99.90:8909] [client 74.248.99.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "aeSpSYc0L16cb4smAz-BRQAAAAw"]
[Sun Apr 19 18:07:06.085502 2026] [:error] [pid 47886:tid 47907] [client 74.248.99.90:9161] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Sun Apr 19 18:07:06.383340 2026] [:error] [pid 47886:tid 47911] [client 74.248.99.90:9161] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Sun Apr 19 18:07:06.641438 2026] [:error] [pid 47886:tid 47896] [client 74.248.99.90:9161] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Sun Apr 19 18:07:06.901152 2026] [:error] [pid 47886:tid 47903] [client 74.248.99.90:9161] File does not exist: /usr/local/apache/htdocs/suspended-page/vee.php
[Sun Apr 19 18:07:07.159047 2026] [:error] [pid 47886:tid 47890] [client 74.248.99.90:9161] File does not exist: /usr/local/apache/htdocs/suspended-page/cabs.php
[Sun Apr 19 18:07:07.417782 2026] [:error] [pid 47886:tid 47888] [client 74.248.99.90:9161] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sun Apr 19 18:07:07.675464 2026] [:error] [pid 47886:tid 47897] [client 74.248.99.90:9161] File does not exist: /usr/local/apache/htdocs/suspended-page/x1da.php
[Sun Apr 19 18:07:07.953084 2026] [:error] [pid 47886:tid 47899] [client 74.248.99.90:9161] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Sun Apr 19 18:07:08.218444 2026] [:error] [pid 47886:tid 47901] [client 74.248.99.90:9161] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Sun Apr 19 19:13:49.409437 2026] [:error] [pid 15764:tid 15846] [client 213.35.109.170:58570] [client 213.35.109.170] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:auth outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||nextspaceconsulting.com.au|F|3"] [data "ARGS:auth=\\x00"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "aeS47WLL_sqdSHoVp-Tg_wAAAlQ"]
[Sun Apr 19 22:04:14.824400 2026] [:error] [pid 15765:tid 15857] [client 138.68.5.226:52004] [client 138.68.5.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aeTg3vRqinw-W5EwQ74BxQAAAoQ"]
[Sun Apr 19 22:50:47.616504 2026] [:error] [pid 47772:tid 47809] [client 146.70.194.222:43440] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeTrx4c0L16cb4smAz_aFwAAABQ"]
[Sun Apr 19 22:50:48.146186 2026] [:error] [pid 15764:tid 15845] [client 146.70.194.222:43822] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aeTryGLL_sqdSHoVp-Q6OgAAAlM"]
[Sun Apr 19 22:50:48.676784 2026] [:error] [pid 15763:tid 15819] [client 146.70.194.222:44190] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeTryLMXv1Y1THOoxaAS8QAAAhc"]
[Sun Apr 19 22:50:49.192216 2026] [:error] [pid 15765:tid 15864] [client 146.70.194.222:44688] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeTryfRqinw-W5EwQ74IOQAAAos"]
[Sun Apr 19 22:50:49.712092 2026] [:error] [pid 15760:tid 15770] [client 146.70.194.222:45366] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeTryfSdD_XHQMJ_IStfkgAAAcI"]
[Sun Apr 19 22:50:50.237653 2026] [:error] [pid 15763:tid 15820] [client 146.70.194.222:46132] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeTryrMXv1Y1THOoxaATIwAAAhg"]
[Sun Apr 19 22:50:50.771725 2026] [:error] [pid 15760:tid 15783] [client 146.70.194.222:46986] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeTryvSdD_XHQMJ_IStf3AAAAc8"]
[Sun Apr 19 22:50:51.291969 2026] [:error] [pid 47773:tid 47838] [client 146.70.194.222:47706] [client 146.70.194.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeTry-iBHdnCJDuPq9BW5wAAAFY"]
[Sun Apr 19 23:04:42.212300 2026] [:error] [pid 15694:tid 15751] [client 158.158.74.143:63114] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sun Apr 19 23:04:42.466451 2026] [:error] [pid 15694:tid 15743] [client 158.158.74.143:63114] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun Apr 19 23:04:42.732436 2026] [:error] [pid 15694:tid 15741] [client 158.158.74.143:63114] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun Apr 19 23:04:43.011288 2026] [:error] [pid 15694:tid 15733] [client 158.158.74.143:63114] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sun Apr 19 23:04:43.279754 2026] [:error] [pid 15694:tid 15740] [client 158.158.74.143:63114] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sun Apr 19 23:04:43.784270 2026] [:error] [pid 15694:tid 15742] [client 158.158.74.143:63114] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun Apr 19 23:04:44.037631 2026] [:error] [pid 15694:tid 15732] [client 158.158.74.143:63114] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Sun Apr 19 23:04:44.283323 2026] [:error] [pid 15694:tid 15747] [client 158.158.74.143:63114] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sun Apr 19 23:04:44.526011 2026] [:error] [pid 15694:tid 15746] [client 158.158.74.143:63114] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Sun Apr 19 23:04:44.766101 2026] [:error] [pid 15694:tid 15723] [client 158.158.74.143:63114] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeTvDLimB-jol1fwqAoaHgAAAYA"]
[Sun Apr 19 23:04:57.764773 2026] [:error] [pid 15760:tid 15788] [client 158.158.74.143:8587] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeTvGfSdD_XHQMJ_IStmPwAAAdQ"]
[Sun Apr 19 23:04:58.955204 2026] [:error] [pid 47775:tid 47851] [client 158.158.74.143:59345] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeTvGrmztjlk9tsmoewqBAAAAIg"]
[Sun Apr 19 23:04:59.971904 2026] [:error] [pid 15763:tid 15816] [client 158.158.74.143:59375] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "aeTvG7MXv1Y1THOoxaAWIQAAAhQ"]
[Sun Apr 19 23:05:00.969842 2026] [:error] [pid 47772:tid 47790] [client 158.158.74.143:8626] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeTvHIc0L16cb4smAz_eEQAAAAE"]
[Sun Apr 19 23:05:02.310925 2026] [:error] [pid 15760:tid 15770] [client 158.158.74.143:63118] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeTvHvSdD_XHQMJ_IStmRgAAAcI"]
[Sun Apr 19 23:05:03.735233 2026] [:error] [pid 47775:tid 47859] [client 158.158.74.143:61860] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeTvH7mztjlk9tsmoewqBwAAAJA"]
[Sun Apr 19 23:05:05.281632 2026] [:error] [pid 15760:tid 15773] [client 158.158.74.143:59387] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "aeTvIfSdD_XHQMJ_IStmSwAAAcU"]
[Sun Apr 19 23:05:06.615812 2026] [:error] [pid 15694:tid 15724] [client 158.158.74.143:38672] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeTvIrimB-jol1fwqAoaJgAAAYE"]
[Sun Apr 19 23:05:07.887473 2026] [:error] [pid 15760:tid 15787] [client 158.158.74.143:8576] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeTvI_SdD_XHQMJ_IStmUwAAAdM"]
[Sun Apr 19 23:05:09.054163 2026] [:error] [pid 47775:tid 47850] [client 158.158.74.143:59353] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeTvJbmztjlk9tsmoewqCwAAAIc"]
[Sun Apr 19 23:05:10.636934 2026] [:error] [pid 15760:tid 15774] [client 158.158.74.143:8615] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "aeTvJvSdD_XHQMJ_IStmWgAAAcY"]
[Sun Apr 19 23:05:11.996824 2026] [:error] [pid 15760:tid 15780] [client 158.158.74.143:62362] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeTvJ_SdD_XHQMJ_IStmXgAAAcw"]
[Sun Apr 19 23:05:12.943760 2026] [:error] [pid 15763:tid 15812] [client 158.158.74.143:38664] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeTvKLMXv1Y1THOoxaAWMAAAAhA"]
[Sun Apr 19 23:05:14.235217 2026] [:error] [pid 15693:tid 15699] [client 158.158.74.143:61842] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeTvKsNMD-ccazQlTsllLQAAAUM"]
[Sun Apr 19 23:05:15.672779 2026] [:error] [pid 15763:tid 15799] [client 158.158.74.143:38657] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeTvK7MXv1Y1THOoxaAWMwAAAgM"]
[Sun Apr 19 23:05:18.345066 2026] [:error] [pid 15760:tid 15770] [client 158.158.74.143:59331] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeTvLvSdD_XHQMJ_IStmcAAAAcI"]
[Sun Apr 19 23:05:20.419383 2026] [:error] [pid 15764:tid 15836] [client 158.158.74.143:61845] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeTvMGLL_sqdSHoVp-Q_NQAAAko"]
[Sun Apr 19 23:05:22.575805 2026] [:error] [pid 15763:tid 15803] [client 158.158.74.143:63107] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeTvMrMXv1Y1THOoxaAWQgAAAgc"]
[Sun Apr 19 23:05:26.613030 2026] [:error] [pid 15764:tid 15843] [client 158.158.74.143:64815] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeTvNmLL_sqdSHoVp-Q_OgAAAlE"]
[Sun Apr 19 23:05:29.356969 2026] [:error] [pid 47773:tid 47816] [client 158.158.74.143:8454] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeTvOeiBHdnCJDuPq9BZUAAAAEA"]
[Sun Apr 19 23:05:32.397261 2026] [:error] [pid 15693:tid 15704] [client 158.158.74.143:65187] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeTvPMNMD-ccazQlTsllMAAAAUg"]
[Sun Apr 19 23:05:34.572155 2026] [:error] [pid 15764:tid 15833] [client 158.158.74.143:8456] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeTvPmLL_sqdSHoVp-Q_SgAAAkc"]
[Sun Apr 19 23:05:36.027042 2026] [:error] [pid 15694:tid 15738] [client 158.158.74.143:63453] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeTvQLimB-jol1fwqAoaPAAAAYw"]
[Sun Apr 19 23:05:37.176398 2026] [:error] [pid 47775:tid 47847] [client 158.158.74.143:8672] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeTvQbmztjlk9tsmoewqHwAAAIQ"]
[Sun Apr 19 23:05:38.818327 2026] [:error] [pid 15764:tid 15843] [client 158.158.74.143:65191] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeTvQmLL_sqdSHoVp-Q_TgAAAlE"]
[Sun Apr 19 23:05:40.442904 2026] [:error] [pid 15763:tid 15813] [client 158.158.74.143:64831] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeTvRLMXv1Y1THOoxaAWWAAAAhE"]
[Sun Apr 19 23:05:41.286779 2026] [:error] [pid 15764:tid 15846] [client 158.158.74.143:65189] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeTvRWLL_sqdSHoVp-Q_VAAAAlQ"]
[Sun Apr 19 23:05:42.992139 2026] [:error] [pid 15760:tid 15774] [client 158.158.74.143:8485] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeTvRvSdD_XHQMJ_IStmlQAAAcY"]
[Sun Apr 19 23:05:44.265204 2026] [:error] [pid 15763:tid 15819] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/tool.php
[Sun Apr 19 23:05:44.535870 2026] [:error] [pid 15763:tid 15815] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Sun Apr 19 23:05:45.738085 2026] [:error] [pid 15763:tid 15815] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Sun Apr 19 23:05:46.486353 2026] [:error] [pid 15763:tid 15804] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sun Apr 19 23:05:46.728119 2026] [:error] [pid 15763:tid 15801] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sun Apr 19 23:05:46.971013 2026] [:error] [pid 15763:tid 15818] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sun Apr 19 23:05:47.233873 2026] [:error] [pid 15763:tid 15800] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sun Apr 19 23:05:47.493086 2026] [:error] [pid 15763:tid 15819] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Sun Apr 19 23:05:47.735590 2026] [:error] [pid 15763:tid 15808] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/bmi.php
[Sun Apr 19 23:05:47.981788 2026] [:error] [pid 15763:tid 15807] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun Apr 19 23:05:48.228295 2026] [:error] [pid 15763:tid 15806] [client 158.158.74.143:8473] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Sun Apr 19 23:05:48.500363 2026] [:error] [pid 15763:tid 15811] [client 158.158.74.143:8473] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeTvTLMXv1Y1THOoxaAWdAAAAg8"]
[Sun Apr 19 23:05:50.001828 2026] [:error] [pid 15763:tid 15814] [client 158.158.74.143:60667] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeTvTrMXv1Y1THOoxaAWfQAAAhI"]
[Sun Apr 19 23:05:51.604307 2026] [:error] [pid 15765:tid 15867] [client 158.158.74.143:65159] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeTvT_Rqinw-W5EwQ74KJAAAAo4"]
[Sun Apr 19 23:05:53.468673 2026] [:error] [pid 47772:tid 47805] [client 158.158.74.143:65263] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeTvUYc0L16cb4smAz_ePwAAABA"]
[Sun Apr 19 23:05:55.193140 2026] [:error] [pid 15693:tid 15714] [client 158.158.74.143:8476] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeTvU8NMD-ccazQlTsllQAAAAVI"]
[Sun Apr 19 23:05:56.326845 2026] [:error] [pid 15760:tid 15774] [client 158.158.74.143:8475] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeTvVPSdD_XHQMJ_IStmpwAAAcY"]
[Sun Apr 19 23:05:57.233468 2026] [:error] [pid 15764:tid 15827] [client 158.158.74.143:8558] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeTvVWLL_sqdSHoVp-Q_ZQAAAkE"]
[Sun Apr 19 23:05:59.045017 2026] [:error] [pid 15760:tid 15787] [client 158.158.74.143:60685] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "aeTvV_SdD_XHQMJ_IStmvAAAAdM"]
[Sun Apr 19 23:06:00.242160 2026] [:error] [pid 15760:tid 15780] [client 158.158.74.143:62656] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeTvWPSdD_XHQMJ_IStmywAAAcw"]
[Sun Apr 19 23:06:02.185623 2026] [:error] [pid 15760:tid 15772] [client 158.158.74.143:8539] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeTvWvSdD_XHQMJ_IStm5wAAAcQ"]
[Sun Apr 19 23:06:03.505211 2026] [:error] [pid 15760:tid 15776] [client 158.158.74.143:64491] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeTvW_SdD_XHQMJ_IStm7wAAAcg"]
[Sun Apr 19 23:06:06.416283 2026] [:error] [pid 15760:tid 15774] [client 158.158.74.143:8367] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeTvXvSdD_XHQMJ_IStm9gAAAcY"]
[Sun Apr 19 23:06:08.300851 2026] [:error] [pid 15760:tid 15791] [client 158.158.74.143:8512] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeTvYPSdD_XHQMJ_IStm-wAAAdc"]
[Sun Apr 19 23:06:09.593916 2026] [:error] [pid 15764:tid 15843] [client 158.158.74.143:64504] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeTvYWLL_sqdSHoVp-Q_dgAAAlE"]
[Sun Apr 19 23:06:10.729499 2026] [:error] [pid 15763:tid 15807] [client 158.158.74.143:60618] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeTvYrMXv1Y1THOoxaAWkgAAAgs"]
[Sun Apr 19 23:06:11.501587 2026] [:error] [pid 15763:tid 15809] [client 158.158.74.143:9115] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeTvY7MXv1Y1THOoxaAWlgAAAg0"]
[Sun Apr 19 23:06:12.910005 2026] [:error] [pid 47773:tid 47828] [client 158.158.74.143:60397] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeTvZOiBHdnCJDuPq9BZVQAAAEw"]
[Sun Apr 19 23:06:14.371931 2026] [:error] [pid 47886:tid 47901] [client 158.158.74.143:60628] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeTvZkSe8yiyuPrD7yOHjQAAAM0"]
[Sun Apr 19 23:06:15.752383 2026] [:error] [pid 47886:tid 47912] [client 158.158.74.143:65230] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeTvZ0Se8yiyuPrD7yOHjgAAANg"]
[Sun Apr 19 23:06:17.345517 2026] [:error] [pid 15763:tid 15806] [client 158.158.74.143:9146] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeTvabMXv1Y1THOoxaAWoAAAAgo"]
[Sun Apr 19 23:06:18.743908 2026] [:error] [pid 47886:tid 47897] [client 158.158.74.143:8535] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeTvakSe8yiyuPrD7yOHkAAAAMk"]
[Sun Apr 19 23:06:20.135463 2026] [:error] [pid 15764:tid 15848] [client 158.158.74.143:60353] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeTvbGLL_sqdSHoVp-Q_ggAAAlY"]
[Sun Apr 19 23:06:21.551158 2026] [:error] [pid 47772:tid 47803] [client 158.158.74.143:64495] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeTvbYc0L16cb4smAz_eUQAAAA4"]
[Sun Apr 19 23:06:23.754064 2026] [:error] [pid 47886:tid 47908] [client 158.158.74.143:64510] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeTvb0Se8yiyuPrD7yOHmQAAANQ"]
[Sun Apr 19 23:06:25.701816 2026] [:error] [pid 15764:tid 15833] [client 158.158.74.143:60731] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTvcWLL_sqdSHoVp-Q_igAAAkc"]
[Sun Apr 19 23:06:27.503643 2026] [:error] [pid 15764:tid 15828] [client 158.158.74.143:60613] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTvc2LL_sqdSHoVp-Q_kAAAAkI"]
[Sun Apr 19 23:06:29.614921 2026] [:error] [pid 15764:tid 15841] [client 158.158.74.143:8372] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTvdWLL_sqdSHoVp-Q_mQAAAk8"]
[Sun Apr 19 23:06:30.741380 2026] [:error] [pid 15764:tid 15840] [client 158.158.74.143:60365] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeTvdmLL_sqdSHoVp-Q_oQAAAk4"]
[Sun Apr 19 23:06:33.326709 2026] [:error] [pid 15764:tid 15835] [client 158.158.74.143:64501] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeTveWLL_sqdSHoVp-Q_rAAAAkk"]
[Sun Apr 19 23:06:35.039735 2026] [:error] [pid 15694:tid 15741] [client 158.158.74.143:64452] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeTve7imB-jol1fwqAoaZAAAAY8"]
[Sun Apr 19 23:06:36.984859 2026] [:error] [pid 47775:tid 47865] [client 158.158.74.143:9102] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeTvfLmztjlk9tsmoewqagAAAJY"]
[Sun Apr 19 23:06:39.036483 2026] [:error] [pid 15763:tid 15804] [client 158.158.74.143:9122] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeTvf7MXv1Y1THOoxaAWqwAAAgg"]
[Sun Apr 19 23:06:40.462744 2026] [:error] [pid 15764:tid 15832] [client 158.158.74.143:8334] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "aeTvgGLL_sqdSHoVp-Q_uQAAAkY"]
[Sun Apr 19 23:06:43.321177 2026] [:error] [pid 47773:tid 47825] [client 158.158.74.143:59739] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "aeTvg-iBHdnCJDuPq9BZdQAAAEk"]
[Sun Apr 19 23:06:44.489233 2026] [:error] [pid 15693:tid 15698] [client 158.158.74.143:9148] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "aeTvhMNMD-ccazQlTsllTQAAAUI"]
[Sun Apr 19 23:06:46.426950 2026] [:error] [pid 47773:tid 47828] [client 158.158.74.143:64494] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asd.php"] [unique_id "aeTvhuiBHdnCJDuPq9BZiAAAAEw"]
[Sun Apr 19 23:06:49.525922 2026] [:error] [pid 15760:tid 15775] [client 158.158.74.143:33143] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sun Apr 19 23:06:50.677322 2026] [:error] [pid 15760:tid 15770] [client 158.158.74.143:33143] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sun Apr 19 23:06:50.922682 2026] [:error] [pid 15760:tid 15780] [client 158.158.74.143:33143] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Sun Apr 19 23:06:51.181587 2026] [:error] [pid 15760:tid 15790] [client 158.158.74.143:33143] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Sun Apr 19 23:06:52.212697 2026] [:error] [pid 15760:tid 15769] [client 158.158.74.143:33143] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sun Apr 19 23:06:52.493462 2026] [:error] [pid 15760:tid 15785] [client 158.158.74.143:33143] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Sun Apr 19 23:06:53.236358 2026] [:error] [pid 15760:tid 15771] [client 158.158.74.143:33143] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sun Apr 19 23:06:53.478769 2026] [:error] [pid 15760:tid 15783] [client 158.158.74.143:33143] File does not exist: /usr/local/apache/htdocs/suspended-page/sid3.php
[Sun Apr 19 23:06:53.718605 2026] [:error] [pid 15760:tid 15773] [client 158.158.74.143:33143] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeTvjfSdD_XHQMJ_IStnQwAAAcU"]
[Sun Apr 19 23:06:55.373706 2026] [:error] [pid 15760:tid 15786] [client 158.158.74.143:60914] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeTvj_SdD_XHQMJ_IStnSQAAAdI"]
[Sun Apr 19 23:07:00.519736 2026] [:error] [pid 15694:tid 15733] [client 158.158.74.143:59725] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeTvlLimB-jol1fwqAoabgAAAYc"]
[Sun Apr 19 23:07:01.220039 2026] [:error] [pid 47772:tid 47804] [client 158.158.74.143:8263] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeTvlYc0L16cb4smAz_eagAAAA8"]
[Sun Apr 19 23:07:02.694237 2026] [:error] [pid 15693:tid 15717] [client 158.158.74.143:59716] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeTvlsNMD-ccazQlTsllUgAAAVU"]
[Sun Apr 19 23:07:03.979373 2026] [:error] [pid 47775:tid 47849] [client 158.158.74.143:33129] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeTvl7mztjlk9tsmoewqeQAAAIY"]
[Sun Apr 19 23:07:05.202103 2026] [:error] [pid 47775:tid 47859] [client 158.158.74.143:59516] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeTvmbmztjlk9tsmoewqfAAAAJA"]
[Sun Apr 19 23:07:07.163380 2026] [:error] [pid 15764:tid 15850] [client 158.158.74.143:59828] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "aeTvm2LL_sqdSHoVp-Q_zQAAAlc"]
[Sun Apr 19 23:07:08.738027 2026] [:error] [pid 15765:tid 15872] [client 158.158.74.143:59460] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeTvnPRqinw-W5EwQ74KXwAAApM"]
[Sun Apr 19 23:07:10.412290 2026] [:error] [pid 47773:tid 47834] [client 158.158.74.143:8319] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeTvnuiBHdnCJDuPq9BZnQAAAFI"]
[Sun Apr 19 23:07:11.853540 2026] [:error] [pid 15763:tid 15817] [client 158.158.74.143:61337] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeTvn7MXv1Y1THOoxaAWswAAAhU"]
[Sun Apr 19 23:07:14.407304 2026] [:error] [pid 47772:tid 47805] [client 158.158.74.143:63398] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeTvooc0L16cb4smAz_efwAAABA"]
[Sun Apr 19 23:07:16.161928 2026] [:error] [pid 15765:tid 15864] [client 158.158.74.143:45240] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeTvpPRqinw-W5EwQ74KYAAAAos"]
[Sun Apr 19 23:07:18.726550 2026] [:error] [pid 15763:tid 15808] [client 158.158.74.143:60881] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeTvprMXv1Y1THOoxaAWtwAAAgw"]
[Sun Apr 19 23:07:22.558270 2026] [:error] [pid 47775:tid 47853] [client 158.158.74.143:45223] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeTvqrmztjlk9tsmoewqnAAAAIo"]
[Sun Apr 19 23:07:24.416870 2026] [:error] [pid 15764:tid 15850] [client 158.158.74.143:8297] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws82.php"] [unique_id "aeTvrGLL_sqdSHoVp-Q_5QAAAlc"]
[Sun Apr 19 23:07:26.898855 2026] [:error] [pid 47773:tid 47817] [client 158.158.74.143:60872] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTvruiBHdnCJDuPq9BZtAAAAEE"]
[Sun Apr 19 23:07:28.650209 2026] [:error] [pid 15694:tid 15735] [client 158.158.74.143:61357] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTvsLimB-jol1fwqAoafwAAAYk"]
[Sun Apr 19 23:07:32.523972 2026] [:error] [pid 15693:tid 15706] [client 158.158.74.143:8280] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTvtMNMD-ccazQlTsllWwAAAUo"]
[Sun Apr 19 23:07:34.678983 2026] [:error] [pid 15760:tid 15791] [client 158.158.74.143:61367] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeTvtvSdD_XHQMJ_IStnbwAAAdc"]
[Sun Apr 19 23:07:37.772799 2026] [:error] [pid 47772:tid 47793] [client 158.158.74.143:33097] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeTvuYc0L16cb4smAz_eiQAAAAQ"]
[Sun Apr 19 23:07:40.192852 2026] [:error] [pid 47773:tid 47838] [client 158.158.74.143:63414] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeTvvOiBHdnCJDuPq9BZwgAAAFY"]
[Sun Apr 19 23:07:41.547166 2026] [:error] [pid 15763:tid 15804] [client 158.158.74.143:63864] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeTvvbMXv1Y1THOoxaAWxQAAAgg"]
[Sun Apr 19 23:07:42.666312 2026] [:error] [pid 15763:tid 15818] [client 158.158.74.143:63422] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeTvvrMXv1Y1THOoxaAWyAAAAhY"]
[Sun Apr 19 23:07:43.982393 2026] [:error] [pid 15693:tid 15707] [client 158.158.74.143:63380] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeTvv8NMD-ccazQlTsllYgAAAUs"]
[Sun Apr 19 23:07:45.759838 2026] [:error] [pid 47772:tid 47804] [client 158.158.74.143:61129] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeTvwYc0L16cb4smAz_elAAAAA8"]
[Sun Apr 19 23:07:47.398527 2026] [:error] [pid 15760:tid 15768] [client 158.158.74.143:63229] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeTvw_SdD_XHQMJ_IStnggAAAcA"]
[Sun Apr 19 23:07:50.140527 2026] [:error] [pid 15765:tid 15871] [client 158.158.74.143:61567] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeTvxvRqinw-W5EwQ74KdQAAApI"]
[Sun Apr 19 23:07:52.409775 2026] [:error] [pid 15760:tid 15789] [client 158.158.74.143:63208] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeTvyPSdD_XHQMJ_IStnlQAAAdU"]
[Sun Apr 19 23:07:55.978879 2026] [:error] [pid 15763:tid 15801] [client 158.158.74.143:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Sun Apr 19 23:07:56.240562 2026] [:error] [pid 15763:tid 15817] [client 158.158.74.143:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sun Apr 19 23:07:56.491475 2026] [:error] [pid 15763:tid 15814] [client 158.158.74.143:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Sun Apr 19 23:07:56.734878 2026] [:error] [pid 15763:tid 15816] [client 158.158.74.143:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Sun Apr 19 23:07:57.974374 2026] [:error] [pid 15763:tid 15807] [client 158.158.74.143:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sun Apr 19 23:07:58.253014 2026] [:error] [pid 15763:tid 15798] [client 158.158.74.143:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sun Apr 19 23:07:58.518039 2026] [:error] [pid 15763:tid 15800] [client 158.158.74.143:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sun Apr 19 23:07:58.761895 2026] [:error] [pid 15763:tid 15808] [client 158.158.74.143:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sun Apr 19 23:07:59.006139 2026] [:error] [pid 15763:tid 15820] [client 158.158.74.143:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Sun Apr 19 23:07:59.249202 2026] [:error] [pid 15763:tid 15812] [client 158.158.74.143:64270] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Sun Apr 19 23:07:59.489956 2026] [:error] [pid 15763:tid 15809] [client 158.158.74.143:64270] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeTvz7MXv1Y1THOoxaAW4QAAAg0"]
[Sun Apr 19 23:08:00.667535 2026] [:error] [pid 15764:tid 15833] [client 158.158.74.143:31731] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeTv0GLL_sqdSHoVp-Q_7wAAAkc"]
[Sun Apr 19 23:08:01.830521 2026] [:error] [pid 15764:tid 15831] [client 158.158.74.143:61578] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeTv0WLL_sqdSHoVp-Q_9AAAAkU"]
[Sun Apr 19 23:08:03.873561 2026] [:error] [pid 47775:tid 47859] [client 158.158.74.143:61168] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeTv07mztjlk9tsmoewqugAAAJA"]
[Sun Apr 19 23:08:04.879741 2026] [:error] [pid 47886:tid 47889] [client 158.158.74.143:63221] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeTv1ESe8yiyuPrD7yOHrwAAAME"]
[Sun Apr 19 23:08:06.134364 2026] [:error] [pid 47772:tid 47806] [client 158.158.74.143:64314] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeTv1oc0L16cb4smAz_eqgAAABE"]
[Sun Apr 19 23:08:06.980333 2026] [:error] [pid 15760:tid 15789] [client 158.158.74.143:64284] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeTv1vSdD_XHQMJ_IStnpgAAAdU"]
[Sun Apr 19 23:08:08.273230 2026] [:error] [pid 15763:tid 15817] [client 158.158.74.143:31710] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeTv2LMXv1Y1THOoxaAW5wAAAhU"]
[Sun Apr 19 23:08:09.865212 2026] [:error] [pid 15760:tid 15772] [client 158.158.74.143:31685] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTv2fSdD_XHQMJ_IStnrgAAAcQ"]
[Sun Apr 19 23:08:10.957503 2026] [:error] [pid 47775:tid 47864] [client 158.158.74.143:65508] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTv2rmztjlk9tsmoewqvwAAAJU"]
[Sun Apr 19 23:08:13.191949 2026] [:error] [pid 15760:tid 15789] [client 158.158.74.143:64551] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTv3fSdD_XHQMJ_IStntQAAAdU"]
[Sun Apr 19 23:08:15.046481 2026] [:error] [pid 47772:tid 47792] [client 158.158.74.143:61619] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeTv34c0L16cb4smAz_erQAAAAM"]
[Sun Apr 19 23:08:16.706923 2026] [:error] [pid 15760:tid 15769] [client 158.158.74.143:61571] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeTv4PSdD_XHQMJ_IStnvQAAAcE"]
[Sun Apr 19 23:08:18.444087 2026] [:error] [pid 47772:tid 47811] [client 158.158.74.143:28202] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeTv4oc0L16cb4smAz_esQAAABY"]
[Sun Apr 19 23:08:20.213223 2026] [:error] [pid 47772:tid 47808] [client 158.158.74.143:65476] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeTv5Ic0L16cb4smAz_etgAAABM"]
[Sun Apr 19 23:08:23.959447 2026] [:error] [pid 47772:tid 47794] [client 158.158.74.143:31707] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeTv54c0L16cb4smAz_ewgAAAAU"]
[Sun Apr 19 23:08:25.589723 2026] [:error] [pid 47772:tid 47802] [client 158.158.74.143:64319] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeTv6Yc0L16cb4smAz_exQAAAA0"]
[Sun Apr 19 23:08:26.983602 2026] [:error] [pid 15764:tid 15846] [client 158.158.74.143:64310] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeTv6mLL_sqdSHoVp-RADgAAAlQ"]
[Sun Apr 19 23:08:28.301203 2026] [:error] [pid 15760:tid 15774] [client 158.158.74.143:63216] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeTv7PSdD_XHQMJ_IStnzAAAAcY"]
[Sun Apr 19 23:08:29.903551 2026] [:error] [pid 15764:tid 15829] [client 158.158.74.143:61560] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws57.php"] [unique_id "aeTv7WLL_sqdSHoVp-RAFgAAAkM"]
[Sun Apr 19 23:08:32.090761 2026] [:error] [pid 47772:tid 47789] [client 158.158.74.143:31718] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeTv8Ic0L16cb4smAz_eyQAAAAA"]
[Sun Apr 19 23:08:33.405295 2026] [:error] [pid 15764:tid 15830] [client 158.158.74.143:62864] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeTv8WLL_sqdSHoVp-RAKQAAAkQ"]
[Sun Apr 19 23:08:34.548022 2026] [:error] [pid 15764:tid 15827] [client 158.158.74.143:64303] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeTv8mLL_sqdSHoVp-RALQAAAkE"]
[Sun Apr 19 23:08:35.472655 2026] [:error] [pid 15765:tid 15869] [client 158.158.74.143:63171] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8573.php"] [unique_id "aeTv8_Rqinw-W5EwQ74KkwAAApA"]
[Sun Apr 19 23:08:36.913135 2026] [:error] [pid 47772:tid 47790] [client 158.158.74.143:64528] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeTv9Ic0L16cb4smAz_ezwAAAAE"]
[Sun Apr 19 23:08:38.688033 2026] [:error] [pid 15763:tid 15809] [client 158.158.74.143:65508] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeTv9rMXv1Y1THOoxaAXAAAAAg0"]
[Sun Apr 19 23:08:40.414511 2026] [:error] [pid 15693:tid 15703] [client 158.158.74.143:28189] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeTv-MNMD-ccazQlTslldAAAAUc"]
[Sun Apr 19 23:08:41.856386 2026] [:error] [pid 15760:tid 15769] [client 158.158.74.143:62886] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws66.php"] [unique_id "aeTv-fSdD_XHQMJ_IStn6gAAAcE"]
[Sun Apr 19 23:08:43.952753 2026] [:error] [pid 15764:tid 15842] [client 158.158.74.143:31739] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeTv-2LL_sqdSHoVp-RAOgAAAlA"]
[Sun Apr 19 23:08:45.311007 2026] [:error] [pid 47773:tid 47834] [client 158.158.74.143:64567] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeTv_eiBHdnCJDuPq9BZ4gAAAFI"]
[Sun Apr 19 23:08:47.488378 2026] [:error] [pid 47773:tid 47836] [client 158.158.74.143:31686] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeTv_-iBHdnCJDuPq9BZ4wAAAFQ"]
[Sun Apr 19 23:08:49.048382 2026] [:error] [pid 15764:tid 15834] [client 158.158.74.143:62896] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeTwAWLL_sqdSHoVp-RARAAAAkg"]
[Sun Apr 19 23:08:50.893748 2026] [:error] [pid 47773:tid 47828] [client 158.158.74.143:31729] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTwAuiBHdnCJDuPq9BZ6QAAAEw"]
[Sun Apr 19 23:08:52.540339 2026] [:error] [pid 15760:tid 15790] [client 158.158.74.143:8400] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTwBPSdD_XHQMJ_IStoEgAAAdY"]
[Sun Apr 19 23:08:53.775185 2026] [:error] [pid 15760:tid 15789] [client 158.158.74.143:62105] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTwBfSdD_XHQMJ_IStoGwAAAdU"]
[Sun Apr 19 23:08:55.419535 2026] [:error] [pid 47775:tid 47863] [client 158.158.74.143:28209] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeTwB7mztjlk9tsmoewq1wAAAJQ"]
[Sun Apr 19 23:08:58.039799 2026] [:error] [pid 15760:tid 15781] [client 158.158.74.143:62096] [client 158.158.74.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeTwCvSdD_XHQMJ_IStoKQAAAc0"]
[Sun Apr 19 23:09:01.438562 2026] [:error] [pid 15760:tid 15787] [client 158.158.74.143:63210] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sun Apr 19 23:09:01.706311 2026] [:error] [pid 15760:tid 15773] [client 158.158.74.143:63210] File does not exist: /usr/local/apache/htdocs/suspended-page/mode.php
[Sun Apr 19 23:09:01.946852 2026] [:error] [pid 15760:tid 15791] [client 158.158.74.143:63210] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Sun Apr 19 23:09:02.218799 2026] [:error] [pid 15760:tid 15782] [client 158.158.74.143:63210] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Sun Apr 19 23:09:02.462387 2026] [:error] [pid 15760:tid 15769] [client 158.158.74.143:63210] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sun Apr 19 23:09:02.729824 2026] [:error] [pid 15760:tid 15783] [client 158.158.74.143:63210] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Sun Apr 19 23:09:02.990641 2026] [:error] [pid 15760:tid 15776] [client 158.158.74.143:63210] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Sun Apr 19 23:09:03.804553 2026] [:error] [pid 15760:tid 15792] [client 158.158.74.143:63210] File does not exist: /usr/local/apache/htdocs/suspended-page/mk.php
[Sun Apr 19 23:09:04.056180 2026] [:error] [pid 15760:tid 15770] [client 158.158.74.143:63210] [client 158.158.74.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aeTwEPSdD_XHQMJ_IStoPwAAAcI"]
[Mon Apr 20 08:33:25.895527 2026] [:error] [pid 48101:tid 48125] [client 20.100.201.159:14460] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Mon Apr 20 08:33:26.159186 2026] [:error] [pid 48101:tid 48108] [client 20.100.201.159:14460] File does not exist: /usr/local/apache/htdocs/suspended-page/oh.php
[Mon Apr 20 08:33:26.424146 2026] [:error] [pid 48101:tid 48123] [client 20.100.201.159:14460] File does not exist: /usr/local/apache/htdocs/suspended-page/lim.php
[Mon Apr 20 08:33:26.701170 2026] [:error] [pid 48101:tid 48128] [client 20.100.201.159:14460] File does not exist: /usr/local/apache/htdocs/suspended-page/hex.php
[Mon Apr 20 08:33:27.744470 2026] [:error] [pid 48101:tid 48122] [client 20.100.201.159:14460] File does not exist: /usr/local/apache/htdocs/suspended-page/gezdjgie.php
[Mon Apr 20 08:33:28.019608 2026] [:error] [pid 48101:tid 48113] [client 20.100.201.159:14460] File does not exist: /usr/local/apache/htdocs/suspended-page/link.php
[Mon Apr 20 08:33:28.295652 2026] [:error] [pid 48101:tid 48115] [client 20.100.201.159:14460] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Apr 20 08:33:28.567495 2026] [:error] [pid 48101:tid 48109] [client 20.100.201.159:14460] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Mon Apr 20 08:33:28.831845 2026] [:error] [pid 48101:tid 48107] [client 20.100.201.159:14460] File does not exist: /usr/local/apache/htdocs/suspended-page/just2.php
[Mon Apr 20 08:33:29.096005 2026] [:error] [pid 48101:tid 48118] [client 20.100.201.159:14460] [client 20.100.201.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aeV0WfIgenNbs2bVQGsoCQAAAY4"]
[Mon Apr 20 08:33:33.562569 2026] [:error] [pid 64333:tid 64388] [client 20.100.201.159:25284] [client 20.100.201.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aeV0XXZav9wH8wxMd_uV0AAAAEw"]
[Mon Apr 20 08:33:37.912648 2026] [:error] [pid 60072:tid 60093] [client 20.100.201.159:18070] [client 20.100.201.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aeV0Yfuj5dzu2v3Qr6G2BwAAAdM"]
[Mon Apr 20 08:33:40.971800 2026] [:error] [pid 64333:tid 64378] [client 20.100.201.159:25113] [client 20.100.201.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aeV0ZHZav9wH8wxMd_uV1wAAAEI"]
[Mon Apr 20 08:33:46.164063 2026] [:error] [pid 64332:tid 64363] [client 20.100.201.159:25584] [client 20.100.201.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "aeV0asAQ57uMKAVSYEk0EgAAABU"]
[Mon Apr 20 08:34:01.353678 2026] [:error] [pid 60072:tid 60075] [client 20.100.201.159:13244] [client 20.100.201.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ihodcrk.php"] [unique_id "aeV0efuj5dzu2v3Qr6G2DgAAAcE"]
[Mon Apr 20 08:34:14.103700 2026] [:error] [pid 48101:tid 48128] [client 20.100.201.159:11386] [client 20.100.201.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeV0hvIgenNbs2bVQGsoHAAAAZg"]
[Mon Apr 20 08:34:19.975325 2026] [:error] [pid 64333:tid 64380] [client 20.100.201.159:29553] [client 20.100.201.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeV0i3Zav9wH8wxMd_uWOwAAAEQ"]
[Mon Apr 20 08:34:22.452666 2026] [:error] [pid 47731:tid 47733] [client 20.100.201.159:14761] [client 20.100.201.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeV0jlOwpc-h7Nzn-iPFAAAAAQA"]
[Mon Apr 20 08:34:24.825761 2026] [:error] [pid 47731:tid 47752] [client 20.100.201.159:24141] [client 20.100.201.159] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeV0kFOwpc-h7Nzn-iPFAwAAARM"]
[Mon Apr 20 08:34:50.560682 2026] [:error] [pid 48101:tid 48119] [client 20.100.201.159:23820] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Mon Apr 20 08:34:50.824004 2026] [:error] [pid 48101:tid 48127] [client 20.100.201.159:23820] File does not exist: /usr/local/apache/htdocs/suspended-page/sim.php
[Mon Apr 20 08:34:51.087099 2026] [:error] [pid 48101:tid 48110] [client 20.100.201.159:23820] File does not exist: /usr/local/apache/htdocs/suspended-page/bx.php
[Mon Apr 20 08:34:51.349876 2026] [:error] [pid 48101:tid 48114] [client 20.100.201.159:23820] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon Apr 20 08:34:51.612225 2026] [:error] [pid 48101:tid 48116] [client 20.100.201.159:23820] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Mon Apr 20 08:34:51.876519 2026] [:error] [pid 48101:tid 48112] [client 20.100.201.159:23820] File does not exist: /usr/local/apache/htdocs/suspended-page/afggdg.php
[Mon Apr 20 08:34:52.147458 2026] [:error] [pid 48101:tid 48108] [client 20.100.201.159:23820] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon Apr 20 08:34:52.419487 2026] [:error] [pid 48101:tid 48104] [client 20.100.201.159:23820] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the1.php
[Mon Apr 20 08:34:52.697327 2026] [:error] [pid 48101:tid 48122] [client 20.100.201.159:23820] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Mon Apr 20 12:44:51.154019 2026] [:error] [pid 11352:tid 11435] [client 180.74.225.69:17927] [client 180.74.225.69] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.74.225.69, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWvQ2l10mhMSfJ7ir9k1AAAAJU"]
[Mon Apr 20 12:44:51.158983 2026] [:error] [pid 11352:tid 11435] [client 180.74.225.69:17927] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon Apr 20 13:35:41.372898 2026] [:error] [pid 42014:tid 42025] [client 103.65.237.216:57715] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "aeW7Lcek-00-ZI0f1NrwGAAAAQk"]
[Mon Apr 20 13:35:41.806566 2026] [:error] [pid 11441:tid 11453] [client 103.65.237.216:57820] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aeW7LcixByFUvmh319D3egAAAMo"]
[Tue Apr 21 01:31:34.859065 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:9701] File does not exist: /usr/local/apache/htdocs/suspended-page/gold.php
[Tue Apr 21 01:31:35.099019 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:9701] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue Apr 21 01:31:35.595541 2026] [:error] [pid 11351:tid 11407] [client 51.11.245.223:24323] File does not exist: /usr/local/apache/htdocs/suspended-page/gold.php
[Tue Apr 21 01:31:35.851525 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:24323] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue Apr 21 01:31:36.291007 2026] [:error] [pid 11351:tid 11389] [client 51.11.245.223:9701] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m57.php"] [unique_id "aeZi-AN8Z1-vktaI_tOYDAAAAEI"]
[Tue Apr 21 01:31:36.341578 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:24323] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aeZi-AN8Z1-vktaI_tOYDQAAAFU"]
[Tue Apr 21 01:31:36.762212 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:41762] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m57.php"] [unique_id "aeZi-AN8Z1-vktaI_tOYDwAAAFM"]
[Tue Apr 21 01:31:36.903169 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:32568] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aeZi-AN8Z1-vktaI_tOYEAAAAEA"]
[Tue Apr 21 01:31:37.233019 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:9431] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m57.php"] [unique_id "aeZi-QN8Z1-vktaI_tOYEQAAAFI"]
[Tue Apr 21 01:31:37.398195 2026] [:error] [pid 6928:tid 6938] [client 51.11.245.223:24443] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aeZi-R3y7MHq1iB0qYrqbQAAAUg"]
[Tue Apr 21 01:31:37.708958 2026] [:error] [pid 11350:tid 11364] [client 51.11.245.223:10219] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m57.php"] [unique_id "aeZi-f4EoMBgOJuJnT0m2QAAAAU"]
[Tue Apr 21 01:31:37.904156 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:32530] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aeZi-R3y7MHq1iB0qYrqbwAAAVc"]
[Tue Apr 21 01:31:38.183776 2026] [:error] [pid 11350:tid 11376] [client 51.11.245.223:41134] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aeZi-v4EoMBgOJuJnT0m2gAAABE"]
[Tue Apr 21 01:31:38.394469 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:28411] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeZi-v4EoMBgOJuJnT0m2wAAAA0"]
[Tue Apr 21 01:31:38.654803 2026] [:error] [pid 11352:tid 11421] [client 51.11.245.223:41766] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aeZi-ml10mhMSfJ7ir8BiQAAAIc"]
[Tue Apr 21 01:31:38.877172 2026] [:error] [pid 11352:tid 11438] [client 51.11.245.223:26342] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeZi-ml10mhMSfJ7ir8BigAAAJg"]
[Tue Apr 21 01:31:39.124490 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:41111] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aeZi-wN8Z1-vktaI_tOYFgAAAEw"]
[Tue Apr 21 01:31:39.358418 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:47305] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeZi-wN8Z1-vktaI_tOYFwAAAEA"]
[Tue Apr 21 01:31:39.593801 2026] [:error] [pid 11352:tid 11419] [client 51.11.245.223:9460] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aeZi-2l10mhMSfJ7ir8BiwAAAIU"]
[Tue Apr 21 01:31:39.839451 2026] [:error] [pid 11352:tid 11415] [client 51.11.245.223:52188] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeZi-2l10mhMSfJ7ir8BjAAAAIE"]
[Tue Apr 21 01:31:40.064757 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:9305] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-m57.php"] [unique_id "aeZi_Mgko5iFiE8YoyQ34QAAAY4"]
[Tue Apr 21 01:31:40.351724 2026] [:error] [pid 11352:tid 11436] [client 51.11.245.223:27797] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aeZi_Gl10mhMSfJ7ir8BjQAAAJY"]
[Tue Apr 21 01:31:40.535648 2026] [:error] [pid 11350:tid 11379] [client 51.11.245.223:10182] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-m57.php"] [unique_id "aeZi_P4EoMBgOJuJnT0m4AAAABQ"]
[Tue Apr 21 01:31:40.835268 2026] [:error] [pid 42014:tid 42027] [client 51.11.245.223:19015] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aeZi_Mek-00-ZI0f1Nqt4gAAAQs"]
[Tue Apr 21 01:31:41.007483 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:9289] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-m57.php"] [unique_id "aeZi_f4EoMBgOJuJnT0m4wAAABI"]
[Tue Apr 21 01:31:41.309141 2026] [:error] [pid 11494:tid 11500] [client 51.11.245.223:31380] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aeZi_cgko5iFiE8YoyQ35AAAAYQ"]
[Tue Apr 21 01:31:41.477951 2026] [:error] [pid 11494:tid 11496] [client 51.11.245.223:9687] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-m57.php"] [unique_id "aeZi_cgko5iFiE8YoyQ35QAAAYA"]
[Tue Apr 21 01:31:41.782312 2026] [:error] [pid 11494:tid 11511] [client 51.11.245.223:19018] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aeZi_cgko5iFiE8YoyQ35gAAAY8"]
[Tue Apr 21 01:31:41.947847 2026] [:error] [pid 11494:tid 11502] [client 51.11.245.223:41107] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aeZi_cgko5iFiE8YoyQ36AAAAYY"]
[Tue Apr 21 01:31:42.257392 2026] [:error] [pid 11350:tid 11360] [client 51.11.245.223:55660] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m57.php"] [unique_id "aeZi_v4EoMBgOJuJnT0m5AAAAAE"]
[Tue Apr 21 01:31:42.418386 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:41115] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aeZi_v4EoMBgOJuJnT0m5gAAABA"]
[Tue Apr 21 01:31:42.740870 2026] [:error] [pid 11350:tid 11382] [client 51.11.245.223:19013] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m57.php"] [unique_id "aeZi_v4EoMBgOJuJnT0m5wAAABc"]
[Tue Apr 21 01:31:42.890388 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:9427] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aeZi_v4EoMBgOJuJnT0m6QAAABg"]
[Tue Apr 21 01:31:43.221600 2026] [:error] [pid 6928:tid 6942] [client 51.11.245.223:55634] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m57.php"] [unique_id "aeZi_x3y7MHq1iB0qYrqdQAAAUw"]
[Tue Apr 21 01:31:43.377333 2026] [:error] [pid 11494:tid 11505] [client 51.11.245.223:9445] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aeZi_8gko5iFiE8YoyQ36QAAAYk"]
[Tue Apr 21 01:31:43.806436 2026] [:error] [pid 42014:tid 42031] [client 51.11.245.223:17806] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/m57.php"] [unique_id "aeZi_8ek-00-ZI0f1Nqt5QAAAQ8"]
[Tue Apr 21 01:31:43.888829 2026] [:error] [pid 11494:tid 11504] [client 51.11.245.223:41095] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aeZi_8gko5iFiE8YoyQ36gAAAYg"]
[Tue Apr 21 01:31:44.342222 2026] [:error] [pid 42014:tid 42032] [client 51.11.245.223:31347] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aeZjAMek-00-ZI0f1Nqt6AAAARA"]
[Tue Apr 21 01:31:44.410281 2026] [:error] [pid 42014:tid 42018] [client 51.11.245.223:9451] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aeZjAMek-00-ZI0f1Nqt6QAAAQI"]
[Tue Apr 21 01:31:44.926862 2026] [:error] [pid 6928:tid 6944] [client 51.11.245.223:9280] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aeZjAB3y7MHq1iB0qYrqdwAAAU4"]
[Tue Apr 21 01:31:44.927471 2026] [:error] [pid 42014:tid 42021] [client 51.11.245.223:17849] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aeZjAMek-00-ZI0f1Nqt6gAAAQU"]
[Tue Apr 21 01:31:45.448565 2026] [:error] [pid 11494:tid 11501] [client 51.11.245.223:41783] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aeZjAcgko5iFiE8YoyQ37AAAAYU"]
[Tue Apr 21 01:31:45.484860 2026] [:error] [pid 11494:tid 11507] [client 51.11.245.223:41396] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aeZjAcgko5iFiE8YoyQ37QAAAYs"]
[Tue Apr 21 01:31:45.978901 2026] [:error] [pid 11441:tid 11452] [client 51.11.245.223:41729] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZjAcixByFUvmh319DgKAAAAMk"]
[Tue Apr 21 01:31:46.104844 2026] [:error] [pid 6928:tid 6954] [client 51.11.245.223:28413] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aeZjAh3y7MHq1iB0qYrqeAAAAVg"]
[Tue Apr 21 01:31:46.500784 2026] [:error] [pid 11494:tid 11516] [client 51.11.245.223:9284] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZjAsgko5iFiE8YoyQ37wAAAZQ"]
[Tue Apr 21 01:31:46.699939 2026] [:error] [pid 42014:tid 42016] [client 51.11.245.223:4053] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-m57.php"] [unique_id "aeZjAsek-00-ZI0f1Nqt6wAAAQA"]
[Tue Apr 21 01:31:47.034550 2026] [:error] [pid 11352:tid 11414] [client 51.11.245.223:9681] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZjA2l10mhMSfJ7ir8BjgAAAIA"]
[Tue Apr 21 01:31:47.228531 2026] [:error] [pid 6928:tid 6950] [client 51.11.245.223:28377] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-m57.php"] [unique_id "aeZjAx3y7MHq1iB0qYrqfAAAAVQ"]
[Tue Apr 21 01:31:47.566873 2026] [:error] [pid 42014:tid 42033] [client 51.11.245.223:9412] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZjA8ek-00-ZI0f1Nqt7AAAARE"]
[Tue Apr 21 01:31:47.852123 2026] [:error] [pid 11441:tid 11464] [client 51.11.245.223:28412] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-m57.php"] [unique_id "aeZjA8ixByFUvmh319DgKwAAANU"]
[Tue Apr 21 01:31:48.079502 2026] [:error] [pid 6928:tid 6951] [client 51.11.245.223:41787] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZjBB3y7MHq1iB0qYrqggAAAVU"]
[Tue Apr 21 01:31:48.407567 2026] [:error] [pid 6928:tid 6948] [client 51.11.245.223:31323] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-m57.php"] [unique_id "aeZjBB3y7MHq1iB0qYrqhAAAAVI"]
[Tue Apr 21 01:31:48.602080 2026] [:error] [pid 11441:tid 11456] [client 51.11.245.223:9696] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZjBMixByFUvmh319DgLQAAAM0"]
[Tue Apr 21 01:31:48.956970 2026] [:error] [pid 6928:tid 6935] [client 51.11.245.223:4047] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aeZjBB3y7MHq1iB0qYrqhwAAAUU"]
[Tue Apr 21 01:31:49.133663 2026] [:error] [pid 11494:tid 11499] [client 51.11.245.223:41789] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZjBcgko5iFiE8YoyQ39gAAAYM"]
[Tue Apr 21 01:31:49.513372 2026] [:error] [pid 11441:tid 11444] [client 51.11.245.223:36788] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aeZjBcixByFUvmh319DgLwAAAME"]
[Tue Apr 21 01:31:49.657788 2026] [:error] [pid 6928:tid 6946] [client 51.11.245.223:41728] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZjBR3y7MHq1iB0qYrqiwAAAVA"]
[Tue Apr 21 01:31:50.155990 2026] [:error] [pid 11494:tid 11505] [client 51.11.245.223:51580] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aeZjBsgko5iFiE8YoyQ3-AAAAYk"]
[Tue Apr 21 01:31:50.179312 2026] [:error] [pid 11441:tid 11451] [client 51.11.245.223:9465] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZjBsixByFUvmh319DgMAAAAMg"]
[Tue Apr 21 01:31:50.689686 2026] [:error] [pid 11351:tid 11403] [client 51.11.245.223:51553] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aeZjBgN8Z1-vktaI_tOYIQAAAFA"]
[Tue Apr 21 01:31:50.702172 2026] [:error] [pid 11441:tid 11448] [client 51.11.245.223:41110] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZjBsixByFUvmh319DgMQAAAMU"]
[Tue Apr 21 01:31:51.224868 2026] [:error] [pid 11441:tid 11461] [client 51.11.245.223:41744] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZjB8ixByFUvmh319DgMwAAANI"]
[Tue Apr 21 01:31:51.224940 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:28396] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aeZjB8gko5iFiE8YoyQ3-wAAAY4"]
[Tue Apr 21 01:31:51.721662 2026] [:error] [pid 6928:tid 6933] [client 51.11.245.223:9834] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZjBx3y7MHq1iB0qYrqkQAAAUM"]
[Tue Apr 21 01:31:51.740842 2026] [:error] [pid 11494:tid 11507] [client 51.11.245.223:51525] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aeZjB8gko5iFiE8YoyQ3_AAAAYs"]
[Tue Apr 21 01:31:52.192630 2026] [:error] [pid 11441:tid 11447] [client 51.11.245.223:41136] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aeZjCMixByFUvmh319DgNQAAAMQ"]
[Tue Apr 21 01:31:52.213923 2026] [:error] [pid 11494:tid 11497] [client 51.11.245.223:3472] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aeZjCMgko5iFiE8YoyQ4AQAAAYE"]
[Tue Apr 21 01:31:52.662962 2026] [:error] [pid 11350:tid 11362] [client 51.11.245.223:10218] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aeZjCP4EoMBgOJuJnT0m8QAAAAM"]
[Tue Apr 21 01:31:52.710107 2026] [:error] [pid 11494:tid 11520] [client 51.11.245.223:32626] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aeZjCMgko5iFiE8YoyQ4AgAAAZg"]
[Tue Apr 21 01:31:53.132520 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:41736] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aeZjCf4EoMBgOJuJnT0m8gAAAAk"]
[Tue Apr 21 01:31:53.188753 2026] [:error] [pid 11441:tid 11460] [client 51.11.245.223:33062] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZjCcixByFUvmh319DgOAAAANE"]
[Tue Apr 21 01:31:53.602687 2026] [:error] [pid 11350:tid 11359] [client 51.11.245.223:41135] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aeZjCf4EoMBgOJuJnT0m9AAAAAA"]
[Tue Apr 21 01:31:53.670875 2026] [:error] [pid 11351:tid 11396] [client 51.11.245.223:28389] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZjCQN8Z1-vktaI_tOYIgAAAEk"]
[Tue Apr 21 01:31:54.074015 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:9724] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aeZjCv4EoMBgOJuJnT0m9wAAABU"]
[Tue Apr 21 01:31:54.147652 2026] [:error] [pid 42014:tid 42022] [client 51.11.245.223:28360] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZjCsek-00-ZI0f1Nqt7QAAAQY"]
[Tue Apr 21 01:31:54.544992 2026] [:error] [pid 11350:tid 11365] [client 51.11.245.223:41741] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aeZjCv4EoMBgOJuJnT0m-gAAAAY"]
[Tue Apr 21 01:31:54.763864 2026] [:error] [pid 11352:tid 11437] [client 51.11.245.223:51547] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aeZjCml10mhMSfJ7ir8BkwAAAJc"]
[Tue Apr 21 01:31:55.017048 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:9442] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aeZjC_4EoMBgOJuJnT0m_AAAABA"]
[Tue Apr 21 01:31:55.253320 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:4050] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZjC_4EoMBgOJuJnT0m_QAAABg"]
[Tue Apr 21 01:31:55.492325 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:9307] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aeZjCwN8Z1-vktaI_tOYJgAAAEw"]
[Tue Apr 21 01:31:55.766883 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:28391] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZjC_4EoMBgOJuJnT0nAAAAAA0"]
[Tue Apr 21 01:31:55.963649 2026] [:error] [pid 11351:tid 11389] [client 51.11.245.223:50116] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeZjCwN8Z1-vktaI_tOYJwAAAEI"]
[Tue Apr 21 01:31:56.276812 2026] [:error] [pid 6928:tid 6935] [client 51.11.245.223:34176] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZjDB3y7MHq1iB0qYrqlQAAAUU"]
[Tue Apr 21 01:31:56.438527 2026] [:error] [pid 11441:tid 11466] [client 51.11.245.223:9413] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeZjDMixByFUvmh319DgOgAAANc"]
[Tue Apr 21 01:31:56.750445 2026] [:error] [pid 11441:tid 11444] [client 51.11.245.223:51532] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeZjDMixByFUvmh319DgOwAAAME"]
[Tue Apr 21 01:31:56.910748 2026] [:error] [pid 42014:tid 42039] [client 51.11.245.223:41733] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeZjDMek-00-ZI0f1Nqt8AAAARc"]
[Tue Apr 21 01:31:57.222338 2026] [:error] [pid 11352:tid 11432] [client 51.11.245.223:48775] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZjDWl10mhMSfJ7ir8BlQAAAJI"]
[Tue Apr 21 01:31:57.382773 2026] [:error] [pid 11350:tid 11379] [client 51.11.245.223:41139] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeZjDf4EoMBgOJuJnT0nBgAAABQ"]
[Tue Apr 21 01:31:57.729109 2026] [:error] [pid 11350:tid 11364] [client 51.11.245.223:47245] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZjDf4EoMBgOJuJnT0nBwAAAAU"]
[Tue Apr 21 01:31:57.853609 2026] [:error] [pid 42014:tid 42017] [client 51.11.245.223:41123] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZjDcek-00-ZI0f1Nqt8gAAAQE"]
[Tue Apr 21 01:31:58.200232 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:47238] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZjDv4EoMBgOJuJnT0nCQAAABU"]
[Tue Apr 21 01:31:58.324594 2026] [:error] [pid 42014:tid 42023] [client 51.11.245.223:50115] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZjDsek-00-ZI0f1Nqt8wAAAQc"]
[Tue Apr 21 01:31:58.672847 2026] [:error] [pid 11352:tid 11421] [client 51.11.245.223:32606] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeZjDml10mhMSfJ7ir8BlgAAAIc"]
[Tue Apr 21 01:31:58.796738 2026] [:error] [pid 42014:tid 42040] [client 51.11.245.223:50145] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZjDsek-00-ZI0f1Nqt-AAAARg"]
[Tue Apr 21 01:31:59.143767 2026] [:error] [pid 11350:tid 11363] [client 51.11.245.223:33029] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aeZjD_4EoMBgOJuJnT0nGAAAAAQ"]
[Tue Apr 21 01:31:59.267547 2026] [:error] [pid 11441:tid 11461] [client 51.11.245.223:9303] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZjD8ixByFUvmh319DgPQAAANI"]
[Tue Apr 21 01:31:59.616966 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:49518] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aeZjDwN8Z1-vktaI_tOYLwAAAFI"]
[Tue Apr 21 01:31:59.737974 2026] [:error] [pid 11352:tid 11419] [client 51.11.245.223:50123] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aeZjD2l10mhMSfJ7ir8BmAAAAIU"]
[Tue Apr 21 01:32:00.092519 2026] [:error] [pid 11494:tid 11511] [client 51.11.245.223:47305] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aeZjEMgko5iFiE8YoyQ4BAAAAY8"]
[Tue Apr 21 01:32:00.209156 2026] [:error] [pid 42014:tid 42019] [client 51.11.245.223:41151] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aeZjEMek-00-ZI0f1Nqt_gAAAQM"]
[Tue Apr 21 01:32:00.565179 2026] [:error] [pid 11350:tid 11359] [client 51.11.245.223:19853] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aeZjEP4EoMBgOJuJnT0nGgAAAAA"]
[Tue Apr 21 01:32:00.681027 2026] [:error] [pid 11494:tid 11520] [client 51.11.245.223:50086] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aeZjEMgko5iFiE8YoyQ4BQAAAZg"]
[Tue Apr 21 01:32:01.044602 2026] [:error] [pid 42014:tid 42026] [client 51.11.245.223:3462] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aeZjEcek-00-ZI0f1NquAgAAAQo"]
[Tue Apr 21 01:32:01.153443 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:41118] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aeZjEf4EoMBgOJuJnT0nHQAAABA"]
[Tue Apr 21 01:32:01.520342 2026] [:error] [pid 42014:tid 42036] [client 51.11.245.223:32589] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aeZjEcek-00-ZI0f1NquAwAAARQ"]
[Tue Apr 21 01:32:01.626295 2026] [:error] [pid 42014:tid 42039] [client 51.11.245.223:50153] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aeZjEcek-00-ZI0f1NquBAAAARc"]
[Tue Apr 21 01:32:01.998138 2026] [:error] [pid 11350:tid 11363] [client 51.11.245.223:36781] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aeZjEf4EoMBgOJuJnT0nHgAAAAQ"]
[Tue Apr 21 01:32:02.098624 2026] [:error] [pid 11352:tid 11436] [client 51.11.245.223:9437] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aeZjEml10mhMSfJ7ir8BmgAAAJY"]
[Tue Apr 21 01:32:02.471995 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:49511] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aeZjEv4EoMBgOJuJnT0nIAAAAAk"]
[Tue Apr 21 01:32:02.569182 2026] [:error] [pid 11352:tid 11417] [client 51.11.245.223:9298] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aeZjEml10mhMSfJ7ir8BmwAAAIM"]
[Tue Apr 21 01:32:02.953577 2026] [:error] [pid 11441:tid 11457] [client 51.11.245.223:4038] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeZjEsixByFUvmh319DgQQAAAM4"]
[Tue Apr 21 01:32:03.039487 2026] [:error] [pid 11441:tid 11460] [client 51.11.245.223:41773] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aeZjE8ixByFUvmh319DgQgAAANE"]
[Tue Apr 21 01:32:03.439906 2026] [:error] [pid 11350:tid 11360] [client 51.11.245.223:49512] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeZjE_4EoMBgOJuJnT0nIwAAAAE"]
[Tue Apr 21 01:32:03.509734 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:50169] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aeZjE_4EoMBgOJuJnT0nJQAAAAg"]
[Tue Apr 21 01:32:03.934510 2026] [:error] [pid 11350:tid 11366] [client 51.11.245.223:4036] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeZjE_4EoMBgOJuJnT0nKAAAAAc"]
[Tue Apr 21 01:32:03.981702 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:41756] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aeZjEwN8Z1-vktaI_tOYMQAAAE4"]
[Tue Apr 21 01:32:04.407804 2026] [:error] [pid 11441:tid 11464] [client 51.11.245.223:48831] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xozx.php"] [unique_id "aeZjFMixByFUvmh319DgRQAAANU"]
[Tue Apr 21 01:32:04.453763 2026] [:error] [pid 11350:tid 11362] [client 51.11.245.223:50121] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aeZjFP4EoMBgOJuJnT0nKwAAAAM"]
[Tue Apr 21 01:32:04.880737 2026] [:error] [pid 11350:tid 11364] [client 51.11.245.223:47254] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZjFP4EoMBgOJuJnT0nLwAAAAU"]
[Tue Apr 21 01:32:04.923854 2026] [:error] [pid 11351:tid 11404] [client 51.11.245.223:41121] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aeZjFAN8Z1-vktaI_tOYMgAAAFE"]
[Tue Apr 21 01:32:05.353193 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:32599] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZjFf4EoMBgOJuJnT0nMwAAABg"]
[Tue Apr 21 01:32:05.393756 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:50108] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aeZjFf4EoMBgOJuJnT0nNAAAABM"]
[Tue Apr 21 01:32:05.827687 2026] [:error] [pid 11350:tid 11359] [client 51.11.245.223:33040] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZjFf4EoMBgOJuJnT0nNwAAAAA"]
[Tue Apr 21 01:32:05.863988 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:50094] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aeZjFf4EoMBgOJuJnT0nOAAAAA0"]
[Tue Apr 21 01:32:06.302923 2026] [:error] [pid 6928:tid 6952] [client 51.11.245.223:48829] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeZjFh3y7MHq1iB0qYrqmAAAAVY"]
[Tue Apr 21 01:32:06.334982 2026] [:error] [pid 11350:tid 11381] [client 51.11.245.223:50095] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aeZjFv4EoMBgOJuJnT0nOwAAABY"]
[Tue Apr 21 01:32:06.774991 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:49521] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aeZjFv4EoMBgOJuJnT0nPAAAAA8"]
[Tue Apr 21 01:32:06.805312 2026] [:error] [pid 11350:tid 11364] [client 51.11.245.223:50048] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aeZjFv4EoMBgOJuJnT0nPQAAAAU"]
[Tue Apr 21 01:32:07.247771 2026] [:error] [pid 11350:tid 11365] [client 51.11.245.223:48777] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aeZjF_4EoMBgOJuJnT0nPwAAAAY"]
[Tue Apr 21 01:32:07.275901 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:50170] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aeZjF_4EoMBgOJuJnT0nQAAAABA"]
[Tue Apr 21 01:32:07.722456 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:34223] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aeZjF_4EoMBgOJuJnT0nQgAAABg"]
[Tue Apr 21 01:32:07.745528 2026] [:error] [pid 11350:tid 11366] [client 51.11.245.223:41089] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aeZjF_4EoMBgOJuJnT0nRAAAAAc"]
[Tue Apr 21 01:32:08.193779 2026] [:error] [pid 6928:tid 6940] [client 51.11.245.223:19886] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aeZjGB3y7MHq1iB0qYrqnAAAAUo"]
[Tue Apr 21 01:32:08.214955 2026] [:error] [pid 11352:tid 11427] [client 51.11.245.223:9683] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aeZjGGl10mhMSfJ7ir8BnwAAAI0"]
[Tue Apr 21 01:32:08.667192 2026] [:error] [pid 11351:tid 11393] [client 51.11.245.223:19876] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aeZjGAN8Z1-vktaI_tOYMwAAAEY"]
[Tue Apr 21 01:32:08.685813 2026] [:error] [pid 11350:tid 11376] [client 51.11.245.223:41771] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aeZjGP4EoMBgOJuJnT0nSAAAABE"]
[Tue Apr 21 01:32:09.138872 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:49531] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aeZjGf4EoMBgOJuJnT0nSQAAAAo"]
[Tue Apr 21 01:32:09.157123 2026] [:error] [pid 6928:tid 6944] [client 51.11.245.223:9806] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeZjGR3y7MHq1iB0qYrqoAAAAU4"]
[Tue Apr 21 01:32:09.612135 2026] [:error] [pid 11350:tid 11362] [client 51.11.245.223:46565] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aeZjGf4EoMBgOJuJnT0nSwAAAAM"]
[Tue Apr 21 01:32:09.629047 2026] [:error] [pid 11351:tid 11389] [client 51.11.245.223:9453] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeZjGQN8Z1-vktaI_tOYNgAAAEI"]
[Tue Apr 21 01:32:10.083879 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:19845] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aeZjGv4EoMBgOJuJnT0nTQAAABg"]
[Tue Apr 21 01:32:10.099675 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:41743] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeZjGv4EoMBgOJuJnT0nTgAAABM"]
[Tue Apr 21 01:32:10.555967 2026] [:error] [pid 11350:tid 11359] [client 51.11.245.223:34199] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aeZjGv4EoMBgOJuJnT0nTwAAAAA"]
[Tue Apr 21 01:32:10.570269 2026] [:error] [pid 11350:tid 11379] [client 51.11.245.223:50083] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeZjGv4EoMBgOJuJnT0nUAAAABQ"]
[Tue Apr 21 01:32:11.026761 2026] [:error] [pid 6928:tid 6931] [client 51.11.245.223:34184] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aeZjGx3y7MHq1iB0qYrqpQAAAUE"]
[Tue Apr 21 01:32:11.039974 2026] [:error] [pid 6928:tid 6938] [client 51.11.245.223:9314] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aeZjGx3y7MHq1iB0qYrqpgAAAUg"]
[Tue Apr 21 01:32:11.497513 2026] [:error] [pid 11350:tid 11376] [client 51.11.245.223:47294] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aeZjG_4EoMBgOJuJnT0nVAAAABE"]
[Tue Apr 21 01:32:11.510410 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:50117] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aeZjGwN8Z1-vktaI_tOYOwAAAE8"]
[Tue Apr 21 01:32:11.970295 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:51560] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aeZjGwN8Z1-vktaI_tOYPAAAAE0"]
[Tue Apr 21 01:32:11.982146 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:41141] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aeZjGwN8Z1-vktaI_tOYPQAAAFI"]
[Tue Apr 21 01:32:12.446681 2026] [:error] [pid 11350:tid 11364] [client 51.11.245.223:47243] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aeZjHP4EoMBgOJuJnT0nVQAAAAU"]
[Tue Apr 21 01:32:12.451735 2026] [:error] [pid 11351:tid 11403] [client 51.11.245.223:41779] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aeZjHAN8Z1-vktaI_tOYPwAAAFA"]
[Tue Apr 21 01:32:12.917836 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:48788] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aeZjHAN8Z1-vktaI_tOYQQAAAEg"]
[Tue Apr 21 01:32:12.929429 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:9411] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aeZjHAN8Z1-vktaI_tOYQgAAAEM"]
[Tue Apr 21 01:32:13.389335 2026] [:error] [pid 11351:tid 11396] [client 51.11.245.223:47261] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aeZjHQN8Z1-vktaI_tOYQwAAAEk"]
[Tue Apr 21 01:32:13.406752 2026] [:error] [pid 11351:tid 11404] [client 51.11.245.223:9428] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aeZjHQN8Z1-vktaI_tOYRAAAAFE"]
[Tue Apr 21 01:32:13.860308 2026] [:error] [pid 6928:tid 6932] [client 51.11.245.223:48774] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aeZjHR3y7MHq1iB0qYrqrAAAAUI"]
[Tue Apr 21 01:32:13.877353 2026] [:error] [pid 11351:tid 11388] [client 51.11.245.223:41129] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aeZjHQN8Z1-vktaI_tOYRwAAAEE"]
[Tue Apr 21 01:32:14.334233 2026] [:error] [pid 6928:tid 6940] [client 51.11.245.223:51546] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aeZjHh3y7MHq1iB0qYrqrQAAAUo"]
[Tue Apr 21 01:32:14.349679 2026] [:error] [pid 6928:tid 6947] [client 51.11.245.223:50132] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aeZjHh3y7MHq1iB0qYrqrgAAAVE"]
[Tue Apr 21 01:32:14.804510 2026] [:error] [pid 42014:tid 42033] [client 51.11.245.223:34209] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aeZjHsek-00-ZI0f1NquCAAAARE"]
[Tue Apr 21 01:32:14.821172 2026] [:error] [pid 42014:tid 42035] [client 51.11.245.223:50109] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aeZjHsek-00-ZI0f1NquCQAAARM"]
[Tue Apr 21 01:32:15.275853 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:49520] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aeZjHwN8Z1-vktaI_tOYSwAAAEo"]
[Tue Apr 21 01:32:15.298027 2026] [:error] [pid 42014:tid 42026] [client 51.11.245.223:50074] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aeZjH8ek-00-ZI0f1NquCwAAAQo"]
[Tue Apr 21 01:32:15.747507 2026] [:error] [pid 42014:tid 42028] [client 51.11.245.223:19883] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aeZjH8ek-00-ZI0f1NquDAAAAQw"]
[Tue Apr 21 01:32:15.769773 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:9425] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aeZjH_4EoMBgOJuJnT0nXwAAAAo"]
[Tue Apr 21 01:32:16.220561 2026] [:error] [pid 11351:tid 11403] [client 51.11.245.223:49494] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeZjIAN8Z1-vktaI_tOYTQAAAFA"]
[Tue Apr 21 01:32:16.240994 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:50098] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aeZjIP4EoMBgOJuJnT0nYQAAAAk"]
[Tue Apr 21 01:32:16.693834 2026] [:error] [pid 11350:tid 11379] [client 51.11.245.223:47288] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeZjIP4EoMBgOJuJnT0nYwAAABQ"]
[Tue Apr 21 01:32:16.711476 2026] [:error] [pid 6928:tid 6945] [client 51.11.245.223:9438] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZjIB3y7MHq1iB0qYrqsgAAAU8"]
[Tue Apr 21 01:32:17.170445 2026] [:error] [pid 11351:tid 11398] [client 51.11.245.223:33045] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeZjIQN8Z1-vktaI_tOYUAAAAEs"]
[Tue Apr 21 01:32:17.182537 2026] [:error] [pid 11494:tid 11504] [client 51.11.245.223:9426] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZjIcgko5iFiE8YoyQ4CAAAAYg"]
[Tue Apr 21 01:32:17.653539 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:9464] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZjIf4EoMBgOJuJnT0nZQAAAAg"]
[Tue Apr 21 01:32:17.666302 2026] [:error] [pid 11350:tid 11363] [client 51.11.245.223:51549] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeZjIf4EoMBgOJuJnT0nZgAAAAQ"]
[Tue Apr 21 01:32:18.125630 2026] [:error] [pid 11350:tid 11360] [client 51.11.245.223:9295] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZjIv4EoMBgOJuJnT0naAAAAAE"]
[Tue Apr 21 01:32:18.136708 2026] [:error] [pid 6928:tid 6950] [client 51.11.245.223:3243] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aeZjIh3y7MHq1iB0qYrqswAAAVQ"]
[Tue Apr 21 01:32:18.598898 2026] [:error] [pid 42014:tid 42039] [client 51.11.245.223:9338] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjIsek-00-ZI0f1NquDQAAARc"]
[Tue Apr 21 01:32:18.637378 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:34203] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aeZjIv4EoMBgOJuJnT0nagAAABU"]
[Tue Apr 21 01:32:19.069091 2026] [:error] [pid 11350:tid 11365] [client 51.11.245.223:41785] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjI_4EoMBgOJuJnT0nawAAAAY"]
[Tue Apr 21 01:32:19.109657 2026] [:error] [pid 11350:tid 11381] [client 51.11.245.223:34214] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aeZjI_4EoMBgOJuJnT0nbAAAABY"]
[Tue Apr 21 01:32:19.540391 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:41753] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjI_4EoMBgOJuJnT0nbwAAAA8"]
[Tue Apr 21 01:32:19.583790 2026] [:error] [pid 6928:tid 6933] [client 51.11.245.223:19855] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aeZjIx3y7MHq1iB0qYrqtAAAAUM"]
[Tue Apr 21 01:32:20.012166 2026] [:error] [pid 6928:tid 6951] [client 51.11.245.223:9455] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjJB3y7MHq1iB0qYrqtQAAAVU"]
[Tue Apr 21 01:32:20.071763 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:3522] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aeZjJB3y7MHq1iB0qYrqtgAAAVc"]
[Tue Apr 21 01:32:20.481558 2026] [:error] [pid 42014:tid 42023] [client 51.11.245.223:9341] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeZjJMek-00-ZI0f1NquDwAAAQc"]
[Tue Apr 21 01:32:20.567821 2026] [:error] [pid 6928:tid 6952] [client 51.11.245.223:3547] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aeZjJB3y7MHq1iB0qYrqtwAAAVY"]
[Tue Apr 21 01:32:20.950595 2026] [:error] [pid 11352:tid 11417] [client 51.11.245.223:50110] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeZjJGl10mhMSfJ7ir8BpAAAAIM"]
[Tue Apr 21 01:32:21.063365 2026] [:error] [pid 6928:tid 6932] [client 51.11.245.223:3570] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aeZjJR3y7MHq1iB0qYrquAAAAUI"]
[Tue Apr 21 01:32:21.421371 2026] [:error] [pid 6928:tid 6942] [client 51.11.245.223:9837] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeZjJR3y7MHq1iB0qYrqugAAAUw"]
[Tue Apr 21 01:32:21.581404 2026] [:error] [pid 11352:tid 11424] [client 51.11.245.223:3550] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aeZjJWl10mhMSfJ7ir8BqAAAAIo"]
[Tue Apr 21 01:32:21.892179 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:9302] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeZjJQN8Z1-vktaI_tOYVgAAAFc"]
[Tue Apr 21 01:32:22.101669 2026] [:error] [pid 11352:tid 11425] [client 51.11.245.223:3535] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aeZjJml10mhMSfJ7ir8BqwAAAIs"]
[Tue Apr 21 01:32:22.363289 2026] [:error] [pid 6928:tid 6939] [client 51.11.245.223:9281] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeZjJh3y7MHq1iB0qYrqvgAAAUk"]
[Tue Apr 21 01:32:22.627733 2026] [:error] [pid 11350:tid 11373] [client 51.11.245.223:32583] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aeZjJv4EoMBgOJuJnT0ndQAAAA4"]
[Tue Apr 21 01:32:22.834657 2026] [:error] [pid 6928:tid 6931] [client 51.11.245.223:9334] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeZjJh3y7MHq1iB0qYrqwAAAAUE"]
[Tue Apr 21 01:32:23.132870 2026] [:error] [pid 11494:tid 11518] [client 51.11.245.223:50932] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aeZjJ8gko5iFiE8YoyQ4CwAAAZY"]
[Tue Apr 21 01:32:23.306913 2026] [:error] [pid 11494:tid 11497] [client 51.11.245.223:9306] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeZjJ8gko5iFiE8YoyQ4DQAAAYE"]
[Tue Apr 21 01:32:23.658229 2026] [:error] [pid 11494:tid 11508] [client 51.11.245.223:46586] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aeZjJ8gko5iFiE8YoyQ4DgAAAYw"]
[Tue Apr 21 01:32:23.778519 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:9836] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeZjJ_4EoMBgOJuJnT0neAAAAAo"]
[Tue Apr 21 01:32:24.175587 2026] [:error] [pid 42014:tid 42025] [client 51.11.245.223:34181] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZjKMek-00-ZI0f1NquEwAAAQk"]
[Tue Apr 21 01:32:24.249841 2026] [:error] [pid 11352:tid 11427] [client 51.11.245.223:9672] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeZjKGl10mhMSfJ7ir8BrQAAAI0"]
[Tue Apr 21 01:32:24.669890 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:47249] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZjKAN8Z1-vktaI_tOYWQAAAEc"]
[Tue Apr 21 01:32:24.721920 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:9311] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeZjKAN8Z1-vktaI_tOYWgAAAEM"]
[Tue Apr 21 01:32:25.153864 2026] [:error] [pid 11352:tid 11434] [client 51.11.245.223:47248] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZjKWl10mhMSfJ7ir8BrwAAAJQ"]
[Tue Apr 21 01:32:25.192880 2026] [:error] [pid 6928:tid 6930] [client 51.11.245.223:10109] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeZjKR3y7MHq1iB0qYrqwwAAAUA"]
[Tue Apr 21 01:32:25.632483 2026] [:error] [pid 11441:tid 11465] [client 51.11.245.223:49527] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeZjKcixByFUvmh319DgTAAAANY"]
[Tue Apr 21 01:32:25.663368 2026] [:error] [pid 42014:tid 42038] [client 51.11.245.223:50152] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeZjKcek-00-ZI0f1NquFAAAARY"]
[Tue Apr 21 01:32:26.108437 2026] [:error] [pid 11441:tid 11463] [client 51.11.245.223:19898] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjKsixByFUvmh319DgTgAAANQ"]
[Tue Apr 21 01:32:26.134623 2026] [:error] [pid 6928:tid 6950] [client 51.11.245.223:50075] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeZjKh3y7MHq1iB0qYrqxgAAAVQ"]
[Tue Apr 21 01:32:26.588337 2026] [:error] [pid 42014:tid 42040] [client 51.11.245.223:48818] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjKsek-00-ZI0f1NquFQAAARg"]
[Tue Apr 21 01:32:26.605929 2026] [:error] [pid 6928:tid 6933] [client 51.11.245.223:50173] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeZjKh3y7MHq1iB0qYrqxwAAAUM"]
[Tue Apr 21 01:32:27.077506 2026] [:error] [pid 11351:tid 11388] [client 51.11.245.223:41751] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeZjKwN8Z1-vktaI_tOYXAAAAEE"]
[Tue Apr 21 01:32:27.079897 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:48800] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjKx3y7MHq1iB0qYrqyAAAAVc"]
[Tue Apr 21 01:32:27.547517 2026] [:error] [pid 11352:tid 11424] [client 51.11.245.223:41770] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeZjK2l10mhMSfJ7ir8BtgAAAIo"]
[Tue Apr 21 01:32:27.552072 2026] [:error] [pid 11352:tid 11414] [client 51.11.245.223:34186] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjK2l10mhMSfJ7ir8BtwAAAIA"]
[Tue Apr 21 01:32:28.018853 2026] [:error] [pid 11441:tid 11446] [client 51.11.245.223:57349] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ewp.php"] [unique_id "aeZjLMixByFUvmh319DgTwAAAMM"]
[Tue Apr 21 01:32:28.023840 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:46569] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeZjLAN8Z1-vktaI_tOYXgAAAEA"]
[Tue Apr 21 01:32:28.489544 2026] [:error] [pid 11441:tid 11445] [client 51.11.245.223:50128] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ewp.php"] [unique_id "aeZjLMixByFUvmh319DgUAAAAMI"]
[Tue Apr 21 01:32:28.501006 2026] [:error] [pid 42014:tid 42019] [client 51.11.245.223:47256] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeZjLMek-00-ZI0f1NquFgAAAQM"]
[Tue Apr 21 01:32:28.960551 2026] [:error] [pid 6928:tid 6947] [client 51.11.245.223:50055] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ewp.php"] [unique_id "aeZjLB3y7MHq1iB0qYrqzAAAAVE"]
[Tue Apr 21 01:32:29.028812 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:50916] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeZjLQN8Z1-vktaI_tOYXwAAAFM"]
[Tue Apr 21 01:32:29.434295 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:56719] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ewp.php"] [unique_id "aeZjLQN8Z1-vktaI_tOYYQAAAE0"]
[Tue Apr 21 01:32:29.546343 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:56137] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aeZjLQN8Z1-vktaI_tOYYgAAAFc"]
[Tue Apr 21 01:32:29.906603 2026] [:error] [pid 11352:tid 11434] [client 51.11.245.223:50157] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "aeZjLWl10mhMSfJ7ir8BugAAAJQ"]
[Tue Apr 21 01:32:30.082113 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:50916] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeZjLgN8Z1-vktaI_tOYZgAAAE8"]
[Tue Apr 21 01:32:30.378636 2026] [:error] [pid 11351:tid 11398] [client 51.11.245.223:41729] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "aeZjLgN8Z1-vktaI_tOYaQAAAEs"]
[Tue Apr 21 01:32:30.561016 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:56165] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeZjLgN8Z1-vktaI_tOYagAAAEw"]
[Tue Apr 21 01:32:30.855844 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:56723] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "aeZjLv4EoMBgOJuJnT0newAAABU"]
[Tue Apr 21 01:32:31.100948 2026] [:error] [pid 11350:tid 11361] [client 51.11.245.223:19882] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeZjL_4EoMBgOJuJnT0nfAAAAAI"]
[Tue Apr 21 01:32:31.328266 2026] [:error] [pid 11350:tid 11364] [client 51.11.245.223:41777] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "aeZjL_4EoMBgOJuJnT0nfQAAAAU"]
[Tue Apr 21 01:32:31.580666 2026] [:error] [pid 11351:tid 11392] [client 51.11.245.223:3495] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/huya.php"] [unique_id "aeZjLwN8Z1-vktaI_tOYbgAAAEU"]
[Tue Apr 21 01:32:31.799803 2026] [:error] [pid 11350:tid 11381] [client 51.11.245.223:41108] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjL_4EoMBgOJuJnT0ngAAAABY"]
[Tue Apr 21 01:32:32.094286 2026] [:error] [pid 11441:tid 11454] [client 51.11.245.223:56170] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeZjMMixByFUvmh319DgUgAAAMs"]
[Tue Apr 21 01:32:32.269703 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:57357] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjMAN8Z1-vktaI_tOYcQAAAFM"]
[Tue Apr 21 01:32:32.571005 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:56117] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeZjMP4EoMBgOJuJnT0nggAAAAk"]
[Tue Apr 21 01:32:32.739768 2026] [:error] [pid 6928:tid 6930] [client 51.11.245.223:50148] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjMB3y7MHq1iB0qYrq0AAAAUA"]
[Tue Apr 21 01:32:33.061538 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:50913] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeZjMf4EoMBgOJuJnT0nhAAAAA8"]
[Tue Apr 21 01:32:33.211194 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:50073] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeZjMf4EoMBgOJuJnT0nhQAAABM"]
[Tue Apr 21 01:32:33.538453 2026] [:error] [pid 42014:tid 42028] [client 51.11.245.223:3530] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/puc.php"] [unique_id "aeZjMcek-00-ZI0f1NquGQAAAQw"]
[Tue Apr 21 01:32:33.681822 2026] [:error] [pid 11494:tid 11518] [client 51.11.245.223:41764] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeZjMcgko5iFiE8YoyQ4FQAAAZY"]
[Tue Apr 21 01:32:34.016861 2026] [:error] [pid 6928:tid 6933] [client 51.11.245.223:3545] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeZjMh3y7MHq1iB0qYrq0wAAAUM"]
[Tue Apr 21 01:32:34.154589 2026] [:error] [pid 11351:tid 11393] [client 51.11.245.223:56761] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeZjMgN8Z1-vktaI_tOYcwAAAEY"]
[Tue Apr 21 01:32:34.491367 2026] [:error] [pid 11352:tid 11415] [client 51.11.245.223:49488] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeZjMml10mhMSfJ7ir8BvQAAAIE"]
[Tue Apr 21 01:32:34.628056 2026] [:error] [pid 11352:tid 11429] [client 51.11.245.223:57391] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeZjMml10mhMSfJ7ir8BvgAAAI8"]
[Tue Apr 21 01:32:34.990768 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:49509] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeZjMv4EoMBgOJuJnT0niQAAABA"]
[Tue Apr 21 01:32:35.112567 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:57405] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "aeZjM_4EoMBgOJuJnT0nigAAAA0"]
[Tue Apr 21 01:32:35.465403 2026] [:error] [pid 11350:tid 11361] [client 51.11.245.223:56165] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "aeZjM_4EoMBgOJuJnT0njAAAAAI"]
[Tue Apr 21 01:32:35.583716 2026] [:error] [pid 6928:tid 6932] [client 51.11.245.223:9286] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aeZjMx3y7MHq1iB0qYrq1gAAAUI"]
[Tue Apr 21 01:32:35.956135 2026] [:error] [pid 11350:tid 11382] [client 51.11.245.223:3555] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ewp.php"] [unique_id "aeZjM_4EoMBgOJuJnT0njQAAABc"]
[Tue Apr 21 01:32:36.057302 2026] [:error] [pid 11350:tid 11373] [client 51.11.245.223:57400] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Tue Apr 21 01:32:36.296077 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:57400] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Tue Apr 21 01:32:36.432799 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:48798] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Tue Apr 21 01:32:36.535546 2026] [:error] [pid 11350:tid 11370] [client 51.11.245.223:57400] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Tue Apr 21 01:32:36.673556 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:48798] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Tue Apr 21 01:32:36.772807 2026] [:error] [pid 11350:tid 11363] [client 51.11.245.223:57400] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Tue Apr 21 01:32:36.913316 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:48798] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Tue Apr 21 01:32:37.011101 2026] [:error] [pid 11350:tid 11359] [client 51.11.245.223:57400] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Tue Apr 21 01:32:37.153922 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:48798] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Tue Apr 21 01:32:37.249743 2026] [:error] [pid 11350:tid 11361] [client 51.11.245.223:57400] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Tue Apr 21 01:32:37.391536 2026] [:error] [pid 11350:tid 11365] [client 51.11.245.223:48798] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Tue Apr 21 01:32:37.626969 2026] [:error] [pid 11350:tid 11362] [client 51.11.245.223:48798] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeZjNf4EoMBgOJuJnT0noQAAAAM"]
[Tue Apr 21 01:32:37.723408 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:57400] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeZjNf4EoMBgOJuJnT0nogAAAA8"]
[Tue Apr 21 01:32:38.109090 2026] [:error] [pid 6928:tid 6935] [client 51.11.245.223:48782] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeZjNh3y7MHq1iB0qYrq2QAAAUU"]
[Tue Apr 21 01:32:38.193571 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:50126] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeZjNv4EoMBgOJuJnT0npwAAAAg"]
[Tue Apr 21 01:32:38.602544 2026] [:error] [pid 11441:tid 11449] [client 51.11.245.223:49477] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeZjNsixByFUvmh319DgVgAAAMY"]
[Tue Apr 21 01:32:38.663904 2026] [:error] [pid 11350:tid 11359] [client 51.11.245.223:56715] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeZjNv4EoMBgOJuJnT0nqgAAAAA"]
[Tue Apr 21 01:32:39.109445 2026] [:error] [pid 11350:tid 11361] [client 51.11.245.223:48785] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aeZjN_4EoMBgOJuJnT0nrgAAAAI"]
[Tue Apr 21 01:32:39.134574 2026] [:error] [pid 11441:tid 11453] [client 51.11.245.223:56760] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeZjN8ixByFUvmh319DgVwAAAMo"]
[Tue Apr 21 01:32:39.604825 2026] [:error] [pid 11441:tid 11461] [client 51.11.245.223:56739] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeZjN8ixByFUvmh319DgWQAAANI"]
[Tue Apr 21 01:32:39.620442 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:34237] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeZjNwN8Z1-vktaI_tOYewAAAE0"]
[Tue Apr 21 01:32:40.079175 2026] [:error] [pid 11441:tid 11447] [client 51.11.245.223:56737] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeZjOMixByFUvmh319DgWgAAAMQ"]
[Tue Apr 21 01:32:40.106749 2026] [:error] [pid 11350:tid 11364] [client 51.11.245.223:56091] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeZjOP4EoMBgOJuJnT0ntAAAAAU"]
[Tue Apr 21 01:32:40.552139 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:41150] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeZjOP4EoMBgOJuJnT0nugAAABg"]
[Tue Apr 21 01:32:40.592069 2026] [:error] [pid 11441:tid 11458] [client 51.11.245.223:49486] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeZjOMixByFUvmh319DgXAAAAM8"]
[Tue Apr 21 01:32:41.022730 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:56752] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeZjOf4EoMBgOJuJnT0nvQAAAAo"]
[Tue Apr 21 01:32:41.100174 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:46583] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aeZjOf4EoMBgOJuJnT0nvwAAABI"]
[Tue Apr 21 01:32:41.498784 2026] [:error] [pid 11350:tid 11365] [client 51.11.245.223:41746] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeZjOf4EoMBgOJuJnT0nwgAAAAY"]
[Tue Apr 21 01:32:41.586147 2026] [:error] [pid 11350:tid 11381] [client 51.11.245.223:50938] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeZjOf4EoMBgOJuJnT0nxAAAABY"]
[Tue Apr 21 01:32:41.969556 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:9401] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeZjOf4EoMBgOJuJnT0nygAAAA0"]
[Tue Apr 21 01:32:42.059513 2026] [:error] [pid 11494:tid 11509] [client 51.11.245.223:19871] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeZjOsgko5iFiE8YoyQ4KgAAAY0"]
[Tue Apr 21 01:32:42.441064 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:56724] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeZjOv4EoMBgOJuJnT0nzAAAABg"]
[Tue Apr 21 01:32:42.533642 2026] [:error] [pid 42014:tid 42036] [client 51.11.245.223:36737] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeZjOsek-00-ZI0f1NquHAAAARQ"]
[Tue Apr 21 01:32:42.912096 2026] [:error] [pid 11352:tid 11414] [client 51.11.245.223:50174] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeZjOml10mhMSfJ7ir8BxAAAAIA"]
[Tue Apr 21 01:32:43.027675 2026] [:error] [pid 11441:tid 11456] [client 51.11.245.223:34178] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aeZjO8ixByFUvmh319DgXQAAAM0"]
[Tue Apr 21 01:32:43.384222 2026] [:error] [pid 11351:tid 11392] [client 51.11.245.223:10086] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeZjOwN8Z1-vktaI_tOYgAAAAEU"]
[Tue Apr 21 01:32:43.536137 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:3573] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aeZjOwN8Z1-vktaI_tOYggAAAEM"]
[Tue Apr 21 01:32:43.855680 2026] [:error] [pid 11352:tid 11416] [client 51.11.245.223:56753] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeZjO2l10mhMSfJ7ir8BxQAAAII"]
[Tue Apr 21 01:32:44.027458 2026] [:error] [pid 42014:tid 42038] [client 51.11.245.223:56140] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aeZjPMek-00-ZI0f1NquHgAAARY"]
[Tue Apr 21 01:32:44.327226 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:9288] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeZjPB3y7MHq1iB0qYrq8AAAAVc"]
[Tue Apr 21 01:32:44.516649 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:34189] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aeZjPAN8Z1-vktaI_tOYhAAAAEA"]
[Tue Apr 21 01:32:44.798101 2026] [:error] [pid 11494:tid 11499] [client 51.11.245.223:41788] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeZjPMgko5iFiE8YoyQ4MgAAAYM"]
[Tue Apr 21 01:32:45.020081 2026] [:error] [pid 11494:tid 11502] [client 51.11.245.223:3878] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aeZjPcgko5iFiE8YoyQ4MwAAAYY"]
[Tue Apr 21 01:32:45.269636 2026] [:error] [pid 11351:tid 11404] [client 51.11.245.223:41147] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeZjPQN8Z1-vktaI_tOYhgAAAFE"]
[Tue Apr 21 01:32:45.516713 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:46582] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aeZjPcgko5iFiE8YoyQ4NwAAAY4"]
[Tue Apr 21 01:32:45.739689 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:41101] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeZjPQN8Z1-vktaI_tOYigAAAE4"]
[Tue Apr 21 01:32:46.005733 2026] [:error] [pid 11351:tid 11391] [client 51.11.245.223:46538] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aeZjPgN8Z1-vktaI_tOYjAAAAEQ"]
[Tue Apr 21 01:32:46.210664 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:10006] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeZjPgN8Z1-vktaI_tOYjgAAAFU"]
[Tue Apr 21 01:32:46.500436 2026] [:error] [pid 11350:tid 11381] [client 51.11.245.223:49496] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aeZjPv4EoMBgOJuJnT0n3wAAABY"]
[Tue Apr 21 01:32:46.680445 2026] [:error] [pid 11494:tid 11507] [client 51.11.245.223:57384] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeZjPsgko5iFiE8YoyQ4OQAAAYs"]
[Tue Apr 21 01:32:47.014059 2026] [:error] [pid 11350:tid 11360] [client 51.11.245.223:3531] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aeZjP_4EoMBgOJuJnT0n4QAAAAE"]
[Tue Apr 21 01:32:47.157053 2026] [:error] [pid 11350:tid 11370] [client 51.11.245.223:56767] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeZjP_4EoMBgOJuJnT0n4gAAAAs"]
[Tue Apr 21 01:32:47.536009 2026] [:error] [pid 11350:tid 11371] [client 51.11.245.223:50888] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZjP_4EoMBgOJuJnT0n5gAAAAw"]
[Tue Apr 21 01:32:47.627376 2026] [:error] [pid 11350:tid 11376] [client 51.11.245.223:41105] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeZjP_4EoMBgOJuJnT0n5wAAABE"]
[Tue Apr 21 01:32:48.025352 2026] [:error] [pid 11441:tid 11460] [client 51.11.245.223:19897] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZjQMixByFUvmh319DgYAAAANE"]
[Tue Apr 21 01:32:48.097741 2026] [:error] [pid 11441:tid 11465] [client 51.11.245.223:41088] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeZjQMixByFUvmh319DgYQAAANY"]
[Tue Apr 21 01:32:48.562225 2026] [:error] [pid 11441:tid 11467] [client 51.11.245.223:56174] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZjQMixByFUvmh319DgYwAAANg"]
[Tue Apr 21 01:32:48.567220 2026] [:error] [pid 11494:tid 11509] [client 51.11.245.223:57395] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeZjQMgko5iFiE8YoyQ4PwAAAY0"]
[Tue Apr 21 01:32:49.039627 2026] [:error] [pid 42014:tid 42024] [client 51.11.245.223:41145] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeZjQcek-00-ZI0f1NquIQAAAQg"]
[Tue Apr 21 01:32:49.087199 2026] [:error] [pid 11441:tid 11445] [client 51.11.245.223:50927] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeZjQcixByFUvmh319DgZQAAAMI"]
[Tue Apr 21 01:32:49.510656 2026] [:error] [pid 42014:tid 42029] [client 51.11.245.223:9850] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeZjQcek-00-ZI0f1NquIwAAAQ0"]
[Tue Apr 21 01:32:49.598925 2026] [:error] [pid 11494:tid 11512] [client 51.11.245.223:49498] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeZjQcgko5iFiE8YoyQ4QgAAAZA"]
[Tue Apr 21 01:32:49.981647 2026] [:error] [pid 42014:tid 42026] [client 51.11.245.223:50103] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeZjQcek-00-ZI0f1NquJAAAAQo"]
[Tue Apr 21 01:32:50.100297 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:3540] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeZjQgN8Z1-vktaI_tOYmAAAAE4"]
[Tue Apr 21 01:32:50.453605 2026] [:error] [pid 11350:tid 11359] [client 51.11.245.223:50099] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeZjQv4EoMBgOJuJnT0n8wAAAAA"]
[Tue Apr 21 01:32:50.618434 2026] [:error] [pid 11350:tid 11371] [client 51.11.245.223:3865] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeZjQv4EoMBgOJuJnT0n9AAAAAw"]
[Tue Apr 21 01:32:50.923713 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:50166] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeZjQv4EoMBgOJuJnT0n9QAAAAo"]
[Tue Apr 21 01:32:51.100862 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:3880] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeZjQ_4EoMBgOJuJnT0n9gAAABA"]
[Tue Apr 21 01:32:51.394428 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:50057] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeZjQ_4EoMBgOJuJnT0n9wAAABU"]
[Tue Apr 21 01:32:51.588581 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:56105] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeZjQ_4EoMBgOJuJnT0n-QAAABI"]
[Tue Apr 21 01:32:51.863452 2026] [:error] [pid 11351:tid 11404] [client 51.11.245.223:56757] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeZjQwN8Z1-vktaI_tOYngAAAFE"]
[Tue Apr 21 01:32:52.128699 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:56141] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeZjRAN8Z1-vktaI_tOYoAAAAFM"]
[Tue Apr 21 01:32:52.332733 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:41091] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeZjRAN8Z1-vktaI_tOYowAAAEo"]
[Tue Apr 21 01:32:52.608422 2026] [:error] [pid 11350:tid 11365] [client 51.11.245.223:48816] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeZjRP4EoMBgOJuJnT0n-wAAAAY"]
[Tue Apr 21 01:32:52.805232 2026] [:error] [pid 11351:tid 11392] [client 51.11.245.223:41760] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeZjRAN8Z1-vktaI_tOYpgAAAEU"]
[Tue Apr 21 01:32:53.095783 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:3902] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeZjRQN8Z1-vktaI_tOYrAAAAEw"]
[Tue Apr 21 01:32:53.275219 2026] [:error] [pid 11351:tid 11388] [client 51.11.245.223:41778] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeZjRQN8Z1-vktaI_tOYrQAAAEE"]
[Tue Apr 21 01:32:53.582712 2026] [:error] [pid 11350:tid 11364] [client 51.11.245.223:19843] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeZjRf4EoMBgOJuJnT0n_QAAAAU"]
[Tue Apr 21 01:32:53.745446 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:41142] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeZjRQN8Z1-vktaI_tOYsAAAAFc"]
[Tue Apr 21 01:32:54.071561 2026] [:error] [pid 11351:tid 11411] [client 51.11.245.223:56172] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeZjRgN8Z1-vktaI_tOYtgAAAFg"]
[Tue Apr 21 01:32:54.215315 2026] [:error] [pid 11351:tid 11396] [client 51.11.245.223:56713] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeZjRgN8Z1-vktaI_tOYuAAAAEk"]
[Tue Apr 21 01:32:54.584885 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:49516] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeZjRgN8Z1-vktaI_tOYuwAAAEg"]
[Tue Apr 21 01:32:54.685144 2026] [:error] [pid 42014:tid 42022] [client 51.11.245.223:9313] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeZjRsek-00-ZI0f1NquJgAAAQY"]
[Tue Apr 21 01:32:55.082723 2026] [:error] [pid 11441:tid 11453] [client 51.11.245.223:49506] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aeZjR8ixByFUvmh319DgZgAAAMo"]
[Tue Apr 21 01:32:55.155498 2026] [:error] [pid 11441:tid 11455] [client 51.11.245.223:50071] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeZjR8ixByFUvmh319DgZwAAAMw"]
[Tue Apr 21 01:32:55.574704 2026] [:error] [pid 42014:tid 42037] [client 51.11.245.223:46529] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeZjR8ek-00-ZI0f1NquKAAAARU"]
[Tue Apr 21 01:32:55.625791 2026] [:error] [pid 11441:tid 11461] [client 51.11.245.223:57365] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeZjR8ixByFUvmh319DgaAAAANI"]
[Tue Apr 21 01:32:56.096443 2026] [:error] [pid 42014:tid 42017] [client 51.11.245.223:50168] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeZjSMek-00-ZI0f1NquKQAAAQE"]
[Tue Apr 21 01:32:56.117383 2026] [:error] [pid 11351:tid 11411] [client 51.11.245.223:3881] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeZjSAN8Z1-vktaI_tOYwQAAAFg"]
[Tue Apr 21 01:32:56.567805 2026] [:error] [pid 11350:tid 11373] [client 51.11.245.223:57373] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeZjSP4EoMBgOJuJnT0oAwAAAA4"]
[Tue Apr 21 01:32:56.608018 2026] [:error] [pid 11352:tid 11420] [client 51.11.245.223:63533] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeZjSGl10mhMSfJ7ir8ByAAAAIY"]
[Tue Apr 21 01:32:57.046399 2026] [:error] [pid 42014:tid 42027] [client 51.11.245.223:56711] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeZjScek-00-ZI0f1NquKgAAAQs"]
[Tue Apr 21 01:32:57.113990 2026] [:error] [pid 42014:tid 42025] [client 51.11.245.223:3892] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aeZjScek-00-ZI0f1NquKwAAAQk"]
[Tue Apr 21 01:32:57.522099 2026] [:error] [pid 42014:tid 42031] [client 51.11.245.223:50100] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeZjScek-00-ZI0f1NquLAAAAQ8"]
[Tue Apr 21 01:32:57.587147 2026] [:error] [pid 11494:tid 11498] [client 51.11.245.223:3916] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeZjScgko5iFiE8YoyQ4VgAAAYI"]
[Tue Apr 21 01:32:57.992535 2026] [:error] [pid 11494:tid 11501] [client 51.11.245.223:50163] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeZjScgko5iFiE8YoyQ4WAAAAYU"]
[Tue Apr 21 01:32:58.076626 2026] [:error] [pid 11494:tid 11516] [client 51.11.245.223:3862] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeZjSsgko5iFiE8YoyQ4WQAAAZQ"]
[Tue Apr 21 01:32:58.463009 2026] [:error] [pid 11494:tid 11517] [client 51.11.245.223:62819] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeZjSsgko5iFiE8YoyQ4XQAAAZU"]
[Tue Apr 21 01:32:58.550129 2026] [:error] [pid 11441:tid 11448] [client 51.11.245.223:48786] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeZjSsixByFUvmh319DgaQAAAMU"]
[Tue Apr 21 01:32:58.933569 2026] [:error] [pid 11441:tid 11456] [client 51.11.245.223:50144] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeZjSsixByFUvmh319DgagAAAM0"]
[Tue Apr 21 01:32:59.048731 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:63522] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aeZjSx3y7MHq1iB0qYrrAQAAAVc"]
[Tue Apr 21 01:32:59.404655 2026] [:error] [pid 11350:tid 11359] [client 51.11.245.223:56747] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeZjS_4EoMBgOJuJnT0oBgAAAAA"]
[Tue Apr 21 01:32:59.529000 2026] [:error] [pid 11350:tid 11371] [client 51.11.245.223:3908] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeZjS_4EoMBgOJuJnT0oBwAAAAw"]
[Tue Apr 21 01:32:59.875497 2026] [:error] [pid 6928:tid 6948] [client 51.11.245.223:62763] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeZjSx3y7MHq1iB0qYrrAgAAAVI"]
[Tue Apr 21 01:33:00.048542 2026] [:error] [pid 11352:tid 11434] [client 51.11.245.223:63530] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeZjTGl10mhMSfJ7ir8BygAAAJQ"]
[Tue Apr 21 01:33:00.347794 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:62799] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeZjTAN8Z1-vktaI_tOYygAAAFM"]
[Tue Apr 21 01:33:00.547163 2026] [:error] [pid 11351:tid 11396] [client 51.11.245.223:64149] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeZjTAN8Z1-vktaI_tOYywAAAEk"]
[Tue Apr 21 01:33:00.818563 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:9685] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeZjTAN8Z1-vktaI_tOYzAAAAEA"]
[Tue Apr 21 01:33:01.077985 2026] [:error] [pid 11350:tid 11376] [client 51.11.245.223:56143] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeZjTf4EoMBgOJuJnT0oDAAAABE"]
[Tue Apr 21 01:33:01.295989 2026] [:error] [pid 6928:tid 6954] [client 51.11.245.223:62781] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeZjTR3y7MHq1iB0qYrrBAAAAVg"]
[Tue Apr 21 01:33:01.582246 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:64147] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeZjTf4EoMBgOJuJnT0oDQAAABI"]
[Tue Apr 21 01:33:01.766326 2026] [:error] [pid 6928:tid 6939] [client 51.11.245.223:62765] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeZjTR3y7MHq1iB0qYrrBwAAAUk"]
[Tue Apr 21 01:33:02.109336 2026] [:error] [pid 11350:tid 11379] [client 51.11.245.223:63535] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeZjTv4EoMBgOJuJnT0oDwAAABQ"]
[Tue Apr 21 01:33:02.237249 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:50050] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aeZjTv4EoMBgOJuJnT0oEQAAAA0"]
[Tue Apr 21 01:33:02.601941 2026] [:error] [pid 11494:tid 11513] [client 51.11.245.223:41061] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeZjTsgko5iFiE8YoyQ4YgAAAZE"]
[Tue Apr 21 01:33:02.707735 2026] [:error] [pid 11441:tid 11465] [client 51.11.245.223:41099] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aeZjTsixByFUvmh319DgbgAAANY"]
[Tue Apr 21 01:33:03.080226 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:56124] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeZjTwN8Z1-vktaI_tOY0AAAAFI"]
[Tue Apr 21 01:33:03.178530 2026] [:error] [pid 11351:tid 11409] [client 51.11.245.223:62814] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aeZjTwN8Z1-vktaI_tOY0QAAAFY"]
[Tue Apr 21 01:33:03.576487 2026] [:error] [pid 6928:tid 6949] [client 51.11.245.223:64174] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeZjTx3y7MHq1iB0qYrrCAAAAVM"]
[Tue Apr 21 01:33:03.649727 2026] [:error] [pid 11494:tid 11501] [client 51.11.245.223:57383] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aeZjT8gko5iFiE8YoyQ4ZQAAAYU"]
[Tue Apr 21 01:33:04.070149 2026] [:error] [pid 11441:tid 11445] [client 51.11.245.223:54180] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeZjUMixByFUvmh319DgcgAAAMI"]
[Tue Apr 21 01:33:04.122318 2026] [:error] [pid 42014:tid 42026] [client 51.11.245.223:50129] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeZjUMek-00-ZI0f1NquLwAAAQo"]
[Tue Apr 21 01:33:04.567145 2026] [:error] [pid 11441:tid 11454] [client 51.11.245.223:3544] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeZjUMixByFUvmh319DgdQAAAMs"]
[Tue Apr 21 01:33:04.593336 2026] [:error] [pid 6928:tid 6936] [client 51.11.245.223:50162] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeZjUB3y7MHq1iB0qYrrCgAAAUY"]
[Tue Apr 21 01:33:05.063167 2026] [:error] [pid 11350:tid 11366] [client 51.11.245.223:62815] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeZjUf4EoMBgOJuJnT0oGgAAAAc"]
[Tue Apr 21 01:33:05.072570 2026] [:error] [pid 6928:tid 6950] [client 51.11.245.223:3888] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aeZjUR3y7MHq1iB0qYrrCwAAAVQ"]
[Tue Apr 21 01:33:05.533393 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:50175] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeZjUf4EoMBgOJuJnT0oHgAAABU"]
[Tue Apr 21 01:33:05.561620 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:56183] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeZjUf4EoMBgOJuJnT0oIAAAABI"]
[Tue Apr 21 01:33:06.002774 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:56750] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZjUv4EoMBgOJuJnT0oIQAAAAo"]
[Tue Apr 21 01:33:06.049254 2026] [:error] [pid 11350:tid 11382] [client 51.11.245.223:54181] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeZjUv4EoMBgOJuJnT0oIgAAABc"]
[Tue Apr 21 01:33:06.472722 2026] [:error] [pid 11352:tid 11421] [client 51.11.245.223:62825] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZjUml10mhMSfJ7ir8BzwAAAIc"]
[Tue Apr 21 01:33:06.533969 2026] [:error] [pid 6928:tid 6944] [client 51.11.245.223:19882] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeZjUh3y7MHq1iB0qYrrEAAAAU4"]
[Tue Apr 21 01:33:06.943831 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:56749] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZjUv4EoMBgOJuJnT0oJAAAABM"]
[Tue Apr 21 01:33:07.006628 2026] [:error] [pid 11350:tid 11381] [client 51.11.245.223:3869] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aeZjU_4EoMBgOJuJnT0oJQAAABY"]
[Tue Apr 21 01:33:07.414178 2026] [:error] [pid 11494:tid 11517] [client 51.11.245.223:50112] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZjU8gko5iFiE8YoyQ4ZwAAAZU"]
[Tue Apr 21 01:33:07.478867 2026] [:error] [pid 11350:tid 11360] [client 51.11.245.223:3912] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeZjU_4EoMBgOJuJnT0oJwAAAAE"]
[Tue Apr 21 01:33:07.886192 2026] [:error] [pid 11494:tid 11503] [client 51.11.245.223:62822] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "aeZjU8gko5iFiE8YoyQ4awAAAYc"]
[Tue Apr 21 01:33:07.967429 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:41026] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeZjU_4EoMBgOJuJnT0oKAAAAAk"]
[Tue Apr 21 01:33:08.358249 2026] [:error] [pid 11351:tid 11403] [client 51.11.245.223:56731] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "aeZjVAN8Z1-vktaI_tOY1wAAAFA"]
[Tue Apr 21 01:33:08.457269 2026] [:error] [pid 6928:tid 6934] [client 51.11.245.223:3922] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeZjVB3y7MHq1iB0qYrrEwAAAUQ"]
[Tue Apr 21 01:33:08.828537 2026] [:error] [pid 11494:tid 11506] [client 51.11.245.223:62760] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "aeZjVMgko5iFiE8YoyQ4bgAAAYo"]
[Tue Apr 21 01:33:08.964797 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:3858] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aeZjVAN8Z1-vktaI_tOY2QAAAE8"]
[Tue Apr 21 01:33:09.300070 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:50104] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "aeZjVQN8Z1-vktaI_tOY2gAAAFc"]
[Tue Apr 21 01:33:09.441252 2026] [:error] [pid 11494:tid 11502] [client 51.11.245.223:3559] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeZjVcgko5iFiE8YoyQ4cAAAAYY"]
[Tue Apr 21 01:33:09.770416 2026] [:error] [pid 11351:tid 11391] [client 51.11.245.223:57390] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aeZjVQN8Z1-vktaI_tOY3wAAAEQ"]
[Tue Apr 21 01:33:09.930576 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:3532] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeZjVQN8Z1-vktaI_tOY4AAAAFM"]
[Tue Apr 21 01:33:10.244049 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:62842] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aeZjVgN8Z1-vktaI_tOY4gAAAEg"]
[Tue Apr 21 01:33:10.407920 2026] [:error] [pid 11494:tid 11500] [client 51.11.245.223:56089] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeZjVsgko5iFiE8YoyQ4cwAAAYQ"]
[Tue Apr 21 01:33:10.720007 2026] [:error] [pid 11350:tid 11365] [client 51.11.245.223:62747] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aeZjVv4EoMBgOJuJnT0oKgAAAAY"]
[Tue Apr 21 01:33:10.887425 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:63529] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aeZjVv4EoMBgOJuJnT0oKwAAAA8"]
[Tue Apr 21 01:33:11.191690 2026] [:error] [pid 6928:tid 6936] [client 51.11.245.223:50139] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aeZjVx3y7MHq1iB0qYrrGAAAAUY"]
[Tue Apr 21 01:33:11.365691 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:56089] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeZjVwN8Z1-vktaI_tOY6QAAAE4"]
[Tue Apr 21 01:33:11.663429 2026] [:error] [pid 11494:tid 11501] [client 51.11.245.223:62791] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "aeZjV8gko5iFiE8YoyQ4dQAAAYU"]
[Tue Apr 21 01:33:11.839127 2026] [:error] [pid 11494:tid 11516] [client 51.11.245.223:63506] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeZjV8gko5iFiE8YoyQ4dgAAAZQ"]
[Tue Apr 21 01:33:12.136435 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:62785] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "aeZjWMgko5iFiE8YoyQ4dwAAAY4"]
[Tue Apr 21 01:33:12.316523 2026] [:error] [pid 11494:tid 11497] [client 51.11.245.223:64173] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeZjWMgko5iFiE8YoyQ4eAAAAYE"]
[Tue Apr 21 01:33:12.608674 2026] [:error] [pid 6928:tid 6935] [client 51.11.245.223:62769] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "aeZjWB3y7MHq1iB0qYrrHQAAAUU"]
[Tue Apr 21 01:33:12.789248 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:50901] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/6.php"] [unique_id "aeZjWB3y7MHq1iB0qYrrHwAAAVc"]
[Tue Apr 21 01:33:13.079810 2026] [:error] [pid 11441:tid 11461] [client 51.11.245.223:62761] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "aeZjWcixByFUvmh319DggwAAANI"]
[Tue Apr 21 01:33:13.265135 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:64137] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeZjWQN8Z1-vktaI_tOY7wAAAFI"]
[Tue Apr 21 01:33:13.550401 2026] [:error] [pid 11441:tid 11447] [client 51.11.245.223:56732] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "aeZjWcixByFUvmh319DghgAAAMQ"]
[Tue Apr 21 01:33:13.737457 2026] [:error] [pid 11352:tid 11436] [client 51.11.245.223:63524] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeZjWWl10mhMSfJ7ir8B0AAAAJY"]
[Tue Apr 21 01:33:14.021613 2026] [:error] [pid 11352:tid 11416] [client 51.11.245.223:41100] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "aeZjWml10mhMSfJ7ir8B0wAAAII"]
[Tue Apr 21 01:33:14.230498 2026] [:error] [pid 11352:tid 11425] [client 51.11.245.223:63529] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeZjWml10mhMSfJ7ir8B1AAAAIs"]
[Tue Apr 21 01:33:14.491813 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:50171] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "aeZjWgN8Z1-vktaI_tOY8gAAAEg"]
[Tue Apr 21 01:33:14.701351 2026] [:error] [pid 11352:tid 11435] [client 51.11.245.223:34238] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/9.php"] [unique_id "aeZjWml10mhMSfJ7ir8B1wAAAJU"]
[Tue Apr 21 01:33:14.962084 2026] [:error] [pid 11351:tid 11398] [client 51.11.245.223:57361] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "aeZjWgN8Z1-vktaI_tOY9gAAAEs"]
[Tue Apr 21 01:33:15.202369 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:63545] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aeZjW8gko5iFiE8YoyQ4ngAAAY4"]
[Tue Apr 21 01:33:15.433611 2026] [:error] [pid 11352:tid 11429] [client 51.11.245.223:62777] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeZjW2l10mhMSfJ7ir8B2wAAAI8"]
[Tue Apr 21 01:33:15.683217 2026] [:error] [pid 11351:tid 11403] [client 51.11.245.223:63531] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aeZjWwN8Z1-vktaI_tOY-QAAAFA"]
[Tue Apr 21 01:33:15.905049 2026] [:error] [pid 11352:tid 11434] [client 51.11.245.223:62828] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeZjW2l10mhMSfJ7ir8B3AAAAJQ"]
[Tue Apr 21 01:33:16.155960 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:63499] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aeZjXAN8Z1-vktaI_tOY-wAAAEw"]
[Tue Apr 21 01:33:16.375980 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:9468] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeZjXAN8Z1-vktaI_tOY_gAAAEg"]
[Tue Apr 21 01:33:16.639504 2026] [:error] [pid 11351:tid 11389] [client 51.11.245.223:63510] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/10.php"] [unique_id "aeZjXAN8Z1-vktaI_tOZAQAAAEI"]
[Tue Apr 21 01:33:16.848349 2026] [:error] [pid 11350:tid 11371] [client 51.11.245.223:9697] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeZjXP4EoMBgOJuJnT0oLwAAAAw"]
[Tue Apr 21 01:33:17.115404 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:56166] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeZjXQN8Z1-vktaI_tOZBQAAAFI"]
[Tue Apr 21 01:33:17.319733 2026] [:error] [pid 11494:tid 11509] [client 51.11.245.223:50164] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeZjXcgko5iFiE8YoyQ4ogAAAY0"]
[Tue Apr 21 01:33:17.611860 2026] [:error] [pid 11494:tid 11496] [client 51.11.245.223:64129] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeZjXcgko5iFiE8YoyQ4owAAAYA"]
[Tue Apr 21 01:33:17.790028 2026] [:error] [pid 11350:tid 11364] [client 51.11.245.223:62829] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeZjXf4EoMBgOJuJnT0oMAAAAAU"]
[Tue Apr 21 01:33:18.092953 2026] [:error] [pid 11352:tid 11422] [client 51.11.245.223:64179] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeZjXml10mhMSfJ7ir8B3wAAAIg"]
[Tue Apr 21 01:33:18.271648 2026] [:error] [pid 6928:tid 6937] [client 51.11.245.223:62767] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeZjXh3y7MHq1iB0qYrrKQAAAUc"]
[Tue Apr 21 01:33:18.570438 2026] [:error] [pid 11352:tid 11421] [client 51.11.245.223:64128] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "aeZjXml10mhMSfJ7ir8B4AAAAIc"]
[Tue Apr 21 01:33:18.745892 2026] [:error] [pid 11352:tid 11419] [client 51.11.245.223:9301] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeZjXml10mhMSfJ7ir8B4gAAAIU"]
[Tue Apr 21 01:33:19.086594 2026] [:error] [pid 11351:tid 11389] [client 51.11.245.223:3882] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZjXwN8Z1-vktaI_tOZCgAAAEI"]
[Tue Apr 21 01:33:19.216304 2026] [:error] [pid 11494:tid 11504] [client 51.11.245.223:9297] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeZjX8gko5iFiE8YoyQ4pQAAAYg"]
[Tue Apr 21 01:33:19.572044 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:54151] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZjX_4EoMBgOJuJnT0oMgAAAAo"]
[Tue Apr 21 01:33:19.687401 2026] [:error] [pid 42014:tid 42017] [client 51.11.245.223:50100] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeZjX8ek-00-ZI0f1NquNgAAAQE"]
[Tue Apr 21 01:33:20.050070 2026] [:error] [pid 6928:tid 6948] [client 51.11.245.223:19889] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZjYB3y7MHq1iB0qYrrMAAAAVI"]
[Tue Apr 21 01:33:20.162983 2026] [:error] [pid 42014:tid 42025] [client 51.11.245.223:56730] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeZjYMek-00-ZI0f1NquOAAAAQk"]
[Tue Apr 21 01:33:20.536789 2026] [:error] [pid 42014:tid 42031] [client 51.11.245.223:63504] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeZjYMek-00-ZI0f1NquOQAAAQ8"]
[Tue Apr 21 01:33:20.633113 2026] [:error] [pid 6928:tid 6931] [client 51.11.245.223:50084] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeZjYB3y7MHq1iB0qYrrNAAAAUE"]
[Tue Apr 21 01:33:21.014584 2026] [:error] [pid 11441:tid 11462] [client 51.11.245.223:34268] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "aeZjYcixByFUvmh319DgiwAAANM"]
[Tue Apr 21 01:33:21.104332 2026] [:error] [pid 11441:tid 11463] [client 51.11.245.223:50158] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeZjYcixByFUvmh319DgjAAAANQ"]
[Tue Apr 21 01:33:21.520068 2026] [:error] [pid 42014:tid 42036] [client 51.11.245.223:63547] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "aeZjYcek-00-ZI0f1NquOgAAARQ"]
[Tue Apr 21 01:33:21.576812 2026] [:error] [pid 11352:tid 11423] [client 51.11.245.223:62823] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeZjYWl10mhMSfJ7ir8B5gAAAIk"]
[Tue Apr 21 01:33:22.001533 2026] [:error] [pid 42014:tid 42040] [client 51.11.245.223:34279] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "aeZjYcek-00-ZI0f1NquOwAAARg"]
[Tue Apr 21 01:33:22.048772 2026] [:error] [pid 11352:tid 11435] [client 51.11.245.223:62734] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeZjYml10mhMSfJ7ir8B5wAAAJU"]
[Tue Apr 21 01:33:22.487217 2026] [:error] [pid 6928:tid 6946] [client 51.11.245.223:3927] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35_S.php"] [unique_id "aeZjYh3y7MHq1iB0qYrrOAAAAVA"]
[Tue Apr 21 01:33:22.520510 2026] [:error] [pid 6928:tid 6940] [client 51.11.245.223:50096] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeZjYh3y7MHq1iB0qYrrOQAAAUo"]
[Tue Apr 21 01:33:22.988706 2026] [:error] [pid 11351:tid 11407] [client 51.11.245.223:56145] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aeZjYgN8Z1-vktaI_tOZDAAAAFQ"]
[Tue Apr 21 01:33:22.990349 2026] [:error] [pid 42014:tid 42024] [client 51.11.245.223:57345] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeZjYsek-00-ZI0f1NquQAAAAQg"]
[Tue Apr 21 01:33:23.464279 2026] [:error] [pid 11352:tid 11426] [client 51.11.245.223:62729] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeZjY2l10mhMSfJ7ir8B7AAAAIw"]
[Tue Apr 21 01:33:23.469671 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:41073] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aeZjYwN8Z1-vktaI_tOZDQAAAEo"]
[Tue Apr 21 01:33:23.934523 2026] [:error] [pid 42014:tid 42019] [client 51.11.245.223:9300] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeZjY8ek-00-ZI0f1NquQgAAAQM"]
[Tue Apr 21 01:33:23.957576 2026] [:error] [pid 11350:tid 11365] [client 51.11.245.223:56127] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aeZjY_4EoMBgOJuJnT0oNQAAAAY"]
[Tue Apr 21 01:33:24.404453 2026] [:error] [pid 11494:tid 11508] [client 51.11.245.223:57398] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeZjZMgko5iFiE8YoyQ4qgAAAYw"]
[Tue Apr 21 01:33:24.437390 2026] [:error] [pid 11494:tid 11514] [client 51.11.245.223:41049] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aeZjZMgko5iFiE8YoyQ4qwAAAZI"]
[Tue Apr 21 01:33:24.874128 2026] [:error] [pid 11494:tid 11509] [client 51.11.245.223:56763] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeZjZMgko5iFiE8YoyQ4rQAAAY0"]
[Tue Apr 21 01:33:24.914891 2026] [:error] [pid 11494:tid 11496] [client 51.11.245.223:56119] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "aeZjZMgko5iFiE8YoyQ4rgAAAYA"]
[Tue Apr 21 01:33:25.345012 2026] [:error] [pid 11494:tid 11511] [client 51.11.245.223:9694] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeZjZcgko5iFiE8YoyQ4swAAAY8"]
[Tue Apr 21 01:33:25.386672 2026] [:error] [pid 11441:tid 11443] [client 51.11.245.223:54268] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "aeZjZcixByFUvmh319DgkgAAAMA"]
[Tue Apr 21 01:33:25.816852 2026] [:error] [pid 11441:tid 11459] [client 51.11.245.223:41752] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeZjZcixByFUvmh319DgkwAAANA"]
[Tue Apr 21 01:33:25.859062 2026] [:error] [pid 11494:tid 11499] [client 51.11.245.223:54163] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "aeZjZcgko5iFiE8YoyQ4tAAAAYM"]
[Tue Apr 21 01:33:26.287348 2026] [:error] [pid 11494:tid 11500] [client 51.11.245.223:57363] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aeZjZsgko5iFiE8YoyQ4twAAAYQ"]
[Tue Apr 21 01:33:26.333431 2026] [:error] [pid 11351:tid 11396] [client 51.11.245.223:56169] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/111.php"] [unique_id "aeZjZgN8Z1-vktaI_tOZFgAAAEk"]
[Tue Apr 21 01:33:26.767767 2026] [:error] [pid 11351:tid 11409] [client 51.11.245.223:56704] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeZjZgN8Z1-vktaI_tOZGAAAAFY"]
[Tue Apr 21 01:33:26.813883 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:54271] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "aeZjZgN8Z1-vktaI_tOZGQAAAEg"]
[Tue Apr 21 01:33:27.238734 2026] [:error] [pid 42014:tid 42017] [client 51.11.245.223:41102] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeZjZ8ek-00-ZI0f1NquSwAAAQE"]
[Tue Apr 21 01:33:27.303484 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:34252] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "aeZjZwN8Z1-vktaI_tOZGwAAAFM"]
[Tue Apr 21 01:33:27.708572 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:9340] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeZjZwN8Z1-vktaI_tOZHQAAAEo"]
[Tue Apr 21 01:33:27.784147 2026] [:error] [pid 11351:tid 11393] [client 51.11.245.223:56067] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "aeZjZwN8Z1-vktaI_tOZHgAAAEY"]
[Tue Apr 21 01:33:28.182130 2026] [:error] [pid 11351:tid 11398] [client 51.11.245.223:50140] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aeZjaAN8Z1-vktaI_tOZIQAAAEs"]
[Tue Apr 21 01:33:28.271757 2026] [:error] [pid 11441:tid 11455] [client 51.11.245.223:64169] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "aeZjaMixByFUvmh319DglgAAAMw"]
[Tue Apr 21 01:33:28.654215 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:62744] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeZjaAN8Z1-vktaI_tOZIwAAAFU"]
[Tue Apr 21 01:33:28.750078 2026] [:error] [pid 6928:tid 6938] [client 51.11.245.223:56133] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeZjaB3y7MHq1iB0qYrrPgAAAUg"]
[Tue Apr 21 01:33:29.123623 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:56706] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeZjaf4EoMBgOJuJnT0oOAAAAAg"]
[Tue Apr 21 01:33:29.228799 2026] [:error] [pid 6928:tid 6931] [client 51.11.245.223:56119] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeZjaR3y7MHq1iB0qYrrQQAAAUE"]
[Tue Apr 21 01:33:29.593895 2026] [:error] [pid 11494:tid 11519] [client 51.11.245.223:9293] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeZjacgko5iFiE8YoyQ4uwAAAZc"]
[Tue Apr 21 01:33:29.707742 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:54156] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeZjacgko5iFiE8YoyQ4vAAAAY4"]
[Tue Apr 21 01:33:30.073205 2026] [:error] [pid 11441:tid 11456] [client 51.11.245.223:41765] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeZjasixByFUvmh319DglwAAAM0"]
[Tue Apr 21 01:33:30.183467 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:56188] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "aeZjagN8Z1-vktaI_tOZKAAAAFc"]
[Tue Apr 21 01:33:30.544004 2026] [:error] [pid 11350:tid 11362] [client 51.11.245.223:9991] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeZjav4EoMBgOJuJnT0oOgAAAAM"]
[Tue Apr 21 01:33:30.661225 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:3906] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeZjav4EoMBgOJuJnT0oOwAAAAk"]
[Tue Apr 21 01:33:31.013212 2026] [:error] [pid 11350:tid 11370] [client 51.11.245.223:50135] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeZja_4EoMBgOJuJnT0oPQAAAAs"]
[Tue Apr 21 01:33:31.133958 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:54269] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeZja_4EoMBgOJuJnT0oPgAAABg"]
[Tue Apr 21 01:33:31.482834 2026] [:error] [pid 11441:tid 11444] [client 51.11.245.223:62762] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeZja8ixByFUvmh319DgmgAAAME"]
[Tue Apr 21 01:33:31.604800 2026] [:error] [pid 11441:tid 11466] [client 51.11.245.223:34291] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeZja8ixByFUvmh319DgmwAAANc"]
[Tue Apr 21 01:33:31.952331 2026] [:error] [pid 11350:tid 11371] [client 51.11.245.223:19155] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aeZja_4EoMBgOJuJnT0oPwAAAAw"]
[Tue Apr 21 01:33:32.077295 2026] [:error] [pid 11494:tid 11514] [client 51.11.245.223:64190] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aeZjbMgko5iFiE8YoyQ4vgAAAZI"]
[Tue Apr 21 01:33:32.423027 2026] [:error] [pid 11350:tid 11366] [client 51.11.245.223:55489] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeZjbP4EoMBgOJuJnT0oQQAAAAc"]
[Tue Apr 21 01:33:32.550352 2026] [:error] [pid 11494:tid 11509] [client 51.11.245.223:54167] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeZjbMgko5iFiE8YoyQ4vwAAAY0"]
[Tue Apr 21 01:33:32.895070 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:55508] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeZjbP4EoMBgOJuJnT0oQgAAABI"]
[Tue Apr 21 01:33:33.023980 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:54215] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeZjbf4EoMBgOJuJnT0oRAAAABA"]
[Tue Apr 21 01:33:33.367012 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:58000] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeZjbQN8Z1-vktaI_tOZNwAAAEA"]
[Tue Apr 21 01:33:33.502350 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:41037] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeZjbQN8Z1-vktaI_tOZOQAAAFI"]
[Tue Apr 21 01:33:33.836898 2026] [:error] [pid 11351:tid 11404] [client 51.11.245.223:56801] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeZjbQN8Z1-vktaI_tOZPAAAAFE"]
[Tue Apr 21 01:33:33.997095 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:3854] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aeZjbQN8Z1-vktaI_tOZQQAAAEo"]
[Tue Apr 21 01:33:34.307814 2026] [:error] [pid 11441:tid 11445] [client 51.11.245.223:16197] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeZjbsixByFUvmh319DgnwAAAMI"]
[Tue Apr 21 01:33:34.471100 2026] [:error] [pid 11352:tid 11425] [client 51.11.245.223:63490] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeZjbml10mhMSfJ7ir8B8wAAAIs"]
[Tue Apr 21 01:33:34.779036 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:57408] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeZjbgN8Z1-vktaI_tOZRQAAAEM"]
[Tue Apr 21 01:33:34.950832 2026] [:error] [pid 11351:tid 11391] [client 51.11.245.223:3844] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeZjbgN8Z1-vktaI_tOZRwAAAEQ"]
[Tue Apr 21 01:33:35.250462 2026] [:error] [pid 11351:tid 11403] [client 51.11.245.223:60168] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeZjbwN8Z1-vktaI_tOZSgAAAFA"]
[Tue Apr 21 01:33:35.422729 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:56186] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeZjbwN8Z1-vktaI_tOZTAAAAE0"]
[Tue Apr 21 01:33:35.722150 2026] [:error] [pid 11352:tid 11437] [client 51.11.245.223:60170] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeZjb2l10mhMSfJ7ir8B9gAAAJc"]
[Tue Apr 21 01:33:35.904329 2026] [:error] [pid 11441:tid 11454] [client 51.11.245.223:41070] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aeZjb8ixByFUvmh319DgogAAAMs"]
[Tue Apr 21 01:33:36.194272 2026] [:error] [pid 11352:tid 11420] [client 51.11.245.223:9475] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjcGl10mhMSfJ7ir8B-QAAAIY"]
[Tue Apr 21 01:33:36.376204 2026] [:error] [pid 42014:tid 42019] [client 51.11.245.223:3859] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeZjcMek-00-ZI0f1NquWgAAAQM"]
[Tue Apr 21 01:33:36.687773 2026] [:error] [pid 11441:tid 11453] [client 51.11.245.223:16213] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjcMixByFUvmh319DgpAAAAMo"]
[Tue Apr 21 01:33:36.880486 2026] [:error] [pid 11441:tid 11449] [client 51.11.245.223:34274] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aeZjcMixByFUvmh319DgpgAAAMY"]
[Tue Apr 21 01:33:37.163099 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:55521] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Tue Apr 21 01:33:37.361619 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:56181] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue Apr 21 01:33:37.400791 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:55521] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Tue Apr 21 01:33:37.601542 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:56181] File does not exist: /usr/local/apache/htdocs/suspended-page/no18.php
[Tue Apr 21 01:33:37.638668 2026] [:error] [pid 11351:tid 11411] [client 51.11.245.223:55521] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Tue Apr 21 01:33:37.843718 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:56181] File does not exist: /usr/local/apache/htdocs/suspended-page/fine.php
[Tue Apr 21 01:33:37.875898 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:55521] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Tue Apr 21 01:33:38.083834 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:56181] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Tue Apr 21 01:33:38.113502 2026] [:error] [pid 11351:tid 11392] [client 51.11.245.223:55521] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Tue Apr 21 01:33:38.325017 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:56181] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Tue Apr 21 01:33:38.352560 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:55521] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Tue Apr 21 01:33:38.562607 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:56181] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeZjcgN8Z1-vktaI_tOZbAAAAE4"]
[Tue Apr 21 01:33:38.587604 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:55521] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeZjcgN8Z1-vktaI_tOZbgAAAFc"]
[Tue Apr 21 01:33:39.034471 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:54159] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeZjcwN8Z1-vktaI_tOZbwAAAFI"]
[Tue Apr 21 01:33:39.068461 2026] [:error] [pid 11350:tid 11362] [client 51.11.245.223:43718] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeZjc_4EoMBgOJuJnT0oTQAAAAM"]
[Tue Apr 21 01:33:39.507993 2026] [:error] [pid 11441:tid 11458] [client 51.11.245.223:3891] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeZjc8ixByFUvmh319DgqQAAAM8"]
[Tue Apr 21 01:33:39.537727 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:9501] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeZjcwN8Z1-vktaI_tOZcwAAAFM"]
[Tue Apr 21 01:33:39.981716 2026] [:error] [pid 11352:tid 11417] [client 51.11.245.223:3963] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aeZjc2l10mhMSfJ7ir8B_gAAAIM"]
[Tue Apr 21 01:33:40.007030 2026] [:error] [pid 11352:tid 11430] [client 51.11.245.223:57430] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeZjdGl10mhMSfJ7ir8B_wAAAJA"]
[Tue Apr 21 01:33:40.456342 2026] [:error] [pid 11441:tid 11466] [client 51.11.245.223:56164] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeZjdMixByFUvmh319DgrAAAANc"]
[Tue Apr 21 01:33:40.478609 2026] [:error] [pid 11441:tid 11462] [client 51.11.245.223:43719] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZjdMixByFUvmh319DgrQAAANM"]
[Tue Apr 21 01:33:40.932714 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:63534] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeZjdAN8Z1-vktaI_tOZeAAAAEM"]
[Tue Apr 21 01:33:40.950140 2026] [:error] [pid 6928:tid 6941] [client 51.11.245.223:57424] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZjdB3y7MHq1iB0qYrrTAAAAUs"]
[Tue Apr 21 01:33:41.404504 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:34283] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeZjdQN8Z1-vktaI_tOZfQAAAE0"]
[Tue Apr 21 01:33:41.420671 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:55496] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZjdQN8Z1-vktaI_tOZfgAAAEA"]
[Tue Apr 21 01:33:41.875833 2026] [:error] [pid 11441:tid 11457] [client 51.11.245.223:3845] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aeZjdcixByFUvmh319DgrwAAAM4"]
[Tue Apr 21 01:33:41.891292 2026] [:error] [pid 11441:tid 11446] [client 51.11.245.223:41193] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZjdcixByFUvmh319DgsQAAAMM"]
[Tue Apr 21 01:33:42.347553 2026] [:error] [pid 11441:tid 11459] [client 51.11.245.223:52700] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjdsixByFUvmh319DgswAAANA"]
[Tue Apr 21 01:33:42.363114 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:57442] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjdgN8Z1-vktaI_tOZhgAAAEo"]
[Tue Apr 21 01:33:42.819685 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:54179] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjdgN8Z1-vktaI_tOZiQAAAE8"]
[Tue Apr 21 01:33:42.835189 2026] [:error] [pid 6928:tid 6938] [client 51.11.245.223:41200] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjdh3y7MHq1iB0qYrrTQAAAUg"]
[Tue Apr 21 01:33:43.291829 2026] [:error] [pid 6928:tid 6947] [client 51.11.245.223:41071] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjdx3y7MHq1iB0qYrrTgAAAVE"]
[Tue Apr 21 01:33:43.309110 2026] [:error] [pid 11351:tid 11407] [client 51.11.245.223:54864] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjdwN8Z1-vktaI_tOZjwAAAFQ"]
[Tue Apr 21 01:33:43.764834 2026] [:error] [pid 11352:tid 11434] [client 51.11.245.223:52675] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjd2l10mhMSfJ7ir8CCgAAAJQ"]
[Tue Apr 21 01:33:43.779958 2026] [:error] [pid 11352:tid 11427] [client 51.11.245.223:59177] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjd2l10mhMSfJ7ir8CCwAAAI0"]
[Tue Apr 21 01:33:44.251371 2026] [:error] [pid 11351:tid 11388] [client 51.11.245.223:59172] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeZjeAN8Z1-vktaI_tOZlAAAAEE"]
[Tue Apr 21 01:33:44.251744 2026] [:error] [pid 6928:tid 6931] [client 51.11.245.223:3938] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeZjeB3y7MHq1iB0qYrrUAAAAUE"]
[Tue Apr 21 01:33:44.722532 2026] [:error] [pid 11441:tid 11448] [client 51.11.245.223:55523] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeZjeMixByFUvmh319DgtgAAAMU"]
[Tue Apr 21 01:33:44.725884 2026] [:error] [pid 11441:tid 11464] [client 51.11.245.223:36806] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeZjeMixByFUvmh319DgtwAAANU"]
[Tue Apr 21 01:33:45.193145 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:59171] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeZjeQN8Z1-vktaI_tOZlwAAAFc"]
[Tue Apr 21 01:33:45.197586 2026] [:error] [pid 11351:tid 11398] [client 51.11.245.223:3876] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeZjeQN8Z1-vktaI_tOZmAAAAEs"]
[Tue Apr 21 01:33:45.667605 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:59147] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeZjeQN8Z1-vktaI_tOZnAAAAEg"]
[Tue Apr 21 01:33:45.669036 2026] [:error] [pid 6928:tid 6930] [client 51.11.245.223:41062] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uuu.php"] [unique_id "aeZjeR3y7MHq1iB0qYrrUgAAAUA"]
[Tue Apr 21 01:33:46.143599 2026] [:error] [pid 6928:tid 6936] [client 51.11.245.223:54184] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "aeZjeh3y7MHq1iB0qYrrUwAAAUY"]
[Tue Apr 21 01:33:46.144593 2026] [:error] [pid 11351:tid 11411] [client 51.11.245.223:52433] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeZjegN8Z1-vktaI_tOZnwAAAFg"]
[Tue Apr 21 01:33:46.616375 2026] [:error] [pid 11494:tid 11518] [client 51.11.245.223:63553] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeZjesgko5iFiE8YoyQ4xgAAAZY"]
[Tue Apr 21 01:33:46.620842 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:34296] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "aeZjegN8Z1-vktaI_tOZoQAAAFU"]
[Tue Apr 21 01:33:47.088497 2026] [:error] [pid 11441:tid 11463] [client 51.11.245.223:54892] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeZje8ixByFUvmh319DgvwAAANQ"]
[Tue Apr 21 01:33:47.096591 2026] [:error] [pid 6928:tid 6943] [client 51.11.245.223:34282] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "aeZjex3y7MHq1iB0qYrrVAAAAU0"]
[Tue Apr 21 01:33:47.559003 2026] [:error] [pid 42014:tid 42037] [client 51.11.245.223:56797] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeZje8ek-00-ZI0f1NquYwAAARU"]
[Tue Apr 21 01:33:47.567898 2026] [:error] [pid 6928:tid 6933] [client 51.11.245.223:3849] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/no1.php"] [unique_id "aeZjex3y7MHq1iB0qYrrVgAAAUM"]
[Tue Apr 21 01:33:48.035769 2026] [:error] [pid 11352:tid 11415] [client 51.11.245.223:52456] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeZjfGl10mhMSfJ7ir8CGQAAAIE"]
[Tue Apr 21 01:33:48.041820 2026] [:error] [pid 11441:tid 11457] [client 51.11.245.223:56176] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "aeZjfMixByFUvmh319DgwgAAAM4"]
[Tue Apr 21 01:33:48.507013 2026] [:error] [pid 11350:tid 11365] [client 51.11.245.223:54876] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeZjfP4EoMBgOJuJnT0oVAAAAAY"]
[Tue Apr 21 01:33:48.520552 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:3966] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "aeZjfP4EoMBgOJuJnT0oVgAAABM"]
[Tue Apr 21 01:33:48.977199 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:56825] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeZjfAN8Z1-vktaI_tOZpAAAAEA"]
[Tue Apr 21 01:33:48.992830 2026] [:error] [pid 11351:tid 11404] [client 51.11.245.223:64182] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "aeZjfAN8Z1-vktaI_tOZpQAAAFE"]
[Tue Apr 21 01:33:49.448597 2026] [:error] [pid 11441:tid 11446] [client 51.11.245.223:51137] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeZjfcixByFUvmh319DgxAAAAMM"]
[Tue Apr 21 01:33:49.472137 2026] [:error] [pid 11352:tid 11434] [client 51.11.245.223:3911] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/w2025.php"] [unique_id "aeZjfWl10mhMSfJ7ir8CGwAAAJQ"]
[Tue Apr 21 01:33:49.919821 2026] [:error] [pid 11352:tid 11417] [client 51.11.245.223:50576] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeZjfWl10mhMSfJ7ir8CHgAAAIM"]
[Tue Apr 21 01:33:49.948753 2026] [:error] [pid 11441:tid 11451] [client 51.11.245.223:56122] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "aeZjfcixByFUvmh319DgxQAAAMg"]
[Tue Apr 21 01:33:50.391024 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:51191] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeZjfh3y7MHq1iB0qYrrWwAAAVc"]
[Tue Apr 21 01:33:50.434949 2026] [:error] [pid 11352:tid 11422] [client 51.11.245.223:3849] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "aeZjfml10mhMSfJ7ir8CIAAAAIg"]
[Tue Apr 21 01:33:50.862509 2026] [:error] [pid 11351:tid 11388] [client 51.11.245.223:52422] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeZjfgN8Z1-vktaI_tOZqwAAAEE"]
[Tue Apr 21 01:33:50.907201 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:54267] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "aeZjfgN8Z1-vktaI_tOZrAAAAE8"]
[Tue Apr 21 01:33:51.334210 2026] [:error] [pid 11494:tid 11499] [client 51.11.245.223:56829] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeZjf8gko5iFiE8YoyQ4zAAAAYM"]
[Tue Apr 21 01:33:51.384303 2026] [:error] [pid 11494:tid 11504] [client 51.11.245.223:52725] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fvvff.php"] [unique_id "aeZjf8gko5iFiE8YoyQ4zQAAAYg"]
[Tue Apr 21 01:33:51.805593 2026] [:error] [pid 11350:tid 11360] [client 51.11.245.223:47517] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeZjf_4EoMBgOJuJnT0oWQAAAAE"]
[Tue Apr 21 01:33:51.857354 2026] [:error] [pid 11350:tid 11362] [client 51.11.245.223:41055] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "aeZjf_4EoMBgOJuJnT0oWgAAAAM"]
[Tue Apr 21 01:33:52.277572 2026] [:error] [pid 11352:tid 11435] [client 51.11.245.223:51188] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeZjgGl10mhMSfJ7ir8CIgAAAJU"]
[Tue Apr 21 01:33:52.337996 2026] [:error] [pid 6928:tid 6945] [client 51.11.245.223:54229] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "aeZjgB3y7MHq1iB0qYrrZAAAAU8"]
[Tue Apr 21 01:33:52.749457 2026] [:error] [pid 42014:tid 42034] [client 51.11.245.223:50573] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeZjgMek-00-ZI0f1NqubQAAARI"]
[Tue Apr 21 01:33:52.819111 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:34247] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "aeZjgAN8Z1-vktaI_tOZsgAAAFI"]
[Tue Apr 21 01:33:53.220173 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:63574] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeZjgQN8Z1-vktaI_tOZswAAAEA"]
[Tue Apr 21 01:33:53.306125 2026] [:error] [pid 11351:tid 11404] [client 51.11.245.223:54231] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a2.php"] [unique_id "aeZjgQN8Z1-vktaI_tOZtAAAAFE"]
[Tue Apr 21 01:33:53.690965 2026] [:error] [pid 11352:tid 11429] [client 51.11.245.223:52466] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeZjgWl10mhMSfJ7ir8CJgAAAI8"]
[Tue Apr 21 01:33:53.791816 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:41036] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeZjgQN8Z1-vktaI_tOZtwAAAEg"]
[Tue Apr 21 01:33:54.160671 2026] [:error] [pid 6928:tid 6942] [client 51.11.245.223:50578] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeZjgh3y7MHq1iB0qYrraAAAAUw"]
[Tue Apr 21 01:33:54.277378 2026] [:error] [pid 11352:tid 11415] [client 51.11.245.223:41972] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeZjgml10mhMSfJ7ir8CKAAAAIE"]
[Tue Apr 21 01:33:54.629936 2026] [:error] [pid 11494:tid 11503] [client 51.11.245.223:48876] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeZjgsgko5iFiE8YoyQ41AAAAYc"]
[Tue Apr 21 01:33:54.754576 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:36820] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeZjggN8Z1-vktaI_tOZuwAAAFU"]
[Tue Apr 21 01:33:55.099069 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:47494] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeZjgx3y7MHq1iB0qYrragAAAVc"]
[Tue Apr 21 01:33:55.228410 2026] [:error] [pid 6928:tid 6939] [client 51.11.245.223:64161] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeZjgx3y7MHq1iB0qYrrawAAAUk"]
[Tue Apr 21 01:33:55.568626 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:48850] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeZjgwN8Z1-vktaI_tOZvQAAAE8"]
[Tue Apr 21 01:33:55.709300 2026] [:error] [pid 42014:tid 42037] [client 51.11.245.223:41064] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZjg8ek-00-ZI0f1NqudQAAARU"]
[Tue Apr 21 01:33:56.039401 2026] [:error] [pid 11351:tid 11409] [client 51.11.245.223:46906] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeZjhAN8Z1-vktaI_tOZvwAAAFY"]
[Tue Apr 21 01:33:56.186318 2026] [:error] [pid 11494:tid 11508] [client 51.11.245.223:64177] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZjhMgko5iFiE8YoyQ41wAAAYw"]
[Tue Apr 21 01:33:56.513040 2026] [:error] [pid 6928:tid 6948] [client 51.11.245.223:47491] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeZjhB3y7MHq1iB0qYrrcAAAAVI"]
[Tue Apr 21 01:33:56.657704 2026] [:error] [pid 11350:tid 11382] [client 51.11.245.223:34266] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZjhP4EoMBgOJuJnT0oZwAAABc"]
[Tue Apr 21 01:33:56.983482 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:59663] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeZjhAN8Z1-vktaI_tOZwwAAAFI"]
[Tue Apr 21 01:33:57.154690 2026] [:error] [pid 11351:tid 11404] [client 51.11.245.223:54234] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeZjhQN8Z1-vktaI_tOZxAAAAFE"]
[Tue Apr 21 01:33:57.454331 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:46852] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjhQN8Z1-vktaI_tOZxgAAAEg"]
[Tue Apr 21 01:33:57.664032 2026] [:error] [pid 42014:tid 42035] [client 51.11.245.223:41053] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjhcek-00-ZI0f1NquegAAARM"]
[Tue Apr 21 01:33:57.936826 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:48872] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjhQN8Z1-vktaI_tOZyQAAAEc"]
[Tue Apr 21 01:33:58.139542 2026] [:error] [pid 11441:tid 11460] [client 51.11.245.223:41082] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjhsixByFUvmh319DgzQAAANE"]
[Tue Apr 21 01:33:58.407272 2026] [:error] [pid 11494:tid 11513] [client 51.11.245.223:45620] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjhsgko5iFiE8YoyQ42AAAAZE"]
[Tue Apr 21 01:33:58.611872 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:34284] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjhgN8Z1-vktaI_tOZywAAAFM"]
[Tue Apr 21 01:33:58.879922 2026] [:error] [pid 42014:tid 42026] [client 51.11.245.223:49443] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjhsek-00-ZI0f1NqufQAAAQo"]
[Tue Apr 21 01:33:59.085811 2026] [:error] [pid 6928:tid 6945] [client 51.11.245.223:3851] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjhx3y7MHq1iB0qYrrdQAAAU8"]
[Tue Apr 21 01:33:59.350321 2026] [:error] [pid 11352:tid 11415] [client 51.11.245.223:65238] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjh2l10mhMSfJ7ir8COAAAAIE"]
[Tue Apr 21 01:33:59.565407 2026] [:error] [pid 11352:tid 11418] [client 51.11.245.223:3292] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeZjh2l10mhMSfJ7ir8COgAAAIQ"]
[Tue Apr 21 01:33:59.821121 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:59707] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjh_4EoMBgOJuJnT0ocwAAAAg"]
[Tue Apr 21 01:34:00.040960 2026] [:error] [pid 6928:tid 6936] [client 51.11.245.223:34242] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeZjiB3y7MHq1iB0qYrreAAAAUY"]
[Tue Apr 21 01:34:00.292827 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:42471] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjiP4EoMBgOJuJnT0odQAAABg"]
[Tue Apr 21 01:34:00.516515 2026] [:error] [pid 11350:tid 11366] [client 51.11.245.223:41025] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeZjiP4EoMBgOJuJnT0odwAAAAc"]
[Tue Apr 21 01:34:00.763513 2026] [:error] [pid 6928:tid 6950] [client 51.11.245.223:42433] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjiB3y7MHq1iB0qYrrfQAAAVQ"]
[Tue Apr 21 01:34:00.991096 2026] [:error] [pid 11494:tid 11505] [client 51.11.245.223:41936] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeZjiMgko5iFiE8YoyQ43AAAAYk"]
[Tue Apr 21 01:34:01.235921 2026] [:error] [pid 11350:tid 11376] [client 51.11.245.223:65279] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeZjif4EoMBgOJuJnT0oeAAAABE"]
[Tue Apr 21 01:34:01.462826 2026] [:error] [pid 6928:tid 6949] [client 51.11.245.223:54190] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeZjiR3y7MHq1iB0qYrrggAAAVM"]
[Tue Apr 21 01:34:01.706461 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:59694] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeZjif4EoMBgOJuJnT0oegAAAA8"]
[Tue Apr 21 01:34:01.951429 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:52686] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeZjif4EoMBgOJuJnT0ofQAAABM"]
[Tue Apr 21 01:34:02.186459 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:45591] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeZjigN8Z1-vktaI_tOZ1AAAAFI"]
[Tue Apr 21 01:34:02.422817 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:31939] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeZjigN8Z1-vktaI_tOZ2AAAAEc"]
[Tue Apr 21 01:34:02.657915 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:42475] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeZjigN8Z1-vktaI_tOZ2gAAAFM"]
[Tue Apr 21 01:34:02.914633 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:36837] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeZjigN8Z1-vktaI_tOZ3QAAAEo"]
[Tue Apr 21 01:34:03.129030 2026] [:error] [pid 6928:tid 6941] [client 51.11.245.223:59683] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeZjix3y7MHq1iB0qYrrhAAAAUs"]
[Tue Apr 21 01:34:03.386675 2026] [:error] [pid 11351:tid 11409] [client 51.11.245.223:34273] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeZjiwN8Z1-vktaI_tOZ4gAAAFY"]
[Tue Apr 21 01:34:03.603809 2026] [:error] [pid 11351:tid 11407] [client 51.11.245.223:49446] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeZjiwN8Z1-vktaI_tOZ6AAAAFQ"]
[Tue Apr 21 01:34:03.859452 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:34240] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeZjiwN8Z1-vktaI_tOZ7AAAAE8"]
[Tue Apr 21 01:34:04.074747 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:65219] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeZjjAN8Z1-vktaI_tOZ7gAAAE4"]
[Tue Apr 21 01:34:04.335966 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:56179] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeZjjAN8Z1-vktaI_tOZ-wAAAE8"]
[Tue Apr 21 01:34:04.545989 2026] [:error] [pid 11351:tid 11393] [client 51.11.245.223:49409] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeZjjAN8Z1-vktaI_tOZ_wAAAEY"]
[Tue Apr 21 01:34:04.832370 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:54245] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aeZjjAN8Z1-vktaI_tOaBAAAAEM"]
[Tue Apr 21 01:34:05.015568 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:49462] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeZjjQN8Z1-vktaI_tOaBQAAAFI"]
[Tue Apr 21 01:34:05.307076 2026] [:error] [pid 11494:tid 11516] [client 51.11.245.223:52729] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeZjjcgko5iFiE8YoyQ43wAAAZQ"]
[Tue Apr 21 01:34:05.485589 2026] [:error] [pid 11494:tid 11518] [client 51.11.245.223:49431] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeZjjcgko5iFiE8YoyQ44gAAAZY"]
[Tue Apr 21 01:34:05.779721 2026] [:error] [pid 11352:tid 11438] [client 51.11.245.223:50857] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeZjjWl10mhMSfJ7ir8CPQAAAJg"]
[Tue Apr 21 01:34:05.957290 2026] [:error] [pid 11494:tid 11514] [client 51.11.245.223:59649] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeZjjcgko5iFiE8YoyQ45gAAAZI"]
[Tue Apr 21 01:34:06.252576 2026] [:error] [pid 6928:tid 6943] [client 51.11.245.223:36842] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeZjjh3y7MHq1iB0qYrriQAAAU0"]
[Tue Apr 21 01:34:06.427516 2026] [:error] [pid 11350:tid 11362] [client 51.11.245.223:42453] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeZjjv4EoMBgOJuJnT0ogQAAAAM"]
[Tue Apr 21 01:34:06.724269 2026] [:error] [pid 11494:tid 11520] [client 51.11.245.223:52691] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aeZjjsgko5iFiE8YoyQ46QAAAZg"]
[Tue Apr 21 01:34:06.897964 2026] [:error] [pid 11352:tid 11430] [client 51.11.245.223:42441] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "aeZjjml10mhMSfJ7ir8CPgAAAJA"]
[Tue Apr 21 01:34:07.196344 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:31970] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeZjj_4EoMBgOJuJnT0ohQAAAAg"]
[Tue Apr 21 01:34:07.374343 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:45570] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "aeZjjwN8Z1-vktaI_tOaDQAAAE4"]
[Tue Apr 21 01:34:07.687638 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:41075] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeZjj_4EoMBgOJuJnT0oiQAAABI"]
[Tue Apr 21 01:34:07.844552 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:59651] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "aeZjj_4EoMBgOJuJnT0oigAAAAo"]
[Tue Apr 21 01:34:08.159044 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:54265] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeZjkAN8Z1-vktaI_tOaFAAAAEw"]
[Tue Apr 21 01:34:08.315779 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:42495] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "aeZjkAN8Z1-vktaI_tOaFQAAAEo"]
[Tue Apr 21 01:34:08.629393 2026] [:error] [pid 6928:tid 6938] [client 51.11.245.223:3327] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeZjkB3y7MHq1iB0qYrrjgAAAUg"]
[Tue Apr 21 01:34:08.787110 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:49471] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZjkP4EoMBgOJuJnT0ojgAAABM"]
[Tue Apr 21 01:34:09.107713 2026] [:error] [pid 11352:tid 11433] [client 51.11.245.223:3296] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeZjkWl10mhMSfJ7ir8CPwAAAJM"]
[Tue Apr 21 01:34:09.265897 2026] [:error] [pid 11494:tid 11505] [client 51.11.245.223:42479] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZjkcgko5iFiE8YoyQ47QAAAYk"]
[Tue Apr 21 01:34:09.584489 2026] [:error] [pid 42014:tid 42025] [client 51.11.245.223:63542] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeZjkcek-00-ZI0f1NquggAAAQk"]
[Tue Apr 21 01:34:09.740377 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:54797] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZjkQN8Z1-vktaI_tOaGwAAAE0"]
[Tue Apr 21 01:34:10.085527 2026] [:error] [pid 11494:tid 11501] [client 51.11.245.223:41927] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeZjksgko5iFiE8YoyQ48AAAAYU"]
[Tue Apr 21 01:34:10.214656 2026] [:error] [pid 11494:tid 11507] [client 51.11.245.223:9221] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZjksgko5iFiE8YoyQ48wAAAYs"]
[Tue Apr 21 01:34:10.556906 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:54219] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeZjkv4EoMBgOJuJnT0okQAAABU"]
[Tue Apr 21 01:34:10.686320 2026] [:error] [pid 11351:tid 11389] [client 51.11.245.223:40493] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjkgN8Z1-vktaI_tOaHwAAAEI"]
[Tue Apr 21 01:34:11.029382 2026] [:error] [pid 11351:tid 11409] [client 51.11.245.223:34280] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeZjkwN8Z1-vktaI_tOaIwAAAFY"]
[Tue Apr 21 01:34:11.157483 2026] [:error] [pid 11494:tid 11503] [client 51.11.245.223:53629] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjk8gko5iFiE8YoyQ49gAAAYc"]
[Tue Apr 21 01:34:11.509284 2026] [:error] [pid 11351:tid 11391] [client 51.11.245.223:41028] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeZjkwN8Z1-vktaI_tOaKAAAAEQ"]
[Tue Apr 21 01:34:11.626834 2026] [:error] [pid 6928:tid 6941] [client 51.11.245.223:56797] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjkx3y7MHq1iB0qYrrkAAAAUs"]
[Tue Apr 21 01:34:11.985373 2026] [:error] [pid 11494:tid 11496] [client 51.11.245.223:41042] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeZjk8gko5iFiE8YoyQ4-QAAAYA"]
[Tue Apr 21 01:34:12.110963 2026] [:error] [pid 11351:tid 11388] [client 51.11.245.223:54808] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjlAN8Z1-vktaI_tOaKgAAAEE"]
[Tue Apr 21 01:34:12.456994 2026] [:error] [pid 42014:tid 42019] [client 51.11.245.223:34250] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeZjlMek-00-ZI0f1NquiQAAAQM"]
[Tue Apr 21 01:34:12.581000 2026] [:error] [pid 11441:tid 11443] [client 51.11.245.223:40468] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZjlMixByFUvmh319Dg0wAAAMA"]
[Tue Apr 21 01:34:12.927607 2026] [:error] [pid 11494:tid 11518] [client 51.11.245.223:54245] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjlMgko5iFiE8YoyQ5AAAAAZY"]
[Tue Apr 21 01:34:13.051251 2026] [:error] [pid 42014:tid 42040] [client 51.11.245.223:51802] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZjlcek-00-ZI0f1NquigAAARg"]
[Tue Apr 21 01:34:13.407458 2026] [:error] [pid 42014:tid 42035] [client 51.11.245.223:3307] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjlcek-00-ZI0f1NqujAAAARM"]
[Tue Apr 21 01:34:13.539016 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:60987] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZjlQN8Z1-vktaI_tOaLgAAAEg"]
[Tue Apr 21 01:34:13.882392 2026] [:error] [pid 6928:tid 6947] [client 51.11.245.223:50829] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjlR3y7MHq1iB0qYrrkgAAAVE"]
[Tue Apr 21 01:34:14.023791 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:51831] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZjlv4EoMBgOJuJnT0olwAAABI"]
[Tue Apr 21 01:34:14.358454 2026] [:error] [pid 11494:tid 11512] [client 51.11.245.223:31972] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjlsgko5iFiE8YoyQ5CAAAAZA"]
[Tue Apr 21 01:34:14.495434 2026] [:error] [pid 11494:tid 11520] [client 51.11.245.223:54391] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeZjlsgko5iFiE8YoyQ5CQAAAZg"]
[Tue Apr 21 01:34:14.843126 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:41963] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjlgN8Z1-vktaI_tOaMAAAAEM"]
[Tue Apr 21 01:34:14.966702 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:40458] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeZjlgN8Z1-vktaI_tOaMQAAAFU"]
[Tue Apr 21 01:34:15.316203 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:31973] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjl8gko5iFiE8YoyQ5DAAAAY4"]
[Tue Apr 21 01:34:15.438453 2026] [:error] [pid 42014:tid 42026] [client 51.11.245.223:54343] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeZjl8ek-00-ZI0f1NqujgAAAQo"]
[Tue Apr 21 01:34:15.788728 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:3324] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjl_4EoMBgOJuJnT0ooQAAAA0"]
[Tue Apr 21 01:34:15.911955 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:40546] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeZjl_4EoMBgOJuJnT0oowAAAAk"]
[Tue Apr 21 01:34:16.272871 2026] [:error] [pid 11350:tid 11370] [client 51.11.245.223:34278] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeZjmP4EoMBgOJuJnT0oqgAAAAs"]
[Tue Apr 21 01:34:16.383788 2026] [:error] [pid 6928:tid 6949] [client 51.11.245.223:54359] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeZjmB3y7MHq1iB0qYrrmAAAAVM"]
[Tue Apr 21 01:34:16.744973 2026] [:error] [pid 11350:tid 11361] [client 51.11.245.223:34301] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeZjmP4EoMBgOJuJnT0orgAAAAI"]
[Tue Apr 21 01:34:16.865555 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:51806] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeZjmP4EoMBgOJuJnT0osAAAABA"]
[Tue Apr 21 01:34:17.229596 2026] [:error] [pid 11441:tid 11444] [client 51.11.245.223:54218] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeZjmcixByFUvmh319Dg2wAAAME"]
[Tue Apr 21 01:34:17.336606 2026] [:error] [pid 11350:tid 11376] [client 51.11.245.223:24549] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeZjmf4EoMBgOJuJnT0otQAAABE"]
[Tue Apr 21 01:34:17.705797 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:54239] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeZjmf4EoMBgOJuJnT0ouAAAAAk"]
[Tue Apr 21 01:34:17.809073 2026] [:error] [pid 11494:tid 11499] [client 51.11.245.223:24522] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeZjmcgko5iFiE8YoyQ5EAAAAYM"]
[Tue Apr 21 01:34:18.178620 2026] [:error] [pid 42014:tid 42034] [client 51.11.245.223:41954] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aeZjmsek-00-ZI0f1NqukAAAARI"]
[Tue Apr 21 01:34:18.282749 2026] [:error] [pid 11350:tid 11371] [client 51.11.245.223:24513] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeZjmv4EoMBgOJuJnT0ouwAAAAw"]
[Tue Apr 21 01:34:18.651282 2026] [:error] [pid 11494:tid 11502] [client 51.11.245.223:63538] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeZjmsgko5iFiE8YoyQ5EwAAAYY"]
[Tue Apr 21 01:34:18.753136 2026] [:error] [pid 6928:tid 6933] [client 51.11.245.223:65210] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeZjmh3y7MHq1iB0qYrrnQAAAUM"]
[Tue Apr 21 01:34:19.122547 2026] [:error] [pid 11441:tid 11460] [client 51.11.245.223:45339] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeZjm8ixByFUvmh319Dg3gAAANE"]
[Tue Apr 21 01:34:19.223333 2026] [:error] [pid 6928:tid 6945] [client 51.11.245.223:51819] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeZjmx3y7MHq1iB0qYrrnwAAAU8"]
[Tue Apr 21 01:34:19.603123 2026] [:error] [pid 11494:tid 11517] [client 51.11.245.223:48793] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeZjm8gko5iFiE8YoyQ5FwAAAZU"]
[Tue Apr 21 01:34:19.692793 2026] [:error] [pid 6928:tid 6941] [client 51.11.245.223:9567] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeZjmx3y7MHq1iB0qYrrogAAAUs"]
[Tue Apr 21 01:34:20.075022 2026] [:error] [pid 11441:tid 11453] [client 51.11.245.223:3890] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "aeZjnMixByFUvmh319Dg3wAAAMo"]
[Tue Apr 21 01:34:20.163423 2026] [:error] [pid 42014:tid 42033] [client 51.11.245.223:60933] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZjnMek-00-ZI0f1NqukgAAARE"]
[Tue Apr 21 01:34:20.563892 2026] [:error] [pid 42014:tid 42023] [client 51.11.245.223:36737] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeZjnMek-00-ZI0f1NqulAAAAQc"]
[Tue Apr 21 01:34:20.646597 2026] [:error] [pid 11494:tid 11519] [client 51.11.245.223:24539] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZjnMgko5iFiE8YoyQ5GQAAAZc"]
[Tue Apr 21 01:34:21.035551 2026] [:error] [pid 11494:tid 11515] [client 51.11.245.223:41968] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeZjncgko5iFiE8YoyQ5HAAAAZM"]
[Tue Apr 21 01:34:21.117434 2026] [:error] [pid 11441:tid 11459] [client 51.11.245.223:65203] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZjncixByFUvmh319Dg5AAAANA"]
[Tue Apr 21 01:34:21.509089 2026] [:error] [pid 11441:tid 11447] [client 51.11.245.223:41945] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeZjncixByFUvmh319Dg5wAAAMQ"]
[Tue Apr 21 01:34:21.591616 2026] [:error] [pid 42014:tid 42017] [client 51.11.245.223:38468] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZjncek-00-ZI0f1NqulQAAAQE"]
[Tue Apr 21 01:34:21.983112 2026] [:error] [pid 6928:tid 6947] [client 51.11.245.223:41961] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plss3.php"] [unique_id "aeZjnR3y7MHq1iB0qYrrpwAAAVE"]
[Tue Apr 21 01:34:22.062498 2026] [:error] [pid 11441:tid 11444] [client 51.11.245.223:24525] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjnsixByFUvmh319Dg7AAAAME"]
[Tue Apr 21 01:34:22.455728 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:52728] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "aeZjnv4EoMBgOJuJnT0oxwAAAAk"]
[Tue Apr 21 01:34:22.532874 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:24564] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjnv4EoMBgOJuJnT0oyAAAAA0"]
[Tue Apr 21 01:34:22.934825 2026] [:error] [pid 11494:tid 11506] [client 51.11.245.223:30814] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "aeZjnsgko5iFiE8YoyQ5IQAAAYo"]
[Tue Apr 21 01:34:23.003173 2026] [:error] [pid 11494:tid 11514] [client 51.11.245.223:51733] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjn8gko5iFiE8YoyQ5IgAAAZI"]
[Tue Apr 21 01:34:23.415747 2026] [:error] [pid 42014:tid 42037] [client 51.11.245.223:52672] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "aeZjn8ek-00-ZI0f1NqulwAAARU"]
[Tue Apr 21 01:34:23.480749 2026] [:error] [pid 42014:tid 42038] [client 51.11.245.223:65207] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjn8ek-00-ZI0f1NqumAAAARY"]
[Tue Apr 21 01:34:23.895141 2026] [:error] [pid 6928:tid 6939] [client 51.11.245.223:36857] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "aeZjnx3y7MHq1iB0qYrrqAAAAUk"]
[Tue Apr 21 01:34:23.951965 2026] [:error] [pid 11494:tid 11517] [client 51.11.245.223:38509] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeZjn8gko5iFiE8YoyQ5KQAAAZU"]
[Tue Apr 21 01:34:24.370505 2026] [:error] [pid 6928:tid 6952] [client 51.11.245.223:3268] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZjoB3y7MHq1iB0qYrrqgAAAVY"]
[Tue Apr 21 01:34:24.422781 2026] [:error] [pid 42014:tid 42020] [client 51.11.245.223:9569] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeZjoMek-00-ZI0f1NqungAAAQQ"]
[Tue Apr 21 01:34:24.845157 2026] [:error] [pid 42014:tid 42018] [client 51.11.245.223:30829] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZjoMek-00-ZI0f1NquoQAAAQI"]
[Tue Apr 21 01:34:24.892176 2026] [:error] [pid 42014:tid 42032] [client 51.11.245.223:46272] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeZjoMek-00-ZI0f1NquogAAARA"]
[Tue Apr 21 01:34:25.318745 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:3706] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZjoQN8Z1-vktaI_tOaPwAAAEc"]
[Tue Apr 21 01:34:25.364967 2026] [:error] [pid 11494:tid 11498] [client 51.11.245.223:40551] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeZjocgko5iFiE8YoyQ5LQAAAYI"]
[Tue Apr 21 01:34:25.790877 2026] [:error] [pid 11441:tid 11450] [client 51.11.245.223:36805] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeZjocixByFUvmh319Dg8AAAAMc"]
[Tue Apr 21 01:34:25.835109 2026] [:error] [pid 11441:tid 11463] [client 51.11.245.223:24553] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeZjocixByFUvmh319Dg8QAAANQ"]
[Tue Apr 21 01:34:26.262953 2026] [:error] [pid 6928:tid 6936] [client 51.11.245.223:3696] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjoh3y7MHq1iB0qYrrsAAAAUY"]
[Tue Apr 21 01:34:26.306081 2026] [:error] [pid 6928:tid 6933] [client 51.11.245.223:65165] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeZjoh3y7MHq1iB0qYrrsQAAAUM"]
[Tue Apr 21 01:34:26.735123 2026] [:error] [pid 42014:tid 42022] [client 51.11.245.223:31936] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjosek-00-ZI0f1NqupgAAAQY"]
[Tue Apr 21 01:34:26.777602 2026] [:error] [pid 42014:tid 42039] [client 51.11.245.223:46281] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeZjosek-00-ZI0f1NquqAAAARc"]
[Tue Apr 21 01:34:27.208179 2026] [:error] [pid 42014:tid 42025] [client 51.11.245.223:3423] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjo8ek-00-ZI0f1NquqgAAAQk"]
[Tue Apr 21 01:34:27.249971 2026] [:error] [pid 42014:tid 42037] [client 51.11.245.223:46310] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aeZjo8ek-00-ZI0f1NquqwAAARU"]
[Tue Apr 21 01:34:27.689389 2026] [:error] [pid 42014:tid 42031] [client 51.11.245.223:31999] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeZjo8ek-00-ZI0f1NqusAAAAQ8"]
[Tue Apr 21 01:34:27.724154 2026] [:error] [pid 42014:tid 42030] [client 51.11.245.223:65175] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeZjo8ek-00-ZI0f1NqusQAAAQ4"]
[Tue Apr 21 01:34:28.161674 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:61300] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZjpAN8Z1-vktaI_tOaRgAAAE0"]
[Tue Apr 21 01:34:28.196112 2026] [:error] [pid 11494:tid 11502] [client 51.11.245.223:46290] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeZjpMgko5iFiE8YoyQ5MwAAAYY"]
[Tue Apr 21 01:34:28.632180 2026] [:error] [pid 11441:tid 11462] [client 51.11.245.223:50558] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZjpMixByFUvmh319Dg9wAAANM"]
[Tue Apr 21 01:34:28.667913 2026] [:error] [pid 11352:tid 11420] [client 51.11.245.223:51731] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeZjpGl10mhMSfJ7ir8CTwAAAIY"]
[Tue Apr 21 01:34:29.102915 2026] [:error] [pid 42014:tid 42026] [client 51.11.245.223:3653] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZjpcek-00-ZI0f1NqutQAAAQo"]
[Tue Apr 21 01:34:29.143370 2026] [:error] [pid 11494:tid 11503] [client 51.11.245.223:65178] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "aeZjpcgko5iFiE8YoyQ5OwAAAYc"]
[Tue Apr 21 01:34:29.574428 2026] [:error] [pid 6928:tid 6951] [client 51.11.245.223:3452] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeZjpR3y7MHq1iB0qYrruwAAAVU"]
[Tue Apr 21 01:34:29.618039 2026] [:error] [pid 42014:tid 42039] [client 51.11.245.223:9536] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeZjpcek-00-ZI0f1NqutwAAARc"]
[Tue Apr 21 01:34:30.048396 2026] [:error] [pid 42014:tid 42027] [client 51.11.245.223:50514] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeZjpsek-00-ZI0f1NquuAAAAQs"]
[Tue Apr 21 01:34:30.089383 2026] [:error] [pid 11351:tid 11393] [client 51.11.245.223:24563] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeZjpgN8Z1-vktaI_tOaSQAAAEY"]
[Tue Apr 21 01:34:30.527884 2026] [:error] [pid 11352:tid 11422] [client 51.11.245.223:50502] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeZjpml10mhMSfJ7ir8CVQAAAIg"]
[Tue Apr 21 01:34:30.563898 2026] [:error] [pid 11352:tid 11419] [client 51.11.245.223:24572] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeZjpml10mhMSfJ7ir8CVgAAAIU"]
[Tue Apr 21 01:34:31.001853 2026] [:error] [pid 11351:tid 11398] [client 51.11.245.223:30792] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeZjpwN8Z1-vktaI_tOaTQAAAEs"]
[Tue Apr 21 01:34:31.033371 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:24568] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeZjpwN8Z1-vktaI_tOaTgAAAEg"]
[Tue Apr 21 01:34:31.473644 2026] [:error] [pid 11351:tid 11404] [client 51.11.245.223:61293] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-update.php"] [unique_id "aeZjpwN8Z1-vktaI_tOaVQAAAFE"]
[Tue Apr 21 01:34:31.505415 2026] [:error] [pid 11351:tid 11389] [client 51.11.245.223:46307] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeZjpwN8Z1-vktaI_tOaVgAAAEI"]
[Tue Apr 21 01:34:31.948888 2026] [:error] [pid 6928:tid 6937] [client 51.11.245.223:45324] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeZjpx3y7MHq1iB0qYrrvwAAAUc"]
[Tue Apr 21 01:34:31.976383 2026] [:error] [pid 11352:tid 11435] [client 51.11.245.223:38477] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeZjp2l10mhMSfJ7ir8CWQAAAJU"]
[Tue Apr 21 01:34:32.419795 2026] [:error] [pid 11352:tid 11423] [client 51.11.245.223:41025] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeZjqGl10mhMSfJ7ir8CWwAAAIk"]
[Tue Apr 21 01:34:32.448971 2026] [:error] [pid 6928:tid 6944] [client 51.11.245.223:51769] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeZjqB3y7MHq1iB0qYrrxAAAAU4"]
[Tue Apr 21 01:34:32.902042 2026] [:error] [pid 11352:tid 11429] [client 51.11.245.223:3618] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeZjqGl10mhMSfJ7ir8CXgAAAI8"]
[Tue Apr 21 01:34:32.919079 2026] [:error] [pid 11494:tid 11515] [client 51.11.245.223:60963] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeZjqMgko5iFiE8YoyQ5PQAAAZM"]
[Tue Apr 21 01:34:33.373870 2026] [:error] [pid 11352:tid 11424] [client 51.11.245.223:3655] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aeZjqWl10mhMSfJ7ir8CYAAAAIo"]
[Tue Apr 21 01:34:33.389117 2026] [:error] [pid 11352:tid 11418] [client 51.11.245.223:38469] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZjqWl10mhMSfJ7ir8CYQAAAIQ"]
[Tue Apr 21 01:34:33.853489 2026] [:error] [pid 6928:tid 6951] [client 51.11.245.223:30801] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeZjqR3y7MHq1iB0qYrrzAAAAVU"]
[Tue Apr 21 01:34:33.859469 2026] [:error] [pid 6928:tid 6952] [client 51.11.245.223:24524] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZjqR3y7MHq1iB0qYrrzQAAAVY"]
[Tue Apr 21 01:34:34.329899 2026] [:error] [pid 6928:tid 6932] [client 51.11.245.223:55573] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeZjqh3y7MHq1iB0qYrr1AAAAUI"]
[Tue Apr 21 01:34:34.332578 2026] [:error] [pid 11350:tid 11370] [client 51.11.245.223:46302] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZjqv4EoMBgOJuJnT0ozQAAAAs"]
[Tue Apr 21 01:34:34.801746 2026] [:error] [pid 6928:tid 6945] [client 51.11.245.223:51720] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZjqh3y7MHq1iB0qYrr2gAAAU8"]
[Tue Apr 21 01:34:34.816980 2026] [:error] [pid 42014:tid 42023] [client 51.11.245.223:3117] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeZjqsek-00-ZI0f1NquvwAAAQc"]
[Tue Apr 21 01:34:35.274040 2026] [:error] [pid 6928:tid 6941] [client 51.11.245.223:24538] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeZjqx3y7MHq1iB0qYrr3gAAAUs"]
[Tue Apr 21 01:34:35.315724 2026] [:error] [pid 6928:tid 6934] [client 51.11.245.223:30830] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "aeZjqx3y7MHq1iB0qYrr4AAAAUQ"]
[Tue Apr 21 01:34:35.748413 2026] [:error] [pid 6928:tid 6952] [client 51.11.245.223:38485] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeZjqx3y7MHq1iB0qYrr5AAAAVY"]
[Tue Apr 21 01:34:35.786180 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:45991] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZjqx3y7MHq1iB0qYrr5QAAAVc"]
[Tue Apr 21 01:34:36.218082 2026] [:error] [pid 42014:tid 42022] [client 51.11.245.223:61536] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeZjrMek-00-ZI0f1NquxQAAAQY"]
[Tue Apr 21 01:34:36.261797 2026] [:error] [pid 42014:tid 42033] [client 51.11.245.223:61258] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZjrMek-00-ZI0f1NquxgAAARE"]
[Tue Apr 21 01:34:36.690109 2026] [:error] [pid 42014:tid 42028] [client 51.11.245.223:17974] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeZjrMek-00-ZI0f1NquygAAAQw"]
[Tue Apr 21 01:34:36.735387 2026] [:error] [pid 11494:tid 11501] [client 51.11.245.223:3445] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZjrMgko5iFiE8YoyQ5PwAAAYU"]
[Tue Apr 21 01:34:37.168081 2026] [:error] [pid 11351:tid 11403] [client 51.11.245.223:44975] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZjrQN8Z1-vktaI_tOaWwAAAFA"]
[Tue Apr 21 01:34:37.232452 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:3104] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeZjrQN8Z1-vktaI_tOaXAAAAFI"]
[Tue Apr 21 01:34:37.647089 2026] [:error] [pid 42014:tid 42029] [client 51.11.245.223:24523] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZjrcek-00-ZI0f1NquzAAAAQ0"]
[Tue Apr 21 01:34:37.708546 2026] [:error] [pid 11350:tid 11382] [client 51.11.245.223:3111] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeZjrf4EoMBgOJuJnT0ozwAAABc"]
[Tue Apr 21 01:34:38.360298 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:51754] File does not exist: /usr/local/apache/htdocs/suspended-page/we.php
[Tue Apr 21 01:34:38.435710 2026] [:error] [pid 11351:tid 11396] [client 51.11.245.223:3264] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Apr 21 01:34:38.598412 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:51754] File does not exist: /usr/local/apache/htdocs/suspended-page/alpha.php
[Tue Apr 21 01:34:38.674844 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:3264] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue Apr 21 01:34:38.837370 2026] [:error] [pid 11351:tid 11392] [client 51.11.245.223:51754] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Tue Apr 21 01:34:38.921141 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:3264] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue Apr 21 01:34:39.076344 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:51754] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-michan.php
[Tue Apr 21 01:34:39.168106 2026] [:error] [pid 11351:tid 11393] [client 51.11.245.223:3264] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue Apr 21 01:34:39.315447 2026] [:error] [pid 11351:tid 11403] [client 51.11.245.223:51754] File does not exist: /usr/local/apache/htdocs/suspended-page/admin1.php
[Tue Apr 21 01:34:39.404735 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:3264] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeZjrwN8Z1-vktaI_tOabwAAAEo"]
[Tue Apr 21 01:34:39.551426 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:51754] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjrwN8Z1-vktaI_tOacgAAAFU"]
[Tue Apr 21 01:34:39.876638 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:3432] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeZjr_4EoMBgOJuJnT0o0QAAAA8"]
[Tue Apr 21 01:34:40.022263 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:44954] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjsP4EoMBgOJuJnT0o0gAAAAo"]
[Tue Apr 21 01:34:40.356470 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:3123] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeZjsAN8Z1-vktaI_tOadgAAAEc"]
[Tue Apr 21 01:34:40.493285 2026] [:error] [pid 11441:tid 11460] [client 51.11.245.223:61542] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjsMixByFUvmh319DhBwAAANE"]
[Tue Apr 21 01:34:40.828031 2026] [:error] [pid 42014:tid 42024] [client 51.11.245.223:46009] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aeZjsMek-00-ZI0f1NquzwAAAQg"]
[Tue Apr 21 01:34:40.963409 2026] [:error] [pid 6928:tid 6931] [client 51.11.245.223:61516] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjsB3y7MHq1iB0qYrr7QAAAUE"]
[Tue Apr 21 01:34:41.299655 2026] [:error] [pid 11351:tid 11409] [client 51.11.245.223:45975] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZjsQN8Z1-vktaI_tOadwAAAFY"]
[Tue Apr 21 01:34:41.433436 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:39121] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZjsQN8Z1-vktaI_tOaeQAAAE8"]
[Tue Apr 21 01:34:41.770833 2026] [:error] [pid 11351:tid 11389] [client 51.11.245.223:3398] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZjsQN8Z1-vktaI_tOafAAAAEI"]
[Tue Apr 21 01:34:41.912728 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:61522] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZjsQN8Z1-vktaI_tOafgAAAEw"]
[Tue Apr 21 01:34:42.334463 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:61297] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZjsgN8Z1-vktaI_tOaggAAAFI"]
[Tue Apr 21 01:34:42.384611 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:44974] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZjsgN8Z1-vktaI_tOagwAAAEo"]
[Tue Apr 21 01:34:42.828087 2026] [:error] [pid 11441:tid 11450] [client 51.11.245.223:50531] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeZjssixByFUvmh319DhCwAAAMc"]
[Tue Apr 21 01:34:42.855537 2026] [:error] [pid 11441:tid 11466] [client 51.11.245.223:9951] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZjssixByFUvmh319DhDQAAANc"]
[Tue Apr 21 01:34:43.327218 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:17959] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZjs_4EoMBgOJuJnT0o2gAAABA"]
[Tue Apr 21 01:34:43.358161 2026] [:error] [pid 11350:tid 11379] [client 51.11.245.223:50513] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeZjs_4EoMBgOJuJnT0o2wAAABQ"]
[Tue Apr 21 01:34:43.797478 2026] [:error] [pid 11351:tid 11411] [client 51.11.245.223:39120] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZjswN8Z1-vktaI_tOaiQAAAFg"]
[Tue Apr 21 01:34:43.851884 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:61262] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeZjs_4EoMBgOJuJnT0o3AAAABU"]
[Tue Apr 21 01:34:44.267899 2026] [:error] [pid 11351:tid 11409] [client 51.11.245.223:9952] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZjtAN8Z1-vktaI_tOajAAAAFY"]
[Tue Apr 21 01:34:44.347078 2026] [:error] [pid 11494:tid 11514] [client 51.11.245.223:55577] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeZjtMgko5iFiE8YoyQ5TQAAAZI"]
[Tue Apr 21 01:34:44.738365 2026] [:error] [pid 11352:tid 11432] [client 51.11.245.223:44938] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZjtGl10mhMSfJ7ir8CaAAAAJI"]
[Tue Apr 21 01:34:44.833083 2026] [:error] [pid 11441:tid 11465] [client 51.11.245.223:61249] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aeZjtMixByFUvmh319DhEQAAANY"]
[Tue Apr 21 01:34:45.209820 2026] [:error] [pid 11441:tid 11456] [client 51.11.245.223:17963] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZjtcixByFUvmh319DhFAAAAM0"]
[Tue Apr 21 01:34:45.385694 2026] [:error] [pid 11352:tid 11435] [client 51.11.245.223:3599] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZjtWl10mhMSfJ7ir8CagAAAJU"]
[Tue Apr 21 01:34:45.681754 2026] [:error] [pid 11441:tid 11455] [client 51.11.245.223:44952] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZjtcixByFUvmh319DhFwAAAMw"]
[Tue Apr 21 01:34:45.901534 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:34818] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZjtf4EoMBgOJuJnT0o3wAAAAk"]
[Tue Apr 21 01:34:46.152892 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:47599] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZjtv4EoMBgOJuJnT0o4AAAAA0"]
[Tue Apr 21 01:34:46.385284 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:30827] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZjtgN8Z1-vktaI_tOajwAAAEw"]
[Tue Apr 21 01:34:46.624375 2026] [:error] [pid 11351:tid 11393] [client 51.11.245.223:39145] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZjtgN8Z1-vktaI_tOakgAAAEY"]
[Tue Apr 21 01:34:46.870184 2026] [:error] [pid 11441:tid 11461] [client 51.11.245.223:34899] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZjtsixByFUvmh319DhGwAAANI"]
[Tue Apr 21 01:34:47.096703 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:47582] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeZjtwN8Z1-vktaI_tOalwAAAEo"]
[Tue Apr 21 01:34:47.370872 2026] [:error] [pid 11494:tid 11496] [client 51.11.245.223:34868] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeZjt8gko5iFiE8YoyQ5TwAAAYA"]
[Tue Apr 21 01:34:47.569135 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:39135] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeZjt_4EoMBgOJuJnT0o4gAAAA8"]
[Tue Apr 21 01:34:47.849115 2026] [:error] [pid 11352:tid 11414] [client 51.11.245.223:3172] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeZjt2l10mhMSfJ7ir8CbgAAAIA"]
[Tue Apr 21 01:34:48.040464 2026] [:error] [pid 11494:tid 11501] [client 51.11.245.223:44930] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeZjuMgko5iFiE8YoyQ5UQAAAYU"]
[Tue Apr 21 01:34:48.344384 2026] [:error] [pid 6928:tid 6941] [client 51.11.245.223:34894] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeZjuB3y7MHq1iB0qYrr-QAAAUs"]
[Tue Apr 21 01:34:48.512312 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:58082] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeZjuP4EoMBgOJuJnT0o5QAAABg"]
[Tue Apr 21 01:34:48.843508 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:55615] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aeZjuP4EoMBgOJuJnT0o6AAAABI"]
[Tue Apr 21 01:34:48.983100 2026] [:error] [pid 11350:tid 11360] [client 51.11.245.223:47583] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjuP4EoMBgOJuJnT0o6QAAAAE"]
[Tue Apr 21 01:34:49.321571 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:47342] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeZjuf4EoMBgOJuJnT0o7gAAABU"]
[Tue Apr 21 01:34:49.454180 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:39109] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjuf4EoMBgOJuJnT0o7wAAAAg"]
[Tue Apr 21 01:34:49.820358 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:33715] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeZjuf4EoMBgOJuJnT0o8gAAABM"]
[Tue Apr 21 01:34:49.924290 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:64588] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjuf4EoMBgOJuJnT0o8wAAAA0"]
[Tue Apr 21 01:34:50.376408 2026] [:error] [pid 11494:tid 11518] [client 51.11.245.223:53213] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeZjusgko5iFiE8YoyQ5VAAAAZY"]
[Tue Apr 21 01:34:50.394279 2026] [:error] [pid 11352:tid 11426] [client 51.11.245.223:64580] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjuml10mhMSfJ7ir8CcwAAAIw"]
[Tue Apr 21 01:34:50.871925 2026] [:error] [pid 11352:tid 11438] [client 51.11.245.223:3184] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "aeZjuml10mhMSfJ7ir8CdQAAAJg"]
[Tue Apr 21 01:34:50.873759 2026] [:error] [pid 11352:tid 11428] [client 51.11.245.223:60987] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjuml10mhMSfJ7ir8CdgAAAI4"]
[Tue Apr 21 01:34:51.343990 2026] [:error] [pid 11494:tid 11513] [client 51.11.245.223:47607] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZju8gko5iFiE8YoyQ5VwAAAZE"]
[Tue Apr 21 01:34:51.354074 2026] [:error] [pid 11352:tid 11421] [client 51.11.245.223:41911] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZju2l10mhMSfJ7ir8CegAAAIc"]
[Tue Apr 21 01:34:51.814529 2026] [:error] [pid 11352:tid 11431] [client 51.11.245.223:47594] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZju2l10mhMSfJ7ir8CfAAAAJE"]
[Tue Apr 21 01:34:51.833698 2026] [:error] [pid 6928:tid 6939] [client 51.11.245.223:55591] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZjux3y7MHq1iB0qYrr_QAAAUk"]
[Tue Apr 21 01:34:52.286305 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:44945] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjvAN8Z1-vktaI_tOanAAAAEg"]
[Tue Apr 21 01:34:52.307517 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:47358] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZjvAN8Z1-vktaI_tOanQAAAFU"]
[Tue Apr 21 01:34:52.757015 2026] [:error] [pid 11494:tid 11511] [client 51.11.245.223:9608] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjvMgko5iFiE8YoyQ5XQAAAY8"]
[Tue Apr 21 01:34:52.778156 2026] [:error] [pid 11351:tid 11398] [client 51.11.245.223:34853] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aeZjvAN8Z1-vktaI_tOaogAAAEs"]
[Tue Apr 21 01:34:53.228612 2026] [:error] [pid 11494:tid 11507] [client 51.11.245.223:64599] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjvcgko5iFiE8YoyQ5YQAAAYs"]
[Tue Apr 21 01:34:53.249535 2026] [:error] [pid 11494:tid 11496] [client 51.11.245.223:41889] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeZjvcgko5iFiE8YoyQ5YgAAAYA"]
[Tue Apr 21 01:34:53.699428 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:9934] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjvcgko5iFiE8YoyQ5ZwAAAY4"]
[Tue Apr 21 01:34:53.726217 2026] [:error] [pid 11494:tid 11497] [client 51.11.245.223:45996] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeZjvcgko5iFiE8YoyQ5aQAAAYE"]
[Tue Apr 21 01:34:54.170643 2026] [:error] [pid 6928:tid 6947] [client 51.11.245.223:61548] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjvh3y7MHq1iB0qYrsBAAAAVE"]
[Tue Apr 21 01:34:54.214386 2026] [:error] [pid 11494:tid 11505] [client 51.11.245.223:33722] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeZjvsgko5iFiE8YoyQ5awAAAYk"]
[Tue Apr 21 01:34:54.642804 2026] [:error] [pid 11494:tid 11517] [client 51.11.245.223:54359] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjvsgko5iFiE8YoyQ5bwAAAZU"]
[Tue Apr 21 01:34:54.690054 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:34918] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-michan.php"] [unique_id "aeZjvgN8Z1-vktaI_tOapQAAAEw"]
[Tue Apr 21 01:34:55.114595 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:9968] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjv_4EoMBgOJuJnT0o-gAAABU"]
[Tue Apr 21 01:34:55.171894 2026] [:error] [pid 11441:tid 11443] [client 51.11.245.223:33679] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aeZjv8ixByFUvmh319DhHgAAAMA"]
[Tue Apr 21 01:34:55.585543 2026] [:error] [pid 11494:tid 11511] [client 51.11.245.223:9645] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjv8gko5iFiE8YoyQ5cgAAAY8"]
[Tue Apr 21 01:34:55.644750 2026] [:error] [pid 11350:tid 11366] [client 51.11.245.223:53240] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aeZjv_4EoMBgOJuJnT0o-wAAAAc"]
[Tue Apr 21 01:34:56.063675 2026] [:error] [pid 6928:tid 6938] [client 51.11.245.223:43095] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZjwB3y7MHq1iB0qYrsCgAAAUg"]
[Tue Apr 21 01:34:56.126027 2026] [:error] [pid 11494:tid 11520] [client 51.11.245.223:41918] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aeZjwMgko5iFiE8YoyQ5dgAAAZg"]
[Tue Apr 21 01:34:56.536834 2026] [:error] [pid 11494:tid 11503] [client 51.11.245.223:9925] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aeZjwMgko5iFiE8YoyQ5egAAAYc"]
[Tue Apr 21 01:34:56.601109 2026] [:error] [pid 11494:tid 11505] [client 51.11.245.223:34824] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aeZjwMgko5iFiE8YoyQ5fAAAAYk"]
[Tue Apr 21 01:34:57.006631 2026] [:error] [pid 11494:tid 11501] [client 51.11.245.223:9658] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aeZjwcgko5iFiE8YoyQ5fwAAAYU"]
[Tue Apr 21 01:34:57.091533 2026] [:error] [pid 11441:tid 11445] [client 51.11.245.223:53237] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjwcixByFUvmh319DhIwAAAMI"]
[Tue Apr 21 01:34:57.478061 2026] [:error] [pid 6928:tid 6945] [client 51.11.245.223:39127] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aeZjwR3y7MHq1iB0qYrsDAAAAU8"]
[Tue Apr 21 01:34:57.565364 2026] [:error] [pid 11494:tid 11506] [client 51.11.245.223:33667] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjwcgko5iFiE8YoyQ5hQAAAYo"]
[Tue Apr 21 01:34:57.949331 2026] [:error] [pid 11494:tid 11502] [client 51.11.245.223:53525] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aeZjwcgko5iFiE8YoyQ5iwAAAYY"]
[Tue Apr 21 01:34:58.050720 2026] [:error] [pid 6928:tid 6954] [client 51.11.245.223:34882] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjwh3y7MHq1iB0qYrsDwAAAVg"]
[Tue Apr 21 01:34:58.420762 2026] [:error] [pid 6928:tid 6934] [client 51.11.245.223:53526] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeZjwh3y7MHq1iB0qYrsEgAAAUQ"]
[Tue Apr 21 01:34:58.523118 2026] [:error] [pid 11441:tid 11455] [client 51.11.245.223:33679] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeZjwsixByFUvmh319DhJgAAAMw"]
[Tue Apr 21 01:34:58.897523 2026] [:error] [pid 11350:tid 11365] [client 51.11.245.223:43110] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeZjwv4EoMBgOJuJnT0o_QAAAAY"]
[Tue Apr 21 01:34:58.999413 2026] [:error] [pid 6928:tid 6931] [client 51.11.245.223:34889] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZjwh3y7MHq1iB0qYrsFAAAAUE"]
[Tue Apr 21 01:34:59.369491 2026] [:error] [pid 6928:tid 6944] [client 51.11.245.223:47600] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeZjwx3y7MHq1iB0qYrsFwAAAU4"]
[Tue Apr 21 01:34:59.471322 2026] [:error] [pid 11352:tid 11424] [client 51.11.245.223:41910] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZjw2l10mhMSfJ7ir8CiQAAAIo"]
[Tue Apr 21 01:34:59.839778 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:9662] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeZjwwN8Z1-vktaI_tOaqAAAAE4"]
[Tue Apr 21 01:34:59.945304 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:53206] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZjw_4EoMBgOJuJnT0o_gAAABM"]
[Tue Apr 21 01:35:00.312918 2026] [:error] [pid 11494:tid 11498] [client 51.11.245.223:53538] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeZjxMgko5iFiE8YoyQ5kwAAAYI"]
[Tue Apr 21 01:35:00.420129 2026] [:error] [pid 11350:tid 11368] [client 51.11.245.223:3138] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeZjxP4EoMBgOJuJnT0o_wAAAAk"]
[Tue Apr 21 01:35:00.786496 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:9656] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeZjxAN8Z1-vktaI_tOarQAAAFU"]
[Tue Apr 21 01:35:00.896238 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:34934] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZjxAN8Z1-vktaI_tOargAAAEA"]
[Tue Apr 21 01:35:01.257957 2026] [:error] [pid 11494:tid 11507] [client 51.11.245.223:9976] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeZjxcgko5iFiE8YoyQ5lgAAAYs"]
[Tue Apr 21 01:35:01.385119 2026] [:error] [pid 6928:tid 6947] [client 51.11.245.223:37483] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZjxR3y7MHq1iB0qYrsHAAAAVE"]
[Tue Apr 21 01:35:01.729676 2026] [:error] [pid 6928:tid 6942] [client 51.11.245.223:58083] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeZjxR3y7MHq1iB0qYrsHQAAAUw"]
[Tue Apr 21 01:35:01.927356 2026] [:error] [pid 11350:tid 11363] [client 51.11.245.223:34943] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZjxf4EoMBgOJuJnT0pAgAAAAQ"]
[Tue Apr 21 01:35:02.201385 2026] [:error] [pid 11352:tid 11433] [client 51.11.245.223:53513] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeZjxml10mhMSfJ7ir8CkAAAAJM"]
[Tue Apr 21 01:35:02.411561 2026] [:error] [pid 6928:tid 6936] [client 51.11.245.223:53198] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeZjxh3y7MHq1iB0qYrsIgAAAUY"]
[Tue Apr 21 01:35:02.673068 2026] [:error] [pid 6928:tid 6933] [client 51.11.245.223:53514] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeZjxh3y7MHq1iB0qYrsIwAAAUM"]
[Tue Apr 21 01:35:02.896711 2026] [:error] [pid 11350:tid 11382] [client 51.11.245.223:41915] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZjxv4EoMBgOJuJnT0pBgAAABc"]
[Tue Apr 21 01:35:03.143207 2026] [:error] [pid 11441:tid 11444] [client 51.11.245.223:53517] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeZjx8ixByFUvmh319DhKgAAAME"]
[Tue Apr 21 01:35:03.432169 2026] [:error] [pid 11352:tid 11436] [client 51.11.245.223:44719] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZjx2l10mhMSfJ7ir8ClgAAAJY"]
[Tue Apr 21 01:35:03.616998 2026] [:error] [pid 11350:tid 11360] [client 51.11.245.223:9661] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeZjx_4EoMBgOJuJnT0pCQAAAAE"]
[Tue Apr 21 01:35:03.909367 2026] [:error] [pid 11350:tid 11370] [client 51.11.245.223:53210] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZjx_4EoMBgOJuJnT0pCwAAAAs"]
[Tue Apr 21 01:35:04.088064 2026] [:error] [pid 11352:tid 11423] [client 51.11.245.223:53555] [client 51.11.245.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeZjyGl10mhMSfJ7ir8CmAAAAIk"]
[Tue Apr 21 01:35:04.383000 2026] [:error] [pid 11350:tid 11379] [client 51.11.245.223:30133] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeZjyP4EoMBgOJuJnT0pDgAAABQ"]
[Tue Apr 21 01:35:04.559981 2026] [:error] [pid 11441:tid 11453] [client 51.11.245.223:47558] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeZjyMixByFUvmh319DhLAAAAMo"]
[Tue Apr 21 01:35:04.861733 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:34857] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeZjyAN8Z1-vktaI_tOasgAAAEc"]
[Tue Apr 21 01:35:05.031909 2026] [:error] [pid 11494:tid 11499] [client 51.11.245.223:39124] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeZjycgko5iFiE8YoyQ5nAAAAYM"]
[Tue Apr 21 01:35:05.335027 2026] [:error] [pid 11494:tid 11498] [client 51.11.245.223:37457] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeZjycgko5iFiE8YoyQ5nwAAAYI"]
[Tue Apr 21 01:35:05.503003 2026] [:error] [pid 11494:tid 11516] [client 51.11.245.223:53566] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeZjycgko5iFiE8YoyQ5oQAAAZQ"]
[Tue Apr 21 01:35:05.811863 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:30086] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeZjyQN8Z1-vktaI_tOatQAAAEw"]
[Tue Apr 21 01:35:05.971490 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:43133] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZjyf4EoMBgOJuJnT0pEwAAABM"]
[Tue Apr 21 01:35:06.284336 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:34862] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aeZjyv4EoMBgOJuJnT0pFgAAAA0"]
[Tue Apr 21 01:35:06.448919 2026] [:error] [pid 11350:tid 11382] [client 51.11.245.223:58077] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZjyv4EoMBgOJuJnT0pGgAAABc"]
[Tue Apr 21 01:35:06.757897 2026] [:error] [pid 11494:tid 11520] [client 51.11.245.223:30115] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjysgko5iFiE8YoyQ5pgAAAZg"]
[Tue Apr 21 01:35:06.922097 2026] [:error] [pid 11494:tid 11502] [client 51.11.245.223:46964] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZjysgko5iFiE8YoyQ5pwAAAYY"]
[Tue Apr 21 01:35:07.229676 2026] [:error] [pid 11494:tid 11503] [client 51.11.245.223:30139] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjy8gko5iFiE8YoyQ5qQAAAYc"]
[Tue Apr 21 01:35:07.393745 2026] [:error] [pid 11494:tid 11519] [client 51.11.245.223:43092] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZjy8gko5iFiE8YoyQ5qgAAAZc"]
[Tue Apr 21 01:35:07.701391 2026] [:error] [pid 11352:tid 11434] [client 51.11.245.223:53224] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjy2l10mhMSfJ7ir8CmwAAAJQ"]
[Tue Apr 21 01:35:07.864151 2026] [:error] [pid 11350:tid 11366] [client 51.11.245.223:46935] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZjy_4EoMBgOJuJnT0pIAAAAAc"]
[Tue Apr 21 01:35:08.182308 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:44730] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeZjzP4EoMBgOJuJnT0pJAAAABI"]
[Tue Apr 21 01:35:08.334739 2026] [:error] [pid 11350:tid 11363] [client 51.11.245.223:43072] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZjzP4EoMBgOJuJnT0pJwAAAAQ"]
[Tue Apr 21 01:35:08.654109 2026] [:error] [pid 11350:tid 11370] [client 51.11.245.223:34917] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjzP4EoMBgOJuJnT0pLAAAAAs"]
[Tue Apr 21 01:35:08.806023 2026] [:error] [pid 11352:tid 11437] [client 51.11.245.223:9634] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZjzGl10mhMSfJ7ir8CngAAAJc"]
[Tue Apr 21 01:35:09.148896 2026] [:error] [pid 11352:tid 11438] [client 51.11.245.223:3150] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjzWl10mhMSfJ7ir8CoAAAAJg"]
[Tue Apr 21 01:35:09.277492 2026] [:error] [pid 11494:tid 11500] [client 51.11.245.223:53507] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZjzcgko5iFiE8YoyQ5rgAAAYQ"]
[Tue Apr 21 01:35:09.622777 2026] [:error] [pid 11350:tid 11376] [client 51.11.245.223:34907] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjzf4EoMBgOJuJnT0pLgAAABE"]
[Tue Apr 21 01:35:09.748118 2026] [:error] [pid 11350:tid 11373] [client 51.11.245.223:51738] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeZjzf4EoMBgOJuJnT0pLwAAAA4"]
[Tue Apr 21 01:35:10.095975 2026] [:error] [pid 11352:tid 11420] [client 51.11.245.223:37442] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aeZjzml10mhMSfJ7ir8CogAAAIY"]
[Tue Apr 21 01:35:10.222678 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:55481] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeZjzv4EoMBgOJuJnT0pMQAAABU"]
[Tue Apr 21 01:35:10.567665 2026] [:error] [pid 6928:tid 6947] [client 51.11.245.223:3176] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjzh3y7MHq1iB0qYrsMAAAAVE"]
[Tue Apr 21 01:35:10.693157 2026] [:error] [pid 11350:tid 11381] [client 51.11.245.223:9860] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeZjzv4EoMBgOJuJnT0pNAAAABY"]
[Tue Apr 21 01:35:11.050828 2026] [:error] [pid 11350:tid 11371] [client 51.11.245.223:47337] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjz_4EoMBgOJuJnT0pOQAAAAw"]
[Tue Apr 21 01:35:11.170303 2026] [:error] [pid 11352:tid 11422] [client 51.11.245.223:9900] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeZjz2l10mhMSfJ7ir8CpAAAAIg"]
[Tue Apr 21 01:35:11.523469 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:33719] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZjz_4EoMBgOJuJnT0pPQAAAAo"]
[Tue Apr 21 01:35:11.641925 2026] [:error] [pid 11351:tid 11393] [client 51.11.245.223:46932] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeZjzwN8Z1-vktaI_tOauAAAAEY"]
[Tue Apr 21 01:35:12.004738 2026] [:error] [pid 11352:tid 11419] [client 51.11.245.223:46502] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeZj0Gl10mhMSfJ7ir8CpQAAAIU"]
[Tue Apr 21 01:35:12.112808 2026] [:error] [pid 11352:tid 11432] [client 51.11.245.223:55435] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeZj0Gl10mhMSfJ7ir8CpwAAAJI"]
[Tue Apr 21 01:35:12.477603 2026] [:error] [pid 11350:tid 11370] [client 51.11.245.223:34884] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZj0P4EoMBgOJuJnT0pQQAAAAs"]
[Tue Apr 21 01:35:12.586660 2026] [:error] [pid 42014:tid 42036] [client 51.11.245.223:53510] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeZj0Mek-00-ZI0f1Nqu2QAAARQ"]
[Tue Apr 21 01:35:12.952687 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:33664] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZj0P4EoMBgOJuJnT0pQwAAABg"]
[Tue Apr 21 01:35:13.058724 2026] [:error] [pid 11350:tid 11376] [client 51.11.245.223:55462] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeZj0f4EoMBgOJuJnT0pRQAAABE"]
[Tue Apr 21 01:35:13.434793 2026] [:error] [pid 11494:tid 11497] [client 51.11.245.223:37501] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZj0cgko5iFiE8YoyQ5ugAAAYE"]
[Tue Apr 21 01:35:13.529379 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:46961] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeZj0f4EoMBgOJuJnT0pRwAAAAg"]
[Tue Apr 21 01:35:13.915250 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:33702] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aeZj0f4EoMBgOJuJnT0pSgAAAA0"]
[Tue Apr 21 01:35:14.001531 2026] [:error] [pid 11494:tid 11515] [client 51.11.245.223:46917] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeZj0sgko5iFiE8YoyQ5vQAAAZM"]
[Tue Apr 21 01:35:14.405336 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:46509] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aeZj0v4EoMBgOJuJnT0pTQAAAA8"]
[Tue Apr 21 01:35:14.473129 2026] [:error] [pid 11350:tid 11369] [client 51.11.245.223:9902] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeZj0v4EoMBgOJuJnT0pTgAAAAo"]
[Tue Apr 21 01:35:14.904427 2026] [:error] [pid 6928:tid 6950] [client 51.11.245.223:3157] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aeZj0h3y7MHq1iB0qYrsNwAAAVQ"]
[Tue Apr 21 01:35:14.944148 2026] [:error] [pid 42014:tid 42029] [client 51.11.245.223:53539] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeZj0sek-00-ZI0f1Nqu3QAAAQ0"]
[Tue Apr 21 01:35:15.384671 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:30140] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aeZj0_4EoMBgOJuJnT0pVAAAABg"]
[Tue Apr 21 01:35:15.414633 2026] [:error] [pid 11350:tid 11376] [client 51.11.245.223:47569] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeZj0_4EoMBgOJuJnT0pVQAAABE"]
[Tue Apr 21 01:35:15.860764 2026] [:error] [pid 11352:tid 11429] [client 51.11.245.223:37476] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aeZj02l10mhMSfJ7ir8CrQAAAI8"]
[Tue Apr 21 01:35:15.886600 2026] [:error] [pid 11350:tid 11363] [client 51.11.245.223:58066] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeZj0_4EoMBgOJuJnT0pVwAAAAQ"]
[Tue Apr 21 01:35:16.333067 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:30141] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeZj1AN8Z1-vktaI_tOaxgAAAE0"]
[Tue Apr 21 01:35:16.363328 2026] [:error] [pid 11351:tid 11391] [client 51.11.245.223:9617] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeZj1AN8Z1-vktaI_tOaxwAAAEQ"]
[Tue Apr 21 01:35:16.807901 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:63529] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeZj1AN8Z1-vktaI_tOaywAAAFI"]
[Tue Apr 21 01:35:16.834964 2026] [:error] [pid 11494:tid 11516] [client 51.11.245.223:44960] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeZj1Mgko5iFiE8YoyQ5wwAAAZQ"]
[Tue Apr 21 01:35:17.278751 2026] [:error] [pid 11494:tid 11502] [client 51.11.245.223:46514] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeZj1cgko5iFiE8YoyQ5xwAAAYY"]
[Tue Apr 21 01:35:17.308067 2026] [:error] [pid 11494:tid 11509] [client 51.11.245.223:9614] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeZj1cgko5iFiE8YoyQ5yAAAAY0"]
[Tue Apr 21 01:35:17.751902 2026] [:error] [pid 11352:tid 11436] [client 51.11.245.223:33672] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aeZj1Wl10mhMSfJ7ir8CugAAAJY"]
[Tue Apr 21 01:35:17.784762 2026] [:error] [pid 11351:tid 11403] [client 51.11.245.223:9955] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeZj1QN8Z1-vktaI_tOazgAAAFA"]
[Tue Apr 21 01:35:18.226607 2026] [:error] [pid 11352:tid 11418] [client 51.11.245.223:33699] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeZj1ml10mhMSfJ7ir8CxAAAAIQ"]
[Tue Apr 21 01:35:18.256217 2026] [:error] [pid 42014:tid 42024] [client 51.11.245.223:51763] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeZj1sek-00-ZI0f1Nqu4gAAAQg"]
[Tue Apr 21 01:35:18.702840 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:34858] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeZj1v4EoMBgOJuJnT0pWwAAAA0"]
[Tue Apr 21 01:35:18.727886 2026] [:error] [pid 11494:tid 11505] [client 51.11.245.223:39148] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeZj1sgko5iFiE8YoyQ5zAAAAYk"]
[Tue Apr 21 01:35:19.178681 2026] [:error] [pid 42014:tid 42020] [client 51.11.245.223:34871] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeZj18ek-00-ZI0f1Nqu6AAAAQQ"]
[Tue Apr 21 01:35:19.198961 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:38505] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZj18gko5iFiE8YoyQ5zgAAAY4"]
[Tue Apr 21 01:35:19.669698 2026] [:error] [pid 42014:tid 42034] [client 51.11.245.223:51756] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZj18ek-00-ZI0f1Nqu6gAAARI"]
[Tue Apr 21 01:35:19.690590 2026] [:error] [pid 42014:tid 42022] [client 51.11.245.223:3182] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "aeZj18ek-00-ZI0f1Nqu6wAAAQY"]
[Tue Apr 21 01:35:20.150385 2026] [:error] [pid 11352:tid 11419] [client 51.11.245.223:61557] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZj2Gl10mhMSfJ7ir8C0gAAAIU"]
[Tue Apr 21 01:35:20.179846 2026] [:error] [pid 11352:tid 11436] [client 51.11.245.223:30120] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeZj2Gl10mhMSfJ7ir8C0wAAAJY"]
[Tue Apr 21 01:35:20.621871 2026] [:error] [pid 11352:tid 11431] [client 51.11.245.223:51718] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeZj2Gl10mhMSfJ7ir8C1wAAAJE"]
[Tue Apr 21 01:35:20.689035 2026] [:error] [pid 11352:tid 11421] [client 51.11.245.223:33720] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeZj2Gl10mhMSfJ7ir8C2AAAAIc"]
[Tue Apr 21 01:35:21.093249 2026] [:error] [pid 11352:tid 11424] [client 51.11.245.223:9577] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aeZj2Wl10mhMSfJ7ir8C3AAAAIo"]
[Tue Apr 21 01:35:21.170774 2026] [:error] [pid 11352:tid 11437] [client 51.11.245.223:34915] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeZj2Wl10mhMSfJ7ir8C3QAAAJc"]
[Tue Apr 21 01:35:21.564369 2026] [:error] [pid 11351:tid 11409] [client 51.11.245.223:54396] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aeZj2QN8Z1-vktaI_tOa1wAAAFY"]
[Tue Apr 21 01:35:21.722574 2026] [:error] [pid 11352:tid 11423] [client 51.11.245.223:33701] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/update/f35.php"] [unique_id "aeZj2Wl10mhMSfJ7ir8C4AAAAIk"]
[Tue Apr 21 01:35:22.035040 2026] [:error] [pid 11352:tid 11416] [client 51.11.245.223:40574] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aeZj2ml10mhMSfJ7ir8C4QAAAII"]
[Tue Apr 21 01:35:22.262893 2026] [:error] [pid 42014:tid 42016] [client 51.11.245.223:34865] [client 51.11.245.223] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeZj2sek-00-ZI0f1Nqu8AAAAQA"]
[Tue Apr 21 01:35:22.504684 2026] [:error] [pid 6928:tid 6931] [client 51.11.245.223:23504] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aeZj2h3y7MHq1iB0qYrsOQAAAUE"]
[Tue Apr 21 01:35:22.760706 2026] [:error] [pid 42014:tid 42040] [client 51.11.245.223:46527] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeZj2sek-00-ZI0f1Nqu9AAAARg"]
[Tue Apr 21 01:35:22.975447 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:23527] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZj2v4EoMBgOJuJnT0pYQAAABM"]
[Tue Apr 21 01:35:23.326998 2026] [:error] [pid 11494:tid 11498] [client 51.11.245.223:30099] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeZj28gko5iFiE8YoyQ51AAAAYI"]
[Tue Apr 21 01:35:23.446821 2026] [:error] [pid 11494:tid 11516] [client 51.11.245.223:40570] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZj28gko5iFiE8YoyQ51gAAAZQ"]
[Tue Apr 21 01:35:23.825169 2026] [:error] [pid 11494:tid 11507] [client 51.11.245.223:34926] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeZj28gko5iFiE8YoyQ51wAAAYs"]
[Tue Apr 21 01:35:23.916643 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:40513] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZj2wN8Z1-vktaI_tOa2AAAAEc"]
[Tue Apr 21 01:35:24.302949 2026] [:error] [pid 11351:tid 11391] [client 51.11.245.223:34842] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "aeZj3AN8Z1-vktaI_tOa2wAAAEQ"]
[Tue Apr 21 01:35:24.387193 2026] [:error] [pid 11350:tid 11380] [client 51.11.245.223:40568] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeZj3P4EoMBgOJuJnT0pYwAAABU"]
[Tue Apr 21 01:35:24.789661 2026] [:error] [pid 11494:tid 11496] [client 51.11.245.223:44687] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZj3Mgko5iFiE8YoyQ52gAAAYA"]
[Tue Apr 21 01:35:24.857911 2026] [:error] [pid 11494:tid 11520] [client 51.11.245.223:40450] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aeZj3Mgko5iFiE8YoyQ52wAAAZg"]
[Tue Apr 21 01:35:25.269031 2026] [:error] [pid 11494:tid 11502] [client 51.11.245.223:33711] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZj3cgko5iFiE8YoyQ53AAAAYY"]
[Tue Apr 21 01:35:25.328072 2026] [:error] [pid 11441:tid 11464] [client 51.11.245.223:54375] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aeZj3cixByFUvmh319DhNQAAANU"]
[Tue Apr 21 01:35:25.752347 2026] [:error] [pid 11494:tid 11509] [client 51.11.245.223:46500] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZj3cgko5iFiE8YoyQ53QAAAY0"]
[Tue Apr 21 01:35:25.808630 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:51829] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aeZj3f4EoMBgOJuJnT0pZwAAAAg"]
[Tue Apr 21 01:35:26.243563 2026] [:error] [pid 11494:tid 11503] [client 51.11.245.223:50373] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeZj3sgko5iFiE8YoyQ53gAAAYc"]
[Tue Apr 21 01:35:26.279374 2026] [:error] [pid 11350:tid 11379] [client 51.11.245.223:54398] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aeZj3v4EoMBgOJuJnT0pawAAABQ"]
[Tue Apr 21 01:35:26.723619 2026] [:error] [pid 6928:tid 6946] [client 51.11.245.223:36169] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZj3h3y7MHq1iB0qYrsOwAAAVA"]
[Tue Apr 21 01:35:26.748744 2026] [:error] [pid 6928:tid 6951] [client 51.11.245.223:38517] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeZj3h3y7MHq1iB0qYrsPAAAAVU"]
[Tue Apr 21 01:35:27.220398 2026] [:error] [pid 6928:tid 6952] [client 51.11.245.223:51836] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeZj3x3y7MHq1iB0qYrsPgAAAVY"]
[Tue Apr 21 01:35:27.242969 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:34886] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZj3_4EoMBgOJuJnT0pbAAAABA"]
[Tue Apr 21 01:35:27.690957 2026] [:error] [pid 6928:tid 6943] [client 51.11.245.223:51824] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeZj3x3y7MHq1iB0qYrsQQAAAU0"]
[Tue Apr 21 01:35:27.745544 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:36219] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZj38gko5iFiE8YoyQ54QAAAY4"]
[Tue Apr 21 01:35:28.161884 2026] [:error] [pid 11350:tid 11371] [client 51.11.245.223:51834] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeZj4P4EoMBgOJuJnT0pbwAAAAw"]
[Tue Apr 21 01:35:28.234969 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:57737] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeZj4P4EoMBgOJuJnT0pcAAAAA8"]
[Tue Apr 21 01:35:28.636319 2026] [:error] [pid 6928:tid 6936] [client 51.11.245.223:40457] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeZj4B3y7MHq1iB0qYrsRAAAAUY"]
[Tue Apr 21 01:35:28.712985 2026] [:error] [pid 11350:tid 11364] [client 51.11.245.223:57789] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeZj4P4EoMBgOJuJnT0pcgAAAAU"]
[Tue Apr 21 01:35:29.110994 2026] [:error] [pid 11494:tid 11499] [client 51.11.245.223:23538] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeZj4cgko5iFiE8YoyQ55QAAAYM"]
[Tue Apr 21 01:35:29.223513 2026] [:error] [pid 6928:tid 6933] [client 51.11.245.223:37480] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeZj4R3y7MHq1iB0qYrsRwAAAUM"]
[Tue Apr 21 01:35:29.587669 2026] [:error] [pid 6928:tid 6930] [client 51.11.245.223:54386] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeZj4R3y7MHq1iB0qYrsSAAAAUA"]
[Tue Apr 21 01:35:29.790386 2026] [:error] [pid 11350:tid 11378] [client 51.11.245.223:50405] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeZj4f4EoMBgOJuJnT0pdwAAABM"]
[Tue Apr 21 01:35:30.066198 2026] [:error] [pid 11441:tid 11455] [client 51.11.245.223:51796] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeZj4sixByFUvmh319DhNwAAAMw"]
[Tue Apr 21 01:35:30.306634 2026] [:error] [pid 11441:tid 11449] [client 51.11.245.223:33149] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aeZj4sixByFUvmh319DhOAAAAMY"]
[Tue Apr 21 01:35:30.537046 2026] [:error] [pid 11441:tid 11444] [client 51.11.245.223:40514] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeZj4sixByFUvmh319DhOQAAAME"]
[Tue Apr 21 01:35:30.892270 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:33144] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeZj4gN8Z1-vktaI_tOa3wAAAE4"]
[Tue Apr 21 01:35:31.014624 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:40512] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeZj4wN8Z1-vktaI_tOa4QAAAFM"]
[Tue Apr 21 01:35:31.484438 2026] [:error] [pid 11441:tid 11462] [client 51.11.245.223:54338] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeZj48ixByFUvmh319DhOgAAANM"]
[Tue Apr 21 01:35:31.654475 2026] [:error] [pid 11350:tid 11359] [client 51.11.245.223:46520] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeZj4_4EoMBgOJuJnT0peQAAAAA"]
[Tue Apr 21 01:35:31.955281 2026] [:error] [pid 11494:tid 11504] [client 51.11.245.223:40456] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeZj48gko5iFiE8YoyQ55gAAAYg"]
[Tue Apr 21 01:35:32.168116 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:46472] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeZj5P4EoMBgOJuJnT0pewAAAAg"]
[Tue Apr 21 01:35:32.426595 2026] [:error] [pid 6928:tid 6950] [client 51.11.245.223:40500] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeZj5B3y7MHq1iB0qYrsSgAAAVQ"]
[Tue Apr 21 01:35:32.781918 2026] [:error] [pid 11494:tid 11498] [client 51.11.245.223:36205] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev.php"] [unique_id "aeZj5Mgko5iFiE8YoyQ55wAAAYI"]
[Tue Apr 21 01:35:32.898329 2026] [:error] [pid 11494:tid 11506] [client 51.11.245.223:53094] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeZj5Mgko5iFiE8YoyQ56AAAAYo"]
[Tue Apr 21 01:35:33.293274 2026] [:error] [pid 6928:tid 6949] [client 51.11.245.223:38129] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeZj5R3y7MHq1iB0qYrsSwAAAVM"]
[Tue Apr 21 01:35:33.370469 2026] [:error] [pid 11494:tid 11517] [client 51.11.245.223:54342] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeZj5cgko5iFiE8YoyQ56wAAAZU"]
[Tue Apr 21 01:35:33.780881 2026] [:error] [pid 11441:tid 11460] [client 51.11.245.223:33127] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeZj5cixByFUvmh319DhPQAAANE"]
[Tue Apr 21 01:35:33.841512 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:46297] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeZj5QN8Z1-vktaI_tOa6QAAAEc"]
[Tue Apr 21 01:35:34.287984 2026] [:error] [pid 11494:tid 11508] [client 51.11.245.223:31475] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeZj5sgko5iFiE8YoyQ57AAAAYw"]
[Tue Apr 21 01:35:34.317073 2026] [:error] [pid 42014:tid 42027] [client 51.11.245.223:40470] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeZj5sek-00-ZI0f1Nqu_wAAAQs"]
[Tue Apr 21 01:35:34.786203 2026] [:error] [pid 11494:tid 11520] [client 51.11.245.223:54376] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeZj5sgko5iFiE8YoyQ57gAAAZg"]
[Tue Apr 21 01:35:34.854068 2026] [:error] [pid 11350:tid 11360] [client 51.11.245.223:50414] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aeZj5v4EoMBgOJuJnT0pfgAAAAE"]
[Tue Apr 21 01:35:35.257880 2026] [:error] [pid 6928:tid 6951] [client 51.11.245.223:53113] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeZj5x3y7MHq1iB0qYrsTgAAAVU"]
[Tue Apr 21 01:35:35.411541 2026] [:error] [pid 42014:tid 42018] [client 51.11.245.223:46472] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeZj58ek-00-ZI0f1NqvAwAAAQI"]
[Tue Apr 21 01:35:35.728363 2026] [:error] [pid 11351:tid 11391] [client 51.11.245.223:60929] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeZj5wN8Z1-vktaI_tOa7QAAAEQ"]
[Tue Apr 21 01:35:36.004449 2026] [:error] [pid 11351:tid 11396] [client 51.11.245.223:44761] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeZj6AN8Z1-vktaI_tOa8AAAAEk"]
[Tue Apr 21 01:35:36.199266 2026] [:error] [pid 11350:tid 11379] [client 51.11.245.223:53118] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZj6P4EoMBgOJuJnT0pfwAAABQ"]
[Tue Apr 21 01:35:36.515180 2026] [:error] [pid 11350:tid 11374] [client 51.11.245.223:29626] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeZj6P4EoMBgOJuJnT0pggAAAA8"]
[Tue Apr 21 01:35:36.670264 2026] [:error] [pid 11441:tid 11457] [client 51.11.245.223:40530] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZj6MixByFUvmh319DhQgAAAM4"]
[Tue Apr 21 01:35:37.024628 2026] [:error] [pid 42014:tid 42016] [client 51.11.245.223:44749] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aeZj6cek-00-ZI0f1NqvBgAAAQA"]
[Tue Apr 21 01:35:37.141576 2026] [:error] [pid 11350:tid 11372] [client 51.11.245.223:40516] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZj6f4EoMBgOJuJnT0phQAAAA0"]
[Tue Apr 21 01:35:37.528830 2026] [:error] [pid 6928:tid 6939] [client 51.11.245.223:33094] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeZj6R3y7MHq1iB0qYrsTwAAAUk"]
[Tue Apr 21 01:35:37.612851 2026] [:error] [pid 11441:tid 11448] [client 51.11.245.223:40497] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZj6cixByFUvmh319DhRQAAAMU"]
[Tue Apr 21 01:35:38.085244 2026] [:error] [pid 11494:tid 11504] [client 51.11.245.223:23492] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeZj6sgko5iFiE8YoyQ5_QAAAYg"]
[Tue Apr 21 01:35:38.085591 2026] [:error] [pid 11351:tid 11395] [client 51.11.245.223:38437] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeZj6gN8Z1-vktaI_tOa8wAAAEg"]
[Tue Apr 21 01:35:38.557879 2026] [:error] [pid 11494:tid 11516] [client 51.11.245.223:53117] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeZj6sgko5iFiE8YoyQ6AQAAAZQ"]
[Tue Apr 21 01:35:38.634672 2026] [:error] [pid 42014:tid 42027] [client 51.11.245.223:53175] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aeZj6sek-00-ZI0f1NqvCQAAAQs"]
[Tue Apr 21 01:35:39.032284 2026] [:error] [pid 11351:tid 11404] [client 51.11.245.223:53090] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue Apr 21 01:35:39.119201 2026] [:error] [pid 11494:tid 11508] [client 51.11.245.223:53178] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Tue Apr 21 01:35:39.270526 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:53090] File does not exist: /usr/local/apache/htdocs/suspended-page/ew.php
[Tue Apr 21 01:35:39.508727 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:53090] File does not exist: /usr/local/apache/htdocs/suspended-page/file21.php
[Tue Apr 21 01:35:39.607280 2026] [:error] [pid 11494:tid 11496] [client 51.11.245.223:53178] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Tue Apr 21 01:35:39.748647 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:53090] File does not exist: /usr/local/apache/htdocs/suspended-page/hypo.php
[Tue Apr 21 01:35:39.988492 2026] [:error] [pid 11351:tid 11388] [client 51.11.245.223:53090] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Tue Apr 21 01:35:40.127243 2026] [:error] [pid 11494:tid 11518] [client 51.11.245.223:53178] File does not exist: /usr/local/apache/htdocs/suspended-page/axx.php
[Tue Apr 21 01:35:40.227610 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:53090] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Tue Apr 21 01:35:40.363675 2026] [:error] [pid 11494:tid 11510] [client 51.11.245.223:53178] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeZj7Mgko5iFiE8YoyQ6CQAAAY4"]
[Tue Apr 21 01:35:40.463363 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:53090] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZj7AN8Z1-vktaI_tObAwAAAFM"]
[Tue Apr 21 01:35:40.934928 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:24551] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZj7AN8Z1-vktaI_tObBgAAAFc"]
[Tue Apr 21 01:35:41.057758 2026] [:error] [pid 11350:tid 11381] [client 51.11.245.223:53171] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeZj7f4EoMBgOJuJnT0pkAAAABY"]
[Tue Apr 21 01:35:41.405096 2026] [:error] [pid 11351:tid 11408] [client 51.11.245.223:40496] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZj7QN8Z1-vktaI_tObCQAAAFU"]
[Tue Apr 21 01:35:41.581308 2026] [:error] [pid 11351:tid 11387] [client 51.11.245.223:27671] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeZj7QN8Z1-vktaI_tObCwAAAEA"]
[Tue Apr 21 01:35:41.875684 2026] [:error] [pid 11351:tid 11411] [client 51.11.245.223:54345] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZj7QN8Z1-vktaI_tObDwAAAFg"]
[Tue Apr 21 01:35:42.162059 2026] [:error] [pid 11351:tid 11400] [client 51.11.245.223:30199] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aeZj7gN8Z1-vktaI_tObEwAAAE0"]
[Tue Apr 21 01:35:42.347150 2026] [:error] [pid 11351:tid 11396] [client 51.11.245.223:40486] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeZj7gN8Z1-vktaI_tObFgAAAEk"]
[Tue Apr 21 01:35:42.728652 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:30170] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeZj7gN8Z1-vktaI_tObGAAAAEc"]
[Tue Apr 21 01:35:42.818181 2026] [:error] [pid 11351:tid 11406] [client 51.11.245.223:53079] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeZj7gN8Z1-vktaI_tObGgAAAFM"]
[Tue Apr 21 01:35:43.288174 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:54354] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeZj7wN8Z1-vktaI_tObHQAAAFc"]
[Tue Apr 21 01:35:43.318992 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:63534] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeZj7wN8Z1-vktaI_tObHwAAAFI"]
[Tue Apr 21 01:35:43.758837 2026] [:error] [pid 11352:tid 11427] [client 51.11.245.223:65213] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeZj72l10mhMSfJ7ir8C9gAAAI0"]
[Tue Apr 21 01:35:43.841732 2026] [:error] [pid 11351:tid 11402] [client 51.11.245.223:36139] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeZj7wN8Z1-vktaI_tObIwAAAE8"]
[Tue Apr 21 01:35:44.344316 2026] [:error] [pid 11350:tid 11367] [client 51.11.245.223:31929] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeZj8P4EoMBgOJuJnT0pogAAAAg"]
[Tue Apr 21 01:35:44.948358 2026] [:error] [pid 11350:tid 11379] [client 51.11.245.223:19816] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeZj8P4EoMBgOJuJnT0ppgAAABQ"]
[Tue Apr 21 01:35:45.469118 2026] [:error] [pid 11351:tid 11396] [client 51.11.245.223:31929] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeZj8QN8Z1-vktaI_tObKgAAAEk"]
[Tue Apr 21 01:35:46.100716 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:36152] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeZj8gN8Z1-vktaI_tObLwAAAE4"]
[Tue Apr 21 01:35:46.639570 2026] [:error] [pid 11351:tid 11409] [client 51.11.245.223:24437] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aeZj8gN8Z1-vktaI_tObMgAAAFY"]
[Tue Apr 21 01:35:47.221060 2026] [:error] [pid 11441:tid 11455] [client 51.11.245.223:45396] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeZj88ixByFUvmh319DhSQAAAMw"]
[Tue Apr 21 01:35:47.794737 2026] [:error] [pid 11351:tid 11399] [client 51.11.245.223:44269] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeZj8wN8Z1-vktaI_tObNgAAAEw"]
[Tue Apr 21 01:35:48.331811 2026] [:error] [pid 11351:tid 11394] [client 51.11.245.223:44268] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeZj9AN8Z1-vktaI_tObOgAAAEc"]
[Tue Apr 21 01:35:48.893984 2026] [:error] [pid 11351:tid 11410] [client 51.11.245.223:52163] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aeZj9AN8Z1-vktaI_tObQAAAAFc"]
[Tue Apr 21 01:35:49.431019 2026] [:error] [pid 6928:tid 6934] [client 51.11.245.223:28307] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeZj9R3y7MHq1iB0qYrsUQAAAUQ"]
[Tue Apr 21 01:35:50.015645 2026] [:error] [pid 42014:tid 42024] [client 51.11.245.223:45396] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeZj9sek-00-ZI0f1NqvIQAAAQg"]
[Tue Apr 21 01:35:50.612647 2026] [:error] [pid 42014:tid 42021] [client 51.11.245.223:44197] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeZj9sek-00-ZI0f1NqvIgAAAQU"]
[Tue Apr 21 01:35:51.295561 2026] [:error] [pid 11494:tid 11517] [client 51.11.245.223:3339] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aeZj98gko5iFiE8YoyQ6FAAAAZU"]
[Tue Apr 21 01:35:51.870354 2026] [:error] [pid 11351:tid 11390] [client 51.11.245.223:44212] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZj9wN8Z1-vktaI_tObSgAAAEM"]
[Tue Apr 21 01:35:52.455167 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:52213] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZj-P4EoMBgOJuJnT0psQAAABg"]
[Tue Apr 21 01:35:52.935377 2026] [:error] [pid 42014:tid 42018] [client 51.11.245.223:52658] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZj-Mek-00-ZI0f1NqvJQAAAQI"]
[Tue Apr 21 01:35:53.506430 2026] [:error] [pid 11494:tid 11501] [client 51.11.245.223:3337] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aeZj-cgko5iFiE8YoyQ6HQAAAYU"]
[Tue Apr 21 01:35:54.054853 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:3340] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeZj-h3y7MHq1iB0qYrsWAAAAVc"]
[Tue Apr 21 01:35:54.634357 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:45387] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeZj-v4EoMBgOJuJnT0puQAAABI"]
[Tue Apr 21 01:35:55.163919 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:44250] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeZj-_4EoMBgOJuJnT0pvQAAABA"]
[Tue Apr 21 01:35:55.800910 2026] [:error] [pid 42014:tid 42034] [client 51.11.245.223:52645] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aeZj-8ek-00-ZI0f1NqvKAAAARI"]
[Tue Apr 21 01:35:56.315346 2026] [:error] [pid 11441:tid 11454] [client 51.11.245.223:52212] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeZj_MixByFUvmh319DhTwAAAMs"]
[Tue Apr 21 01:35:56.832171 2026] [:error] [pid 6928:tid 6941] [client 51.11.245.223:52661] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeZj_B3y7MHq1iB0qYrsXQAAAUs"]
[Tue Apr 21 01:35:57.385191 2026] [:error] [pid 11441:tid 11459] [client 51.11.245.223:52223] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeZj_cixByFUvmh319DhUgAAANA"]
[Tue Apr 21 01:35:57.971569 2026] [:error] [pid 11441:tid 11465] [client 51.11.245.223:45386] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aeZj_cixByFUvmh319DhVQAAANY"]
[Tue Apr 21 01:35:58.464395 2026] [:error] [pid 11351:tid 11409] [client 51.11.245.223:28294] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeZj_gN8Z1-vktaI_tObXAAAAFY"]
[Tue Apr 21 01:35:59.094262 2026] [:error] [pid 11350:tid 11363] [client 51.11.245.223:40393] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeZj__4EoMBgOJuJnT0pwgAAAAQ"]
[Tue Apr 21 01:35:59.650881 2026] [:error] [pid 11351:tid 11405] [client 51.11.245.223:52174] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeZj_wN8Z1-vktaI_tObXgAAAFI"]
[Tue Apr 21 01:36:00.485503 2026] [:error] [pid 6928:tid 6946] [client 51.11.245.223:52657] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aeZkAB3y7MHq1iB0qYrsYAAAAVA"]
[Tue Apr 21 01:36:01.029897 2026] [:error] [pid 11352:tid 11417] [client 51.11.245.223:35516] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aeZkAWl10mhMSfJ7ir8C_gAAAIM"]
[Tue Apr 21 01:36:01.539826 2026] [:error] [pid 11351:tid 11396] [client 51.11.245.223:44178] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aeZkAQN8Z1-vktaI_tObZQAAAEk"]
[Tue Apr 21 01:36:02.098765 2026] [:error] [pid 11350:tid 11359] [client 51.11.245.223:32542] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aeZkAv4EoMBgOJuJnT0p2gAAAAA"]
[Tue Apr 21 01:36:02.618356 2026] [:error] [pid 11352:tid 11419] [client 51.11.245.223:32557] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aeZkAml10mhMSfJ7ir8DAAAAAIU"]
[Tue Apr 21 01:36:03.158218 2026] [:error] [pid 11350:tid 11370] [client 51.11.245.223:40409] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aeZkA_4EoMBgOJuJnT0p5wAAAAs"]
[Tue Apr 21 01:36:03.639769 2026] [:error] [pid 11350:tid 11383] [client 51.11.245.223:52207] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aeZkA_4EoMBgOJuJnT0p6wAAABg"]
[Tue Apr 21 01:36:04.267028 2026] [:error] [pid 11351:tid 11411] [client 51.11.245.223:29637] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aeZkBAN8Z1-vktaI_tObdwAAAFg"]
[Tue Apr 21 01:36:04.760445 2026] [:error] [pid 11351:tid 11393] [client 51.11.245.223:52183] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aeZkBAN8Z1-vktaI_tObfAAAAEY"]
[Tue Apr 21 01:36:05.285308 2026] [:error] [pid 11350:tid 11375] [client 51.11.245.223:30768] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeZkBf4EoMBgOJuJnT0p-AAAABA"]
[Tue Apr 21 01:36:05.817732 2026] [:error] [pid 11494:tid 11504] [client 51.11.245.223:30770] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeZkBcgko5iFiE8YoyQ6IQAAAYg"]
[Tue Apr 21 01:36:06.351151 2026] [:error] [pid 11441:tid 11463] [client 51.11.245.223:52655] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeZkBsixByFUvmh319DhWgAAANQ"]
[Tue Apr 21 01:36:06.841808 2026] [:error] [pid 11494:tid 11498] [client 51.11.245.223:46022] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aeZkBsgko5iFiE8YoyQ6IgAAAYI"]
[Tue Apr 21 01:36:07.643870 2026] [:error] [pid 11350:tid 11377] [client 51.11.245.223:29681] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZkB_4EoMBgOJuJnT0qCAAAABI"]
[Tue Apr 21 01:36:08.168353 2026] [:error] [pid 11441:tid 11449] [client 51.11.245.223:30777] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZkCMixByFUvmh319DhXQAAAMY"]
[Tue Apr 21 01:36:08.753686 2026] [:error] [pid 11352:tid 11429] [client 51.11.245.223:11428] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZkCGl10mhMSfJ7ir8DDAAAAI8"]
[Tue Apr 21 01:36:09.250056 2026] [:error] [pid 11441:tid 11453] [client 51.11.245.223:28696] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeZkCcixByFUvmh319DhYwAAAMo"]
[Tue Apr 21 01:36:09.821750 2026] [:error] [pid 6928:tid 6953] [client 51.11.245.223:30730] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeZkCR3y7MHq1iB0qYrsaAAAAVc"]
[Tue Apr 21 01:36:10.445323 2026] [:error] [pid 11351:tid 11397] [client 51.11.245.223:11447] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeZkCgN8Z1-vktaI_tObngAAAEo"]
[Tue Apr 21 01:36:10.996478 2026] [:error] [pid 11350:tid 11373] [client 51.11.245.223:28950] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeZkCv4EoMBgOJuJnT0qIwAAAA4"]
[Tue Apr 21 01:36:11.508889 2026] [:error] [pid 11351:tid 11401] [client 51.11.245.223:29653] [client 51.11.245.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aeZkCwN8Z1-vktaI_tOboQAAAE4"]
[Tue Apr 21 04:00:21.903881 2026] [:error] [pid 35322:tid 35365] [client 185.194.178.22:34653] [client 185.194.178.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.194.178.22, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aeaF1aPoAfV40BTfVKxoewAAAIg"]
[Tue Apr 21 04:00:21.913135 2026] [:error] [pid 35322:tid 35365] [client 185.194.178.22:34653] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 04:59:10.293489 2026] [:error] [pid 35321:tid 35399] [client 103.204.33.199:65168] [client 103.204.33.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.204.33.199, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeaTnjeHLhVUuu8cVXxDywAAAE8"]
[Tue Apr 21 04:59:10.298872 2026] [:error] [pid 35321:tid 35399] [client 103.204.33.199:65168] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 11:09:08.608443 2026] [:error] [pid 5377:tid 5407] [client 195.178.110.223:57384] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aebqVLBKychFlrHBdvt09AAAAdU"]
[Tue Apr 21 11:09:09.582504 2026] [:error] [pid 4822:tid 4845] [client 195.178.110.223:57398] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "aebqVSAteFQFwS_23Jn5IgAAAVM"]
[Tue Apr 21 11:09:10.554492 2026] [:error] [pid 4823:tid 4875] [client 195.178.110.223:51418] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aebqVvc8mke3PfHqsxEilwAAAZY"]
[Tue Apr 21 15:09:24.482720 2026] [:error] [pid 4823:tid 4865] [client 54.177.180.49:38682] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aecipPc8mke3PfHqsxGZTQAAAYw"]
[Tue Apr 21 15:09:25.315083 2026] [:error] [pid 5377:tid 5406] [client 54.177.180.49:38698] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aecipbBKychFlrHBdvvLiwAAAdQ"]
[Tue Apr 21 15:09:25.975434 2026] [:error] [pid 4823:tid 4859] [client 54.177.180.49:38700] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "aecipfc8mke3PfHqsxGZUwAAAYY"]
[Tue Apr 21 15:09:26.657280 2026] [:error] [pid 5377:tid 5407] [client 54.177.180.49:44350] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "aeciprBKychFlrHBdvvLjwAAAdU"]
[Tue Apr 21 15:09:27.310361 2026] [:error] [pid 4822:tid 4839] [client 54.177.180.49:44358] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "aecipyAteFQFwS_23JmeOwAAAU0"]
[Tue Apr 21 15:09:27.968740 2026] [:error] [pid 4823:tid 4863] [client 54.177.180.49:44360] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "aecip_c8mke3PfHqsxGZWQAAAYo"]
[Tue Apr 21 15:09:28.627365 2026] [:error] [pid 4823:tid 4862] [client 54.177.180.49:44362] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "aeciqPc8mke3PfHqsxGZXgAAAYk"]
[Tue Apr 21 15:09:29.282994 2026] [:error] [pid 4822:tid 4830] [client 54.177.180.49:44366] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.remote"] [unique_id "aeciqSAteFQFwS_23JmeSwAAAUQ"]
[Tue Apr 21 15:09:29.957178 2026] [:error] [pid 4823:tid 4853] [client 54.177.180.49:44372] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "aeciqfc8mke3PfHqsxGZbAAAAYA"]
[Tue Apr 21 15:09:30.616378 2026] [:error] [pid 4823:tid 4858] [client 54.177.180.49:44380] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "aeciqvc8mke3PfHqsxGZbgAAAYU"]
[Tue Apr 21 15:09:31.277372 2026] [:error] [pid 4823:tid 4873] [client 54.177.180.49:44392] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "aeciq_c8mke3PfHqsxGZcAAAAZQ"]
[Tue Apr 21 15:09:31.936251 2026] [:error] [pid 35320:tid 35346] [client 54.177.180.49:44396] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "aeciq4JW6fdXWO6agMEJCQAAABA"]
[Tue Apr 21 15:09:32.593470 2026] [:error] [pid 35415:tid 35430] [client 54.177.180.49:44402] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.sample"] [unique_id "aecirEiqDinI4_22zzhIoAAAAMM"]
[Tue Apr 21 15:09:33.250735 2026] [:error] [pid 4777:tid 4809] [client 54.177.180.49:44406] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "aeciraxXur6bykKyLZR3NgAAARU"]
[Tue Apr 21 15:09:33.907324 2026] [:error] [pid 5377:tid 5402] [client 54.177.180.49:44412] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "aecirbBKychFlrHBdvvLlAAAAdA"]
[Tue Apr 21 15:09:34.563067 2026] [:error] [pid 35320:tid 35338] [client 54.177.180.49:44422] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "aeciroJW6fdXWO6agMEJDwAAAAg"]
[Tue Apr 21 15:09:35.222993 2026] [:error] [pid 4823:tid 4866] [client 54.177.180.49:44426] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.stage"] [unique_id "aecir_c8mke3PfHqsxGZeAAAAY0"]
[Tue Apr 21 15:09:35.885621 2026] [:error] [pid 4777:tid 4801] [client 54.177.180.49:44440] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.ci"] [unique_id "aecir6xXur6bykKyLZR3OAAAAQ0"]
[Tue Apr 21 15:09:36.547097 2026] [:error] [pid 4823:tid 4857] [client 54.177.180.49:49970] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.docker"] [unique_id "aecisPc8mke3PfHqsxGZfgAAAYQ"]
[Tue Apr 21 15:09:37.212340 2026] [:error] [pid 35320:tid 35353] [client 54.177.180.49:49980] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.live"] [unique_id "aecisYJW6fdXWO6agMEJFQAAABc"]
[Tue Apr 21 15:09:37.902935 2026] [:error] [pid 4777:tid 4807] [client 54.177.180.49:49990] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.preprod"] [unique_id "aecisaxXur6bykKyLZR3PAAAARM"]
[Tue Apr 21 15:09:38.560227 2026] [:error] [pid 5377:tid 5405] [client 54.177.180.49:50006] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.uat"] [unique_id "aecisrBKychFlrHBdvvLmQAAAdM"]
[Tue Apr 21 15:09:39.218592 2026] [:error] [pid 5377:tid 5388] [client 54.177.180.49:50016] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "aecis7BKychFlrHBdvvLnQAAAcI"]
[Tue Apr 21 15:09:39.876069 2026] [:error] [pid 4823:tid 4864] [client 54.177.180.49:50028] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.swp"] [unique_id "aecis_c8mke3PfHqsxGZhAAAAYs"]
[Tue Apr 21 15:09:40.551783 2026] [:error] [pid 4823:tid 4859] [client 54.177.180.49:50030] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "aecitPc8mke3PfHqsxGZigAAAYY"]
[Tue Apr 21 15:09:41.213260 2026] [:error] [pid 35322:tid 35368] [client 54.177.180.49:50040] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "aecitaPoAfV40BTfVKy0NgAAAIs"]
[Tue Apr 21 15:09:41.877515 2026] [:error] [pid 4823:tid 4867] [client 54.177.180.49:50050] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/apps/.env"] [unique_id "aecitfc8mke3PfHqsxGZlQAAAY4"]
[Tue Apr 21 15:09:42.535700 2026] [:error] [pid 4823:tid 4874] [client 54.177.180.49:50058] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "aecitvc8mke3PfHqsxGZmAAAAZU"]
[Tue Apr 21 15:09:43.200285 2026] [:error] [pid 4823:tid 4870] [client 54.177.180.49:50060] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/web/.env"] [unique_id "aecit_c8mke3PfHqsxGZnQAAAZE"]
[Tue Apr 21 15:09:43.856397 2026] [:error] [pid 5377:tid 5397] [client 54.177.180.49:50076] [client 54.177.180.49] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/site/.env"] [unique_id "aecit7BKychFlrHBdvvLpAAAAcs"]
[Tue Apr 21 15:35:43.438017 2026] [:error] [pid 35415:tid 35441] [client 45.86.200.213:59379] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue Apr 21 15:35:43.772504 2026] [:error] [pid 35415:tid 35433] [client 45.86.200.213:59379] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Tue Apr 21 15:35:44.073272 2026] [:error] [pid 35415:tid 35431] [client 45.86.200.213:59379] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue Apr 21 15:35:44.349773 2026] [:error] [pid 35415:tid 35436] [client 45.86.200.213:59379] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Tue Apr 21 15:35:44.647316 2026] [:error] [pid 35415:tid 35427] [client 45.86.200.213:59379] File does not exist: /usr/local/apache/htdocs/suspended-page/log.php
[Tue Apr 21 15:35:44.916548 2026] [:error] [pid 35415:tid 35440] [client 45.86.200.213:59379] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Tue Apr 21 15:35:45.192649 2026] [:error] [pid 35415:tid 35428] [client 45.86.200.213:59379] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue Apr 21 15:35:45.473413 2026] [:error] [pid 35415:tid 35450] [client 45.86.200.213:59379] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Tue Apr 21 15:35:45.774150 2026] [:error] [pid 35415:tid 35439] [client 45.86.200.213:59379] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Tue Apr 21 15:35:46.090043 2026] [:error] [pid 35415:tid 35432] [client 45.86.200.213:59379] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "aeco0kiqDinI4_22zzhUdwAAAMU"]
[Tue Apr 21 15:35:46.689527 2026] [:error] [pid 53832:tid 53852] [client 185.82.72.9:55921] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue Apr 21 15:35:46.974416 2026] [:error] [pid 53832:tid 53846] [client 185.82.72.9:55921] [client 185.82.72.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aeco0tzkuxsE_OhM9UIRKgAAAks"]
[Tue Apr 21 15:35:47.516289 2026] [:error] [pid 35320:tid 35344] [client 45.86.200.246:27563] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Tue Apr 21 15:35:47.815752 2026] [:error] [pid 35320:tid 35341] [client 45.86.200.246:27563] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Tue Apr 21 15:35:48.088247 2026] [:error] [pid 35320:tid 35338] [client 45.86.200.246:27563] File does not exist: /usr/local/apache/htdocs/suspended-page/bak.php
[Tue Apr 21 15:35:48.376605 2026] [:error] [pid 35320:tid 35348] [client 45.86.200.246:27563] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue Apr 21 15:35:48.663230 2026] [:error] [pid 35320:tid 35336] [client 45.86.200.246:27563] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Tue Apr 21 15:35:48.956490 2026] [:error] [pid 35320:tid 35342] [client 45.86.200.246:27563] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "aeco1IJW6fdXWO6agMEZcAAAAAw"]
[Tue Apr 21 15:35:50.565801 2026] [:error] [pid 35321:tid 35388] [client 45.86.200.214:31611] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Tue Apr 21 15:35:50.872060 2026] [:error] [pid 35321:tid 35388] [client 45.86.200.214:31611] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Tue Apr 21 15:35:51.154629 2026] [:error] [pid 35321:tid 35397] [client 45.86.200.214:31611] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue Apr 21 15:35:51.446386 2026] [:error] [pid 35321:tid 35405] [client 45.86.200.214:31611] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue Apr 21 15:35:51.733865 2026] [:error] [pid 35321:tid 35403] [client 45.86.200.214:31611] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Tue Apr 21 15:35:52.032968 2026] [:error] [pid 35321:tid 35406] [client 45.86.200.214:31611] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 21 15:35:52.316400 2026] [:error] [pid 35321:tid 35401] [client 45.86.200.214:31611] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Tue Apr 21 15:35:52.598186 2026] [:error] [pid 35321:tid 35384] [client 45.86.200.214:31611] [client 45.86.200.214] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeco2DeHLhVUuu8cVXyi-wAAAEA"]
[Tue Apr 21 15:35:53.134279 2026] [:error] [pid 53978:tid 53994] [client 45.86.200.249:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue Apr 21 15:35:53.411093 2026] [:error] [pid 53978:tid 54000] [client 45.86.200.249:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue Apr 21 15:35:53.717492 2026] [:error] [pid 53978:tid 53980] [client 45.86.200.249:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Tue Apr 21 15:35:54.004615 2026] [:error] [pid 53978:tid 53985] [client 45.86.200.249:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/readme.php
[Tue Apr 21 15:35:54.288841 2026] [:error] [pid 53978:tid 54004] [client 45.86.200.249:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-file.php
[Tue Apr 21 15:35:54.565877 2026] [:error] [pid 53978:tid 53981] [client 45.86.200.249:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/marijuana.php
[Tue Apr 21 15:35:54.847822 2026] [:error] [pid 53978:tid 53992] [client 45.86.200.249:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue Apr 21 15:36:13.530310 2026] [:error] [pid 53978:tid 53992] [client 45.86.200.249:24743] File does not exist: /usr/local/apache/htdocs/suspended-page/bk.php
[Tue Apr 21 15:36:28.954621 2026] [:error] [pid 35321:tid 35388] [client 45.86.200.223:41187] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Tue Apr 21 16:10:05.755095 2026] [:error] [pid 4823:tid 4876] [client 165.227.154.224:52251] [client 165.227.154.224] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.227.154.224, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aecw3fc8mke3PfHqsxHSpQAAAZc"]
[Tue Apr 21 16:10:05.758926 2026] [:error] [pid 4823:tid 4876] [client 165.227.154.224:52251] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 19:05:40.907536 2026] [:error] [pid 35321:tid 35384] [client 146.190.170.225:62849] [client 146.190.170.225] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 146.190.170.225, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aedaBDeHLhVUuu8cVXxDAQAAAEA"]
[Tue Apr 21 19:05:40.911084 2026] [:error] [pid 35321:tid 35384] [client 146.190.170.225:62849] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Tue Apr 21 22:15:18.054540 2026] [:error] [pid 35321:tid 35407] [client 154.146.232.112:19121] [client 154.146.232.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.146.232.112, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeeGdjeHLhVUuu8cVXzeegAAAFc"]
[Tue Apr 21 22:15:18.060038 2026] [:error] [pid 35321:tid 35407] [client 154.146.232.112:19121] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 21 22:15:18.573657 2026] [:error] [pid 35322:tid 35370] [client 154.146.232.112:19122] [client 154.146.232.112] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 154.146.232.112, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeeGdqPoAfV40BTfVKzhBwAAAI0"]
[Tue Apr 21 22:15:18.579109 2026] [:error] [pid 35322:tid 35370] [client 154.146.232.112:19122] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 22 10:02:08.936470 2026] [:error] [pid 31949:tid 31972] [client 20.100.201.184:21670] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Wed Apr 22 10:02:09.200861 2026] [:error] [pid 31949:tid 31956] [client 20.100.201.184:21670] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Wed Apr 22 10:02:09.487700 2026] [:error] [pid 31949:tid 31954] [client 20.100.201.184:21670] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Wed Apr 22 10:02:09.768014 2026] [:error] [pid 31949:tid 31971] [client 20.100.201.184:21670] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Wed Apr 22 10:02:10.080904 2026] [:error] [pid 31949:tid 31971] [client 20.100.201.184:21670] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Wed Apr 22 10:02:10.606926 2026] [:error] [pid 31949:tid 31959] [client 20.100.201.184:21670] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Wed Apr 22 10:02:11.144939 2026] [:error] [pid 31949:tid 31967] [client 20.100.201.184:21670] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Wed Apr 22 10:02:11.413650 2026] [:error] [pid 31949:tid 31957] [client 20.100.201.184:21670] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Wed Apr 22 10:02:11.678465 2026] [:error] [pid 31949:tid 31974] [client 20.100.201.184:21670] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Apr 22 10:02:11.942397 2026] [:error] [pid 31949:tid 31968] [client 20.100.201.184:21670] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aegsI32WtGZh5JfbMUdZ0QAAAxA"]
[Wed Apr 22 10:02:13.408071 2026] [:error] [pid 23041:tid 23056] [client 20.100.201.184:5825] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aegsJUTXx_lUa7xwAb48DwAAAQw"]
[Wed Apr 22 10:02:15.186213 2026] [:error] [pid 21682:tid 21736] [client 20.100.201.184:21658] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aegsJ5lXWQZUlmPHS3pB1wAAAE0"]
[Wed Apr 22 10:02:16.773496 2026] [:error] [pid 21682:tid 21727] [client 20.100.201.184:27325] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aegsKJlXWQZUlmPHS3pB2AAAAEQ"]
[Wed Apr 22 10:02:18.636372 2026] [:error] [pid 31755:tid 31782] [client 20.100.201.184:17313] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aegsKgz2mYMkg3X8q1vKngAAAhM"]
[Wed Apr 22 10:02:20.807882 2026] [:error] [pid 31755:tid 31765] [client 20.100.201.184:17308] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aegsLAz2mYMkg3X8q1vKowAAAgI"]
[Wed Apr 22 10:02:21.768721 2026] [:error] [pid 31755:tid 31769] [client 20.100.201.184:5824] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aegsLQz2mYMkg3X8q1vKpwAAAgY"]
[Wed Apr 22 10:02:23.893483 2026] [:error] [pid 31756:tid 31797] [client 20.100.201.184:17333] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aegsL9_WbkXbHaEfhd0FFwAAAkU"]
[Wed Apr 22 10:02:26.004778 2026] [:error] [pid 21682:tid 21745] [client 20.100.201.184:5867] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aegsMplXWQZUlmPHS3pB6AAAAFY"]
[Wed Apr 22 10:02:29.117270 2026] [:error] [pid 31949:tid 31962] [client 20.100.201.184:6061] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aegsNX2WtGZh5JfbMUdZ1AAAAwo"]
[Wed Apr 22 10:02:31.138041 2026] [:error] [pid 23041:tid 23055] [client 20.100.201.184:6060] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aegsN0TXx_lUa7xwAb48JwAAAQs"]
[Wed Apr 22 10:02:33.547309 2026] [:error] [pid 23041:tid 23055] [client 20.100.201.184:21187] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aegsOUTXx_lUa7xwAb48MwAAAQs"]
[Wed Apr 22 10:02:34.846465 2026] [:error] [pid 31755:tid 31768] [client 20.100.201.184:20928] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aegsOgz2mYMkg3X8q1vKtgAAAgU"]
[Wed Apr 22 10:02:37.587348 2026] [:error] [pid 31755:tid 31765] [client 20.100.201.184:46885] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aegsPQz2mYMkg3X8q1vKyAAAAgI"]
[Wed Apr 22 10:02:38.607380 2026] [:error] [pid 31755:tid 31776] [client 20.100.201.184:17299] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aegsPgz2mYMkg3X8q1vKzwAAAg0"]
[Wed Apr 22 10:02:39.475328 2026] [:error] [pid 23041:tid 23062] [client 20.100.201.184:23873] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aegsP0TXx_lUa7xwAb48RgAAARI"]
[Wed Apr 22 10:02:42.420609 2026] [:error] [pid 23041:tid 23046] [client 20.100.201.184:43249] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aegsQkTXx_lUa7xwAb48SgAAAQI"]
[Wed Apr 22 10:02:43.730744 2026] [:error] [pid 31755:tid 31774] [client 20.100.201.184:33289] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aegsQwz2mYMkg3X8q1vK5wAAAgs"]
[Wed Apr 22 10:02:45.581713 2026] [:error] [pid 21682:tid 21747] [client 20.100.201.184:33308] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aegsRZlXWQZUlmPHS3pCAQAAAFg"]
[Wed Apr 22 10:02:46.480028 2026] [:error] [pid 32053:tid 32062] [client 20.100.201.184:21976] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aegsRgzPjXx_ocfbYhtJYQAAA0c"]
[Wed Apr 22 10:02:47.576556 2026] [:error] [pid 31755:tid 31770] [client 20.100.201.184:22006] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aegsRwz2mYMkg3X8q1vK7AAAAgc"]
[Wed Apr 22 10:02:49.428562 2026] [:error] [pid 23041:tid 23067] [client 20.100.201.184:40402] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aegsSUTXx_lUa7xwAb48XgAAARc"]
[Wed Apr 22 10:02:53.299076 2026] [:error] [pid 31755:tid 31780] [client 20.100.201.184:23933] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aegsTQz2mYMkg3X8q1vK7wAAAhE"]
[Wed Apr 22 10:02:54.659131 2026] [:error] [pid 21682:tid 21725] [client 20.100.201.184:21132] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aegsTplXWQZUlmPHS3pCBQAAAEI"]
[Wed Apr 22 10:02:55.833516 2026] [:error] [pid 31755:tid 31766] [client 20.100.201.184:43250] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aegsTwz2mYMkg3X8q1vK9QAAAgM"]
[Wed Apr 22 10:02:58.499330 2026] [:error] [pid 31756:tid 31798] [client 20.100.201.184:21967] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aegsUt_WbkXbHaEfhd0FNgAAAkY"]
[Wed Apr 22 10:03:00.253665 2026] [:error] [pid 32095:tid 32112] [client 20.100.201.184:33994] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aegsVNfu5Cv628YPe5-LbgAAA44"]
[Wed Apr 22 10:03:02.807758 2026] [:error] [pid 31755:tid 31776] [client 20.100.201.184:24113] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aegsVgz2mYMkg3X8q1vLEwAAAg0"]
[Wed Apr 22 10:03:06.641214 2026] [:error] [pid 32095:tid 32099] [client 20.100.201.184:5247] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aegsWtfu5Cv628YPe5-LdAAAA4I"]
[Wed Apr 22 10:03:08.988345 2026] [:error] [pid 31756:tid 31814] [client 20.100.201.184:33370] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aegsXN_WbkXbHaEfhd0FSAAAAlY"]
[Wed Apr 22 10:03:13.323842 2026] [:error] [pid 31755:tid 31780] [client 20.100.201.184:21180] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Wed Apr 22 10:03:13.607026 2026] [:error] [pid 31755:tid 31765] [client 20.100.201.184:21180] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Wed Apr 22 10:03:13.894169 2026] [:error] [pid 31755:tid 31778] [client 20.100.201.184:21180] File does not exist: /usr/local/apache/htdocs/suspended-page/bmi.php
[Wed Apr 22 10:03:14.159929 2026] [:error] [pid 31755:tid 31769] [client 20.100.201.184:21180] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Wed Apr 22 10:03:14.719634 2026] [:error] [pid 31755:tid 31763] [client 20.100.201.184:21180] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Wed Apr 22 10:03:14.985661 2026] [:error] [pid 31755:tid 31767] [client 20.100.201.184:21180] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Wed Apr 22 10:03:15.250908 2026] [:error] [pid 31755:tid 31775] [client 20.100.201.184:21180] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Wed Apr 22 10:03:15.804444 2026] [:error] [pid 31755:tid 31768] [client 20.100.201.184:21180] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Wed Apr 22 10:03:16.069507 2026] [:error] [pid 31755:tid 31787] [client 20.100.201.184:21180] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Wed Apr 22 10:03:16.332426 2026] [:error] [pid 31755:tid 31771] [client 20.100.201.184:21180] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aegsZAz2mYMkg3X8q1vLPQAAAgg"]
[Wed Apr 22 10:03:18.581651 2026] [:error] [pid 21683:tid 21759] [client 20.100.201.184:6060] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aegsZlZBWT-0diZyYya7MwAAAIk"]
[Wed Apr 22 10:03:19.741338 2026] [:error] [pid 23041:tid 23053] [client 20.100.201.184:5684] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aegsZ0TXx_lUa7xwAb48wAAAAQk"]
[Wed Apr 22 10:03:21.594388 2026] [:error] [pid 23041:tid 23044] [client 20.100.201.184:5692] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aegsaUTXx_lUa7xwAb48wwAAAQA"]
[Wed Apr 22 10:03:25.452212 2026] [:error] [pid 31755:tid 31780] [client 20.100.201.184:41590] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aegsbQz2mYMkg3X8q1vLSwAAAhE"]
[Wed Apr 22 10:03:27.647680 2026] [:error] [pid 21682:tid 21729] [client 20.100.201.184:17389] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aegsb5lXWQZUlmPHS3pCNwAAAEY"]
[Wed Apr 22 10:03:29.000616 2026] [:error] [pid 31949:tid 31972] [client 20.100.201.184:16677] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aegscH2WtGZh5JfbMUdZ_gAAAxQ"]
[Wed Apr 22 10:03:34.154329 2026] [:error] [pid 21683:tid 21755] [client 20.100.201.184:5681] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aegsdlZBWT-0diZyYya7OQAAAIU"]
[Wed Apr 22 10:03:36.286485 2026] [:error] [pid 23041:tid 23056] [client 20.100.201.184:43866] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegseETXx_lUa7xwAb482wAAAQw"]
[Wed Apr 22 10:03:41.025855 2026] [:error] [pid 21682:tid 21739] [client 20.100.201.184:16654] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegsfZlXWQZUlmPHS3pCUwAAAFA"]
[Wed Apr 22 10:03:43.979761 2026] [:error] [pid 32095:tid 32120] [client 20.100.201.184:23166] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegsf9fu5Cv628YPe5-LgQAAA5Y"]
[Wed Apr 22 10:03:45.118715 2026] [:error] [pid 23041:tid 23046] [client 20.100.201.184:28003] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aegsgUTXx_lUa7xwAb487AAAAQI"]
[Wed Apr 22 10:03:46.381293 2026] [:error] [pid 31755:tid 31781] [client 20.100.201.184:18474] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aegsggz2mYMkg3X8q1vLVgAAAhI"]
[Wed Apr 22 10:03:51.280977 2026] [:error] [pid 23041:tid 23058] [client 20.100.201.184:18452] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aegsh0TXx_lUa7xwAb488QAAAQ4"]
[Wed Apr 22 10:03:53.315606 2026] [:error] [pid 23041:tid 23063] [client 20.100.201.184:40852] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aegsiUTXx_lUa7xwAb489QAAARM"]
[Wed Apr 22 10:03:54.580922 2026] [:error] [pid 31844:tid 31854] [client 20.100.201.184:5291] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aegsimtAU9CprTB4b3I__gAAAog"]
[Wed Apr 22 10:03:57.123033 2026] [:error] [pid 21683:tid 21759] [client 20.100.201.184:6010] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aegsjVZBWT-0diZyYya7SAAAAIk"]
[Wed Apr 22 10:04:01.325081 2026] [:error] [pid 23041:tid 23054] [client 20.100.201.184:19725] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aegskUTXx_lUa7xwAb48-wAAAQo"]
[Wed Apr 22 10:04:03.295672 2026] [:error] [pid 31755:tid 31763] [client 20.100.201.184:16896] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aegskwz2mYMkg3X8q1vLYAAAAgA"]
[Wed Apr 22 10:04:05.222194 2026] [:error] [pid 23041:tid 23049] [client 20.100.201.184:18538] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aegslUTXx_lUa7xwAb49BQAAAQU"]
[Wed Apr 22 10:04:06.283384 2026] [:error] [pid 23041:tid 23054] [client 20.100.201.184:32726] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aegslkTXx_lUa7xwAb49CgAAAQo"]
[Wed Apr 22 10:04:07.309855 2026] [:error] [pid 21682:tid 21727] [client 20.100.201.184:25116] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aegsl5lXWQZUlmPHS3pCjwAAAEQ"]
[Wed Apr 22 10:04:10.283946 2026] [:error] [pid 23041:tid 23052] [client 20.100.201.184:38628] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aegsmkTXx_lUa7xwAb49FQAAAQg"]
[Wed Apr 22 10:04:12.116435 2026] [:error] [pid 21682:tid 21746] [client 20.100.201.184:45709] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aegsnJlXWQZUlmPHS3pCnwAAAFc"]
[Wed Apr 22 10:04:13.933811 2026] [:error] [pid 31756:tid 31812] [client 20.100.201.184:22310] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aegsnd_WbkXbHaEfhd0FagAAAlQ"]
[Wed Apr 22 10:04:16.795883 2026] [:error] [pid 32053:tid 32076] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Wed Apr 22 10:04:17.063270 2026] [:error] [pid 32053:tid 32062] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Wed Apr 22 10:04:17.329060 2026] [:error] [pid 32053:tid 32055] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Wed Apr 22 10:04:17.609272 2026] [:error] [pid 32053:tid 32070] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Wed Apr 22 10:04:17.875115 2026] [:error] [pid 32053:tid 32057] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Wed Apr 22 10:04:18.430637 2026] [:error] [pid 32053:tid 32060] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Wed Apr 22 10:04:18.704342 2026] [:error] [pid 32053:tid 32056] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Apr 22 10:04:18.972151 2026] [:error] [pid 32053:tid 32068] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Wed Apr 22 10:04:19.249109 2026] [:error] [pid 32053:tid 32066] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Wed Apr 22 10:04:19.734783 2026] [:error] [pid 32053:tid 32072] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Wed Apr 22 10:04:20.001501 2026] [:error] [pid 32053:tid 32069] [client 20.100.201.184:25139] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Wed Apr 22 10:04:20.320652 2026] [:error] [pid 32053:tid 32079] [client 20.100.201.184:25139] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Jcrop.php"] [unique_id "aegspAzPjXx_ocfbYhtJjwAAA1g"]
[Wed Apr 22 10:04:21.835622 2026] [:error] [pid 31755:tid 31776] [client 20.100.201.184:37494] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Jcrop.php"] [unique_id "aegspQz2mYMkg3X8q1vLZwAAAg0"]
[Wed Apr 22 10:04:22.784106 2026] [:error] [pid 31706:tid 31712] [client 20.100.201.184:37455] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Jcrop.php"] [unique_id "aegsprGSe9Rnd4Q_z1ir3gAAAcM"]
[Wed Apr 22 10:04:24.017928 2026] [:error] [pid 23041:tid 23065] [client 20.100.201.184:19720] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Jcrop.php"] [unique_id "aegsqETXx_lUa7xwAb49IAAAARU"]
[Wed Apr 22 10:04:25.799159 2026] [:error] [pid 23041:tid 23048] [client 20.100.201.184:30016] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aegsqUTXx_lUa7xwAb49JQAAAQQ"]
[Wed Apr 22 10:04:26.719389 2026] [:error] [pid 31706:tid 31723] [client 20.100.201.184:45160] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aegsqrGSe9Rnd4Q_z1ir4AAAAc4"]
[Wed Apr 22 10:04:27.439558 2026] [:error] [pid 31755:tid 31778] [client 20.100.201.184:45174] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aegsqwz2mYMkg3X8q1vLbgAAAg8"]
[Wed Apr 22 10:04:28.997884 2026] [:error] [pid 31755:tid 31766] [client 20.100.201.184:33927] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aegsrAz2mYMkg3X8q1vLcQAAAgM"]
[Wed Apr 22 10:04:30.172051 2026] [:error] [pid 31949:tid 31971] [client 20.100.201.184:20548] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aegsrn2WtGZh5JfbMUdaHwAAAxM"]
[Wed Apr 22 10:04:31.551867 2026] [:error] [pid 32095:tid 32116] [client 20.100.201.184:45111] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aegsr9fu5Cv628YPe5-LmAAAA5I"]
[Wed Apr 22 10:04:32.535771 2026] [:error] [pid 23041:tid 23063] [client 20.100.201.184:20551] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aegssETXx_lUa7xwAb49LAAAARM"]
[Wed Apr 22 10:04:34.198196 2026] [:error] [pid 23041:tid 23045] [client 20.100.201.184:42072] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aegsskTXx_lUa7xwAb49MAAAAQE"]
[Wed Apr 22 10:04:35.321379 2026] [:error] [pid 31756:tid 31805] [client 20.100.201.184:18022] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aegss9_WbkXbHaEfhd0FigAAAk0"]
[Wed Apr 22 10:04:36.166954 2026] [:error] [pid 21683:tid 21764] [client 20.100.201.184:42091] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aegstFZBWT-0diZyYya7XwAAAI4"]
[Wed Apr 22 10:04:37.846072 2026] [:error] [pid 23041:tid 23054] [client 20.100.201.184:33972] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aegstUTXx_lUa7xwAb49MwAAAQo"]
[Wed Apr 22 10:04:40.531766 2026] [:error] [pid 31755:tid 31764] [client 20.100.201.184:22657] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aegsuAz2mYMkg3X8q1vLhwAAAgE"]
[Wed Apr 22 10:04:44.689503 2026] [:error] [pid 21682:tid 21736] [client 20.100.201.184:42573] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aegsvJlXWQZUlmPHS3pC5wAAAE0"]
[Wed Apr 22 10:04:50.868724 2026] [:error] [pid 31949:tid 31965] [client 20.100.201.184:21483] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aegswn2WtGZh5JfbMUdaJgAAAw0"]
[Wed Apr 22 10:04:52.288037 2026] [:error] [pid 31755:tid 31776] [client 20.100.201.184:17093] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aegsxAz2mYMkg3X8q1vLtAAAAg0"]
[Wed Apr 22 10:04:53.783782 2026] [:error] [pid 21682:tid 21738] [client 20.100.201.184:15873] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aegsxZlXWQZUlmPHS3pC8gAAAE8"]
[Wed Apr 22 10:04:54.765819 2026] [:error] [pid 31755:tid 31781] [client 20.100.201.184:19815] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aegsxgz2mYMkg3X8q1vLvQAAAhI"]
[Wed Apr 22 10:04:56.613283 2026] [:error] [pid 32095:tid 32111] [client 20.100.201.184:20158] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aegsyNfu5Cv628YPe5-LngAAA40"]
[Wed Apr 22 10:04:59.069968 2026] [:error] [pid 31755:tid 31772] [client 20.100.201.184:33289] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aegsywz2mYMkg3X8q1vLwwAAAgk"]
[Wed Apr 22 10:05:00.357556 2026] [:error] [pid 31755:tid 31773] [client 20.100.201.184:46915] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aegszAz2mYMkg3X8q1vLyQAAAgo"]
[Wed Apr 22 10:05:02.394044 2026] [:error] [pid 31755:tid 31784] [client 20.100.201.184:45709] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aegszgz2mYMkg3X8q1vL0wAAAhU"]
[Wed Apr 22 10:05:08.561569 2026] [:error] [pid 31755:tid 31786] [client 20.100.201.184:25172] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aegs1Az2mYMkg3X8q1vL5QAAAhc"]
[Wed Apr 22 10:05:10.521315 2026] [:error] [pid 32095:tid 32112] [client 20.100.201.184:21918] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aegs1tfu5Cv628YPe5-LowAAA44"]
[Wed Apr 22 10:05:11.547606 2026] [:error] [pid 31706:tid 31725] [client 20.100.201.184:19784] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aegs17GSe9Rnd4Q_z1ir5wAAAdA"]
[Wed Apr 22 10:05:12.372553 2026] [:error] [pid 32095:tid 32120] [client 20.100.201.184:19781] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aegs2Nfu5Cv628YPe5-LpAAAA5Y"]
[Wed Apr 22 10:05:13.250967 2026] [:error] [pid 21682:tid 21729] [client 20.100.201.184:38575] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aegs2ZlXWQZUlmPHS3pDBwAAAEY"]
[Wed Apr 22 10:05:14.489653 2026] [:error] [pid 21682:tid 21726] [client 20.100.201.184:5444] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aegs2plXWQZUlmPHS3pDEAAAAEM"]
[Wed Apr 22 10:05:15.456728 2026] [:error] [pid 21682:tid 21724] [client 20.100.201.184:19800] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aegs25lXWQZUlmPHS3pDFgAAAEE"]
[Wed Apr 22 10:05:17.694480 2026] [:error] [pid 31756:tid 31799] [client 20.100.201.184:46921] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aegs3d_WbkXbHaEfhd0FuQAAAkc"]
[Wed Apr 22 10:05:18.930059 2026] [:error] [pid 31756:tid 31810] [client 20.100.201.184:21919] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aegs3t_WbkXbHaEfhd0FwwAAAlI"]
[Wed Apr 22 10:05:20.855812 2026] [:error] [pid 32053:tid 32056] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Apr 22 10:05:21.122283 2026] [:error] [pid 32053:tid 32066] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Wed Apr 22 10:05:21.402074 2026] [:error] [pid 32053:tid 32072] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Wed Apr 22 10:05:21.685406 2026] [:error] [pid 32053:tid 32069] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Wed Apr 22 10:05:21.957630 2026] [:error] [pid 32053:tid 32079] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class-atom.php
[Wed Apr 22 10:05:22.224588 2026] [:error] [pid 32053:tid 32065] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed Apr 22 10:05:22.507471 2026] [:error] [pid 32053:tid 32061] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Wed Apr 22 10:05:22.773206 2026] [:error] [pid 32053:tid 32067] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Wed Apr 22 10:05:23.039499 2026] [:error] [pid 32053:tid 32074] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Apr 22 10:05:23.306463 2026] [:error] [pid 32053:tid 32075] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/jk.php
[Wed Apr 22 10:05:23.616107 2026] [:error] [pid 32053:tid 32078] [client 20.100.201.184:16359] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Wed Apr 22 10:05:23.880902 2026] [:error] [pid 32053:tid 32076] [client 20.100.201.184:16359] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aegs4wzPjXx_ocfbYhtJpQAAA1U"]
[Wed Apr 22 10:05:25.164174 2026] [:error] [pid 31755:tid 31777] [client 20.100.201.184:47548] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aegs5Qz2mYMkg3X8q1vL8QAAAg4"]
[Wed Apr 22 10:05:26.481714 2026] [:error] [pid 32095:tid 32110] [client 20.100.201.184:15907] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aegs5tfu5Cv628YPe5-LqgAAA4w"]
[Wed Apr 22 10:05:29.435604 2026] [:error] [pid 31756:tid 31813] [client 20.100.201.184:5600] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aegs6d_WbkXbHaEfhd0FywAAAlU"]
[Wed Apr 22 10:05:30.245422 2026] [:error] [pid 21682:tid 21728] [client 20.100.201.184:17107] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aegs6plXWQZUlmPHS3pDMgAAAEU"]
[Wed Apr 22 10:05:32.075470 2026] [:error] [pid 31755:tid 31785] [client 20.100.201.184:39217] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aegs7Az2mYMkg3X8q1vMCQAAAhY"]
[Wed Apr 22 10:05:34.049177 2026] [:error] [pid 31755:tid 31765] [client 20.100.201.184:43183] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aegs7gz2mYMkg3X8q1vMFwAAAgI"]
[Wed Apr 22 10:05:37.229681 2026] [:error] [pid 23041:tid 23057] [client 20.100.201.184:31348] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aegs8UTXx_lUa7xwAb49owAAAQ0"]
[Wed Apr 22 10:05:39.255456 2026] [:error] [pid 31756:tid 31816] [client 20.100.201.184:26861] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aegs89_WbkXbHaEfhd0F1QAAAlg"]
[Wed Apr 22 10:05:40.643753 2026] [:error] [pid 31755:tid 31764] [client 20.100.201.184:20202] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aegs9Az2mYMkg3X8q1vMHQAAAgE"]
[Wed Apr 22 10:05:43.045612 2026] [:error] [pid 31755:tid 31784] [client 20.100.201.184:5360] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aegs9wz2mYMkg3X8q1vMIQAAAhU"]
[Wed Apr 22 10:05:44.560143 2026] [:error] [pid 23041:tid 23066] [client 20.100.201.184:17985] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aegs-ETXx_lUa7xwAb49sQAAARY"]
[Wed Apr 22 10:05:47.950172 2026] [:error] [pid 21682:tid 21746] [client 20.100.201.184:42086] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aegs-5lXWQZUlmPHS3pDWgAAAFc"]
[Wed Apr 22 10:05:55.575068 2026] [:error] [pid 31755:tid 31769] [client 20.100.201.184:5837] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aegtAwz2mYMkg3X8q1vMQgAAAgY"]
[Wed Apr 22 10:05:56.750130 2026] [:error] [pid 21682:tid 21743] [client 20.100.201.184:21185] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aegtBJlXWQZUlmPHS3pDigAAAFQ"]
[Wed Apr 22 10:05:59.655162 2026] [:error] [pid 31755:tid 31786] [client 20.100.201.184:19408] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aegtBwz2mYMkg3X8q1vMSwAAAhc"]
[Wed Apr 22 10:06:02.377346 2026] [:error] [pid 23041:tid 23044] [client 20.100.201.184:23896] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aegtCkTXx_lUa7xwAb49xAAAAQA"]
[Wed Apr 22 10:06:03.285421 2026] [:error] [pid 23041:tid 23055] [client 20.100.201.184:23874] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aegtC0TXx_lUa7xwAb49ygAAAQs"]
[Wed Apr 22 10:06:04.124901 2026] [:error] [pid 31755:tid 31778] [client 20.100.201.184:40387] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aegtDAz2mYMkg3X8q1vMVQAAAg8"]
[Wed Apr 22 10:06:06.413431 2026] [:error] [pid 31755:tid 31769] [client 20.100.201.184:33320] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aegtDgz2mYMkg3X8q1vMXAAAAgY"]
[Wed Apr 22 10:06:07.229474 2026] [:error] [pid 21683:tid 21757] [client 20.100.201.184:19422] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aegtD1ZBWT-0diZyYya7lAAAAIc"]
[Wed Apr 22 10:06:08.256213 2026] [:error] [pid 31706:tid 31716] [client 20.100.201.184:40435] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aegtELGSe9Rnd4Q_z1ir9gAAAcc"]
[Wed Apr 22 10:06:09.768375 2026] [:error] [pid 32053:tid 32070] [client 20.100.201.184:21756] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aegtEQzPjXx_ocfbYhtJsAAAA08"]
[Wed Apr 22 10:06:10.535362 2026] [:error] [pid 21683:tid 21768] [client 20.100.201.184:5841] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aegtElZBWT-0diZyYya7lQAAAJI"]
[Wed Apr 22 10:06:11.413540 2026] [:error] [pid 21683:tid 21750] [client 20.100.201.184:21662] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aegtE1ZBWT-0diZyYya7lgAAAIA"]
[Wed Apr 22 10:06:15.830900 2026] [:error] [pid 21682:tid 21747] [client 20.100.201.184:21728] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aegtF5lXWQZUlmPHS3pDtQAAAFg"]
[Wed Apr 22 10:06:16.850298 2026] [:error] [pid 31755:tid 31783] [client 20.100.201.184:21693] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aegtGAz2mYMkg3X8q1vMbwAAAhQ"]
[Wed Apr 22 10:06:18.890390 2026] [:error] [pid 21683:tid 21761] [client 20.100.201.184:16430] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aegtGlZBWT-0diZyYya7mAAAAIs"]
[Wed Apr 22 10:06:21.189470 2026] [:error] [pid 23041:tid 23062] [client 20.100.201.184:29356] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adoms.php"] [unique_id "aegtHUTXx_lUa7xwAb493QAAARI"]
[Wed Apr 22 10:06:23.670152 2026] [:error] [pid 21682:tid 21738] [client 20.100.201.184:26789] File does not exist: /usr/local/apache/htdocs/suspended-page/adoms.php
[Wed Apr 22 10:06:23.945618 2026] [:error] [pid 21682:tid 21727] [client 20.100.201.184:26789] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-editor.php
[Wed Apr 22 10:06:24.226618 2026] [:error] [pid 21682:tid 21740] [client 20.100.201.184:26789] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Wed Apr 22 10:06:24.493474 2026] [:error] [pid 21682:tid 21730] [client 20.100.201.184:26789] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed Apr 22 10:06:24.758854 2026] [:error] [pid 21682:tid 21745] [client 20.100.201.184:26789] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Wed Apr 22 10:06:25.305365 2026] [:error] [pid 21682:tid 21724] [client 20.100.201.184:26789] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Wed Apr 22 10:06:25.584486 2026] [:error] [pid 21682:tid 21731] [client 20.100.201.184:26789] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Wed Apr 22 10:06:25.849952 2026] [:error] [pid 21682:tid 21726] [client 20.100.201.184:26789] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Wed Apr 22 10:06:26.114184 2026] [:error] [pid 21682:tid 21735] [client 20.100.201.184:26789] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Wed Apr 22 10:06:27.747385 2026] [:error] [pid 21682:tid 21735] [client 20.100.201.184:26789] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Wed Apr 22 10:06:28.021548 2026] [:error] [pid 21682:tid 21730] [client 20.100.201.184:26789] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aegtJJlXWQZUlmPHS3pD3QAAAEc"]
[Wed Apr 22 10:06:29.123886 2026] [:error] [pid 31755:tid 31763] [client 20.100.201.184:28673] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aegtJQz2mYMkg3X8q1vMggAAAgA"]
[Wed Apr 22 10:06:30.275331 2026] [:error] [pid 31755:tid 31764] [client 20.100.201.184:37397] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aegtJgz2mYMkg3X8q1vMhgAAAgE"]
[Wed Apr 22 10:06:31.845881 2026] [:error] [pid 31755:tid 31785] [client 20.100.201.184:5902] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aegtJwz2mYMkg3X8q1vMkQAAAhY"]
[Wed Apr 22 10:06:34.770997 2026] [:error] [pid 31756:tid 31806] [client 20.100.201.184:39881] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegtKt_WbkXbHaEfhd0F-AAAAk4"]
[Wed Apr 22 10:06:37.837313 2026] [:error] [pid 31706:tid 31714] [client 20.100.201.184:39879] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegtLbGSe9Rnd4Q_z1ir-AAAAcU"]
[Wed Apr 22 10:06:40.233983 2026] [:error] [pid 31755:tid 31767] [client 20.100.201.184:23524] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegtMAz2mYMkg3X8q1vMpQAAAgQ"]
[Wed Apr 22 10:06:41.904770 2026] [:error] [pid 31844:tid 31870] [client 20.100.201.184:18233] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aegtMWtAU9CprTB4b3JAGgAAApc"]
[Wed Apr 22 10:06:43.203318 2026] [:error] [pid 31755:tid 31763] [client 20.100.201.184:27339] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aegtMwz2mYMkg3X8q1vMpwAAAgA"]
[Wed Apr 22 10:06:46.193515 2026] [:error] [pid 31755:tid 31768] [client 20.100.201.184:21387] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aegtNgz2mYMkg3X8q1vMswAAAgU"]
[Wed Apr 22 10:06:47.439503 2026] [:error] [pid 21682:tid 21729] [client 20.100.201.184:29970] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aegtN5lXWQZUlmPHS3pEBAAAAEY"]
[Wed Apr 22 10:06:50.220636 2026] [:error] [pid 31755:tid 31777] [client 20.100.201.184:21397] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aegtOgz2mYMkg3X8q1vMxgAAAg4"]
[Wed Apr 22 10:06:51.505458 2026] [:error] [pid 32095:tid 32115] [client 20.100.201.184:34930] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aegtO9fu5Cv628YPe5-L2QAAA5E"]
[Wed Apr 22 10:07:01.086003 2026] [:error] [pid 21682:tid 21733] [client 20.100.201.184:34887] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aegtRZlXWQZUlmPHS3pEFQAAAEo"]
[Wed Apr 22 10:07:03.529318 2026] [:error] [pid 21682:tid 21746] [client 20.100.201.184:45823] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aegtR5lXWQZUlmPHS3pEHgAAAFc"]
[Wed Apr 22 10:07:04.931048 2026] [:error] [pid 21682:tid 21744] [client 20.100.201.184:6070] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aegtSJlXWQZUlmPHS3pEIwAAAFU"]
[Wed Apr 22 10:07:06.353081 2026] [:error] [pid 31756:tid 31806] [client 20.100.201.184:27371] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aegtSt_WbkXbHaEfhd0GRgAAAk4"]
[Wed Apr 22 10:07:07.010497 2026] [:error] [pid 23041:tid 23050] [client 20.100.201.184:27334] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aegtS0TXx_lUa7xwAb4-NgAAAQY"]
[Wed Apr 22 10:07:08.336533 2026] [:error] [pid 31756:tid 31809] [client 20.100.201.184:24158] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aegtTN_WbkXbHaEfhd0GTAAAAlE"]
[Wed Apr 22 10:07:09.037075 2026] [:error] [pid 31756:tid 31798] [client 20.100.201.184:16071] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aegtTd_WbkXbHaEfhd0GUAAAAkY"]
[Wed Apr 22 10:07:10.616062 2026] [:error] [pid 23041:tid 23063] [client 20.100.201.184:40327] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aegtTkTXx_lUa7xwAb4-RQAAARM"]
[Wed Apr 22 10:07:11.530336 2026] [:error] [pid 31706:tid 31723] [client 20.100.201.184:40324] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aegtT7GSe9Rnd4Q_z1isAAAAAc4"]
[Wed Apr 22 10:07:12.860312 2026] [:error] [pid 31756:tid 31803] [client 20.100.201.184:40338] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aegtUN_WbkXbHaEfhd0GXQAAAks"]
[Wed Apr 22 10:07:15.245578 2026] [:error] [pid 31755:tid 31772] [client 20.100.201.184:18287] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aegtUwz2mYMkg3X8q1vM5wAAAgk"]
[Wed Apr 22 10:07:16.312394 2026] [:error] [pid 21682:tid 21741] [client 20.100.201.184:24179] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aegtVJlXWQZUlmPHS3pELwAAAFI"]
[Wed Apr 22 10:07:17.021029 2026] [:error] [pid 31755:tid 31770] [client 20.100.201.184:27285] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aegtVQz2mYMkg3X8q1vM7gAAAgc"]
[Wed Apr 22 10:07:18.612042 2026] [:error] [pid 31756:tid 31808] [client 20.100.201.184:24184] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aegtVt_WbkXbHaEfhd0GbAAAAlA"]
[Wed Apr 22 10:07:19.624115 2026] [:error] [pid 21682:tid 21744] [client 20.100.201.184:35887] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aegtV5lXWQZUlmPHS3pENAAAAFU"]
[Wed Apr 22 10:07:22.968577 2026] [:error] [pid 32053:tid 32058] [client 20.100.201.184:24149] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aegtWgzPjXx_ocfbYhtJuwAAA0M"]
[Wed Apr 22 10:07:23.900738 2026] [:error] [pid 31755:tid 31768] [client 20.100.201.184:44444] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aegtWwz2mYMkg3X8q1vM_QAAAgU"]
[Wed Apr 22 10:07:25.561463 2026] [:error] [pid 23041:tid 23055] [client 20.100.201.184:45803] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aegtXUTXx_lUa7xwAb4-XQAAAQs"]
[Wed Apr 22 10:07:27.611418 2026] [:error] [pid 23041:tid 23067] [client 20.100.201.184:20878] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Wed Apr 22 10:07:27.878068 2026] [:error] [pid 23041:tid 23068] [client 20.100.201.184:20878] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Wed Apr 22 10:07:28.419901 2026] [:error] [pid 23041:tid 23064] [client 20.100.201.184:20878] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Wed Apr 22 10:07:28.685635 2026] [:error] [pid 23041:tid 23060] [client 20.100.201.184:20878] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 22 10:07:28.960218 2026] [:error] [pid 23041:tid 23052] [client 20.100.201.184:20878] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Wed Apr 22 10:07:29.310659 2026] [:error] [pid 23041:tid 23046] [client 20.100.201.184:20878] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Wed Apr 22 10:07:29.580172 2026] [:error] [pid 23041:tid 23045] [client 20.100.201.184:20878] File does not exist: /usr/local/apache/htdocs/suspended-page/gcqoa.php
[Wed Apr 22 10:07:29.847786 2026] [:error] [pid 23041:tid 23044] [client 20.100.201.184:20878] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Wed Apr 22 10:07:30.394005 2026] [:error] [pid 23041:tid 23065] [client 20.100.201.184:20878] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Wed Apr 22 10:07:30.670610 2026] [:error] [pid 23041:tid 23054] [client 20.100.201.184:20878] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Wed Apr 22 10:07:30.932684 2026] [:error] [pid 23041:tid 23057] [client 20.100.201.184:20878] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aegtYkTXx_lUa7xwAb4-dQAAAQ0"]
[Wed Apr 22 10:07:34.802967 2026] [:error] [pid 21683:tid 21761] [client 20.100.201.184:16085] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aegtZlZBWT-0diZyYya7tgAAAIs"]
[Wed Apr 22 10:07:44.252129 2026] [:error] [pid 31755:tid 31784] [client 20.100.201.184:6019] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aegtcAz2mYMkg3X8q1vNKwAAAhU"]
[Wed Apr 22 10:07:46.014591 2026] [:error] [pid 31756:tid 31812] [client 20.100.201.184:6061] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aegtct_WbkXbHaEfhd0GmQAAAlQ"]
[Wed Apr 22 10:07:46.675970 2026] [:error] [pid 21683:tid 21766] [client 20.100.201.184:23834] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aegtclZBWT-0diZyYya7xgAAAJA"]
[Wed Apr 22 10:07:47.970058 2026] [:error] [pid 31755:tid 31786] [client 20.100.201.184:21136] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aegtcwz2mYMkg3X8q1vNMwAAAhc"]
[Wed Apr 22 10:07:50.827431 2026] [:error] [pid 31755:tid 31765] [client 20.100.201.184:35872] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aegtdgz2mYMkg3X8q1vNOwAAAgI"]
[Wed Apr 22 10:07:54.314427 2026] [:error] [pid 21682:tid 21747] [client 20.100.201.184:24131] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aegteplXWQZUlmPHS3pEVQAAAFg"]
[Wed Apr 22 10:07:56.090551 2026] [:error] [pid 31706:tid 31729] [client 20.100.201.184:23844] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aegtfLGSe9Rnd4Q_z1isCwAAAdQ"]
[Wed Apr 22 10:07:57.984313 2026] [:error] [pid 31706:tid 31709] [client 20.100.201.184:43866] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aegtfbGSe9Rnd4Q_z1isDAAAAcA"]
[Wed Apr 22 10:07:59.212431 2026] [:error] [pid 31844:tid 31858] [client 20.100.201.184:5658] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aegtf2tAU9CprTB4b3JAMgAAAow"]
[Wed Apr 22 10:08:00.873026 2026] [:error] [pid 31755:tid 31782] [client 20.100.201.184:43897] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aegtgAz2mYMkg3X8q1vNRgAAAhM"]
[Wed Apr 22 10:08:02.830015 2026] [:error] [pid 23041:tid 23057] [client 20.100.201.184:16168] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aegtgkTXx_lUa7xwAb4-nwAAAQ0"]
[Wed Apr 22 10:08:04.527981 2026] [:error] [pid 23041:tid 23056] [client 20.100.201.184:21183] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aegthETXx_lUa7xwAb4-pgAAAQw"]
[Wed Apr 22 10:08:06.150000 2026] [:error] [pid 31755:tid 31769] [client 20.100.201.184:30650] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aegthgz2mYMkg3X8q1vNSQAAAgY"]
[Wed Apr 22 10:08:07.710656 2026] [:error] [pid 31756:tid 31790] [client 20.100.201.184:43893] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aegth9_WbkXbHaEfhd0GpAAAAkA"]
[Wed Apr 22 10:08:10.233031 2026] [:error] [pid 23041:tid 23064] [client 20.100.201.184:41556] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aegtikTXx_lUa7xwAb4-rwAAARQ"]
[Wed Apr 22 10:08:11.463850 2026] [:error] [pid 23041:tid 23049] [client 20.100.201.184:19381] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aegti0TXx_lUa7xwAb4-tAAAAQU"]
[Wed Apr 22 10:08:15.104070 2026] [:error] [pid 21683:tid 21756] [client 20.100.201.184:36979] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aegtj1ZBWT-0diZyYya73AAAAIY"]
[Wed Apr 22 10:08:16.019453 2026] [:error] [pid 31949:tid 31959] [client 20.100.201.184:43790] [client 20.100.201.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aegtkH2WtGZh5JfbMUdafwAAAwc"]
[Wed Apr 22 11:11:50.219752 2026] [:error] [pid 31755:tid 31763] [client 4.223.161.209:48848] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Wed Apr 22 11:11:50.510754 2026] [:error] [pid 31755:tid 31786] [client 4.223.161.209:48848] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Wed Apr 22 11:11:50.812769 2026] [:error] [pid 31755:tid 31777] [client 4.223.161.209:48848] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Wed Apr 22 11:11:51.103363 2026] [:error] [pid 31755:tid 31778] [client 4.223.161.209:48848] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Wed Apr 22 11:11:51.394064 2026] [:error] [pid 31755:tid 31765] [client 4.223.161.209:48848] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Wed Apr 22 11:11:51.686658 2026] [:error] [pid 31755:tid 31767] [client 4.223.161.209:48848] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Wed Apr 22 11:11:52.271073 2026] [:error] [pid 31755:tid 31780] [client 4.223.161.209:48848] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Wed Apr 22 11:11:52.582136 2026] [:error] [pid 31755:tid 31764] [client 4.223.161.209:48848] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Wed Apr 22 11:11:52.897009 2026] [:error] [pid 31755:tid 31785] [client 4.223.161.209:48848] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Wed Apr 22 11:11:53.184335 2026] [:error] [pid 31755:tid 31779] [client 4.223.161.209:48848] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeg8eQz2mYMkg3X8q1vrNAAAAhA"]
[Wed Apr 22 11:11:54.823161 2026] [:error] [pid 21683:tid 21766] [client 4.223.161.209:18015] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeg8elZBWT-0diZyYybGBwAAAJA"]
[Wed Apr 22 11:12:02.774003 2026] [:error] [pid 31755:tid 31782] [client 4.223.161.209:3231] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeg8ggz2mYMkg3X8q1vrUwAAAhM"]
[Wed Apr 22 11:12:04.065416 2026] [:error] [pid 23041:tid 23049] [client 4.223.161.209:32655] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeg8hETXx_lUa7xwAb5TXQAAAQU"]
[Wed Apr 22 11:12:05.490330 2026] [:error] [pid 31755:tid 31771] [client 4.223.161.209:19108] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeg8hQz2mYMkg3X8q1vrXAAAAgg"]
[Wed Apr 22 11:12:07.524656 2026] [:error] [pid 32053:tid 32069] [client 4.223.161.209:19081] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeg8hwzPjXx_ocfbYhtPNAAAA04"]
[Wed Apr 22 11:12:08.892224 2026] [:error] [pid 31756:tid 31791] [client 4.223.161.209:16649] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeg8iN_WbkXbHaEfhd0TSAAAAkE"]
[Wed Apr 22 11:12:10.020644 2026] [:error] [pid 31755:tid 31785] [client 4.223.161.209:31796] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeg8igz2mYMkg3X8q1vrawAAAhY"]
[Wed Apr 22 11:12:10.893772 2026] [:error] [pid 21683:tid 21773] [client 4.223.161.209:27455] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeg8ilZBWT-0diZyYybGDAAAAJc"]
[Wed Apr 22 11:12:11.915325 2026] [:error] [pid 31844:tid 31870] [client 4.223.161.209:3312] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeg8i2tAU9CprTB4b3JEzwAAApc"]
[Wed Apr 22 11:12:13.124922 2026] [:error] [pid 23041:tid 23047] [client 4.223.161.209:25743] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeg8jUTXx_lUa7xwAb5TaQAAAQM"]
[Wed Apr 22 11:12:14.108153 2026] [:error] [pid 31756:tid 31812] [client 4.223.161.209:27438] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeg8jt_WbkXbHaEfhd0TTwAAAlQ"]
[Wed Apr 22 11:12:15.315102 2026] [:error] [pid 21682:tid 21743] [client 4.223.161.209:23890] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeg8j5lXWQZUlmPHS3pT-AAAAFQ"]
[Wed Apr 22 11:12:16.981228 2026] [:error] [pid 31755:tid 31779] [client 4.223.161.209:3324] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeg8kAz2mYMkg3X8q1vrcQAAAhA"]
[Wed Apr 22 11:12:18.409049 2026] [:error] [pid 23041:tid 23044] [client 4.223.161.209:25790] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeg8kkTXx_lUa7xwAb5TbgAAAQA"]
[Wed Apr 22 11:12:19.922120 2026] [:error] [pid 32095:tid 32118] [client 4.223.161.209:32688] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeg8k9fu5Cv628YPe5-TZAAAA5Q"]
[Wed Apr 22 11:12:21.314583 2026] [:error] [pid 31755:tid 31777] [client 4.223.161.209:41894] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeg8lQz2mYMkg3X8q1vrwAAAAg4"]
[Wed Apr 22 11:12:22.393294 2026] [:error] [pid 23041:tid 23045] [client 4.223.161.209:27404] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeg8lkTXx_lUa7xwAb5TlwAAAQE"]
[Wed Apr 22 11:12:24.458952 2026] [:error] [pid 31755:tid 31767] [client 4.223.161.209:23919] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeg8mAz2mYMkg3X8q1vr0wAAAgQ"]
[Wed Apr 22 11:12:26.430681 2026] [:error] [pid 21682:tid 21732] [client 4.223.161.209:19808] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeg8mplXWQZUlmPHS3pUCAAAAEk"]
[Wed Apr 22 11:12:29.439948 2026] [:error] [pid 21682:tid 21743] [client 4.223.161.209:23913] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeg8nZlXWQZUlmPHS3pUCwAAAFQ"]
[Wed Apr 22 11:12:30.923840 2026] [:error] [pid 31706:tid 31733] [client 4.223.161.209:32648] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeg8nrGSe9Rnd4Q_z1iv4gAAAdg"]
[Wed Apr 22 11:12:31.986712 2026] [:error] [pid 31706:tid 31717] [client 4.223.161.209:17470] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeg8n7GSe9Rnd4Q_z1iv4wAAAcg"]
[Wed Apr 22 11:12:34.139942 2026] [:error] [pid 31844:tid 31859] [client 4.223.161.209:17930] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeg8omtAU9CprTB4b3JE0QAAAo0"]
[Wed Apr 22 11:12:36.573150 2026] [:error] [pid 31949:tid 31958] [client 4.223.161.209:19811] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeg8pH2WtGZh5JfbMUdiugAAAwY"]
[Wed Apr 22 11:12:38.743298 2026] [:error] [pid 21682:tid 21733] [client 4.223.161.209:41880] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeg8pplXWQZUlmPHS3pUFQAAAEo"]
[Wed Apr 22 11:12:39.826190 2026] [:error] [pid 31706:tid 31710] [client 4.223.161.209:41878] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeg8p7GSe9Rnd4Q_z1iv5wAAAcE"]
[Wed Apr 22 11:12:45.606807 2026] [:error] [pid 31755:tid 31785] [client 4.223.161.209:32646] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeg8rQz2mYMkg3X8q1vr8wAAAhY"]
[Wed Apr 22 11:12:48.735530 2026] [:error] [pid 23041:tid 23068] [client 4.223.161.209:25778] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aeg8sETXx_lUa7xwAb5T0wAAARg"]
[Wed Apr 22 11:12:52.181442 2026] [:error] [pid 31755:tid 31780] [client 4.223.161.209:42321] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Wed Apr 22 11:12:52.451336 2026] [:error] [pid 31755:tid 31763] [client 4.223.161.209:42321] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog-header.php
[Wed Apr 22 11:12:52.719397 2026] [:error] [pid 31755:tid 31771] [client 4.223.161.209:42321] File does not exist: /usr/local/apache/htdocs/suspended-page/bmi.php
[Wed Apr 22 11:12:52.990577 2026] [:error] [pid 31755:tid 31784] [client 4.223.161.209:42321] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Wed Apr 22 11:12:53.529284 2026] [:error] [pid 31755:tid 31779] [client 4.223.161.209:42321] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Wed Apr 22 11:12:53.821980 2026] [:error] [pid 31755:tid 31782] [client 4.223.161.209:42321] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Wed Apr 22 11:12:54.101747 2026] [:error] [pid 31755:tid 31780] [client 4.223.161.209:42321] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Wed Apr 22 11:12:54.677419 2026] [:error] [pid 31755:tid 31766] [client 4.223.161.209:42321] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Wed Apr 22 11:12:54.944373 2026] [:error] [pid 31755:tid 31776] [client 4.223.161.209:42321] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Wed Apr 22 11:12:55.299512 2026] [:error] [pid 31755:tid 31774] [client 4.223.161.209:42321] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeg8twz2mYMkg3X8q1vsFQAAAgs"]
[Wed Apr 22 11:12:56.566561 2026] [:error] [pid 21682:tid 21738] [client 4.223.161.209:17979] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeg8uJlXWQZUlmPHS3pUHAAAAE8"]
[Wed Apr 22 11:12:57.802603 2026] [:error] [pid 23041:tid 23052] [client 4.223.161.209:27435] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeg8uUTXx_lUa7xwAb5T2wAAAQg"]
[Wed Apr 22 11:12:59.110165 2026] [:error] [pid 32053:tid 32058] [client 4.223.161.209:17950] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeg8uwzPjXx_ocfbYhtPPgAAA0M"]
[Wed Apr 22 11:13:00.718488 2026] [:error] [pid 23041:tid 23057] [client 4.223.161.209:17943] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeg8vETXx_lUa7xwAb5T4QAAAQ0"]
[Wed Apr 22 11:13:02.035785 2026] [:error] [pid 21682:tid 21739] [client 4.223.161.209:37372] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeg8vplXWQZUlmPHS3pUIwAAAFA"]
[Wed Apr 22 11:13:02.907185 2026] [:error] [pid 31706:tid 31733] [client 4.223.161.209:17973] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeg8vrGSe9Rnd4Q_z1iv6wAAAdg"]
[Wed Apr 22 11:13:03.983350 2026] [:error] [pid 31706:tid 31717] [client 4.223.161.209:25380] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeg8v7GSe9Rnd4Q_z1iv7AAAAcg"]
[Wed Apr 22 11:13:05.570382 2026] [:error] [pid 21682:tid 21728] [client 4.223.161.209:17444] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeg8wZlXWQZUlmPHS3pULQAAAEU"]
[Wed Apr 22 11:13:06.727838 2026] [:error] [pid 32095:tid 32115] [client 4.223.161.209:27439] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeg8wtfu5Cv628YPe5-TdQAAA5E"]
[Wed Apr 22 11:13:08.422732 2026] [:error] [pid 31755:tid 31786] [client 4.223.161.209:17947] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeg8xAz2mYMkg3X8q1vsJgAAAhc"]
[Wed Apr 22 11:13:09.604614 2026] [:error] [pid 31949:tid 31965] [client 4.223.161.209:25741] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeg8xX2WtGZh5JfbMUdizQAAAw0"]
[Wed Apr 22 11:13:12.374110 2026] [:error] [pid 31755:tid 31778] [client 4.223.161.209:42350] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeg8yAz2mYMkg3X8q1vsMwAAAg8"]
[Wed Apr 22 11:13:14.667789 2026] [:error] [pid 21682:tid 21730] [client 4.223.161.209:27406] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeg8yplXWQZUlmPHS3pUQAAAAEc"]
[Wed Apr 22 11:13:15.891474 2026] [:error] [pid 31706:tid 31714] [client 4.223.161.209:17415] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeg8y7GSe9Rnd4Q_z1iv7QAAAcU"]
[Wed Apr 22 11:13:17.063569 2026] [:error] [pid 31755:tid 31772] [client 4.223.161.209:17428] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeg8zQz2mYMkg3X8q1vsQAAAAgk"]
[Wed Apr 22 11:13:18.833944 2026] [:error] [pid 23041:tid 23058] [client 4.223.161.209:25391] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeg8zkTXx_lUa7xwAb5T9QAAAQ4"]
[Wed Apr 22 11:13:19.709249 2026] [:error] [pid 21682:tid 21733] [client 4.223.161.209:29773] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeg8z5lXWQZUlmPHS3pUSQAAAEo"]
[Wed Apr 22 11:13:20.958958 2026] [:error] [pid 23041:tid 23057] [client 4.223.161.209:20153] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeg80ETXx_lUa7xwAb5T_wAAAQ0"]
[Wed Apr 22 11:13:22.278376 2026] [:error] [pid 23041:tid 23067] [client 4.223.161.209:25354] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeg80kTXx_lUa7xwAb5UBAAAARc"]
[Wed Apr 22 11:13:24.318034 2026] [:error] [pid 32053:tid 32057] [client 4.223.161.209:27490] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeg81AzPjXx_ocfbYhtPRQAAA0I"]
[Wed Apr 22 11:13:25.233871 2026] [:error] [pid 23041:tid 23067] [client 4.223.161.209:29819] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeg81UTXx_lUa7xwAb5UEgAAARc"]
[Wed Apr 22 11:13:28.561695 2026] [:error] [pid 21683:tid 21771] [client 4.223.161.209:21364] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeg82FZBWT-0diZyYybGMgAAAJU"]
[Wed Apr 22 11:13:30.214945 2026] [:error] [pid 23041:tid 23057] [client 4.223.161.209:3356] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeg82kTXx_lUa7xwAb5UkQAAAQ0"]
[Wed Apr 22 11:13:36.681838 2026] [:error] [pid 31755:tid 31763] [client 4.223.161.209:32716] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeg84Az2mYMkg3X8q1vsqwAAAgA"]
[Wed Apr 22 11:13:38.310375 2026] [:error] [pid 31756:tid 31815] [client 4.223.161.209:3610] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeg84t_WbkXbHaEfhd0UPQAAAlc"]
[Wed Apr 22 11:13:40.854557 2026] [:error] [pid 31755:tid 31766] [client 4.223.161.209:20141] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeg85Az2mYMkg3X8q1vsuQAAAgM"]
[Wed Apr 22 11:13:42.617738 2026] [:error] [pid 21683:tid 21766] [client 4.223.161.209:21313] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeg85lZBWT-0diZyYybGSgAAAJA"]
[Wed Apr 22 11:13:46.262968 2026] [:error] [pid 32095:tid 32098] [client 4.223.161.209:3590] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeg86tfu5Cv628YPe5-TfQAAA4E"]
[Wed Apr 22 11:13:48.044660 2026] [:error] [pid 23041:tid 23052] [client 4.223.161.209:18424] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeg87ETXx_lUa7xwAb5UqwAAAQg"]
[Wed Apr 22 11:13:50.126642 2026] [:error] [pid 32095:tid 32111] [client 4.223.161.209:20173] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "aeg87tfu5Cv628YPe5-TgQAAA40"]
[Wed Apr 22 11:13:55.140764 2026] [:error] [pid 32053:tid 32066] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Wed Apr 22 11:13:55.532466 2026] [:error] [pid 32053:tid 32075] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Wed Apr 22 11:13:55.803312 2026] [:error] [pid 32053:tid 32079] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Wed Apr 22 11:13:56.085193 2026] [:error] [pid 32053:tid 32063] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Wed Apr 22 11:13:56.359747 2026] [:error] [pid 32053:tid 32056] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Wed Apr 22 11:13:56.629257 2026] [:error] [pid 32053:tid 32074] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed Apr 22 11:13:57.097330 2026] [:error] [pid 32053:tid 32074] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Wed Apr 22 11:13:57.364552 2026] [:error] [pid 32053:tid 32062] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Wed Apr 22 11:13:57.727047 2026] [:error] [pid 32053:tid 32055] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Wed Apr 22 11:13:58.009002 2026] [:error] [pid 32053:tid 32059] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Wed Apr 22 11:13:58.292826 2026] [:error] [pid 32053:tid 32060] [client 4.223.161.209:3592] File does not exist: /usr/local/apache/htdocs/suspended-page/Jcrop.php
[Wed Apr 22 11:13:58.560910 2026] [:error] [pid 32053:tid 32068] [client 4.223.161.209:3592] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeg89gzPjXx_ocfbYhtPXAAAA00"]
[Wed Apr 22 11:13:59.982496 2026] [:error] [pid 31844:tid 31857] [client 4.223.161.209:41894] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeg892tAU9CprTB4b3JE6gAAAos"]
[Wed Apr 22 11:14:01.353561 2026] [:error] [pid 21683:tid 21760] [client 4.223.161.209:23844] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeg8-VZBWT-0diZyYybGXwAAAIo"]
[Wed Apr 22 11:14:02.853758 2026] [:error] [pid 21682:tid 21739] [client 4.223.161.209:3612] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeg8-plXWQZUlmPHS3pUbwAAAFA"]
[Wed Apr 22 11:14:05.445492 2026] [:error] [pid 21682:tid 21723] [client 4.223.161.209:30668] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeg8_ZlXWQZUlmPHS3pUeAAAAEA"]
[Wed Apr 22 11:14:09.167126 2026] [:error] [pid 21683:tid 21768] [client 4.223.161.209:55223] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeg9AVZBWT-0diZyYybGZgAAAJI"]
[Wed Apr 22 11:14:09.942900 2026] [:error] [pid 31844:tid 31859] [client 4.223.161.209:23102] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeg9AWtAU9CprTB4b3JE8AAAAo0"]
[Wed Apr 22 11:14:11.619168 2026] [:error] [pid 31949:tid 31963] [client 4.223.161.209:4009] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeg9A32WtGZh5JfbMUdi-gAAAws"]
[Wed Apr 22 11:14:12.600672 2026] [:error] [pid 32095:tid 32113] [client 4.223.161.209:4010] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeg9BNfu5Cv628YPe5-TiAAAA48"]
[Wed Apr 22 11:14:13.788317 2026] [:error] [pid 21683:tid 21759] [client 4.223.161.209:55199] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeg9BVZBWT-0diZyYybGaQAAAIk"]
[Wed Apr 22 11:14:15.327194 2026] [:error] [pid 23041:tid 23067] [client 4.223.161.209:29705] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeg9B0TXx_lUa7xwAb5UyQAAARc"]
[Wed Apr 22 11:14:16.698133 2026] [:error] [pid 31755:tid 31778] [client 4.223.161.209:3996] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeg9CAz2mYMkg3X8q1vs4gAAAg8"]
[Wed Apr 22 11:14:18.529255 2026] [:error] [pid 31756:tid 31800] [client 4.223.161.209:30682] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeg9Ct_WbkXbHaEfhd0UYQAAAkg"]
[Wed Apr 22 11:14:20.483545 2026] [:error] [pid 21682:tid 21729] [client 4.223.161.209:23044] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeg9DJlXWQZUlmPHS3pUjQAAAEY"]
[Wed Apr 22 11:14:22.827284 2026] [:error] [pid 31949:tid 31959] [client 4.223.161.209:37942] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeg9Dn2WtGZh5JfbMUdjCQAAAwc"]
[Wed Apr 22 11:14:27.987564 2026] [:error] [pid 31755:tid 31778] [client 4.223.161.209:17264] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeg9Ewz2mYMkg3X8q1vs-wAAAg8"]
[Wed Apr 22 11:14:29.278636 2026] [:error] [pid 21682:tid 21732] [client 4.223.161.209:26509] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeg9FZlXWQZUlmPHS3pUmgAAAEk"]
[Wed Apr 22 11:14:31.494561 2026] [:error] [pid 21682:tid 21724] [client 4.223.161.209:39190] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeg9F5lXWQZUlmPHS3pUnQAAAEE"]
[Wed Apr 22 11:14:35.735745 2026] [:error] [pid 23041:tid 23065] [client 4.223.161.209:32207] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeg9G0TXx_lUa7xwAb5U-AAAARU"]
[Wed Apr 22 11:14:36.949965 2026] [:error] [pid 32053:tid 32066] [client 4.223.161.209:48809] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeg9HAzPjXx_ocfbYhtPZAAAA0s"]
[Wed Apr 22 11:14:38.597194 2026] [:error] [pid 32095:tid 32115] [client 4.223.161.209:48780] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeg9Htfu5Cv628YPe5-TngAAA5E"]
[Wed Apr 22 11:14:40.416853 2026] [:error] [pid 21683:tid 21771] [client 4.223.161.209:33986] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeg9IFZBWT-0diZyYybGdQAAAJU"]
[Wed Apr 22 11:14:42.094491 2026] [:error] [pid 23041:tid 23046] [client 4.223.161.209:29060] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeg9IkTXx_lUa7xwAb5VFwAAAQI"]
[Wed Apr 22 11:14:44.544716 2026] [:error] [pid 31844:tid 31866] [client 4.223.161.209:34597] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeg9JGtAU9CprTB4b3JE-QAAApQ"]
[Wed Apr 22 11:14:45.904875 2026] [:error] [pid 21682:tid 21729] [client 4.223.161.209:39166] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aeg9JZlXWQZUlmPHS3pUzgAAAEY"]
[Wed Apr 22 11:14:49.623828 2026] [:error] [pid 21683:tid 21754] [client 4.223.161.209:41922] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aeg9KVZBWT-0diZyYybGhQAAAIQ"]
[Wed Apr 22 11:14:50.604656 2026] [:error] [pid 21683:tid 21769] [client 4.223.161.209:31411] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aeg9KlZBWT-0diZyYybGjQAAAJM"]
[Wed Apr 22 11:15:12.311763 2026] [:error] [pid 31844:tid 31866] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Apr 22 11:15:12.600333 2026] [:error] [pid 31844:tid 31858] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Wed Apr 22 11:15:12.908469 2026] [:error] [pid 31844:tid 31862] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Wed Apr 22 11:15:13.177683 2026] [:error] [pid 31844:tid 31853] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Wed Apr 22 11:15:13.459959 2026] [:error] [pid 31844:tid 31870] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class-atom.php
[Wed Apr 22 11:15:13.742434 2026] [:error] [pid 31844:tid 31865] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed Apr 22 11:15:15.471149 2026] [:error] [pid 31844:tid 31865] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Wed Apr 22 11:15:15.748923 2026] [:error] [pid 31844:tid 31860] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/900.php
[Wed Apr 22 11:15:16.033029 2026] [:error] [pid 31844:tid 31859] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Wed Apr 22 11:15:16.303263 2026] [:error] [pid 31844:tid 31850] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/jk.php
[Wed Apr 22 11:15:16.570333 2026] [:error] [pid 31844:tid 31848] [client 4.223.161.209:24617] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Wed Apr 22 11:15:16.847575 2026] [:error] [pid 31844:tid 31847] [client 4.223.161.209:24617] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeg9RGtAU9CprTB4b3JFEAAAAoE"]
[Wed Apr 22 11:15:17.801297 2026] [:error] [pid 31844:tid 31856] [client 4.223.161.209:26603] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeg9RWtAU9CprTB4b3JFFAAAAoo"]
[Wed Apr 22 11:15:18.654518 2026] [:error] [pid 21683:tid 21751] [client 4.223.161.209:54944] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeg9RlZBWT-0diZyYybGpAAAAIE"]
[Wed Apr 22 11:15:20.920574 2026] [:error] [pid 23041:tid 23049] [client 4.223.161.209:33311] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeg9SETXx_lUa7xwAb5VQgAAAQU"]
[Wed Apr 22 11:15:21.885955 2026] [:error] [pid 23041:tid 23050] [client 4.223.161.209:22835] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeg9SUTXx_lUa7xwAb5VSAAAAQY"]
[Wed Apr 22 11:15:22.889609 2026] [:error] [pid 23041:tid 23045] [client 4.223.161.209:38484] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeg9SkTXx_lUa7xwAb5VTAAAAQE"]
[Wed Apr 22 11:15:24.290441 2026] [:error] [pid 31755:tid 31772] [client 4.223.161.209:22372] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeg9TAz2mYMkg3X8q1vtTQAAAgk"]
[Wed Apr 22 11:15:25.526039 2026] [:error] [pid 31756:tid 31811] [client 4.223.161.209:22798] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeg9Td_WbkXbHaEfhd0UmgAAAlM"]
[Wed Apr 22 11:15:26.775681 2026] [:error] [pid 31755:tid 31777] [client 4.223.161.209:38478] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeg9Tgz2mYMkg3X8q1vtVAAAAg4"]
[Wed Apr 22 11:15:27.781085 2026] [:error] [pid 31844:tid 31864] [client 4.223.161.209:38533] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeg9T2tAU9CprTB4b3JFFQAAApI"]
[Wed Apr 22 11:15:29.161578 2026] [:error] [pid 21683:tid 21759] [client 4.223.161.209:31424] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeg9UVZBWT-0diZyYybGrAAAAIk"]
[Wed Apr 22 11:15:32.639291 2026] [:error] [pid 21683:tid 21756] [client 4.223.161.209:3557] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeg9VFZBWT-0diZyYybGrgAAAIY"]
[Wed Apr 22 11:15:33.509207 2026] [:error] [pid 31756:tid 31814] [client 4.223.161.209:3558] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeg9Vd_WbkXbHaEfhd0UnwAAAlY"]
[Wed Apr 22 11:15:34.764000 2026] [:error] [pid 31756:tid 31798] [client 4.223.161.209:22808] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeg9Vt_WbkXbHaEfhd0UowAAAkY"]
[Wed Apr 22 11:15:35.527980 2026] [:error] [pid 32095:tid 32117] [client 4.223.161.209:20871] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeg9V9fu5Cv628YPe5-TwAAAA5M"]
[Wed Apr 22 11:15:36.476961 2026] [:error] [pid 31756:tid 31806] [client 4.223.161.209:23538] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeg9WN_WbkXbHaEfhd0UpgAAAk4"]
[Wed Apr 22 11:15:37.496374 2026] [:error] [pid 31755:tid 31766] [client 4.223.161.209:39861] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeg9WQz2mYMkg3X8q1vtXAAAAgM"]
[Wed Apr 22 11:15:39.199598 2026] [:error] [pid 31755:tid 31769] [client 4.223.161.209:22794] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeg9Wwz2mYMkg3X8q1vtYQAAAgY"]
[Wed Apr 22 11:15:40.985216 2026] [:error] [pid 21682:tid 21747] [client 4.223.161.209:30193] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeg9XJlXWQZUlmPHS3pVGwAAAFg"]
[Wed Apr 22 11:15:42.260361 2026] [:error] [pid 31755:tid 31771] [client 4.223.161.209:55363] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeg9Xgz2mYMkg3X8q1vtggAAAgg"]
[Wed Apr 22 11:15:43.576865 2026] [:error] [pid 31755:tid 31786] [client 4.223.161.209:42811] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeg9Xwz2mYMkg3X8q1vtqQAAAhc"]
[Wed Apr 22 11:15:45.478977 2026] [:error] [pid 32095:tid 32097] [client 4.223.161.209:47468] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeg9Ydfu5Cv628YPe5-TywAAA4A"]
[Wed Apr 22 11:15:49.840816 2026] [:error] [pid 32053:tid 32063] [client 4.223.161.209:30145] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeg9ZQzPjXx_ocfbYhtPpAAAA0g"]
[Wed Apr 22 11:15:51.883917 2026] [:error] [pid 21682:tid 21725] [client 4.223.161.209:57345] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeg9Z5lXWQZUlmPHS3pVVAAAAEI"]
[Wed Apr 22 11:15:52.731925 2026] [:error] [pid 23041:tid 23068] [client 4.223.161.209:3165] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeg9aETXx_lUa7xwAb5VlwAAARg"]
[Wed Apr 22 11:15:54.226246 2026] [:error] [pid 31949:tid 31964] [client 4.223.161.209:28425] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeg9an2WtGZh5JfbMUdjPgAAAww"]
[Wed Apr 22 11:15:55.491514 2026] [:error] [pid 31755:tid 31768] [client 4.223.161.209:33932] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeg9awz2mYMkg3X8q1vtzwAAAgU"]
[Wed Apr 22 11:15:57.810343 2026] [:error] [pid 23041:tid 23044] [client 4.223.161.209:17519] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeg9bUTXx_lUa7xwAb5VpAAAAQA"]
[Wed Apr 22 11:16:01.168685 2026] [:error] [pid 32053:tid 32072] [client 4.223.161.209:55388] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adoms.php"] [unique_id "aeg9cQzPjXx_ocfbYhtPvgAAA1E"]
[Wed Apr 22 11:16:03.171531 2026] [:error] [pid 32053:tid 32058] [client 4.223.161.209:17515] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adoms.php"] [unique_id "aeg9cwzPjXx_ocfbYhtPxwAAA0M"]
[Wed Apr 22 11:16:05.464908 2026] [:error] [pid 32053:tid 32057] [client 4.223.161.209:26887] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adoms.php"] [unique_id "aeg9dQzPjXx_ocfbYhtPywAAA0I"]
[Wed Apr 22 11:16:08.004642 2026] [:error] [pid 31756:tid 31805] [client 4.223.161.209:28472] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/adoms.php"] [unique_id "aeg9eN_WbkXbHaEfhd0UuQAAAk0"]
[Wed Apr 22 11:16:10.691547 2026] [:error] [pid 23041:tid 23053] [client 4.223.161.209:3176] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugin-editor.php"] [unique_id "aeg9ekTXx_lUa7xwAb5VuAAAAQk"]
[Wed Apr 22 11:16:12.312144 2026] [:error] [pid 31755:tid 31768] [client 4.223.161.209:18791] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugin-editor.php"] [unique_id "aeg9fAz2mYMkg3X8q1vt7gAAAgU"]
[Wed Apr 22 11:16:13.882182 2026] [:error] [pid 21683:tid 21761] [client 4.223.161.209:57403] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugin-editor.php"] [unique_id "aeg9fVZBWT-0diZyYybG2QAAAIs"]
[Wed Apr 22 11:16:19.067117 2026] [:error] [pid 32053:tid 32076] [client 4.223.161.209:3160] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-editor.php
[Wed Apr 22 11:16:19.337775 2026] [:error] [pid 32053:tid 32056] [client 4.223.161.209:3160] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Wed Apr 22 11:16:19.605992 2026] [:error] [pid 32053:tid 32079] [client 4.223.161.209:3160] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed Apr 22 11:16:20.097647 2026] [:error] [pid 32053:tid 32066] [client 4.223.161.209:3160] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Wed Apr 22 11:16:20.653826 2026] [:error] [pid 32053:tid 32055] [client 4.223.161.209:3160] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Wed Apr 22 11:16:20.923422 2026] [:error] [pid 32053:tid 32076] [client 4.223.161.209:3160] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Wed Apr 22 11:16:21.193135 2026] [:error] [pid 32053:tid 32064] [client 4.223.161.209:3160] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Wed Apr 22 11:16:21.463107 2026] [:error] [pid 32053:tid 32068] [client 4.223.161.209:3160] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Wed Apr 22 11:16:21.732591 2026] [:error] [pid 32053:tid 32066] [client 4.223.161.209:3160] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Wed Apr 22 11:16:22.191672 2026] [:error] [pid 32053:tid 32078] [client 4.223.161.209:3160] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed Apr 22 11:16:22.457043 2026] [:error] [pid 32053:tid 32062] [client 4.223.161.209:3160] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeg9hgzPjXx_ocfbYhtP9QAAA0c"]
[Wed Apr 22 11:16:24.530997 2026] [:error] [pid 31756:tid 31790] [client 4.223.161.209:24644] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeg9iN_WbkXbHaEfhd0UvwAAAkA"]
[Wed Apr 22 11:16:27.263286 2026] [:error] [pid 21682:tid 21731] [client 4.223.161.209:18773] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeg9i5lXWQZUlmPHS3pVawAAAEg"]
[Wed Apr 22 11:16:30.554570 2026] [:error] [pid 31756:tid 31805] [client 4.223.161.209:41426] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeg9jt_WbkXbHaEfhd0UwwAAAk0"]
[Wed Apr 22 11:16:34.640886 2026] [:error] [pid 23041:tid 23055] [client 4.223.161.209:18775] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeg9kkTXx_lUa7xwAb5VygAAAQs"]
[Wed Apr 22 11:16:38.198686 2026] [:error] [pid 21682:tid 21736] [client 4.223.161.209:24663] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeg9lplXWQZUlmPHS3pVgAAAAE0"]
[Wed Apr 22 11:16:39.165118 2026] [:error] [pid 32095:tid 32114] [client 4.223.161.209:4037] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeg9l9fu5Cv628YPe5-T3gAAA5A"]
[Wed Apr 22 11:16:39.897823 2026] [:error] [pid 32095:tid 32099] [client 4.223.161.209:24698] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeg9l9fu5Cv628YPe5-T3wAAA4I"]
[Wed Apr 22 11:16:41.322366 2026] [:error] [pid 31844:tid 31857] [client 4.223.161.209:33972] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeg9mWtAU9CprTB4b3JFLwAAAos"]
[Wed Apr 22 11:16:42.397571 2026] [:error] [pid 23041:tid 23054] [client 4.223.161.209:24662] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeg9mkTXx_lUa7xwAb5V2AAAAQo"]
[Wed Apr 22 11:16:43.849946 2026] [:error] [pid 31706:tid 31717] [client 4.223.161.209:33941] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeg9m7GSe9Rnd4Q_z1iwQgAAAcg"]
[Wed Apr 22 11:16:45.558082 2026] [:error] [pid 31949:tid 31968] [client 4.223.161.209:24698] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeg9nX2WtGZh5JfbMUdjWQAAAxA"]
[Wed Apr 22 11:16:46.486039 2026] [:error] [pid 31706:tid 31723] [client 4.223.161.209:18785] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeg9nrGSe9Rnd4Q_z1iwSAAAAc4"]
[Wed Apr 22 11:16:47.857953 2026] [:error] [pid 21683:tid 21762] [client 4.223.161.209:30162] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeg9n1ZBWT-0diZyYybG7gAAAIw"]
[Wed Apr 22 11:16:49.304506 2026] [:error] [pid 23041:tid 23045] [client 4.223.161.209:33403] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeg9oUTXx_lUa7xwAb5V3wAAAQE"]
[Wed Apr 22 11:16:51.370372 2026] [:error] [pid 31949:tid 31958] [client 4.223.161.209:24672] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeg9o32WtGZh5JfbMUdjXQAAAwY"]
[Wed Apr 22 11:16:53.141110 2026] [:error] [pid 31706:tid 31717] [client 4.223.161.209:57373] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aeg9pbGSe9Rnd4Q_z1iwTgAAAcg"]
[Wed Apr 22 11:16:55.443312 2026] [:error] [pid 23041:tid 23061] [client 4.223.161.209:17498] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aeg9p0TXx_lUa7xwAb5V6QAAARE"]
[Wed Apr 22 11:16:58.525540 2026] [:error] [pid 21682:tid 21735] [client 4.223.161.209:57380] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aeg9qplXWQZUlmPHS3pViQAAAEw"]
[Wed Apr 22 11:17:01.320009 2026] [:error] [pid 31755:tid 31772] [client 4.223.161.209:55656] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aeg9rQz2mYMkg3X8q1vuJwAAAgk"]
[Wed Apr 22 11:17:02.385905 2026] [:error] [pid 21683:tid 21774] [client 4.223.161.209:56374] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeg9rlZBWT-0diZyYybG9AAAAJg"]
[Wed Apr 22 11:17:04.487397 2026] [:error] [pid 31756:tid 31797] [client 4.223.161.209:17991] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeg9sN_WbkXbHaEfhd0U0wAAAkU"]
[Wed Apr 22 11:17:09.110399 2026] [:error] [pid 31756:tid 31791] [client 4.223.161.209:3224] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeg9td_WbkXbHaEfhd0U2QAAAkE"]
[Wed Apr 22 11:17:15.043416 2026] [:error] [pid 31756:tid 31803] [client 4.223.161.209:31750] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeg9u9_WbkXbHaEfhd0U2wAAAks"]
[Wed Apr 22 11:17:23.377896 2026] [:error] [pid 23041:tid 23053] [client 4.223.161.209:43443] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Wed Apr 22 11:17:23.700670 2026] [:error] [pid 23041:tid 23045] [client 4.223.161.209:43443] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Wed Apr 22 11:17:24.272117 2026] [:error] [pid 23041:tid 23055] [client 4.223.161.209:43443] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Wed Apr 22 11:17:24.540969 2026] [:error] [pid 23041:tid 23054] [client 4.223.161.209:43443] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 22 11:17:24.808001 2026] [:error] [pid 23041:tid 23060] [client 4.223.161.209:43443] File does not exist: /usr/local/apache/htdocs/suspended-page/zoo.php
[Wed Apr 22 11:17:25.091667 2026] [:error] [pid 23041:tid 23058] [client 4.223.161.209:43443] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Wed Apr 22 11:17:25.370127 2026] [:error] [pid 23041:tid 23067] [client 4.223.161.209:43443] File does not exist: /usr/local/apache/htdocs/suspended-page/gcqoa.php
[Wed Apr 22 11:17:25.642668 2026] [:error] [pid 23041:tid 23051] [client 4.223.161.209:43443] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Wed Apr 22 11:17:25.926406 2026] [:error] [pid 23041:tid 23047] [client 4.223.161.209:43443] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Wed Apr 22 11:17:26.212948 2026] [:error] [pid 23041:tid 23050] [client 4.223.161.209:43443] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Wed Apr 22 11:17:26.479825 2026] [:error] [pid 23041:tid 23066] [client 4.223.161.209:43443] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aeg9xkTXx_lUa7xwAb5WFQAAARY"]
[Wed Apr 22 11:17:28.776440 2026] [:error] [pid 31755:tid 31781] [client 4.223.161.209:3211] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aeg9yAz2mYMkg3X8q1vuRwAAAhI"]
[Wed Apr 22 11:17:30.346680 2026] [:error] [pid 21682:tid 21744] [client 4.223.161.209:31761] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aeg9yplXWQZUlmPHS3pVqgAAAFU"]
[Wed Apr 22 11:17:31.437751 2026] [:error] [pid 31706:tid 31720] [client 4.223.161.209:3699] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aeg9y7GSe9Rnd4Q_z1iwYQAAAcs"]
[Wed Apr 22 11:17:32.748597 2026] [:error] [pid 32053:tid 32077] [client 4.223.161.209:19823] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeg9zAzPjXx_ocfbYhtQPwAAA1Y"]
[Wed Apr 22 11:17:35.654718 2026] [:error] [pid 21682:tid 21729] [client 4.223.161.209:19793] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeg9z5lXWQZUlmPHS3pVsgAAAEY"]
[Wed Apr 22 11:17:37.973570 2026] [:error] [pid 31755:tid 31769] [client 4.223.161.209:16644] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeg90Qz2mYMkg3X8q1vuVQAAAgY"]
[Wed Apr 22 11:17:39.462098 2026] [:error] [pid 23041:tid 23058] [client 4.223.161.209:43399] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeg900TXx_lUa7xwAb5WJQAAAQ4"]
[Wed Apr 22 11:17:40.429757 2026] [:error] [pid 21682:tid 21725] [client 4.223.161.209:31843] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeg91JlXWQZUlmPHS3pVtAAAAEI"]
[Wed Apr 22 11:17:43.255010 2026] [:error] [pid 23041:tid 23049] [client 4.223.161.209:32696] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeg910TXx_lUa7xwAb5WKAAAAQU"]
[Wed Apr 22 11:17:45.942673 2026] [:error] [pid 31706:tid 31711] [client 4.223.161.209:42340] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeg92bGSe9Rnd4Q_z1iwaAAAAcI"]
[Wed Apr 22 11:17:46.830450 2026] [:error] [pid 23041:tid 23064] [client 4.223.161.209:39766] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeg92kTXx_lUa7xwAb5WLgAAARQ"]
[Wed Apr 22 11:17:47.814089 2026] [:error] [pid 23041:tid 23058] [client 4.223.161.209:41904] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeg920TXx_lUa7xwAb5WMAAAAQ4"]
[Wed Apr 22 11:17:49.469500 2026] [:error] [pid 32095:tid 32109] [client 4.223.161.209:3656] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeg93dfu5Cv628YPe5-UAAAAA4s"]
[Wed Apr 22 11:17:52.151630 2026] [:error] [pid 32053:tid 32059] [client 4.223.161.209:27493] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeg94AzPjXx_ocfbYhtQhgAAA0Q"]
[Wed Apr 22 11:17:53.631390 2026] [:error] [pid 32053:tid 32055] [client 4.223.161.209:3707] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeg94QzPjXx_ocfbYhtQiQAAA0A"]
[Wed Apr 22 11:17:55.121614 2026] [:error] [pid 21683:tid 21768] [client 4.223.161.209:32656] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeg941ZBWT-0diZyYybHEwAAAJI"]
[Wed Apr 22 11:17:59.454987 2026] [:error] [pid 31755:tid 31768] [client 4.223.161.209:19098] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeg95wz2mYMkg3X8q1vucAAAAgU"]
[Wed Apr 22 11:18:03.043525 2026] [:error] [pid 21682:tid 21738] [client 4.223.161.209:27427] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeg965lXWQZUlmPHS3pVzQAAAE8"]
[Wed Apr 22 11:18:04.151348 2026] [:error] [pid 31755:tid 31765] [client 4.223.161.209:34642] [client 4.223.161.209] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeg97Az2mYMkg3X8q1vugwAAAgI"]
[Wed Apr 22 13:57:15.160298 2026] [:error] [pid 6251:tid 6301] [client 92.205.188.156:33388] [client 92.205.188.156] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 92.205.188.156, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aehjOysFAzbyObL-SQ4uyQAAAJA"]
[Wed Apr 22 13:57:15.163950 2026] [:error] [pid 6251:tid 6301] [client 92.205.188.156:33388] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 22 13:57:38.594507 2026] [:error] [pid 9085:tid 9090] [client 92.205.188.156:56250] [client 92.205.188.156] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 92.205.188.156, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "aehjUt-_-or9vQnlWnpmjQAAAUM"]
[Wed Apr 22 13:57:38.597903 2026] [:error] [pid 9085:tid 9090] [client 92.205.188.156:56250] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed Apr 22 16:05:01.137399 2026] [:error] [pid 6250:tid 6257] [client 103.212.117.41:10509] [client 103.212.117.41] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.212.117.41, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeiBLQ-iZeQkqmQVfj7EsQAAAEM"]
[Wed Apr 22 16:05:01.143669 2026] [:error] [pid 6250:tid 6257] [client 103.212.117.41:10509] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 23 04:04:26.092832 2026] [:error] [pid 43083:tid 43086] [client 8.213.218.53:50077] [client 8.213.218.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aekpyjC5hrvNXosL83JWWQAAAME"]
[Thu Apr 23 04:04:27.277431 2026] [:error] [pid 42972:tid 43028] [client 8.213.218.53:50239] [client 8.213.218.53] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "aekpy8OAb-3sOknsk4fShgAAAEw"]
[Thu Apr 23 05:59:06.701753 2026] [:error] [pid 25635:tid 25642] [client 155.248.183.67:59730] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aelEqsRxv6UsgRGKB3Ka-AAAAQM"]
[Thu Apr 23 05:59:08.171573 2026] [:error] [pid 43083:tid 43085] [client 155.248.183.67:62081] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aelErDC5hrvNXosL83KLiQAAAMA"]
[Thu Apr 23 05:59:09.636522 2026] [:error] [pid 42972:tid 43020] [client 155.248.183.67:52093] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aelErcOAb-3sOknsk4fwVQAAAEQ"]
[Thu Apr 23 05:59:09.867704 2026] [:error] [pid 42973:tid 43052] [client 155.248.183.67:63628] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aelErW6I0QqmmmLTHE2kQwAAAIk"]
[Thu Apr 23 05:59:11.095507 2026] [:error] [pid 42971:tid 42995] [client 155.248.183.67:58645] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aelErzEP2_5RswrH8bF7qwAAAAk"]
[Thu Apr 23 05:59:12.323785 2026] [:error] [pid 25635:tid 25644] [client 155.248.183.67:53408] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aelEsMRxv6UsgRGKB3KbJQAAAQU"]
[Thu Apr 23 07:11:41.063035 2026] [:error] [pid 59700:tid 59726] [client 89.245.31.245:35181] [client 89.245.31.245] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 89.245.31.245, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aelVrZXyGZJFeAIDWtk3PQAAAVg"]
[Thu Apr 23 07:11:41.069050 2026] [:error] [pid 59700:tid 59726] [client 89.245.31.245:35181] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 23 07:21:32.029983 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 07:21:32.388141 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 07:21:32.726478 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 07:21:33.290395 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 07:21:33.643713 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 07:21:33.997065 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 07:21:34.337332 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 07:21:34.676686 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 07:21:35.328146 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 07:21:35.644044 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 07:21:35.976785 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 07:21:36.314571 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 07:21:36.736905 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 07:21:37.086861 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 07:21:37.433873 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 07:21:37.749809 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 07:21:38.106542 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 07:21:38.469282 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.142:38867] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 07:21:43.331694 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.142:38867] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelYBzEP2_5RswrH8bGcrQAAABA"]
[Thu Apr 23 07:21:44.905885 2026] [:error] [pid 25635:tid 25654] [client 89.251.0.125:42353] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelYCMRxv6UsgRGKB3LXFgAAAQ8"]
[Thu Apr 23 07:21:46.804675 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.126:23745] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 23 07:21:47.901760 2026] [:error] [pid 42972:tid 43028] [client 89.251.0.126:23745] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelYC8OAb-3sOknsk4cUJQAAAEw"]
[Thu Apr 23 07:21:49.393321 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.113:22981] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 23 07:21:49.721439 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.113:22981] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelYDYAV4GfOOdX8QzoGUAAAAYo"]
[Thu Apr 23 07:21:53.494510 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.126:48393] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 23 07:22:00.505529 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.126:48393] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelYGIV5EysYcTLjmwjnFAAAAcw"]
[Thu Apr 23 07:22:01.770758 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.137:20641] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelYGYV5EysYcTLjmwjnNgAAAcs"]
[Thu Apr 23 07:22:02.519403 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.115:61889] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelYGjEP2_5RswrH8bGdNAAAABA"]
[Thu Apr 23 07:22:03.112636 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.151:25803] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelYG5XyGZJFeAIDWtlOMgAAAUM"]
[Thu Apr 23 07:22:03.690655 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.135:53559] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelYG76vRb9j6psK2ZaBmwAAAhA"]
[Thu Apr 23 07:22:04.315667 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.148:48285] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelYHIV5EysYcTLjmwjncgAAAck"]
[Thu Apr 23 07:22:05.237100 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.132:64331] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelYHTC5hrvNXosL83K-PQAAAMg"]
[Thu Apr 23 07:22:05.871169 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.135:50163] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 23 07:22:06.510461 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.135:50163] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "aelYHoV5EysYcTLjmwjnqwAAAcg"]
[Thu Apr 23 07:22:07.805151 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.137:36603] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelYH76vRb9j6psK2ZaCEAAAAgk"]
[Thu Apr 23 07:22:11.068339 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.142:51589] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelYI76vRb9j6psK2ZaCWwAAAgI"]
[Thu Apr 23 07:22:11.667253 2026] [:error] [pid 64967:tid 64993] [client 89.251.0.133:57457] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 23 07:22:12.034639 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.133:57457] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelYJIAV4GfOOdX8QzoHMAAAAZQ"]
[Thu Apr 23 07:22:12.661851 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.136:32517] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 23 07:22:13.658775 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.136:32517] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 23 07:22:14.677476 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.136:32517] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelYJjC5hrvNXosL83K-1AAAAMM"]
[Thu Apr 23 07:22:15.352735 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.120:30937] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 23 07:22:15.682744 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.120:30937] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelYJ76vRb9j6psK2ZaC2AAAAgI"]
[Thu Apr 23 07:22:16.324848 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.150:53439] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 23 07:22:16.957340 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.150:53439] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelYKL6vRb9j6psK2ZaC9QAAAgw"]
[Thu Apr 23 07:22:18.098550 2026] [:error] [pid 42973:tid 43048] [client 89.251.0.138:42423] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelYKm6I0QqmmmLTHE3RugAAAIU"]
[Thu Apr 23 07:22:19.051350 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.131:63961] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 23 07:22:19.353245 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.131:63961] [client 89.251.0.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "aelYK8OAb-3sOknsk4cUoAAAAE0"]
[Thu Apr 23 07:22:19.965431 2026] [:error] [pid 64998:tid 65026] [client 89.251.0.146:35007] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 23 07:22:20.579262 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.146:35007] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelYLIV5EysYcTLjmwjoagAAAcY"]
[Thu Apr 23 07:22:21.533192 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.139:21951] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelYLcOAb-3sOknsk4cUtQAAAEk"]
[Thu Apr 23 07:22:22.438286 2026] [:error] [pid 42972:tid 43017] [client 89.251.0.115:27189] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelYLsOAb-3sOknsk4cUwAAAAEE"]
[Thu Apr 23 07:22:23.066639 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.135:32799] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelYL4V5EysYcTLjmwjogQAAAdE"]
[Thu Apr 23 07:22:23.723108 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.138:46577] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelYL5XyGZJFeAIDWtlPGQAAAUk"]
[Thu Apr 23 07:22:24.976300 2026] [:error] [pid 64967:tid 64981] [client 89.251.0.146:43879] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 23 07:22:25.284747 2026] [:error] [pid 64967:tid 64988] [client 89.251.0.146:43879] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelYMYAV4GfOOdX8QzoH6AAAAZM"]
[Thu Apr 23 07:22:25.923446 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.135:33993] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelYMYV5EysYcTLjmwjonQAAAcY"]
[Thu Apr 23 07:22:26.568656 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.135:52721] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelYMsOAb-3sOknsk4cU2AAAAEg"]
[Thu Apr 23 07:22:27.965366 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.134:24339] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 23 07:22:28.898959 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.134:24339] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 23 07:22:30.558852 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.134:24339] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelYNr6vRb9j6psK2ZaD0gAAAgs"]
[Thu Apr 23 07:22:32.460725 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.121:64651] [client 89.251.0.121] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.121, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelYOIV5EysYcTLjmwjo9wAAAcI"]
[Thu Apr 23 07:22:32.784902 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.121:64651] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 23 07:22:34.529811 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.121:64651] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 23 07:22:34.849672 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.121:64651] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 23 07:22:37.460963 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.121:64651] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelYPYV5EysYcTLjmwjpNwAAAco"]
[Thu Apr 23 07:22:38.492896 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.120:54357] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 23 07:22:38.830898 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.120:54357] [client 89.251.0.120] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.120, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelYPr6vRb9j6psK2ZaEmQAAAgs"]
[Thu Apr 23 07:22:39.555626 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.120:54357] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelYP76vRb9j6psK2ZaErAAAAhE"]
[Thu Apr 23 07:22:41.521941 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.148:58631] [client 89.251.0.148] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aelYQcOAb-3sOknsk4cVYAAAAFc"]
[Thu Apr 23 07:22:42.181144 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.138:30339] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 23 07:22:42.816596 2026] [:error] [pid 65000:tid 65054] [client 89.251.0.138:30339] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 23 07:22:43.427602 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.138:30339] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelYQ76vRb9j6psK2ZaE7AAAAgI"]
[Thu Apr 23 07:22:44.039600 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.117:23733] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 23 07:22:45.044797 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.117:23733] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 23 07:22:45.698666 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.117:23733] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 23 07:22:46.306585 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.117:23733] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 23 07:22:46.616417 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.117:23733] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelYRoV5EysYcTLjmwjpugAAAcY"]
[Thu Apr 23 07:22:47.242017 2026] [:error] [pid 42971:tid 42996] [client 89.251.0.120:39561] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 23 07:22:47.575718 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.120:39561] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 23 07:22:47.880593 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.120:39561] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelYRzEP2_5RswrH8bGfEwAAAAU"]
[Thu Apr 23 07:22:48.813425 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.127:40543] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 23 07:22:49.686168 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.127:40543] [client 89.251.0.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.127, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelYSTEP2_5RswrH8bGfMwAAABA"]
[Thu Apr 23 07:22:49.997561 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.127:40543] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelYSTEP2_5RswrH8bGfOgAAAAg"]
[Thu Apr 23 07:22:53.941622 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.134:58799] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 23 07:22:55.974972 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.134:58799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 23 07:22:56.280356 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.134:58799] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelYUIV5EysYcTLjmwjqWAAAAdM"]
[Thu Apr 23 07:22:56.891626 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.125:44683] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 23 07:22:58.303777 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.115:52723] [client 89.251.0.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.115, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelYUpXyGZJFeAIDWtlQYgAAAVM"]
[Thu Apr 23 07:22:58.657756 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.115:52723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 23 07:22:59.082982 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.115:52723] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 23 07:22:59.409790 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.115:52723] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 23 07:22:59.779556 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.115:52723] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelYU5XyGZJFeAIDWtlQcgAAAU8"]
[Thu Apr 23 07:23:00.431805 2026] [:error] [pid 42972:tid 43028] [client 89.251.0.115:38663] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 23 07:23:00.937482 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.115:38663] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelYVMOAb-3sOknsk4cWJAAAAEo"]
[Thu Apr 23 07:23:01.886289 2026] [:error] [pid 64967:tid 64981] [client 89.251.0.136:46989] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 23 07:23:02.222930 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.136:46989] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelYVoAV4GfOOdX8QzoJhwAAAZE"]
[Thu Apr 23 07:23:03.597532 2026] [:error] [pid 25635:tid 25647] [client 89.251.0.147:49449] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 23 07:23:03.968581 2026] [:error] [pid 25635:tid 25649] [client 89.251.0.147:49449] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelYV8Rxv6UsgRGKB3LZ8QAAAQo"]
[Thu Apr 23 07:23:04.648124 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.142:41481] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelYWL6vRb9j6psK2ZaGgwAAAgk"]
[Thu Apr 23 07:23:05.326146 2026] [:error] [pid 64967:tid 64978] [client 89.251.0.128:55847] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 23 07:23:05.692310 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.128:55847] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Apr 23 07:23:06.994071 2026] [:error] [pid 64967:tid 64976] [client 89.251.0.128:55847] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aelYWoAV4GfOOdX8QzoJrQAAAYc"]
[Thu Apr 23 07:23:08.527337 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.116:30593] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aelYXL6vRb9j6psK2ZaHHgAAAg8"]
[Thu Apr 23 07:23:10.228830 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.139:23847] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aelYXpXyGZJFeAIDWtlQywAAAU0"]
[Thu Apr 23 07:23:17.291660 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.151:49819] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Apr 23 07:23:17.900152 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.151:49819] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Apr 23 07:23:18.220120 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.151:49819] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aelYZjEP2_5RswrH8bGf4gAAAAY"]
[Thu Apr 23 07:23:18.841478 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.132:42769] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 23 07:23:19.495345 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.132:42769] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/click.php"] [unique_id "aelYZ8OAb-3sOknsk4cW1wAAAFU"]
[Thu Apr 23 07:23:21.069538 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.127:54961] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aelYab6vRb9j6psK2ZaILwAAAgs"]
[Thu Apr 23 07:23:22.065312 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.128:43481] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 23 07:23:23.293492 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.128:43481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 23 07:23:23.920421 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.128:43481] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 23 07:23:24.247560 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.128:43481] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aelYbL6vRb9j6psK2ZaIbAAAAgU"]
[Thu Apr 23 07:23:25.969470 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.146:53975] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aelYbYAV4GfOOdX8QzoKKAAAAYE"]
[Thu Apr 23 07:23:26.573781 2026] [:error] [pid 65000:tid 65054] [client 89.251.0.138:48549] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aelYbr6vRb9j6psK2ZaIjAAAAhU"]
[Thu Apr 23 07:23:27.198168 2026] [:error] [pid 64998:tid 65026] [client 89.251.0.148:30979] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aelYb4V5EysYcTLjmwjriAAAAdg"]
[Thu Apr 23 07:23:27.860686 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.119:43461] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Apr 23 07:23:28.174765 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.119:43461] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aelYcIV5EysYcTLjmwjrlAAAAdA"]
[Thu Apr 23 07:23:28.820459 2026] [:error] [pid 59700:tid 59708] [client 89.251.0.126:62193] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aelYcJXyGZJFeAIDWtlRZQAAAUY"]
[Thu Apr 23 07:23:29.418181 2026] [:error] [pid 42973:tid 43058] [client 89.251.0.113:30285] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Apr 23 07:23:30.046283 2026] [:error] [pid 42973:tid 43059] [client 89.251.0.113:30285] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aelYcm6I0QqmmmLTHE3VBgAAAJA"]
[Thu Apr 23 07:23:31.279767 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.151:63507] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aelYc76vRb9j6psK2ZaJGwAAAgQ"]
[Thu Apr 23 07:23:31.888906 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.132:33825] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aelYc76vRb9j6psK2ZaJMgAAAgs"]
[Thu Apr 23 07:23:32.522990 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.121:31175] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aelYdL6vRb9j6psK2ZaJTgAAAgs"]
[Thu Apr 23 07:23:33.457603 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.151:44469] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aelYdcOAb-3sOknsk4cXeQAAAFQ"]
[Thu Apr 23 07:23:34.766431 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.135:40903] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aelYdjEP2_5RswrH8bGgOQAAAAE"]
[Thu Apr 23 07:23:35.411931 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.137:51185] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Apr 23 07:23:36.509396 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.137:51185] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Apr 23 07:23:36.914799 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.137:51185] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aelYeIAV4GfOOdX8QzoKcQAAAYI"]
[Thu Apr 23 07:23:38.079377 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.126:45481] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Apr 23 07:23:38.419355 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.126:45481] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Apr 23 07:23:39.969545 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.126:45481] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aelYe8Rxv6UsgRGKB3LbngAAAQc"]
[Thu Apr 23 07:23:41.651797 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.138:64695] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aelYfb6vRb9j6psK2ZaKfQAAAhI"]
[Thu Apr 23 07:23:42.366617 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.121:29589] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aelYfoV5EysYcTLjmwjsLwAAAcg"]
[Thu Apr 23 07:23:44.259175 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.151:28425] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aelYgDEP2_5RswrH8bGgUQAAAAU"]
[Thu Apr 23 07:23:45.510980 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.137:44795] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Apr 23 07:23:45.904629 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.137:44795] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Apr 23 07:23:46.259838 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.137:44795] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Apr 23 07:23:46.605818 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.137:44795] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Apr 23 07:23:48.765797 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.137:44795] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aelYhL6vRb9j6psK2ZaLWAAAAgI"]
[Thu Apr 23 07:23:49.790460 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.117:41641] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aelYhTEP2_5RswrH8bGggAAAABA"]
[Thu Apr 23 07:23:50.452659 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.126:38265] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aelYhpXyGZJFeAIDWtlR9QAAAU0"]
[Thu Apr 23 07:23:51.082191 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.120:64205] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aelYhzC5hrvNXosL83LCNgAAAM4"]
[Thu Apr 23 07:23:51.722380 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.121:57235] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aelYh76vRb9j6psK2ZaLpQAAAgY"]
[Thu Apr 23 07:23:52.408606 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.137:62271] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aelYiL6vRb9j6psK2ZaLuwAAAhQ"]
[Thu Apr 23 07:23:53.439853 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.116:22095] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aelYib6vRb9j6psK2ZaL1QAAAhM"]
[Thu Apr 23 07:23:54.019850 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.146:59067] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aelYisOAb-3sOknsk4cYGAAAAFU"]
[Thu Apr 23 07:23:54.658673 2026] [:error] [pid 42972:tid 43031] [client 89.251.0.147:38251] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aelYisOAb-3sOknsk4cYHAAAAE8"]
[Thu Apr 23 07:23:55.404866 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.143:24713] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aelYizEP2_5RswrH8bGgpAAAABI"]
[Thu Apr 23 07:23:56.782385 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.117:29401] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aelYjDC5hrvNXosL83LCfQAAANQ"]
[Thu Apr 23 07:23:57.708350 2026] [:error] [pid 42973:tid 43060] [client 89.251.0.129:20039] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aelYjW6I0QqmmmLTHE3VggAAAJE"]
[Thu Apr 23 07:23:58.285445 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.115:41841] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Apr 23 07:24:00.080697 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.115:41841] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aelYkL6vRb9j6psK2ZaMlgAAAg8"]
[Thu Apr 23 07:24:01.509840 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.133:20129] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aelYkb6vRb9j6psK2ZaMrQAAAhg"]
[Thu Apr 23 07:24:02.862007 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.131:38565] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Apr 23 07:24:03.156961 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.131:38565] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aelYk76vRb9j6psK2ZaM0AAAAgM"]
[Thu Apr 23 07:24:04.060560 2026] [:error] [pid 59700:tid 59725] [client 89.251.0.136:43077] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Apr 23 07:24:04.341031 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.136:43077] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Apr 23 07:24:04.714485 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.136:43077] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Apr 23 07:24:05.023202 2026] [:error] [pid 59700:tid 59708] [client 89.251.0.136:43077] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aelYlZXyGZJFeAIDWtlSZwAAAUY"]
[Thu Apr 23 07:24:05.743070 2026] [:error] [pid 43083:tid 43086] [client 89.251.0.124:52227] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Apr 23 07:24:06.058514 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.124:52227] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aelYljC5hrvNXosL83LCyQAAANc"]
[Thu Apr 23 07:24:07.446327 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.125:44337] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 23 07:24:07.817939 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.125:44337] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Apr 23 07:24:08.160386 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.125:44337] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Apr 23 07:24:09.782564 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.125:44337] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Apr 23 07:24:10.113191 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.125:44337] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Apr 23 07:24:10.749629 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.125:44337] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Apr 23 07:24:11.651200 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.125:44337] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 23 07:24:11.980503 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.125:44337] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aelYmzEP2_5RswrH8bGhHgAAAAc"]
[Thu Apr 23 07:24:12.571933 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.127:34865] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aelYnIAV4GfOOdX8QzoLYQAAAYo"]
[Thu Apr 23 07:24:13.169694 2026] [:error] [pid 64967:tid 64992] [client 89.251.0.138:44723] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Apr 23 07:24:13.459617 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.138:44723] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aelYnYAV4GfOOdX8QzoLcwAAAYE"]
[Thu Apr 23 07:24:14.390469 2026] [:error] [pid 64998:tid 65026] [client 89.251.0.145:34191] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 23 07:24:14.701363 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.145:34191] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aelYnoV5EysYcTLjmwjuIAAAAcI"]
[Thu Apr 23 07:24:15.301080 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.114:22061] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aelYn4V5EysYcTLjmwjuKgAAAcM"]
[Thu Apr 23 07:24:17.386287 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.143:38441] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aelYob6vRb9j6psK2ZaOZAAAAgo"]
[Thu Apr 23 07:24:18.106766 2026] [:error] [pid 64998:tid 65023] [client 89.251.0.120:54373] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "aelYooV5EysYcTLjmwjuRgAAAdU"]
[Thu Apr 23 07:24:19.745813 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.151:52111] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Apr 23 07:24:20.439422 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.151:52111] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aelYpIV5EysYcTLjmwjuhwAAAcM"]
[Thu Apr 23 07:24:21.401527 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.137:32603] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Apr 23 07:24:22.041189 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.137:32603] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/function.php"] [unique_id "aelYpjEP2_5RswrH8bGhaAAAABQ"]
[Thu Apr 23 07:24:22.704949 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.132:52001] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aelYpoV5EysYcTLjmwjutQAAAcQ"]
[Thu Apr 23 07:24:23.714592 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.120:37661] [client 89.251.0.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content.php"] [unique_id "aelYp8OAb-3sOknsk4cZJQAAAEg"]
[Thu Apr 23 07:24:24.320452 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.135:51777] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Apr 23 07:24:24.825644 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.135:51777] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aelYqDC5hrvNXosL83LDRAAAAMo"]
[Thu Apr 23 07:24:26.015438 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.135:56885] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aelYqpXyGZJFeAIDWtlTCgAAAVQ"]
[Thu Apr 23 07:24:27.239201 2026] [:error] [pid 25635:tid 25657] [client 89.251.0.139:37171] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Apr 23 07:24:27.628003 2026] [:error] [pid 25635:tid 25642] [client 89.251.0.139:37171] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Apr 23 07:24:28.281374 2026] [:error] [pid 25635:tid 25663] [client 89.251.0.139:37171] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Apr 23 07:24:28.904370 2026] [:error] [pid 25635:tid 25657] [client 89.251.0.139:37171] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aelYrMRxv6UsgRGKB3LdigAAARI"]
[Thu Apr 23 07:24:29.535356 2026] [:error] [pid 64967:tid 64976] [client 89.251.0.139:37589] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aelYrYAV4GfOOdX8QzoMhwAAAYc"]
[Thu Apr 23 07:24:31.887528 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.151:36663] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 23 07:24:32.238973 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.151:36663] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/index.php"] [unique_id "aelYsMOAb-3sOknsk4cZhgAAAFU"]
[Thu Apr 23 07:24:32.907498 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.138:33501] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aelYsIV5EysYcTLjmwjvTwAAAcI"]
[Thu Apr 23 07:24:33.597374 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.131:43253] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aelYsYV5EysYcTLjmwjvVgAAAdI"]
[Thu Apr 23 07:24:35.487412 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.134:39601] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Apr 23 07:24:35.910752 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.134:39601] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aelYszC5hrvNXosL83LD5QAAAM4"]
[Thu Apr 23 07:24:36.941916 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.147:26179] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aelYtDC5hrvNXosL83LD9gAAANQ"]
[Thu Apr 23 07:24:37.566755 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 23 07:24:37.873528 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Apr 23 07:24:38.498413 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Apr 23 07:24:39.765139 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.134:57011] [client 89.251.0.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.134, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/js/wp-login.php"] [unique_id "aelYt76vRb9j6psK2ZaQHQAAAhA"]
[Thu Apr 23 07:24:40.513573 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Apr 23 07:24:40.814868 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Apr 23 07:24:41.142466 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Apr 23 07:24:41.748136 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.134:57011] [client 89.251.0.134] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.134, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aelYub6vRb9j6psK2ZaQTwAAAgs"]
[Thu Apr 23 07:24:42.734635 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Apr 23 07:24:43.037955 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Apr 23 07:24:43.721143 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Apr 23 07:24:44.397177 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 23 07:24:45.319437 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Apr 23 07:24:47.672697 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 23 07:24:48.028278 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Apr 23 07:24:49.666897 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.134:57011] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 23 07:24:50.351564 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.134:57011] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aelYwr6vRb9j6psK2ZaRKgAAAhI"]
[Thu Apr 23 07:24:51.591298 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.141:54699] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Apr 23 07:24:51.890373 2026] [:error] [pid 25635:tid 25654] [client 89.251.0.141:54699] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aelYw8Rxv6UsgRGKB3LeVwAAAQ8"]
[Thu Apr 23 07:24:52.799444 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.146:64837] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Apr 23 07:24:53.121654 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.146:64837] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aelYxTC5hrvNXosL83LEhgAAAMQ"]
[Thu Apr 23 07:24:54.582163 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.125:62427] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Apr 23 07:24:55.215615 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.125:62427] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Apr 23 07:24:55.888129 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.125:62427] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Apr 23 07:24:56.244302 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.125:62427] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Apr 23 07:24:56.822716 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.125:62427] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aelYyDC5hrvNXosL83LEswAAANQ"]
[Thu Apr 23 07:24:57.446049 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.124:55637] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Apr 23 07:24:57.750586 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.124:55637] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Apr 23 07:24:58.056691 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.124:55637] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aelYyoV5EysYcTLjmwjwUwAAAcs"]
[Thu Apr 23 07:24:59.082686 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.148:59411] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aelYy76vRb9j6psK2ZaSAQAAAgw"]
[Thu Apr 23 07:25:00.149271 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.133:37485] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Apr 23 07:25:01.489729 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.133:37485] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Apr 23 07:25:02.444101 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.133:37485] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Apr 23 07:25:02.812680 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.133:37485] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aelYzsRxv6UsgRGKB3LenAAAAQQ"]
[Thu Apr 23 07:25:03.468568 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.145:65235] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aelYz8Rxv6UsgRGKB3LenwAAARE"]
[Thu Apr 23 07:25:06.292153 2026] [:error] [pid 64967:tid 64982] [client 89.251.0.124:47941] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Apr 23 07:25:06.941615 2026] [:error] [pid 64967:tid 64976] [client 89.251.0.124:47941] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aelY0oAV4GfOOdX8QzoOWQAAAYc"]
[Thu Apr 23 07:25:07.994878 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.136:48387] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "aelY076vRb9j6psK2ZaSmgAAAgE"]
[Thu Apr 23 07:25:09.106093 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.140:40937] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Apr 23 07:25:09.460414 2026] [:error] [pid 43083:tid 43086] [client 89.251.0.140:40937] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Apr 23 07:25:09.790314 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.140:40937] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aelY1TC5hrvNXosL83LFRQAAANc"]
[Thu Apr 23 07:25:11.287627 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.113:31197] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Apr 23 07:25:11.628278 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.113:31197] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Apr 23 07:25:12.396255 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.113:31197] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 23 07:25:13.369401 2026] [:error] [pid 59700:tid 59719] [client 89.251.0.113:31197] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aelY2ZXyGZJFeAIDWtlUuAAAAVE"]
[Thu Apr 23 07:25:14.018136 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.147:36967] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Apr 23 07:25:15.024751 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.147:36967] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aelY24AV4GfOOdX8QzoOywAAAZE"]
[Thu Apr 23 07:25:16.252651 2026] [:error] [pid 25635:tid 25640] [client 89.251.0.142:39573] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Apr 23 07:25:17.853050 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.142:39573] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Apr 23 07:25:18.152446 2026] [:error] [pid 25635:tid 25642] [client 89.251.0.142:39573] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Apr 23 07:25:18.767177 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.142:39573] [client 89.251.0.142] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.142, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aelY3sRxv6UsgRGKB3LfFAAAAQc"]
[Thu Apr 23 07:25:19.127801 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.142:39573] [client 89.251.0.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-conflg.php"] [unique_id "aelY38Rxv6UsgRGKB3LfFgAAARA"]
[Thu Apr 23 07:25:23.955605 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.134:30445] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aelY4zEP2_5RswrH8bGkDgAAABY"]
[Thu Apr 23 07:25:24.590825 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.150:23391] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Apr 23 07:25:24.939663 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.150:23391] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aelY5DEP2_5RswrH8bGkIQAAAAQ"]
[Thu Apr 23 07:25:25.771448 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.120:33839] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Apr 23 07:25:26.451846 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.120:33839] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Apr 23 07:25:31.450398 2026] [:error] [pid 64998:tid 65023] [client 89.251.0.120:33839] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aelY64V5EysYcTLjmwjx0QAAAdU"]
[Thu Apr 23 07:25:32.338834 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.114:50313] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Apr 23 07:25:32.649356 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.114:50313] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 23 07:25:32.965823 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.114:50313] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aelY7L6vRb9j6psK2ZaUKQAAAgw"]
[Thu Apr 23 07:25:33.607390 2026] [:error] [pid 64967:tid 64988] [client 89.251.0.116:37291] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aelY7YAV4GfOOdX8QzoPhAAAAZM"]
[Thu Apr 23 07:25:34.310099 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.151:60193] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Apr 23 07:25:34.670099 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.151:60193] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Apr 23 07:25:35.348677 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.151:60193] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aelY7zEP2_5RswrH8bGkqgAAAAw"]
[Thu Apr 23 07:25:36.004864 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.120:49595] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Apr 23 07:25:36.643547 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.120:49595] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Apr 23 07:25:36.953708 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.120:49595] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aelY8DC5hrvNXosL83LGZgAAANU"]
[Thu Apr 23 07:25:37.922841 2026] [:error] [pid 59700:tid 59720] [client 89.251.0.142:39025] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/db.php"] [unique_id "aelY8ZXyGZJFeAIDWtlVlgAAAVI"]
[Thu Apr 23 07:25:38.552962 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.116:28381] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aelY8jC5hrvNXosL83LGhwAAAMk"]
[Thu Apr 23 07:25:39.220326 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.146:50059] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aelY84V5EysYcTLjmwjyhwAAAcA"]
[Thu Apr 23 07:25:39.897936 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.120:36271] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aelY88OAb-3sOknsk4ccsgAAAFE"]
[Thu Apr 23 07:25:40.514201 2026] [:error] [pid 42972:tid 43031] [client 89.251.0.137:45125] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aelY9MOAb-3sOknsk4cctwAAAE8"]
[Thu Apr 23 07:25:41.199804 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.148:56851] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aelY9TEP2_5RswrH8bGk9gAAAA4"]
[Thu Apr 23 07:25:42.651059 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.151:51245] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aelY9jEP2_5RswrH8bGlLAAAAAE"]
[Thu Apr 23 07:25:44.276873 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.132:35923] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aelY-MOAb-3sOknsk4cc5QAAAEI"]
[Thu Apr 23 07:25:44.886777 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.151:39423] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aelY-MOAb-3sOknsk4cc8AAAAFA"]
[Thu Apr 23 07:25:45.487684 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.147:36253] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aelY-b6vRb9j6psK2ZaUdwAAAg8"]
[Thu Apr 23 07:25:46.168457 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.145:48771] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aelY-r6vRb9j6psK2ZaUhQAAAhM"]
[Thu Apr 23 07:25:46.797060 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.137:23091] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Thu Apr 23 07:25:48.611262 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.137:23091] [client 89.251.0.137] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.137, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aelY_L6vRb9j6psK2ZaUxAAAAhQ"]
[Thu Apr 23 07:25:50.363020 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.137:23091] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aelY_r6vRb9j6psK2ZaU0AAAAhY"]
[Thu Apr 23 07:25:51.677335 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.145:43139] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Apr 23 07:25:52.026728 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.145:43139] [client 89.251.0.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-fmfile.php"] [unique_id "aelZAMOAb-3sOknsk4cdKwAAAFY"]
[Thu Apr 23 07:25:52.675035 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.140:54817] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Apr 23 07:25:54.303793 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.140:54817] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Apr 23 07:25:54.638200 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.140:54817] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Apr 23 07:26:00.174015 2026] [:error] [pid 42971:tid 42988] [client 89.251.0.140:54817] [client 89.251.0.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/options-writing.php"] [unique_id "aelZCDEP2_5RswrH8bGl7gAAAAI"]
[Thu Apr 23 07:26:02.006895 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.140:26741] [client 89.251.0.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/options-writing.php"] [unique_id "aelZCjEP2_5RswrH8bGl_gAAAAA"]
[Thu Apr 23 07:26:03.661254 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.135:23907] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Apr 23 07:26:04.114737 2026] [:error] [pid 65000:tid 65054] [client 89.251.0.135:23907] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Apr 23 07:26:04.499759 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.135:23907] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Apr 23 07:26:04.793284 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.135:23907] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Thu Apr 23 07:26:05.151070 2026] [:error] [pid 65000:tid 65054] [client 89.251.0.135:23907] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aelZDb6vRb9j6psK2ZaVeAAAAhU"]
[Thu Apr 23 07:26:05.784021 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.143:33409] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aelZDb6vRb9j6psK2ZaVfQAAAhc"]
[Thu Apr 23 07:26:06.354357 2026] [:error] [pid 42973:tid 43062] [client 89.251.0.125:47945] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aelZDm6I0QqmmmLTHE3ZBAAAAJM"]
[Thu Apr 23 07:26:07.250140 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.124:44389] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Apr 23 07:26:07.550379 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.124:44389] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Apr 23 07:26:08.140750 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.124:44389] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Apr 23 07:26:08.766466 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.124:44389] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aelZEL6vRb9j6psK2ZaVqwAAAhA"]
[Thu Apr 23 07:26:09.383449 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.121:30953] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aelZETC5hrvNXosL83LHqQAAANY"]
[Thu Apr 23 07:26:10.277365 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.142:47687] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aelZEoV5EysYcTLjmwjzrgAAAc8"]
[Thu Apr 23 07:26:12.710376 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.123:36631] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aelZFJXyGZJFeAIDWtlW1QAAAVQ"]
[Thu Apr 23 07:26:13.660628 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.120:42883] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aelZFZXyGZJFeAIDWtlW4AAAAUk"]
[Thu Apr 23 07:26:14.937073 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.138:36693] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aelZFoV5EysYcTLjmwjz1QAAAcc"]
[Thu Apr 23 07:26:22.000094 2026] [:error] [pid 59700:tid 59720] [client 89.251.0.117:44259] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aelZHZXyGZJFeAIDWtlXkQAAAVI"]
[Thu Apr 23 07:26:22.706889 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.129:58915] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Apr 23 07:26:23.007668 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.129:58915] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/about.php"] [unique_id "aelZH76vRb9j6psK2ZaWWQAAAgI"]
[Thu Apr 23 07:26:27.168811 2026] [:error] [pid 64967:tid 64993] [client 89.251.0.138:55853] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Apr 23 07:26:30.538676 2026] [:error] [pid 64967:tid 64973] [client 89.251.0.138:55853] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Apr 23 07:26:30.946484 2026] [:error] [pid 64967:tid 64977] [client 89.251.0.138:55853] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aelZJoAV4GfOOdX8QzoRdwAAAYg"]
[Thu Apr 23 07:26:32.227707 2026] [:error] [pid 25635:tid 25649] [client 89.251.0.113:48073] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aelZKMRxv6UsgRGKB3LgvAAAAQo"]
[Thu Apr 23 07:26:34.059596 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.127:59699] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aelZKpXyGZJFeAIDWtlYDgAAAUg"]
[Thu Apr 23 07:26:35.997435 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.150:46801] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aelZK8Rxv6UsgRGKB3LgzQAAAQ0"]
[Thu Apr 23 07:26:36.938764 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.116:21019] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Apr 23 07:26:37.236685 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.116:21019] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aelZLTC5hrvNXosL83LIgQAAAMc"]
[Thu Apr 23 07:26:37.941253 2026] [:error] [pid 42971:tid 43010] [client 89.251.0.120:32147] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aelZLTEP2_5RswrH8bGoKQAAABg"]
[Thu Apr 23 07:26:40.525361 2026] [:error] [pid 64967:tid 64992] [client 89.251.0.113:40223] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aelZMIAV4GfOOdX8QzoRvQAAAZc"]
[Thu Apr 23 07:26:41.160033 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.116:63481] [client 89.251.0.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "aelZMcOAb-3sOknsk4ce0QAAAEU"]
[Thu Apr 23 07:26:41.763777 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.116:20287] [client 89.251.0.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "aelZMZXyGZJFeAIDWtlYZQAAAUQ"]
[Thu Apr 23 07:26:42.320487 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.126:29799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Apr 23 07:26:43.556155 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.126:29799] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Apr 23 07:26:43.843716 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.126:29799] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aelZM4V5EysYcTLjmwj0lwAAAdQ"]
[Thu Apr 23 07:26:45.713609 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.136:22935] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Thu Apr 23 07:26:46.379129 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.136:22935] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZNjC5hrvNXosL83LI1wAAAMo"]
[Thu Apr 23 07:26:47.054855 2026] [:error] [pid 25635:tid 25641] [client 89.251.0.113:46053] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aelZN8Rxv6UsgRGKB3LhBQAAAQI"]
[Thu Apr 23 07:26:47.965898 2026] [:error] [pid 42973:tid 43048] [client 89.251.0.132:57287] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aelZN26I0QqmmmLTHE3aCwAAAIU"]
[Thu Apr 23 07:26:49.148607 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.147:50021] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aelZOTEP2_5RswrH8bGoqgAAAA4"]
[Thu Apr 23 07:26:49.766736 2026] [:error] [pid 42973:tid 43060] [client 89.251.0.145:34879] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aelZOW6I0QqmmmLTHE3aHQAAAJE"]
[Thu Apr 23 07:26:50.669980 2026] [:error] [pid 64967:tid 64984] [client 89.251.0.148:57103] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Thu Apr 23 07:26:55.756465 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.148:57103] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aelZP4AV4GfOOdX8QzoSHAAAAZE"]
[Thu Apr 23 07:26:57.106325 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.145:53675] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aelZQTC5hrvNXosL83LJJgAAAMI"]
[Thu Apr 23 07:26:57.866484 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.147:57561] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aelZQTC5hrvNXosL83LJNwAAAMo"]
[Thu Apr 23 07:27:02.853992 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.128:23447] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Apr 23 07:27:03.143354 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.128:23447] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aelZRzC5hrvNXosL83LJmwAAAMQ"]
[Thu Apr 23 07:27:04.178189 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.142:57097] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aelZSIV5EysYcTLjmwj1rwAAAdI"]
[Thu Apr 23 07:27:06.315446 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.115:63993] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aelZSpXyGZJFeAIDWtlY9AAAAVQ"]
[Thu Apr 23 07:27:07.241396 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.115:57623] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Thu Apr 23 07:27:07.526780 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.115:57623] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aelZS76vRb9j6psK2ZaX7wAAAgw"]
[Thu Apr 23 07:27:09.455640 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.135:52359] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aelZTYV5EysYcTLjmwj1-QAAAc8"]
[Thu Apr 23 07:27:10.604411 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.117:24677] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/as.php"] [unique_id "aelZTjEP2_5RswrH8bGprwAAAAE"]
[Thu Apr 23 07:27:11.585975 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.150:63545] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aelZT8OAb-3sOknsk4cfzwAAAFY"]
[Thu Apr 23 07:27:12.220877 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.142:58401] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/install.php"] [unique_id "aelZUJXyGZJFeAIDWtlZBwAAAU0"]
[Thu Apr 23 07:27:12.880382 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.115:34423] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aelZUDEP2_5RswrH8bGpygAAAAQ"]
[Thu Apr 23 07:27:15.548153 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.116:55565] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aelZU4AV4GfOOdX8QzoS1gAAAYo"]
[Thu Apr 23 07:27:20.715346 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.150:55997] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aelZWIV5EysYcTLjmwj2YgAAAdA"]
[Thu Apr 23 07:27:21.662696 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.116:35529] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 23 07:27:21.997772 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.116:35529] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aelZWb6vRb9j6psK2ZaYeQAAAg4"]
[Thu Apr 23 07:27:23.376423 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.133:32835] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aelZW4AV4GfOOdX8QzoTHwAAAYM"]
[Thu Apr 23 07:27:23.981399 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.115:61453] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Apr 23 07:27:25.567342 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.115:61453] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aelZXcOAb-3sOknsk4cgngAAAFU"]
[Thu Apr 23 07:27:26.578958 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.119:35757] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aelZXoV5EysYcTLjmwj2kgAAAcw"]
[Thu Apr 23 07:27:27.586146 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.139:44697] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aelZX8OAb-3sOknsk4cgsAAAAFU"]
[Thu Apr 23 07:27:28.774299 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.117:60985] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aelZYL6vRb9j6psK2ZaY7wAAAgk"]
[Thu Apr 23 07:27:35.203560 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.147:49675] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aelZZzC5hrvNXosL83LLRQAAAM0"]
[Thu Apr 23 07:27:35.798913 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.113:33757] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aelZZ26I0QqmmmLTHE3bAQAAAIc"]
[Thu Apr 23 07:27:37.981912 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.123:46725] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aelZaTEP2_5RswrH8bGqzQAAAA8"]
[Thu Apr 23 07:27:39.903402 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.151:42051] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZa8OAb-3sOknsk4chJwAAAFc"]
[Thu Apr 23 07:27:41.772217 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.151:48731] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aelZbW6I0QqmmmLTHE3bGQAAAIg"]
[Thu Apr 23 07:27:42.948166 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.120:30165] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aelZbjEP2_5RswrH8bGq_wAAAAc"]
[Thu Apr 23 07:27:43.560786 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.117:39035] [client 89.251.0.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.117, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aelZbzC5hrvNXosL83LLfQAAANg"]
[Thu Apr 23 07:27:43.577498 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.117:39035] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Thu Apr 23 07:27:43.969966 2026] [:error] [pid 43083:tid 43108] [client 89.251.0.117:39035] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aelZbzC5hrvNXosL83LLhAAAANc"]
[Thu Apr 23 07:27:45.609871 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.129:50735] [client 89.251.0.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php%20"] [unique_id "aelZccOAb-3sOknsk4chbwAAAFM"]
[Thu Apr 23 07:27:46.522087 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.151:63443] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Apr 23 07:27:46.837777 2026] [:error] [pid 25635:tid 25649] [client 89.251.0.151:63443] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aelZcsRxv6UsgRGKB3LiSAAAAQo"]
[Thu Apr 23 07:27:47.625620 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.138:54115] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/network.php"] [unique_id "aelZc76vRb9j6psK2ZaZ4QAAAgQ"]
[Thu Apr 23 07:27:48.387597 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.123:51667] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Thu Apr 23 07:27:52.058796 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.123:51667] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aelZeDC5hrvNXosL83LL1QAAAMQ"]
[Thu Apr 23 07:27:52.686485 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.151:38733] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aelZeDC5hrvNXosL83LL4AAAAMk"]
[Thu Apr 23 07:27:55.230929 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.133:51157] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aelZe4V5EysYcTLjmwj3jgAAAcQ"]
[Thu Apr 23 07:27:55.958357 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.117:44923] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aelZe76vRb9j6psK2ZaaXQAAAhE"]
[Thu Apr 23 07:27:56.567747 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.143:64029] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Thu Apr 23 07:27:57.125043 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.143:64029] [client 89.251.0.143] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.143, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aelZfTC5hrvNXosL83LMQwAAAMA"]
[Thu Apr 23 07:27:58.289911 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.143:64029] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aelZfjC5hrvNXosL83LMVQAAAMA"]
[Thu Apr 23 07:28:00.067566 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.123:46009] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aelZgJXyGZJFeAIDWtlalAAAAUs"]
[Thu Apr 23 07:28:00.709720 2026] [:error] [pid 42973:tid 43045] [client 89.251.0.129:48337] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Apr 23 07:28:01.241441 2026] [:error] [pid 42973:tid 43048] [client 89.251.0.129:48337] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aelZgW6I0QqmmmLTHE3bYAAAAIU"]
[Thu Apr 23 07:28:05.816937 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.121:63109] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aelZhb6vRb9j6psK2ZabFAAAAgU"]
[Thu Apr 23 07:28:06.408092 2026] [:error] [pid 64967:tid 64984] [client 89.251.0.121:57451] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Thu Apr 23 07:28:07.496185 2026] [:error] [pid 64967:tid 64990] [client 89.251.0.121:57451] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aelZh4AV4GfOOdX8QzoUWwAAAZU"]
[Thu Apr 23 07:28:08.707209 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.117:29271] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aelZiIV5EysYcTLjmwj4EQAAAdA"]
[Thu Apr 23 07:28:09.441184 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.119:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-api.php
[Thu Apr 23 07:28:10.119337 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.119:25815] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Thu Apr 23 07:28:10.798388 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.119:25815] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aelZisOAb-3sOknsk4ch7AAAAEI"]
[Thu Apr 23 07:28:11.578244 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.128:43863] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aelZi4AV4GfOOdX8QzoUgAAAAY4"]
[Thu Apr 23 07:28:12.534226 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.138:27171] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/count.php"] [unique_id "aelZjIAV4GfOOdX8QzoUkQAAAZI"]
[Thu Apr 23 07:28:13.187762 2026] [:error] [pid 42973:tid 43064] [client 89.251.0.115:52487] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-error_log.php
[Thu Apr 23 07:28:16.466058 2026] [:error] [pid 42973:tid 43043] [client 89.251.0.115:52487] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aelZkG6I0QqmmmLTHE3b7gAAAIA"]
[Thu Apr 23 07:28:17.734643 2026] [:error] [pid 64967:tid 64980] [client 89.251.0.140:53983] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||nextspaceconsulting.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "nextspaceconsulting.com.au"] [uri "/images/stories/themes.php"] [unique_id "aelZkYAV4GfOOdX8QzoUywAAAYs"]
[Thu Apr 23 07:28:18.048745 2026] [:error] [pid 64967:tid 64973] [client 89.251.0.140:53983] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aelZkoAV4GfOOdX8QzoU0gAAAYQ"]
[Thu Apr 23 07:28:19.243812 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.135:53117] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aelZk8OAb-3sOknsk4ciMAAAAFc"]
[Thu Apr 23 07:28:19.952367 2026] [:error] [pid 43083:tid 43103] [client 89.251.0.151:54389] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aelZkzC5hrvNXosL83LNawAAANI"]
[Thu Apr 23 07:28:21.192700 2026] [:error] [pid 42973:tid 43066] [client 89.251.0.147:53365] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Thu Apr 23 07:28:22.464427 2026] [:error] [pid 42973:tid 43060] [client 89.251.0.147:53365] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aelZlm6I0QqmmmLTHE3cFwAAAJE"]
[Thu Apr 23 07:28:23.644314 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.140:42473] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aelZl76vRb9j6psK2Zab7AAAAhA"]
[Thu Apr 23 07:28:24.844462 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.137:27451] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aelZmL6vRb9j6psK2ZacHwAAAhQ"]
[Thu Apr 23 07:28:25.523801 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.124:32573] File does not exist: /usr/local/apache/htdocs/suspended-page/blog.php
[Thu Apr 23 07:28:27.158613 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.124:32573] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aelZmzC5hrvNXosL83LOAgAAAMo"]
[Thu Apr 23 07:28:27.777745 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.126:45235] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aelZm4V5EysYcTLjmwj41wAAAcU"]
[Thu Apr 23 07:28:28.372893 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.129:31251] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Apr 23 07:28:28.683700 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.129:31251] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aelZnIV5EysYcTLjmwj43wAAAdQ"]
[Thu Apr 23 07:28:29.301421 2026] [:error] [pid 65000:tid 65054] [client 89.251.0.136:28769] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aelZnb6vRb9j6psK2ZacTAAAAhU"]
[Thu Apr 23 07:28:30.583189 2026] [:error] [pid 65000:tid 65054] [client 89.251.0.136:48271] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aelZnr6vRb9j6psK2ZacZgAAAhU"]
[Thu Apr 23 07:28:35.576273 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.116:47395] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aelZozEP2_5RswrH8bGsWQAAABE"]
[Thu Apr 23 07:28:36.408490 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.143:37599] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aelZpJXyGZJFeAIDWtlbwAAAAUk"]
[Thu Apr 23 07:28:39.379941 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.129:45591] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aelZp8OAb-3sOknsk4ciqwAAAFA"]
[Thu Apr 23 07:28:40.606462 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.113:23987] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aelZqJXyGZJFeAIDWtlb6gAAAVA"]
[Thu Apr 23 07:28:41.334090 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.128:44257] File does not exist: /usr/local/apache/htdocs/suspended-page/testt.php
[Thu Apr 23 07:28:42.589840 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.128:44257] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aelZqpXyGZJFeAIDWtlb_gAAAUQ"]
[Thu Apr 23 07:28:43.282532 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.140:22177] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aelZq4V5EysYcTLjmwj5iQAAAcI"]
[Thu Apr 23 07:28:44.001595 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.148:22503] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aelZrJXyGZJFeAIDWtlcGAAAAUg"]
[Thu Apr 23 07:28:44.600805 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.150:52687] File does not exist: /usr/local/apache/htdocs/suspended-page/network.php
[Thu Apr 23 07:28:45.263643 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.150:52687] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aelZrTEP2_5RswrH8bGsmgAAAAU"]
[Thu Apr 23 07:28:45.885513 2026] [:error] [pid 64967:tid 64973] [client 89.251.0.141:49023] File does not exist: /usr/local/apache/htdocs/suspended-page/wikindex.php
[Thu Apr 23 07:28:46.522495 2026] [:error] [pid 64967:tid 64980] [client 89.251.0.141:49023] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aelZroAV4GfOOdX8QzoVtAAAAYs"]
[Thu Apr 23 07:28:47.145577 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.139:45113] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aelZrzC5hrvNXosL83LOxgAAAMk"]
[Thu Apr 23 07:28:49.317148 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.125:28217] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aelZsTEP2_5RswrH8bGs0QAAAAg"]
[Thu Apr 23 07:28:49.975202 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.146:23799] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aelZscOAb-3sOknsk4ci-gAAAFE"]
[Thu Apr 23 07:28:52.571026 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.138:59013] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aelZtMOAb-3sOknsk4cjFwAAAEo"]
[Thu Apr 23 07:28:53.539534 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.147:40787] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aelZtTEP2_5RswrH8bGs8QAAAA0"]
[Thu Apr 23 07:28:54.201921 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.119:43303] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aelZtjC5hrvNXosL83LPHAAAANY"]
[Thu Apr 23 07:28:54.831250 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.119:40793] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aelZtoV5EysYcTLjmwj6DAAAAdE"]
[Thu Apr 23 07:28:56.190834 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.141:55903] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aelZuL6vRb9j6psK2ZaddAAAAgI"]
[Thu Apr 23 07:28:57.528103 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.121:65017] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aelZuZXyGZJFeAIDWtlcggAAAUw"]
[Thu Apr 23 07:28:58.665414 2026] [:error] [pid 64998:tid 65014] [client 89.251.0.134:21075] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aelZuoV5EysYcTLjmwj6LgAAAcw"]
[Thu Apr 23 07:28:59.880684 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.139:21133] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aelZu4V5EysYcTLjmwj6RAAAAdA"]
[Thu Apr 23 07:29:02.029773 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.119:32317] File does not exist: /usr/local/apache/htdocs/suspended-page/media-new.php
[Thu Apr 23 07:29:03.276166 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.119:32317] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aelZv4V5EysYcTLjmwj6cgAAAdQ"]
[Thu Apr 23 07:29:04.008127 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.136:48351] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aelZwDC5hrvNXosL83LPhQAAAMo"]
[Thu Apr 23 07:29:05.131149 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.150:26097] File does not exist: /usr/local/apache/htdocs/suspended-page/pages.php
[Thu Apr 23 07:29:05.463320 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.150:26097] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aelZwTEP2_5RswrH8bGtawAAAA4"]
[Thu Apr 23 07:29:07.529358 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.140:64285] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aelZw8Rxv6UsgRGKB3Lj8gAAAQ0"]
[Thu Apr 23 07:29:08.693253 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.135:55315] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfus.php
[Thu Apr 23 07:29:09.023437 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.135:55315] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aelZxTEP2_5RswrH8bGtlwAAABI"]
[Thu Apr 23 07:29:10.397631 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.121:23547] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aelZxjC5hrvNXosL83LPxAAAAMU"]
[Thu Apr 23 07:29:10.957354 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.120:45035] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Thu Apr 23 07:29:11.247398 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.120:45035] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aelZx76vRb9j6psK2Zad-gAAAgY"]
[Thu Apr 23 07:29:12.173275 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.147:48635] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aelZyDEP2_5RswrH8bGtwAAAAAM"]
[Thu Apr 23 07:29:13.826364 2026] [:error] [pid 42971:tid 43010] [client 89.251.0.128:56171] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-configs.php
[Thu Apr 23 07:29:14.266881 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.128:56171] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aelZyjEP2_5RswrH8bGt1wAAAAY"]
[Thu Apr 23 07:29:15.979475 2026] [:error] [pid 42973:tid 43046] [client 89.251.0.131:55565] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aelZy26I0QqmmmLTHE3dKQAAAIM"]
[Thu Apr 23 07:29:16.712813 2026] [:error] [pid 25635:tid 25644] [client 89.251.0.119:52477] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/mah.php
[Thu Apr 23 07:29:17.007450 2026] [:error] [pid 25635:tid 25640] [client 89.251.0.119:52477] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aelZzcRxv6UsgRGKB3LkIAAAAQE"]
[Thu Apr 23 07:29:17.639035 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.138:42249] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aelZzTC5hrvNXosL83LQCQAAANA"]
[Thu Apr 23 07:29:18.331084 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.144:45897] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-users.php
[Thu Apr 23 07:29:19.002273 2026] [:error] [pid 25635:tid 25657] [client 89.251.0.144:45897] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aelZz8Rxv6UsgRGKB3LkMAAAARI"]
[Thu Apr 23 07:29:19.617481 2026] [:error] [pid 42971:tid 42996] [client 89.251.0.150:44857] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aelZzzEP2_5RswrH8bGuLgAAAAo"]
[Thu Apr 23 07:29:22.131497 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.150:38749] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aelZ0jC5hrvNXosL83LQQAAAAM8"]
[Thu Apr 23 07:29:22.769822 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.114:47975] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aelZ0r6vRb9j6psK2ZaedAAAAhQ"]
[Thu Apr 23 07:29:23.633652 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.132:33645] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/log.php"] [unique_id "aelZ04AV4GfOOdX8QzoWgQAAAYY"]
[Thu Apr 23 07:29:24.335549 2026] [:error] [pid 59700:tid 59719] [client 89.251.0.148:48895] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aelZ1JXyGZJFeAIDWtldagAAAVE"]
[Thu Apr 23 07:29:24.960820 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.144:58881] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aelZ1DC5hrvNXosL83LQUwAAANE"]
[Thu Apr 23 07:29:25.556137 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.121:29887] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aelZ1YV5EysYcTLjmwj7IgAAAdA"]
[Thu Apr 23 07:29:29.328501 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.115:37973] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aelZ2YAV4GfOOdX8QzoWoAAAAY4"]
[Thu Apr 23 07:29:30.030137 2026] [:error] [pid 42971:tid 42996] [client 89.251.0.120:35995] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aelZ2jEP2_5RswrH8bGupQAAAAo"]
[Thu Apr 23 07:29:31.158123 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.143:34541] File does not exist: /usr/local/apache/htdocs/suspended-page/top.php
[Thu Apr 23 07:29:31.795473 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.143:34541] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aelZ28Rxv6UsgRGKB3LkeAAAAQY"]
[Thu Apr 23 07:29:32.585495 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.146:53725] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aelZ3JXyGZJFeAIDWtldrAAAAU8"]
[Thu Apr 23 07:29:35.137324 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.126:59237] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aelZ34AV4GfOOdX8QzoWswAAAYY"]
[Thu Apr 23 07:29:35.748391 2026] [:error] [pid 42972:tid 43023] [client 89.251.0.116:63799] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aelZ38OAb-3sOknsk4ckfQAAAEc"]
[Thu Apr 23 07:29:38.692413 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.150:23649] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aelZ4jC5hrvNXosL83LRaAAAAMM"]
[Thu Apr 23 07:29:39.331832 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.147:33109] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aelZ44AV4GfOOdX8QzoWxQAAAZE"]
[Thu Apr 23 07:29:40.605392 2026] [:error] [pid 64967:tid 64969] [client 89.251.0.144:24119] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/file.php"] [unique_id "aelZ5IAV4GfOOdX8QzoWywAAAYA"]
[Thu Apr 23 07:29:42.636770 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.138:26437] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aelZ5r6vRb9j6psK2ZafGQAAAg8"]
[Thu Apr 23 07:29:43.751155 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.148:27229] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/load.php"] [unique_id "aelZ5zC5hrvNXosL83LRmwAAAMo"]
[Thu Apr 23 07:29:44.310597 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.119:59229] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aelZ6IAV4GfOOdX8QzoW1wAAAZE"]
[Thu Apr 23 07:29:44.928254 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.113:62689] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aelZ6L6vRb9j6psK2ZafPgAAAgM"]
[Thu Apr 23 07:29:46.655742 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.113:59889] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aelZ6r6vRb9j6psK2ZafYgAAAhA"]
[Thu Apr 23 07:29:47.385731 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.138:56559] File does not exist: /usr/local/apache/htdocs/suspended-page/setup-config.php
[Thu Apr 23 07:29:47.676863 2026] [:error] [pid 43083:tid 43086] [client 89.251.0.138:56559] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aelZ6zC5hrvNXosL83LRyAAAAME"]
[Thu Apr 23 07:29:48.632031 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.150:40311] File does not exist: /usr/local/apache/htdocs/suspended-page/type.php
[Thu Apr 23 07:29:48.930433 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.150:40311] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aelZ7DC5hrvNXosL83LR3AAAAMA"]
[Thu Apr 23 07:29:49.559983 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.117:53653] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aelZ7YV5EysYcTLjmwj8bAAAAcs"]
[Thu Apr 23 07:29:50.219496 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.131:38799] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aelZ7jC5hrvNXosL83LR9AAAANg"]
[Thu Apr 23 07:29:52.201840 2026] [:error] [pid 42973:tid 43043] [client 89.251.0.127:22937] File does not exist: /usr/local/apache/htdocs/suspended-page/goat.php
[Thu Apr 23 07:29:53.498721 2026] [:error] [pid 42973:tid 43051] [client 89.251.0.127:22937] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aelZ8W6I0QqmmmLTHE3dtQAAAIg"]
[Thu Apr 23 07:29:55.052682 2026] [:error] [pid 42973:tid 43043] [client 89.251.0.144:55343] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aelZ826I0QqmmmLTHE3duwAAAIA"]
[Thu Apr 23 07:29:59.661957 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.120:32781] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aelZ9zEP2_5RswrH8bGvnQAAABc"]
[Thu Apr 23 07:30:00.332569 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.115:59189] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aelZ-DEP2_5RswrH8bGvqQAAAAA"]
[Thu Apr 23 07:30:01.252807 2026] [:error] [pid 64967:tid 64990] [client 89.251.0.132:20471] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aelZ-YAV4GfOOdX8QzoXFgAAAZU"]
[Thu Apr 23 07:30:03.988588 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.123:21701] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aelZ-zEP2_5RswrH8bGv1gAAAAY"]
[Thu Apr 23 07:30:07.313407 2026] [:error] [pid 64998:tid 65024] [client 89.251.0.136:42349] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aelZ_4V5EysYcTLjmwj9AQAAAdY"]
[Thu Apr 23 07:30:09.400185 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.120:54255] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aelaAb6vRb9j6psK2ZagBwAAAgU"]
[Thu Apr 23 07:30:10.866783 2026] [:error] [pid 42973:tid 43057] [client 89.251.0.150:42207] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aelaAm6I0QqmmmLTHE3eBwAAAI4"]
[Thu Apr 23 07:30:12.016928 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.119:55389] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aelaBIV5EysYcTLjmwj9GAAAAdM"]
[Thu Apr 23 07:30:16.761349 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.131:39837] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aelaCJXyGZJFeAIDWtlfcQAAAUg"]
[Thu Apr 23 07:30:17.497032 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.144:46377] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aelaCYV5EysYcTLjmwj9MQAAAdA"]
[Thu Apr 23 07:30:18.195730 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.125:27873] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aelaCr6vRb9j6psK2ZagggAAAgQ"]
[Thu Apr 23 07:30:19.174874 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.151:55745] [client 89.251.0.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.151, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aelaC76vRb9j6psK2ZagxgAAAg4"]
[Thu Apr 23 07:30:19.818989 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.151:55745] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aelaC76vRb9j6psK2Zag8wAAAhA"]
[Thu Apr 23 07:30:20.564624 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.125:34225] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aelaDMOAb-3sOknsk4cl2wAAAFI"]
[Thu Apr 23 07:30:21.453498 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.126:48023] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aelaDTC5hrvNXosL83LTNAAAANU"]
[Thu Apr 23 07:30:24.264840 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.137:22071] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aelaEDEP2_5RswrH8bGwRQAAAAE"]
[Thu Apr 23 07:30:27.442903 2026] [:error] [pid 59700:tid 59706] [client 89.251.0.134:48757] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aelaE5XyGZJFeAIDWtlf1wAAAUQ"]
[Thu Apr 23 07:30:29.282845 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.132:41485] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aelaFTEP2_5RswrH8bGwjgAAAAU"]
[Thu Apr 23 07:30:35.323871 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.144:43401] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aelaG4V5EysYcTLjmwj9vgAAAc4"]
[Thu Apr 23 07:30:35.990594 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.119:33763] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aelaG4V5EysYcTLjmwj9yAAAAdM"]
[Thu Apr 23 07:30:36.625729 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.143:31545] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aelaHIV5EysYcTLjmwj90gAAAck"]
[Thu Apr 23 07:30:38.449677 2026] [:error] [pid 42973:tid 43046] [client 89.251.0.148:26861] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aelaHm6I0QqmmmLTHE3eSAAAAIM"]
[Thu Apr 23 07:30:40.068137 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.143:63639] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aelaIDEP2_5RswrH8bGw3gAAAAk"]
[Thu Apr 23 07:30:40.717215 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.132:63299] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aelaIDEP2_5RswrH8bGw6AAAABY"]
[Thu Apr 23 07:30:44.417764 2026] [:error] [pid 25635:tid 25645] [client 89.251.0.138:48247] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aelaJMRxv6UsgRGKB3LlxAAAAQY"]
[Thu Apr 23 07:30:46.676981 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.136:29191] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aelaJsOAb-3sOknsk4cmcAAAAEg"]
[Thu Apr 23 07:30:47.530001 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.151:55009] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aelaJzEP2_5RswrH8bGxHQAAAAY"]
[Thu Apr 23 07:31:27.487261 2026] [autoindex:error] [pid 59700:tid 59713] [client 89.251.0.141:50737] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:32:27.951977 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.151:57141] [client 89.251.0.151] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/wlw/"] [unique_id "aelaizEP2_5RswrH8bGz8QAAABI"]
[Thu Apr 23 09:51:14.358917 2026] [:error] [pid 42971:tid 42992] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 09:51:14.632914 2026] [:error] [pid 42971:tid 42999] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 09:51:14.907017 2026] [:error] [pid 42971:tid 43010] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 09:51:15.213649 2026] [:error] [pid 42971:tid 43007] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 09:51:15.520651 2026] [:error] [pid 42971:tid 42989] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 09:51:15.834811 2026] [:error] [pid 42971:tid 43003] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 09:51:16.130497 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 09:51:16.419869 2026] [:error] [pid 42971:tid 42999] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 09:51:17.328875 2026] [:error] [pid 42971:tid 43009] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 09:51:17.611825 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 09:51:17.892033 2026] [:error] [pid 42971:tid 42995] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 09:51:18.180876 2026] [:error] [pid 42971:tid 42999] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 09:51:18.466073 2026] [:error] [pid 42971:tid 43009] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 09:51:18.779151 2026] [:error] [pid 42971:tid 43006] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 09:51:19.056214 2026] [:error] [pid 42971:tid 43007] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 09:51:19.331182 2026] [:error] [pid 42971:tid 42999] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 09:51:19.606864 2026] [:error] [pid 42971:tid 42986] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 09:51:21.928837 2026] [:error] [pid 42971:tid 42986] [client 185.192.71.22:41983] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 09:51:25.832978 2026] [:error] [pid 42971:tid 42989] [client 185.192.71.22:41983] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ael7HTEP2_5RswrH8bHRzwAAAAM"]
[Thu Apr 23 09:51:27.269631 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.28:24321] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "ael7H4V5EysYcTLjmwhq7wAAAcw"]
[Thu Apr 23 09:51:28.713813 2026] [:error] [pid 43083:tid 43097] [client 91.230.225.200:27025] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 23 09:51:29.553548 2026] [:error] [pid 43083:tid 43089] [client 91.230.225.200:27025] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ael7ITC5hrvNXosL83IMFwAAAMQ"]
[Thu Apr 23 09:51:30.655639 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.198:20137] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 23 09:51:30.942840 2026] [:error] [pid 64998:tid 65005] [client 91.230.225.198:20137] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ael7IoV5EysYcTLjmwhrHAAAAcM"]
[Thu Apr 23 09:51:31.804103 2026] [:error] [pid 59700:tid 59712] [client 185.192.71.21:30479] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 23 09:51:33.307567 2026] [:error] [pid 59700:tid 59718] [client 185.192.71.21:30479] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "ael7JZXyGZJFeAIDWtmKPQAAAVA"]
[Thu Apr 23 09:51:34.124079 2026] [:error] [pid 25635:tid 25655] [client 91.230.225.12:35019] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "ael7JsRxv6UsgRGKB3LzWwAAARA"]
[Thu Apr 23 09:51:34.677158 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.24:37821] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "ael7JjEP2_5RswrH8bHSFwAAAA4"]
[Thu Apr 23 09:51:35.217861 2026] [:error] [pid 25635:tid 25650] [client 185.192.71.23:61319] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "ael7J8Rxv6UsgRGKB3LzYwAAAQs"]
[Thu Apr 23 09:51:35.770446 2026] [:error] [pid 59700:tid 59710] [client 91.230.225.207:64977] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "ael7J5XyGZJFeAIDWtmKUwAAAUg"]
[Thu Apr 23 09:51:36.312685 2026] [:error] [pid 64998:tid 65018] [client 91.230.225.195:50093] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "ael7KIV5EysYcTLjmwhrXgAAAdA"]
[Thu Apr 23 09:51:37.121374 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.15:48851] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "ael7KYV5EysYcTLjmwhrfAAAAdQ"]
[Thu Apr 23 09:51:37.724459 2026] [:error] [pid 64998:tid 65013] [client 185.192.71.36:21369] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Thu Apr 23 09:51:38.300801 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.36:21369] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "ael7KoV5EysYcTLjmwhrrQAAAcc"]
[Thu Apr 23 09:51:39.388724 2026] [:error] [pid 65000:tid 65055] [client 185.192.71.37:51553] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ael7K76vRb9j6psK2ZbzlAAAAhY"]
[Thu Apr 23 09:51:40.203949 2026] [:error] [pid 43083:tid 43107] [client 91.230.225.195:24987] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "ael7LDC5hrvNXosL83IMrwAAANY"]
[Thu Apr 23 09:51:40.764020 2026] [:error] [pid 42971:tid 42994] [client 91.230.225.12:26123] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Thu Apr 23 09:51:41.038348 2026] [:error] [pid 42971:tid 43007] [client 91.230.225.12:26123] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "ael7LTEP2_5RswrH8bHSJQAAABU"]
[Thu Apr 23 09:51:41.607226 2026] [:error] [pid 43083:tid 43109] [client 185.192.71.27:63865] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Thu Apr 23 09:51:42.449181 2026] [:error] [pid 43083:tid 43085] [client 185.192.71.27:63865] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Thu Apr 23 09:51:43.280619 2026] [:error] [pid 43083:tid 43109] [client 185.192.71.27:63865] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "ael7LzC5hrvNXosL83IM0QAAANg"]
[Thu Apr 23 09:51:43.853087 2026] [:error] [pid 59700:tid 59717] [client 185.192.71.27:53719] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Thu Apr 23 09:51:44.137643 2026] [:error] [pid 59700:tid 59711] [client 185.192.71.27:53719] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "ael7MJXyGZJFeAIDWtmKowAAAUk"]
[Thu Apr 23 09:51:44.709471 2026] [:error] [pid 64998:tid 65013] [client 185.192.71.38:20939] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Thu Apr 23 09:51:45.321329 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.38:20939] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "ael7MYV5EysYcTLjmwhsYQAAAcw"]
[Thu Apr 23 09:51:46.173320 2026] [:error] [pid 59700:tid 59722] [client 185.192.71.22:32413] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "ael7MpXyGZJFeAIDWtmKtAAAAVQ"]
[Thu Apr 23 09:51:47.054779 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.30:61277] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Thu Apr 23 09:51:48.881189 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.30:61277] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Thu Apr 23 09:51:49.510391 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.30:61277] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "ael7NYV5EysYcTLjmwhsrQAAAcw"]
[Thu Apr 23 09:51:50.350601 2026] [:error] [pid 59700:tid 59713] [client 91.230.225.204:39213] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "ael7NpXyGZJFeAIDWtmK7gAAAUs"]
[Thu Apr 23 09:51:51.296041 2026] [:error] [pid 25635:tid 25659] [client 91.230.225.23:53387] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "ael7N8Rxv6UsgRGKB3LzqQAAARQ"]
[Thu Apr 23 09:51:51.829406 2026] [:error] [pid 25635:tid 25648] [client 91.230.225.20:59751] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "ael7N8Rxv6UsgRGKB3LzqwAAAQk"]
[Thu Apr 23 09:51:52.383252 2026] [:error] [pid 59700:tid 59718] [client 185.192.71.31:44183] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "ael7OJXyGZJFeAIDWtmLHAAAAVA"]
[Thu Apr 23 09:51:53.500573 2026] [:error] [pid 43083:tid 43089] [client 185.192.71.22:30615] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Thu Apr 23 09:51:53.768597 2026] [:error] [pid 43083:tid 43100] [client 185.192.71.22:30615] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "ael7OTC5hrvNXosL83INfwAAAM8"]
[Thu Apr 23 09:51:54.308746 2026] [:error] [pid 42971:tid 43009] [client 91.230.225.202:30241] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "ael7OjEP2_5RswrH8bHSjgAAABc"]
[Thu Apr 23 09:51:54.845486 2026] [:error] [pid 43083:tid 43093] [client 91.230.225.23:54473] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ael7OjC5hrvNXosL83INjAAAAMg"]
[Thu Apr 23 09:51:56.026279 2026] [:error] [pid 42972:tid 43033] [client 185.192.71.29:49041] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Thu Apr 23 09:51:56.617172 2026] [:error] [pid 42972:tid 43025] [client 185.192.71.29:49041] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Thu Apr 23 09:51:57.763955 2026] [:error] [pid 42972:tid 43030] [client 185.192.71.29:49041] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/admin.php"] [unique_id "ael7PcOAb-3sOknsk4c7iAAAAE4"]
[Thu Apr 23 09:52:03.335187 2026] [:error] [pid 64967:tid 64977] [client 185.192.71.22:22081] [client 185.192.71.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.22, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "ael7Q4AV4GfOOdX8QzopMgAAAYg"]
[Thu Apr 23 09:52:03.635427 2026] [:error] [pid 64967:tid 64972] [client 185.192.71.22:22081] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 23 09:52:05.057382 2026] [:error] [pid 64967:tid 64986] [client 185.192.71.22:22081] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Thu Apr 23 09:52:05.349109 2026] [:error] [pid 64967:tid 64991] [client 185.192.71.22:22081] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Thu Apr 23 09:52:07.292684 2026] [:error] [pid 64967:tid 64970] [client 185.192.71.22:22081] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ael7R4AV4GfOOdX8QzopUwAAAYE"]
[Thu Apr 23 09:52:08.141346 2026] [:error] [pid 59700:tid 59723] [client 185.192.71.36:22393] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Thu Apr 23 09:52:08.438636 2026] [:error] [pid 59700:tid 59713] [client 185.192.71.36:22393] [client 185.192.71.36] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.36, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "ael7SJXyGZJFeAIDWtmL2QAAAUs"]
[Thu Apr 23 09:52:09.030681 2026] [:error] [pid 59700:tid 59711] [client 185.192.71.36:22393] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/item.php"] [unique_id "ael7SZXyGZJFeAIDWtmL4AAAAUk"]
[Thu Apr 23 09:52:10.723163 2026] [:error] [pid 42973:tid 43047] [client 91.230.225.16:29789] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu Apr 23 09:52:11.294782 2026] [:error] [pid 42973:tid 43045] [client 91.230.225.16:29789] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Thu Apr 23 09:52:12.225087 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.16:29789] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "ael7TG6I0QqmmmLTHE3rEAAAAI8"]
[Thu Apr 23 09:52:12.784377 2026] [:error] [pid 42972:tid 43021] [client 91.230.225.22:20759] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Thu Apr 23 09:52:13.784896 2026] [:error] [pid 42972:tid 43034] [client 91.230.225.22:20759] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Thu Apr 23 09:52:14.385941 2026] [:error] [pid 42972:tid 43023] [client 91.230.225.22:20759] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Thu Apr 23 09:52:14.946248 2026] [:error] [pid 42972:tid 43018] [client 91.230.225.22:20759] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Thu Apr 23 09:52:15.220768 2026] [:error] [pid 42972:tid 43040] [client 91.230.225.22:20759] [client 91.230.225.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "ael7T8OAb-3sOknsk4c8MwAAAFg"]
[Thu Apr 23 09:52:15.805926 2026] [:error] [pid 42971:tid 42996] [client 185.192.71.31:60979] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Thu Apr 23 09:52:16.114292 2026] [:error] [pid 42971:tid 42988] [client 185.192.71.31:60979] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu Apr 23 09:52:16.386619 2026] [:error] [pid 42971:tid 42997] [client 185.192.71.31:60979] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "ael7UDEP2_5RswrH8bHTTgAAAAs"]
[Thu Apr 23 09:52:18.265699 2026] [:error] [pid 25635:tid 25642] [client 185.192.71.39:30051] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Thu Apr 23 09:52:18.857901 2026] [:error] [pid 25635:tid 25651] [client 185.192.71.39:30051] [client 185.192.71.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.39, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "ael7UsRxv6UsgRGKB3L0UAAAAQw"]
[Thu Apr 23 09:52:19.142584 2026] [:error] [pid 25635:tid 25661] [client 185.192.71.39:30051] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "ael7U8Rxv6UsgRGKB3L0VQAAARY"]
[Thu Apr 23 09:52:22.668104 2026] [:error] [pid 64967:tid 64990] [client 185.192.71.32:24299] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Thu Apr 23 09:52:24.507870 2026] [:error] [pid 64967:tid 64976] [client 185.192.71.32:24299] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Thu Apr 23 09:52:24.811307 2026] [:error] [pid 64967:tid 64974] [client 185.192.71.32:24299] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "ael7WIAV4GfOOdX8Qzop4AAAAYU"]
[Thu Apr 23 09:52:25.466092 2026] [:error] [pid 64967:tid 64986] [client 91.230.225.201:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Thu Apr 23 09:52:26.340312 2026] [:error] [pid 64967:tid 64980] [client 91.230.225.201:49997] [client 91.230.225.201] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.201, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "ael7WoAV4GfOOdX8QzoqBQAAAYs"]
[Thu Apr 23 09:52:27.051347 2026] [:error] [pid 64967:tid 64980] [client 91.230.225.201:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Thu Apr 23 09:52:27.357369 2026] [:error] [pid 64967:tid 64976] [client 91.230.225.201:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Thu Apr 23 09:52:27.650956 2026] [:error] [pid 64967:tid 64974] [client 91.230.225.201:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Thu Apr 23 09:52:27.959618 2026] [:error] [pid 64967:tid 64993] [client 91.230.225.201:49997] [client 91.230.225.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "ael7W4AV4GfOOdX8QzoqFgAAAZg"]
[Thu Apr 23 09:52:28.565434 2026] [:error] [pid 64967:tid 64991] [client 91.230.225.208:26287] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Thu Apr 23 09:52:28.838414 2026] [:error] [pid 64967:tid 64974] [client 91.230.225.208:26287] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/infi.php"] [unique_id "ael7XIAV4GfOOdX8QzoqJQAAAYU"]
[Thu Apr 23 09:52:29.734514 2026] [:error] [pid 43083:tid 43100] [client 91.230.225.203:20389] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Thu Apr 23 09:52:30.023266 2026] [:error] [pid 43083:tid 43091] [client 91.230.225.203:20389] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ael7XjC5hrvNXosL83IO2AAAAMY"]
[Thu Apr 23 09:52:31.184901 2026] [:error] [pid 59700:tid 59724] [client 91.230.225.204:51135] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Thu Apr 23 09:52:31.458011 2026] [:error] [pid 59700:tid 59704] [client 91.230.225.204:51135] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "ael7X5XyGZJFeAIDWtmMlgAAAUI"]
[Thu Apr 23 09:52:32.009754 2026] [:error] [pid 64967:tid 64985] [client 185.192.71.38:59145] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "ael7YIAV4GfOOdX8QzoqRQAAAZA"]
[Thu Apr 23 09:52:32.613882 2026] [:error] [pid 42971:tid 43004] [client 185.192.71.33:31595] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Thu Apr 23 09:52:32.905880 2026] [:error] [pid 42971:tid 43010] [client 185.192.71.33:31595] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Thu Apr 23 09:52:34.065460 2026] [:error] [pid 42971:tid 42995] [client 185.192.71.33:31595] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "ael7YjEP2_5RswrH8bHTxgAAAAk"]
[Thu Apr 23 09:52:34.892272 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.196:50005] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "ael7YoV5EysYcTLjmwhu6gAAAck"]
[Thu Apr 23 09:52:40.096324 2026] [:error] [pid 64998:tid 65014] [client 91.230.225.19:45851] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/edit.php"] [unique_id "ael7aIV5EysYcTLjmwhveAAAAcw"]
[Thu Apr 23 09:52:40.638159 2026] [:error] [pid 43083:tid 43108] [client 185.192.71.28:22269] File does not exist: /usr/local/apache/htdocs/suspended-page/webdb.php
[Thu Apr 23 09:52:41.218617 2026] [:error] [pid 43083:tid 43106] [client 185.192.71.28:22269] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Thu Apr 23 09:52:41.503135 2026] [:error] [pid 43083:tid 43097] [client 185.192.71.28:22269] [client 185.192.71.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "ael7aTC5hrvNXosL83IPVAAAAMw"]
[Thu Apr 23 09:52:42.073473 2026] [:error] [pid 65000:tid 65052] [client 185.192.71.21:34403] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu Apr 23 09:52:42.686973 2026] [:error] [pid 65000:tid 65043] [client 185.192.71.21:34403] [client 185.192.71.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/click.php"] [unique_id "ael7ar6vRb9j6psK2Zb18AAAAgo"]
[Thu Apr 23 09:52:44.064127 2026] [:error] [pid 43083:tid 43096] [client 91.230.225.208:51649] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "ael7bDC5hrvNXosL83IPiAAAAMs"]
[Thu Apr 23 09:52:44.987223 2026] [:error] [pid 64998:tid 65025] [client 185.92.25.114:59273] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Thu Apr 23 09:52:45.908899 2026] [:error] [pid 64998:tid 65020] [client 185.92.25.114:59273] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Thu Apr 23 09:52:46.534190 2026] [:error] [pid 64998:tid 65010] [client 185.92.25.114:59273] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Thu Apr 23 09:52:46.824116 2026] [:error] [pid 64998:tid 65020] [client 185.92.25.114:59273] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "ael7boV5EysYcTLjmwhv5QAAAdI"]
[Thu Apr 23 09:52:47.412933 2026] [:error] [pid 42972:tid 43040] [client 91.230.225.209:55945] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "ael7b8OAb-3sOknsk4c9YAAAAFg"]
[Thu Apr 23 09:52:47.969338 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.207:53765] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "ael7b4V5EysYcTLjmwhv9QAAAdQ"]
[Thu Apr 23 09:52:48.512887 2026] [:error] [pid 64967:tid 64990] [client 91.230.225.206:33093] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "ael7cIAV4GfOOdX8QzoqlgAAAZU"]
[Thu Apr 23 09:52:49.090328 2026] [:error] [pid 59700:tid 59719] [client 185.192.71.29:32291] File does not exist: /usr/local/apache/htdocs/suspended-page/xp.php
[Thu Apr 23 09:52:49.377986 2026] [:error] [pid 59700:tid 59721] [client 185.192.71.29:32291] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "ael7cZXyGZJFeAIDWtmNSQAAAVM"]
[Thu Apr 23 09:52:49.972596 2026] [:error] [pid 25635:tid 25645] [client 185.192.71.40:62521] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ael7ccRxv6UsgRGKB3L1CAAAAQY"]
[Thu Apr 23 09:52:50.544682 2026] [:error] [pid 64998:tid 65010] [client 185.192.71.34:56325] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links.php
[Thu Apr 23 09:52:51.113117 2026] [:error] [pid 64998:tid 65026] [client 185.192.71.34:56325] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "ael7c4V5EysYcTLjmwhwPgAAAdg"]
[Thu Apr 23 09:52:51.711710 2026] [:error] [pid 65000:tid 65045] [client 91.230.225.208:37645] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ael7c76vRb9j6psK2Zb2PAAAAgw"]
[Thu Apr 23 09:52:52.246361 2026] [:error] [pid 42973:tid 43054] [client 91.230.225.20:42181] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "ael7dG6I0QqmmmLTHE3sGAAAAIs"]
[Thu Apr 23 09:52:52.872332 2026] [:error] [pid 64998:tid 65007] [client 91.230.225.18:21049] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "ael7dIV5EysYcTLjmwhwVwAAAcU"]
[Thu Apr 23 09:52:53.754165 2026] [:error] [pid 64998:tid 65003] [client 91.230.225.207:63439] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "ael7dYV5EysYcTLjmwhwbgAAAcE"]
[Thu Apr 23 09:52:55.004174 2026] [:error] [pid 59700:tid 59724] [client 91.230.225.207:49015] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "ael7d5XyGZJFeAIDWtmNmQAAAVY"]
[Thu Apr 23 09:52:55.577729 2026] [:error] [pid 64998:tid 65005] [client 91.230.225.20:59943] File does not exist: /usr/local/apache/htdocs/suspended-page/moon.php
[Thu Apr 23 09:52:56.457602 2026] [:error] [pid 64998:tid 65014] [client 91.230.225.20:59943] File does not exist: /usr/local/apache/htdocs/suspended-page/webadmin.php
[Thu Apr 23 09:52:56.725199 2026] [:error] [pid 64998:tid 65007] [client 91.230.225.20:59943] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "ael7eIV5EysYcTLjmwhwrQAAAcU"]
[Thu Apr 23 09:52:57.603772 2026] [:error] [pid 42971:tid 43004] [client 185.192.71.36:21701] File does not exist: /usr/local/apache/htdocs/suspended-page/xl2023.php
[Thu Apr 23 09:52:57.895130 2026] [:error] [pid 42971:tid 43005] [client 185.192.71.36:21701] File does not exist: /usr/local/apache/htdocs/suspended-page/go.php
[Thu Apr 23 09:52:59.404702 2026] [:error] [pid 42971:tid 43002] [client 185.192.71.36:21701] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "ael7ezEP2_5RswrH8bHUnAAAABA"]
[Thu Apr 23 09:53:00.992436 2026] [:error] [pid 25635:tid 25655] [client 91.230.225.195:44203] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "ael7fMRxv6UsgRGKB3L1OwAAARA"]
[Thu Apr 23 09:53:01.572079 2026] [:error] [pid 42971:tid 43006] [client 185.192.71.30:21771] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "ael7fTEP2_5RswrH8bHUyQAAABQ"]
[Thu Apr 23 09:53:03.380969 2026] [:error] [pid 59700:tid 59724] [client 91.230.225.195:58025] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "ael7f5XyGZJFeAIDWtmONgAAAVY"]
[Thu Apr 23 09:53:04.533041 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.27:28507] File does not exist: /usr/local/apache/htdocs/suspended-page/hehehehe.php
[Thu Apr 23 09:53:04.818084 2026] [:error] [pid 64998:tid 65004] [client 185.192.71.27:28507] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/install.php
[Thu Apr 23 09:53:05.103512 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.27:28507] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/plugins.php
[Thu Apr 23 09:53:05.386655 2026] [:error] [pid 64998:tid 65024] [client 185.192.71.27:28507] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/license.php
[Thu Apr 23 09:53:06.781002 2026] [:error] [pid 64998:tid 65011] [client 185.192.71.27:28507] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "ael7goV5EysYcTLjmwhxNgAAAck"]
[Thu Apr 23 09:53:07.345164 2026] [:error] [pid 42972:tid 43018] [client 185.192.71.22:49555] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "ael7g8OAb-3sOknsk4c9_AAAAEI"]
[Thu Apr 23 09:53:07.885199 2026] [:error] [pid 64967:tid 64980] [client 185.192.71.39:30719] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "ael7g4AV4GfOOdX8QzorCgAAAYs"]
[Thu Apr 23 09:53:08.439887 2026] [:error] [pid 43083:tid 43086] [client 185.192.71.23:63751] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "ael7hDC5hrvNXosL83IP-AAAAME"]
[Thu Apr 23 09:53:08.982401 2026] [:error] [pid 42972:tid 43036] [client 91.230.225.18:60077] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "ael7hMOAb-3sOknsk4c-NQAAAFQ"]
[Thu Apr 23 09:53:09.525252 2026] [:error] [pid 42973:tid 43066] [client 185.192.71.40:64991] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "ael7hW6I0QqmmmLTHE3sfQAAAJc"]
[Thu Apr 23 09:53:10.387413 2026] [:error] [pid 42972:tid 43039] [client 185.192.71.33:53151] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "ael7hsOAb-3sOknsk4c-TAAAAFc"]
[Thu Apr 23 09:53:10.965335 2026] [:error] [pid 25635:tid 25654] [client 185.192.71.31:37157] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ael7hsRxv6UsgRGKB3L1ZQAAAQ8"]
[Thu Apr 23 09:53:11.607992 2026] [:error] [pid 64998:tid 65009] [client 185.192.71.23:33685] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "ael7h4V5EysYcTLjmwhxYAAAAcc"]
[Thu Apr 23 09:53:12.224212 2026] [:error] [pid 65000:tid 65048] [client 91.230.225.16:23095] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "ael7iL6vRb9j6psK2Zb3UgAAAg8"]
[Thu Apr 23 09:53:13.346945 2026] [:error] [pid 25635:tid 25653] [client 91.230.225.200:31141] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "ael7icRxv6UsgRGKB3L1dgAAAQ4"]
[Thu Apr 23 09:53:14.204909 2026] [:error] [pid 42971:tid 43004] [client 91.230.225.207:23497] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "ael7ijEP2_5RswrH8bHVWAAAABI"]
[Thu Apr 23 09:53:14.752868 2026] [:error] [pid 64967:tid 64985] [client 91.230.225.197:45035] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Thu Apr 23 09:53:15.381288 2026] [:error] [pid 64967:tid 64988] [client 91.230.225.197:45035] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "ael7i4AV4GfOOdX8QzorSQAAAZM"]
[Thu Apr 23 09:53:16.731722 2026] [:error] [pid 42972:tid 43022] [client 185.192.71.27:63075] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "ael7jMOAb-3sOknsk4c-hQAAAEY"]
[Thu Apr 23 09:53:22.138976 2026] [:error] [pid 64967:tid 64970] [client 91.230.225.208:44889] File does not exist: /usr/local/apache/htdocs/suspended-page/class.api.php
[Thu Apr 23 09:53:22.440003 2026] [:error] [pid 64967:tid 64974] [client 91.230.225.208:44889] [client 91.230.225.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "ael7koAV4GfOOdX8QzorfwAAAYU"]
[Thu Apr 23 09:53:30.296136 2026] [:error] [pid 25635:tid 25656] [client 185.192.71.30:41659] File does not exist: /usr/local/apache/htdocs/suspended-page/system_log.php
[Thu Apr 23 09:53:30.597963 2026] [:error] [pid 25635:tid 25654] [client 185.192.71.30:41659] File does not exist: /usr/local/apache/htdocs/suspended-page/.alf.php
[Thu Apr 23 09:53:36.528345 2026] [:error] [pid 25635:tid 25654] [client 185.192.71.30:41659] File does not exist: /usr/local/apache/htdocs/suspended-page/wso.php
[Thu Apr 23 09:53:36.801088 2026] [:error] [pid 25635:tid 25646] [client 185.192.71.30:41659] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "ael7oMRxv6UsgRGKB3L2FgAAAQc"]
[Thu Apr 23 09:53:37.433322 2026] [:error] [pid 42972:tid 43040] [client 91.230.225.198:50557] File does not exist: /usr/local/apache/htdocs/suspended-page/flower.php
[Thu Apr 23 09:53:37.722624 2026] [:error] [pid 42972:tid 43024] [client 91.230.225.198:50557] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "ael7ocOAb-3sOknsk4c_BwAAAEg"]
[Thu Apr 23 09:53:38.924479 2026] [:error] [pid 59700:tid 59715] [client 91.230.225.12:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 23 09:53:39.200150 2026] [:error] [pid 59700:tid 59702] [client 91.230.225.12:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Thu Apr 23 09:53:39.490588 2026] [:error] [pid 59700:tid 59712] [client 91.230.225.12:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/setup.php
[Thu Apr 23 09:53:40.921301 2026] [:error] [pid 59700:tid 59723] [client 91.230.225.12:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu Apr 23 09:53:41.222074 2026] [:error] [pid 59700:tid 59705] [client 91.230.225.12:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/cc.php
[Thu Apr 23 09:53:41.829170 2026] [:error] [pid 59700:tid 59706] [client 91.230.225.12:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/ab.php
[Thu Apr 23 09:53:42.740669 2026] [:error] [pid 59700:tid 59720] [client 91.230.225.12:49997] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Thu Apr 23 09:53:43.014225 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.12:49997] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "ael7p5XyGZJFeAIDWtmPvwAAAU4"]
[Thu Apr 23 09:53:43.595267 2026] [:error] [pid 25635:tid 25641] [client 91.230.225.195:41233] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "ael7p8Rxv6UsgRGKB3L2PwAAAQI"]
[Thu Apr 23 09:53:44.181123 2026] [:error] [pid 64967:tid 64973] [client 91.230.225.207:56391] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Thu Apr 23 09:53:44.458417 2026] [:error] [pid 64967:tid 64974] [client 91.230.225.207:56391] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "ael7qIAV4GfOOdX8QzosNgAAAYU"]
[Thu Apr 23 09:53:45.385877 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.206:32033] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 23 09:53:45.678497 2026] [:error] [pid 64998:tid 65014] [client 91.230.225.206:32033] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "ael7qYV5EysYcTLjmwhzSQAAAcw"]
[Thu Apr 23 09:53:46.397799 2026] [:error] [pid 42971:tid 42998] [client 185.192.71.29:31817] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "ael7qjEP2_5RswrH8bHWkwAAAAw"]
[Thu Apr 23 09:53:48.063668 2026] [:error] [pid 59700:tid 59710] [client 91.230.225.16:34665] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ael7rJXyGZJFeAIDWtmP2gAAAUg"]
[Thu Apr 23 09:53:48.617393 2026] [:error] [pid 64967:tid 64979] [client 91.230.225.19:43595] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "ael7rIAV4GfOOdX8QzoscAAAAYo"]
[Thu Apr 23 09:53:50.065988 2026] [:error] [pid 42971:tid 42986] [client 91.230.225.197:50209] File does not exist: /usr/local/apache/htdocs/suspended-page/ini.php
[Thu Apr 23 09:53:50.712380 2026] [:error] [pid 42971:tid 43005] [client 91.230.225.197:50209] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "ael7rjEP2_5RswrH8bHWsgAAABM"]
[Thu Apr 23 09:53:51.596509 2026] [:error] [pid 64998:tid 65004] [client 91.230.225.209:49687] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/atomlib.php
[Thu Apr 23 09:53:52.274671 2026] [:error] [pid 64998:tid 65005] [client 91.230.225.209:49687] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/function.php"] [unique_id "ael7sIV5EysYcTLjmwhziQAAAcM"]
[Thu Apr 23 09:53:52.836378 2026] [:error] [pid 43083:tid 43098] [client 91.230.225.20:55735] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "ael7sDC5hrvNXosL83ISBAAAAM0"]
[Thu Apr 23 09:53:53.734396 2026] [:error] [pid 43083:tid 43106] [client 91.230.225.202:56865] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Thu Apr 23 09:53:54.008447 2026] [:error] [pid 43083:tid 43102] [client 91.230.225.202:56865] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "ael7sjC5hrvNXosL83ISKAAAANE"]
[Thu Apr 23 09:53:54.564581 2026] [:error] [pid 65000:tid 65040] [client 91.230.225.203:26273] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "ael7sr6vRb9j6psK2Zb5QQAAAgc"]
[Thu Apr 23 09:53:55.703959 2026] [:error] [pid 64967:tid 64986] [client 91.230.225.17:37365] File does not exist: /usr/local/apache/htdocs/suspended-page/customize.php
[Thu Apr 23 09:53:56.020950 2026] [:error] [pid 64967:tid 64993] [client 91.230.225.17:37365] File does not exist: /usr/local/apache/htdocs/suspended-page/license.php
[Thu Apr 23 09:53:56.668281 2026] [:error] [pid 64967:tid 64974] [client 91.230.225.17:37365] File does not exist: /usr/local/apache/htdocs/suspended-page/lock.php
[Thu Apr 23 09:53:57.251707 2026] [:error] [pid 64967:tid 64983] [client 91.230.225.17:37365] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "ael7tYAV4GfOOdX8Qzos8AAAAY4"]
[Thu Apr 23 09:53:57.815276 2026] [:error] [pid 59700:tid 59708] [client 185.192.71.26:21791] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "ael7tZXyGZJFeAIDWtmQSQAAAUY"]
[Thu Apr 23 09:53:59.281793 2026] [:error] [pid 42973:tid 43060] [client 91.230.225.24:24363] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 23 09:53:59.576696 2026] [:error] [pid 42973:tid 43047] [client 91.230.225.24:24363] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/index.php"] [unique_id "ael7t26I0QqmmmLTHE3toQAAAIQ"]
[Thu Apr 23 09:54:00.271509 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.22:21091] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "ael7uDEP2_5RswrH8bHXJwAAAAg"]
[Thu Apr 23 09:54:00.865132 2026] [:error] [pid 64998:tid 65025] [client 185.192.71.26:38987] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "ael7uIV5EysYcTLjmwhz0AAAAdc"]
[Thu Apr 23 09:54:02.588775 2026] [:error] [pid 25635:tid 25660] [client 91.230.225.202:47379] File does not exist: /usr/local/apache/htdocs/suspended-page/ff2.php
[Thu Apr 23 09:54:02.900165 2026] [:error] [pid 25635:tid 25659] [client 91.230.225.202:47379] [client 91.230.225.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "ael7usRxv6UsgRGKB3L28AAAARQ"]
[Thu Apr 23 09:54:04.197019 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.196:61473] [client 91.230.225.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "ael7vIV5EysYcTLjmwhz-wAAAdQ"]
[Thu Apr 23 09:54:04.762572 2026] [:error] [pid 42971:tid 42990] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 23 09:54:06.334339 2026] [:error] [pid 42971:tid 42990] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atom.php
[Thu Apr 23 09:54:06.916489 2026] [:error] [pid 42971:tid 42989] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Thu Apr 23 09:54:08.116118 2026] [:error] [pid 42971:tid 43005] [client 185.192.71.31:20471] [client 185.192.71.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.31, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/js/wp-login.php"] [unique_id "ael7wDEP2_5RswrH8bHXYQAAABM"]
[Thu Apr 23 09:54:08.700803 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/worm.PhP
[Thu Apr 23 09:54:08.988254 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Thu Apr 23 09:54:09.337618 2026] [:error] [pid 42971:tid 43005] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/delpaths.php
[Thu Apr 23 09:54:09.914719 2026] [:error] [pid 42971:tid 42994] [client 185.192.71.31:20471] [client 185.192.71.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.31, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "ael7wTEP2_5RswrH8bHXdQAAAAg"]
[Thu Apr 23 09:54:10.748202 2026] [:error] [pid 42971:tid 42987] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Thu Apr 23 09:54:11.037943 2026] [:error] [pid 42971:tid 43008] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin.php
[Thu Apr 23 09:54:11.590247 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/update-core.php
[Thu Apr 23 09:54:12.210008 2026] [:error] [pid 42971:tid 42987] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Thu Apr 23 09:54:13.144746 2026] [:error] [pid 42971:tid 42997] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/content.php
[Thu Apr 23 09:54:15.148434 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 23 09:54:15.436860 2026] [:error] [pid 42971:tid 43006] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/index2.php
[Thu Apr 23 09:54:16.938860 2026] [:error] [pid 42971:tid 42989] [client 185.192.71.31:20471] File does not exist: /usr/local/apache/htdocs/suspended-page/shell.php
[Thu Apr 23 09:54:17.489571 2026] [:error] [pid 42971:tid 42997] [client 185.192.71.31:20471] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ael7yTEP2_5RswrH8bHX0gAAAAs"]
[Thu Apr 23 09:54:18.641278 2026] [:error] [pid 42971:tid 43000] [client 185.192.71.38:65391] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Thu Apr 23 09:54:18.923501 2026] [:error] [pid 42971:tid 43010] [client 185.192.71.38:65391] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "ael7yjEP2_5RswrH8bHX4gAAABg"]
[Thu Apr 23 09:54:19.749767 2026] [:error] [pid 25635:tid 25657] [client 91.230.225.23:40307] File does not exist: /usr/local/apache/htdocs/suspended-page/dir.php
[Thu Apr 23 09:54:20.014555 2026] [:error] [pid 25635:tid 25663] [client 91.230.225.23:40307] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "ael7zMRxv6UsgRGKB3L3hwAAARg"]
[Thu Apr 23 09:54:21.195950 2026] [:error] [pid 65000:tid 65054] [client 91.230.225.17:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/nf_tracking.php
[Thu Apr 23 09:54:21.862392 2026] [:error] [pid 65000:tid 65050] [client 91.230.225.17:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Thu Apr 23 09:54:22.486471 2026] [:error] [pid 65000:tid 65031] [client 91.230.225.17:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/l.php
[Thu Apr 23 09:54:22.770676 2026] [:error] [pid 65000:tid 65056] [client 91.230.225.17:51725] File does not exist: /usr/local/apache/htdocs/suspended-page/repeater.php
[Thu Apr 23 09:54:23.393142 2026] [:error] [pid 65000:tid 65041] [client 91.230.225.17:51725] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "ael7z76vRb9j6psK2Zb6gQAAAgg"]
[Thu Apr 23 09:54:23.958854 2026] [:error] [pid 43083:tid 43107] [client 91.230.225.17:53119] File does not exist: /usr/local/apache/htdocs/suspended-page/contacts.php
[Thu Apr 23 09:54:24.242123 2026] [:error] [pid 43083:tid 43101] [client 91.230.225.17:53119] File does not exist: /usr/local/apache/htdocs/suspended-page/wsa.php
[Thu Apr 23 09:54:24.519329 2026] [:error] [pid 43083:tid 43103] [client 91.230.225.17:53119] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ael70DC5hrvNXosL83ITowAAANI"]
[Thu Apr 23 09:54:25.360748 2026] [:error] [pid 64998:tid 65026] [client 91.230.225.204:43033] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "ael70YV5EysYcTLjmwh04QAAAdg"]
[Thu Apr 23 09:54:26.198334 2026] [:error] [pid 42971:tid 43001] [client 91.230.225.17:38285] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Thu Apr 23 09:54:27.095562 2026] [:error] [pid 42971:tid 42994] [client 91.230.225.17:38285] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/file.php
[Thu Apr 23 09:54:27.397782 2026] [:error] [pid 42971:tid 42991] [client 91.230.225.17:38285] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/admin.php
[Thu Apr 23 09:54:27.666021 2026] [:error] [pid 42971:tid 42999] [client 91.230.225.17:38285] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "ael70zEP2_5RswrH8bHYHgAAAA0"]
[Thu Apr 23 09:54:28.233518 2026] [:error] [pid 42971:tid 43005] [client 91.230.225.207:49469] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "ael71DEP2_5RswrH8bHYIgAAABM"]
[Thu Apr 23 09:54:30.245960 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.17:61703] File does not exist: /usr/local/apache/htdocs/suspended-page/tox.php
[Thu Apr 23 09:54:30.805035 2026] [:error] [pid 64998:tid 65015] [client 91.230.225.17:61703] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "ael71oV5EysYcTLjmwh1cAAAAc0"]
[Thu Apr 23 09:54:31.650721 2026] [:error] [pid 43083:tid 43087] [client 91.230.225.204:60695] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "ael71zC5hrvNXosL83IT7wAAAMI"]
[Thu Apr 23 09:54:32.475700 2026] [:error] [pid 65000:tid 65040] [client 185.192.71.26:59169] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Thu Apr 23 09:54:32.749373 2026] [:error] [pid 65000:tid 65046] [client 185.192.71.26:59169] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-themes.php
[Thu Apr 23 09:54:33.023067 2026] [:error] [pid 65000:tid 65031] [client 185.192.71.26:59169] [client 185.192.71.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "ael72b6vRb9j6psK2Zb7JwAAAgI"]
[Thu Apr 23 09:54:33.845586 2026] [:error] [pid 42973:tid 43065] [client 91.230.225.206:45821] File does not exist: /usr/local/apache/htdocs/suspended-page/mariju.php
[Thu Apr 23 09:54:34.120064 2026] [:error] [pid 42973:tid 43054] [client 91.230.225.206:45821] File does not exist: /usr/local/apache/htdocs/suspended-page/waf_defender.php
[Thu Apr 23 09:54:34.680246 2026] [:error] [pid 42973:tid 43063] [client 91.230.225.206:45821] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu Apr 23 09:54:35.512822 2026] [:error] [pid 42973:tid 43047] [client 91.230.225.206:45821] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "ael7226I0QqmmmLTHE3vjAAAAIQ"]
[Thu Apr 23 09:54:36.056204 2026] [:error] [pid 64998:tid 65004] [client 91.230.225.209:20497] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/about.php
[Thu Apr 23 09:54:37.267790 2026] [:error] [pid 64998:tid 65022] [client 91.230.225.209:20497] [client 91.230.225.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "ael73YV5EysYcTLjmwh14gAAAdQ"]
[Thu Apr 23 09:54:38.111943 2026] [:error] [pid 64998:tid 65020] [client 185.192.71.38:23719] File does not exist: /usr/local/apache/htdocs/suspended-page/theme.php
[Thu Apr 23 09:54:38.966726 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.38:23719] File does not exist: /usr/local/apache/htdocs/suspended-page/Simple.php
[Thu Apr 23 09:54:39.278958 2026] [:error] [pid 64998:tid 65021] [client 185.192.71.38:23719] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Thu Apr 23 09:54:39.861292 2026] [:error] [pid 64998:tid 65007] [client 185.192.71.38:23719] [client 185.192.71.38] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.38, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "ael734V5EysYcTLjmwh1-wAAAcU"]
[Thu Apr 23 09:54:41.296978 2026] [:error] [pid 64998:tid 65005] [client 185.192.71.38:23719] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "ael74YV5EysYcTLjmwh2FQAAAcM"]
[Thu Apr 23 09:54:41.838667 2026] [:error] [pid 42971:tid 43005] [client 185.192.71.32:49759] File does not exist: /usr/local/apache/htdocs/suspended-page/small.php
[Thu Apr 23 09:54:42.110611 2026] [:error] [pid 42971:tid 42991] [client 185.192.71.32:49759] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "ael74jEP2_5RswrH8bHYhgAAAAU"]
[Thu Apr 23 09:54:42.660141 2026] [:error] [pid 65000:tid 65052] [client 91.230.225.17:34733] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Thu Apr 23 09:54:43.216263 2026] [:error] [pid 65000:tid 65040] [client 91.230.225.17:34733] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Thu Apr 23 09:54:43.777127 2026] [:error] [pid 65000:tid 65049] [client 91.230.225.17:34733] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "ael7476vRb9j6psK2Zb8IgAAAhA"]
[Thu Apr 23 09:54:44.633844 2026] [:error] [pid 25635:tid 25661] [client 185.192.71.27:61481] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-files.php
[Thu Apr 23 09:54:44.925114 2026] [:error] [pid 25635:tid 25645] [client 185.192.71.27:61481] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 23 09:54:45.208167 2026] [:error] [pid 25635:tid 25657] [client 185.192.71.27:61481] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "ael75cRxv6UsgRGKB3L4fAAAARI"]
[Thu Apr 23 09:54:45.790928 2026] [:error] [pid 43083:tid 43085] [client 91.230.225.195:25623] [client 91.230.225.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "ael75TC5hrvNXosL83IUzgAAAMA"]
[Thu Apr 23 09:54:46.369201 2026] [:error] [pid 42973:tid 43061] [client 185.192.71.37:24197] File does not exist: /usr/local/apache/htdocs/suspended-page/aks.php
[Thu Apr 23 09:54:46.647670 2026] [:error] [pid 42973:tid 43043] [client 185.192.71.37:24197] File does not exist: /usr/local/apache/htdocs/suspended-page/litespeed.php
[Thu Apr 23 09:54:47.208419 2026] [:error] [pid 42973:tid 43067] [client 185.192.71.37:24197] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "ael7526I0QqmmmLTHE3v4AAAAJg"]
[Thu Apr 23 09:54:47.776936 2026] [:error] [pid 64998:tid 65011] [client 91.230.225.207:40397] File does not exist: /usr/local/apache/htdocs/suspended-page/wpn.php
[Thu Apr 23 09:54:48.335337 2026] [:error] [pid 64998:tid 65021] [client 91.230.225.207:40397] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/iR7SzrsOUEP.php
[Thu Apr 23 09:54:48.612934 2026] [:error] [pid 64998:tid 65017] [client 91.230.225.207:40397] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "ael76IV5EysYcTLjmwh2xwAAAc8"]
[Thu Apr 23 09:54:49.433186 2026] [:error] [pid 25635:tid 25641] [client 91.230.225.19:22275] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/db.php"] [unique_id "ael76cRxv6UsgRGKB3L4lgAAAQI"]
[Thu Apr 23 09:54:49.987776 2026] [:error] [pid 65000:tid 65040] [client 91.230.225.199:20963] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "ael76b6vRb9j6psK2Zb8dQAAAgc"]
[Thu Apr 23 09:54:50.542530 2026] [:error] [pid 25635:tid 25643] [client 91.230.225.24:33825] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "ael76sRxv6UsgRGKB3L4pgAAAQQ"]
[Thu Apr 23 09:54:51.106639 2026] [:error] [pid 42973:tid 43050] [client 91.230.225.24:39747] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "ael7626I0QqmmmLTHE3v_QAAAIc"]
[Thu Apr 23 09:54:51.648308 2026] [:error] [pid 42973:tid 43049] [client 185.192.71.22:36105] [client 185.192.71.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "ael7626I0QqmmmLTHE3wCgAAAIY"]
[Thu Apr 23 09:54:52.197706 2026] [:error] [pid 64998:tid 65020] [client 91.230.225.20:65023] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "ael77IV5EysYcTLjmwh2_QAAAdI"]
[Thu Apr 23 09:54:54.314331 2026] [:error] [pid 42971:tid 43004] [client 91.230.225.207:46057] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "ael77jEP2_5RswrH8bHZGgAAABI"]
[Thu Apr 23 09:54:54.854769 2026] [:error] [pid 42973:tid 43052] [client 185.192.71.27:53643] [client 185.192.71.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "ael77m6I0QqmmmLTHE3wIwAAAIk"]
[Thu Apr 23 09:54:55.386478 2026] [:error] [pid 42973:tid 43062] [client 91.230.225.19:62399] [client 91.230.225.19] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "ael7726I0QqmmmLTHE3wMAAAAJM"]
[Thu Apr 23 09:54:55.921522 2026] [:error] [pid 42972:tid 43039] [client 91.230.225.17:49059] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "ael778OAb-3sOknsk4dCuQAAAFc"]
[Thu Apr 23 09:54:56.465059 2026] [:error] [pid 65000:tid 65045] [client 185.192.71.30:61151] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "ael78L6vRb9j6psK2Zb8_wAAAgw"]
[Thu Apr 23 09:54:57.021097 2026] [:error] [pid 65000:tid 65051] [client 91.230.225.23:41043] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-load.php
[Thu Apr 23 09:54:57.844668 2026] [:error] [pid 65000:tid 65051] [client 91.230.225.23:41043] [client 91.230.225.23] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.23, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ael78b6vRb9j6psK2Zb9FAAAAhI"]
[Thu Apr 23 09:54:59.241522 2026] [:error] [pid 65000:tid 65047] [client 91.230.225.23:41043] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "ael7876vRb9j6psK2Zb9JgAAAg4"]
[Thu Apr 23 09:55:00.355030 2026] [:error] [pid 42973:tid 43057] [client 185.192.71.34:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Thu Apr 23 09:55:00.630682 2026] [:error] [pid 42973:tid 43059] [client 185.192.71.34:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-fmfile.php
[Thu Apr 23 09:55:01.766728 2026] [:error] [pid 42973:tid 43064] [client 185.192.71.34:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/memberfuns.php
[Thu Apr 23 09:55:02.067528 2026] [:error] [pid 42973:tid 43066] [client 185.192.71.34:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/infos.php
[Thu Apr 23 09:55:03.245127 2026] [:error] [pid 42973:tid 43054] [client 185.192.71.34:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/options-writing.php
[Thu Apr 23 09:55:03.543613 2026] [:error] [pid 42973:tid 43052] [client 185.192.71.34:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/options-reading.php
[Thu Apr 23 09:55:03.845393 2026] [:error] [pid 42973:tid 43065] [client 185.192.71.34:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/wsad.php
[Thu Apr 23 09:55:04.120960 2026] [:error] [pid 42973:tid 43043] [client 185.192.71.34:39615] File does not exist: /usr/local/apache/htdocs/suspended-page/nation.php
[Thu Apr 23 09:55:04.405209 2026] [:error] [pid 42973:tid 43054] [client 185.192.71.34:39615] [client 185.192.71.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "ael7-G6I0QqmmmLTHE3wkAAAAIs"]
[Thu Apr 23 09:55:04.973200 2026] [:error] [pid 25635:tid 25654] [client 185.192.71.25:40475] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "ael7-MRxv6UsgRGKB3L5BAAAAQ8"]
[Thu Apr 23 09:55:05.581547 2026] [:error] [pid 64998:tid 65018] [client 185.192.71.23:28769] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "ael7-YV5EysYcTLjmwh4QAAAAdA"]
[Thu Apr 23 09:55:06.519344 2026] [:error] [pid 64998:tid 65008] [client 185.192.71.31:25265] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-atomx.php
[Thu Apr 23 09:55:06.812524 2026] [:error] [pid 64998:tid 65014] [client 185.192.71.31:25265] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Thu Apr 23 09:55:07.365034 2026] [:error] [pid 64998:tid 65008] [client 185.192.71.31:25265] File does not exist: /usr/local/apache/htdocs/suspended-page/XxX.php
[Thu Apr 23 09:55:07.929653 2026] [:error] [pid 64998:tid 65018] [client 185.192.71.31:25265] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "ael7-4V5EysYcTLjmwh4lgAAAdA"]
[Thu Apr 23 09:55:08.476666 2026] [:error] [pid 42971:tid 43006] [client 185.192.71.39:31141] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "ael7_DEP2_5RswrH8bHZkgAAABQ"]
[Thu Apr 23 09:55:09.125028 2026] [:error] [pid 25635:tid 25644] [client 185.192.71.33:29791] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "ael7_cRxv6UsgRGKB3L5RQAAAQU"]
[Thu Apr 23 09:55:10.786067 2026] [:error] [pid 59700:tid 59718] [client 91.230.225.11:45589] [client 91.230.225.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "ael7_pXyGZJFeAIDWtmTIwAAAVA"]
[Thu Apr 23 09:55:11.604304 2026] [:error] [pid 42972:tid 43038] [client 91.230.225.206:29659] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "ael7_8OAb-3sOknsk4dDNgAAAFY"]
[Thu Apr 23 09:55:13.793758 2026] [:error] [pid 25635:tid 25649] [client 91.230.225.21:35683] [client 91.230.225.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "ael8AcRxv6UsgRGKB3L5kQAAAQo"]
[Thu Apr 23 09:55:17.572318 2026] [:error] [pid 42971:tid 42987] [client 91.230.225.14:35241] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ael8BTEP2_5RswrH8bHZ0wAAAAE"]
[Thu Apr 23 09:55:19.271647 2026] [:error] [pid 64967:tid 64978] [client 91.230.225.199:47057] File does not exist: /usr/local/apache/htdocs/suspended-page/xex.php
[Thu Apr 23 09:55:19.541295 2026] [:error] [pid 64967:tid 64969] [client 91.230.225.199:47057] [client 91.230.225.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/about.php"] [unique_id "ael8B4AV4GfOOdX8QzowbgAAAYA"]
[Thu Apr 23 09:55:20.650709 2026] [:error] [pid 42973:tid 43066] [client 91.230.225.17:43885] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-head.php
[Thu Apr 23 09:55:21.512925 2026] [:error] [pid 42973:tid 43065] [client 91.230.225.17:43885] File does not exist: /usr/local/apache/htdocs/suspended-page/makeasmtp.php
[Thu Apr 23 09:55:21.780300 2026] [:error] [pid 42973:tid 43058] [client 91.230.225.17:43885] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "ael8CW6I0QqmmmLTHE3xHAAAAI8"]
[Thu Apr 23 09:55:24.077512 2026] [:error] [pid 42973:tid 43062] [client 185.192.71.31:37787] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "ael8DG6I0QqmmmLTHE3xNAAAAJM"]
[Thu Apr 23 09:55:25.714676 2026] [:error] [pid 64967:tid 64987] [client 185.192.71.31:63885] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "ael8DYAV4GfOOdX8QzowrgAAAZI"]
[Thu Apr 23 09:55:27.454728 2026] [:error] [pid 43083:tid 43091] [client 91.230.225.24:40769] [client 91.230.225.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "ael8DzC5hrvNXosL83IWtAAAAMY"]
[Thu Apr 23 09:55:28.309388 2026] [:error] [pid 64998:tid 65025] [client 91.230.225.18:23247] File does not exist: /usr/local/apache/htdocs/suspended-page/click.php
[Thu Apr 23 09:55:28.584179 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.18:23247] [client 91.230.225.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "ael8EIV5EysYcTLjmwh6LwAAAco"]
[Thu Apr 23 09:55:30.180775 2026] [:error] [pid 43083:tid 43086] [client 91.230.225.15:60655] [client 91.230.225.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "ael8EjC5hrvNXosL83IWwgAAAME"]
[Thu Apr 23 09:55:35.889290 2026] [:error] [pid 43083:tid 43105] [client 185.192.71.40:61561] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "ael8FzC5hrvNXosL83IXGQAAANQ"]
[Thu Apr 23 09:55:36.446310 2026] [:error] [pid 65000:tid 65049] [client 185.92.25.114:31179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-admin.php
[Thu Apr 23 09:55:37.593821 2026] [:error] [pid 65000:tid 65046] [client 185.92.25.114:31179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-editor.php
[Thu Apr 23 09:55:37.886179 2026] [:error] [pid 65000:tid 65051] [client 185.92.25.114:31179] [client 185.92.25.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "ael8Gb6vRb9j6psK2Zb_dgAAAhI"]
[Thu Apr 23 09:55:38.982328 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.198:63013] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfusm.php
[Thu Apr 23 09:55:39.550603 2026] [:error] [pid 43083:tid 43100] [client 91.230.225.198:63013] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ael8GzC5hrvNXosL83IXRAAAAM8"]
[Thu Apr 23 09:55:40.103454 2026] [:error] [pid 65000:tid 65037] [client 91.230.225.207:33759] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "ael8HL6vRb9j6psK2Zb_iwAAAgQ"]
[Thu Apr 23 09:55:42.037111 2026] [:error] [pid 25635:tid 25647] [client 185.192.71.38:43851] [client 185.192.71.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "ael8HsRxv6UsgRGKB3L6xAAAAQg"]
[Thu Apr 23 09:55:43.181159 2026] [:error] [pid 43083:tid 43103] [client 91.230.225.23:21047] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "ael8HzC5hrvNXosL83IXhwAAANI"]
[Thu Apr 23 09:55:43.739800 2026] [:error] [pid 64998:tid 65020] [client 185.192.71.39:56893] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "ael8H4V5EysYcTLjmwh7HAAAAdI"]
[Thu Apr 23 09:55:44.579536 2026] [:error] [pid 65000:tid 65056] [client 185.192.71.39:37959] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_SpaceTn.php
[Thu Apr 23 09:55:46.037701 2026] [:error] [pid 65000:tid 65044] [client 185.192.71.39:37959] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "ael8Ir6vRb9j6psK2Zb_8gAAAgs"]
[Thu Apr 23 09:55:47.168621 2026] [:error] [pid 42972:tid 43036] [client 185.192.71.31:21801] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "ael8I8OAb-3sOknsk4dE9wAAAFQ"]
[Thu Apr 23 09:55:47.706619 2026] [:error] [pid 64967:tid 64973] [client 91.230.225.197:61005] [client 91.230.225.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "ael8I4AV4GfOOdX8QzoxsgAAAYQ"]
[Thu Apr 23 09:55:48.559678 2026] [:error] [pid 64998:tid 65015] [client 185.192.71.33:25953] File does not exist: /usr/local/apache/htdocs/suspended-page/gm.php
[Thu Apr 23 09:55:48.826099 2026] [:error] [pid 64998:tid 65023] [client 185.192.71.33:25953] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "ael8JIV5EysYcTLjmwh7jAAAAdU"]
[Thu Apr 23 09:55:49.646760 2026] [:error] [pid 42972:tid 43036] [client 185.192.71.32:52831] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "ael8JcOAb-3sOknsk4dFBQAAAFQ"]
[Thu Apr 23 09:55:51.705139 2026] [:error] [pid 25635:tid 25649] [client 91.230.225.204:36755] [client 91.230.225.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "ael8J8Rxv6UsgRGKB3L7RAAAAQo"]
[Thu Apr 23 09:55:52.543730 2026] [:error] [pid 59700:tid 59716] [client 91.230.225.207:35281] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-install.php
[Thu Apr 23 09:55:52.836753 2026] [:error] [pid 59700:tid 59704] [client 91.230.225.207:35281] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "ael8KJXyGZJFeAIDWtmVAQAAAUI"]
[Thu Apr 23 09:55:53.925138 2026] [:error] [pid 42973:tid 43051] [client 91.230.225.23:23423] [client 91.230.225.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "ael8KW6I0QqmmmLTHE3yqgAAAIg"]
[Thu Apr 23 09:55:54.752568 2026] [:error] [pid 43083:tid 43090] [client 91.230.225.10:25915] [client 91.230.225.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/as.php"] [unique_id "ael8KjC5hrvNXosL83IYAgAAAMU"]
[Thu Apr 23 09:55:55.572188 2026] [:error] [pid 65000:tid 65037] [client 91.230.225.203:44201] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "ael8K76vRb9j6psK2ZYAaQAAAgQ"]
[Thu Apr 23 09:55:56.108533 2026] [:error] [pid 42972:tid 43017] [client 185.192.71.40:36435] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/install.php"] [unique_id "ael8LMOAb-3sOknsk4dFKgAAAEE"]
[Thu Apr 23 09:55:56.657773 2026] [:error] [pid 65000:tid 65055] [client 91.230.225.198:55989] [client 91.230.225.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "ael8LL6vRb9j6psK2ZYAfwAAAhY"]
[Thu Apr 23 09:55:58.868511 2026] [:error] [pid 42972:tid 43024] [client 185.192.71.40:25855] [client 185.192.71.40] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "ael8LsOAb-3sOknsk4dFWwAAAEg"]
[Thu Apr 23 09:56:00.263884 2026] [:error] [pid 42971:tid 42997] [client 91.230.225.20:38983] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "ael8MDEP2_5RswrH8bHcHAAAAAs"]
[Thu Apr 23 09:56:01.094896 2026] [:error] [pid 65000:tid 65030] [client 185.192.71.25:35337] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Thu Apr 23 09:56:01.362079 2026] [:error] [pid 65000:tid 65055] [client 185.192.71.25:35337] [client 185.192.71.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "ael8Mb6vRb9j6psK2ZYAvAAAAhY"]
[Thu Apr 23 09:56:02.490156 2026] [:error] [pid 42971:tid 43002] [client 91.230.225.205:35451] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "ael8MjEP2_5RswrH8bHcRgAAABA"]
[Thu Apr 23 09:56:03.104970 2026] [:error] [pid 43083:tid 43101] [client 185.192.71.24:59541] File does not exist: /usr/local/apache/htdocs/suspended-page/wsax.php
[Thu Apr 23 09:56:04.549305 2026] [:error] [pid 43083:tid 43087] [client 185.192.71.24:59541] [client 185.192.71.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "ael8NDC5hrvNXosL83IYcQAAAMI"]
[Thu Apr 23 09:56:05.374492 2026] [:error] [pid 42971:tid 42987] [client 91.230.225.16:60205] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "ael8NTEP2_5RswrH8bHcaQAAAAE"]
[Thu Apr 23 09:56:07.292377 2026] [:error] [pid 42972:tid 43017] [client 91.230.225.16:33903] [client 91.230.225.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "ael8N8OAb-3sOknsk4dF4QAAAEE"]
[Thu Apr 23 09:56:08.409442 2026] [:error] [pid 65000:tid 65052] [client 185.192.71.32:51195] [client 185.192.71.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "ael8OL6vRb9j6psK2ZYBHQAAAhM"]
[Thu Apr 23 09:56:11.168457 2026] [:error] [pid 43083:tid 43097] [client 185.192.71.23:63123] [client 185.192.71.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "ael8OzC5hrvNXosL83IY6AAAAMw"]
[Thu Apr 23 09:56:11.715344 2026] [:error] [pid 64967:tid 64972] [client 185.192.71.31:42109] [client 185.192.71.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "ael8O4AV4GfOOdX8Qzoy3wAAAYM"]
[Thu Apr 23 09:56:13.372327 2026] [:error] [pid 64998:tid 65026] [client 91.230.225.23:20279] [client 91.230.225.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php%20"] [unique_id "ael8PYV5EysYcTLjmwh9aAAAAdg"]
[Thu Apr 23 09:56:14.743248 2026] [:error] [pid 42971:tid 42988] [client 91.230.225.20:63399] [client 91.230.225.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "ael8PjEP2_5RswrH8bHc3AAAAAI"]
[Thu Apr 23 09:56:15.300036 2026] [:error] [pid 64998:tid 65009] [client 91.230.225.203:46155] [client 91.230.225.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "ael8P4V5EysYcTLjmwh9jwAAAcc"]
[Thu Apr 23 09:56:16.404939 2026] [:error] [pid 64967:tid 64973] [client 185.192.71.39:42917] [client 185.192.71.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "ael8QIAV4GfOOdX8QzozKwAAAYQ"]
[Thu Apr 23 09:56:16.949658 2026] [:error] [pid 43083:tid 43087] [client 185.192.71.37:56535] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "ael8QDC5hrvNXosL83IZEwAAAMI"]
[Thu Apr 23 09:56:17.526078 2026] [:error] [pid 42971:tid 43005] [client 91.230.225.200:21321] [client 91.230.225.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 91.230.225.200, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "ael8QTEP2_5RswrH8bHc8AAAABM"]
[Thu Apr 23 09:56:17.536028 2026] [:error] [pid 42971:tid 43005] [client 91.230.225.200:21321] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/wp-login.php
[Thu Apr 23 09:56:17.815887 2026] [:error] [pid 42971:tid 42992] [client 91.230.225.200:21321] [client 91.230.225.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "ael8QTEP2_5RswrH8bHc8wAAAAY"]
[Thu Apr 23 09:56:18.652563 2026] [:error] [pid 65000:tid 65049] [client 185.192.71.30:36973] File does not exist: /usr/local/apache/htdocs/suspended-page/bs1.php
[Thu Apr 23 09:56:18.933201 2026] [:error] [pid 65000:tid 65045] [client 185.192.71.30:36973] [client 185.192.71.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "ael8Qr6vRb9j6psK2ZYBpgAAAgw"]
[Thu Apr 23 09:56:19.466974 2026] [:error] [pid 64998:tid 65013] [client 91.230.225.17:26449] [client 91.230.225.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/network.php"] [unique_id "ael8Q4V5EysYcTLjmwh99QAAAcs"]
[Thu Apr 23 09:56:20.047721 2026] [:error] [pid 42971:tid 42992] [client 185.192.71.33:41781] File does not exist: /usr/local/apache/htdocs/suspended-page/page.php
[Thu Apr 23 09:56:21.997073 2026] [:error] [pid 42971:tid 43010] [client 185.192.71.33:41781] [client 185.192.71.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "ael8RTEP2_5RswrH8bHdPQAAABg"]
[Thu Apr 23 09:56:22.559107 2026] [:error] [pid 42973:tid 43058] [client 185.192.71.35:33679] [client 185.192.71.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "ael8Rm6I0QqmmmLTHE3z2QAAAI8"]
[Thu Apr 23 09:56:23.669276 2026] [:error] [pid 64998:tid 65012] [client 91.230.225.205:43949] [client 91.230.225.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "ael8R4V5EysYcTLjmwh-cgAAAco"]
[Thu Apr 23 09:56:24.246020 2026] [:error] [pid 25635:tid 25640] [client 91.230.225.12:31565] [client 91.230.225.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "ael8SMRxv6UsgRGKB3L8rgAAAQE"]
[Thu Apr 23 09:56:24.787112 2026] [:error] [pid 42973:tid 43044] [client 185.192.71.29:38043] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/gecko-old.php
[Thu Apr 23 09:56:25.077625 2026] [:error] [pid 42973:tid 43067] [client 185.192.71.29:38043] [client 185.192.71.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.71.29, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "ael8SW6I0QqmmmLTHE3z8AAAAJg"]
[Thu Apr 23 09:56:25.644179 2026] [:error] [pid 42973:tid 43063] [client 185.192.71.29:38043] [client 185.192.71.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "ael8SW6I0QqmmmLTHE3z-wAAAJQ"]
[Thu Apr 23 09:56:27.026949 2026] [:error] [pid 64998:tid 65016] [client 185.192.71.36:35101] [client 185.192.71.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "ael8S4V5EysYcTLjmwh-5QAAAc4"]
[Thu Apr 23 09:56:27.569408 2026] [:error] [pid 64998:tid 65020] [client 91.230.225.206:63781] File does not exist: /usr/local/apache/htdocs/suspended-page/ws.php
[Thu Apr 23 09:56:27.839013 2026] [:error] [pid 64998:tid 65016] [client 91.230.225.206:63781] [client 91.230.225.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "ael8S4V5EysYcTLjmwh-_wAAAc4"]
[Thu Apr 23 09:56:28.379451 2026] [:error] [pid 64998:tid 65018] [client 91.230.225.207:40559] [client 91.230.225.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "ael8TIV5EysYcTLjmwh_DwAAAdA"]
[Thu Apr 23 09:56:30.051601 2026] [:error] [pid 43083:tid 43104] [client 91.230.225.14:26795] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Thu Apr 23 09:56:31.320713 2026] [:error] [pid 43083:tid 43106] [client 91.230.225.14:26795] [client 91.230.225.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "ael8TzC5hrvNXosL83IZpAAAANU"]
[Thu Apr 23 09:56:42.615705 2026] [:error] [pid 42972:tid 43030] [client 185.192.71.37:42133] [client 185.192.71.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "ael8WsOAb-3sOknsk4dHYwAAAE4"]
[Thu Apr 23 09:56:47.498430 2026] [:error] [pid 42972:tid 43030] [client 185.192.71.38:51693] [client 185.192.71.38] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uploads/"] [unique_id "ael8X8OAb-3sOknsk4dH6AAAAE4"]
[Thu Apr 23 09:57:17.354139 2026] [autoindex:error] [pid 65000:tid 65046] [client 91.230.225.18:36577] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 11:57:49.490029 2026] [:error] [pid 43083:tid 43095] [client 156.146.39.46:17772] [client 156.146.39.46] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aemYvTC5hrvNXosL83I1jwAAAMo"]
[Thu Apr 23 22:57:37.457107 2026] [:error] [pid 65000:tid 65054] [client 34.125.63.232:52504] [client 34.125.63.232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aeozYb6vRb9j6psK2ZbI7wAAAhU"]
[Thu Apr 23 23:36:56.791745 2026] [:error] [pid 42973:tid 43056] [client 74.248.121.178:40193] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Thu Apr 23 23:36:57.074588 2026] [:error] [pid 42973:tid 43054] [client 74.248.121.178:40193] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Thu Apr 23 23:36:57.357625 2026] [:error] [pid 42973:tid 43063] [client 74.248.121.178:40193] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Thu Apr 23 23:36:58.323686 2026] [:error] [pid 42973:tid 43065] [client 74.248.121.178:40193] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Thu Apr 23 23:36:58.613623 2026] [:error] [pid 42973:tid 43052] [client 74.248.121.178:40193] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Thu Apr 23 23:36:58.896291 2026] [:error] [pid 42973:tid 43046] [client 74.248.121.178:40193] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Thu Apr 23 23:36:59.462617 2026] [:error] [pid 42973:tid 43061] [client 74.248.121.178:40193] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Thu Apr 23 23:36:59.745859 2026] [:error] [pid 42973:tid 43050] [client 74.248.121.178:40193] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Thu Apr 23 23:37:00.031618 2026] [:error] [pid 42973:tid 43060] [client 74.248.121.178:40193] File does not exist: /usr/local/apache/htdocs/suspended-page/bkyac.php
[Thu Apr 23 23:37:00.311862 2026] [:error] [pid 42973:tid 43066] [client 74.248.121.178:40193] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wziar1.php"] [unique_id "aeo8nG6I0QqmmmLTHE1CrwAAAJc"]
[Thu Apr 23 23:37:03.151559 2026] [:error] [pid 64998:tid 65006] [client 74.248.121.178:53504] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wziar1.php"] [unique_id "aeo8n4V5EysYcTLjmwi-JgAAAcQ"]
[Thu Apr 23 23:37:04.095671 2026] [:error] [pid 43083:tid 43089] [client 74.248.121.178:38716] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wziar1.php"] [unique_id "aeo8oDC5hrvNXosL83KMrwAAAMQ"]
[Thu Apr 23 23:37:06.475451 2026] [:error] [pid 42973:tid 43050] [client 74.248.121.178:52172] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wziar1.php"] [unique_id "aeo8om6I0QqmmmLTHE1CtQAAAIc"]
[Thu Apr 23 23:37:09.145327 2026] [:error] [pid 42973:tid 43064] [client 74.248.121.178:38677] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeo8pW6I0QqmmmLTHE1CvgAAAJU"]
[Thu Apr 23 23:37:11.545360 2026] [:error] [pid 59700:tid 59715] [client 74.248.121.178:62792] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeo8p5XyGZJFeAIDWtlFOAAAAU0"]
[Thu Apr 23 23:37:13.327716 2026] [:error] [pid 42972:tid 43019] [client 74.248.121.178:4795] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeo8qcOAb-3sOknsk4dtVgAAAEM"]
[Thu Apr 23 23:37:15.220291 2026] [:error] [pid 65000:tid 65052] [client 74.248.121.178:4595] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aeo8q76vRb9j6psK2ZbfzgAAAhM"]
[Thu Apr 23 23:37:17.211561 2026] [:error] [pid 65000:tid 65038] [client 74.248.121.178:62900] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "aeo8rb6vRb9j6psK2Zbf1QAAAgU"]
[Thu Apr 23 23:37:18.952297 2026] [:error] [pid 42972:tid 43020] [client 74.248.121.178:48537] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "aeo8rsOAb-3sOknsk4dtXwAAAEQ"]
[Thu Apr 23 23:37:21.669115 2026] [:error] [pid 65000:tid 65052] [client 74.248.121.178:48550] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "aeo8sb6vRb9j6psK2Zbf7wAAAhM"]
[Thu Apr 23 23:37:22.882037 2026] [:error] [pid 65000:tid 65055] [client 74.248.121.178:4470] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "aeo8sr6vRb9j6psK2Zbf9gAAAhY"]
[Thu Apr 23 23:37:24.847338 2026] [:error] [pid 42972:tid 43038] [client 74.248.121.178:37686] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeo8tMOAb-3sOknsk4dtZAAAAFY"]
[Thu Apr 23 23:37:26.552798 2026] [:error] [pid 42971:tid 42989] [client 74.248.121.178:29570] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeo8tjEP2_5RswrH8bE6fwAAAAM"]
[Thu Apr 23 23:37:28.750494 2026] [:error] [pid 43083:tid 43094] [client 74.248.121.178:59057] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeo8uDC5hrvNXosL83KMtwAAAMk"]
[Thu Apr 23 23:37:31.250220 2026] [:error] [pid 25635:tid 25639] [client 74.248.121.178:39255] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aeo8u8Rxv6UsgRGKB3I_fQAAAQA"]
[Thu Apr 23 23:37:32.742670 2026] [:error] [pid 42973:tid 43059] [client 74.248.121.178:50960] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aeo8vG6I0QqmmmLTHE1CyAAAAJA"]
[Thu Apr 23 23:37:35.562558 2026] [:error] [pid 64998:tid 65016] [client 74.248.121.178:4322] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aeo8v4V5EysYcTLjmwi-jgAAAc4"]
[Thu Apr 23 23:37:37.496670 2026] [:error] [pid 64967:tid 64983] [client 74.248.121.178:4337] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aeo8wYAV4GfOOdX8QzqEoAAAAY4"]
[Thu Apr 23 23:37:39.465101 2026] [:error] [pid 42972:tid 43024] [client 74.248.121.178:48979] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aeo8w8OAb-3sOknsk4dtfgAAAEg"]
[Thu Apr 23 23:37:40.671380 2026] [:error] [pid 42973:tid 43063] [client 74.248.121.178:39288] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "aeo8xG6I0QqmmmLTHE1C0QAAAJQ"]
[Thu Apr 23 23:37:42.439381 2026] [:error] [pid 42973:tid 43064] [client 74.248.121.178:48997] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "aeo8xm6I0QqmmmLTHE1C0wAAAJU"]
[Thu Apr 23 23:37:43.969648 2026] [:error] [pid 42973:tid 43066] [client 74.248.121.178:59061] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "aeo8x26I0QqmmmLTHE1C1AAAAJc"]
[Thu Apr 23 23:37:45.578652 2026] [:error] [pid 42971:tid 43007] [client 74.248.121.178:50990] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "aeo8yTEP2_5RswrH8bE6kwAAABU"]
[Thu Apr 23 23:37:47.171040 2026] [:error] [pid 42971:tid 42994] [client 74.248.121.178:49009] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aeo8yzEP2_5RswrH8bE6lQAAAAg"]
[Thu Apr 23 23:37:50.150174 2026] [:error] [pid 59700:tid 59720] [client 74.248.121.178:48983] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aeo8zpXyGZJFeAIDWtlFSAAAAVI"]
[Thu Apr 23 23:37:51.729415 2026] [:error] [pid 65000:tid 65042] [client 74.248.121.178:49043] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aeo8z76vRb9j6psK2ZbgHwAAAgk"]
[Thu Apr 23 23:37:55.264510 2026] [:error] [pid 64998:tid 65022] [client 74.248.121.178:4351] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aeo804V5EysYcTLjmwi-nQAAAdQ"]
[Thu Apr 23 23:37:57.388709 2026] [:error] [pid 42972:tid 43022] [client 74.248.121.178:39271] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aeo81cOAb-3sOknsk4dtkwAAAEY"]
[Thu Apr 23 23:37:59.407122 2026] [:error] [pid 46953:tid 46973] [client 74.248.121.178:46266] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aeo810nlpdHh-P6wKbpSNwAAAlE"]
[Thu Apr 23 23:38:00.596125 2026] [:error] [pid 46953:tid 46970] [client 74.248.121.178:50948] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Thu Apr 23 23:38:00.856508 2026] [:error] [pid 46953:tid 46967] [client 74.248.121.178:50948] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Thu Apr 23 23:38:01.115584 2026] [:error] [pid 46953:tid 46958] [client 74.248.121.178:50948] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Thu Apr 23 23:38:01.374616 2026] [:error] [pid 46953:tid 46960] [client 74.248.121.178:50948] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Thu Apr 23 23:38:01.638549 2026] [:error] [pid 46953:tid 46969] [client 74.248.121.178:50948] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Thu Apr 23 23:38:01.902092 2026] [:error] [pid 46953:tid 46964] [client 74.248.121.178:50948] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 23:38:02.160394 2026] [:error] [pid 46953:tid 46979] [client 74.248.121.178:50948] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Thu Apr 23 23:38:02.424604 2026] [:error] [pid 46953:tid 46980] [client 74.248.121.178:50948] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Thu Apr 23 23:38:02.684459 2026] [:error] [pid 46953:tid 46978] [client 74.248.121.178:50948] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Thu Apr 23 23:38:03.891553 2026] [:error] [pid 46953:tid 46968] [client 74.248.121.178:50948] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Thu Apr 23 23:38:04.147398 2026] [:error] [pid 46953:tid 46972] [client 74.248.121.178:50948] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "aeo83EnlpdHh-P6wKbpSRgAAAlA"]
[Thu Apr 23 23:38:05.476385 2026] [:error] [pid 65000:tid 65030] [client 74.248.121.178:50945] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "aeo83b6vRb9j6psK2ZbgOgAAAgE"]
[Thu Apr 23 23:38:06.685346 2026] [:error] [pid 65000:tid 65053] [client 74.248.121.178:58014] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "aeo83r6vRb9j6psK2ZbgPwAAAhQ"]
[Thu Apr 23 23:38:08.872196 2026] [:error] [pid 65000:tid 65038] [client 74.248.121.178:4429] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abrand.php"] [unique_id "aeo84L6vRb9j6psK2ZbgSwAAAgU"]
[Thu Apr 23 23:38:13.148222 2026] [:error] [pid 64998:tid 65004] [client 74.248.121.178:62881] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeo85YV5EysYcTLjmwi-tAAAAcI"]
[Thu Apr 23 23:38:16.958598 2026] [:error] [pid 65000:tid 65046] [client 74.248.121.178:44020] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeo86L6vRb9j6psK2ZbgYgAAAg0"]
[Thu Apr 23 23:38:18.977667 2026] [:error] [pid 65000:tid 65056] [client 74.248.121.178:53561] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeo86r6vRb9j6psK2ZbgaQAAAhc"]
[Thu Apr 23 23:38:23.687718 2026] [:error] [pid 65000:tid 65044] [client 74.248.121.178:36106] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "aeo8776vRb9j6psK2ZbggAAAAgs"]
[Thu Apr 23 23:38:26.128574 2026] [:error] [pid 42973:tid 43066] [client 74.248.121.178:44056] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo88m6I0QqmmmLTHE1C8gAAAJc"]
[Thu Apr 23 23:38:28.386014 2026] [:error] [pid 42972:tid 43019] [client 74.248.121.178:41784] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo89MOAb-3sOknsk4dtqwAAAEM"]
[Thu Apr 23 23:38:29.580726 2026] [:error] [pid 42973:tid 43045] [client 74.248.121.178:39172] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo89W6I0QqmmmLTHE1C-QAAAII"]
[Thu Apr 23 23:38:32.283570 2026] [:error] [pid 65000:tid 65039] [client 74.248.121.178:36223] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo8-L6vRb9j6psK2ZbgjAAAAgY"]
[Thu Apr 23 23:38:34.929285 2026] [:error] [pid 64998:tid 65008] [client 74.248.121.178:40804] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aeo8-oV5EysYcTLjmwi-1QAAAcY"]
[Thu Apr 23 23:38:37.257135 2026] [:error] [pid 64998:tid 65003] [client 74.248.121.178:4359] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aeo8_YV5EysYcTLjmwi-3AAAAcE"]
[Thu Apr 23 23:38:39.238193 2026] [:error] [pid 42971:tid 43003] [client 74.248.121.178:37721] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aeo8_zEP2_5RswrH8bE6rgAAABE"]
[Thu Apr 23 23:38:40.942352 2026] [:error] [pid 42973:tid 43043] [client 74.248.121.178:32232] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aeo9AG6I0QqmmmLTHE1DBQAAAIA"]
[Thu Apr 23 23:38:42.960408 2026] [:error] [pid 65000:tid 65047] [client 74.248.121.178:4413] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aeo9Ar6vRb9j6psK2ZbgnAAAAg4"]
[Thu Apr 23 23:38:44.347882 2026] [:error] [pid 65000:tid 65042] [client 74.248.121.178:36167] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aeo9BL6vRb9j6psK2ZbgogAAAgk"]
[Thu Apr 23 23:38:45.943203 2026] [:error] [pid 64998:tid 65026] [client 74.248.121.178:41763] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aeo9BYV5EysYcTLjmwi-6gAAAdg"]
[Thu Apr 23 23:38:47.225883 2026] [:error] [pid 65000:tid 65038] [client 74.248.121.178:32247] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aeo9B76vRb9j6psK2ZbgqgAAAgU"]
[Thu Apr 23 23:38:50.070953 2026] [:error] [pid 65000:tid 65056] [client 74.248.121.178:39682] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aeo9Cr6vRb9j6psK2ZbgsQAAAhc"]
[Thu Apr 23 23:38:53.092861 2026] [:error] [pid 64998:tid 65025] [client 74.248.121.178:31172] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aeo9DYV5EysYcTLjmwi--QAAAdc"]
[Thu Apr 23 23:38:56.662135 2026] [:error] [pid 64998:tid 65011] [client 74.248.121.178:31201] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aeo9EIV5EysYcTLjmwi_BAAAAck"]
[Thu Apr 23 23:39:00.713569 2026] [:error] [pid 65000:tid 65057] [client 74.248.121.178:31207] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aeo9FL6vRb9j6psK2Zbg2QAAAhg"]
[Thu Apr 23 23:39:02.674201 2026] [:error] [pid 64998:tid 65015] [client 74.248.121.178:36164] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "aeo9FoV5EysYcTLjmwi_CAAAAc0"]
[Thu Apr 23 23:39:06.275624 2026] [:error] [pid 46953:tid 46978] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Thu Apr 23 23:39:06.576487 2026] [:error] [pid 46953:tid 46972] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Thu Apr 23 23:39:06.882539 2026] [:error] [pid 46953:tid 46963] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Thu Apr 23 23:39:07.187457 2026] [:error] [pid 46953:tid 46959] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Thu Apr 23 23:39:07.488848 2026] [:error] [pid 46953:tid 46975] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Thu Apr 23 23:39:07.790381 2026] [:error] [pid 46953:tid 46958] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Thu Apr 23 23:39:08.093882 2026] [:error] [pid 46953:tid 46973] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Thu Apr 23 23:39:08.396159 2026] [:error] [pid 46953:tid 46960] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Thu Apr 23 23:39:08.697914 2026] [:error] [pid 46953:tid 46976] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Thu Apr 23 23:39:09.000007 2026] [:error] [pid 46953:tid 46980] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Thu Apr 23 23:39:09.314070 2026] [:error] [pid 46953:tid 46962] [client 74.248.121.178:4366] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Thu Apr 23 23:39:09.612724 2026] [:error] [pid 46953:tid 46974] [client 74.248.121.178:4366] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "aeo9HUnlpdHh-P6wKbpSpAAAAlI"]
[Thu Apr 23 23:39:10.670294 2026] [:error] [pid 42972:tid 43037] [client 74.248.121.178:39729] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "aeo9HsOAb-3sOknsk4duPQAAAFU"]
[Thu Apr 23 23:39:15.207638 2026] [:error] [pid 42972:tid 43026] [client 74.248.121.178:61631] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "aeo9I8OAb-3sOknsk4duRQAAAEo"]
[Thu Apr 23 23:39:17.402462 2026] [:error] [pid 65000:tid 65037] [client 74.248.121.178:32230] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "aeo9Jb6vRb9j6psK2ZbhJgAAAgQ"]
[Thu Apr 23 23:39:18.558331 2026] [:error] [pid 43083:tid 43093] [client 74.248.121.178:61599] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeo9JjC5hrvNXosL83KM8QAAAMg"]
[Thu Apr 23 23:39:24.152134 2026] [:error] [pid 64998:tid 65004] [client 74.248.121.178:4392] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeo9LIV5EysYcTLjmwi_VQAAAcI"]
[Thu Apr 23 23:39:28.034769 2026] [:error] [pid 59700:tid 59722] [client 74.248.121.178:37734] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeo9MJXyGZJFeAIDWtlFzQAAAVQ"]
[Thu Apr 23 23:39:31.253693 2026] [:error] [pid 42973:tid 43067] [client 74.248.121.178:61618] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeo9M26I0QqmmmLTHE1DRQAAAJg"]
[Thu Apr 23 23:39:33.001035 2026] [:error] [pid 65000:tid 65053] [client 74.248.121.178:42332] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "aeo9Nb6vRb9j6psK2ZbhVwAAAhQ"]
[Thu Apr 23 23:39:34.958636 2026] [:error] [pid 42971:tid 42999] [client 74.248.121.178:32233] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "aeo9NjEP2_5RswrH8bE6vAAAAA0"]
[Thu Apr 23 23:39:38.395946 2026] [:error] [pid 42972:tid 43031] [client 74.248.121.178:30157] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "aeo9OsOAb-3sOknsk4duZQAAAE8"]
[Thu Apr 23 23:39:41.654871 2026] [:error] [pid 59700:tid 59704] [client 74.248.121.178:49491] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "aeo9PZXyGZJFeAIDWtlF3wAAAUI"]
[Thu Apr 23 23:39:43.589831 2026] [:error] [pid 42972:tid 43026] [client 74.248.121.178:33088] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "aeo9P8OAb-3sOknsk4dudwAAAEo"]
[Thu Apr 23 23:39:46.418971 2026] [:error] [pid 64998:tid 65012] [client 74.248.121.178:4170] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "aeo9QoV5EysYcTLjmwi_fAAAAco"]
[Thu Apr 23 23:39:49.272300 2026] [:error] [pid 64998:tid 65025] [client 74.248.121.178:58094] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "aeo9RYV5EysYcTLjmwi_hgAAAdc"]
[Thu Apr 23 23:39:50.984697 2026] [:error] [pid 42973:tid 43050] [client 74.248.121.178:35083] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "aeo9Rm6I0QqmmmLTHE1DUAAAAIc"]
[Thu Apr 23 23:39:55.959367 2026] [:error] [pid 65000:tid 65037] [client 74.248.121.178:61536] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "aeo9S76vRb9j6psK2ZbhcwAAAgQ"]
[Thu Apr 23 23:40:00.716870 2026] [:error] [pid 65000:tid 65038] [client 74.248.121.178:40278] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "aeo9UL6vRb9j6psK2ZbhkAAAAgU"]
[Thu Apr 23 23:40:05.982688 2026] [:error] [pid 43083:tid 43107] [client 74.248.121.178:32760] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp9.php"] [unique_id "aeo9VTC5hrvNXosL83KNBwAAANY"]
[Thu Apr 23 23:40:08.405963 2026] [:error] [pid 64998:tid 65025] [client 74.248.121.178:58565] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aeo9WIV5EysYcTLjmwi_nQAAAdc"]
[Thu Apr 23 23:40:12.754323 2026] [:error] [pid 65000:tid 65049] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Thu Apr 23 23:40:13.021914 2026] [:error] [pid 65000:tid 65054] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Thu Apr 23 23:40:13.396570 2026] [:error] [pid 65000:tid 65043] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Thu Apr 23 23:40:13.665864 2026] [:error] [pid 65000:tid 65041] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Thu Apr 23 23:40:13.925262 2026] [:error] [pid 65000:tid 65051] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Thu Apr 23 23:40:14.184111 2026] [:error] [pid 65000:tid 65042] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Thu Apr 23 23:40:14.448816 2026] [:error] [pid 65000:tid 65055] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Thu Apr 23 23:40:14.712051 2026] [:error] [pid 65000:tid 65040] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Thu Apr 23 23:40:14.970628 2026] [:error] [pid 65000:tid 65056] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Thu Apr 23 23:40:15.249246 2026] [:error] [pid 65000:tid 65053] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/acc.php
[Thu Apr 23 23:40:15.508689 2026] [:error] [pid 65000:tid 65038] [client 74.248.121.178:32706] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Thu Apr 23 23:40:15.767786 2026] [:error] [pid 65000:tid 65032] [client 74.248.121.178:32706] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeo9X76vRb9j6psK2ZbhxgAAAgM"]
[Thu Apr 23 23:40:20.661824 2026] [:error] [pid 42973:tid 43056] [client 74.248.121.178:32714] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeo9ZG6I0QqmmmLTHE1DdAAAAI0"]
[Thu Apr 23 23:40:23.547277 2026] [:error] [pid 46953:tid 46965] [client 74.248.121.178:61919] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeo9Z0nlpdHh-P6wKbpS7QAAAkk"]
[Thu Apr 23 23:40:26.445295 2026] [:error] [pid 65000:tid 65045] [client 74.248.121.178:42816] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aeo9ar6vRb9j6psK2Zbh-AAAAgw"]
[Thu Apr 23 23:40:29.040404 2026] [:error] [pid 65000:tid 65030] [client 74.248.121.178:5019] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aeo9bb6vRb9j6psK2ZbiBAAAAgE"]
[Thu Apr 23 23:40:33.052952 2026] [:error] [pid 42972:tid 43032] [client 74.248.121.178:5013] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aeo9ccOAb-3sOknsk4dusAAAAFA"]
[Thu Apr 23 23:40:36.154260 2026] [:error] [pid 42973:tid 43046] [client 74.248.121.178:61949] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aeo9dG6I0QqmmmLTHE1DgwAAAIM"]
[Thu Apr 23 23:40:39.455833 2026] [:error] [pid 65000:tid 65043] [client 74.248.121.178:62273] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aeo9d76vRb9j6psK2ZbiEwAAAgo"]
[Thu Apr 23 23:40:42.922504 2026] [:error] [pid 64998:tid 65017] [client 74.248.121.178:42839] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeo9eoV5EysYcTLjmwjAAAAAAc8"]
[Thu Apr 23 23:40:46.130796 2026] [:error] [pid 64998:tid 65018] [client 74.248.121.178:46193] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeo9foV5EysYcTLjmwjACQAAAdA"]
[Thu Apr 23 23:40:47.207091 2026] [:error] [pid 42973:tid 43047] [client 74.248.121.178:33063] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeo9f26I0QqmmmLTHE1DiQAAAIQ"]
[Thu Apr 23 23:40:48.299811 2026] [:error] [pid 25635:tid 25649] [client 74.248.121.178:47392] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeo9gMRxv6UsgRGKB3JAIAAAAQo"]
[Thu Apr 23 23:40:49.928287 2026] [:error] [pid 64998:tid 65019] [client 74.248.121.178:52578] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "aeo9gYV5EysYcTLjmwjADwAAAdE"]
[Thu Apr 23 23:40:51.232154 2026] [:error] [pid 64998:tid 65020] [client 74.248.121.178:64590] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "aeo9g4V5EysYcTLjmwjAEAAAAdI"]
[Thu Apr 23 23:40:52.955989 2026] [:error] [pid 42972:tid 43017] [client 74.248.121.178:5018] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "aeo9hMOAb-3sOknsk4duwAAAAEE"]
[Thu Apr 23 23:40:55.636613 2026] [:error] [pid 59700:tid 59703] [client 74.248.121.178:46151] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "aeo9h5XyGZJFeAIDWtlGKQAAAUE"]
[Thu Apr 23 23:40:59.063864 2026] [:error] [pid 65000:tid 65048] [client 74.248.121.178:47371] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeo9i76vRb9j6psK2ZbiRQAAAg8"]
[Thu Apr 23 23:41:00.864184 2026] [:error] [pid 42973:tid 43064] [client 188.53.229.122:1153] [client 188.53.229.122] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 188.53.229.122, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aeo9jG6I0QqmmmLTHE1DlQAAAJU"]
[Thu Apr 23 23:41:00.869295 2026] [:error] [pid 42973:tid 43064] [client 188.53.229.122:1153] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 23 23:41:02.331818 2026] [:error] [pid 46953:tid 46963] [client 74.248.121.178:46201] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeo9jknlpdHh-P6wKbpTEgAAAkc"]
[Thu Apr 23 23:41:05.668064 2026] [:error] [pid 64998:tid 65021] [client 74.248.121.178:33025] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeo9kYV5EysYcTLjmwjAHgAAAdM"]
[Thu Apr 23 23:41:07.068217 2026] [:error] [pid 59700:tid 59714] [client 74.248.121.178:46261] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "aeo9k5XyGZJFeAIDWtlGMAAAAUw"]
[Thu Apr 23 23:41:12.674696 2026] [:error] [pid 25635:tid 25655] [client 74.248.121.178:62325] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeo9mMRxv6UsgRGKB3JALwAAARA"]
[Thu Apr 23 23:41:17.591032 2026] [:error] [pid 42973:tid 43053] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Thu Apr 23 23:41:17.850197 2026] [:error] [pid 42973:tid 43064] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Thu Apr 23 23:41:18.109199 2026] [:error] [pid 42973:tid 43043] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Thu Apr 23 23:41:18.368342 2026] [:error] [pid 42973:tid 43056] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Thu Apr 23 23:41:18.628746 2026] [:error] [pid 42973:tid 43060] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Thu Apr 23 23:41:18.892429 2026] [:error] [pid 42973:tid 43054] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Thu Apr 23 23:41:19.153170 2026] [:error] [pid 42973:tid 43063] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/prosellers8.php
[Thu Apr 23 23:41:19.422443 2026] [:error] [pid 42973:tid 43058] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Thu Apr 23 23:41:20.633287 2026] [:error] [pid 42973:tid 43058] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Thu Apr 23 23:41:20.903658 2026] [:error] [pid 42973:tid 43045] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/fsjzs.php
[Thu Apr 23 23:41:21.163397 2026] [:error] [pid 42973:tid 43055] [client 74.248.121.178:46173] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Thu Apr 23 23:41:21.423625 2026] [:error] [pid 42973:tid 43052] [client 74.248.121.178:46173] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit-tags.php"] [unique_id "aeo9oW6I0QqmmmLTHE1DrAAAAIk"]
[Thu Apr 23 23:41:24.383743 2026] [:error] [pid 42972:tid 43018] [client 74.248.121.178:48449] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit-tags.php"] [unique_id "aeo9pMOAb-3sOknsk4du3wAAAEI"]
[Thu Apr 23 23:41:28.370874 2026] [:error] [pid 64998:tid 65002] [client 74.248.121.178:38670] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit-tags.php"] [unique_id "aeo9qIV5EysYcTLjmwjAQwAAAcA"]
[Thu Apr 23 23:41:31.104639 2026] [:error] [pid 65000:tid 65056] [client 74.248.121.178:53552] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit-tags.php"] [unique_id "aeo9q76vRb9j6psK2ZbifgAAAhc"]
[Thu Apr 23 23:41:34.925781 2026] [:error] [pid 64967:tid 64982] [client 74.248.121.178:46770] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aeo9roAV4GfOOdX8QzqFLwAAAY0"]
[Thu Apr 23 23:41:36.719728 2026] [:error] [pid 46953:tid 46972] [client 74.248.121.178:42269] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aeo9sEnlpdHh-P6wKbpTJAAAAlA"]
[Thu Apr 23 23:41:38.836062 2026] [:error] [pid 64998:tid 65009] [client 74.248.121.178:31124] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aeo9soV5EysYcTLjmwjAVwAAAcc"]
[Thu Apr 23 23:41:42.356930 2026] [:error] [pid 42973:tid 43045] [client 74.248.121.178:4857] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aeo9tm6I0QqmmmLTHE1EFAAAAII"]
[Thu Apr 23 23:41:43.906683 2026] [:error] [pid 42973:tid 43056] [client 74.248.121.178:31145] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "aeo9t26I0QqmmmLTHE1EGwAAAI0"]
[Thu Apr 23 23:41:46.975954 2026] [:error] [pid 42972:tid 43017] [client 74.248.121.178:44982] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "aeo9usOAb-3sOknsk4du9QAAAEE"]
[Thu Apr 23 23:41:49.083346 2026] [:error] [pid 46953:tid 46981] [client 74.248.121.178:33654] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "aeo9vUnlpdHh-P6wKbpTKAAAAlg"]
[Thu Apr 23 23:41:53.646323 2026] [:error] [pid 65000:tid 65029] [client 74.248.121.178:52660] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "aeo9wb6vRb9j6psK2ZbingAAAgA"]
[Thu Apr 23 23:41:55.942521 2026] [:error] [pid 25635:tid 25653] [client 74.248.121.178:35623] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeo9w8Rxv6UsgRGKB3JAMgAAAQ4"]
[Thu Apr 23 23:41:58.473483 2026] [:error] [pid 43083:tid 43088] [client 74.248.121.178:57085] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeo9xjC5hrvNXosL83KNTwAAAMM"]
[Thu Apr 23 23:42:00.726148 2026] [:error] [pid 59700:tid 59711] [client 74.248.121.178:37633] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeo9yJXyGZJFeAIDWtlGdAAAAUk"]
[Thu Apr 23 23:42:05.964207 2026] [:error] [pid 64998:tid 65018] [client 74.248.121.178:37650] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aeo9zYV5EysYcTLjmwjApgAAAdA"]
[Thu Apr 23 23:42:08.212584 2026] [:error] [pid 65000:tid 65054] [client 74.248.121.178:47317] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aeo90L6vRb9j6psK2ZbiuAAAAhU"]
[Thu Apr 23 23:42:12.966590 2026] [:error] [pid 42971:tid 43007] [client 74.248.121.178:4647] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aeo91DEP2_5RswrH8bE69AAAABU"]
[Thu Apr 23 23:42:14.270145 2026] [:error] [pid 42971:tid 42989] [client 74.248.121.178:62365] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aeo91jEP2_5RswrH8bE69wAAAAM"]
[Thu Apr 23 23:42:20.167061 2026] [:error] [pid 25635:tid 25648] [client 74.248.121.178:4687] [client 74.248.121.178] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aeo93MRxv6UsgRGKB3JASwAAAQk"]
[Thu Apr 23 23:42:22.813203 2026] [:error] [pid 64998:tid 65013] [client 74.248.121.178:50022] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Thu Apr 23 23:44:30.507247 2026] [:error] [pid 65000:tid 65044] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Thu Apr 23 23:44:30.696039 2026] [:error] [pid 65000:tid 65043] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Thu Apr 23 23:44:30.946701 2026] [:error] [pid 65000:tid 65041] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 23 23:44:31.141886 2026] [:error] [pid 65000:tid 65053] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Thu Apr 23 23:44:31.301392 2026] [:error] [pid 65000:tid 65032] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Thu Apr 23 23:44:31.461757 2026] [:error] [pid 65000:tid 65057] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 23 23:44:31.622963 2026] [:error] [pid 65000:tid 65041] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 23 23:44:31.785045 2026] [:error] [pid 65000:tid 65042] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Thu Apr 23 23:44:32.122278 2026] [:error] [pid 65000:tid 65051] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Thu Apr 23 23:44:32.284503 2026] [:error] [pid 65000:tid 65049] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Thu Apr 23 23:44:32.446404 2026] [:error] [pid 65000:tid 65032] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Thu Apr 23 23:44:32.607348 2026] [:error] [pid 65000:tid 65056] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Thu Apr 23 23:44:32.770460 2026] [:error] [pid 65000:tid 65043] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 23 23:44:32.935493 2026] [:error] [pid 65000:tid 65042] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Thu Apr 23 23:44:33.109201 2026] [:error] [pid 65000:tid 65037] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Thu Apr 23 23:44:33.272672 2026] [:error] [pid 65000:tid 65047] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Thu Apr 23 23:44:33.433817 2026] [:error] [pid 65000:tid 65032] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Thu Apr 23 23:44:33.595059 2026] [:error] [pid 65000:tid 65052] [client 173.239.218.51:50129] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Thu Apr 23 23:44:35.900325 2026] [:error] [pid 65000:tid 65031] [client 173.239.218.51:50129] [client 173.239.218.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aeo-Y76vRb9j6psK2ZbpZQAAAgI"]
[Thu Apr 23 23:44:36.705783 2026] [:error] [pid 65000:tid 65032] [client 173.239.218.62:53513] [client 173.239.218.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aeo-ZL6vRb9j6psK2ZbpbQAAAgM"]
[Thu Apr 23 23:44:37.510659 2026] [:error] [pid 64967:tid 64982] [client 173.239.218.52:57417] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Thu Apr 23 23:44:37.996046 2026] [:error] [pid 64967:tid 64985] [client 173.239.218.52:57417] [client 173.239.218.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aeo-ZYAV4GfOOdX8QzqFwgAAAZA"]
[Thu Apr 23 23:44:38.649527 2026] [:error] [pid 64998:tid 65023] [client 216.24.210.97:51127] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Thu Apr 23 23:44:38.806749 2026] [:error] [pid 64998:tid 65012] [client 216.24.210.97:51127] [client 216.24.210.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aeo-ZoV5EysYcTLjmwjGPgAAAco"]
[Thu Apr 23 23:44:39.285132 2026] [:error] [pid 65000:tid 65057] [client 216.24.210.78:49445] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Thu Apr 23 23:44:40.096660 2026] [:error] [pid 65000:tid 65030] [client 216.24.210.78:49445] [client 216.24.210.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aeo-aL6vRb9j6psK2ZbppAAAAgE"]
[Thu Apr 23 23:44:40.578600 2026] [:error] [pid 65000:tid 65032] [client 173.239.218.51:47249] [client 173.239.218.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aeo-aL6vRb9j6psK2ZbpsQAAAgM"]
[Thu Apr 23 23:44:40.894027 2026] [:error] [pid 65000:tid 65042] [client 173.239.218.73:39545] [client 173.239.218.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aeo-aL6vRb9j6psK2ZbpugAAAgk"]
[Thu Apr 23 23:51:27.587840 2026] [:error] [pid 59700:tid 59721] [client 104.28.208.60:59469] [client 104.28.208.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aeo__5XyGZJFeAIDWtlRQwAAAVM"]
[Thu Apr 23 23:51:28.127076 2026] [:error] [pid 65000:tid 65040] [client 104.28.208.60:35973] [client 104.28.208.60] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/style.php"] [unique_id "aepAAL6vRb9j6psK2Zb8awAAAgc"]
[Fri Apr 24 00:04:45.475905 2026] [:error] [pid 43083:tid 43104] [client 110.136.8.88:54348] [client 110.136.8.88] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 110.136.8.88, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aepDHTC5hrvNXosL83KVwQAAANM"]
[Fri Apr 24 00:04:45.483838 2026] [:error] [pid 43083:tid 43104] [client 110.136.8.88:54348] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri Apr 24 01:33:12.404008 2026] [:error] [pid 42972:tid 43028] [client 20.166.78.84:43863] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepX2MOAb-3sOknsk4e6cwAAAEw"]
[Fri Apr 24 01:33:13.513404 2026] [:error] [pid 65000:tid 65056] [client 20.166.78.84:36380] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepX2b6vRb9j6psK2ZZryQAAAhc"]
[Fri Apr 24 01:33:14.747866 2026] [:error] [pid 64998:tid 65025] [client 20.166.78.84:36315] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aepX2oV5EysYcTLjmwgnmAAAAdc"]
[Fri Apr 24 01:33:16.615316 2026] [:error] [pid 42972:tid 43032] [client 20.166.78.84:37673] File does not exist: /usr/local/apache/htdocs/suspended-page/gpt-sh.php
[Fri Apr 24 01:33:16.885664 2026] [:error] [pid 42972:tid 43025] [client 20.166.78.84:37673] File does not exist: /usr/local/apache/htdocs/suspended-page/jp.php
[Fri Apr 24 01:33:17.158006 2026] [:error] [pid 42972:tid 43039] [client 20.166.78.84:37673] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Fri Apr 24 01:33:17.430124 2026] [:error] [pid 42972:tid 43030] [client 20.166.78.84:37673] File does not exist: /usr/local/apache/htdocs/suspended-page/ta0ol.php
[Fri Apr 24 01:33:19.386397 2026] [:error] [pid 42972:tid 43030] [client 20.166.78.84:37673] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 24 01:33:19.914466 2026] [:error] [pid 42972:tid 43030] [client 20.166.78.84:37673] File does not exist: /usr/local/apache/htdocs/suspended-page/users.php
[Fri Apr 24 01:33:20.454020 2026] [:error] [pid 42972:tid 43022] [client 20.166.78.84:37673] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "aepX4MOAb-3sOknsk4e6pAAAAEY"]
[Fri Apr 24 01:33:21.638681 2026] [:error] [pid 42973:tid 43062] [client 20.166.78.84:46827] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "aepX4W6I0QqmmmLTHE19lgAAAJM"]
[Fri Apr 24 01:33:22.662119 2026] [:error] [pid 25635:tid 25660] [client 20.166.78.84:36480] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "aepX4sRxv6UsgRGKB3JPpwAAARU"]
[Fri Apr 24 01:33:23.688583 2026] [:error] [pid 43083:tid 43097] [client 20.166.78.84:42310] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "aepX4zC5hrvNXosL83KqSgAAAMw"]
[Fri Apr 24 01:33:24.407693 2026] [:error] [pid 64998:tid 65004] [client 20.166.78.84:30407] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aepX5IV5EysYcTLjmwgnzwAAAcI"]
[Fri Apr 24 01:33:25.714806 2026] [:error] [pid 42973:tid 43065] [client 20.166.78.84:33486] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aepX5W6I0QqmmmLTHE19mgAAAJY"]
[Fri Apr 24 01:33:27.931164 2026] [:error] [pid 65000:tid 65039] [client 20.166.78.84:35056] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aepX576vRb9j6psK2ZZsCwAAAgY"]
[Fri Apr 24 01:33:29.092191 2026] [:error] [pid 64998:tid 65010] [client 20.166.78.84:29622] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zc-243.php"] [unique_id "aepX6YV5EysYcTLjmwgn1wAAAcg"]
[Fri Apr 24 01:33:30.094434 2026] [:error] [pid 42972:tid 43022] [client 20.166.78.84:35618] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bkyac.php"] [unique_id "aepX6sOAb-3sOknsk4e6sAAAAEY"]
[Fri Apr 24 01:33:30.865219 2026] [:error] [pid 42971:tid 42990] [client 20.166.78.84:35798] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bkyac.php"] [unique_id "aepX6jEP2_5RswrH8bFPKgAAAAQ"]
[Fri Apr 24 01:33:31.754612 2026] [:error] [pid 42972:tid 43031] [client 20.166.78.84:35606] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bkyac.php"] [unique_id "aepX68OAb-3sOknsk4e6vgAAAE8"]
[Fri Apr 24 01:33:32.496648 2026] [:error] [pid 64998:tid 65005] [client 20.166.78.84:50079] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bkyac.php"] [unique_id "aepX7IV5EysYcTLjmwgn3AAAAcM"]
[Fri Apr 24 01:33:33.301243 2026] [:error] [pid 64998:tid 65018] [client 20.166.78.84:32191] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wziar1.php"] [unique_id "aepX7YV5EysYcTLjmwgn4QAAAdA"]
[Fri Apr 24 01:33:34.393622 2026] [:error] [pid 65000:tid 65030] [client 20.166.78.84:34316] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wziar1.php"] [unique_id "aepX7r6vRb9j6psK2ZZsIgAAAgE"]
[Fri Apr 24 01:33:35.199568 2026] [:error] [pid 42973:tid 43044] [client 20.166.78.84:50065] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wziar1.php"] [unique_id "aepX726I0QqmmmLTHE19rAAAAIE"]
[Fri Apr 24 01:33:36.104676 2026] [:error] [pid 43083:tid 43100] [client 20.166.78.84:32560] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wziar1.php"] [unique_id "aepX8DC5hrvNXosL83KqTwAAAM8"]
[Fri Apr 24 01:33:37.176124 2026] [:error] [pid 42973:tid 43062] [client 20.166.78.84:36240] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepX8W6I0QqmmmLTHE19sgAAAJM"]
[Fri Apr 24 01:33:38.230399 2026] [:error] [pid 42973:tid 43061] [client 20.166.78.84:35539] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepX8m6I0QqmmmLTHE19twAAAJI"]
[Fri Apr 24 01:33:39.401410 2026] [:error] [pid 59700:tid 59722] [client 20.166.78.84:34773] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepX85XyGZJFeAIDWtly3wAAAVQ"]
[Fri Apr 24 01:33:41.235407 2026] [:error] [pid 42972:tid 43034] [client 20.166.78.84:34784] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aepX9cOAb-3sOknsk4e6xQAAAFI"]
[Fri Apr 24 01:33:42.433920 2026] [:error] [pid 64998:tid 65002] [client 20.166.78.84:44408] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "aepX9oV5EysYcTLjmwgn8QAAAcA"]
[Fri Apr 24 01:33:43.360281 2026] [:error] [pid 43083:tid 43098] [client 20.166.78.84:31350] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "aepX9zC5hrvNXosL83KqUwAAAM0"]
[Fri Apr 24 01:33:44.877636 2026] [:error] [pid 65000:tid 65052] [client 20.166.78.84:29617] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "aepX-L6vRb9j6psK2ZZsRgAAAhM"]
[Fri Apr 24 01:33:46.759773 2026] [:error] [pid 65000:tid 65052] [client 20.166.78.84:44383] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/7logs.php"] [unique_id "aepX-r6vRb9j6psK2ZZsVwAAAhM"]
[Fri Apr 24 01:33:47.704747 2026] [:error] [pid 65000:tid 65048] [client 20.166.78.84:40712] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepX-76vRb9j6psK2ZZsYAAAAg8"]
[Fri Apr 24 01:33:49.261369 2026] [:error] [pid 42971:tid 42992] [client 20.166.78.84:50050] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepX_TEP2_5RswrH8bFPMAAAAAY"]
[Fri Apr 24 01:33:50.118532 2026] [:error] [pid 42972:tid 43037] [client 20.166.78.84:31344] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepX_sOAb-3sOknsk4e6zQAAAFU"]
[Fri Apr 24 01:33:51.295992 2026] [:error] [pid 59700:tid 59710] [client 20.166.78.84:51068] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aepX_5XyGZJFeAIDWtly7wAAAUg"]
[Fri Apr 24 01:33:53.582670 2026] [:error] [pid 64998:tid 65011] [client 20.166.78.84:32033] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aepYAYV5EysYcTLjmwgoCAAAAck"]
[Fri Apr 24 01:33:54.497968 2026] [:error] [pid 42971:tid 43008] [client 20.166.78.84:51065] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aepYAjEP2_5RswrH8bFPNwAAABY"]
[Fri Apr 24 01:33:55.128082 2026] [:error] [pid 43083:tid 43096] [client 20.166.78.84:39749] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aepYAzC5hrvNXosL83KqWQAAAMs"]
[Fri Apr 24 01:33:55.932604 2026] [:error] [pid 64998:tid 65020] [client 20.166.78.84:51267] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "aepYA4V5EysYcTLjmwgoDQAAAdI"]
[Fri Apr 24 01:33:56.937867 2026] [:error] [pid 42972:tid 43022] [client 20.166.78.84:32060] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "aepYBMOAb-3sOknsk4e69QAAAEY"]
[Fri Apr 24 01:33:57.977523 2026] [:error] [pid 59700:tid 59709] [client 20.166.78.84:35473] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "aepYBZXyGZJFeAIDWtly_AAAAUc"]
[Fri Apr 24 01:33:58.980199 2026] [:error] [pid 65000:tid 65047] [client 20.166.78.84:50710] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "aepYBr6vRb9j6psK2ZZsjwAAAg4"]
[Fri Apr 24 01:34:00.122900 2026] [:error] [pid 59700:tid 59726] [client 20.166.78.84:50711] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "aepYCJXyGZJFeAIDWtlzAAAAAVg"]
[Fri Apr 24 01:34:00.888918 2026] [:error] [pid 46953:tid 46964] [client 20.166.78.84:32040] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aepYCEnlpdHh-P6wKbp2tQAAAkg"]
[Fri Apr 24 01:34:01.920726 2026] [:error] [pid 42973:tid 43049] [client 20.166.78.84:40219] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aepYCW6I0QqmmmLTHE1-HwAAAIY"]
[Fri Apr 24 01:34:02.941386 2026] [:error] [pid 65000:tid 65029] [client 20.166.78.84:39739] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aepYCr6vRb9j6psK2ZZswAAAAgA"]
[Fri Apr 24 01:34:03.723283 2026] [:error] [pid 65000:tid 65050] [client 20.166.78.84:40763] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "aepYC76vRb9j6psK2ZZszgAAAhE"]
[Fri Apr 24 01:34:04.852966 2026] [:error] [pid 59700:tid 59724] [client 20.166.78.84:51318] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aepYDJXyGZJFeAIDWtlzAQAAAVY"]
[Fri Apr 24 01:34:05.935366 2026] [:error] [pid 64998:tid 65026] [client 20.166.78.84:32668] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aepYDYV5EysYcTLjmwgoJwAAAdg"]
[Fri Apr 24 01:34:06.866377 2026] [:error] [pid 64998:tid 65010] [client 20.166.78.84:40204] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aepYDoV5EysYcTLjmwgoLAAAAcg"]
[Fri Apr 24 01:34:08.543516 2026] [:error] [pid 65000:tid 65031] [client 20.166.78.84:35389] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "aepYEL6vRb9j6psK2ZZtBwAAAgI"]
[Fri Apr 24 01:34:11.314493 2026] [:error] [pid 65000:tid 65056] [client 20.166.78.84:38267] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aepYE76vRb9j6psK2ZZtJwAAAhc"]
[Fri Apr 24 01:34:14.420648 2026] [:error] [pid 42972:tid 43018] [client 20.166.78.84:36006] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aepYFsOAb-3sOknsk4e7IQAAAEI"]
[Fri Apr 24 01:34:16.273323 2026] [:error] [pid 65000:tid 65038] [client 20.166.78.84:31159] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aepYGL6vRb9j6psK2ZZtWgAAAgU"]
[Fri Apr 24 01:34:17.865823 2026] [:error] [pid 65000:tid 65055] [client 20.166.78.84:39536] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mh.php"] [unique_id "aepYGb6vRb9j6psK2ZZtdwAAAhY"]
[Fri Apr 24 01:34:19.035750 2026] [:error] [pid 65000:tid 65056] [client 20.166.78.84:29036] File does not exist: /usr/local/apache/htdocs/suspended-page/fone1.php
[Fri Apr 24 01:34:19.413231 2026] [:error] [pid 65000:tid 65046] [client 20.166.78.84:29036] File does not exist: /usr/local/apache/htdocs/suspended-page/auth.php
[Fri Apr 24 01:34:19.701555 2026] [:error] [pid 65000:tid 65045] [client 20.166.78.84:29036] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Fri Apr 24 01:34:21.527357 2026] [:error] [pid 65000:tid 65045] [client 20.166.78.84:29036] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri Apr 24 01:34:21.821289 2026] [:error] [pid 65000:tid 65042] [client 20.166.78.84:29036] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Fri Apr 24 01:34:22.118727 2026] [:error] [pid 65000:tid 65044] [client 20.166.78.84:29036] File does not exist: /usr/local/apache/htdocs/suspended-page/tx79.php
[Fri Apr 24 01:34:22.405833 2026] [:error] [pid 65000:tid 65031] [client 20.166.78.84:29036] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Fri Apr 24 01:34:23.872376 2026] [:error] [pid 65000:tid 65040] [client 20.166.78.84:29036] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Fri Apr 24 01:34:24.160461 2026] [:error] [pid 65000:tid 65051] [client 20.166.78.84:29036] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Fri Apr 24 01:34:24.458849 2026] [:error] [pid 65000:tid 65042] [client 20.166.78.84:29036] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Fri Apr 24 01:34:25.993215 2026] [:error] [pid 65000:tid 65042] [client 20.166.78.84:29036] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aepYIb6vRb9j6psK2ZZt1wAAAgk"]
[Fri Apr 24 01:34:26.965559 2026] [:error] [pid 64967:tid 64980] [client 20.166.78.84:31630] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aepYIoAV4GfOOdX8QzqXJgAAAYs"]
[Fri Apr 24 01:34:28.045612 2026] [:error] [pid 64998:tid 65002] [client 20.166.78.84:37894] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aepYJIV5EysYcTLjmwgofAAAAcA"]
[Fri Apr 24 01:34:29.152518 2026] [:error] [pid 42972:tid 43039] [client 20.166.78.84:36014] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aepYJcOAb-3sOknsk4e7NAAAAFc"]
[Fri Apr 24 01:34:30.102034 2026] [:error] [pid 43083:tid 43103] [client 20.166.78.84:38930] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aepYJjC5hrvNXosL83KqYAAAANI"]
[Fri Apr 24 01:34:31.113568 2026] [:error] [pid 64998:tid 65024] [client 20.166.78.84:39468] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aepYJ4V5EysYcTLjmwgojQAAAdY"]
[Fri Apr 24 01:34:32.310183 2026] [:error] [pid 65000:tid 65032] [client 20.166.78.84:37721] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aepYKL6vRb9j6psK2ZZuCgAAAgM"]
[Fri Apr 24 01:34:33.156475 2026] [:error] [pid 65000:tid 65037] [client 20.166.78.84:38960] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/amwxl.php"] [unique_id "aepYKb6vRb9j6psK2ZZuEwAAAgQ"]
[Fri Apr 24 01:34:33.873991 2026] [:error] [pid 65000:tid 65044] [client 20.166.78.84:16257] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aepYKb6vRb9j6psK2ZZuGwAAAgs"]
[Fri Apr 24 01:34:34.490224 2026] [:error] [pid 42972:tid 43038] [client 20.166.78.84:51280] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aepYKsOAb-3sOknsk4e7PgAAAFY"]
[Fri Apr 24 01:34:35.953921 2026] [:error] [pid 65000:tid 65055] [client 20.166.78.84:30507] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aepYK76vRb9j6psK2ZZuJwAAAhY"]
[Fri Apr 24 01:34:37.803563 2026] [:error] [pid 42973:tid 43065] [client 20.166.78.84:16312] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "aepYLW6I0QqmmmLTHE1-dAAAAJY"]
[Fri Apr 24 01:34:38.555171 2026] [:error] [pid 65000:tid 65031] [client 20.166.78.84:30056] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aepYLr6vRb9j6psK2ZZuQgAAAgI"]
[Fri Apr 24 01:34:39.989178 2026] [:error] [pid 65000:tid 65050] [client 20.166.78.84:38425] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aepYL76vRb9j6psK2ZZuTgAAAhE"]
[Fri Apr 24 01:34:41.215742 2026] [:error] [pid 59700:tid 59718] [client 20.166.78.84:35968] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aepYMZXyGZJFeAIDWtlzIwAAAVA"]
[Fri Apr 24 01:34:41.949309 2026] [:error] [pid 65000:tid 65056] [client 20.166.78.84:29622] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/userfuns.php"] [unique_id "aepYMb6vRb9j6psK2ZZuXgAAAhc"]
[Fri Apr 24 01:34:44.193290 2026] [:error] [pid 25635:tid 25654] [client 20.166.78.84:15090] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "aepYNMRxv6UsgRGKB3JPugAAAQ8"]
[Fri Apr 24 01:34:45.201507 2026] [:error] [pid 59700:tid 59709] [client 20.166.78.84:37750] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "aepYNZXyGZJFeAIDWtlzLAAAAUc"]
[Fri Apr 24 01:34:46.314038 2026] [:error] [pid 42971:tid 42994] [client 20.166.78.84:35694] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "aepYNjEP2_5RswrH8bFPSgAAAAg"]
[Fri Apr 24 01:34:47.517220 2026] [:error] [pid 42972:tid 43024] [client 20.166.78.84:51086] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "aepYN8OAb-3sOknsk4e7WQAAAEg"]
[Fri Apr 24 01:34:48.997808 2026] [:error] [pid 59700:tid 59725] [client 20.166.78.84:38516] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aepYOJXyGZJFeAIDWtlzLgAAAVc"]
[Fri Apr 24 01:34:49.850622 2026] [:error] [pid 65000:tid 65049] [client 20.166.78.84:51291] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aepYOb6vRb9j6psK2ZZukAAAAhA"]
[Fri Apr 24 01:34:51.532852 2026] [:error] [pid 65000:tid 65029] [client 20.166.78.84:34378] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aepYO76vRb9j6psK2ZZuowAAAgA"]
[Fri Apr 24 01:34:52.570592 2026] [:error] [pid 42972:tid 43018] [client 20.166.78.84:39485] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aepYPMOAb-3sOknsk4e7cQAAAEI"]
[Fri Apr 24 01:34:53.711579 2026] [:error] [pid 65000:tid 65049] [client 20.166.78.84:32488] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aepYPb6vRb9j6psK2ZZutAAAAhA"]
[Fri Apr 24 01:34:54.567391 2026] [:error] [pid 42973:tid 43052] [client 20.166.78.84:37211] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aepYPm6I0QqmmmLTHE1-jwAAAIk"]
[Fri Apr 24 01:34:55.516014 2026] [:error] [pid 64998:tid 65020] [client 20.166.78.84:31621] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aepYP4V5EysYcTLjmwgouAAAAdI"]
[Fri Apr 24 01:34:56.620038 2026] [:error] [pid 42972:tid 43037] [client 20.166.78.84:31668] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/saorix1.php"] [unique_id "aepYQMOAb-3sOknsk4e7eQAAAFU"]
[Fri Apr 24 01:34:57.570630 2026] [:error] [pid 46953:tid 46963] [client 20.166.78.84:39701] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aepYQUnlpdHh-P6wKbp20wAAAkc"]
[Fri Apr 24 01:35:00.018203 2026] [:error] [pid 42971:tid 42986] [client 20.166.78.84:51131] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aepYRDEP2_5RswrH8bFPTAAAAAA"]
[Fri Apr 24 01:35:01.485558 2026] [:error] [pid 25635:tid 25652] [client 20.166.78.84:36029] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aepYRcRxv6UsgRGKB3JPwQAAAQ0"]
[Fri Apr 24 01:35:02.530205 2026] [:error] [pid 43083:tid 43093] [client 20.166.78.84:37908] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aepYRjC5hrvNXosL83KqeQAAAMg"]
[Fri Apr 24 01:35:03.421525 2026] [:error] [pid 46953:tid 46957] [client 20.166.78.84:37891] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aepYR0nlpdHh-P6wKbp21wAAAkE"]
[Fri Apr 24 01:35:05.286037 2026] [:error] [pid 42972:tid 43028] [client 20.166.78.84:31652] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aepYScOAb-3sOknsk4e7ngAAAEw"]
[Fri Apr 24 01:35:06.984372 2026] [:error] [pid 64998:tid 65010] [client 20.166.78.84:39507] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aepYSoV5EysYcTLjmwgoyQAAAcg"]
[Fri Apr 24 01:35:09.086222 2026] [:error] [pid 42972:tid 43021] [client 20.166.78.84:38244] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aepYTcOAb-3sOknsk4e7tgAAAEU"]
[Fri Apr 24 01:35:11.384791 2026] [:error] [pid 64998:tid 65003] [client 20.166.78.84:32812] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aepYT4V5EysYcTLjmwgo2gAAAcE"]
[Fri Apr 24 01:35:13.733253 2026] [:error] [pid 64998:tid 65016] [client 20.166.78.84:35970] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aepYUYV5EysYcTLjmwgo4gAAAc4"]
[Fri Apr 24 01:35:15.055420 2026] [:error] [pid 65000:tid 65057] [client 20.166.78.84:46534] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aepYU76vRb9j6psK2ZZu8gAAAhg"]
[Fri Apr 24 01:35:16.216783 2026] [:error] [pid 42972:tid 43030] [client 20.166.78.84:4705] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/gptsh.php"] [unique_id "aepYVMOAb-3sOknsk4e72QAAAE4"]
[Fri Apr 24 01:35:18.439084 2026] [:error] [pid 42972:tid 43032] [client 20.166.78.84:38497] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aepYVsOAb-3sOknsk4e76gAAAFA"]
[Fri Apr 24 01:35:19.762392 2026] [:error] [pid 65000:tid 65043] [client 20.166.78.84:38927] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aepYV76vRb9j6psK2ZZvAQAAAgo"]
[Fri Apr 24 01:35:20.828910 2026] [:error] [pid 59700:tid 59715] [client 20.166.78.84:38249] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aepYWJXyGZJFeAIDWtlzRQAAAU0"]
[Fri Apr 24 01:35:21.962076 2026] [:error] [pid 65000:tid 65045] [client 20.166.78.84:38432] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/0x.php"] [unique_id "aepYWb6vRb9j6psK2ZZvCAAAAgw"]
[Fri Apr 24 01:35:23.590546 2026] [:error] [pid 42972:tid 43036] [client 20.166.78.84:32395] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aepYW8OAb-3sOknsk4e8AQAAAFQ"]
[Fri Apr 24 01:35:24.628514 2026] [:error] [pid 59700:tid 59719] [client 20.166.78.84:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Apr 24 01:35:24.882410 2026] [:error] [pid 59700:tid 59726] [client 20.166.78.84:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Apr 24 01:35:25.163483 2026] [:error] [pid 59700:tid 59716] [client 20.166.78.84:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Fri Apr 24 01:35:25.417688 2026] [:error] [pid 59700:tid 59712] [client 20.166.78.84:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Fri Apr 24 01:35:25.884702 2026] [:error] [pid 59700:tid 59722] [client 20.166.78.84:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Fri Apr 24 01:35:26.151108 2026] [:error] [pid 59700:tid 59703] [client 20.166.78.84:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Fri Apr 24 01:35:26.700499 2026] [:error] [pid 59700:tid 59717] [client 20.166.78.84:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Fri Apr 24 01:35:26.954501 2026] [:error] [pid 59700:tid 59708] [client 20.166.78.84:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Fri Apr 24 01:35:27.207766 2026] [:error] [pid 59700:tid 59706] [client 20.166.78.84:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Fri Apr 24 01:35:27.652511 2026] [:error] [pid 59700:tid 59713] [client 20.166.78.84:37897] File does not exist: /usr/local/apache/htdocs/suspended-page/wp5.php
[Fri Apr 24 01:35:27.902246 2026] [:error] [pid 59700:tid 59718] [client 20.166.78.84:37897] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aepYX5XyGZJFeAIDWtlzUQAAAVA"]
[Fri Apr 24 01:35:29.090132 2026] [:error] [pid 65000:tid 65047] [client 20.166.78.84:38423] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aepYYb6vRb9j6psK2ZZvIAAAAg4"]
[Fri Apr 24 01:35:30.553045 2026] [:error] [pid 65000:tid 65055] [client 20.166.78.84:30007] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aepYYr6vRb9j6psK2ZZvKgAAAhY"]
[Fri Apr 24 01:35:31.897538 2026] [:error] [pid 42973:tid 43058] [client 20.166.78.84:4718] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/yuzuru1.php"] [unique_id "aepYY26I0QqmmmLTHE1-zAAAAI8"]
[Fri Apr 24 01:35:32.749885 2026] [:error] [pid 64998:tid 65016] [client 20.166.78.84:32812] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "aepYZIV5EysYcTLjmwgpHgAAAc4"]
[Fri Apr 24 01:35:33.832983 2026] [:error] [pid 65000:tid 65039] [client 20.166.78.84:4940] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "aepYZb6vRb9j6psK2ZZvQwAAAgY"]
[Fri Apr 24 01:35:34.577343 2026] [:error] [pid 64998:tid 65002] [client 20.166.78.84:39457] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "aepYZoV5EysYcTLjmwgpJAAAAcA"]
[Fri Apr 24 01:35:35.426614 2026] [:error] [pid 42972:tid 43016] [client 20.166.78.84:30030] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "aepYZ8OAb-3sOknsk4e8LQAAAEA"]
[Fri Apr 24 01:35:36.128888 2026] [:error] [pid 42972:tid 43020] [client 20.166.78.84:4680] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aepYaMOAb-3sOknsk4e8LgAAAEQ"]
[Fri Apr 24 01:35:37.132447 2026] [:error] [pid 46953:tid 46969] [client 20.166.78.84:38261] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aepYaUnlpdHh-P6wKbp27AAAAk0"]
[Fri Apr 24 01:35:38.474441 2026] [:error] [pid 43083:tid 43108] [client 20.166.78.84:38261] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aepYajC5hrvNXosL83KqpgAAANc"]
[Fri Apr 24 01:35:40.143932 2026] [:error] [pid 64998:tid 65012] [client 20.166.78.84:4956] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/Cap.php"] [unique_id "aepYbIV5EysYcTLjmwgpPAAAAco"]
[Fri Apr 24 01:35:41.031338 2026] [:error] [pid 42971:tid 42996] [client 20.166.78.84:38484] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "aepYbTEP2_5RswrH8bFPYgAAAAo"]
[Fri Apr 24 01:35:42.136596 2026] [:error] [pid 65000:tid 65029] [client 20.166.78.84:39449] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "aepYbr6vRb9j6psK2ZZvTAAAAgA"]
[Fri Apr 24 01:35:42.934887 2026] [:error] [pid 64998:tid 65025] [client 20.166.78.84:34954] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "aepYboV5EysYcTLjmwgpSQAAAdc"]
[Fri Apr 24 01:35:43.959577 2026] [:error] [pid 25635:tid 25659] [client 20.166.78.84:32504] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tfm.php"] [unique_id "aepYb8Rxv6UsgRGKB3JP0gAAARQ"]
[Fri Apr 24 01:35:44.643958 2026] [:error] [pid 65000:tid 65057] [client 20.166.78.84:30489] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aepYcL6vRb9j6psK2ZZvXQAAAhg"]
[Fri Apr 24 01:35:45.976921 2026] [:error] [pid 42972:tid 43031] [client 20.166.78.84:51090] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aepYccOAb-3sOknsk4e8RwAAAE8"]
[Fri Apr 24 01:35:47.723998 2026] [:error] [pid 59700:tid 59725] [client 20.166.78.84:37245] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aepYc5XyGZJFeAIDWtlzWQAAAVc"]
[Fri Apr 24 01:35:48.944786 2026] [:error] [pid 42972:tid 43031] [client 20.166.78.84:51226] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "aepYdMOAb-3sOknsk4e8XAAAAE8"]
[Fri Apr 24 01:35:50.132313 2026] [:error] [pid 46953:tid 46970] [client 20.166.78.84:51226] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "aepYdknlpdHh-P6wKbp28QAAAk4"]
[Fri Apr 24 01:35:51.780271 2026] [:error] [pid 64998:tid 65023] [client 20.166.78.84:30503] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "aepYd4V5EysYcTLjmwgppAAAAdU"]
[Fri Apr 24 01:35:53.040606 2026] [:error] [pid 64967:tid 64974] [client 20.166.78.84:44148] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "aepYeYAV4GfOOdX8QzqXSQAAAYU"]
[Fri Apr 24 01:35:53.831781 2026] [:error] [pid 46953:tid 46973] [client 20.166.78.84:30029] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/t00l.php"] [unique_id "aepYeUnlpdHh-P6wKbp28wAAAlE"]
[Fri Apr 24 01:35:55.487390 2026] [:error] [pid 64998:tid 65008] [client 20.166.78.84:51087] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "aepYe4V5EysYcTLjmwgptwAAAcY"]
[Fri Apr 24 01:35:56.515785 2026] [:error] [pid 65000:tid 65032] [client 20.166.78.84:30518] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "aepYfL6vRb9j6psK2ZZwAwAAAgM"]
[Fri Apr 24 01:35:58.320069 2026] [:error] [pid 65000:tid 65055] [client 20.166.78.84:32802] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "aepYfr6vRb9j6psK2ZZwEgAAAhY"]
[Fri Apr 24 01:35:59.710041 2026] [:error] [pid 42972:tid 43037] [client 20.166.78.84:44098] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "aepYf8OAb-3sOknsk4e8awAAAFU"]
[Fri Apr 24 01:36:00.651646 2026] [:error] [pid 65000:tid 65030] [client 20.166.78.84:51125] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "aepYgL6vRb9j6psK2ZZwJgAAAgE"]
[Fri Apr 24 01:36:01.951421 2026] [:error] [pid 42972:tid 43021] [client 20.166.78.84:32768] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "aepYgcOAb-3sOknsk4e8cAAAAEU"]
[Fri Apr 24 01:36:03.240269 2026] [:error] [pid 65000:tid 65041] [client 20.166.78.84:35718] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "aepYg76vRb9j6psK2ZZwPQAAAgg"]
[Fri Apr 24 01:36:04.821073 2026] [:error] [pid 43083:tid 43101] [client 20.166.78.84:51106] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "aepYhDC5hrvNXosL83KqtwAAANA"]
[Fri Apr 24 01:36:06.510549 2026] [:error] [pid 65000:tid 65048] [client 20.166.78.84:39483] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "aepYhr6vRb9j6psK2ZZwTAAAAg8"]
[Fri Apr 24 01:36:07.801496 2026] [:error] [pid 65000:tid 65048] [client 20.166.78.84:39548] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "aepYh76vRb9j6psK2ZZwWwAAAg8"]
[Fri Apr 24 01:36:08.911304 2026] [:error] [pid 43083:tid 43106] [client 20.166.78.84:51124] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "aepYiDC5hrvNXosL83KqugAAANU"]
[Fri Apr 24 01:36:10.072802 2026] [:error] [pid 64998:tid 65022] [client 20.166.78.84:32509] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "aepYioV5EysYcTLjmwgp1wAAAdQ"]
[Fri Apr 24 01:36:11.225470 2026] [:error] [pid 65000:tid 65053] [client 20.166.78.84:30193] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aepYi76vRb9j6psK2ZZwcgAAAhQ"]
[Fri Apr 24 01:36:12.120736 2026] [:error] [pid 64998:tid 65004] [client 20.166.78.84:35751] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aepYjIV5EysYcTLjmwgp3gAAAcI"]
[Fri Apr 24 01:36:12.897507 2026] [:error] [pid 59700:tid 59704] [client 20.166.78.84:38490] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aepYjJXyGZJFeAIDWtlzdgAAAUI"]
[Fri Apr 24 01:36:14.008498 2026] [:error] [pid 64998:tid 65015] [client 20.166.78.84:39447] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "aepYjoV5EysYcTLjmwgp7gAAAc0"]
[Fri Apr 24 01:36:15.155697 2026] [:error] [pid 42972:tid 43034] [client 20.166.78.84:38500] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aepYj8OAb-3sOknsk4e8qgAAAFI"]
[Fri Apr 24 01:36:16.152038 2026] [:error] [pid 64998:tid 65014] [client 20.166.78.84:51091] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aepYkIV5EysYcTLjmwgp_AAAAcw"]
[Fri Apr 24 01:36:17.013556 2026] [:error] [pid 64998:tid 65018] [client 20.166.78.84:37902] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aepYkYV5EysYcTLjmwgqAgAAAdA"]
[Fri Apr 24 01:36:18.627415 2026] [:error] [pid 65000:tid 65051] [client 20.166.78.84:4969] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/packsin1.php"] [unique_id "aepYkr6vRb9j6psK2ZZwmgAAAhI"]
[Fri Apr 24 01:36:19.346938 2026] [:error] [pid 42973:tid 43048] [client 20.166.78.84:38520] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aepYk26I0QqmmmLTHE1_EAAAAIU"]
[Fri Apr 24 01:36:20.080988 2026] [:error] [pid 42971:tid 42986] [client 20.166.78.84:33841] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aepYlDEP2_5RswrH8bFPdgAAAAA"]
[Fri Apr 24 01:36:20.929131 2026] [:error] [pid 42972:tid 43034] [client 20.166.78.84:4962] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aepYlMOAb-3sOknsk4e8zQAAAFI"]
[Fri Apr 24 01:36:21.979473 2026] [:error] [pid 42971:tid 42994] [client 20.166.78.84:38523] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aepYlTEP2_5RswrH8bFPdwAAAAg"]
[Fri Apr 24 01:36:23.245192 2026] [:error] [pid 59700:tid 59711] [client 20.166.78.84:30068] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "aepYl5XyGZJFeAIDWtlzggAAAUk"]
[Fri Apr 24 01:36:24.998048 2026] [:error] [pid 65000:tid 65038] [client 20.166.78.84:32966] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "aepYmL6vRb9j6psK2ZZwzwAAAgU"]
[Fri Apr 24 01:36:26.781876 2026] [:error] [pid 43083:tid 43100] [client 20.166.78.84:32408] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "aepYmjC5hrvNXosL83KqxgAAAM8"]
[Fri Apr 24 01:36:29.472997 2026] [:error] [pid 64998:tid 65005] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Fri Apr 24 01:36:29.767099 2026] [:error] [pid 64998:tid 65026] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Fri Apr 24 01:36:30.045368 2026] [:error] [pid 64998:tid 65025] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Fri Apr 24 01:36:30.322046 2026] [:error] [pid 64998:tid 65017] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Fri Apr 24 01:36:30.593354 2026] [:error] [pid 64998:tid 65007] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Fri Apr 24 01:36:30.863365 2026] [:error] [pid 64998:tid 65024] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Fri Apr 24 01:36:31.151089 2026] [:error] [pid 64998:tid 65019] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Fri Apr 24 01:36:31.424895 2026] [:error] [pid 64998:tid 65009] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Fri Apr 24 01:36:31.704260 2026] [:error] [pid 64998:tid 65003] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/prosellers8.php
[Fri Apr 24 01:36:31.981533 2026] [:error] [pid 64998:tid 65008] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Fri Apr 24 01:36:32.485672 2026] [:error] [pid 64998:tid 65022] [client 20.166.78.84:34137] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Fri Apr 24 01:36:32.753553 2026] [:error] [pid 64998:tid 65010] [client 20.166.78.84:34137] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fsjzs.php"] [unique_id "aepYoIV5EysYcTLjmwgqMwAAAcg"]
[Fri Apr 24 01:36:33.760977 2026] [:error] [pid 65000:tid 65054] [client 20.166.78.84:51082] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fsjzs.php"] [unique_id "aepYob6vRb9j6psK2ZZw_AAAAhU"]
[Fri Apr 24 01:36:36.138690 2026] [:error] [pid 25635:tid 25662] [client 20.166.78.84:51111] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fsjzs.php"] [unique_id "aepYpMRxv6UsgRGKB3JP3QAAARc"]
[Fri Apr 24 01:36:40.196006 2026] [:error] [pid 64998:tid 65018] [client 20.166.78.84:42248] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fsjzs.php"] [unique_id "aepYqIV5EysYcTLjmwgqQAAAAdA"]
[Fri Apr 24 01:36:42.635340 2026] [:error] [pid 65000:tid 65039] [client 20.166.78.84:49666] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cwclass.php"] [unique_id "aepYqr6vRb9j6psK2ZZxJQAAAgY"]
[Fri Apr 24 01:36:45.096720 2026] [:error] [pid 65000:tid 65048] [client 20.166.78.84:49956] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cwclass.php"] [unique_id "aepYrb6vRb9j6psK2ZZxLwAAAg8"]
[Fri Apr 24 01:36:46.931749 2026] [:error] [pid 64998:tid 65020] [client 20.166.78.84:49749] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cwclass.php"] [unique_id "aepYroV5EysYcTLjmwgqXwAAAdI"]
[Fri Apr 24 01:36:48.138583 2026] [:error] [pid 43083:tid 43102] [client 20.166.78.84:32072] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cwclass.php"] [unique_id "aepYsDC5hrvNXosL83Kq2QAAANE"]
[Fri Apr 24 01:36:49.250399 2026] [:error] [pid 25635:tid 25640] [client 20.166.78.84:49939] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit-tags.php"] [unique_id "aepYscRxv6UsgRGKB3JP4wAAAQE"]
[Fri Apr 24 01:36:50.956812 2026] [:error] [pid 64967:tid 64974] [client 20.166.78.84:42025] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit-tags.php"] [unique_id "aepYsoAV4GfOOdX8QzqXewAAAYU"]
[Fri Apr 24 01:36:52.592318 2026] [:error] [pid 42973:tid 43059] [client 20.166.78.84:33605] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit-tags.php"] [unique_id "aepYtG6I0QqmmmLTHE1_LgAAAJA"]
[Fri Apr 24 01:36:54.165428 2026] [:error] [pid 65000:tid 65049] [client 20.166.78.84:4929] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/edit-tags.php"] [unique_id "aepYtr6vRb9j6psK2ZZxQAAAAhA"]
[Fri Apr 24 01:36:55.608947 2026] [:error] [pid 65000:tid 65054] [client 20.166.78.84:42026] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aepYt76vRb9j6psK2ZZxUQAAAhU"]
[Fri Apr 24 01:36:56.542397 2026] [:error] [pid 59700:tid 59707] [client 20.166.78.84:16277] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aepYuJXyGZJFeAIDWtlzrwAAAUU"]
[Fri Apr 24 01:36:57.676898 2026] [:error] [pid 59700:tid 59718] [client 20.166.78.84:42008] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aepYuZXyGZJFeAIDWtlztQAAAVA"]
[Fri Apr 24 01:36:59.280920 2026] [:error] [pid 42971:tid 42999] [client 20.166.78.84:46775] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "aepYuzEP2_5RswrH8bFPkAAAAA0"]
[Fri Apr 24 01:37:00.921101 2026] [:error] [pid 64998:tid 65019] [client 20.166.78.84:31392] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "aepYvIV5EysYcTLjmwgqhAAAAdE"]
[Fri Apr 24 01:37:02.411839 2026] [:error] [pid 64998:tid 65015] [client 20.166.78.84:4966] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "aepYvoV5EysYcTLjmwgqigAAAc0"]
[Fri Apr 24 01:37:04.949577 2026] [:error] [pid 65000:tid 65030] [client 20.166.78.84:50954] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "aepYwL6vRb9j6psK2ZZxXwAAAgE"]
[Fri Apr 24 01:37:07.148732 2026] [:error] [pid 59700:tid 59706] [client 20.166.78.84:4139] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "aepYw5XyGZJFeAIDWtlzyAAAAUQ"]
[Fri Apr 24 01:37:08.357154 2026] [:error] [pid 59700:tid 59725] [client 20.166.78.84:29875] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aepYxJXyGZJFeAIDWtlzygAAAVc"]
[Fri Apr 24 01:37:09.601002 2026] [:error] [pid 64967:tid 64978] [client 20.166.78.84:34424] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aepYxYAV4GfOOdX8QzqXlAAAAYk"]
[Fri Apr 24 01:37:11.815107 2026] [:error] [pid 65000:tid 65053] [client 20.166.78.84:4977] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aepYx76vRb9j6psK2ZZxdAAAAhQ"]
[Fri Apr 24 01:37:14.250157 2026] [:error] [pid 65000:tid 65037] [client 20.166.78.84:29783] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aepYyr6vRb9j6psK2ZZxfQAAAgQ"]
[Fri Apr 24 01:37:15.739863 2026] [:error] [pid 42972:tid 43028] [client 20.166.78.84:40260] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aepYy8OAb-3sOknsk4e9TwAAAEw"]
[Fri Apr 24 01:37:16.477911 2026] [:error] [pid 65000:tid 65056] [client 20.166.78.84:38661] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aepYzL6vRb9j6psK2ZZxhgAAAhc"]
[Fri Apr 24 01:37:17.493377 2026] [:error] [pid 65000:tid 65038] [client 20.166.78.84:32386] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aepYzb6vRb9j6psK2ZZxiAAAAgU"]
[Fri Apr 24 01:37:18.478198 2026] [:error] [pid 42973:tid 43045] [client 20.166.78.84:4942] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ai.php"] [unique_id "aepYzm6I0QqmmmLTHE1_WgAAAII"]
[Fri Apr 24 01:37:19.704524 2026] [:error] [pid 64998:tid 65023] [client 20.166.78.84:29237] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aepYz4V5EysYcTLjmwgqygAAAdU"]
[Fri Apr 24 01:37:20.713983 2026] [:error] [pid 64998:tid 65016] [client 20.166.78.84:29981] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aepY0IV5EysYcTLjmwgq0gAAAc4"]
[Fri Apr 24 01:37:21.515522 2026] [:error] [pid 65000:tid 65031] [client 20.166.78.84:38005] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aepY0b6vRb9j6psK2ZZxjwAAAgI"]
[Fri Apr 24 01:37:22.858722 2026] [:error] [pid 42973:tid 43055] [client 20.166.78.84:33412] [client 20.166.78.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aepY0m6I0QqmmmLTHE1_ZgAAAIw"]
[Fri Apr 24 14:38:29.427018 2026] [:error] [pid 14531:tid 14550] [client 20.240.45.42:40616] File does not exist: /usr/local/apache/htdocs/suspended-page/error.php
[Fri Apr 24 14:38:29.694990 2026] [:error] [pid 14531:tid 14542] [client 20.240.45.42:40616] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Fri Apr 24 14:38:29.961944 2026] [:error] [pid 14531:tid 14547] [client 20.240.45.42:40616] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Fri Apr 24 14:38:30.266278 2026] [:error] [pid 14531:tid 14540] [client 20.240.45.42:40616] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Fri Apr 24 14:38:30.535546 2026] [:error] [pid 14531:tid 14553] [client 20.240.45.42:40616] File does not exist: /usr/local/apache/htdocs/suspended-page/zoko.php
[Fri Apr 24 14:38:30.807823 2026] [:error] [pid 14531:tid 14556] [client 20.240.45.42:40616] File does not exist: /usr/local/apache/htdocs/suspended-page/solo1.php
[Fri Apr 24 14:38:31.073820 2026] [:error] [pid 14531:tid 14549] [client 20.240.45.42:40616] File does not exist: /usr/local/apache/htdocs/suspended-page/locales.php
[Fri Apr 24 14:38:31.388768 2026] [:error] [pid 14531:tid 14548] [client 20.240.45.42:40616] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Fri Apr 24 14:38:31.654995 2026] [:error] [pid 14531:tid 14541] [client 20.240.45.42:40616] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Fri Apr 24 14:38:32.188888 2026] [:error] [pid 14531:tid 14545] [client 20.240.45.42:40616] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aesP6HfLU2gw-6KR-GZMrwAAAUw"]
[Fri Apr 24 14:38:32.940105 2026] [:error] [pid 22114:tid 22132] [client 20.240.45.42:40293] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aesP6IAuWGz3WlMQjoeruQAAAQ8"]
[Fri Apr 24 14:38:33.585382 2026] [:error] [pid 14531:tid 14536] [client 20.240.45.42:41438] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aesP6XfLU2gw-6KR-GZMsAAAAUM"]
[Fri Apr 24 14:38:34.177329 2026] [:error] [pid 14531:tid 14543] [client 20.240.45.42:40652] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aesP6nfLU2gw-6KR-GZMsQAAAUo"]
[Fri Apr 24 14:38:34.795310 2026] [:error] [pid 14531:tid 14533] [client 20.240.45.42:39507] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aesP6nfLU2gw-6KR-GZMtQAAAUA"]
[Fri Apr 24 14:38:35.390340 2026] [:error] [pid 14531:tid 14547] [client 20.240.45.42:39879] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aesP63fLU2gw-6KR-GZMuAAAAU4"]
[Fri Apr 24 14:38:35.916682 2026] [:error] [pid 17720:tid 17756] [client 20.240.45.42:39832] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aesP6-hlUs6BS3Ng7_X5iQAAAMI"]
[Fri Apr 24 14:38:36.457509 2026] [:error] [pid 17720:tid 17759] [client 20.240.45.42:39880] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aesP7OhlUs6BS3Ng7_X5igAAAMU"]
[Fri Apr 24 14:38:37.162118 2026] [:error] [pid 14531:tid 14533] [client 20.240.45.42:41462] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aesP7XfLU2gw-6KR-GZMvQAAAUA"]
[Fri Apr 24 14:38:37.739814 2026] [:error] [pid 14531:tid 14555] [client 20.240.45.42:40274] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aesP7XfLU2gw-6KR-GZMwgAAAVY"]
[Fri Apr 24 14:38:38.290099 2026] [:error] [pid 14531:tid 14534] [client 20.240.45.42:41422] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aesP7nfLU2gw-6KR-GZMxAAAAUE"]
[Fri Apr 24 14:38:38.985028 2026] [:error] [pid 17719:tid 17740] [client 20.240.45.42:39840] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aesP7sTZ9gzEyL1BkPpZFQAAAI0"]
[Fri Apr 24 14:38:39.536609 2026] [:error] [pid 17808:tid 17830] [client 20.240.45.42:39816] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.admin.php"] [unique_id "aesP7-arbOEFI8qshvKp-QAAAFQ"]
[Fri Apr 24 14:38:40.068113 2026] [:error] [pid 14531:tid 14536] [client 20.240.45.42:40207] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.admin.php"] [unique_id "aesP8HfLU2gw-6KR-GZMygAAAUM"]
[Fri Apr 24 14:38:40.761152 2026] [:error] [pid 14531:tid 14556] [client 20.240.45.42:39924] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.admin.php"] [unique_id "aesP8HfLU2gw-6KR-GZMzwAAAVc"]
[Fri Apr 24 14:38:41.483800 2026] [:error] [pid 14531:tid 14542] [client 20.240.45.42:41419] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.admin.php"] [unique_id "aesP8XfLU2gw-6KR-GZM1AAAAUk"]
[Fri Apr 24 14:38:42.008994 2026] [:error] [pid 14531:tid 14545] [client 20.240.45.42:41384] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aesP8nfLU2gw-6KR-GZM1QAAAUw"]
[Fri Apr 24 14:38:42.605270 2026] [:error] [pid 17721:tid 17784] [client 20.240.45.42:40259] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aesP8uFXXkLeyDnfk__XNwAAAAM"]
[Fri Apr 24 14:38:43.360223 2026] [:error] [pid 14531:tid 14548] [client 20.240.45.42:40674] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aesP83fLU2gw-6KR-GZM2gAAAU8"]
[Fri Apr 24 14:38:44.156446 2026] [:error] [pid 14531:tid 14537] [client 20.240.45.42:41381] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sw.php"] [unique_id "aesP9HfLU2gw-6KR-GZM3gAAAUQ"]
[Fri Apr 24 14:38:44.961046 2026] [:error] [pid 17721:tid 17796] [client 20.240.45.42:41054] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aesP9OFXXkLeyDnfk__XOQAAAA8"]
[Fri Apr 24 14:38:45.712490 2026] [:error] [pid 22114:tid 22136] [client 20.240.45.42:40280] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aesP9YAuWGz3WlMQjoerxwAAARM"]
[Fri Apr 24 14:38:46.532305 2026] [:error] [pid 14531:tid 14534] [client 20.240.45.42:40256] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aesP9nfLU2gw-6KR-GZM6AAAAUE"]
[Fri Apr 24 14:38:47.151049 2026] [:error] [pid 14531:tid 14545] [client 20.240.45.42:40612] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vuln.php"] [unique_id "aesP93fLU2gw-6KR-GZM6wAAAUw"]
[Fri Apr 24 14:38:47.752073 2026] [:error] [pid 14531:tid 14553] [client 20.240.45.42:40208] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aesP93fLU2gw-6KR-GZM7gAAAVQ"]
[Fri Apr 24 14:38:48.415642 2026] [:error] [pid 14531:tid 14542] [client 20.240.45.42:40209] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aesP-HfLU2gw-6KR-GZM8QAAAUk"]
[Fri Apr 24 14:38:49.821529 2026] [:error] [pid 14531:tid 14554] [client 20.240.45.42:40626] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aesP-XfLU2gw-6KR-GZM9wAAAVU"]
[Fri Apr 24 14:38:50.589637 2026] [:error] [pid 17721:tid 17795] [client 20.240.45.42:41826] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-temp.php"] [unique_id "aesP-uFXXkLeyDnfk__XPgAAAA4"]
[Fri Apr 24 14:38:51.296541 2026] [:error] [pid 17719:tid 17728] [client 20.240.45.42:41807] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aesP-8TZ9gzEyL1BkPpZGAAAAIE"]
[Fri Apr 24 14:38:51.956131 2026] [:error] [pid 17721:tid 17792] [client 20.240.45.42:41436] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aesP--FXXkLeyDnfk__XQAAAAAs"]
[Fri Apr 24 14:38:52.529420 2026] [:error] [pid 14531:tid 14535] [client 20.240.45.42:41025] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aesP_HfLU2gw-6KR-GZNAAAAAUI"]
[Fri Apr 24 14:38:53.284760 2026] [:error] [pid 17720:tid 17757] [client 20.240.45.42:41751] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sxdfrt.php"] [unique_id "aesP_ehlUs6BS3Ng7_X5oQAAAMM"]
[Fri Apr 24 14:38:54.149340 2026] [:error] [pid 17808:tid 17833] [client 20.240.45.42:41397] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aesP_uarbOEFI8qshvKqAAAAAFc"]
[Fri Apr 24 14:38:55.075301 2026] [:error] [pid 17719:tid 17741] [client 20.240.45.42:41804] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aesP_8TZ9gzEyL1BkPpZGgAAAI4"]
[Fri Apr 24 14:38:55.670784 2026] [:error] [pid 17720:tid 17755] [client 20.240.45.42:40311] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aesP_-hlUs6BS3Ng7_X5qAAAAME"]
[Fri Apr 24 14:38:56.271402 2026] [:error] [pid 17721:tid 17802] [client 20.240.45.42:41830] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aesQAOFXXkLeyDnfk__XRwAAABU"]
[Fri Apr 24 14:38:56.840164 2026] [:error] [pid 17808:tid 17822] [client 20.240.45.42:41816] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aesQAOarbOEFI8qshvKqBQAAAEw"]
[Fri Apr 24 14:38:57.430192 2026] [:error] [pid 17721:tid 17782] [client 20.240.45.42:40579] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aesQAeFXXkLeyDnfk__XTQAAAAE"]
[Fri Apr 24 14:38:58.024059 2026] [:error] [pid 22114:tid 22137] [client 20.240.45.42:41345] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aesQAoAuWGz3WlMQjoer1gAAARQ"]
[Fri Apr 24 14:38:58.731524 2026] [:error] [pid 17720:tid 17765] [client 20.240.45.42:38591] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aesQAuhlUs6BS3Ng7_X5sgAAAMs"]
[Fri Apr 24 14:38:59.427829 2026] [:error] [pid 17721:tid 17794] [client 20.240.45.42:41020] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aesQA-FXXkLeyDnfk__XVwAAAA0"]
[Fri Apr 24 14:39:00.020654 2026] [:error] [pid 17721:tid 17796] [client 20.240.45.42:40638] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aesQBOFXXkLeyDnfk__XXQAAAA8"]
[Fri Apr 24 14:39:00.667515 2026] [:error] [pid 17721:tid 17799] [client 20.240.45.42:39887] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aesQBOFXXkLeyDnfk__XYQAAABI"]
[Fri Apr 24 14:39:01.372143 2026] [:error] [pid 14531:tid 14551] [client 20.240.45.42:40307] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-bda.php"] [unique_id "aesQBXfLU2gw-6KR-GZNAwAAAVI"]
[Fri Apr 24 14:39:02.000531 2026] [:error] [pid 14531:tid 14540] [client 20.240.45.42:40583] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aesQBXfLU2gw-6KR-GZNBwAAAUc"]
[Fri Apr 24 14:39:02.540871 2026] [:error] [pid 14531:tid 14543] [client 20.240.45.42:40577] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aesQBnfLU2gw-6KR-GZNDAAAAUo"]
[Fri Apr 24 14:39:03.173855 2026] [:error] [pid 14531:tid 14547] [client 20.240.45.42:40999] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aesQB3fLU2gw-6KR-GZNDwAAAU4"]
[Fri Apr 24 14:39:03.877348 2026] [:error] [pid 14531:tid 14541] [client 20.240.45.42:40962] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bhm.php"] [unique_id "aesQB3fLU2gw-6KR-GZNEwAAAUg"]
[Fri Apr 24 14:39:04.466635 2026] [:error] [pid 22114:tid 22123] [client 20.240.45.42:40241] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aesQCIAuWGz3WlMQjoer2QAAAQY"]
[Fri Apr 24 14:39:05.059055 2026] [:error] [pid 22114:tid 22138] [client 20.240.45.42:41083] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aesQCYAuWGz3WlMQjoer2wAAARU"]
[Fri Apr 24 14:39:05.648399 2026] [:error] [pid 17721:tid 17799] [client 20.240.45.42:41788] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aesQCeFXXkLeyDnfk__XZgAAABI"]
[Fri Apr 24 14:39:06.326194 2026] [:error] [pid 22114:tid 22121] [client 20.240.45.42:40703] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aesQCoAuWGz3WlMQjoer3gAAAQQ"]
[Fri Apr 24 14:39:07.084387 2026] [:error] [pid 17720:tid 17763] [client 20.240.45.42:41829] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aesQC-hlUs6BS3Ng7_X5vQAAAMk"]
[Fri Apr 24 14:39:07.697098 2026] [:error] [pid 17719:tid 17732] [client 20.240.45.42:39892] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aesQC8TZ9gzEyL1BkPpZMgAAAIU"]
[Fri Apr 24 14:39:08.242230 2026] [:error] [pid 14531:tid 14552] [client 20.240.45.42:40657] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aesQDHfLU2gw-6KR-GZNHQAAAVM"]
[Fri Apr 24 14:39:08.844471 2026] [:error] [pid 14531:tid 14554] [client 20.240.45.42:41731] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aesQDHfLU2gw-6KR-GZNIAAAAVU"]
[Fri Apr 24 14:39:09.436299 2026] [:error] [pid 17719:tid 17728] [client 20.240.45.42:41424] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aesQDcTZ9gzEyL1BkPpZNAAAAIE"]
[Fri Apr 24 14:39:10.146132 2026] [:error] [pid 14531:tid 14538] [client 20.240.45.42:41458] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aesQDnfLU2gw-6KR-GZNJAAAAUU"]
[Fri Apr 24 14:39:10.765194 2026] [:error] [pid 14531:tid 14539] [client 20.240.45.42:41391] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aesQDnfLU2gw-6KR-GZNJwAAAUY"]
[Fri Apr 24 14:39:11.349247 2026] [:error] [pid 17719:tid 17735] [client 20.240.45.42:40584] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aesQD8TZ9gzEyL1BkPpZNgAAAIg"]
[Fri Apr 24 14:39:12.054997 2026] [:error] [pid 22114:tid 22124] [client 20.240.45.42:41810] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aesQEIAuWGz3WlMQjoer4wAAAQc"]
[Fri Apr 24 14:39:13.007285 2026] [:error] [pid 17721:tid 17801] [client 20.240.45.42:41822] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aesQEeFXXkLeyDnfk__XbQAAABQ"]
[Fri Apr 24 14:39:13.690087 2026] [:error] [pid 17719:tid 17741] [client 20.240.45.42:39107] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aesQEcTZ9gzEyL1BkPpZNwAAAI4"]
[Fri Apr 24 14:39:14.493527 2026] [:error] [pid 17719:tid 17746] [client 20.240.45.42:41022] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aesQEsTZ9gzEyL1BkPpZOAAAAJM"]
[Fri Apr 24 14:39:15.188771 2026] [:error] [pid 22114:tid 22129] [client 20.240.45.42:40666] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aesQE4AuWGz3WlMQjoer6QAAAQw"]
[Fri Apr 24 14:39:16.298150 2026] [:error] [pid 22114:tid 22140] [client 20.240.45.42:40617] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aesQFIAuWGz3WlMQjoer7AAAARc"]
[Fri Apr 24 14:39:18.398095 2026] [:error] [pid 17720:tid 17777] [client 20.240.45.42:41080] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aesQFuhlUs6BS3Ng7_X5yAAAANc"]
[Fri Apr 24 14:39:19.264386 2026] [:error] [pid 14531:tid 14557] [client 20.240.45.42:42270] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aesQF3fLU2gw-6KR-GZNPgAAAVg"]
[Fri Apr 24 14:39:20.209334 2026] [:error] [pid 17720:tid 17766] [client 20.240.45.42:41086] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aesQGOhlUs6BS3Ng7_X5zgAAAMw"]
[Fri Apr 24 14:39:20.952485 2026] [:error] [pid 14531:tid 14535] [client 20.240.45.42:39144] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aesQGHfLU2gw-6KR-GZNQwAAAUI"]
[Fri Apr 24 14:39:21.734273 2026] [:error] [pid 17808:tid 17814] [client 20.240.45.42:40634] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aesQGearbOEFI8qshvKqHgAAAEQ"]
[Fri Apr 24 14:39:22.528977 2026] [:error] [pid 17808:tid 17817] [client 20.240.45.42:39930] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aesQGuarbOEFI8qshvKqHwAAAEc"]
[Fri Apr 24 14:39:23.351613 2026] [:error] [pid 17720:tid 17760] [client 20.240.45.42:40989] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aesQG-hlUs6BS3Ng7_X52gAAAMY"]
[Fri Apr 24 14:39:24.019717 2026] [:error] [pid 17719:tid 17739] [client 20.240.45.42:42355] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aesQHMTZ9gzEyL1BkPpZTgAAAIw"]
[Fri Apr 24 14:39:24.589019 2026] [:error] [pid 17721:tid 17792] [client 20.240.45.42:41056] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aesQHOFXXkLeyDnfk__XbwAAAAs"]
[Fri Apr 24 14:39:25.504812 2026] [:error] [pid 14531:tid 14539] [client 20.240.45.42:41460] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Xx.php"] [unique_id "aesQHXfLU2gw-6KR-GZNSgAAAUY"]
[Fri Apr 24 14:39:27.258599 2026] [:error] [pid 14531:tid 14556] [client 20.240.45.42:42333] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aesQH3fLU2gw-6KR-GZNUAAAAVc"]
[Fri Apr 24 14:39:28.144441 2026] [:error] [pid 14531:tid 14542] [client 20.240.45.42:42363] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aesQIHfLU2gw-6KR-GZNVQAAAUk"]
[Fri Apr 24 14:39:28.786450 2026] [:error] [pid 14531:tid 14540] [client 20.240.45.42:42333] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aesQIHfLU2gw-6KR-GZNVwAAAUc"]
[Fri Apr 24 14:39:29.683494 2026] [:error] [pid 14531:tid 14557] [client 20.240.45.42:42282] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmini.php"] [unique_id "aesQIXfLU2gw-6KR-GZNXQAAAVg"]
[Fri Apr 24 14:39:30.697721 2026] [:error] [pid 17808:tid 17818] [client 20.240.45.42:42346] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aesQIuarbOEFI8qshvKqLAAAAEg"]
[Fri Apr 24 14:39:31.594013 2026] [:error] [pid 17808:tid 17813] [client 20.240.45.42:40606] File does not exist: /usr/local/apache/htdocs/suspended-page/2468.php
[Fri Apr 24 14:39:32.344954 2026] [:error] [pid 17808:tid 17831] [client 20.240.45.42:40606] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 24 14:39:32.697258 2026] [:error] [pid 17808:tid 17833] [client 20.240.45.42:40606] File does not exist: /usr/local/apache/htdocs/suspended-page/amdin.php
[Fri Apr 24 14:39:33.111539 2026] [:error] [pid 17808:tid 17834] [client 20.240.45.42:40606] File does not exist: /usr/local/apache/htdocs/suspended-page/huya.php
[Fri Apr 24 14:39:33.458913 2026] [:error] [pid 17808:tid 17825] [client 20.240.45.42:40606] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Fri Apr 24 14:39:33.808011 2026] [:error] [pid 17808:tid 17822] [client 20.240.45.42:40606] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Fri Apr 24 14:39:34.158460 2026] [:error] [pid 17808:tid 17832] [client 20.240.45.42:40606] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Fri Apr 24 14:39:34.505569 2026] [:error] [pid 17808:tid 17819] [client 20.240.45.42:40606] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Fri Apr 24 14:39:34.853469 2026] [:error] [pid 17808:tid 17814] [client 20.240.45.42:40606] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Fri Apr 24 14:39:35.202691 2026] [:error] [pid 17808:tid 17816] [client 20.240.45.42:40606] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Fri Apr 24 14:39:35.575353 2026] [:error] [pid 17808:tid 17824] [client 20.240.45.42:40606] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aesQJ-arbOEFI8qshvKqPQAAAE4"]
[Fri Apr 24 14:39:36.312419 2026] [:error] [pid 22114:tid 22128] [client 20.240.45.42:42322] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aesQKIAuWGz3WlMQjoesAwAAAQs"]
[Fri Apr 24 14:39:37.226298 2026] [:error] [pid 17719:tid 17741] [client 20.240.45.42:40593] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aesQKcTZ9gzEyL1BkPpZXgAAAI4"]
[Fri Apr 24 14:39:37.961155 2026] [:error] [pid 14531:tid 14541] [client 20.240.45.42:40971] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lupo.php"] [unique_id "aesQKXfLU2gw-6KR-GZNcAAAAUg"]
[Fri Apr 24 14:39:38.684621 2026] [:error] [pid 17720:tid 17763] [client 20.240.45.42:41380] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aesQKuhlUs6BS3Ng7_X54QAAAMk"]
[Fri Apr 24 14:39:39.452600 2026] [:error] [pid 17721:tid 17801] [client 20.240.45.42:40646] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aesQK-FXXkLeyDnfk__XdgAAABQ"]
[Fri Apr 24 14:39:40.108406 2026] [:error] [pid 17808:tid 17820] [client 20.240.45.42:40289] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aesQLOarbOEFI8qshvKqQgAAAEo"]
[Fri Apr 24 14:39:40.715338 2026] [:error] [pid 17719:tid 17734] [client 20.240.45.42:41031] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/awa.php"] [unique_id "aesQLMTZ9gzEyL1BkPpZYQAAAIc"]
[Fri Apr 24 14:39:41.421152 2026] [:error] [pid 17719:tid 17748] [client 20.240.45.42:42280] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aesQLcTZ9gzEyL1BkPpZZQAAAJU"]
[Fri Apr 24 14:39:42.155197 2026] [:error] [pid 17808:tid 17811] [client 20.240.45.42:41742] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aesQLuarbOEFI8qshvKqRAAAAEE"]
[Fri Apr 24 14:39:42.841154 2026] [:error] [pid 17721:tid 17783] [client 20.240.45.42:41741] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aesQLuFXXkLeyDnfk__XfAAAAAI"]
[Fri Apr 24 14:39:43.992481 2026] [:error] [pid 22114:tid 22126] [client 20.240.45.42:41427] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "aesQL4AuWGz3WlMQjoesEAAAAQk"]
[Fri Apr 24 14:39:44.670578 2026] [:error] [pid 17719:tid 17742] [client 20.240.45.42:41766] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aesQMMTZ9gzEyL1BkPpZagAAAI8"]
[Fri Apr 24 14:39:45.706139 2026] [:error] [pid 17719:tid 17735] [client 20.240.45.42:42316] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aesQMcTZ9gzEyL1BkPpZbAAAAIg"]
[Fri Apr 24 14:39:46.549325 2026] [:error] [pid 17721:tid 17794] [client 20.240.45.42:39818] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aesQMuFXXkLeyDnfk__XhwAAAA0"]
[Fri Apr 24 14:39:47.290001 2026] [:error] [pid 17719:tid 17751] [client 20.240.45.42:40964] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aesQM8TZ9gzEyL1BkPpZcgAAAJg"]
[Fri Apr 24 14:39:48.193554 2026] [:error] [pid 17721:tid 17804] [client 20.240.45.42:41418] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aesQNOFXXkLeyDnfk__XkQAAABc"]
[Fri Apr 24 14:39:49.041323 2026] [:error] [pid 14531:tid 14537] [client 20.240.45.42:41348] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aesQNXfLU2gw-6KR-GZNfgAAAUQ"]
[Fri Apr 24 14:39:49.734860 2026] [:error] [pid 14531:tid 14555] [client 20.240.45.42:41781] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aesQNXfLU2gw-6KR-GZNgQAAAVY"]
[Fri Apr 24 14:39:50.358219 2026] [:error] [pid 17721:tid 17804] [client 20.240.45.42:41038] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aesQNuFXXkLeyDnfk__XnQAAABc"]
[Fri Apr 24 14:39:51.025759 2026] [:error] [pid 17721:tid 17799] [client 20.240.45.42:42293] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aesQN-FXXkLeyDnfk__XoAAAABI"]
[Fri Apr 24 14:39:51.873781 2026] [:error] [pid 17808:tid 17813] [client 20.240.45.42:41008] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aesQN-arbOEFI8qshvKqSwAAAEM"]
[Fri Apr 24 14:39:53.581363 2026] [:error] [pid 17719:tid 17729] [client 20.240.45.42:41448] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aesQOcTZ9gzEyL1BkPpZgQAAAII"]
[Fri Apr 24 14:39:54.240736 2026] [:error] [pid 17719:tid 17744] [client 20.240.45.42:41812] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aesQOsTZ9gzEyL1BkPpZgwAAAJE"]
[Fri Apr 24 14:39:54.967725 2026] [:error] [pid 14531:tid 14538] [client 20.240.45.42:41008] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aesQOnfLU2gw-6KR-GZNmAAAAUU"]
[Fri Apr 24 14:39:55.865108 2026] [:error] [pid 14531:tid 14540] [client 20.240.45.42:41838] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aesQO3fLU2gw-6KR-GZNngAAAUc"]
[Fri Apr 24 14:39:56.544963 2026] [:error] [pid 14531:tid 14545] [client 20.240.45.42:41044] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aesQPHfLU2gw-6KR-GZNogAAAUw"]
[Fri Apr 24 14:39:57.077826 2026] [:error] [pid 17721:tid 17787] [client 20.240.45.42:27218] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aesQPeFXXkLeyDnfk__XqwAAAAY"]
[Fri Apr 24 14:39:58.063984 2026] [:error] [pid 17719:tid 17751] [client 20.240.45.42:40984] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aesQPsTZ9gzEyL1BkPpZhQAAAJg"]
[Fri Apr 24 14:39:59.338774 2026] [:error] [pid 17719:tid 17745] [client 20.240.45.42:27239] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aesQP8TZ9gzEyL1BkPpZiQAAAJI"]
[Fri Apr 24 14:40:00.220425 2026] [:error] [pid 22114:tid 22123] [client 20.240.45.42:42254] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aesQQIAuWGz3WlMQjoesSAAAAQY"]
[Fri Apr 24 14:40:00.887879 2026] [:error] [pid 22114:tid 22120] [client 20.240.45.42:42839] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aesQQIAuWGz3WlMQjoesSgAAAQM"]
[Fri Apr 24 14:40:01.450936 2026] [:error] [pid 22114:tid 22135] [client 20.240.45.42:42336] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aesQQYAuWGz3WlMQjoesSwAAARI"]
[Fri Apr 24 14:40:02.091972 2026] [:error] [pid 22114:tid 22127] [client 20.240.45.42:42356] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aesQQoAuWGz3WlMQjoesTwAAAQo"]
[Fri Apr 24 14:40:02.909523 2026] [:error] [pid 14531:tid 14547] [client 20.240.45.42:40985] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aesQQnfLU2gw-6KR-GZNrAAAAU4"]
[Fri Apr 24 14:40:03.729195 2026] [:error] [pid 17719:tid 17744] [client 20.240.45.42:41041] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aesQQ8TZ9gzEyL1BkPpZmQAAAJE"]
[Fri Apr 24 14:40:04.674419 2026] [:error] [pid 17719:tid 17737] [client 20.240.45.42:41055] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aesQRMTZ9gzEyL1BkPpZmgAAAIo"]
[Fri Apr 24 14:40:05.715018 2026] [:error] [pid 17721:tid 17797] [client 20.240.45.42:42286] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aesQReFXXkLeyDnfk__XtgAAABA"]
[Fri Apr 24 14:40:06.426567 2026] [:error] [pid 22114:tid 22123] [client 20.240.45.42:3804] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aesQRoAuWGz3WlMQjoesWQAAAQY"]
[Fri Apr 24 14:40:07.453092 2026] [:error] [pid 14531:tid 14542] [client 20.240.45.42:42842] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "aesQR3fLU2gw-6KR-GZNtQAAAUk"]
[Fri Apr 24 14:40:08.182743 2026] [:error] [pid 14531:tid 14551] [client 20.240.45.42:3817] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aesQSHfLU2gw-6KR-GZNuAAAAVI"]
[Fri Apr 24 14:40:08.905423 2026] [:error] [pid 14531:tid 14536] [client 20.240.45.42:42250] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aesQSHfLU2gw-6KR-GZNuwAAAUM"]
[Fri Apr 24 14:40:10.251932 2026] [:error] [pid 17808:tid 17826] [client 20.240.45.42:42318] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aesQSuarbOEFI8qshvKqYQAAAFA"]
[Fri Apr 24 14:40:11.020688 2026] [:error] [pid 17808:tid 17811] [client 20.240.45.42:41383] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aesQS-arbOEFI8qshvKqYgAAAEE"]
[Fri Apr 24 14:40:11.793392 2026] [:error] [pid 22114:tid 22137] [client 20.240.45.42:3824] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aesQS4AuWGz3WlMQjoesYwAAARQ"]
[Fri Apr 24 14:40:12.599954 2026] [:error] [pid 17719:tid 17728] [client 20.240.45.42:41416] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aesQTMTZ9gzEyL1BkPpZnwAAAIE"]
[Fri Apr 24 14:40:13.232380 2026] [:error] [pid 17720:tid 17757] [client 20.240.45.42:41739] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aesQTehlUs6BS3Ng7_X59QAAAMM"]
[Fri Apr 24 14:40:13.941020 2026] [:error] [pid 17719:tid 17740] [client 20.240.45.42:40272] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aesQTcTZ9gzEyL1BkPpZoAAAAI0"]
[Fri Apr 24 14:40:14.837798 2026] [:error] [pid 17719:tid 17731] [client 20.240.45.42:41758] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aesQTsTZ9gzEyL1BkPpZpAAAAIQ"]
[Fri Apr 24 14:40:15.724529 2026] [:error] [pid 17721:tid 17788] [client 20.240.45.42:41836] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aesQT-FXXkLeyDnfk__XxAAAAAc"]
[Fri Apr 24 14:40:16.502269 2026] [:error] [pid 17721:tid 17781] [client 20.240.45.42:25450] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aesQUOFXXkLeyDnfk__XxgAAAAA"]
[Fri Apr 24 14:40:17.354415 2026] [:error] [pid 17721:tid 17784] [client 20.240.45.42:42252] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aesQUeFXXkLeyDnfk__XyAAAAAM"]
[Fri Apr 24 14:40:18.570297 2026] [:error] [pid 17721:tid 17783] [client 20.240.45.42:27227] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aesQUuFXXkLeyDnfk__XygAAAAI"]
[Fri Apr 24 14:40:19.361399 2026] [:error] [pid 17720:tid 17778] [client 20.240.45.42:43328] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aesQU-hlUs6BS3Ng7_X5-AAAANg"]
[Fri Apr 24 14:40:19.999107 2026] [:error] [pid 17721:tid 17788] [client 20.240.45.42:41852] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aesQU-FXXkLeyDnfk__X0QAAAAc"]
[Fri Apr 24 14:40:20.833731 2026] [:error] [pid 17721:tid 17797] [client 20.240.45.42:25411] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aesQVOFXXkLeyDnfk__X1wAAABA"]
[Fri Apr 24 14:40:21.655899 2026] [:error] [pid 17721:tid 17799] [client 20.240.45.42:41811] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aesQVeFXXkLeyDnfk__X2gAAABI"]
[Fri Apr 24 14:40:22.442061 2026] [:error] [pid 14531:tid 14551] [client 20.240.45.42:42343] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aesQVnfLU2gw-6KR-GZNwAAAAVI"]
[Fri Apr 24 14:40:23.190995 2026] [:error] [pid 14531:tid 14555] [client 20.240.45.42:39919] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aesQV3fLU2gw-6KR-GZNwwAAAVY"]
[Fri Apr 24 14:40:24.223364 2026] [:error] [pid 14531:tid 14540] [client 20.240.45.42:3836] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "aesQWHfLU2gw-6KR-GZNxwAAAUc"]
[Fri Apr 24 14:40:24.876619 2026] [:error] [pid 17719:tid 17745] [client 20.240.45.42:42247] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aesQWMTZ9gzEyL1BkPpZqgAAAJI"]
[Fri Apr 24 14:40:25.579572 2026] [:error] [pid 17720:tid 17775] [client 20.240.45.42:42796] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aesQWehlUs6BS3Ng7_X5_gAAANU"]
[Fri Apr 24 14:40:26.318624 2026] [:error] [pid 17719:tid 17730] [client 20.240.45.42:25410] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aesQWsTZ9gzEyL1BkPpZrwAAAIM"]
[Fri Apr 24 14:40:26.936045 2026] [:error] [pid 17808:tid 17816] [client 20.240.45.42:41771] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/3.php"] [unique_id "aesQWuarbOEFI8qshvKqcQAAAEY"]
[Fri Apr 24 14:40:27.664244 2026] [:error] [pid 17720:tid 17756] [client 20.240.45.42:42878] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aesQW-hlUs6BS3Ng7_X6AgAAAMI"]
[Fri Apr 24 14:40:28.345610 2026] [:error] [pid 14531:tid 14538] [client 20.240.45.42:42269] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aesQXHfLU2gw-6KR-GZNzwAAAUU"]
[Fri Apr 24 14:40:29.190775 2026] [:error] [pid 17808:tid 17824] [client 20.240.45.42:43297] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aesQXearbOEFI8qshvKqcwAAAE4"]
[Fri Apr 24 14:40:30.466766 2026] [:error] [pid 17721:tid 17784] [client 20.240.45.42:41828] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/4.php"] [unique_id "aesQXuFXXkLeyDnfk__X2wAAAAM"]
[Fri Apr 24 14:40:31.415916 2026] [:error] [pid 17719:tid 17741] [client 20.240.45.42:42840] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aesQX8TZ9gzEyL1BkPpZtwAAAI4"]
[Fri Apr 24 14:40:33.136176 2026] [:error] [pid 17719:tid 17735] [client 20.240.45.42:41823] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/5.php"] [unique_id "aesQYcTZ9gzEyL1BkPpZvAAAAIg"]
[Fri Apr 24 14:40:36.483349 2026] [:error] [pid 17720:tid 17772] [client 20.240.45.42:25429] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Fri Apr 24 14:40:37.052742 2026] [:error] [pid 17720:tid 17776] [client 20.240.45.42:25429] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Fri Apr 24 14:40:37.403472 2026] [:error] [pid 17720:tid 17770] [client 20.240.45.42:25429] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Fri Apr 24 14:40:37.755111 2026] [:error] [pid 17720:tid 17774] [client 20.240.45.42:25429] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Fri Apr 24 14:40:38.105292 2026] [:error] [pid 17720:tid 17769] [client 20.240.45.42:25429] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Fri Apr 24 14:40:38.805925 2026] [:error] [pid 17720:tid 17777] [client 20.240.45.42:25429] File does not exist: /usr/local/apache/htdocs/suspended-page/f35_S.php
[Fri Apr 24 14:40:39.156136 2026] [:error] [pid 17720:tid 17755] [client 20.240.45.42:25429] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Fri Apr 24 14:40:39.506541 2026] [:error] [pid 17720:tid 17771] [client 20.240.45.42:25429] File does not exist: /usr/local/apache/htdocs/suspended-page/111.php
[Fri Apr 24 14:40:39.857878 2026] [:error] [pid 17720:tid 17761] [client 20.240.45.42:25429] File does not exist: /usr/local/apache/htdocs/suspended-page/wp1.php
[Fri Apr 24 14:40:40.208559 2026] [:error] [pid 17720:tid 17757] [client 20.240.45.42:25429] File does not exist: /usr/local/apache/htdocs/suspended-page/aligk.php
[Fri Apr 24 14:40:40.555936 2026] [:error] [pid 17720:tid 17758] [client 20.240.45.42:25429] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aesQaOhlUs6BS3Ng7_X6IwAAAMQ"]
[Fri Apr 24 14:40:41.904934 2026] [:error] [pid 14531:tid 14551] [client 20.240.45.42:3822] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aesQaXfLU2gw-6KR-GZN1gAAAVI"]
[Fri Apr 24 14:40:43.158082 2026] [:error] [pid 14531:tid 14557] [client 20.240.45.42:43287] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aesQa3fLU2gw-6KR-GZN2wAAAVg"]
[Fri Apr 24 14:40:47.507291 2026] [:error] [pid 17721:tid 17787] [client 20.240.45.42:3811] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byrgo.php"] [unique_id "aesQb-FXXkLeyDnfk__X5QAAAAY"]
[Fri Apr 24 14:40:52.596785 2026] [:error] [pid 17721:tid 17792] [client 20.240.45.42:42240] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aesQdOFXXkLeyDnfk__X8QAAAAs"]
[Fri Apr 24 14:40:54.897286 2026] [:error] [pid 22114:tid 22117] [client 20.240.45.42:42810] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aesQdoAuWGz3WlMQjoesfQAAAQA"]
[Fri Apr 24 14:40:56.613312 2026] [:error] [pid 17721:tid 17804] [client 20.240.45.42:43320] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aesQeOFXXkLeyDnfk__YBAAAABc"]
[Fri Apr 24 14:40:58.673179 2026] [:error] [pid 17808:tid 17813] [client 20.240.45.42:43383] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aesQeuarbOEFI8qshvKqkgAAAEM"]
[Fri Apr 24 14:40:59.851898 2026] [:error] [pid 17721:tid 17801] [client 20.240.45.42:41745] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aesQe-FXXkLeyDnfk__YCwAAABQ"]
[Fri Apr 24 14:41:00.481508 2026] [:error] [pid 17721:tid 17788] [client 20.240.45.42:43371] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aesQfOFXXkLeyDnfk__YDQAAAAc"]
[Fri Apr 24 14:41:01.331078 2026] [:error] [pid 17720:tid 17772] [client 20.240.45.42:42792] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aesQfehlUs6BS3Ng7_X6MAAAANI"]
[Fri Apr 24 14:41:02.500626 2026] [:error] [pid 17720:tid 17758] [client 20.240.45.42:25428] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aesQfuhlUs6BS3Ng7_X6NQAAAMQ"]
[Fri Apr 24 14:41:03.858695 2026] [:error] [pid 17719:tid 17749] [client 20.240.45.42:42879] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aesQf8TZ9gzEyL1BkPpZ2wAAAJY"]
[Fri Apr 24 14:41:06.743691 2026] [:error] [pid 14531:tid 14554] [client 20.240.45.42:40698] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aesQgnfLU2gw-6KR-GZOFAAAAVU"]
[Fri Apr 24 14:41:08.057566 2026] [:error] [pid 17808:tid 17833] [client 20.240.45.42:43826] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aesQhOarbOEFI8qshvKqnAAAAFc"]
[Fri Apr 24 14:41:09.187811 2026] [:error] [pid 17719:tid 17728] [client 20.240.45.42:42795] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aesQhcTZ9gzEyL1BkPpZ4gAAAIE"]
[Fri Apr 24 14:41:10.259865 2026] [:error] [pid 14531:tid 14544] [client 20.240.45.42:42799] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aesQhnfLU2gw-6KR-GZOFQAAAUs"]
[Fri Apr 24 14:41:11.374612 2026] [:error] [pid 14531:tid 14546] [client 20.240.45.42:42771] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aesQh3fLU2gw-6KR-GZOFgAAAU0"]
[Fri Apr 24 14:41:12.444516 2026] [:error] [pid 14531:tid 14547] [client 20.240.45.42:42304] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aesQiHfLU2gw-6KR-GZOHQAAAU4"]
[Fri Apr 24 14:41:14.138435 2026] [:error] [pid 17808:tid 17817] [client 20.240.45.42:43264] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aesQiuarbOEFI8qshvKqrAAAAEc"]
[Fri Apr 24 14:41:15.962732 2026] [:error] [pid 17721:tid 17788] [client 20.240.45.42:3864] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aesQi-FXXkLeyDnfk__YPAAAAAc"]
[Fri Apr 24 14:41:17.849947 2026] [:error] [pid 17808:tid 17831] [client 20.240.45.42:25471] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aesQjearbOEFI8qshvKquQAAAFU"]
[Fri Apr 24 14:41:19.417401 2026] [:error] [pid 17721:tid 17796] [client 20.240.45.42:43796] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aesQj-FXXkLeyDnfk__YSQAAAA8"]
[Fri Apr 24 14:41:20.268148 2026] [:error] [pid 17808:tid 17815] [client 20.240.45.42:43814] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aesQkOarbOEFI8qshvKqvwAAAEU"]
[Fri Apr 24 14:41:20.903691 2026] [:error] [pid 22114:tid 22121] [client 20.240.45.42:43888] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aesQkIAuWGz3WlMQjoeskwAAAQQ"]
[Fri Apr 24 14:41:21.858336 2026] [:error] [pid 17721:tid 17782] [client 20.240.45.42:27248] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aesQkeFXXkLeyDnfk__YUQAAAAE"]
[Fri Apr 24 14:41:23.051538 2026] [:error] [pid 22114:tid 22128] [client 20.240.45.42:3808] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aesQk4AuWGz3WlMQjoesmAAAAQs"]
[Fri Apr 24 14:41:23.995089 2026] [:error] [pid 17719:tid 17737] [client 20.240.45.42:27246] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aesQk8TZ9gzEyL1BkPpZ7QAAAIo"]
[Fri Apr 24 14:41:24.730032 2026] [:error] [pid 14531:tid 14553] [client 20.240.45.42:41738] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aesQlHfLU2gw-6KR-GZOKwAAAVQ"]
[Fri Apr 24 14:41:25.685695 2026] [:error] [pid 17721:tid 17793] [client 20.240.45.42:43883] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aesQleFXXkLeyDnfk__YXAAAAAw"]
[Fri Apr 24 14:41:26.609595 2026] [:error] [pid 14531:tid 14550] [client 20.240.45.42:43900] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aesQlnfLU2gw-6KR-GZONwAAAVE"]
[Fri Apr 24 14:41:27.870726 2026] [:error] [pid 17719:tid 17733] [client 20.240.45.42:43852] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aesQl8TZ9gzEyL1BkPpZ8wAAAIY"]
[Fri Apr 24 14:41:28.949439 2026] [:error] [pid 17808:tid 17834] [client 20.240.45.42:3891] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aesQmOarbOEFI8qshvKq0AAAAFg"]
[Fri Apr 24 14:41:29.968936 2026] [:error] [pid 22114:tid 22140] [client 20.240.45.42:42754] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aesQmYAuWGz3WlMQjoesnAAAARc"]
[Fri Apr 24 14:41:30.793652 2026] [:error] [pid 14531:tid 14546] [client 20.240.45.42:43898] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aesQmnfLU2gw-6KR-GZOUgAAAU0"]
[Fri Apr 24 14:41:32.295882 2026] [:error] [pid 14531:tid 14540] [client 20.240.45.42:42862] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "aesQnHfLU2gw-6KR-GZOVwAAAUc"]
[Fri Apr 24 14:41:33.031314 2026] [:error] [pid 17720:tid 17772] [client 20.240.45.42:3897] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inege.php"] [unique_id "aesQnehlUs6BS3Ng7_X6VQAAANI"]
[Fri Apr 24 14:41:45.111548 2026] [:error] [pid 17721:tid 17801] [client 20.240.45.42:3876] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Fri Apr 24 14:41:45.463497 2026] [:error] [pid 17721:tid 17805] [client 20.240.45.42:3876] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Fri Apr 24 14:41:45.872979 2026] [:error] [pid 17721:tid 17803] [client 20.240.45.42:3876] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Fri Apr 24 14:41:46.223570 2026] [:error] [pid 17721:tid 17792] [client 20.240.45.42:3876] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Fri Apr 24 14:41:46.575727 2026] [:error] [pid 17721:tid 17783] [client 20.240.45.42:3876] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Fri Apr 24 14:41:46.997786 2026] [:error] [pid 17721:tid 17804] [client 20.240.45.42:3876] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Fri Apr 24 14:41:47.347183 2026] [:error] [pid 17721:tid 17800] [client 20.240.45.42:3876] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Fri Apr 24 14:41:47.734826 2026] [:error] [pid 17721:tid 17795] [client 20.240.45.42:3876] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Fri Apr 24 14:41:48.164957 2026] [:error] [pid 17721:tid 17801] [client 20.240.45.42:3876] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri Apr 24 14:41:49.029998 2026] [:error] [pid 17721:tid 17786] [client 20.240.45.42:3876] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Fri Apr 24 14:41:49.431260 2026] [:error] [pid 17721:tid 17802] [client 20.240.45.42:3876] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aesQreFXXkLeyDnfk__YnQAAABU"]
[Fri Apr 24 14:42:39.759663 2026] [:error] [pid 17719:tid 17749] [client 20.240.45.42:44367] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aesQ38TZ9gzEyL1BkPpaJgAAAJY"]
[Fri Apr 24 14:43:09.632178 2026] [:error] [pid 17808:tid 17810] [client 20.240.45.42:28697] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Fri Apr 24 14:43:10.042944 2026] [:error] [pid 17808:tid 17818] [client 20.240.45.42:28697] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Fri Apr 24 14:43:10.694689 2026] [:error] [pid 17808:tid 17813] [client 20.240.45.42:28697] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Fri Apr 24 14:43:10.976596 2026] [:error] [pid 17808:tid 17834] [client 20.240.45.42:28697] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Fri Apr 24 14:43:11.255560 2026] [:error] [pid 17808:tid 17831] [client 20.240.45.42:28697] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri Apr 24 14:43:11.884875 2026] [:error] [pid 17808:tid 17825] [client 20.240.45.42:28697] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Fri Apr 24 14:43:12.175840 2026] [:error] [pid 17808:tid 17812] [client 20.240.45.42:28697] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Fri Apr 24 14:43:12.968314 2026] [:error] [pid 17808:tid 17810] [client 20.240.45.42:28697] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aesRAOarbOEFI8qshvKrFAAAAEA"]
[Fri Apr 24 14:43:13.646901 2026] [:error] [pid 14531:tid 14556] [client 20.240.45.42:43885] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aesRAXfLU2gw-6KR-GZO3QAAAVc"]
[Fri Apr 24 14:43:14.285318 2026] [:error] [pid 17721:tid 17804] [client 20.240.45.42:45210] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aesRAuFXXkLeyDnfk__ZMQAAABc"]
[Fri Apr 24 14:43:14.933551 2026] [:error] [pid 17721:tid 17802] [client 20.240.45.42:44301] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aesRAuFXXkLeyDnfk__ZNgAAABU"]
[Fri Apr 24 14:43:15.650782 2026] [:error] [pid 22114:tid 22132] [client 20.240.45.42:44401] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aesRA4AuWGz3WlMQjoes6QAAAQ8"]
[Fri Apr 24 14:43:16.849557 2026] [:error] [pid 17721:tid 17793] [client 20.240.45.42:45821] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aesRBOFXXkLeyDnfk__ZPQAAAAw"]
[Fri Apr 24 14:43:19.051017 2026] [:error] [pid 14531:tid 14542] [client 20.240.45.42:44889] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aesRB3fLU2gw-6KR-GZO5QAAAUk"]
[Fri Apr 24 14:43:19.698870 2026] [:error] [pid 17721:tid 17805] [client 20.240.45.42:43789] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "aesRB-FXXkLeyDnfk__ZQwAAABg"]
[Fri Apr 24 14:43:20.406345 2026] [:error] [pid 17721:tid 17797] [client 20.240.45.42:45727] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aesRCOFXXkLeyDnfk__ZRwAAABA"]
[Fri Apr 24 14:43:21.015758 2026] [:error] [pid 14531:tid 14548] [client 20.240.45.42:44298] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aesRCXfLU2gw-6KR-GZO7QAAAU8"]
[Fri Apr 24 14:43:21.895694 2026] [:error] [pid 17721:tid 17784] [client 20.240.45.42:44838] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aesRCeFXXkLeyDnfk__ZSwAAAAM"]
[Fri Apr 24 14:43:22.570116 2026] [:error] [pid 22114:tid 22121] [client 20.240.45.42:45794] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aesRCoAuWGz3WlMQjoes8QAAAQQ"]
[Fri Apr 24 14:43:23.294649 2026] [:error] [pid 17719:tid 17734] [client 20.240.45.42:45279] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aesRC8TZ9gzEyL1BkPpaYAAAAIc"]
[Fri Apr 24 14:43:23.966818 2026] [:error] [pid 22114:tid 22120] [client 20.240.45.42:44916] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aesRC4AuWGz3WlMQjoes8gAAAQM"]
[Fri Apr 24 14:43:24.742838 2026] [:error] [pid 22114:tid 22135] [client 20.240.45.42:43850] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aesRDIAuWGz3WlMQjoes9AAAARI"]
[Fri Apr 24 14:43:25.561479 2026] [:error] [pid 17720:tid 17769] [client 20.240.45.42:44900] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "aesRDehlUs6BS3Ng7_X6iAAAAM8"]
[Fri Apr 24 14:43:26.260213 2026] [:error] [pid 17721:tid 17790] [client 20.240.45.42:28702] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aesRDuFXXkLeyDnfk__ZUwAAAAk"]
[Fri Apr 24 14:43:26.948269 2026] [:error] [pid 22114:tid 22134] [client 20.240.45.42:28728] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aesRDoAuWGz3WlMQjoes_gAAARE"]
[Fri Apr 24 14:43:27.499569 2026] [:error] [pid 17719:tid 17744] [client 20.240.45.42:46141] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aesRD8TZ9gzEyL1BkPpaZQAAAJE"]
[Fri Apr 24 14:43:28.370079 2026] [:error] [pid 17719:tid 17742] [client 20.240.45.42:45771] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aesREMTZ9gzEyL1BkPpaZwAAAI8"]
[Fri Apr 24 14:43:29.048749 2026] [:error] [pid 17721:tid 17791] [client 20.240.45.42:44309] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aesREeFXXkLeyDnfk__ZVwAAAAo"]
[Fri Apr 24 14:43:29.728941 2026] [:error] [pid 14531:tid 14554] [client 20.240.45.42:46128] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aesREXfLU2gw-6KR-GZO-wAAAVU"]
[Fri Apr 24 14:43:30.392559 2026] [:error] [pid 17721:tid 17784] [client 20.240.45.42:44400] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aesREuFXXkLeyDnfk__ZXQAAAAM"]
[Fri Apr 24 14:43:31.005917 2026] [:error] [pid 17808:tid 17824] [client 20.240.45.42:44839] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "aesRE-arbOEFI8qshvKrGgAAAE4"]
[Fri Apr 24 14:43:32.070370 2026] [:error] [pid 17808:tid 17830] [client 20.240.45.42:25752] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aesRFOarbOEFI8qshvKrHgAAAFQ"]
[Fri Apr 24 14:43:32.945695 2026] [:error] [pid 22114:tid 22123] [client 20.240.45.42:44305] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aesRFIAuWGz3WlMQjoetEAAAAQY"]
[Fri Apr 24 14:43:34.103098 2026] [:error] [pid 17721:tid 17785] [client 20.240.45.42:45211] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aesRFuFXXkLeyDnfk__ZZgAAAAQ"]
[Fri Apr 24 14:43:34.987445 2026] [:error] [pid 22114:tid 22138] [client 20.240.45.42:45266] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aesRFoAuWGz3WlMQjoetGAAAARU"]
[Fri Apr 24 14:43:35.677429 2026] [:error] [pid 17719:tid 17729] [client 20.240.45.42:44382] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aesRF8TZ9gzEyL1BkPpaaQAAAII"]
[Fri Apr 24 14:43:36.264333 2026] [:error] [pid 17719:tid 17740] [client 20.240.45.42:28705] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aesRGMTZ9gzEyL1BkPpabAAAAI0"]
[Fri Apr 24 14:43:36.851302 2026] [:error] [pid 14531:tid 14542] [client 20.240.45.42:46150] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aesRGHfLU2gw-6KR-GZPAwAAAUk"]
[Fri Apr 24 14:43:37.825873 2026] [:error] [pid 14531:tid 14544] [client 20.240.45.42:45805] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we.php"] [unique_id "aesRGXfLU2gw-6KR-GZPBQAAAUs"]
[Fri Apr 24 14:43:38.481443 2026] [:error] [pid 17721:tid 17785] [client 20.240.45.42:46201] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aesRGuFXXkLeyDnfk__ZawAAAAQ"]
[Fri Apr 24 14:43:39.080907 2026] [:error] [pid 17808:tid 17822] [client 20.240.45.42:45713] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aesRG-arbOEFI8qshvKrIgAAAEw"]
[Fri Apr 24 14:43:39.669981 2026] [:error] [pid 14531:tid 14533] [client 20.240.45.42:25758] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aesRG3fLU2gw-6KR-GZPCQAAAUA"]
[Fri Apr 24 14:43:40.350608 2026] [:error] [pid 17721:tid 17788] [client 20.240.45.42:44360] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aesRHOFXXkLeyDnfk__ZbwAAAAc"]
[Fri Apr 24 14:43:40.956743 2026] [:error] [pid 17721:tid 17781] [client 20.240.45.42:45732] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aesRHOFXXkLeyDnfk__ZcgAAAAA"]
[Fri Apr 24 14:43:41.611818 2026] [:error] [pid 14531:tid 14547] [client 20.240.45.42:45201] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aesRHXfLU2gw-6KR-GZPEAAAAU4"]
[Fri Apr 24 14:43:42.342217 2026] [:error] [pid 14531:tid 14542] [client 20.240.45.42:46164] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aesRHnfLU2gw-6KR-GZPEgAAAUk"]
[Fri Apr 24 14:43:42.935564 2026] [:error] [pid 22114:tid 22136] [client 20.240.45.42:46142] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aesRHoAuWGz3WlMQjoetIgAAARM"]
[Fri Apr 24 14:43:43.477034 2026] [:error] [pid 22114:tid 22133] [client 20.240.45.42:44387] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aesRH4AuWGz3WlMQjoetJAAAARA"]
[Fri Apr 24 14:43:44.128448 2026] [:error] [pid 17719:tid 17738] [client 20.240.45.42:44316] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aesRIMTZ9gzEyL1BkPpadgAAAIs"]
[Fri Apr 24 14:43:44.673888 2026] [:error] [pid 14531:tid 14533] [client 20.240.45.42:25791] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aesRIHfLU2gw-6KR-GZPFgAAAUA"]
[Fri Apr 24 14:43:45.333519 2026] [:error] [pid 14531:tid 14541] [client 20.240.45.42:28709] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aesRIXfLU2gw-6KR-GZPGAAAAUg"]
[Fri Apr 24 14:43:45.995315 2026] [:error] [pid 17721:tid 17790] [client 20.240.45.42:46123] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aesRIeFXXkLeyDnfk__ZeAAAAAk"]
[Fri Apr 24 14:43:46.700672 2026] [:error] [pid 17720:tid 17767] [client 20.240.45.42:45278] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aesRIuhlUs6BS3Ng7_X6igAAAM0"]
[Fri Apr 24 14:43:47.322504 2026] [:error] [pid 17808:tid 17826] [client 20.240.45.42:27969] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aesRI-arbOEFI8qshvKrLwAAAFA"]
[Fri Apr 24 14:43:47.856336 2026] [:error] [pid 17808:tid 17824] [client 20.240.45.42:25773] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aesRI-arbOEFI8qshvKrMQAAAE4"]
[Fri Apr 24 14:43:48.584457 2026] [:error] [pid 22114:tid 22130] [client 20.240.45.42:27996] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aesRJIAuWGz3WlMQjoetKQAAAQ0"]
[Fri Apr 24 14:43:49.258740 2026] [:error] [pid 17808:tid 17811] [client 20.240.45.42:44814] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aesRJearbOEFI8qshvKrOAAAAEE"]
[Fri Apr 24 14:43:49.870365 2026] [:error] [pid 17808:tid 17820] [client 20.240.45.42:45745] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aesRJearbOEFI8qshvKrOQAAAEo"]
[Fri Apr 24 14:43:50.478221 2026] [:error] [pid 22114:tid 22117] [client 20.240.45.42:44812] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aesRJoAuWGz3WlMQjoetLQAAAQA"]
[Fri Apr 24 14:43:51.181788 2026] [:error] [pid 22114:tid 22118] [client 20.240.45.42:46116] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aesRJ4AuWGz3WlMQjoetLwAAAQE"]
[Fri Apr 24 14:43:51.906984 2026] [:error] [pid 17721:tid 17795] [client 20.240.45.42:27968] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aesRJ-FXXkLeyDnfk__ZgQAAAA4"]
[Fri Apr 24 14:43:53.007336 2026] [:error] [pid 14531:tid 14540] [client 20.240.45.42:45192] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aesRKXfLU2gw-6KR-GZPJAAAAUc"]
[Fri Apr 24 14:43:53.680184 2026] [:error] [pid 17719:tid 17749] [client 20.240.45.42:46113] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aesRKcTZ9gzEyL1BkPpaegAAAJY"]
[Fri Apr 24 14:43:54.475839 2026] [:error] [pid 17721:tid 17792] [client 20.240.45.42:44912] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aesRKuFXXkLeyDnfk__ZhQAAAAs"]
[Fri Apr 24 14:43:55.243846 2026] [:error] [pid 17721:tid 17804] [client 20.240.45.42:46084] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aesRK-FXXkLeyDnfk__ZhwAAABc"]
[Fri Apr 24 14:43:55.850146 2026] [:error] [pid 14531:tid 14535] [client 20.240.45.42:46205] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aesRK3fLU2gw-6KR-GZPMgAAAUI"]
[Fri Apr 24 14:43:56.392881 2026] [:error] [pid 14531:tid 14555] [client 20.240.45.42:46099] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aesRLHfLU2gw-6KR-GZPMwAAAVY"]
[Fri Apr 24 14:43:56.921395 2026] [:error] [pid 17719:tid 17750] [client 20.240.45.42:25729] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aesRLMTZ9gzEyL1BkPpafgAAAJc"]
[Fri Apr 24 14:43:57.562968 2026] [:error] [pid 17719:tid 17736] [client 20.240.45.42:45235] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aesRLcTZ9gzEyL1BkPpagAAAAIk"]
[Fri Apr 24 14:43:58.282503 2026] [:error] [pid 14531:tid 14553] [client 20.240.45.42:46081] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aesRLnfLU2gw-6KR-GZPNwAAAVQ"]
[Fri Apr 24 14:43:58.885349 2026] [:error] [pid 17719:tid 17727] [client 20.240.45.42:46583] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aesRLsTZ9gzEyL1BkPpahAAAAIA"]
[Fri Apr 24 14:43:59.756177 2026] [:error] [pid 17721:tid 17786] [client 20.240.45.42:25780] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aesRL-FXXkLeyDnfk__ZlAAAAAU"]
[Fri Apr 24 14:44:00.508187 2026] [:error] [pid 17721:tid 17788] [client 20.240.45.42:27976] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aesRMOFXXkLeyDnfk__ZmwAAAAc"]
[Fri Apr 24 14:44:01.446540 2026] [:error] [pid 17721:tid 17795] [client 20.240.45.42:45260] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aesRMeFXXkLeyDnfk__ZoQAAAA4"]
[Fri Apr 24 14:44:02.498176 2026] [:error] [pid 17719:tid 17743] [client 20.240.45.42:46098] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "aesRMsTZ9gzEyL1BkPpahwAAAJA"]
[Fri Apr 24 14:44:03.227108 2026] [:error] [pid 17721:tid 17794] [client 20.240.45.42:46178] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aesRM-FXXkLeyDnfk__ZpAAAAA0"]
[Fri Apr 24 14:44:03.860578 2026] [:error] [pid 17721:tid 17801] [client 20.240.45.42:45254] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aesRM-FXXkLeyDnfk__ZsAAAABQ"]
[Fri Apr 24 14:44:04.676195 2026] [:error] [pid 17721:tid 17790] [client 20.240.45.42:28699] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aesRNOFXXkLeyDnfk__ZsQAAAAk"]
[Fri Apr 24 14:44:05.362356 2026] [:error] [pid 17720:tid 17763] [client 20.240.45.42:44878] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aesRNehlUs6BS3Ng7_X6lQAAAMk"]
[Fri Apr 24 14:44:06.658406 2026] [:error] [pid 17721:tid 17791] [client 20.240.45.42:46157] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aesRNuFXXkLeyDnfk__ZtgAAAAo"]
[Fri Apr 24 14:44:07.471123 2026] [:error] [pid 14531:tid 14550] [client 20.240.45.42:46573] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aesRN3fLU2gw-6KR-GZPTgAAAVE"]
[Fri Apr 24 14:44:08.127633 2026] [:error] [pid 22114:tid 22119] [client 20.240.45.42:46122] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aesROIAuWGz3WlMQjoetPgAAAQI"]
[Fri Apr 24 14:44:08.766456 2026] [:error] [pid 17719:tid 17730] [client 20.240.45.42:28689] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aesROMTZ9gzEyL1BkPpajgAAAIM"]
[Fri Apr 24 14:44:09.375739 2026] [:error] [pid 22114:tid 22130] [client 20.240.45.42:44802] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aesROYAuWGz3WlMQjoetQQAAAQ0"]
[Fri Apr 24 14:44:09.982444 2026] [:error] [pid 14531:tid 14540] [client 20.240.45.42:45193] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aesROXfLU2gw-6KR-GZPUAAAAUc"]
[Fri Apr 24 14:44:10.512146 2026] [:error] [pid 14531:tid 14548] [client 20.240.45.42:46160] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aesROnfLU2gw-6KR-GZPVQAAAU8"]
[Fri Apr 24 14:44:11.099273 2026] [:error] [pid 14531:tid 14535] [client 20.240.45.42:25749] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "aesRO3fLU2gw-6KR-GZPVwAAAUI"]
[Fri Apr 24 14:44:11.814935 2026] [:error] [pid 17721:tid 17801] [client 20.240.45.42:25786] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "aesRO-FXXkLeyDnfk__ZxQAAABQ"]
[Fri Apr 24 14:44:12.429534 2026] [:error] [pid 17720:tid 17776] [client 20.240.45.42:46586] File does not exist: /usr/local/apache/htdocs/suspended-page/fi.php
[Fri Apr 24 14:44:12.729574 2026] [:error] [pid 17720:tid 17758] [client 20.240.45.42:46586] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Fri Apr 24 14:44:13.331069 2026] [:error] [pid 17720:tid 17757] [client 20.240.45.42:46586] [client 20.240.45.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aesRPehlUs6BS3Ng7_X6ngAAAMM"]
[Fri Apr 24 14:44:13.945993 2026] [:error] [pid 14531:tid 14539] [client 20.240.45.42:46165] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri Apr 24 14:44:14.851032 2026] [:error] [pid 14531:tid 14534] [client 20.240.45.42:46165] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Fri Apr 24 14:44:15.117082 2026] [:error] [pid 14531:tid 14546] [client 20.240.45.42:46165] File does not exist: /usr/local/apache/htdocs/suspended-page/dev.php
[Fri Apr 24 14:44:15.382198 2026] [:error] [pid 14531:tid 14535] [client 20.240.45.42:46165] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Fri Apr 24 14:44:15.647301 2026] [:error] [pid 14531:tid 14552] [client 20.240.45.42:46165] File does not exist: /usr/local/apache/htdocs/suspended-page/in.php
[Fri Apr 24 14:44:15.912392 2026] [:error] [pid 14531:tid 14550] [client 20.240.45.42:46165] File does not exist: /usr/local/apache/htdocs/suspended-page/gssdd.php
[Fri Apr 24 14:44:16.184668 2026] [:error] [pid 14531:tid 14543] [client 20.240.45.42:46165] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aesRQHfLU2gw-6KR-GZPfAAAAUo"]
[Fri Apr 24 14:44:16.877950 2026] [:error] [pid 14531:tid 14537] [client 20.240.45.42:28701] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aesRQHfLU2gw-6KR-GZPfgAAAUQ"]
[Fri Apr 24 14:44:17.464551 2026] [:error] [pid 17808:tid 17825] [client 20.240.45.42:45761] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aesRQearbOEFI8qshvKrSgAAAE8"]
[Fri Apr 24 14:44:18.126954 2026] [:error] [pid 17720:tid 17774] [client 20.240.45.42:45738] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aesRQuhlUs6BS3Ng7_X6pAAAANQ"]
[Fri Apr 24 14:44:18.830416 2026] [:error] [pid 17721:tid 17788] [client 20.240.45.42:45221] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aesRQuFXXkLeyDnfk__Z0gAAAAc"]
[Fri Apr 24 14:44:19.797005 2026] [:error] [pid 17719:tid 17741] [client 20.240.45.42:46484] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aesRQ8TZ9gzEyL1BkPpamgAAAI4"]
[Fri Apr 24 14:44:20.571579 2026] [:error] [pid 17719:tid 17751] [client 20.240.45.42:45712] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aesRRMTZ9gzEyL1BkPpanQAAAJg"]
[Fri Apr 24 14:44:21.288892 2026] [:error] [pid 17719:tid 17742] [client 20.240.45.42:45206] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aesRRcTZ9gzEyL1BkPpanwAAAI8"]
[Fri Apr 24 14:44:21.908565 2026] [:error] [pid 17719:tid 17746] [client 20.240.45.42:46103] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aesRRcTZ9gzEyL1BkPpaogAAAJM"]
[Fri Apr 24 14:44:22.690717 2026] [:error] [pid 17720:tid 17775] [client 20.240.45.42:43360] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aesRRuhlUs6BS3Ng7_X6qwAAANU"]
[Fri Apr 24 14:44:23.292218 2026] [:error] [pid 14531:tid 14548] [client 20.240.45.42:45261] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aesRR3fLU2gw-6KR-GZPhwAAAU8"]
[Fri Apr 24 14:44:24.008484 2026] [:error] [pid 14531:tid 14535] [client 20.240.45.42:25740] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aesRSHfLU2gw-6KR-GZPigAAAUI"]
[Fri Apr 24 14:44:24.692632 2026] [:error] [pid 14531:tid 14538] [client 20.240.45.42:46534] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aesRSHfLU2gw-6KR-GZPjgAAAUU"]
[Fri Apr 24 14:44:25.542773 2026] [:error] [pid 14531:tid 14547] [client 20.240.45.42:45716] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aesRSXfLU2gw-6KR-GZPkwAAAU4"]
[Fri Apr 24 14:44:26.261257 2026] [:error] [pid 14531:tid 14545] [client 20.240.45.42:45696] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aesRSnfLU2gw-6KR-GZPmgAAAUw"]
[Fri Apr 24 14:44:27.091310 2026] [:error] [pid 17719:tid 17740] [client 20.240.45.42:45251] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aesRS8TZ9gzEyL1BkPpaqgAAAI0"]
[Fri Apr 24 14:44:27.738670 2026] [:error] [pid 22114:tid 22140] [client 20.240.45.42:44888] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aesRS4AuWGz3WlMQjoetRgAAARc"]
[Fri Apr 24 14:44:28.290785 2026] [:error] [pid 22114:tid 22133] [client 20.240.45.42:45744] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aesRTIAuWGz3WlMQjoetRwAAARA"]
[Fri Apr 24 14:44:28.863888 2026] [:error] [pid 14531:tid 14537] [client 20.240.45.42:45765] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aesRTHfLU2gw-6KR-GZPpAAAAUQ"]
[Fri Apr 24 14:44:29.897287 2026] [:error] [pid 17808:tid 17812] [client 20.240.45.42:46874] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfashell.php"] [unique_id "aesRTearbOEFI8qshvKrWQAAAEI"]
[Fri Apr 24 14:44:30.650215 2026] [:error] [pid 17721:tid 17784] [client 20.240.45.42:46529] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aesRTuFXXkLeyDnfk__Z2gAAAAM"]
[Fri Apr 24 14:44:31.309129 2026] [:error] [pid 17720:tid 17778] [client 20.240.45.42:25765] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aesRT-hlUs6BS3Ng7_X6sQAAANg"]
[Fri Apr 24 14:44:32.054450 2026] [:error] [pid 14531:tid 14557] [client 20.240.45.42:28726] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aesRUHfLU2gw-6KR-GZPtQAAAVg"]
[Fri Apr 24 14:44:32.585747 2026] [:error] [pid 14531:tid 14552] [client 20.240.45.42:46563] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aesRUHfLU2gw-6KR-GZPtwAAAVM"]
[Fri Apr 24 14:44:33.185638 2026] [:error] [pid 17808:tid 17821] [client 20.240.45.42:3503] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aesRUearbOEFI8qshvKrXAAAAEs"]
[Fri Apr 24 14:44:33.778144 2026] [:error] [pid 17808:tid 17822] [client 20.240.45.42:28353] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aesRUearbOEFI8qshvKrXQAAAEw"]
[Fri Apr 24 14:44:34.388122 2026] [:error] [pid 17721:tid 17796] [client 20.240.45.42:44810] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aesRUuFXXkLeyDnfk__Z4gAAAA8"]
[Fri Apr 24 14:44:34.986934 2026] [:error] [pid 17719:tid 17728] [client 20.240.45.42:46887] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "aesRUsTZ9gzEyL1BkPpaswAAAIE"]
[Fri Apr 24 14:44:36.177967 2026] [:error] [pid 17808:tid 17810] [client 20.240.45.42:25757] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aesRVOarbOEFI8qshvKrXgAAAEA"]
[Fri Apr 24 14:44:36.811284 2026] [:error] [pid 17808:tid 17827] [client 20.240.45.42:46149] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aesRVOarbOEFI8qshvKrYAAAAFE"]
[Fri Apr 24 14:44:37.710638 2026] [:error] [pid 17719:tid 17738] [client 20.240.45.42:46536] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aesRVcTZ9gzEyL1BkPpavQAAAIs"]
[Fri Apr 24 14:44:38.358689 2026] [:error] [pid 22114:tid 22131] [client 20.240.45.42:28737] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "aesRVoAuWGz3WlMQjoetUAAAAQ4"]
[Fri Apr 24 14:44:39.099095 2026] [:error] [pid 17720:tid 17766] [client 20.240.45.42:27992] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aesRV-hlUs6BS3Ng7_X6uQAAAMw"]
[Fri Apr 24 14:44:39.769586 2026] [:error] [pid 17721:tid 17784] [client 20.240.45.42:46140] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aesRV-FXXkLeyDnfk__Z5gAAAAM"]
[Fri Apr 24 14:44:40.447475 2026] [:error] [pid 17808:tid 17834] [client 20.240.45.42:46522] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aesRWOarbOEFI8qshvKrYwAAAFg"]
[Fri Apr 24 14:44:41.036382 2026] [:error] [pid 17719:tid 17733] [client 20.240.45.42:44370] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/g.php"] [unique_id "aesRWcTZ9gzEyL1BkPpawAAAAIY"]
[Fri Apr 24 14:44:41.635125 2026] [:error] [pid 17719:tid 17744] [client 20.240.45.42:3469] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aesRWcTZ9gzEyL1BkPpawwAAAJE"]
[Fri Apr 24 14:44:42.395753 2026] [:error] [pid 14531:tid 14546] [client 20.240.45.42:46970] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aesRWnfLU2gw-6KR-GZPvgAAAU0"]
[Fri Apr 24 14:44:43.329629 2026] [:error] [pid 14531:tid 14534] [client 20.240.45.42:28369] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aesRW3fLU2gw-6KR-GZPxAAAAUE"]
[Fri Apr 24 14:44:43.994005 2026] [:error] [pid 14531:tid 14535] [client 20.240.45.42:46971] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aesRW3fLU2gw-6KR-GZPxgAAAUI"]
[Fri Apr 24 14:44:44.637776 2026] [:error] [pid 17720:tid 17773] [client 20.240.45.42:45269] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aesRXOhlUs6BS3Ng7_X6vQAAANM"]
[Fri Apr 24 14:44:45.283965 2026] [:error] [pid 14531:tid 14551] [client 20.240.45.42:46901] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aesRXXfLU2gw-6KR-GZPzAAAAVI"]
[Fri Apr 24 14:44:46.127697 2026] [:error] [pid 17720:tid 17775] [client 20.240.45.42:45778] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aesRXuhlUs6BS3Ng7_X6vwAAANU"]
[Fri Apr 24 14:44:46.783563 2026] [:error] [pid 17720:tid 17758] [client 20.240.45.42:46143] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "aesRXuhlUs6BS3Ng7_X6wQAAAMQ"]
[Fri Apr 24 14:44:47.567406 2026] [:error] [pid 17720:tid 17766] [client 20.240.45.42:46932] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aesRX-hlUs6BS3Ng7_X6wwAAAMw"]
[Fri Apr 24 14:44:48.314770 2026] [:error] [pid 17719:tid 17744] [client 20.240.45.42:46969] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aesRYMTZ9gzEyL1BkPpazgAAAJE"]
[Fri Apr 24 14:44:49.074615 2026] [:error] [pid 17719:tid 17750] [client 20.240.45.42:44364] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aesRYcTZ9gzEyL1BkPpa0AAAAJc"]
[Fri Apr 24 14:44:49.680480 2026] [:error] [pid 17721:tid 17795] [client 20.240.45.42:46125] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ew.php"] [unique_id "aesRYeFXXkLeyDnfk__Z6wAAAA4"]
[Fri Apr 24 14:44:50.237159 2026] [:error] [pid 17721:tid 17782] [client 20.240.45.42:31083] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aesRYuFXXkLeyDnfk__Z7gAAAAE"]
[Fri Apr 24 14:44:51.044397 2026] [:error] [pid 22114:tid 22130] [client 20.240.45.42:46914] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aesRY4AuWGz3WlMQjoetWgAAAQ0"]
[Fri Apr 24 14:44:51.736525 2026] [:error] [pid 14531:tid 14549] [client 20.240.45.42:27979] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aesRY3fLU2gw-6KR-GZP2gAAAVA"]
[Fri Apr 24 14:44:53.027889 2026] [:error] [pid 17720:tid 17778] [client 20.240.45.42:28371] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file21.php"] [unique_id "aesRZehlUs6BS3Ng7_X6ywAAANg"]
[Fri Apr 24 14:44:53.705404 2026] [:error] [pid 17719:tid 17733] [client 20.240.45.42:28401] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aesRZcTZ9gzEyL1BkPpa1QAAAIY"]
[Fri Apr 24 14:44:54.324948 2026] [:error] [pid 22114:tid 22132] [client 20.240.45.42:31065] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aesRZoAuWGz3WlMQjoetXgAAAQ8"]
[Fri Apr 24 14:44:55.077202 2026] [:error] [pid 14531:tid 14545] [client 20.240.45.42:31051] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aesRZ3fLU2gw-6KR-GZP4gAAAUw"]
[Fri Apr 24 14:44:55.604722 2026] [:error] [pid 17721:tid 17798] [client 20.240.45.42:30727] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hypo.php"] [unique_id "aesRZ-FXXkLeyDnfk__Z9gAAABE"]
[Fri Apr 24 14:44:58.187391 2026] [:error] [pid 17719:tid 17746] [client 20.240.45.42:30775] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aesRasTZ9gzEyL1BkPpa2AAAAJM"]
[Fri Apr 24 14:44:58.983841 2026] [:error] [pid 17719:tid 17750] [client 20.240.45.42:27475] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aesRasTZ9gzEyL1BkPpa2gAAAJc"]
[Fri Apr 24 14:44:59.695129 2026] [:error] [pid 22114:tid 22137] [client 20.240.45.42:47386] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aesRa4AuWGz3WlMQjoetYgAAARQ"]
[Fri Apr 24 14:45:00.330620 2026] [:error] [pid 17719:tid 17746] [client 20.240.45.42:28328] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file18.php"] [unique_id "aesRbMTZ9gzEyL1BkPpa5QAAAJM"]
[Fri Apr 24 14:45:01.060514 2026] [:error] [pid 17721:tid 17798] [client 20.240.45.42:27773] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aesRbeFXXkLeyDnfk__aAwAAABE"]
[Fri Apr 24 14:45:01.814593 2026] [:error] [pid 17721:tid 17795] [client 20.240.45.42:26151] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aesRbeFXXkLeyDnfk__aCwAAAA4"]
[Fri Apr 24 14:45:02.387108 2026] [:error] [pid 17721:tid 17781] [client 20.240.45.42:27407] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aesRbuFXXkLeyDnfk__aDwAAAAA"]
[Fri Apr 24 14:45:03.128890 2026] [:error] [pid 14531:tid 14556] [client 20.240.45.42:3576] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "aesRb3fLU2gw-6KR-GZP9QAAAVc"]
[Fri Apr 24 14:45:03.833099 2026] [:error] [pid 17719:tid 17730] [client 20.240.45.42:27154] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aesRb8TZ9gzEyL1BkPpa6gAAAIM"]
[Fri Apr 24 14:45:04.513027 2026] [:error] [pid 22114:tid 22132] [client 20.240.45.42:31927] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aesRcIAuWGz3WlMQjoetZgAAAQ8"]
[Fri Apr 24 14:45:05.290306 2026] [:error] [pid 17808:tid 17834] [client 20.240.45.42:29021] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aesRcearbOEFI8qshvKrcgAAAFg"]
[Fri Apr 24 14:45:06.040519 2026] [:error] [pid 17719:tid 17732] [client 20.240.45.42:29861] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aesRcsTZ9gzEyL1BkPpa-gAAAIU"]
[Fri Apr 24 14:45:06.947005 2026] [:error] [pid 14531:tid 14539] [client 20.240.45.42:3389] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aesRcnfLU2gw-6KR-GZQBAAAAUY"]
[Fri Apr 24 14:45:09.858151 2026] [:error] [pid 14531:tid 14538] [client 20.240.45.42:3292] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aesRdXfLU2gw-6KR-GZQDgAAAUU"]
[Fri Apr 24 14:45:11.666821 2026] [:error] [pid 14531:tid 14543] [client 20.240.45.42:25395] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aesRd3fLU2gw-6KR-GZQFwAAAUo"]
[Fri Apr 24 14:45:12.482016 2026] [:error] [pid 22114:tid 22131] [client 20.240.45.42:46536] [client 20.240.45.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aesReIAuWGz3WlMQjoetawAAAQ4"]
[Fri Apr 24 17:58:37.870162 2026] [:error] [pid 22114:tid 22123] [client 34.58.239.158:52723] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aes-zYAuWGz3WlMQjofReAAAAQY"]
[Fri Apr 24 17:58:38.491621 2026] [:error] [pid 4177:tid 4196] [client 34.58.239.158:55336] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aes-zn2asKnvdrSe0x6mlAAAAYs"]
[Fri Apr 24 17:58:39.076819 2026] [:error] [pid 4177:tid 4198] [client 34.58.239.158:49543] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aes-z32asKnvdrSe0x6mowAAAY0"]
[Fri Apr 24 17:58:39.698004 2026] [:error] [pid 17719:tid 17750] [client 34.58.239.158:62071] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aes-z8TZ9gzEyL1BkPqHSQAAAJc"]
[Fri Apr 24 17:58:40.484993 2026] [:error] [pid 17720:tid 17776] [client 34.58.239.158:62071] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aes-0OhlUs6BS3Ng7_Va_wAAANY"]
[Fri Apr 24 17:58:41.066393 2026] [:error] [pid 4177:tid 4187] [client 34.58.239.158:61949] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aes-0X2asKnvdrSe0x6m0gAAAYI"]
[Fri Apr 24 17:58:41.697717 2026] [:error] [pid 4177:tid 4207] [client 34.58.239.158:52294] [client 34.58.239.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aes-0X2asKnvdrSe0x6m2wAAAZY"]
[Fri Apr 24 20:25:46.747376 2026] [:error] [pid 17720:tid 17763] [client 158.158.54.155:8498] [client 158.158.54.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aethSuhlUs6BS3Ng7_WcrAAAAMk"]
[Fri Apr 24 20:25:47.536647 2026] [:error] [pid 17720:tid 17766] [client 158.158.54.155:8577] [client 158.158.54.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aethS-hlUs6BS3Ng7_WcsAAAAMw"]
[Fri Apr 24 20:25:49.307064 2026] [:error] [pid 14531:tid 14543] [client 158.158.54.155:9114] [client 158.158.54.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aethTXfLU2gw-6KR-GbDWQAAAUo"]
[Fri Apr 24 20:25:51.047638 2026] [:error] [pid 17720:tid 17760] [client 158.158.54.155:8606] [client 158.158.54.155] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aethT-hlUs6BS3Ng7_WcuwAAAMY"]
[Sat Apr 25 01:21:06.085402 2026] [:error] [pid 14989:tid 15007] [client 135.225.72.245:11728] File does not exist: /usr/local/apache/htdocs/suspended-page/aboutc.php
[Sat Apr 25 01:21:06.350152 2026] [:error] [pid 14989:tid 14996] [client 135.225.72.245:11728] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Sat Apr 25 01:21:06.615309 2026] [:error] [pid 14989:tid 15001] [client 135.225.72.245:11728] File does not exist: /usr/local/apache/htdocs/suspended-page/hroxw.php
[Sat Apr 25 01:21:06.880349 2026] [:error] [pid 14989:tid 14998] [client 135.225.72.245:11728] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Sat Apr 25 01:21:07.145948 2026] [:error] [pid 14989:tid 15015] [client 135.225.72.245:11728] File does not exist: /usr/local/apache/htdocs/suspended-page/set.php
[Sat Apr 25 01:21:07.415451 2026] [:error] [pid 14989:tid 15002] [client 135.225.72.245:11728] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sat Apr 25 01:21:07.945304 2026] [:error] [pid 14989:tid 15010] [client 135.225.72.245:11728] File does not exist: /usr/local/apache/htdocs/suspended-page/ws57.php
[Sat Apr 25 01:21:08.210635 2026] [:error] [pid 14989:tid 15004] [client 135.225.72.245:11728] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Sat Apr 25 01:21:08.475929 2026] [:error] [pid 14989:tid 14995] [client 135.225.72.245:11728] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Apr 25 01:21:08.738107 2026] [:error] [pid 14989:tid 15006] [client 135.225.72.245:11728] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeumhHhRYjsAsZTO4EOYYAAAAA8"]
[Sat Apr 25 01:21:09.298011 2026] [:error] [pid 14989:tid 14994] [client 135.225.72.245:11742] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeumhXhRYjsAsZTO4EOYYQAAAAM"]
[Sat Apr 25 01:21:09.889069 2026] [:error] [pid 14989:tid 14992] [client 135.225.72.245:11674] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeumhXhRYjsAsZTO4EOYYwAAAAE"]
[Sat Apr 25 01:21:10.459472 2026] [:error] [pid 42852:tid 42873] [client 135.225.72.245:11766] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "aeumhjMEwxhhak_EhMKSLQAAAlI"]
[Sat Apr 25 01:21:10.993542 2026] [:error] [pid 42755:tid 42775] [client 135.225.72.245:11727] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeumhtH7__k0j6aa600EOQAAAJI"]
[Sat Apr 25 01:21:11.526995 2026] [:error] [pid 14989:tid 14997] [client 135.225.72.245:11670] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeumh3hRYjsAsZTO4EOYZgAAAAY"]
[Sat Apr 25 01:21:12.111700 2026] [:error] [pid 42852:tid 42865] [client 135.225.72.245:11767] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeumiDMEwxhhak_EhMKSLwAAAko"]
[Sat Apr 25 01:21:12.700014 2026] [:error] [pid 14989:tid 15015] [client 135.225.72.245:11650] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "aeumiHhRYjsAsZTO4EOYZwAAABg"]
[Sat Apr 25 01:21:13.274603 2026] [:error] [pid 42852:tid 42856] [client 135.225.72.245:11666] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeumiTMEwxhhak_EhMKSMQAAAkE"]
[Sat Apr 25 01:21:13.848994 2026] [:error] [pid 42852:tid 42858] [client 135.225.72.245:11722] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeumiTMEwxhhak_EhMKSMwAAAkM"]
[Sat Apr 25 01:21:14.417671 2026] [:error] [pid 42852:tid 42875] [client 135.225.72.245:11774] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeumijMEwxhhak_EhMKSNgAAAlQ"]
[Sat Apr 25 01:21:16.412998 2026] [:error] [pid 42792:tid 42837] [client 135.225.72.245:11652] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "aeumjNNi9qR4GtafpfHZ7AAAAg8"]
[Sat Apr 25 01:21:16.963960 2026] [:error] [pid 42792:tid 42823] [client 135.225.72.245:11734] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeumjNNi9qR4GtafpfHZ7QAAAgE"]
[Sat Apr 25 01:21:18.541189 2026] [:error] [pid 42791:tid 42798] [client 135.225.72.245:11658] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeumjrKmN9doraCEWKXsxwAAAcM"]
[Sat Apr 25 01:21:20.075118 2026] [:error] [pid 42792:tid 42844] [client 135.225.72.245:11712] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeumkNNi9qR4GtafpfHZ9AAAAhY"]
[Sat Apr 25 01:21:20.627133 2026] [:error] [pid 42852:tid 42862] [client 135.225.72.245:11699] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tt.php"] [unique_id "aeumkDMEwxhhak_EhMKSPQAAAkc"]
[Sat Apr 25 01:21:21.195219 2026] [:error] [pid 42791:tid 42796] [client 135.225.72.245:11692] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeumkbKmN9doraCEWKXszQAAAcE"]
[Sat Apr 25 01:21:21.741174 2026] [:error] [pid 42755:tid 42771] [client 135.225.72.245:11748] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeumkdH7__k0j6aa600EQQAAAI4"]
[Sat Apr 25 01:21:22.349525 2026] [:error] [pid 42792:tid 42834] [client 135.225.72.245:11765] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeumktNi9qR4GtafpfHZ9wAAAgw"]
[Sat Apr 25 01:21:22.916097 2026] [:error] [pid 42852:tid 42872] [client 135.225.72.245:11731] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "aeumkjMEwxhhak_EhMKSQwAAAlE"]
[Sat Apr 25 01:21:23.470721 2026] [:error] [pid 42792:tid 42839] [client 135.225.72.245:11678] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeumk9Ni9qR4GtafpfHZ-AAAAhE"]
[Sat Apr 25 01:21:24.043953 2026] [:error] [pid 42791:tid 42814] [client 135.225.72.245:11663] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeumlLKmN9doraCEWKXs0QAAAdM"]
[Sat Apr 25 01:21:24.611208 2026] [:error] [pid 42792:tid 42832] [client 135.225.72.245:11726] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeumlNNi9qR4GtafpfHZ-QAAAgo"]
[Sat Apr 25 01:21:25.201855 2026] [:error] [pid 42791:tid 42808] [client 135.225.72.245:11679] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/66.php"] [unique_id "aeumlbKmN9doraCEWKXs0wAAAc0"]
[Sat Apr 25 01:21:25.797004 2026] [:error] [pid 42791:tid 42801] [client 135.225.72.245:11735] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeumlbKmN9doraCEWKXs1AAAAcY"]
[Sat Apr 25 01:21:26.358357 2026] [:error] [pid 42791:tid 42797] [client 135.225.72.245:11729] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeumlrKmN9doraCEWKXs1QAAAcI"]
[Sat Apr 25 01:21:26.907927 2026] [:error] [pid 14989:tid 14999] [client 135.225.72.245:11662] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeumlnhRYjsAsZTO4EOYbwAAAAg"]
[Sat Apr 25 01:21:27.467791 2026] [:error] [pid 14989:tid 15007] [client 135.225.72.245:3027] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "aeuml3hRYjsAsZTO4EOYcQAAABA"]
[Sat Apr 25 01:21:28.076923 2026] [:error] [pid 42852:tid 42861] [client 135.225.72.245:11649] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aeummDMEwxhhak_EhMKSTAAAAkY"]
[Sat Apr 25 01:21:28.608527 2026] [:error] [pid 42852:tid 42873] [client 135.225.72.245:11672] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aeummDMEwxhhak_EhMKSTQAAAlI"]
[Sat Apr 25 01:21:29.167297 2026] [:error] [pid 42792:tid 42822] [client 135.225.72.245:11660] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aeummdNi9qR4GtafpfHZ_QAAAgA"]
[Sat Apr 25 01:21:29.724021 2026] [:error] [pid 42852:tid 42869] [client 135.225.72.245:11698] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "aeummTMEwxhhak_EhMKSUAAAAk4"]
[Sat Apr 25 01:21:30.318507 2026] [:error] [pid 42852:tid 42865] [client 135.225.72.245:11739] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeummjMEwxhhak_EhMKSVAAAAko"]
[Sat Apr 25 01:21:30.865367 2026] [:error] [pid 42755:tid 42777] [client 135.225.72.245:11664] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeummtH7__k0j6aa600ERAAAAJQ"]
[Sat Apr 25 01:21:31.419490 2026] [:error] [pid 42755:tid 42764] [client 135.225.72.245:11758] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeumm9H7__k0j6aa600ERgAAAIc"]
[Sat Apr 25 01:21:31.949866 2026] [:error] [pid 42755:tid 42770] [client 135.225.72.245:11750] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeumm9H7__k0j6aa600ERwAAAI0"]
[Sat Apr 25 01:21:32.514836 2026] [:error] [pid 42791:tid 42797] [client 135.225.72.245:11675] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeumnLKmN9doraCEWKXs3AAAAcI"]
[Sat Apr 25 01:21:33.043913 2026] [:error] [pid 42791:tid 42818] [client 135.225.72.245:11720] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeumnbKmN9doraCEWKXs4QAAAdc"]
[Sat Apr 25 01:21:33.589433 2026] [:error] [pid 42755:tid 42761] [client 135.225.72.245:11669] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeumndH7__k0j6aa600ESgAAAIQ"]
[Sat Apr 25 01:21:34.149610 2026] [:error] [pid 42852:tid 42878] [client 135.225.72.245:11659] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bmi.php"] [unique_id "aeumnjMEwxhhak_EhMKSYQAAAlc"]
[Sat Apr 25 01:21:34.708455 2026] [:error] [pid 42791:tid 42814] [client 135.225.72.245:11773] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeumnrKmN9doraCEWKXs7AAAAdM"]
[Sat Apr 25 01:21:35.255148 2026] [:error] [pid 42791:tid 42810] [client 135.225.72.245:11741] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeumn7KmN9doraCEWKXs8AAAAc8"]
[Sat Apr 25 01:21:35.827874 2026] [:error] [pid 14989:tid 14995] [client 135.225.72.245:11648] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeumn3hRYjsAsZTO4EOYdQAAAAQ"]
[Sat Apr 25 01:21:36.388066 2026] [:error] [pid 14989:tid 14999] [client 135.225.72.245:11654] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/byypas.php"] [unique_id "aeumoHhRYjsAsZTO4EOYeAAAAAg"]
[Sat Apr 25 01:21:36.945626 2026] [:error] [pid 14989:tid 14993] [client 135.225.72.245:11686] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeumoHhRYjsAsZTO4EOYeQAAAAI"]
[Sat Apr 25 01:21:37.493563 2026] [:error] [pid 14989:tid 15001] [client 135.225.72.245:11713] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeumoXhRYjsAsZTO4EOYfQAAAAo"]
[Sat Apr 25 01:21:38.040232 2026] [:error] [pid 42755:tid 42778] [client 135.225.72.245:11741] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeumotH7__k0j6aa600ETwAAAJU"]
[Sat Apr 25 01:21:38.593608 2026] [:error] [pid 14989:tid 15006] [client 135.225.72.245:11668] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeumonhRYjsAsZTO4EOYhgAAAA8"]
[Sat Apr 25 01:21:39.126591 2026] [:error] [pid 42755:tid 42769] [client 135.225.72.245:11657] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeumo9H7__k0j6aa600EUgAAAIw"]
[Sat Apr 25 01:21:39.677669 2026] [:error] [pid 42852:tid 42859] [client 135.225.72.245:11717] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeumozMEwxhhak_EhMKSaAAAAkQ"]
[Sat Apr 25 01:21:40.253278 2026] [:error] [pid 42852:tid 42864] [client 135.225.72.245:11671] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeumpDMEwxhhak_EhMKSaQAAAkk"]
[Sat Apr 25 01:21:40.881481 2026] [:error] [pid 42852:tid 42873] [client 135.225.72.245:11757] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-png.php"] [unique_id "aeumpDMEwxhhak_EhMKSbQAAAlI"]
[Sat Apr 25 01:21:41.429313 2026] [:error] [pid 42852:tid 42874] [client 135.225.72.245:11681] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeumpTMEwxhhak_EhMKSbwAAAlM"]
[Sat Apr 25 01:21:41.983869 2026] [:error] [pid 42852:tid 42860] [client 135.225.72.245:11760] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeumpTMEwxhhak_EhMKScwAAAkU"]
[Sat Apr 25 01:21:42.519286 2026] [:error] [pid 42792:tid 42827] [client 135.225.72.245:11732] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeumptNi9qR4GtafpfHaBQAAAgU"]
[Sat Apr 25 01:21:43.063773 2026] [:error] [pid 42792:tid 42836] [client 135.225.72.245:11744] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wen.php"] [unique_id "aeump9Ni9qR4GtafpfHaBwAAAg4"]
[Sat Apr 25 01:21:43.632101 2026] [:error] [pid 14989:tid 15010] [client 135.225.72.245:3039] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin-install.php"] [unique_id "aeump3hRYjsAsZTO4EOYjAAAABM"]
[Sat Apr 25 01:21:44.200890 2026] [:error] [pid 14989:tid 14999] [client 135.225.72.245:3055] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin-install.php"] [unique_id "aeumqHhRYjsAsZTO4EOYjgAAAAg"]
[Sat Apr 25 01:21:44.762379 2026] [:error] [pid 14989:tid 14996] [client 135.225.72.245:11661] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin-install.php"] [unique_id "aeumqHhRYjsAsZTO4EOYkAAAAAU"]
[Sat Apr 25 01:21:45.319362 2026] [:error] [pid 42852:tid 42871] [client 135.225.72.245:3036] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin-install.php"] [unique_id "aeumqTMEwxhhak_EhMKSegAAAlA"]
[Sat Apr 25 01:21:46.761507 2026] [:error] [pid 42852:tid 42878] [client 135.225.72.245:3031] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeumqjMEwxhhak_EhMKSgAAAAlc"]
[Sat Apr 25 01:21:47.338249 2026] [:error] [pid 42852:tid 42858] [client 135.225.72.245:11676] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeumqzMEwxhhak_EhMKShAAAAkM"]
[Sat Apr 25 01:21:47.908275 2026] [:error] [pid 42792:tid 42832] [client 135.225.72.245:11696] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeumq9Ni9qR4GtafpfHaEgAAAgo"]
[Sat Apr 25 01:21:48.598121 2026] [:error] [pid 42792:tid 42831] [client 135.225.72.245:11769] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeumrNNi9qR4GtafpfHaFQAAAgk"]
[Sat Apr 25 01:21:49.141608 2026] [:error] [pid 42852:tid 42862] [client 135.225.72.245:3029] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeumrTMEwxhhak_EhMKSigAAAkc"]
[Sat Apr 25 01:21:49.676723 2026] [:error] [pid 42852:tid 42870] [client 135.225.72.245:11667] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeumrTMEwxhhak_EhMKSjAAAAk8"]
[Sat Apr 25 01:21:50.249122 2026] [:error] [pid 14989:tid 15010] [client 135.225.72.245:11701] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeumrnhRYjsAsZTO4EOYlAAAABM"]
[Sat Apr 25 01:21:50.830605 2026] [:error] [pid 14989:tid 14999] [client 135.225.72.245:3051] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeumrnhRYjsAsZTO4EOYlwAAAAg"]
[Sat Apr 25 01:21:51.382740 2026] [:error] [pid 14989:tid 14994] [client 135.225.72.245:11733] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeumr3hRYjsAsZTO4EOYmgAAAAM"]
[Sat Apr 25 01:21:51.933825 2026] [:error] [pid 14989:tid 14992] [client 135.225.72.245:2995] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeumr3hRYjsAsZTO4EOYnAAAAAE"]
[Sat Apr 25 01:21:52.490305 2026] [:error] [pid 42791:tid 42810] [client 135.225.72.245:3021] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeumsLKmN9doraCEWKXtAgAAAc8"]
[Sat Apr 25 01:21:53.057655 2026] [:error] [pid 42791:tid 42803] [client 135.225.72.245:3024] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aeumsbKmN9doraCEWKXtAwAAAcg"]
[Sat Apr 25 01:21:53.625762 2026] [:error] [pid 42791:tid 42815] [client 135.225.72.245:3010] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeumsbKmN9doraCEWKXtBAAAAdQ"]
[Sat Apr 25 01:21:54.335142 2026] [:error] [pid 42791:tid 42805] [client 135.225.72.245:11702] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeumsrKmN9doraCEWKXtCAAAAco"]
[Sat Apr 25 01:21:54.909565 2026] [:error] [pid 14989:tid 15001] [client 135.225.72.245:11656] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeumsnhRYjsAsZTO4EOYnwAAAAo"]
[Sat Apr 25 01:21:55.485310 2026] [:error] [pid 42792:tid 42828] [client 135.225.72.245:11689] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aeums9Ni9qR4GtafpfHaGwAAAgY"]
[Sat Apr 25 01:21:56.053536 2026] [:error] [pid 42852:tid 42867] [client 135.225.72.245:3008] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeumtDMEwxhhak_EhMKSlgAAAkw"]
[Sat Apr 25 01:21:56.600692 2026] [:error] [pid 14989:tid 14999] [client 135.225.72.245:11719] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeumtHhRYjsAsZTO4EOYpgAAAAg"]
[Sat Apr 25 01:21:57.163404 2026] [:error] [pid 14989:tid 15009] [client 135.225.72.245:2971] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeumtXhRYjsAsZTO4EOYqgAAABI"]
[Sat Apr 25 01:21:57.712477 2026] [:error] [pid 42852:tid 42859] [client 135.225.72.245:11768] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "aeumtTMEwxhhak_EhMKSmAAAAkQ"]
[Sat Apr 25 01:21:58.249530 2026] [:error] [pid 42791:tid 42800] [client 135.225.72.245:3041] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeumtrKmN9doraCEWKXtEAAAAcU"]
[Sat Apr 25 01:21:58.795388 2026] [:error] [pid 42755:tid 42777] [client 135.225.72.245:11772] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeumttH7__k0j6aa600EXQAAAJQ"]
[Sat Apr 25 01:21:59.371354 2026] [:error] [pid 42791:tid 42796] [client 135.225.72.245:3014] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeumt7KmN9doraCEWKXtFwAAAcE"]
[Sat Apr 25 01:21:59.977557 2026] [:error] [pid 42755:tid 42772] [client 135.225.72.245:11763] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeumt9H7__k0j6aa600EXwAAAI8"]
[Sat Apr 25 01:22:00.556828 2026] [:error] [pid 42852:tid 42856] [client 135.225.72.245:3054] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeumuDMEwxhhak_EhMKSmwAAAkE"]
[Sat Apr 25 01:22:01.100116 2026] [:error] [pid 42792:tid 42838] [client 135.225.72.245:11753] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeumudNi9qR4GtafpfHaIAAAAhA"]
[Sat Apr 25 01:22:01.655081 2026] [:error] [pid 42792:tid 42826] [client 135.225.72.245:3009] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeumudNi9qR4GtafpfHaIQAAAgQ"]
[Sat Apr 25 01:22:02.231333 2026] [:error] [pid 42792:tid 42830] [client 135.225.72.245:11755] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws48.php"] [unique_id "aeumutNi9qR4GtafpfHaIgAAAgg"]
[Sat Apr 25 01:22:02.845881 2026] [:error] [pid 42792:tid 42832] [client 135.225.72.245:11687] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeumutNi9qR4GtafpfHaJQAAAgo"]
[Sat Apr 25 01:22:03.407333 2026] [:error] [pid 42852:tid 42859] [client 135.225.72.245:11655] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeumuzMEwxhhak_EhMKSpAAAAkQ"]
[Sat Apr 25 01:22:03.963734 2026] [:error] [pid 42755:tid 42771] [client 135.225.72.245:11673] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeumu9H7__k0j6aa600EZAAAAI4"]
[Sat Apr 25 01:22:04.499597 2026] [:error] [pid 14989:tid 15009] [client 135.225.72.245:3019] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aeumvHhRYjsAsZTO4EOYsQAAABI"]
[Sat Apr 25 01:22:05.041718 2026] [:error] [pid 14989:tid 14991] [client 135.225.72.245:11723] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeumvXhRYjsAsZTO4EOYtQAAAAA"]
[Sat Apr 25 01:22:05.573167 2026] [:error] [pid 42852:tid 42869] [client 135.225.72.245:11665] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeumvTMEwxhhak_EhMKSpwAAAk4"]
[Sat Apr 25 01:22:06.099283 2026] [:error] [pid 42791:tid 42816] [client 135.225.72.245:11653] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeumvrKmN9doraCEWKXtJwAAAdU"]
[Sat Apr 25 01:22:06.626070 2026] [:error] [pid 42791:tid 42802] [client 135.225.72.245:3028] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dass.php"] [unique_id "aeumvrKmN9doraCEWKXtKQAAAcc"]
[Sat Apr 25 01:22:07.183960 2026] [:error] [pid 14989:tid 15015] [client 135.225.72.245:11683] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeumv3hRYjsAsZTO4EOYuAAAABg"]
[Sat Apr 25 01:22:07.734556 2026] [:error] [pid 14989:tid 15008] [client 135.225.72.245:11746] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeumv3hRYjsAsZTO4EOYugAAABE"]
[Sat Apr 25 01:22:08.275919 2026] [:error] [pid 14989:tid 15006] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-p2r3q9c8k4.php
[Sat Apr 25 01:22:08.541415 2026] [:error] [pid 14989:tid 15005] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sat Apr 25 01:22:08.819662 2026] [:error] [pid 14989:tid 15011] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Sat Apr 25 01:22:09.085761 2026] [:error] [pid 14989:tid 14996] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/ws66.php
[Sat Apr 25 01:22:09.352074 2026] [:error] [pid 14989:tid 15007] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sat Apr 25 01:22:09.618678 2026] [:error] [pid 14989:tid 15015] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Sat Apr 25 01:22:09.909893 2026] [:error] [pid 14989:tid 15012] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Sat Apr 25 01:22:11.391405 2026] [:error] [pid 14989:tid 15012] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sat Apr 25 01:22:11.658984 2026] [:error] [pid 14989:tid 14999] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sat Apr 25 01:22:11.923890 2026] [:error] [pid 14989:tid 14991] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat Apr 25 01:22:12.197395 2026] [:error] [pid 14989:tid 14993] [client 135.225.72.245:3048] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sat Apr 25 01:22:12.493100 2026] [:error] [pid 14989:tid 14992] [client 135.225.72.245:3048] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Jcrop.php"] [unique_id "aeumxHhRYjsAsZTO4EOY0QAAAAE"]
[Sat Apr 25 01:22:13.056633 2026] [:error] [pid 42755:tid 42769] [client 135.225.72.245:11756] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Jcrop.php"] [unique_id "aeumxdH7__k0j6aa600EbQAAAIw"]
[Sat Apr 25 01:22:13.611050 2026] [:error] [pid 14989:tid 15000] [client 135.225.72.245:11724] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Jcrop.php"] [unique_id "aeumxXhRYjsAsZTO4EOY1QAAAAk"]
[Sat Apr 25 01:22:14.152432 2026] [:error] [pid 42852:tid 42859] [client 135.225.72.245:11677] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Jcrop.php"] [unique_id "aeumxjMEwxhhak_EhMKSxQAAAkQ"]
[Sat Apr 25 01:22:14.684523 2026] [:error] [pid 42852:tid 42877] [client 135.225.72.245:3032] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeumxjMEwxhhak_EhMKSygAAAlY"]
[Sat Apr 25 01:22:15.234061 2026] [:error] [pid 42852:tid 42873] [client 135.225.72.245:11749] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeumxzMEwxhhak_EhMKSzgAAAlI"]
[Sat Apr 25 01:22:15.768095 2026] [:error] [pid 42852:tid 42856] [client 135.225.72.245:11725] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeumxzMEwxhhak_EhMKS0gAAAkE"]
[Sat Apr 25 01:22:16.306383 2026] [:error] [pid 42792:tid 42832] [client 135.225.72.245:11704] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "aeumyNNi9qR4GtafpfHaLAAAAgo"]
[Sat Apr 25 01:22:16.869472 2026] [:error] [pid 14989:tid 14996] [client 135.225.72.245:11679] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeumyHhRYjsAsZTO4EOY2QAAAAU"]
[Sat Apr 25 01:22:17.451529 2026] [:error] [pid 42755:tid 42777] [client 135.225.72.245:11693] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeumydH7__k0j6aa600EcwAAAJQ"]
[Sat Apr 25 01:22:18.043323 2026] [:error] [pid 42792:tid 42829] [client 135.225.72.245:11754] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeumytNi9qR4GtafpfHaMwAAAgc"]
[Sat Apr 25 01:22:18.640791 2026] [:error] [pid 42852:tid 42879] [client 135.225.72.245:11680] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aeumyjMEwxhhak_EhMKS3QAAAlg"]
[Sat Apr 25 01:22:19.175309 2026] [:error] [pid 42791:tid 42807] [client 135.225.72.245:11716] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeumy7KmN9doraCEWKXtOgAAAcw"]
[Sat Apr 25 01:22:19.758920 2026] [:error] [pid 14989:tid 14995] [client 135.225.72.245:3017] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeumy3hRYjsAsZTO4EOY2wAAAAQ"]
[Sat Apr 25 01:22:20.388796 2026] [:error] [pid 14989:tid 15006] [client 135.225.72.245:3034] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeumzHhRYjsAsZTO4EOY3AAAAA8"]
[Sat Apr 25 01:22:20.914357 2026] [:error] [pid 14989:tid 14998] [client 135.225.72.245:2966] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bnm.php"] [unique_id "aeumzHhRYjsAsZTO4EOY3wAAAAc"]
[Sat Apr 25 01:22:21.500040 2026] [:error] [pid 42755:tid 42763] [client 135.225.72.245:11762] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeumzdH7__k0j6aa600EdgAAAIY"]
[Sat Apr 25 01:22:22.075488 2026] [:error] [pid 42792:tid 42828] [client 135.225.72.245:3035] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeumztNi9qR4GtafpfHaQwAAAgY"]
[Sat Apr 25 01:22:22.652512 2026] [:error] [pid 14989:tid 15004] [client 135.225.72.245:3053] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeumznhRYjsAsZTO4EOY5AAAAA0"]
[Sat Apr 25 01:22:23.187318 2026] [:error] [pid 42792:tid 42843] [client 135.225.72.245:3049] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "aeumz9Ni9qR4GtafpfHaRgAAAhU"]
[Sat Apr 25 01:22:23.738636 2026] [:error] [pid 14989:tid 15011] [client 135.225.72.245:11761] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeumz3hRYjsAsZTO4EOY5QAAABQ"]
[Sat Apr 25 01:22:24.357527 2026] [:error] [pid 42792:tid 42839] [client 135.225.72.245:11745] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeum0NNi9qR4GtafpfHaSgAAAhE"]
[Sat Apr 25 01:22:24.902704 2026] [:error] [pid 42852:tid 42855] [client 135.225.72.245:3033] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeum0DMEwxhhak_EhMKS6AAAAkA"]
[Sat Apr 25 01:22:25.445784 2026] [:error] [pid 14989:tid 15009] [client 135.225.72.245:11759] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeum0XhRYjsAsZTO4EOY7AAAABI"]
[Sat Apr 25 01:22:26.012173 2026] [:error] [pid 14989:tid 14995] [client 135.225.72.245:3042] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeum0nhRYjsAsZTO4EOY7QAAAAQ"]
[Sat Apr 25 01:22:26.611738 2026] [:error] [pid 42792:tid 42845] [client 135.225.72.245:11770] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeum0tNi9qR4GtafpfHaTgAAAhc"]
[Sat Apr 25 01:22:27.197672 2026] [:error] [pid 14989:tid 15000] [client 135.225.72.245:11710] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeum03hRYjsAsZTO4EOY8QAAAAk"]
[Sat Apr 25 01:22:27.848394 2026] [:error] [pid 42755:tid 42768] [client 135.225.72.245:2965] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "aeum09H7__k0j6aa600EfgAAAIs"]
[Sat Apr 25 01:22:28.382769 2026] [:error] [pid 42755:tid 42774] [client 135.225.72.245:2996] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aeum1NH7__k0j6aa600EgQAAAJE"]
[Sat Apr 25 01:22:28.935366 2026] [:error] [pid 42792:tid 42825] [client 135.225.72.245:11743] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aeum1NNi9qR4GtafpfHaUgAAAgM"]
[Sat Apr 25 01:22:29.545363 2026] [:error] [pid 42755:tid 42759] [client 135.225.72.245:2975] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aeum1dH7__k0j6aa600EhAAAAII"]
[Sat Apr 25 01:22:30.121741 2026] [:error] [pid 42791:tid 42815] [client 135.225.72.245:2989] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tymn.php"] [unique_id "aeum1rKmN9doraCEWKXtPwAAAdQ"]
[Sat Apr 25 01:22:30.697831 2026] [:error] [pid 42791:tid 42810] [client 135.225.72.245:3023] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeum1rKmN9doraCEWKXtQAAAAc8"]
[Sat Apr 25 01:22:31.274626 2026] [:error] [pid 42791:tid 42800] [client 135.225.72.245:11714] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeum17KmN9doraCEWKXtRAAAAcU"]
[Sat Apr 25 01:22:31.952296 2026] [:error] [pid 42852:tid 42875] [client 135.225.72.245:3060] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeum1zMEwxhhak_EhMKS-wAAAlQ"]
[Sat Apr 25 01:22:32.535927 2026] [:error] [pid 42755:tid 42780] [client 135.225.72.245:11694] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeum2NH7__k0j6aa600EhwAAAJc"]
[Sat Apr 25 01:22:33.120914 2026] [:error] [pid 42852:tid 42879] [client 135.225.72.245:3030] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeum2TMEwxhhak_EhMKTAQAAAlg"]
[Sat Apr 25 01:22:33.687604 2026] [:error] [pid 42755:tid 42777] [client 135.225.72.245:2950] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeum2dH7__k0j6aa600EiwAAAJQ"]
[Sat Apr 25 01:22:34.245393 2026] [:error] [pid 42755:tid 42774] [client 135.225.72.245:11682] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeum2tH7__k0j6aa600EjAAAAJE"]
[Sat Apr 25 01:22:34.822891 2026] [:error] [pid 42792:tid 42836] [client 135.225.72.245:2946] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "aeum2tNi9qR4GtafpfHaWwAAAg4"]
[Sat Apr 25 01:22:35.439389 2026] [:error] [pid 42792:tid 42841] [client 135.225.72.245:3037] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeum29Ni9qR4GtafpfHaXAAAAhM"]
[Sat Apr 25 01:22:35.994095 2026] [:error] [pid 14989:tid 15002] [client 135.225.72.245:2986] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeum23hRYjsAsZTO4EOY-gAAAAs"]
[Sat Apr 25 01:22:36.585111 2026] [:error] [pid 14989:tid 14999] [client 135.225.72.245:3038] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeum3HhRYjsAsZTO4EOY_wAAAAg"]
[Sat Apr 25 01:22:37.144075 2026] [:error] [pid 42852:tid 42856] [client 135.225.72.245:2962] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms.php"] [unique_id "aeum3TMEwxhhak_EhMKTBQAAAkE"]
[Sat Apr 25 01:22:37.720107 2026] [:error] [pid 14989:tid 14992] [client 135.225.72.245:3018] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "aeum3XhRYjsAsZTO4EOZBAAAAAE"]
[Sat Apr 25 01:22:38.312990 2026] [:error] [pid 42791:tid 42816] [client 135.225.72.245:11709] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "aeum3rKmN9doraCEWKXtTwAAAdU"]
[Sat Apr 25 01:22:38.862796 2026] [:error] [pid 14989:tid 15002] [client 135.225.72.245:3070] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "aeum3nhRYjsAsZTO4EOZCgAAAAs"]
[Sat Apr 25 01:22:39.419127 2026] [:error] [pid 42792:tid 42845] [client 135.225.72.245:11730] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "aeum39Ni9qR4GtafpfHaZwAAAhc"]
[Sat Apr 25 01:22:40.011230 2026] [:error] [pid 42755:tid 42772] [client 135.225.72.245:3067] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeum4NH7__k0j6aa600ElAAAAI8"]
[Sat Apr 25 01:22:40.614667 2026] [:error] [pid 42852:tid 42871] [client 135.225.72.245:2969] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeum4DMEwxhhak_EhMKTDgAAAlA"]
[Sat Apr 25 01:22:41.211650 2026] [:error] [pid 42791:tid 42806] [client 135.225.72.245:11737] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeum4bKmN9doraCEWKXtVAAAAcs"]
[Sat Apr 25 01:22:41.777650 2026] [:error] [pid 42755:tid 42770] [client 135.225.72.245:11695] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeum4dH7__k0j6aa600EmAAAAI0"]
[Sat Apr 25 01:22:42.324778 2026] [:error] [pid 42791:tid 42819] [client 135.225.72.245:2949] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeum4rKmN9doraCEWKXtWwAAAdg"]
[Sat Apr 25 01:22:42.891673 2026] [:error] [pid 42755:tid 42769] [client 135.225.72.245:11708] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeum4tH7__k0j6aa600EnAAAAIw"]
[Sat Apr 25 01:22:43.421340 2026] [:error] [pid 42852:tid 42876] [client 135.225.72.245:3056] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeum4zMEwxhhak_EhMKTEAAAAlU"]
[Sat Apr 25 01:22:43.967743 2026] [:error] [pid 14989:tid 14991] [client 135.225.72.245:11690] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-edit.php"] [unique_id "aeum43hRYjsAsZTO4EOZEgAAAAA"]
[Sat Apr 25 01:22:44.513185 2026] [:error] [pid 42791:tid 42815] [client 135.225.72.245:11703] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeum5LKmN9doraCEWKXtXwAAAdQ"]
[Sat Apr 25 01:22:45.089442 2026] [:error] [pid 14989:tid 14995] [client 135.225.72.245:3002] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeum5XhRYjsAsZTO4EOZFgAAAAQ"]
[Sat Apr 25 01:22:45.655023 2026] [:error] [pid 42791:tid 42802] [client 135.225.72.245:3013] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeum5bKmN9doraCEWKXtYwAAAcc"]
[Sat Apr 25 01:22:46.194816 2026] [:error] [pid 42755:tid 42763] [client 135.225.72.245:2917] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/press.php"] [unique_id "aeum5tH7__k0j6aa600EpAAAAIY"]
[Sat Apr 25 01:22:46.772034 2026] [:error] [pid 42755:tid 42762] [client 135.225.72.245:2955] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeum5tH7__k0j6aa600EpgAAAIU"]
[Sat Apr 25 01:22:47.377218 2026] [:error] [pid 42792:tid 42846] [client 135.225.72.245:2951] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeum59Ni9qR4GtafpfHaawAAAhg"]
[Sat Apr 25 01:22:47.963657 2026] [:error] [pid 42852:tid 42875] [client 135.225.72.245:2994] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeum5zMEwxhhak_EhMKTFQAAAlQ"]
[Sat Apr 25 01:22:48.551820 2026] [:error] [pid 42852:tid 42878] [client 135.225.72.245:11771] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "aeum6DMEwxhhak_EhMKTFwAAAlc"]
[Sat Apr 25 01:22:49.118765 2026] [:error] [pid 42792:tid 42842] [client 135.225.72.245:3022] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeum6dNi9qR4GtafpfHadAAAAhQ"]
[Sat Apr 25 01:22:49.647543 2026] [:error] [pid 42852:tid 42866] [client 135.225.72.245:2972] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeum6TMEwxhhak_EhMKTGwAAAks"]
[Sat Apr 25 01:22:50.196510 2026] [:error] [pid 42791:tid 42812] [client 135.225.72.245:2948] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeum6rKmN9doraCEWKXtbgAAAdE"]
[Sat Apr 25 01:22:50.759835 2026] [:error] [pid 42792:tid 42831] [client 135.225.72.245:11705] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeum6tNi9qR4GtafpfHaewAAAgk"]
[Sat Apr 25 01:22:51.309755 2026] [:error] [pid 42852:tid 42870] [client 135.225.72.245:2998] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jk.php"] [unique_id "aeum6zMEwxhhak_EhMKTIAAAAk8"]
[Sat Apr 25 01:22:51.896105 2026] [:error] [pid 42852:tid 42879] [client 135.225.72.245:2960] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jk.php"] [unique_id "aeum6zMEwxhhak_EhMKTIwAAAlg"]
[Sat Apr 25 01:22:52.451746 2026] [:error] [pid 42792:tid 42835] [client 135.225.72.245:2970] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jk.php"] [unique_id "aeum7NNi9qR4GtafpfHagQAAAg0"]
[Sat Apr 25 01:22:52.998392 2026] [:error] [pid 14989:tid 14998] [client 135.225.72.245:2947] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jk.php"] [unique_id "aeum7HhRYjsAsZTO4EOZIwAAAAc"]
[Sat Apr 25 01:22:53.541589 2026] [:error] [pid 42852:tid 42861] [client 135.225.72.245:11740] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeum7TMEwxhhak_EhMKTJwAAAkY"]
[Sat Apr 25 01:22:54.087699 2026] [:error] [pid 14989:tid 15008] [client 135.225.72.245:11684] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeum7nhRYjsAsZTO4EOZKgAAABE"]
[Sat Apr 25 01:22:54.641176 2026] [:error] [pid 42792:tid 42839] [client 135.225.72.245:2973] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeum7tNi9qR4GtafpfHahwAAAhE"]
[Sat Apr 25 01:22:55.166966 2026] [:error] [pid 14989:tid 15010] [client 135.225.72.245:3011] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aeum73hRYjsAsZTO4EOZMAAAABM"]
[Sat Apr 25 01:22:55.727898 2026] [:error] [pid 42792:tid 42825] [client 135.225.72.245:11736] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeum79Ni9qR4GtafpfHaiQAAAgM"]
[Sat Apr 25 01:22:56.259055 2026] [:error] [pid 14989:tid 15013] [client 135.225.72.245:11711] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeum8HhRYjsAsZTO4EOZNQAAABY"]
[Sat Apr 25 01:22:56.816723 2026] [:error] [pid 42755:tid 42764] [client 135.225.72.245:3066] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeum8NH7__k0j6aa600EqwAAAIc"]
[Sat Apr 25 01:22:57.353464 2026] [:error] [pid 14989:tid 15012] [client 135.225.72.245:11721] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "aeum8XhRYjsAsZTO4EOZOQAAABU"]
[Sat Apr 25 01:22:57.914843 2026] [:error] [pid 14989:tid 15011] [client 135.225.72.245:3043] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeum8XhRYjsAsZTO4EOZPAAAABQ"]
[Sat Apr 25 01:22:58.471175 2026] [:error] [pid 42792:tid 42824] [client 135.225.72.245:11651] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeum8tNi9qR4GtafpfHajAAAAgI"]
[Sat Apr 25 01:22:58.998638 2026] [:error] [pid 42791:tid 42810] [client 135.225.72.245:2904] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeum8rKmN9doraCEWKXtdwAAAc8"]
[Sat Apr 25 01:22:59.534665 2026] [:error] [pid 14989:tid 15013] [client 135.225.72.245:3052] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "aeum83hRYjsAsZTO4EOZQgAAABY"]
[Sat Apr 25 01:23:00.088935 2026] [:error] [pid 14989:tid 14998] [client 135.225.72.245:2921] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeum9HhRYjsAsZTO4EOZRwAAAAc"]
[Sat Apr 25 01:23:00.642203 2026] [:error] [pid 14989:tid 15008] [client 135.225.72.245:2945] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeum9HhRYjsAsZTO4EOZSwAAABE"]
[Sat Apr 25 01:23:01.179814 2026] [:error] [pid 42852:tid 42857] [client 135.225.72.245:2961] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeum9TMEwxhhak_EhMKTNwAAAkI"]
[Sat Apr 25 01:23:01.723470 2026] [:error] [pid 14989:tid 14992] [client 135.225.72.245:2908] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "aeum9XhRYjsAsZTO4EOZTwAAAAE"]
[Sat Apr 25 01:23:02.291373 2026] [:error] [pid 42792:tid 42831] [client 135.225.72.245:11685] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeum9tNi9qR4GtafpfHakgAAAgk"]
[Sat Apr 25 01:23:02.878185 2026] [:error] [pid 14989:tid 15002] [client 135.225.72.245:11751] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeum9nhRYjsAsZTO4EOZUQAAAAs"]
[Sat Apr 25 01:23:03.507739 2026] [:error] [pid 42755:tid 42780] [client 135.225.72.245:2956] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeum99H7__k0j6aa600EtAAAAJc"]
[Sat Apr 25 01:23:04.066536 2026] [:error] [pid 14989:tid 14993] [client 135.225.72.245:3026] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aeum-HhRYjsAsZTO4EOZVAAAAAI"]
[Sat Apr 25 01:23:05.519720 2026] [:error] [pid 42792:tid 42824] [client 135.225.72.245:11775] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeum-dNi9qR4GtafpfHanAAAAgI"]
[Sat Apr 25 01:23:06.109030 2026] [:error] [pid 14989:tid 14994] [client 135.225.72.245:11718] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeum-nhRYjsAsZTO4EOZWgAAAAM"]
[Sat Apr 25 01:23:06.739611 2026] [:error] [pid 42852:tid 42870] [client 135.225.72.245:2985] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeum-jMEwxhhak_EhMKTQQAAAk8"]
[Sat Apr 25 01:23:07.269557 2026] [:error] [pid 42852:tid 42863] [client 135.225.72.245:3071] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "aeum-zMEwxhhak_EhMKTQgAAAkg"]
[Sat Apr 25 01:23:07.839110 2026] [:error] [pid 42852:tid 42861] [client 135.225.72.245:11688] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeum-zMEwxhhak_EhMKTRwAAAkY"]
[Sat Apr 25 01:23:08.394380 2026] [:error] [pid 42791:tid 42797] [client 135.225.72.245:2909] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeum_LKmN9doraCEWKXtgwAAAcI"]
[Sat Apr 25 01:23:08.953912 2026] [:error] [pid 42792:tid 42828] [client 135.225.72.245:3050] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeum_NNi9qR4GtafpfHangAAAgY"]
[Sat Apr 25 01:23:09.482175 2026] [:error] [pid 42852:tid 42878] [client 135.225.72.245:3057] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "aeum_TMEwxhhak_EhMKTTQAAAlc"]
[Sat Apr 25 01:23:10.063195 2026] [:error] [pid 42792:tid 42830] [client 135.225.72.245:2926] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeum_tNi9qR4GtafpfHaogAAAgg"]
[Sat Apr 25 01:23:10.641507 2026] [:error] [pid 42792:tid 42829] [client 135.225.72.245:3046] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeum_tNi9qR4GtafpfHapAAAAgc"]
[Sat Apr 25 01:23:11.204510 2026] [:error] [pid 42852:tid 42870] [client 135.225.72.245:2882] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeum_zMEwxhhak_EhMKTUgAAAk8"]
[Sat Apr 25 01:23:11.785944 2026] [:error] [pid 42852:tid 42874] [client 135.225.72.245:11706] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws88.php"] [unique_id "aeum_zMEwxhhak_EhMKTVAAAAlM"]
[Sat Apr 25 01:23:12.351779 2026] [:error] [pid 42791:tid 42819] [client 135.225.72.245:2954] File does not exist: /usr/local/apache/htdocs/suspended-page/adoms.php
[Sat Apr 25 01:23:12.620694 2026] [:error] [pid 42791:tid 42810] [client 135.225.72.245:2954] File does not exist: /usr/local/apache/htdocs/suspended-page/plugin-editor.php
[Sat Apr 25 01:23:12.891076 2026] [:error] [pid 42791:tid 42797] [client 135.225.72.245:2954] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat Apr 25 01:23:13.158722 2026] [:error] [pid 42791:tid 42805] [client 135.225.72.245:2954] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Apr 25 01:23:13.426710 2026] [:error] [pid 42791:tid 42813] [client 135.225.72.245:2954] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sat Apr 25 01:23:13.963474 2026] [:error] [pid 42791:tid 42796] [client 135.225.72.245:2954] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Sat Apr 25 01:23:14.234398 2026] [:error] [pid 42791:tid 42814] [client 135.225.72.245:2954] File does not exist: /usr/local/apache/htdocs/suspended-page/gaza.php
[Sat Apr 25 01:23:14.502584 2026] [:error] [pid 42791:tid 42818] [client 135.225.72.245:2954] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Sat Apr 25 01:23:14.771091 2026] [:error] [pid 42791:tid 42815] [client 135.225.72.245:2954] File does not exist: /usr/local/apache/htdocs/suspended-page/aboute.php
[Sat Apr 25 01:23:15.040652 2026] [:error] [pid 42791:tid 42810] [client 135.225.72.245:2954] File does not exist: /usr/local/apache/htdocs/suspended-page/ws82.php
[Sat Apr 25 01:23:15.305646 2026] [:error] [pid 42791:tid 42801] [client 135.225.72.245:2954] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeunA7KmN9doraCEWKXtogAAAcY"]
[Sat Apr 25 01:23:15.874930 2026] [:error] [pid 42792:tid 42836] [client 135.225.72.245:3006] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeunA9Ni9qR4GtafpfHargAAAg4"]
[Sat Apr 25 01:23:16.545934 2026] [:error] [pid 42791:tid 42812] [client 135.225.72.245:3064] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeunBLKmN9doraCEWKXtpAAAAdE"]
[Sat Apr 25 01:23:17.110949 2026] [:error] [pid 42791:tid 42805] [client 135.225.72.245:11707] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "aeunBbKmN9doraCEWKXtpgAAAco"]
[Sat Apr 25 01:23:17.643203 2026] [:error] [pid 14989:tid 15012] [client 135.225.72.245:3069] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeunBXhRYjsAsZTO4EOZdgAAABU"]
[Sat Apr 25 01:23:18.188795 2026] [:error] [pid 14989:tid 15003] [client 135.225.72.245:2988] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeunBnhRYjsAsZTO4EOZegAAAAw"]
[Sat Apr 25 01:23:18.730506 2026] [:error] [pid 42755:tid 42758] [client 135.225.72.245:2997] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeunBtH7__k0j6aa600EzwAAAIE"]
[Sat Apr 25 01:23:19.294549 2026] [:error] [pid 42791:tid 42799] [client 135.225.72.245:2963] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeunB7KmN9doraCEWKXtqQAAAcQ"]
[Sat Apr 25 01:23:19.891305 2026] [:error] [pid 14989:tid 15000] [client 135.225.72.245:2931] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeunB3hRYjsAsZTO4EOZfgAAAAk"]
[Sat Apr 25 01:23:20.490855 2026] [:error] [pid 42792:tid 42844] [client 135.225.72.245:2884] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeunCNNi9qR4GtafpfHatAAAAhY"]
[Sat Apr 25 01:23:21.071178 2026] [:error] [pid 42792:tid 42845] [client 135.225.72.245:2922] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeunCdNi9qR4GtafpfHauAAAAhc"]
[Sat Apr 25 01:23:21.679606 2026] [:error] [pid 14989:tid 15004] [client 135.225.72.245:2990] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "aeunCXhRYjsAsZTO4EOZiAAAAA0"]
[Sat Apr 25 01:23:22.206520 2026] [:error] [pid 42791:tid 42804] [client 135.225.72.245:2976] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeunCrKmN9doraCEWKXtrAAAAck"]
[Sat Apr 25 01:23:22.774071 2026] [:error] [pid 42792:tid 42836] [client 135.225.72.245:2992] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeunCtNi9qR4GtafpfHauQAAAg4"]
[Sat Apr 25 01:23:23.320465 2026] [:error] [pid 42755:tid 42781] [client 135.225.72.245:2894] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeunC9H7__k0j6aa600E1QAAAJg"]
[Sat Apr 25 01:23:23.860656 2026] [:error] [pid 14989:tid 15007] [client 135.225.72.245:2977] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aeunC3hRYjsAsZTO4EOZkwAAABA"]
[Sat Apr 25 01:23:24.399582 2026] [:error] [pid 42852:tid 42872] [client 135.225.72.245:3012] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeunDDMEwxhhak_EhMKTdwAAAlE"]
[Sat Apr 25 01:23:24.955534 2026] [:error] [pid 14989:tid 15012] [client 135.225.72.245:2984] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeunDHhRYjsAsZTO4EOZlwAAABU"]
[Sat Apr 25 01:23:25.501973 2026] [:error] [pid 42852:tid 42858] [client 135.225.72.245:2932] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeunDTMEwxhhak_EhMKTgwAAAkM"]
[Sat Apr 25 01:23:26.649461 2026] [:error] [pid 42852:tid 42856] [client 135.225.72.245:2924] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "aeunDjMEwxhhak_EhMKTjQAAAkE"]
[Sat Apr 25 01:23:27.195658 2026] [:error] [pid 42755:tid 42766] [client 135.225.72.245:2823] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aeunD9H7__k0j6aa600E2gAAAIk"]
[Sat Apr 25 01:23:27.743162 2026] [:error] [pid 14989:tid 15004] [client 135.225.72.245:11752] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aeunD3hRYjsAsZTO4EOZowAAAA0"]
[Sat Apr 25 01:23:28.302193 2026] [:error] [pid 14989:tid 15007] [client 135.225.72.245:3063] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aeunEHhRYjsAsZTO4EOZqQAAABA"]
[Sat Apr 25 01:23:28.886720 2026] [:error] [pid 14989:tid 15002] [client 135.225.72.245:11697] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "aeunEHhRYjsAsZTO4EOZrwAAAAs"]
[Sat Apr 25 01:23:29.458868 2026] [:error] [pid 14989:tid 14992] [client 135.225.72.245:2983] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeunEXhRYjsAsZTO4EOZtAAAAAE"]
[Sat Apr 25 01:23:30.030703 2026] [:error] [pid 14989:tid 15007] [client 135.225.72.245:11691] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeunEnhRYjsAsZTO4EOZuAAAABA"]
[Sat Apr 25 01:23:30.611530 2026] [:error] [pid 14989:tid 15002] [client 135.225.72.245:2959] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeunEnhRYjsAsZTO4EOZvQAAAAs"]
[Sat Apr 25 01:23:31.188260 2026] [:error] [pid 14989:tid 14993] [client 135.225.72.245:2999] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mk.php"] [unique_id "aeunE3hRYjsAsZTO4EOZvwAAAAI"]
[Sat Apr 25 01:23:31.803428 2026] [:error] [pid 14989:tid 14994] [client 135.225.72.245:2980] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeunE3hRYjsAsZTO4EOZxAAAAAM"]
[Sat Apr 25 01:23:32.340660 2026] [:error] [pid 42755:tid 42759] [client 135.225.72.245:3016] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeunFNH7__k0j6aa600E3AAAAII"]
[Sat Apr 25 01:23:32.890715 2026] [:error] [pid 42755:tid 42762] [client 135.225.72.245:2906] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeunFNH7__k0j6aa600E3QAAAIU"]
[Sat Apr 25 01:23:33.422463 2026] [:error] [pid 42792:tid 42827] [client 135.225.72.245:3062] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aeunFdNi9qR4GtafpfHayAAAAgU"]
[Sat Apr 25 01:23:33.982930 2026] [:error] [pid 14989:tid 15008] [client 135.225.72.245:2899] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "aeunFXhRYjsAsZTO4EOZywAAABE"]
[Sat Apr 25 01:23:34.551512 2026] [:error] [pid 14989:tid 14993] [client 135.225.72.245:2892] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "aeunFnhRYjsAsZTO4EOZzQAAAAI"]
[Sat Apr 25 01:23:35.123903 2026] [:error] [pid 42791:tid 42819] [client 135.225.72.245:2827] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "aeunF7KmN9doraCEWKXtugAAAdg"]
[Sat Apr 25 01:23:35.656410 2026] [:error] [pid 42852:tid 42878] [client 135.225.72.245:2885] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "aeunFzMEwxhhak_EhMKTpAAAAlc"]
[Sat Apr 25 01:23:36.193129 2026] [:error] [pid 14989:tid 15003] [client 135.225.72.245:2907] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeunGHhRYjsAsZTO4EOZ0gAAAAw"]
[Sat Apr 25 01:23:36.725426 2026] [:error] [pid 14989:tid 15009] [client 135.225.72.245:2957] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeunGHhRYjsAsZTO4EOZ1gAAABI"]
[Sat Apr 25 01:23:37.870426 2026] [:error] [pid 42792:tid 42823] [client 135.225.72.245:2981] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeunGdNi9qR4GtafpfHa1AAAAgE"]
[Sat Apr 25 01:23:38.507338 2026] [:error] [pid 14989:tid 14991] [client 135.225.72.245:3044] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/retu11.PhP7"] [unique_id "aeunGnhRYjsAsZTO4EOZ2gAAAAA"]
[Sat Apr 25 01:23:39.203806 2026] [:error] [pid 42755:tid 42764] [client 135.225.72.245:11738] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aeunG9H7__k0j6aa600E6gAAAIc"]
[Sat Apr 25 01:23:39.762530 2026] [:error] [pid 42755:tid 42761] [client 135.225.72.245:2978] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aeunG9H7__k0j6aa600E7AAAAIQ"]
[Sat Apr 25 01:23:40.300440 2026] [:error] [pid 42852:tid 42858] [client 135.225.72.245:2902] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aeunHDMEwxhhak_EhMKTsgAAAkM"]
[Sat Apr 25 01:23:40.866302 2026] [:error] [pid 42852:tid 42868] [client 135.225.72.245:2940] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "aeunHDMEwxhhak_EhMKTtAAAAk0"]
[Sat Apr 25 01:23:41.417122 2026] [:error] [pid 42852:tid 42877] [client 135.225.72.245:2944] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeunHTMEwxhhak_EhMKTuQAAAlY"]
[Sat Apr 25 01:23:42.014582 2026] [:error] [pid 42852:tid 42879] [client 135.225.72.245:2914] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeunHjMEwxhhak_EhMKTvQAAAlg"]
[Sat Apr 25 01:23:42.549941 2026] [:error] [pid 42852:tid 42865] [client 135.225.72.245:3061] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeunHjMEwxhhak_EhMKTwQAAAko"]
[Sat Apr 25 01:23:43.089563 2026] [:error] [pid 42852:tid 42868] [client 135.225.72.245:2979] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "aeunHzMEwxhhak_EhMKTxQAAAk0"]
[Sat Apr 25 01:23:43.699052 2026] [:error] [pid 42852:tid 42861] [client 135.225.72.245:2883] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeunHzMEwxhhak_EhMKTxwAAAkY"]
[Sat Apr 25 01:23:44.255451 2026] [:error] [pid 42791:tid 42809] [client 135.225.72.245:2993] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeunILKmN9doraCEWKXtxQAAAc4"]
[Sat Apr 25 01:23:44.788532 2026] [:error] [pid 42792:tid 42837] [client 135.225.72.245:3020] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeunINNi9qR4GtafpfHa2AAAAg8"]
[Sat Apr 25 01:23:45.356786 2026] [:error] [pid 42852:tid 42871] [client 135.225.72.245:2888] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoo.php"] [unique_id "aeunITMEwxhhak_EhMKTzQAAAlA"]
[Sat Apr 25 01:23:45.892740 2026] [:error] [pid 42792:tid 42828] [client 135.225.72.245:2987] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admlo.php"] [unique_id "aeunIdNi9qR4GtafpfHa3AAAAgY"]
[Sat Apr 25 01:23:46.504125 2026] [:error] [pid 14989:tid 15008] [client 135.225.72.245:2828] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admlo.php"] [unique_id "aeunInhRYjsAsZTO4EOZ4wAAABE"]
[Sat Apr 25 01:23:47.114456 2026] [:error] [pid 42852:tid 42861] [client 135.225.72.245:2967] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admlo.php"] [unique_id "aeunIzMEwxhhak_EhMKTzgAAAkY"]
[Sat Apr 25 01:23:47.747498 2026] [:error] [pid 42755:tid 42771] [client 135.225.72.245:2834] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admlo.php"] [unique_id "aeunI9H7__k0j6aa600E9AAAAI4"]
[Sat Apr 25 01:23:48.303520 2026] [:error] [pid 42852:tid 42859] [client 135.225.72.245:2850] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gcqoa.php"] [unique_id "aeunJDMEwxhhak_EhMKT0QAAAkQ"]
[Sat Apr 25 01:23:48.860557 2026] [:error] [pid 42791:tid 42803] [client 135.225.72.245:2912] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gcqoa.php"] [unique_id "aeunJLKmN9doraCEWKXt0AAAAcg"]
[Sat Apr 25 01:23:49.407082 2026] [:error] [pid 42755:tid 42761] [client 135.225.72.245:2974] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gcqoa.php"] [unique_id "aeunJdH7__k0j6aa600E9wAAAIQ"]
[Sat Apr 25 01:23:50.014584 2026] [:error] [pid 42852:tid 42863] [client 135.225.72.245:11700] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gcqoa.php"] [unique_id "aeunJjMEwxhhak_EhMKT1wAAAkg"]
[Sat Apr 25 01:23:50.612425 2026] [:error] [pid 14989:tid 15009] [client 135.225.72.245:3025] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeunJnhRYjsAsZTO4EOZ7wAAABI"]
[Sat Apr 25 01:23:51.200313 2026] [:error] [pid 14989:tid 14992] [client 135.225.72.245:3045] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeunJ3hRYjsAsZTO4EOZ8AAAAAE"]
[Sat Apr 25 01:23:51.768723 2026] [:error] [pid 14989:tid 15008] [client 135.225.72.245:3003] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeunJ3hRYjsAsZTO4EOZ8wAAABE"]
[Sat Apr 25 01:23:52.323980 2026] [:error] [pid 42852:tid 42856] [client 135.225.72.245:2778] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "aeunKDMEwxhhak_EhMKT2gAAAkE"]
[Sat Apr 25 01:23:52.972328 2026] [:error] [pid 42792:tid 42829] [client 135.225.72.245:2953] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeunKNNi9qR4GtafpfHa5QAAAgc"]
[Sat Apr 25 01:23:53.522090 2026] [:error] [pid 42792:tid 42840] [client 135.225.72.245:2927] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeunKdNi9qR4GtafpfHa5gAAAhI"]
[Sat Apr 25 01:23:54.099307 2026] [:error] [pid 42852:tid 42866] [client 135.225.72.245:2982] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeunKjMEwxhhak_EhMKT3QAAAks"]
[Sat Apr 25 01:23:54.757823 2026] [:error] [pid 42792:tid 42845] [client 135.225.72.245:2891] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "aeunKtNi9qR4GtafpfHa6wAAAhc"]
[Sat Apr 25 01:23:55.401130 2026] [:error] [pid 42792:tid 42842] [client 135.225.72.245:2817] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeunK9Ni9qR4GtafpfHa7wAAAhQ"]
[Sat Apr 25 01:23:55.963365 2026] [:error] [pid 42852:tid 42859] [client 135.225.72.245:2964] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeunKzMEwxhhak_EhMKT3wAAAkQ"]
[Sat Apr 25 01:23:56.555806 2026] [:error] [pid 42852:tid 42875] [client 135.225.72.245:3000] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeunLDMEwxhhak_EhMKT4AAAAlQ"]
[Sat Apr 25 01:23:57.116561 2026] [:error] [pid 42852:tid 42871] [client 135.225.72.245:3047] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "aeunLTMEwxhhak_EhMKT4gAAAlA"]
[Sat Apr 25 01:23:57.735379 2026] [:error] [pid 42791:tid 42815] [client 135.225.72.245:2887] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aeunLbKmN9doraCEWKXt1QAAAdQ"]
[Sat Apr 25 01:23:58.271681 2026] [:error] [pid 42852:tid 42874] [client 135.225.72.245:2919] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aeunLjMEwxhhak_EhMKT5QAAAlM"]
[Sat Apr 25 01:23:58.874683 2026] [:error] [pid 42791:tid 42806] [client 135.225.72.245:2905] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aeunLrKmN9doraCEWKXt3AAAAcs"]
[Sat Apr 25 01:23:59.434671 2026] [:error] [pid 42791:tid 42801] [client 135.225.72.245:2930] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class-api.php"] [unique_id "aeunL7KmN9doraCEWKXt4wAAAcY"]
[Sat Apr 25 01:24:00.028344 2026] [:error] [pid 42852:tid 42876] [client 135.225.72.245:2821] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeunMDMEwxhhak_EhMKT5wAAAlU"]
[Sat Apr 25 01:24:00.627857 2026] [:error] [pid 42791:tid 42806] [client 135.225.72.245:2923] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeunMLKmN9doraCEWKXt8QAAAcs"]
[Sat Apr 25 01:24:01.231102 2026] [:error] [pid 42791:tid 42811] [client 135.225.72.245:3007] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeunMbKmN9doraCEWKXt-AAAAdA"]
[Sat Apr 25 01:24:01.819421 2026] [:error] [pid 42791:tid 42813] [client 135.225.72.245:2831] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "aeunMbKmN9doraCEWKXt_wAAAdI"]
[Sat Apr 25 01:24:02.358938 2026] [:error] [pid 14989:tid 14994] [client 135.225.72.245:3004] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeunMnhRYjsAsZTO4EOZ-wAAAAM"]
[Sat Apr 25 01:24:02.894372 2026] [:error] [pid 42852:tid 42858] [client 135.225.72.245:2847] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeunMjMEwxhhak_EhMKT7QAAAkM"]
[Sat Apr 25 01:24:04.021805 2026] [:error] [pid 42755:tid 42765] [client 135.225.72.245:2874] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeunNNH7__k0j6aa600FBAAAAIg"]
[Sat Apr 25 01:24:04.584072 2026] [:error] [pid 42755:tid 42772] [client 135.225.72.245:2901] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "aeunNNH7__k0j6aa600FBQAAAI8"]
[Sat Apr 25 01:24:05.148733 2026] [:error] [pid 42755:tid 42757] [client 135.225.72.245:2952] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeunNdH7__k0j6aa600FBwAAAIA"]
[Sat Apr 25 01:24:05.702905 2026] [:error] [pid 42791:tid 42817] [client 135.225.72.245:2890] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeunNbKmN9doraCEWKXuDgAAAdY"]
[Sat Apr 25 01:24:06.289455 2026] [:error] [pid 14989:tid 14997] [client 135.225.72.245:2913] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeunNnhRYjsAsZTO4EOaAAAAAAY"]
[Sat Apr 25 01:24:06.823805 2026] [:error] [pid 42792:tid 42837] [client 135.225.72.245:11663] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccs.php"] [unique_id "aeunNtNi9qR4GtafpfHa8wAAAg8"]
[Sat Apr 25 01:24:07.383140 2026] [:error] [pid 42852:tid 42868] [client 135.225.72.245:3005] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeunNzMEwxhhak_EhMKUBwAAAk0"]
[Sat Apr 25 01:24:07.969220 2026] [:error] [pid 42852:tid 42860] [client 135.225.72.245:2889] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeunNzMEwxhhak_EhMKUCgAAAkU"]
[Sat Apr 25 01:24:08.581328 2026] [:error] [pid 14989:tid 15002] [client 135.225.72.245:2727] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeunOHhRYjsAsZTO4EOaBAAAAAs"]
[Sat Apr 25 01:24:09.200931 2026] [:error] [pid 14989:tid 15008] [client 135.225.72.245:2846] [client 135.225.72.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/first.php"] [unique_id "aeunOXhRYjsAsZTO4EOaBgAAABE"]
[Sat Apr 25 01:51:44.504541 2026] [:error] [pid 42792:tid 42846] [client 155.248.183.67:50718] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aeutsNNi9qR4GtafpfHjiwAAAhg"]
[Sat Apr 25 01:51:45.971958 2026] [:error] [pid 14989:tid 15005] [client 155.248.183.67:53842] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aeutsXhRYjsAsZTO4EOqOgAAAA4"]
[Sat Apr 25 01:51:47.453948 2026] [:error] [pid 14989:tid 15009] [client 155.248.183.67:50095] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aeuts3hRYjsAsZTO4EOqSQAAABI"]
[Sat Apr 25 01:51:47.689849 2026] [:error] [pid 14989:tid 15014] [client 155.248.183.67:59399] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aeuts3hRYjsAsZTO4EOqSgAAABc"]
[Sat Apr 25 01:51:48.917501 2026] [:error] [pid 14989:tid 14994] [client 155.248.183.67:54498] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aeuttHhRYjsAsZTO4EOqVgAAAAM"]
[Sat Apr 25 01:51:50.146208 2026] [:error] [pid 14989:tid 15002] [client 155.248.183.67:51822] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "aeuttnhRYjsAsZTO4EOqXwAAAAs"]
[Sat Apr 25 01:51:50.373733 2026] [:error] [pid 14989:tid 15000] [client 155.248.183.67:52055] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeuttnhRYjsAsZTO4EOqYQAAAAk"]
[Sat Apr 25 01:51:51.601463 2026] [:error] [pid 14989:tid 15013] [client 155.248.183.67:51705] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutt3hRYjsAsZTO4EOqbwAAABY"]
[Sat Apr 25 01:51:52.830517 2026] [:error] [pid 42755:tid 42767] [client 155.248.183.67:59556] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutuNH7__k0j6aa600MGgAAAIo"]
[Sat Apr 25 01:51:53.064101 2026] [:error] [pid 42791:tid 42801] [client 155.248.183.67:60451] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutubKmN9doraCEWKX2zQAAAcY"]
[Sat Apr 25 01:51:54.292107 2026] [:error] [pid 42792:tid 42835] [client 155.248.183.67:53801] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeututNi9qR4GtafpfHjnQAAAg0"]
[Sat Apr 25 01:51:55.519138 2026] [:error] [pid 42852:tid 42877] [client 155.248.183.67:63192] [client 155.248.183.67] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "aeutuzMEwxhhak_EhMKhkwAAAlY"]
[Sat Apr 25 03:03:36.521097 2026] [:error] [pid 28786:tid 28803] [client 20.251.112.6:2512] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-post-data.php
[Sat Apr 25 03:03:36.785277 2026] [:error] [pid 28786:tid 28811] [client 20.251.112.6:2512] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Sat Apr 25 03:03:37.049925 2026] [:error] [pid 28786:tid 28791] [client 20.251.112.6:2512] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Sat Apr 25 03:03:37.316816 2026] [:error] [pid 28786:tid 28796] [client 20.251.112.6:2512] File does not exist: /usr/local/apache/htdocs/suspended-page/kcs.php
[Sat Apr 25 03:03:37.580098 2026] [:error] [pid 28786:tid 28792] [client 20.251.112.6:2512] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Sat Apr 25 03:03:37.847607 2026] [:error] [pid 28786:tid 28805] [client 20.251.112.6:2512] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 25 03:03:38.111570 2026] [:error] [pid 28786:tid 28790] [client 20.251.112.6:2512] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Sat Apr 25 03:03:38.374770 2026] [:error] [pid 28786:tid 28811] [client 20.251.112.6:2512] File does not exist: /usr/local/apache/htdocs/suspended-page/envs.php
[Sat Apr 25 03:03:38.638684 2026] [:error] [pid 28786:tid 28810] [client 20.251.112.6:2512] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plugins.php
[Sat Apr 25 03:03:38.901923 2026] [:error] [pid 28786:tid 28797] [client 20.251.112.6:2512] File does not exist: /usr/local/apache/htdocs/suspended-page/keys.php
[Sat Apr 25 03:03:39.162603 2026] [:error] [pid 28786:tid 28804] [client 20.251.112.6:2512] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pinfo.php"] [unique_id "aeu-i9mKAVQi4GwijepLLwAAAY8"]
[Sat Apr 25 03:03:39.724635 2026] [:error] [pid 28909:tid 28922] [client 20.251.112.6:2271] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pinfo.php"] [unique_id "aeu-i62Vx90vB2Opu_ugLwAAAsY"]
[Sat Apr 25 03:03:40.244112 2026] [:error] [pid 28909:tid 28926] [client 20.251.112.6:2495] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pinfo.php"] [unique_id "aeu-jK2Vx90vB2Opu_ugMgAAAso"]
[Sat Apr 25 03:03:40.792606 2026] [:error] [pid 28909:tid 28917] [client 20.251.112.6:2287] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pinfo.php"] [unique_id "aeu-jK2Vx90vB2Opu_ugNQAAAsE"]
[Sat Apr 25 03:03:41.326567 2026] [:error] [pid 28717:tid 28722] [client 20.251.112.6:2519] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/litespeed.php"] [unique_id "aeu-jYWg982VYbVGgm45IgAAAQM"]
[Sat Apr 25 03:03:41.850954 2026] [:error] [pid 29016:tid 29049] [client 20.251.112.6:2398] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/litespeed.php"] [unique_id "aeu-jUQMwwBEZ8EaFL9GRgAAA0w"]
[Sat Apr 25 03:03:42.390010 2026] [:error] [pid 28909:tid 28936] [client 20.251.112.6:2386] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/litespeed.php"] [unique_id "aeu-jq2Vx90vB2Opu_ugOAAAAtM"]
[Sat Apr 25 03:03:42.915961 2026] [:error] [pid 42755:tid 42781] [client 20.251.112.6:2082] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/litespeed.php"] [unique_id "aeu-jtH7__k0j6aa600elQAAAJg"]
[Sat Apr 25 03:03:43.455821 2026] [:error] [pid 28786:tid 28805] [client 20.251.112.6:2423] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/environments.php"] [unique_id "aeu-j9mKAVQi4GwijepLPAAAAZA"]
[Sat Apr 25 03:03:43.998935 2026] [:error] [pid 28786:tid 28795] [client 20.251.112.6:2551] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/environments.php"] [unique_id "aeu-j9mKAVQi4GwijepLQQAAAYY"]
[Sat Apr 25 03:03:44.541820 2026] [:error] [pid 42755:tid 42759] [client 20.251.112.6:2379] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/environments.php"] [unique_id "aeu-kNH7__k0j6aa600emAAAAII"]
[Sat Apr 25 03:03:45.064943 2026] [:error] [pid 42755:tid 42770] [client 20.251.112.6:2549] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/environments.php"] [unique_id "aeu-kdH7__k0j6aa600emgAAAI0"]
[Sat Apr 25 03:03:45.583927 2026] [:error] [pid 28786:tid 28801] [client 20.251.112.6:2472] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/raf.php"] [unique_id "aeu-kdmKAVQi4GwijepLSwAAAYw"]
[Sat Apr 25 03:03:46.105585 2026] [:error] [pid 28909:tid 28921] [client 20.251.112.6:2525] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/raf.php"] [unique_id "aeu-kq2Vx90vB2Opu_ugPQAAAsU"]
[Sat Apr 25 03:03:46.624531 2026] [:error] [pid 28909:tid 28922] [client 20.251.112.6:54355] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/raf.php"] [unique_id "aeu-kq2Vx90vB2Opu_ugPgAAAsY"]
[Sat Apr 25 03:03:47.163913 2026] [:error] [pid 28909:tid 28917] [client 20.251.112.6:2510] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/raf.php"] [unique_id "aeu-k62Vx90vB2Opu_ugRQAAAsE"]
[Sat Apr 25 03:03:47.683967 2026] [:error] [pid 28841:tid 28855] [client 20.251.112.6:2248] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeu-k-tkQQ-2d-KEcF-s5AAAAoA"]
[Sat Apr 25 03:03:48.213817 2026] [:error] [pid 42755:tid 42780] [client 20.251.112.6:2399] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeu-lNH7__k0j6aa600enwAAAJc"]
[Sat Apr 25 03:03:48.731333 2026] [:error] [pid 14989:tid 14997] [client 20.251.112.6:2426] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeu-lHhRYjsAsZTO4EPMdwAAAAY"]
[Sat Apr 25 03:03:49.349504 2026] [:error] [pid 42852:tid 42867] [client 20.251.112.6:54338] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "aeu-lTMEwxhhak_EhMK7FQAAAkw"]
[Sat Apr 25 03:03:49.926772 2026] [:error] [pid 42792:tid 42840] [client 20.251.112.6:2518] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/infos.php"] [unique_id "aeu-ldNi9qR4GtafpfH2lwAAAhI"]
[Sat Apr 25 03:03:50.490648 2026] [:error] [pid 28717:tid 28723] [client 20.251.112.6:2479] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/infos.php"] [unique_id "aeu-loWg982VYbVGgm45LQAAAQQ"]
[Sat Apr 25 03:03:51.013211 2026] [:error] [pid 29016:tid 29057] [client 20.251.112.6:54350] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/infos.php"] [unique_id "aeu-l0QMwwBEZ8EaFL9GVAAAA1Q"]
[Sat Apr 25 03:03:51.535517 2026] [:error] [pid 14989:tid 15001] [client 20.251.112.6:2421] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/infos.php"] [unique_id "aeu-l3hRYjsAsZTO4EPMeQAAAAo"]
[Sat Apr 25 03:03:52.138125 2026] [:error] [pid 42852:tid 42857] [client 20.251.112.6:2476] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aws.php"] [unique_id "aeu-mDMEwxhhak_EhMK7HAAAAkI"]
[Sat Apr 25 03:03:52.675524 2026] [:error] [pid 42755:tid 42778] [client 20.251.112.6:2262] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aws.php"] [unique_id "aeu-mNH7__k0j6aa600eqAAAAJU"]
[Sat Apr 25 03:03:53.208524 2026] [:error] [pid 42852:tid 42875] [client 20.251.112.6:2537] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aws.php"] [unique_id "aeu-mTMEwxhhak_EhMK7IAAAAlQ"]
[Sat Apr 25 03:03:53.754137 2026] [:error] [pid 28841:tid 28878] [client 20.251.112.6:2286] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aws.php"] [unique_id "aeu-metkQQ-2d-KEcF-s5gAAApc"]
[Sat Apr 25 03:03:54.280709 2026] [:error] [pid 28909:tid 28933] [client 20.251.112.6:2533] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/embed.php"] [unique_id "aeu-mq2Vx90vB2Opu_ugSAAAAtA"]
[Sat Apr 25 03:03:54.848303 2026] [:error] [pid 14989:tid 14994] [client 20.251.112.6:56257] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/embed.php"] [unique_id "aeu-mnhRYjsAsZTO4EPMewAAAAM"]
[Sat Apr 25 03:03:55.414711 2026] [:error] [pid 29016:tid 29054] [client 20.251.112.6:54377] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/embed.php"] [unique_id "aeu-m0QMwwBEZ8EaFL9GXAAAA1E"]
[Sat Apr 25 03:03:55.954411 2026] [:error] [pid 42791:tid 42806] [client 20.251.112.6:2249] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/embed.php"] [unique_id "aeu-m7KmN9doraCEWKUHmQAAAcs"]
[Sat Apr 25 03:03:56.479003 2026] [:error] [pid 29016:tid 29042] [client 20.251.112.6:2448] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/stat.php"] [unique_id "aeu-nEQMwwBEZ8EaFL9GXwAAA0U"]
[Sat Apr 25 03:03:56.999797 2026] [:error] [pid 28786:tid 28797] [client 20.251.112.6:2419] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/stat.php"] [unique_id "aeu-nNmKAVQi4GwijepLdgAAAYg"]
[Sat Apr 25 03:03:57.524562 2026] [:error] [pid 29016:tid 29035] [client 20.251.112.6:2291] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/stat.php"] [unique_id "aeu-nUQMwwBEZ8EaFL9GYgAAA0E"]
[Sat Apr 25 03:03:58.048120 2026] [:error] [pid 29016:tid 29052] [client 20.251.112.6:2453] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/stat.php"] [unique_id "aeu-nkQMwwBEZ8EaFL9GYwAAA08"]
[Sat Apr 25 03:03:58.570167 2026] [:error] [pid 42755:tid 42767] [client 20.251.112.6:2527] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/setup.php"] [unique_id "aeu-ntH7__k0j6aa600evgAAAIo"]
[Sat Apr 25 03:03:59.107742 2026] [:error] [pid 28786:tid 28810] [client 20.251.112.6:2404] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/setup.php"] [unique_id "aeu-n9mKAVQi4GwijepLhAAAAZU"]
[Sat Apr 25 03:03:59.650680 2026] [:error] [pid 29016:tid 29061] [client 20.251.112.6:2509] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/setup.php"] [unique_id "aeu-n0QMwwBEZ8EaFL9GZgAAA1g"]
[Sat Apr 25 03:04:00.188778 2026] [:error] [pid 28786:tid 28805] [client 20.251.112.6:2444] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/setup.php"] [unique_id "aeu-oNmKAVQi4GwijepLlAAAAZA"]
[Sat Apr 25 03:04:00.709986 2026] [:error] [pid 28786:tid 28810] [client 20.251.112.6:2276] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/development.php"] [unique_id "aeu-oNmKAVQi4GwijepLlwAAAZU"]
[Sat Apr 25 03:04:01.228137 2026] [:error] [pid 42755:tid 42766] [client 20.251.112.6:2534] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/development.php"] [unique_id "aeu-odH7__k0j6aa600e2gAAAIk"]
[Sat Apr 25 03:04:01.748911 2026] [:error] [pid 42791:tid 42808] [client 20.251.112.6:54349] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/development.php"] [unique_id "aeu-obKmN9doraCEWKUH0AAAAc0"]
[Sat Apr 25 03:04:02.274871 2026] [:error] [pid 29016:tid 29048] [client 20.251.112.6:2378] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/development.php"] [unique_id "aeu-okQMwwBEZ8EaFL9GbQAAA0s"]
[Sat Apr 25 03:04:02.793851 2026] [:error] [pid 28841:tid 28862] [client 20.251.112.6:2369] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/environment.php"] [unique_id "aeu-outkQQ-2d-KEcF-s-gAAAoc"]
[Sat Apr 25 03:04:03.319617 2026] [:error] [pid 29016:tid 29058] [client 20.251.112.6:2433] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/environment.php"] [unique_id "aeu-o0QMwwBEZ8EaFL9GcAAAA1U"]
[Sat Apr 25 03:04:03.839756 2026] [:error] [pid 14989:tid 15011] [client 20.251.112.6:2623] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/environment.php"] [unique_id "aeu-o3hRYjsAsZTO4EPMfAAAABQ"]
[Sat Apr 25 03:04:04.374902 2026] [:error] [pid 29016:tid 29052] [client 20.251.112.6:2275] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/environment.php"] [unique_id "aeu-pEQMwwBEZ8EaFL9GdQAAA08"]
[Sat Apr 25 03:04:04.904455 2026] [:error] [pid 42755:tid 42771] [client 20.251.112.6:54354] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db_config.php"] [unique_id "aeu-pNH7__k0j6aa600e_QAAAI4"]
[Sat Apr 25 03:04:05.430534 2026] [:error] [pid 29016:tid 29040] [client 20.251.112.6:2508] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db_config.php"] [unique_id "aeu-pUQMwwBEZ8EaFL9GegAAA0M"]
[Sat Apr 25 03:04:05.950309 2026] [:error] [pid 28841:tid 28859] [client 20.251.112.6:2296] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db_config.php"] [unique_id "aeu-petkQQ-2d-KEcF-s_wAAAoQ"]
[Sat Apr 25 03:04:06.470272 2026] [:error] [pid 28841:tid 28879] [client 20.251.112.6:2259] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db_config.php"] [unique_id "aeu-putkQQ-2d-KEcF-tAwAAApg"]
[Sat Apr 25 03:04:06.990486 2026] [:error] [pid 42791:tid 42813] [client 20.251.112.6:2452] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeu-prKmN9doraCEWKUH-QAAAdI"]
[Sat Apr 25 03:04:07.518746 2026] [:error] [pid 29016:tid 29052] [client 20.251.112.6:2543] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeu-p0QMwwBEZ8EaFL9GfwAAA08"]
[Sat Apr 25 03:04:08.044888 2026] [:error] [pid 42755:tid 42773] [client 20.251.112.6:54390] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeu-qNH7__k0j6aa600fAwAAAJA"]
[Sat Apr 25 03:04:08.566949 2026] [:error] [pid 42755:tid 42781] [client 20.251.112.6:2406] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aeu-qNH7__k0j6aa600fBAAAAJg"]
[Sat Apr 25 03:04:09.086806 2026] [:error] [pid 28717:tid 28732] [client 20.251.112.6:2469] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/deploy.php"] [unique_id "aeu-qYWg982VYbVGgm45NQAAAQ0"]
[Sat Apr 25 03:04:09.607813 2026] [:error] [pid 28909:tid 28925] [client 20.251.112.6:2255] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/deploy.php"] [unique_id "aeu-qa2Vx90vB2Opu_ugVQAAAsk"]
[Sat Apr 25 03:04:10.128912 2026] [:error] [pid 42755:tid 42764] [client 20.251.112.6:2242] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/deploy.php"] [unique_id "aeu-qtH7__k0j6aa600fBwAAAIc"]
[Sat Apr 25 03:04:10.650989 2026] [:error] [pid 42755:tid 42772] [client 20.251.112.6:56304] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/deploy.php"] [unique_id "aeu-qtH7__k0j6aa600fCQAAAI8"]
[Sat Apr 25 03:04:11.172897 2026] [:error] [pid 28841:tid 28877] [client 20.251.112.6:2457] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/apis.php"] [unique_id "aeu-q-tkQQ-2d-KEcF-tEQAAApY"]
[Sat Apr 25 03:04:11.694492 2026] [:error] [pid 42755:tid 42762] [client 20.251.112.6:2298] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/apis.php"] [unique_id "aeu-q9H7__k0j6aa600fDgAAAIU"]
[Sat Apr 25 03:04:12.214009 2026] [:error] [pid 28841:tid 28860] [client 20.251.112.6:2431] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/apis.php"] [unique_id "aeu-rOtkQQ-2d-KEcF-tFAAAAoU"]
[Sat Apr 25 03:04:12.744714 2026] [:error] [pid 42852:tid 42859] [client 20.251.112.6:2498] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/apis.php"] [unique_id "aeu-rDMEwxhhak_EhMK7LAAAAkQ"]
[Sat Apr 25 03:04:13.267194 2026] [:error] [pid 28909:tid 28921] [client 20.251.112.6:2464] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asdf.php"] [unique_id "aeu-ra2Vx90vB2Opu_ugWAAAAsU"]
[Sat Apr 25 03:04:13.806665 2026] [:error] [pid 29016:tid 29050] [client 20.251.112.6:2063] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asdf.php"] [unique_id "aeu-rUQMwwBEZ8EaFL9GigAAA00"]
[Sat Apr 25 03:04:14.334395 2026] [:error] [pid 29016:tid 29040] [client 20.251.112.6:2257] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asdf.php"] [unique_id "aeu-rkQMwwBEZ8EaFL9GjQAAA0M"]
[Sat Apr 25 03:04:14.866892 2026] [:error] [pid 29016:tid 29035] [client 20.251.112.6:2556] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asdf.php"] [unique_id "aeu-rkQMwwBEZ8EaFL9GkAAAA0E"]
[Sat Apr 25 03:04:15.422197 2026] [:error] [pid 28909:tid 28923] [client 20.251.112.6:2550] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeu-r62Vx90vB2Opu_ugXAAAAsc"]
[Sat Apr 25 03:04:15.953780 2026] [:error] [pid 29016:tid 29034] [client 20.251.112.6:2480] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeu-r0QMwwBEZ8EaFL9GlgAAA0A"]
[Sat Apr 25 03:04:16.483787 2026] [:error] [pid 28841:tid 28869] [client 20.251.112.6:2383] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeu-sOtkQQ-2d-KEcF-tGwAAAo4"]
[Sat Apr 25 03:04:17.038724 2026] [:error] [pid 28717:tid 28728] [client 20.251.112.6:2254] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1100.php"] [unique_id "aeu-sYWg982VYbVGgm45OgAAAQk"]
[Sat Apr 25 03:04:17.599816 2026] [:error] [pid 28786:tid 28813] [client 20.251.112.6:65475] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/._info.php"] [unique_id "aeu-sdmKAVQi4GwijepLrQAAAZg"]
[Sat Apr 25 03:04:18.170468 2026] [:error] [pid 28786:tid 28805] [client 20.251.112.6:2436] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/._info.php"] [unique_id "aeu-stmKAVQi4GwijepLrgAAAZA"]
[Sat Apr 25 03:04:18.756634 2026] [:error] [pid 42755:tid 42764] [client 20.251.112.6:54379] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/._info.php"] [unique_id "aeu-stH7__k0j6aa600fFgAAAIc"]
[Sat Apr 25 03:04:19.338849 2026] [:error] [pid 29016:tid 29053] [client 20.251.112.6:2485] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/._info.php"] [unique_id "aeu-s0QMwwBEZ8EaFL9GnAAAA1A"]
[Sat Apr 25 03:04:19.889886 2026] [:error] [pid 42755:tid 42767] [client 20.251.112.6:2532] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/php_flag.php"] [unique_id "aeu-s9H7__k0j6aa600fGAAAAIo"]
[Sat Apr 25 03:04:20.425202 2026] [:error] [pid 28717:tid 28739] [client 20.251.112.6:54347] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/php_flag.php"] [unique_id "aeu-tIWg982VYbVGgm45QQAAARQ"]
[Sat Apr 25 03:04:20.960947 2026] [:error] [pid 42755:tid 42771] [client 20.251.112.6:2468] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/php_flag.php"] [unique_id "aeu-tNH7__k0j6aa600fHAAAAI4"]
[Sat Apr 25 03:04:21.488484 2026] [:error] [pid 42792:tid 42827] [client 20.251.112.6:2293] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/php_flag.php"] [unique_id "aeu-tdNi9qR4GtafpfH2nwAAAgU"]
[Sat Apr 25 03:04:22.012971 2026] [:error] [pid 14989:tid 15006] [client 20.251.112.6:2432] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test_info4.php"] [unique_id "aeu-tnhRYjsAsZTO4EPMgQAAAA8"]
[Sat Apr 25 03:04:22.572039 2026] [:error] [pid 42792:tid 42846] [client 20.251.112.6:56280] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test_info4.php"] [unique_id "aeu-ttNi9qR4GtafpfH2oQAAAhg"]
[Sat Apr 25 03:04:23.132742 2026] [:error] [pid 42791:tid 42807] [client 20.251.112.6:2541] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test_info4.php"] [unique_id "aeu-t7KmN9doraCEWKUH_QAAAcw"]
[Sat Apr 25 03:04:23.704460 2026] [:error] [pid 14989:tid 14991] [client 20.251.112.6:2277] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test_info4.php"] [unique_id "aeu-t3hRYjsAsZTO4EPMhQAAAAA"]
[Sat Apr 25 03:04:24.262770 2026] [:error] [pid 28786:tid 28807] [client 20.251.112.6:2389] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aeu-uNmKAVQi4GwijepLtQAAAZI"]
[Sat Apr 25 03:04:24.801998 2026] [:error] [pid 14989:tid 14993] [client 20.251.112.6:54348] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aeu-uHhRYjsAsZTO4EPMhgAAAAI"]
[Sat Apr 25 03:04:25.343346 2026] [:error] [pid 28717:tid 28733] [client 20.251.112.6:2301] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aeu-uYWg982VYbVGgm45RgAAAQ4"]
[Sat Apr 25 03:04:25.885651 2026] [:error] [pid 28717:tid 28724] [client 20.251.112.6:54351] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aeu-uYWg982VYbVGgm45RwAAAQU"]
[Sat Apr 25 03:04:26.410935 2026] [:error] [pid 29016:tid 29047] [client 20.251.112.6:2581] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/HsFPDcD.php"] [unique_id "aeu-ukQMwwBEZ8EaFL9GnQAAA0o"]
[Sat Apr 25 03:04:26.952509 2026] [:error] [pid 42791:tid 42818] [client 20.251.112.6:2297] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/HsFPDcD.php"] [unique_id "aeu-urKmN9doraCEWKUICAAAAdc"]
[Sat Apr 25 03:04:27.692940 2026] [:error] [pid 28786:tid 28804] [client 20.251.112.6:2098] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/HsFPDcD.php"] [unique_id "aeu-u9mKAVQi4GwijepLuQAAAY8"]
[Sat Apr 25 03:04:28.439170 2026] [:error] [pid 28841:tid 28857] [client 20.251.112.6:56305] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/HsFPDcD.php"] [unique_id "aeu-vOtkQQ-2d-KEcF-tIQAAAoI"]
[Sat Apr 25 03:04:29.511777 2026] [:error] [pid 28841:tid 28868] [client 20.251.112.6:2458] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.inc.php"] [unique_id "aeu-vetkQQ-2d-KEcF-tIwAAAo0"]
[Sat Apr 25 03:04:30.434646 2026] [:error] [pid 29016:tid 29051] [client 20.251.112.6:2265] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.inc.php"] [unique_id "aeu-vkQMwwBEZ8EaFL9GpAAAA04"]
[Sat Apr 25 03:04:31.088299 2026] [:error] [pid 29016:tid 29048] [client 20.251.112.6:2529] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.inc.php"] [unique_id "aeu-v0QMwwBEZ8EaFL9GqAAAA0s"]
[Sat Apr 25 03:04:31.681781 2026] [:error] [pid 28841:tid 28875] [client 20.251.112.6:65492] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/config.inc.php"] [unique_id "aeu-v-tkQQ-2d-KEcF-tJQAAApQ"]
[Sat Apr 25 03:04:32.260633 2026] [:error] [pid 28841:tid 28869] [client 20.251.112.6:2253] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpversion.php"] [unique_id "aeu-wOtkQQ-2d-KEcF-tKgAAAo4"]
[Sat Apr 25 03:04:32.897876 2026] [:error] [pid 28841:tid 28856] [client 20.251.112.6:2260] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpversion.php"] [unique_id "aeu-wOtkQQ-2d-KEcF-tLwAAAoE"]
[Sat Apr 25 03:04:33.439583 2026] [:error] [pid 42852:tid 42860] [client 20.251.112.6:2507] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpversion.php"] [unique_id "aeu-wTMEwxhhak_EhMK7OwAAAkU"]
[Sat Apr 25 03:04:33.987439 2026] [:error] [pid 42791:tid 42808] [client 20.251.112.6:2447] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpversion.php"] [unique_id "aeu-wbKmN9doraCEWKUIEgAAAc0"]
[Sat Apr 25 03:04:34.528469 2026] [:error] [pid 14989:tid 15002] [client 20.251.112.6:2535] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "aeu-wnhRYjsAsZTO4EPMhwAAAAs"]
[Sat Apr 25 03:04:35.397943 2026] [:error] [pid 14989:tid 14992] [client 20.251.112.6:54374] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "aeu-w3hRYjsAsZTO4EPMiQAAAAE"]
[Sat Apr 25 03:04:35.961536 2026] [:error] [pid 42755:tid 42771] [client 20.251.112.6:2501] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "aeu-w9H7__k0j6aa600fJAAAAI4"]
[Sat Apr 25 03:04:36.544168 2026] [:error] [pid 28909:tid 28932] [client 20.251.112.6:2520] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "aeu-xK2Vx90vB2Opu_ugaQAAAs8"]
[Sat Apr 25 03:04:37.079171 2026] [:error] [pid 28909:tid 28931] [client 20.251.112.6:2370] [client 20.251.112.6] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/php_version.php"] [unique_id "aeu-xa2Vx90vB2Opu_ugagAAAs4"]
[Sat Apr 25 03:04:38.021766 2026] [:error] [pid 29016:tid 29034] [client 20.251.112.6:2459] File does not exist: /usr/local/apache/htdocs/suspended-page/php_version.php
[Sat Apr 25 03:04:38.285530 2026] [:error] [pid 29016:tid 29045] [client 20.251.112.6:2459] File does not exist: /usr/local/apache/htdocs/suspended-page/abouts.php
[Sat Apr 25 03:04:38.551687 2026] [:error] [pid 29016:tid 29050] [client 20.251.112.6:2459] File does not exist: /usr/local/apache/htdocs/suspended-page/profmanage.php
[Sat Apr 25 03:04:38.815340 2026] [:error] [pid 29016:tid 29059] [client 20.251.112.6:2459] File does not exist: /usr/local/apache/htdocs/suspended-page/makecvs.php
[Sat Apr 25 03:04:39.088732 2026] [:error] [pid 29016:tid 29052] [client 20.251.112.6:2459] File does not exist: /usr/local/apache/htdocs/suspended-page/phpreleaseinfo.php
[Sat Apr 25 03:04:40.607666 2026] [:error] [pid 29016:tid 29052] [client 20.251.112.6:2459] File does not exist: /usr/local/apache/htdocs/suspended-page/configuration.php
[Sat Apr 25 03:04:40.874049 2026] [:error] [pid 29016:tid 29045] [client 20.251.112.6:2459] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Sat Apr 25 03:04:41.143085 2026] [:error] [pid 29016:tid 29036] [client 20.251.112.6:2459] File does not exist: /usr/local/apache/htdocs/suspended-page/hkvkjguw.php
[Sat Apr 25 03:04:41.409845 2026] [:error] [pid 29016:tid 29058] [client 20.251.112.6:2459] File does not exist: /usr/local/apache/htdocs/suspended-page/Black.php
[Sat Apr 25 03:04:41.674007 2026] [:error] [pid 29016:tid 29060] [client 20.251.112.6:2459] File does not exist: /usr/local/apache/htdocs/suspended-page/infoinfo.php
[Sat Apr 25 04:21:13.027332 2026] [:error] [pid 46083:tid 46101] [client 52.139.225.142:5642] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat Apr 25 04:21:13.119029 2026] [:error] [pid 46083:tid 46112] [client 52.139.225.142:5642] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Apr 25 04:21:13.303493 2026] [:error] [pid 46083:tid 46088] [client 52.139.225.142:5642] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat Apr 25 04:21:13.399465 2026] [:error] [pid 46083:tid 46090] [client 52.139.225.142:5642] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 25 04:21:13.583700 2026] [:error] [pid 46083:tid 46110] [client 52.139.225.142:5642] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat Apr 25 04:21:13.674682 2026] [:error] [pid 46083:tid 46107] [client 52.139.225.142:5642] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 25 04:21:13.766228 2026] [:error] [pid 46083:tid 46097] [client 52.139.225.142:5642] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat Apr 25 04:21:14.036949 2026] [:error] [pid 46083:tid 46109] [client 52.139.225.142:5642] [client 52.139.225.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "aevQujxw_Zq74vWdjmn0JQAAARU"]
[Sat Apr 25 04:21:14.400285 2026] [:error] [pid 46083:tid 46099] [client 52.139.225.142:2658] [client 52.139.225.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "aevQujxw_Zq74vWdjmn0JwAAAQw"]
[Sat Apr 25 04:21:14.756396 2026] [:error] [pid 44320:tid 44366] [client 52.139.225.142:2660] [client 52.139.225.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "aevQujmFqSpku_dij8hbJwAAAEo"]
[Sat Apr 25 04:21:15.113611 2026] [:error] [pid 44321:tid 44402] [client 52.139.225.142:2645] [client 52.139.225.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "aevQu41b5lV-asWa_Y4JxwAAAJM"]
[Sat Apr 25 23:51:42.642660 2026] [:error] [pid 3212:tid 3237] [client 20.203.162.164:54106] File does not exist: /usr/local/apache/htdocs/suspended-page/file0.php
[Sat Apr 25 23:51:42.949150 2026] [:error] [pid 3212:tid 3217] [client 20.203.162.164:54106] File does not exist: /usr/local/apache/htdocs/suspended-page/geforce.php
[Sat Apr 25 23:51:43.223539 2026] [:error] [pid 3212:tid 3221] [client 20.203.162.164:54106] File does not exist: /usr/local/apache/htdocs/suspended-page/t3s.php
[Sat Apr 25 23:51:43.534612 2026] [:error] [pid 3212:tid 3235] [client 20.203.162.164:54106] File does not exist: /usr/local/apache/htdocs/suspended-page/uwu.php
[Sat Apr 25 23:51:43.807174 2026] [:error] [pid 3212:tid 3236] [client 20.203.162.164:54106] File does not exist: /usr/local/apache/htdocs/suspended-page/uwa.php
[Sat Apr 25 23:51:44.104775 2026] [:error] [pid 3212:tid 3227] [client 20.203.162.164:54106] File does not exist: /usr/local/apache/htdocs/suspended-page/crgio.php
[Sat Apr 25 23:51:44.410009 2026] [:error] [pid 3212:tid 3225] [client 20.203.162.164:54106] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Sat Apr 25 23:51:44.691980 2026] [:error] [pid 3212:tid 3234] [client 20.203.162.164:54106] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sat Apr 25 23:51:45.053716 2026] [:error] [pid 3212:tid 3233] [client 20.203.162.164:54106] File does not exist: /usr/local/apache/htdocs/suspended-page/77.php
[Sat Apr 25 23:51:45.336571 2026] [:error] [pid 3212:tid 3222] [client 20.203.162.164:54106] File does not exist: /usr/local/apache/htdocs/suspended-page/.sghb.php
[Sat Apr 25 23:51:45.603630 2026] [:error] [pid 3212:tid 3226] [client 20.203.162.164:54106] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoko.php"] [unique_id "aezjEfg-28TY8_YLtUeFWgAAAQw"]
[Sat Apr 25 23:51:46.559472 2026] [:error] [pid 59896:tid 59917] [client 20.203.162.164:10836] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoko.php"] [unique_id "aezjErLLzhtkd-OXUgAuTQAAAFE"]
[Sat Apr 25 23:51:47.477169 2026] [:error] [pid 59985:tid 59987] [client 20.203.162.164:63799] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoko.php"] [unique_id "aezjEwF_zDvEhKvyTH7ezwAAAAA"]
[Sat Apr 25 23:51:48.311244 2026] [:error] [pid 59896:tid 59901] [client 20.203.162.164:63795] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoko.php"] [unique_id "aezjFLLLzhtkd-OXUgAuUAAAAEE"]
[Sat Apr 25 23:51:50.893312 2026] [:error] [pid 3212:tid 3216] [client 20.203.162.164:50120] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/solo1.php"] [unique_id "aezjFvg-28TY8_YLtUeFYwAAAQI"]
[Sat Apr 25 23:51:53.317176 2026] [:error] [pid 59897:tid 59938] [client 20.203.162.164:42526] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/solo1.php"] [unique_id "aezjGfBrrkdzpEbmK4epQgAAAIs"]
[Sat Apr 25 23:51:54.240113 2026] [:error] [pid 59897:tid 59929] [client 20.203.162.164:23653] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/solo1.php"] [unique_id "aezjGvBrrkdzpEbmK4epQwAAAII"]
[Sat Apr 25 23:51:57.386887 2026] [:error] [pid 59897:tid 59936] [client 20.203.162.164:51813] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/solo1.php"] [unique_id "aezjHfBrrkdzpEbmK4epSwAAAIk"]
[Sat Apr 25 23:51:58.960775 2026] [:error] [pid 59898:tid 59960] [client 20.203.162.164:12203] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/locales.php"] [unique_id "aezjHh-4vImxb0kbdzfJcwAAAMY"]
[Sat Apr 25 23:51:59.655534 2026] [:error] [pid 3212:tid 3230] [client 20.203.162.164:63767] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/locales.php"] [unique_id "aezjH_g-28TY8_YLtUeFdgAAARA"]
[Sat Apr 25 23:52:01.070924 2026] [:error] [pid 3212:tid 3236] [client 20.203.162.164:20462] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/locales.php"] [unique_id "aezjIfg-28TY8_YLtUeFegAAARY"]
[Sat Apr 25 23:52:02.976010 2026] [:error] [pid 3212:tid 3230] [client 20.203.162.164:45761] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/locales.php"] [unique_id "aezjIvg-28TY8_YLtUeFhgAAARA"]
[Sat Apr 25 23:52:04.424361 2026] [:error] [pid 59898:tid 59956] [client 20.203.162.164:12186] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aezjJB-4vImxb0kbdzfJdwAAAMI"]
[Sat Apr 25 23:52:06.283341 2026] [:error] [pid 59896:tid 59913] [client 20.203.162.164:4416] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aezjJrLLzhtkd-OXUgAuYQAAAE0"]
[Sat Apr 25 23:52:07.214848 2026] [:error] [pid 59897:tid 59928] [client 20.203.162.164:10830] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aezjJ_BrrkdzpEbmK4epWwAAAIE"]
[Sat Apr 25 23:52:08.087924 2026] [:error] [pid 59897:tid 59948] [client 20.203.162.164:27406] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "aezjKPBrrkdzpEbmK4epYAAAAJU"]
[Sat Apr 25 23:52:09.277524 2026] [:error] [pid 3212:tid 3227] [client 20.203.162.164:42549] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pucci.php"] [unique_id "aezjKfg-28TY8_YLtUeFkwAAAQ0"]
[Sat Apr 25 23:52:10.683550 2026] [:error] [pid 3212:tid 3235] [client 20.203.162.164:4489] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pucci.php"] [unique_id "aezjKvg-28TY8_YLtUeFngAAARU"]
[Sat Apr 25 23:52:11.698963 2026] [:error] [pid 3212:tid 3232] [client 20.203.162.164:10823] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pucci.php"] [unique_id "aezjK_g-28TY8_YLtUeFowAAARI"]
[Sat Apr 25 23:52:13.166782 2026] [:error] [pid 59896:tid 59922] [client 20.203.162.164:57723] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pucci.php"] [unique_id "aezjLbLLzhtkd-OXUgAuawAAAFY"]
[Sat Apr 25 23:52:14.907556 2026] [:error] [pid 3212:tid 3224] [client 20.203.162.164:10818] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aezjLvg-28TY8_YLtUeFqwAAAQo"]
[Sat Apr 25 23:52:15.760379 2026] [:error] [pid 59896:tid 59900] [client 20.203.162.164:13131] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aezjL7LLzhtkd-OXUgAudwAAAEA"]
[Sat Apr 25 23:52:16.582291 2026] [:error] [pid 59896:tid 59902] [client 20.203.162.164:36946] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aezjMLLLzhtkd-OXUgAuegAAAEI"]
[Sat Apr 25 23:52:17.955298 2026] [:error] [pid 59985:tid 59996] [client 20.203.162.164:63386] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/details/"] [unique_id "aezjMQF_zDvEhKvyTH7e7wAAAAk"]
[Sat Apr 25 23:52:18.651740 2026] [:error] [pid 59985:tid 60006] [client 20.203.162.164:65441] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aezjMgF_zDvEhKvyTH7e8QAAABM"]
[Sat Apr 25 23:52:19.351562 2026] [:error] [pid 59896:tid 59920] [client 20.203.162.164:4469] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aezjM7LLzhtkd-OXUgAuhAAAAFQ"]
[Sat Apr 25 23:52:20.071634 2026] [:error] [pid 59985:tid 59992] [client 20.203.162.164:42516] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aezjNAF_zDvEhKvyTH7e9QAAAAU"]
[Sat Apr 25 23:52:21.052651 2026] [:error] [pid 59896:tid 59907] [client 20.203.162.164:65413] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "aezjNbLLzhtkd-OXUgAuiQAAAEc"]
[Sat Apr 25 23:52:22.518841 2026] [:error] [pid 3212:tid 3237] [client 20.203.162.164:23602] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezjNvg-28TY8_YLtUeF0gAAARc"]
[Sat Apr 25 23:52:25.012809 2026] [:error] [pid 59897:tid 59930] [client 20.203.162.164:42505] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezjOfBrrkdzpEbmK4epdgAAAIM"]
[Sat Apr 25 23:52:26.874938 2026] [:error] [pid 59897:tid 59951] [client 20.203.162.164:47538] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezjOvBrrkdzpEbmK4epeQAAAJg"]
[Sat Apr 25 23:52:28.467149 2026] [:error] [pid 59898:tid 59965] [client 20.203.162.164:42545] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aezjPB-4vImxb0kbdzfJhgAAAMs"]
[Sat Apr 25 23:52:30.349022 2026] [:error] [pid 3212:tid 3217] [client 20.203.162.164:42497] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aezjPvg-28TY8_YLtUeGAAAAAQM"]
[Sat Apr 25 23:52:33.171348 2026] [:error] [pid 3212:tid 3226] [client 20.203.162.164:32958] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aezjQfg-28TY8_YLtUeGFQAAAQw"]
[Sat Apr 25 23:52:34.804824 2026] [:error] [pid 3212:tid 3230] [client 20.203.162.164:23575] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aezjQvg-28TY8_YLtUeGIwAAARA"]
[Sat Apr 25 23:52:36.007371 2026] [:error] [pid 59896:tid 59913] [client 20.203.162.164:11188] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.tmb/"] [unique_id "aezjRLLLzhtkd-OXUgAunQAAAE0"]
[Sat Apr 25 23:52:37.428677 2026] [:error] [pid 3212:tid 3214] [client 20.203.162.164:20446] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/one.php"] [unique_id "aezjRfg-28TY8_YLtUeGOgAAAQA"]
[Sat Apr 25 23:52:46.606703 2026] [:error] [pid 59896:tid 59907] [client 20.203.162.164:53971] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Sat Apr 25 23:52:46.881516 2026] [:error] [pid 59896:tid 59912] [client 20.203.162.164:53971] File does not exist: /usr/local/apache/htdocs/suspended-page/no20.php
[Sat Apr 25 23:52:47.151960 2026] [:error] [pid 59896:tid 59918] [client 20.203.162.164:53971] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-alone.php
[Sat Apr 25 23:52:47.670780 2026] [:error] [pid 59896:tid 59922] [client 20.203.162.164:53971] File does not exist: /usr/local/apache/htdocs/suspended-page/yasnu.php
[Sat Apr 25 23:52:47.940514 2026] [:error] [pid 59896:tid 59909] [client 20.203.162.164:53971] File does not exist: /usr/local/apache/htdocs/suspended-page/sl.php
[Sat Apr 25 23:52:48.212881 2026] [:error] [pid 59896:tid 59923] [client 20.203.162.164:53971] File does not exist: /usr/local/apache/htdocs/suspended-page/vuln.php
[Sat Apr 25 23:52:48.488358 2026] [:error] [pid 59896:tid 59914] [client 20.203.162.164:53971] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-temp.php
[Sat Apr 25 23:52:49.481204 2026] [:error] [pid 59896:tid 59901] [client 20.203.162.164:53971] File does not exist: /usr/local/apache/htdocs/suspended-page/class-bda.php
[Sat Apr 25 23:52:49.751325 2026] [:error] [pid 59896:tid 59910] [client 20.203.162.164:53971] File does not exist: /usr/local/apache/htdocs/suspended-page/bhm.php
[Sat Apr 25 23:52:50.037573 2026] [:error] [pid 59896:tid 59904] [client 20.203.162.164:53971] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aezjUrLLzhtkd-OXUgAuvAAAAEQ"]
[Sat Apr 25 23:52:52.620812 2026] [:error] [pid 59897:tid 59931] [client 20.203.162.164:4471] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aezjVPBrrkdzpEbmK4epkgAAAIQ"]
[Sat Apr 25 23:52:55.818707 2026] [:error] [pid 59985:tid 60005] [client 20.203.162.164:11151] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aezjVwF_zDvEhKvyTH7fUAAAABI"]
[Sat Apr 25 23:52:56.747853 2026] [:error] [pid 3212:tid 3230] [client 20.203.162.164:24274] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "aezjWPg-28TY8_YLtUeGlwAAARA"]
[Sat Apr 25 23:52:58.238024 2026] [:error] [pid 59896:tid 59924] [client 20.203.162.164:34167] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aezjWrLLzhtkd-OXUgAuxwAAAFg"]
[Sat Apr 25 23:52:59.112399 2026] [:error] [pid 59896:tid 59922] [client 20.203.162.164:11701] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aezjW7LLzhtkd-OXUgAuywAAAFY"]
[Sat Apr 25 23:53:00.406720 2026] [:error] [pid 59896:tid 59908] [client 20.203.162.164:24849] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aezjXLLLzhtkd-OXUgAu0QAAAEg"]
[Sat Apr 25 23:53:01.781112 2026] [:error] [pid 3212:tid 3227] [client 20.203.162.164:34126] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ref.php"] [unique_id "aezjXfg-28TY8_YLtUeGnAAAAQ0"]
[Sat Apr 25 23:53:03.355214 2026] [:error] [pid 59985:tid 59993] [client 20.203.162.164:34238] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aezjXwF_zDvEhKvyTH7fbwAAAAY"]
[Sat Apr 25 23:53:03.940100 2026] [:error] [pid 59897:tid 59933] [client 20.203.162.164:4122] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aezjX_BrrkdzpEbmK4epnAAAAIY"]
[Sat Apr 25 23:53:04.634510 2026] [:error] [pid 59985:tid 59988] [client 20.203.162.164:34987] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aezjYAF_zDvEhKvyTH7fdgAAAAE"]
[Sat Apr 25 23:53:06.580090 2026] [:error] [pid 59896:tid 59904] [client 20.203.162.164:41321] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xme.php"] [unique_id "aezjYrLLzhtkd-OXUgAu4QAAAEQ"]
[Sat Apr 25 23:53:09.053619 2026] [:error] [pid 3212:tid 3220] [client 20.203.162.164:41336] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aezjZfg-28TY8_YLtUeGrAAAAQY"]
[Sat Apr 25 23:53:09.747137 2026] [:error] [pid 3212:tid 3226] [client 20.203.162.164:56049] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aezjZfg-28TY8_YLtUeGswAAAQw"]
[Sat Apr 25 23:53:11.091486 2026] [:error] [pid 59897:tid 59935] [client 20.203.162.164:43194] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aezjZ_BrrkdzpEbmK4eppgAAAIg"]
[Sat Apr 25 23:53:12.430887 2026] [:error] [pid 59896:tid 59918] [client 20.203.162.164:43193] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminer.php"] [unique_id "aezjaLLLzhtkd-OXUgAu5gAAAFI"]
[Sat Apr 25 23:53:13.803532 2026] [:error] [pid 3212:tid 3223] [client 20.203.162.164:52815] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aezjafg-28TY8_YLtUeGxAAAAQk"]
[Sat Apr 25 23:53:14.838257 2026] [:error] [pid 59897:tid 59931] [client 20.203.162.164:4109] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aezjavBrrkdzpEbmK4eprQAAAIQ"]
[Sat Apr 25 23:53:15.620261 2026] [:error] [pid 59898:tid 59970] [client 20.203.162.164:34226] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aezjax-4vImxb0kbdzfJqgAAANA"]
[Sat Apr 25 23:53:18.143907 2026] [:error] [pid 3212:tid 3215] [client 20.203.162.164:61671] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ktfow.php"] [unique_id "aezjbvg-28TY8_YLtUeG2gAAAQE"]
[Sat Apr 25 23:53:19.455652 2026] [:error] [pid 59896:tid 59911] [client 20.203.162.164:44946] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aezjb7LLzhtkd-OXUgAu8QAAAEs"]
[Sat Apr 25 23:53:22.506575 2026] [:error] [pid 59897:tid 59936] [client 20.203.162.164:43196] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aezjcvBrrkdzpEbmK4epvgAAAIk"]
[Sat Apr 25 23:53:24.707295 2026] [:error] [pid 59898:tid 59967] [client 20.203.162.164:56045] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aezjdB-4vImxb0kbdzfJtwAAAM0"]
[Sat Apr 25 23:53:26.267335 2026] [:error] [pid 59985:tid 60003] [client 20.203.162.164:22389] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mode.php"] [unique_id "aezjdgF_zDvEhKvyTH7fmQAAABA"]
[Sat Apr 25 23:53:27.070985 2026] [:error] [pid 3212:tid 3226] [client 20.203.162.164:24895] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aezjd_g-28TY8_YLtUeG6QAAAQw"]
[Sat Apr 25 23:53:28.551580 2026] [:error] [pid 59985:tid 60002] [client 20.203.162.164:19136] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aezjeAF_zDvEhKvyTH7fnAAAAA8"]
[Sat Apr 25 23:53:29.787318 2026] [:error] [pid 59985:tid 60010] [client 20.203.162.164:22357] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aezjeQF_zDvEhKvyTH7fogAAABc"]
[Sat Apr 25 23:53:30.683511 2026] [:error] [pid 3212:tid 3222] [client 20.203.162.164:49661] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2468.php"] [unique_id "aezjevg-28TY8_YLtUeG9AAAAQg"]
[Sat Apr 25 23:53:33.098669 2026] [:error] [pid 59985:tid 59992] [client 20.203.162.164:61658] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezjfQF_zDvEhKvyTH7fqAAAAAU"]
[Sat Apr 25 23:53:33.766365 2026] [:error] [pid 3212:tid 3232] [client 20.203.162.164:34192] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezjffg-28TY8_YLtUeG_wAAARI"]
[Sat Apr 25 23:53:35.075692 2026] [:error] [pid 59898:tid 59961] [client 20.203.162.164:22341] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezjfx-4vImxb0kbdzfJvgAAAMc"]
[Sat Apr 25 23:53:36.136522 2026] [:error] [pid 59896:tid 59917] [client 20.203.162.164:22369] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aezjgLLLzhtkd-OXUgAvAAAAAFE"]
[Sat Apr 25 23:53:37.997674 2026] [:error] [pid 59985:tid 60005] [client 20.203.162.164:44443] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aezjgQF_zDvEhKvyTH7frQAAABI"]
[Sat Apr 25 23:53:38.892436 2026] [:error] [pid 3212:tid 3238] [client 20.203.162.164:49640] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aezjgvg-28TY8_YLtUeHEgAAARg"]
[Sat Apr 25 23:53:42.823025 2026] [:error] [pid 3212:tid 3235] [client 20.203.162.164:63023] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aezjhvg-28TY8_YLtUeHIgAAARU"]
[Sat Apr 25 23:53:43.727045 2026] [:error] [pid 3212:tid 3214] [client 20.203.162.164:44947] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dx.php"] [unique_id "aezjh_g-28TY8_YLtUeHKAAAAQA"]
[Sat Apr 25 23:53:44.951946 2026] [:error] [pid 3212:tid 3224] [client 20.203.162.164:40633] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aezjiPg-28TY8_YLtUeHMAAAAQo"]
[Sat Apr 25 23:53:47.145909 2026] [:error] [pid 59985:tid 59990] [client 20.203.162.164:61695] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aezjiwF_zDvEhKvyTH7ftgAAAAM"]
[Sat Apr 25 23:53:47.883686 2026] [:error] [pid 59896:tid 59909] [client 20.203.162.164:63740] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amdin.php"] [unique_id "aezji7LLzhtkd-OXUgAvDAAAAEk"]
[Sat Apr 25 23:53:49.437496 2026] [:error] [pid 59896:tid 59917] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/amdin.php
[Sat Apr 25 23:53:49.707817 2026] [:error] [pid 59896:tid 59906] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/huya.php
[Sat Apr 25 23:53:50.043130 2026] [:error] [pid 59896:tid 59918] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/puc.php
[Sat Apr 25 23:53:50.314462 2026] [:error] [pid 59896:tid 59923] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat Apr 25 23:53:50.734981 2026] [:error] [pid 59896:tid 59904] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/ewp.php
[Sat Apr 25 23:53:51.003689 2026] [:error] [pid 59896:tid 59914] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Sat Apr 25 23:53:51.278533 2026] [:error] [pid 59896:tid 59915] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Sat Apr 25 23:53:51.670112 2026] [:error] [pid 59896:tid 59900] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/xff.php
[Sat Apr 25 23:53:51.939693 2026] [:error] [pid 59896:tid 59920] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Sat Apr 25 23:53:52.327710 2026] [:error] [pid 59896:tid 59916] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Sat Apr 25 23:53:52.597405 2026] [:error] [pid 59896:tid 59908] [client 20.203.162.164:36208] File does not exist: /usr/local/apache/htdocs/suspended-page/popo.php
[Sat Apr 25 23:53:54.271550 2026] [:error] [pid 59896:tid 59908] [client 20.203.162.164:36208] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aezjkrLLzhtkd-OXUgAvHwAAAEg"]
[Sat Apr 25 23:53:55.543774 2026] [:error] [pid 3212:tid 3234] [client 20.203.162.164:51727] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aezjk_g-28TY8_YLtUeHSQAAARQ"]
[Sat Apr 25 23:53:57.786753 2026] [:error] [pid 59896:tid 59905] [client 20.203.162.164:33181] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aezjlbLLzhtkd-OXUgAvJgAAAEU"]
[Sat Apr 25 23:54:00.010993 2026] [:error] [pid 59897:tid 59934] [client 20.203.162.164:4864] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/13.php"] [unique_id "aezjmPBrrkdzpEbmK4ep4AAAAIc"]
[Sat Apr 25 23:54:01.493351 2026] [:error] [pid 59898:tid 59959] [client 20.203.162.164:33186] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aezjmR-4vImxb0kbdzfJ1QAAAMU"]
[Sat Apr 25 23:54:03.226222 2026] [:error] [pid 59896:tid 59917] [client 20.203.162.164:14908] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aezjm7LLzhtkd-OXUgAvMQAAAFE"]
[Sat Apr 25 23:54:04.199926 2026] [:error] [pid 59896:tid 59904] [client 20.203.162.164:61674] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aezjnLLLzhtkd-OXUgAvNgAAAEQ"]
[Sat Apr 25 23:54:05.596058 2026] [:error] [pid 3212:tid 3219] [client 20.203.162.164:15980] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "aezjnfg-28TY8_YLtUeHVQAAAQU"]
[Sat Apr 25 23:54:06.971851 2026] [:error] [pid 59897:tid 59928] [client 20.203.162.164:46864] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aezjnvBrrkdzpEbmK4ep5AAAAIE"]
[Sat Apr 25 23:54:08.783611 2026] [:error] [pid 59896:tid 59904] [client 20.203.162.164:16502] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aezjoLLLzhtkd-OXUgAvRQAAAEQ"]
[Sat Apr 25 23:54:10.311794 2026] [:error] [pid 59897:tid 59948] [client 20.203.162.164:5117] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aezjovBrrkdzpEbmK4ep5wAAAJU"]
[Sat Apr 25 23:54:12.159654 2026] [:error] [pid 3212:tid 3219] [client 20.203.162.164:22359] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/p.php"] [unique_id "aezjpPg-28TY8_YLtUeHYgAAAQU"]
[Sat Apr 25 23:54:13.294344 2026] [:error] [pid 59985:tid 59988] [client 20.203.162.164:4338] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aezjpQF_zDvEhKvyTH7f7QAAAAE"]
[Sat Apr 25 23:54:14.304004 2026] [:error] [pid 59985:tid 60005] [client 20.203.162.164:56558] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aezjpgF_zDvEhKvyTH7f8AAAABI"]
[Sat Apr 25 23:54:16.062805 2026] [:error] [pid 59896:tid 59906] [client 20.203.162.164:4314] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aezjqLLLzhtkd-OXUgAvXAAAAEY"]
[Sat Apr 25 23:54:17.183500 2026] [:error] [pid 59985:tid 60003] [client 20.203.162.164:9813] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aezjqQF_zDvEhKvyTH7f9QAAABA"]
[Sat Apr 25 23:54:18.366200 2026] [:error] [pid 59985:tid 60004] [client 20.203.162.164:56561] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aezjqgF_zDvEhKvyTH7f-wAAABE"]
[Sat Apr 25 23:54:20.511528 2026] [:error] [pid 59896:tid 59923] [client 20.203.162.164:56568] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aezjrLLLzhtkd-OXUgAvcwAAAFc"]
[Sat Apr 25 23:54:21.245732 2026] [:error] [pid 3212:tid 3229] [client 20.203.162.164:60883] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aezjrfg-28TY8_YLtUeHewAAAQ8"]
[Sat Apr 25 23:54:28.873302 2026] [:error] [pid 59897:tid 59951] [client 20.203.162.164:57216] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "aezjtPBrrkdzpEbmK4ep_wAAAJg"]
[Sat Apr 25 23:54:34.419720 2026] [:error] [pid 59985:tid 60010] [client 20.203.162.164:9848] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aezjugF_zDvEhKvyTH7gFAAAABc"]
[Sat Apr 25 23:54:35.176908 2026] [:error] [pid 59896:tid 59917] [client 20.203.162.164:9846] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aezju7LLzhtkd-OXUgAvrwAAAFE"]
[Sat Apr 25 23:54:35.864747 2026] [:error] [pid 59985:tid 60003] [client 20.203.162.164:4393] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aezjuwF_zDvEhKvyTH7gHAAAABA"]
[Sat Apr 25 23:54:36.906462 2026] [:error] [pid 3212:tid 3219] [client 20.203.162.164:41278] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "aezjvPg-28TY8_YLtUeHswAAAQU"]
[Sat Apr 25 23:54:37.707829 2026] [:error] [pid 59896:tid 59919] [client 20.203.162.164:55490] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aezjvbLLzhtkd-OXUgAvuwAAAFM"]
[Sat Apr 25 23:54:38.908297 2026] [:error] [pid 3212:tid 3237] [client 20.203.162.164:43863] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aezjvvg-28TY8_YLtUeHvwAAARc"]
[Sat Apr 25 23:54:40.808505 2026] [:error] [pid 59985:tid 60006] [client 20.203.162.164:4328] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aezjwAF_zDvEhKvyTH7gKAAAABM"]
[Sat Apr 25 23:54:42.007097 2026] [:error] [pid 3212:tid 3238] [client 20.203.162.164:43871] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seo.php"] [unique_id "aezjwvg-28TY8_YLtUeHzAAAARg"]
[Sat Apr 25 23:54:45.049684 2026] [:error] [pid 3212:tid 3222] [client 20.203.162.164:4407] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aezjxfg-28TY8_YLtUeH3AAAAQg"]
[Sat Apr 25 23:54:47.373688 2026] [:error] [pid 59897:tid 59935] [client 20.203.162.164:4290] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aezjx_BrrkdzpEbmK4eqMQAAAIg"]
[Sat Apr 25 23:54:48.516127 2026] [:error] [pid 3212:tid 3232] [client 20.203.162.164:43738] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aezjyPg-28TY8_YLtUeH6AAAARI"]
[Sat Apr 25 23:54:50.562268 2026] [:error] [pid 59897:tid 59936] [client 20.203.162.164:9756] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "aezjyvBrrkdzpEbmK4eqQwAAAIk"]
[Sat Apr 25 23:54:51.629302 2026] [:error] [pid 59896:tid 59918] [client 20.203.162.164:38141] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "aezjy7LLzhtkd-OXUgAv9QAAAFI"]
[Sat Apr 25 23:54:52.612216 2026] [:error] [pid 3212:tid 3220] [client 20.203.162.164:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat Apr 25 23:54:52.901185 2026] [:error] [pid 3212:tid 3238] [client 20.203.162.164:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Sat Apr 25 23:54:53.331189 2026] [:error] [pid 3212:tid 3235] [client 20.203.162.164:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Sat Apr 25 23:54:53.660151 2026] [:error] [pid 3212:tid 3231] [client 20.203.162.164:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/3.php
[Sat Apr 25 23:54:54.182999 2026] [:error] [pid 3212:tid 3237] [client 20.203.162.164:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/4.php
[Sat Apr 25 23:54:54.458778 2026] [:error] [pid 3212:tid 3215] [client 20.203.162.164:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/5.php
[Sat Apr 25 23:54:54.737482 2026] [:error] [pid 3212:tid 3222] [client 20.203.162.164:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/6.php
[Sat Apr 25 23:54:54.977564 2026] [:error] [pid 3212:tid 3232] [client 20.203.162.164:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/9.php
[Sat Apr 25 23:54:55.848524 2026] [:error] [pid 3212:tid 3231] [client 20.203.162.164:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Sat Apr 25 23:54:56.119180 2026] [:error] [pid 3212:tid 3223] [client 20.203.162.164:43759] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sat Apr 25 23:54:56.647568 2026] [:error] [pid 3212:tid 3218] [client 20.203.162.164:43759] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aezj0Pg-28TY8_YLtUeIEwAAAQQ"]
[Sat Apr 25 23:54:57.866536 2026] [:error] [pid 59896:tid 59912] [client 20.203.162.164:43860] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aezj0bLLzhtkd-OXUgAwBAAAAEw"]
[Sat Apr 25 23:54:59.363632 2026] [:error] [pid 59896:tid 59913] [client 20.203.162.164:4729] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aezj07LLzhtkd-OXUgAwCwAAAE0"]
[Sat Apr 25 23:55:01.571066 2026] [:error] [pid 3212:tid 3233] [client 20.203.162.164:19721] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2026w.php"] [unique_id "aezj1fg-28TY8_YLtUeIIwAAARM"]
[Sat Apr 25 23:55:04.013112 2026] [:error] [pid 59985:tid 59988] [client 20.203.162.164:18023] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aezj2AF_zDvEhKvyTH7gRgAAAAE"]
[Sat Apr 25 23:55:04.666969 2026] [:error] [pid 59898:tid 59970] [client 20.203.162.164:4699] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aezj2B-4vImxb0kbdzfKAQAAANA"]
[Sat Apr 25 23:55:09.963222 2026] [:error] [pid 59896:tid 59912] [client 20.203.162.164:36282] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwpg.php"] [unique_id "aezj3bLLzhtkd-OXUgAwHgAAAEw"]
[Sat Apr 25 23:55:25.244366 2026] [:error] [pid 59896:tid 59914] [client 20.203.162.164:38426] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aezj7bLLzhtkd-OXUgAwOwAAAE4"]
[Sat Apr 25 23:55:28.226602 2026] [:error] [pid 59897:tid 59929] [client 20.203.162.164:42766] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aezj8PBrrkdzpEbmK4eqZgAAAII"]
[Sat Apr 25 23:55:29.880849 2026] [:error] [pid 3212:tid 3228] [client 20.203.162.164:38402] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aezj8fg-28TY8_YLtUeIaAAAAQ4"]
[Sat Apr 25 23:55:30.726546 2026] [:error] [pid 3212:tid 3214] [client 20.203.162.164:11260] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ass.php"] [unique_id "aezj8vg-28TY8_YLtUeIbQAAAQA"]
[Sat Apr 25 23:55:32.448269 2026] [:error] [pid 59985:tid 59999] [client 20.203.162.164:42813] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aezj9AF_zDvEhKvyTH7gfwAAAAw"]
[Sat Apr 25 23:55:34.182552 2026] [:error] [pid 59985:tid 60001] [client 20.203.162.164:36208] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aezj9gF_zDvEhKvyTH7ghAAAAA4"]
[Sat Apr 25 23:55:35.201481 2026] [:error] [pid 59896:tid 59914] [client 20.203.162.164:11260] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aezj97LLzhtkd-OXUgAwRwAAAE4"]
[Sat Apr 25 23:55:36.089409 2026] [:error] [pid 59896:tid 59915] [client 20.203.162.164:44807] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "aezj-LLLzhtkd-OXUgAwSwAAAE8"]
[Sat Apr 25 23:55:37.045640 2026] [:error] [pid 59897:tid 59938] [client 20.203.162.164:54934] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aezj-fBrrkdzpEbmK4eqZwAAAIs"]
[Sat Apr 25 23:55:39.290830 2026] [:error] [pid 59898:tid 59964] [client 20.203.162.164:33788] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aezj-x-4vImxb0kbdzfKHgAAAMo"]
[Sat Apr 25 23:55:40.056671 2026] [:error] [pid 59896:tid 59906] [client 20.203.162.164:29354] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aezj_LLLzhtkd-OXUgAwUAAAAEY"]
[Sat Apr 25 23:55:41.066194 2026] [:error] [pid 59985:tid 59998] [client 20.203.162.164:12725] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/no18.php"] [unique_id "aezj_QF_zDvEhKvyTH7glAAAAAs"]
[Sat Apr 25 23:55:42.524301 2026] [:error] [pid 3212:tid 3218] [client 20.203.162.164:32978] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aezj_vg-28TY8_YLtUeIiwAAAQQ"]
[Sat Apr 25 23:55:43.884071 2026] [:error] [pid 3212:tid 3227] [client 20.203.162.164:35040] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aezj__g-28TY8_YLtUeIjwAAAQ0"]
[Sat Apr 25 23:55:45.046314 2026] [:error] [pid 3212:tid 3233] [client 20.203.162.164:29988] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aezkAfg-28TY8_YLtUeIkgAAARM"]
[Sat Apr 25 23:55:46.621745 2026] [:error] [pid 59898:tid 59957] [client 20.203.162.164:57424] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fine.php"] [unique_id "aezkAh-4vImxb0kbdzfKIgAAAMM"]
[Sat Apr 25 23:55:47.900191 2026] [:error] [pid 59896:tid 59920] [client 20.203.162.164:12717] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aezkA7LLzhtkd-OXUgAwXgAAAFQ"]
[Sat Apr 25 23:55:49.202860 2026] [:error] [pid 59896:tid 59916] [client 20.203.162.164:15406] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aezkBbLLzhtkd-OXUgAwYQAAAFA"]
[Sat Apr 25 23:55:50.453191 2026] [:error] [pid 3212:tid 3235] [client 20.203.162.164:51813] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aezkBvg-28TY8_YLtUeInwAAARU"]
[Sat Apr 25 23:55:51.658766 2026] [:error] [pid 3212:tid 3237] [client 20.203.162.164:44855] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "aezkB_g-28TY8_YLtUeIowAAARc"]
[Sat Apr 25 23:55:52.507143 2026] [:error] [pid 59897:tid 59939] [client 20.203.162.164:15365] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aezkCPBrrkdzpEbmK4eqcAAAAIw"]
[Sat Apr 25 23:55:54.214914 2026] [:error] [pid 59896:tid 59904] [client 20.203.162.164:12733] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aezkCrLLzhtkd-OXUgAwcgAAAEQ"]
[Sat Apr 25 23:55:55.170354 2026] [:error] [pid 59898:tid 59977] [client 20.203.162.164:57417] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aezkCx-4vImxb0kbdzfKJQAAANc"]
[Sat Apr 25 23:55:55.810717 2026] [:error] [pid 59896:tid 59912] [client 20.203.162.164:64539] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xa.php"] [unique_id "aezkC7LLzhtkd-OXUgAwewAAAEw"]
[Sat Apr 25 23:55:57.364477 2026] [:error] [pid 59898:tid 59954] [client 20.203.162.164:58260] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat Apr 25 23:55:57.634383 2026] [:error] [pid 59898:tid 59958] [client 20.203.162.164:58260] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sat Apr 25 23:55:57.951927 2026] [:error] [pid 59898:tid 59964] [client 20.203.162.164:58260] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sat Apr 25 23:55:58.248066 2026] [:error] [pid 59898:tid 59969] [client 20.203.162.164:58260] File does not exist: /usr/local/apache/htdocs/suspended-page/no1.php
[Sat Apr 25 23:55:58.518347 2026] [:error] [pid 59898:tid 59972] [client 20.203.162.164:58260] File does not exist: /usr/local/apache/htdocs/suspended-page/w2025.php
[Sat Apr 25 23:55:58.820757 2026] [:error] [pid 59898:tid 59967] [client 20.203.162.164:58260] File does not exist: /usr/local/apache/htdocs/suspended-page/fvvff.php
[Sat Apr 25 23:55:59.108669 2026] [:error] [pid 59898:tid 59955] [client 20.203.162.164:58260] File does not exist: /usr/local/apache/htdocs/suspended-page/a2.php
[Sat Apr 25 23:55:59.379828 2026] [:error] [pid 59898:tid 59957] [client 20.203.162.164:58260] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat Apr 25 23:55:59.649497 2026] [:error] [pid 59898:tid 59961] [client 20.203.162.164:58260] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat Apr 25 23:56:00.518580 2026] [:error] [pid 59898:tid 59956] [client 20.203.162.164:58260] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sat Apr 25 23:56:00.785519 2026] [:error] [pid 59898:tid 59978] [client 20.203.162.164:58260] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aezkEB-4vImxb0kbdzfKNAAAANg"]
[Sat Apr 25 23:56:02.633446 2026] [:error] [pid 3212:tid 3217] [client 20.203.162.164:57416] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aezkEvg-28TY8_YLtUeIwwAAAQM"]
[Sat Apr 25 23:56:04.802300 2026] [:error] [pid 59896:tid 59914] [client 20.203.162.164:52412] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aezkFLLLzhtkd-OXUgAwlQAAAE4"]
[Sat Apr 25 23:56:07.413687 2026] [:error] [pid 59897:tid 59928] [client 20.203.162.164:40678] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "aezkF_BrrkdzpEbmK4eqfAAAAIE"]
[Sat Apr 25 23:56:08.669514 2026] [:error] [pid 59897:tid 59938] [client 20.203.162.164:54046] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aezkGPBrrkdzpEbmK4eqfQAAAIs"]
[Sat Apr 25 23:56:10.832721 2026] [:error] [pid 3212:tid 3230] [client 20.203.162.164:60465] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aezkGvg-28TY8_YLtUeI2AAAARA"]
[Sat Apr 25 23:56:12.604953 2026] [:error] [pid 3212:tid 3227] [client 20.203.162.164:37154] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aezkHPg-28TY8_YLtUeI5AAAAQ0"]
[Sat Apr 25 23:56:13.902475 2026] [:error] [pid 3212:tid 3222] [client 20.203.162.164:50070] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ol.php"] [unique_id "aezkHfg-28TY8_YLtUeI7QAAAQg"]
[Sat Apr 25 23:56:14.708344 2026] [:error] [pid 3212:tid 3238] [client 20.203.162.164:46348] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aezkHvg-28TY8_YLtUeI8AAAARg"]
[Sat Apr 25 23:56:16.767353 2026] [:error] [pid 59896:tid 59908] [client 20.203.162.164:56119] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aezkILLLzhtkd-OXUgAwtAAAAEg"]
[Sat Apr 25 23:56:19.712602 2026] [:error] [pid 59985:tid 60004] [client 20.203.162.164:56087] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aezkIwF_zDvEhKvyTH7gwgAAABE"]
[Sat Apr 25 23:56:21.278906 2026] [:error] [pid 3212:tid 3222] [client 20.203.162.164:54038] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f6.php"] [unique_id "aezkJfg-28TY8_YLtUeJBgAAAQg"]
[Sat Apr 25 23:56:23.605960 2026] [:error] [pid 3212:tid 3222] [client 20.203.162.164:4699] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aezkJ_g-28TY8_YLtUeJDgAAAQg"]
[Sat Apr 25 23:56:25.448308 2026] [:error] [pid 3212:tid 3234] [client 20.203.162.164:50769] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aezkKfg-28TY8_YLtUeJFAAAARQ"]
[Sat Apr 25 23:56:26.389290 2026] [:error] [pid 3212:tid 3219] [client 20.203.162.164:53315] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aezkKvg-28TY8_YLtUeJGQAAAQU"]
[Sat Apr 25 23:56:27.575991 2026] [:error] [pid 59896:tid 59916] [client 20.203.162.164:56094] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "aezkK7LLzhtkd-OXUgAw0QAAAFA"]
[Sat Apr 25 23:56:28.373471 2026] [:error] [pid 59896:tid 59907] [client 20.203.162.164:12267] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aezkLLLLzhtkd-OXUgAw0gAAAEc"]
[Sat Apr 25 23:56:29.563727 2026] [:error] [pid 3212:tid 3221] [client 20.203.162.164:52610] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aezkLfg-28TY8_YLtUeJIgAAAQc"]
[Sat Apr 25 23:56:30.389963 2026] [:error] [pid 59985:tid 60004] [client 20.203.162.164:60621] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aezkLgF_zDvEhKvyTH7gzwAAABE"]
[Sat Apr 25 23:56:31.280426 2026] [:error] [pid 59896:tid 59917] [client 20.203.162.164:14941] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "aezkL7LLzhtkd-OXUgAw2gAAAFE"]
[Sat Apr 25 23:56:32.353029 2026] [:error] [pid 59897:tid 59942] [client 20.203.162.164:53311] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aezkMPBrrkdzpEbmK4eqoAAAAI8"]
[Sat Apr 25 23:56:33.523444 2026] [:error] [pid 59985:tid 60002] [client 20.203.162.164:53297] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aezkMQF_zDvEhKvyTH7g1AAAAA8"]
[Sat Apr 25 23:56:34.475006 2026] [:error] [pid 59896:tid 59912] [client 20.203.162.164:52732] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aezkMrLLzhtkd-OXUgAw3gAAAEw"]
[Sat Apr 25 23:56:35.872983 2026] [:error] [pid 59985:tid 60007] [client 20.203.162.164:20388] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "aezkMwF_zDvEhKvyTH7g2QAAABQ"]
[Sat Apr 25 23:56:37.225346 2026] [:error] [pid 3212:tid 3231] [client 20.203.162.164:39392] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezkNfg-28TY8_YLtUeJNwAAARE"]
[Sat Apr 25 23:56:38.175899 2026] [:error] [pid 3212:tid 3226] [client 20.203.162.164:16974] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezkNvg-28TY8_YLtUeJPQAAAQw"]
[Sat Apr 25 23:56:39.046151 2026] [:error] [pid 59896:tid 59902] [client 20.203.162.164:39411] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezkN7LLzhtkd-OXUgAw5gAAAEI"]
[Sat Apr 25 23:56:42.461217 2026] [:error] [pid 59897:tid 59938] [client 20.203.162.164:36315] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aezkOvBrrkdzpEbmK4eqpgAAAIs"]
[Sat Apr 25 23:56:43.552657 2026] [:error] [pid 59985:tid 59989] [client 20.203.162.164:52639] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aezkOwF_zDvEhKvyTH7g5gAAAAI"]
[Sat Apr 25 23:56:44.407023 2026] [:error] [pid 59896:tid 59924] [client 20.203.162.164:37551] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aezkPLLLzhtkd-OXUgAw9QAAAFg"]
[Sat Apr 25 23:56:45.477315 2026] [:error] [pid 3212:tid 3218] [client 20.203.162.164:12281] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aezkPfg-28TY8_YLtUeJUAAAAQQ"]
[Sat Apr 25 23:56:46.454141 2026] [:error] [pid 3212:tid 3236] [client 20.203.162.164:53320] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "aezkPvg-28TY8_YLtUeJUgAAARY"]
[Sat Apr 25 23:56:48.450180 2026] [:error] [pid 3212:tid 3222] [client 20.203.162.164:39560] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aezkQPg-28TY8_YLtUeJWgAAAQg"]
[Sat Apr 25 23:56:49.764016 2026] [:error] [pid 59896:tid 59917] [client 20.203.162.164:36338] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aezkQbLLzhtkd-OXUgAw_gAAAFE"]
[Sat Apr 25 23:56:51.023050 2026] [:error] [pid 3212:tid 3235] [client 20.203.162.164:39367] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aezkQ_g-28TY8_YLtUeJXgAAARU"]
[Sat Apr 25 23:56:52.057119 2026] [:error] [pid 3212:tid 3219] [client 20.203.162.164:27477] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "aezkRPg-28TY8_YLtUeJYQAAAQU"]
[Sat Apr 25 23:56:53.813853 2026] [:error] [pid 3212:tid 3217] [client 20.203.162.164:53360] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezkRfg-28TY8_YLtUeJZwAAAQM"]
[Sat Apr 25 23:56:54.875222 2026] [:error] [pid 3212:tid 3230] [client 20.203.162.164:13659] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezkRvg-28TY8_YLtUeJaQAAARA"]
[Sat Apr 25 23:56:55.863317 2026] [:error] [pid 3212:tid 3224] [client 20.203.162.164:53337] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezkR_g-28TY8_YLtUeJbAAAAQo"]
[Sat Apr 25 23:56:57.102359 2026] [:error] [pid 59896:tid 59918] [client 20.203.162.164:52648] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aezkSbLLzhtkd-OXUgAxCAAAAFI"]
[Sat Apr 25 23:56:58.279182 2026] [:error] [pid 59897:tid 59927] [client 20.203.162.164:14919] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aezkSvBrrkdzpEbmK4eqqgAAAIA"]
[Sat Apr 25 23:56:59.987838 2026] [:error] [pid 59898:tid 59962] [client 20.203.162.164:58935] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "aezkSx-4vImxb0kbdzfKVAAAAMg"]
[Sat Apr 25 23:57:00.903969 2026] [:error] [pid 59897:tid 59940] [client 20.203.162.164:37521] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Sat Apr 25 23:57:01.217178 2026] [:error] [pid 59897:tid 59930] [client 20.203.162.164:37521] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat Apr 25 23:57:02.030918 2026] [:error] [pid 59897:tid 59931] [client 20.203.162.164:37521] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Apr 25 23:57:02.360490 2026] [:error] [pid 59897:tid 59929] [client 20.203.162.164:37521] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Sat Apr 25 23:57:02.690362 2026] [:error] [pid 59897:tid 59928] [client 20.203.162.164:37521] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Sat Apr 25 23:57:02.962888 2026] [:error] [pid 59897:tid 59939] [client 20.203.162.164:37521] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat Apr 25 23:57:03.203618 2026] [:error] [pid 59897:tid 59938] [client 20.203.162.164:37521] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat Apr 25 23:57:03.733077 2026] [:error] [pid 59897:tid 59942] [client 20.203.162.164:37521] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sat Apr 25 23:57:03.978949 2026] [:error] [pid 59897:tid 59946] [client 20.203.162.164:37521] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aezkT_BrrkdzpEbmK4equQAAAJM"]
[Sat Apr 25 23:57:06.489986 2026] [:error] [pid 59896:tid 59905] [client 20.203.162.164:53347] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aezkUrLLzhtkd-OXUgAxFgAAAEU"]
[Sat Apr 25 23:57:07.828066 2026] [:error] [pid 3212:tid 3237] [client 20.203.162.164:53269] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aezkU_g-28TY8_YLtUeJfAAAARc"]
[Sat Apr 25 23:57:08.963900 2026] [:error] [pid 59897:tid 59943] [client 20.203.162.164:14072] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "aezkVPBrrkdzpEbmK4eqvAAAAJA"]
[Sat Apr 25 23:57:10.632906 2026] [:error] [pid 59898:tid 59968] [client 20.203.162.164:53282] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aezkVh-4vImxb0kbdzfKWQAAAM4"]
[Sat Apr 25 23:57:11.279514 2026] [:error] [pid 59896:tid 59921] [client 20.203.162.164:20361] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aezkV7LLzhtkd-OXUgAxHwAAAFU"]
[Sat Apr 25 23:57:11.906029 2026] [:error] [pid 59896:tid 59907] [client 20.203.162.164:53326] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aezkV7LLzhtkd-OXUgAxIAAAAEc"]
[Sat Apr 25 23:57:12.520926 2026] [:error] [pid 59896:tid 59922] [client 20.203.162.164:13963] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "aezkWLLLzhtkd-OXUgAxIgAAAFY"]
[Sat Apr 25 23:57:13.659802 2026] [:error] [pid 59985:tid 60007] [client 20.203.162.164:52679] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aezkWQF_zDvEhKvyTH7g_gAAABQ"]
[Sat Apr 25 23:57:14.486945 2026] [:error] [pid 59897:tid 59947] [client 20.203.162.164:45085] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aezkWvBrrkdzpEbmK4eqwQAAAJQ"]
[Sat Apr 25 23:57:15.536826 2026] [:error] [pid 59898:tid 59958] [client 20.203.162.164:52629] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aezkWx-4vImxb0kbdzfKXQAAAMQ"]
[Sat Apr 25 23:57:16.766050 2026] [:error] [pid 3212:tid 3216] [client 20.203.162.164:43559] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin1.php"] [unique_id "aezkXPg-28TY8_YLtUeJjwAAAQI"]
[Sat Apr 25 23:57:17.819860 2026] [:error] [pid 3212:tid 3218] [client 20.203.162.164:56070] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezkXfg-28TY8_YLtUeJkgAAAQQ"]
[Sat Apr 25 23:57:20.057500 2026] [:error] [pid 59985:tid 60004] [client 20.203.162.164:50794] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezkYAF_zDvEhKvyTH7hAwAAABE"]
[Sat Apr 25 23:57:21.005557 2026] [:error] [pid 59985:tid 60002] [client 20.203.162.164:12248] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezkYQF_zDvEhKvyTH7hBQAAAA8"]
[Sat Apr 25 23:57:22.041652 2026] [:error] [pid 59896:tid 59911] [client 20.203.162.164:50761] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aezkYrLLzhtkd-OXUgAxLwAAAEs"]
[Sat Apr 25 23:57:24.482757 2026] [:error] [pid 3212:tid 3221] [client 20.203.162.164:14003] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "aezkZPg-28TY8_YLtUeJmAAAAQc"]
[Sat Apr 25 23:57:57.152665 2026] [:error] [pid 59897:tid 59933] [client 20.203.162.164:42937] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aezkhfBrrkdzpEbmK4eq9gAAAIY"]
[Sat Apr 25 23:57:57.969151 2026] [:error] [pid 3212:tid 3229] [client 20.203.162.164:33115] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aezkhfg-28TY8_YLtUeJrgAAAQ8"]
[Sat Apr 25 23:57:58.885250 2026] [:error] [pid 59897:tid 59939] [client 20.203.162.164:60883] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aezkhvBrrkdzpEbmK4eq-wAAAIw"]
[Sat Apr 25 23:57:59.814233 2026] [:error] [pid 59897:tid 59946] [client 20.203.162.164:48961] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/"] [unique_id "aezkh_BrrkdzpEbmK4eq_AAAAJM"]
[Sat Apr 25 23:58:02.669834 2026] [:error] [pid 59898:tid 59969] [client 20.203.162.164:37131] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "aezkih-4vImxb0kbdzfKfgAAAM8"]
[Sat Apr 25 23:58:03.996971 2026] [:error] [pid 59985:tid 59995] [client 20.203.162.164:49019] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat Apr 25 23:58:04.545264 2026] [:error] [pid 59985:tid 60008] [client 20.203.162.164:49019] File does not exist: /usr/local/apache/htdocs/suspended-page/fe5.php
[Sat Apr 25 23:58:05.379498 2026] [:error] [pid 59985:tid 59990] [client 20.203.162.164:49019] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Sat Apr 25 23:58:05.821122 2026] [:error] [pid 59985:tid 60009] [client 20.203.162.164:49019] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Sat Apr 25 23:58:06.097853 2026] [:error] [pid 59985:tid 60008] [client 20.203.162.164:49019] File does not exist: /usr/local/apache/htdocs/suspended-page/a1.php
[Sat Apr 25 23:58:06.688067 2026] [:error] [pid 59985:tid 60001] [client 20.203.162.164:49019] [client 20.203.162.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aezkjgF_zDvEhKvyTH7hTQAAAA4"]
[Sat Apr 25 23:58:08.036818 2026] [:error] [pid 59896:tid 59903] [client 20.203.162.164:41868] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Sat Apr 25 23:58:08.899664 2026] [:error] [pid 59896:tid 59908] [client 20.203.162.164:41868] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aezkkLLLzhtkd-OXUgAxZwAAAEg"]
[Sat Apr 25 23:58:11.503730 2026] [:error] [pid 59985:tid 60001] [client 20.203.162.164:26112] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aezkkwF_zDvEhKvyTH7hUAAAAA4"]
[Sat Apr 25 23:58:14.685793 2026] [:error] [pid 59897:tid 59951] [client 20.203.162.164:10877] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aezklvBrrkdzpEbmK4erEwAAAJg"]
[Sat Apr 25 23:58:16.644659 2026] [:error] [pid 59896:tid 59916] [client 20.203.162.164:54742] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "aezkmLLLzhtkd-OXUgAxdwAAAFA"]
[Sat Apr 25 23:58:18.127298 2026] [:error] [pid 59898:tid 59970] [client 20.203.162.164:22330] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aezkmh-4vImxb0kbdzfKkgAAANA"]
[Sat Apr 25 23:58:19.199148 2026] [:error] [pid 59896:tid 59904] [client 20.203.162.164:4497] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aezkm7LLzhtkd-OXUgAxgQAAAEQ"]
[Sat Apr 25 23:58:20.462309 2026] [:error] [pid 59898:tid 59957] [client 20.203.162.164:4647] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aezknB-4vImxb0kbdzfKlAAAAMM"]
[Sat Apr 25 23:58:23.040934 2026] [:error] [pid 3212:tid 3229] [client 20.203.162.164:21751] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "aezkn_g-28TY8_YLtUeJzQAAAQ8"]
[Sat Apr 25 23:58:25.238030 2026] [:error] [pid 3212:tid 3231] [client 20.203.162.164:57697] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aezkofg-28TY8_YLtUeJ1wAAARE"]
[Sat Apr 25 23:58:26.920470 2026] [:error] [pid 59985:tid 60003] [client 20.203.162.164:45794] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aezkogF_zDvEhKvyTH7hZgAAABA"]
[Sat Apr 25 23:58:28.772181 2026] [:error] [pid 3212:tid 3229] [client 20.203.162.164:51795] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aezkpPg-28TY8_YLtUeJ2wAAAQ8"]
[Sat Apr 25 23:58:30.255209 2026] [:error] [pid 3212:tid 3225] [client 20.203.162.164:43197] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/in.php"] [unique_id "aezkpvg-28TY8_YLtUeJ3AAAAQs"]
[Sat Apr 25 23:58:31.156980 2026] [:error] [pid 3212:tid 3214] [client 20.203.162.164:54013] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aezkp_g-28TY8_YLtUeJ4AAAAQA"]
[Sat Apr 25 23:58:33.123750 2026] [:error] [pid 59897:tid 59934] [client 20.203.162.164:46439] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aezkqfBrrkdzpEbmK4erHQAAAIc"]
[Sat Apr 25 23:58:34.724936 2026] [:error] [pid 3212:tid 3224] [client 20.203.162.164:11162] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aezkqvg-28TY8_YLtUeJ6wAAAQo"]
[Sat Apr 25 23:58:37.089784 2026] [:error] [pid 3212:tid 3237] [client 20.203.162.164:51341] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gssdd.php"] [unique_id "aezkrfg-28TY8_YLtUeJ8wAAARc"]
[Sat Apr 25 23:58:38.405178 2026] [:error] [pid 3212:tid 3230] [client 20.203.162.164:24290] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aezkrvg-28TY8_YLtUeJ-gAAARA"]
[Sat Apr 25 23:58:40.620147 2026] [:error] [pid 59985:tid 59991] [client 20.203.162.164:53995] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aezksAF_zDvEhKvyTH7hawAAAAQ"]
[Sat Apr 25 23:58:42.921581 2026] [:error] [pid 3212:tid 3232] [client 20.203.162.164:53963] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aezksvg-28TY8_YLtUeKCAAAARI"]
[Sat Apr 25 23:58:44.139836 2026] [:error] [pid 3212:tid 3222] [client 20.203.162.164:40616] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aezktPg-28TY8_YLtUeKCwAAAQg"]
[Sat Apr 25 23:58:45.631510 2026] [:error] [pid 59985:tid 59996] [client 20.203.162.164:41340] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aezktQF_zDvEhKvyTH7hcAAAAAk"]
[Sat Apr 25 23:58:48.124832 2026] [:error] [pid 3212:tid 3238] [client 20.203.162.164:36964] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aezkuPg-28TY8_YLtUeKEwAAARg"]
[Sat Apr 25 23:58:50.047964 2026] [:error] [pid 59897:tid 59936] [client 20.203.162.164:24307] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aezkuvBrrkdzpEbmK4erJQAAAIk"]
[Sat Apr 25 23:58:53.455945 2026] [:error] [pid 3212:tid 3225] [client 20.203.162.164:41738] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bs1.php"] [unique_id "aezkvfg-28TY8_YLtUeKHAAAAQs"]
[Sat Apr 25 23:58:55.865885 2026] [:error] [pid 59898:tid 59957] [client 20.203.162.164:48843] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezkvx-4vImxb0kbdzfKqAAAAMM"]
[Sat Apr 25 23:58:56.913851 2026] [:error] [pid 59896:tid 59914] [client 20.203.162.164:38810] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezkwLLLzhtkd-OXUgAxrQAAAE4"]
[Sat Apr 25 23:58:58.183802 2026] [:error] [pid 59897:tid 59927] [client 20.203.162.164:38807] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezkwvBrrkdzpEbmK4erKwAAAIA"]
[Sat Apr 25 23:59:00.510712 2026] [:error] [pid 59897:tid 59929] [client 20.203.162.164:52826] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aezkxPBrrkdzpEbmK4erLwAAAII"]
[Sat Apr 25 23:59:03.591445 2026] [:error] [pid 3212:tid 3215] [client 20.203.162.164:50887] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aezkx_g-28TY8_YLtUeKNAAAAQE"]
[Sat Apr 25 23:59:04.409171 2026] [:error] [pid 3212:tid 3214] [client 20.203.162.164:34196] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aezkyPg-28TY8_YLtUeKOQAAAQA"]
[Sat Apr 25 23:59:04.988803 2026] [:error] [pid 59985:tid 59997] [client 20.203.162.164:11705] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aezkyAF_zDvEhKvyTH7hfQAAAAo"]
[Sat Apr 25 23:59:05.924994 2026] [:error] [pid 59897:tid 59932] [client 20.203.162.164:40629] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axx.php"] [unique_id "aezkyfBrrkdzpEbmK4erNQAAAIU"]
[Sat Apr 25 23:59:06.614480 2026] [:error] [pid 59896:tid 59916] [client 20.203.162.164:18462] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aezkyrLLzhtkd-OXUgAxrwAAAFA"]
[Sat Apr 25 23:59:07.795983 2026] [:error] [pid 59897:tid 59930] [client 20.203.162.164:48892] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gettest.php"] [unique_id "aezky_BrrkdzpEbmK4erOQAAAIM"]
[Sat Apr 25 23:59:09.969135 2026] [:error] [pid 59898:tid 59977] [client 20.203.162.164:11682] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sat Apr 25 23:59:10.208718 2026] [:error] [pid 59898:tid 59962] [client 20.203.162.164:11682] File does not exist: /usr/local/apache/htdocs/suspended-page/acp.php
[Sat Apr 25 23:59:11.828025 2026] [:error] [pid 59898:tid 59962] [client 20.203.162.164:11682] File does not exist: /usr/local/apache/htdocs/suspended-page/file48.php
[Sat Apr 25 23:59:12.325850 2026] [:error] [pid 59898:tid 59975] [client 20.203.162.164:11682] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Sat Apr 25 23:59:12.661875 2026] [:error] [pid 59898:tid 59977] [client 20.203.162.164:11682] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Sat Apr 25 23:59:13.036276 2026] [:error] [pid 59898:tid 59958] [client 20.203.162.164:11682] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Sat Apr 25 23:59:13.297655 2026] [:error] [pid 59898:tid 59962] [client 20.203.162.164:11682] File does not exist: /usr/local/apache/htdocs/suspended-page/hypo.php
[Sat Apr 25 23:59:13.538140 2026] [:error] [pid 59898:tid 59976] [client 20.203.162.164:11682] File does not exist: /usr/local/apache/htdocs/suspended-page/file18.php
[Sat Apr 25 23:59:13.780653 2026] [:error] [pid 59898:tid 59957] [client 20.203.162.164:11682] File does not exist: /usr/local/apache/htdocs/suspended-page/xwx1.php
[Sat Apr 25 23:59:14.288128 2026] [:error] [pid 59898:tid 59956] [client 20.203.162.164:11682] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aezk0h-4vImxb0kbdzfKywAAAMI"]
[Sat Apr 25 23:59:17.153379 2026] [:error] [pid 59897:tid 59943] [client 20.203.162.164:65360] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aezk1fBrrkdzpEbmK4erSAAAAJA"]
[Sat Apr 25 23:59:18.414183 2026] [:error] [pid 59985:tid 60000] [client 20.203.162.164:62944] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aezk1gF_zDvEhKvyTH7hhQAAAA0"]
[Sat Apr 25 23:59:19.891856 2026] [:error] [pid 59898:tid 59974] [client 20.203.162.164:25515] [client 20.203.162.164] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "aezk1x-4vImxb0kbdzfK0gAAANQ"]
[Sun Apr 26 04:16:33.747833 2026] [:error] [pid 8491:tid 8524] [client 78.96.80.244:12600] [client 78.96.80.244] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.96.80.244, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ae0hISq7I7e6CJooQM1wxQAAANg"]
[Sun Apr 26 04:16:33.754609 2026] [:error] [pid 8491:tid 8524] [client 78.96.80.244:12600] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun Apr 26 04:59:26.980636 2026] [:error] [pid 8491:tid 8508] [client 212.47.78.126:60675] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "ae0rLiq7I7e6CJooQM19XgAAAMk"]
[Sun Apr 26 04:59:27.540170 2026] [:error] [pid 31273:tid 31337] [client 212.47.78.126:51449] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae0rL_hcNJEGrATcuEeufAAAAUI"]
[Sun Apr 26 04:59:28.110529 2026] [:error] [pid 31273:tid 31335] [client 212.47.78.126:64951] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae0rMPhcNJEGrATcuEeuhQAAAUA"]
[Mon Apr 27 02:51:06.230593 2026] [:error] [pid 8385:tid 8437] [client 4.193.118.98:4743] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Mon Apr 27 02:51:06.320831 2026] [:error] [pid 8385:tid 8439] [client 4.193.118.98:4743] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Mon Apr 27 02:51:06.511900 2026] [:error] [pid 8385:tid 8428] [client 4.193.118.98:4743] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Mon Apr 27 02:51:06.603958 2026] [:error] [pid 8385:tid 8426] [client 4.193.118.98:4743] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon Apr 27 02:51:06.797022 2026] [:error] [pid 8385:tid 8448] [client 4.193.118.98:4743] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon Apr 27 02:51:06.888296 2026] [:error] [pid 8385:tid 8442] [client 4.193.118.98:4743] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Mon Apr 27 02:51:06.979536 2026] [:error] [pid 8385:tid 8447] [client 4.193.118.98:4743] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon Apr 27 02:51:07.251185 2026] [:error] [pid 8385:tid 8427] [client 4.193.118.98:4743] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "ae5emzOy7_J84Wx3-oz8EQAAAEM"]
[Mon Apr 27 02:51:07.648661 2026] [:error] [pid 8390:tid 8456] [client 4.193.118.98:4767] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "ae5em4GPtFK_i9p5yxTPvQAAAIU"]
[Mon Apr 27 02:51:08.001205 2026] [:error] [pid 8390:tid 8465] [client 4.193.118.98:4681] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "ae5enIGPtFK_i9p5yxTPvgAAAI4"]
[Mon Apr 27 02:51:08.376929 2026] [:error] [pid 16515:tid 16537] [client 4.193.118.98:4763] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "ae5enFtDrUmgHSvpuLxxXwAAAlM"]
[Mon Apr 27 03:23:03.802744 2026] [:error] [pid 8383:tid 8411] [client 89.163.146.197:54454] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: www.google.com
[Mon Apr 27 03:23:08.433062 2026] [:error] [pid 22573:tid 22630] [client 89.163.146.197:55894] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php, referer: www.google.com
[Mon Apr 27 08:26:17.501120 2026] [:error] [pid 50951:tid 50969] [client 104.28.152.248:56149] [client 104.28.152.248] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ae6tKV2pquA9BEfFXTgxKQAAAVA"]
[Mon Apr 27 10:26:50.650907 2026] [:error] [pid 6971:tid 7015] [client 157.151.196.46:58240] [client 157.151.196.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.151.196.46, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ae7JarOap7jCIaP4nNPmQwAAAM4"], referer: https://www.facebook.com/
[Mon Apr 27 10:26:50.656054 2026] [:error] [pid 6971:tid 7015] [client 157.151.196.46:58240] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.facebook.com/
[Mon Apr 27 10:26:51.065158 2026] [:error] [pid 6971:tid 7001] [client 157.151.196.46:58475] [client 157.151.196.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.151.196.46, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ae7Ja7Oap7jCIaP4nNPmRAAAAMA"], referer: https://www.google.com/search?q=wordpress
[Mon Apr 27 10:26:51.069383 2026] [:error] [pid 6971:tid 7001] [client 157.151.196.46:58475] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://www.google.com/search?q=wordpress
[Mon Apr 27 13:21:29.770437 2026] [:error] [pid 62510:tid 62563] [client 4.193.118.98:5209] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Mon Apr 27 13:21:30.147027 2026] [:error] [pid 62510:tid 62556] [client 4.193.118.98:5209] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Mon Apr 27 13:21:30.327017 2026] [:error] [pid 62510:tid 62568] [client 4.193.118.98:5209] File does not exist: /usr/local/apache/htdocs/suspended-page/0.php
[Mon Apr 27 13:21:30.418010 2026] [:error] [pid 62510:tid 62545] [client 4.193.118.98:5209] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Mon Apr 27 13:21:30.509143 2026] [:error] [pid 62510:tid 62554] [client 4.193.118.98:5209] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Mon Apr 27 13:21:30.610744 2026] [:error] [pid 62510:tid 62558] [client 4.193.118.98:5209] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/120f9.php"] [unique_id "ae7yWoCpoM1jGOxUMpvybAAAAM0"]
[Mon Apr 27 13:21:31.009394 2026] [:error] [pid 62511:tid 62587] [client 4.193.118.98:5220] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/120f9.php"] [unique_id "ae7yW7BjE-jhU4FY4HhrqAAAAU0"]
[Mon Apr 27 13:21:31.422808 2026] [:error] [pid 62607:tid 62609] [client 4.193.118.98:4800] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/120f9.php"] [unique_id "ae7yW4Xk80_zcPo33vefxwAAAEA"]
[Mon Apr 27 13:21:31.851678 2026] [:error] [pid 62511:tid 62575] [client 4.193.118.98:5245] [client 4.193.118.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/120f9.php"] [unique_id "ae7yW7BjE-jhU4FY4HhrqgAAAUE"]
[Mon Apr 27 13:51:51.904362 2026] [:error] [pid 62510:tid 62560] [client 34.55.86.97:56989] [client 34.55.86.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae75d4CpoM1jGOxUMpv3dgAAAM8"]
[Mon Apr 27 22:13:31.543479 2026] [:error] [pid 13523:tid 13527] [client 95.102.0.214:64449] [client 95.102.0.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.102.0.214, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ae9vC-eav51IXKv1ebEH2wAAAII"]
[Mon Apr 27 22:13:31.548191 2026] [:error] [pid 13523:tid 13527] [client 95.102.0.214:64449] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue Apr 28 10:37:56.035645 2026] [:error] [pid 33864:tid 33880] [client 20.100.183.137:7203] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue Apr 28 10:37:56.400917 2026] [:error] [pid 33864:tid 33885] [client 20.100.183.137:7203] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue Apr 28 10:37:56.947196 2026] [:error] [pid 33864:tid 33876] [client 20.100.183.137:7203] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue Apr 28 10:37:57.209367 2026] [:error] [pid 33864:tid 33884] [client 20.100.183.137:7203] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue Apr 28 10:37:59.066086 2026] [:error] [pid 33864:tid 33873] [client 20.100.183.137:7203] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue Apr 28 10:37:59.328635 2026] [:error] [pid 33864:tid 33889] [client 20.100.183.137:7203] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue Apr 28 10:37:59.593297 2026] [:error] [pid 33864:tid 33874] [client 20.100.183.137:7203] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue Apr 28 10:38:00.381014 2026] [:error] [pid 33864:tid 33875] [client 20.100.183.137:7203] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "afAdiDXchLGZ4QggCsm2EwAAAIk"]
[Tue Apr 28 10:38:01.459133 2026] [:error] [pid 50889:tid 50900] [client 20.100.183.137:8406] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "afAdiYzszBr00txEzGi4-AAAAAg"]
[Tue Apr 28 10:38:02.552024 2026] [:error] [pid 33777:tid 33842] [client 20.100.183.137:8441] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "afAdirXUCFWqmordGGL3NQAAAQc"]
[Tue Apr 28 10:38:03.597071 2026] [:error] [pid 33864:tid 33866] [client 20.100.183.137:24048] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "afAdizXchLGZ4QggCsm2FwAAAIA"]
[Tue Apr 28 17:08:37.559431 2026] [:error] [pid 33775:tid 33782] [client 114.122.101.177:49989] [client 114.122.101.177] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.122.101.177, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afB5FZsYOcoQrq88YbUYmwAAAMM"]
[Tue Apr 28 17:08:37.706002 2026] [:error] [pid 33775:tid 33782] [client 114.122.101.177:49989] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 29 00:20:38.533718 2026] [:error] [pid 33777:tid 33855] [client 104.28.156.218:21092] [client 104.28.156.218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "afDeVrXUCFWqmordGGI5MQAAARQ"]
[Wed Apr 29 07:13:30.446785 2026] [:error] [pid 56863:tid 56888] [client 176.120.22.46:49454] [client 176.120.22.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.120.22.46, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "afE_GmQQTEnvYCOsiwLfOAAAANc"], referer: https://nextspaceconsulting.com.au/wp-login.php
[Wed Apr 29 07:13:30.450467 2026] [:error] [pid 56863:tid 56888] [client 176.120.22.46:49454] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php, referer: https://nextspaceconsulting.com.au/wp-login.php
[Wed Apr 29 07:13:35.024210 2026] [:error] [pid 40344:tid 40399] [client 176.120.22.46:50851] [client 176.120.22.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.120.22.46, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afE_Hp_iiwb4cHXz-JoFdwAAAdg"], referer: https://nextspaceconsulting.com.au/xmlrpc.php
[Wed Apr 29 07:13:35.027656 2026] [:error] [pid 40344:tid 40399] [client 176.120.22.46:50851] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php, referer: https://nextspaceconsulting.com.au/xmlrpc.php
[Wed Apr 29 10:55:02.380740 2026] [:error] [pid 2604:tid 2623] [client 180.191.130.236:34539] [client 180.191.130.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.191.130.236, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afFzBhx5WQMU1W68tTbyIAAAAFE"]
[Wed Apr 29 10:55:02.391957 2026] [:error] [pid 2604:tid 2623] [client 180.191.130.236:34539] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 29 15:26:42.775470 2026] [:error] [pid 45119:tid 45136] [client 45.119.85.39:63891] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGyssgCO5XKzjdJ_HYNIwAAAw8"], referer: https://www.google.com
[Wed Apr 29 15:26:42.775543 2026] [:error] [pid 45119:tid 45136] [client 45.119.85.39:63891] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 55"] [hostname "nextspaceconsulting.com.au"] [uri "/wp/wp-login.php"] [unique_id "afGyssgCO5XKzjdJ_HYNIwAAAw8"], referer: https://www.google.com
[Wed Apr 29 15:46:39.479028 2026] [:error] [pid 44860:tid 44885] [client 45.119.85.39:61275] [client 45.119.85.39] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.119.85.39, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG3X0Q82el2g7ESJ16I1QAAAlc"], referer: https://www.google.com
[Wed Apr 29 15:46:39.479103 2026] [:error] [pid 44860:tid 44885] [client 45.119.85.39:61275] [client 45.119.85.39] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 45.119.85.39 on wp-login.php, counter = 229"] [hostname "nextspaceconsulting.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "afG3X0Q82el2g7ESJ16I1QAAAlc"], referer: https://www.google.com
[Wed Apr 29 19:56:46.069311 2026] [:error] [pid 21536:tid 21544] [client 45.94.31.132:55048] [client 45.94.31.132] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.94.31.132, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afHx_iREaVkH9P5H_LQFIwAAAIY"]
[Wed Apr 29 19:56:46.073044 2026] [:error] [pid 21536:tid 21544] [client 45.94.31.132:55048] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed Apr 29 21:30:19.166294 2026] [:error] [pid 21536:tid 21545] [client 20.151.138.87:6036] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed Apr 29 21:30:19.376092 2026] [:error] [pid 21536:tid 21539] [client 20.151.138.87:6036] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed Apr 29 21:30:19.811535 2026] [:error] [pid 21536:tid 21560] [client 20.151.138.87:6036] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Wed Apr 29 21:30:20.060859 2026] [:error] [pid 21536:tid 21555] [client 20.151.138.87:6036] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed Apr 29 21:30:20.481030 2026] [:error] [pid 21536:tid 21543] [client 20.151.138.87:6036] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed Apr 29 21:30:20.689727 2026] [:error] [pid 21536:tid 21550] [client 20.151.138.87:6036] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed Apr 29 21:30:20.899231 2026] [:error] [pid 21536:tid 21540] [client 20.151.138.87:6036] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed Apr 29 21:30:21.144337 2026] [:error] [pid 21536:tid 21556] [client 20.151.138.87:6036] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "afIH7SREaVkH9P5H_LQp-gAAAJI"]
[Wed Apr 29 21:30:21.685807 2026] [:error] [pid 47618:tid 47640] [client 20.151.138.87:6084] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "afIH7XHYUSxIrhce2OAkVwAAAVM"]
[Wed Apr 29 21:30:22.255688 2026] [:error] [pid 47618:tid 47624] [client 20.151.138.87:6115] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "afIH7nHYUSxIrhce2OAkWAAAAUM"]
[Wed Apr 29 21:30:22.682866 2026] [:error] [pid 21137:tid 21187] [client 20.151.138.87:6121] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "afIH7vw-HnaioFPIurVfRgAAABI"]
[Wed Apr 29 21:30:23.807401 2026] [:error] [pid 47618:tid 47622] [client 20.151.138.87:6019] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afIH73HYUSxIrhce2OAkWgAAAUE"]
[Wed Apr 29 21:30:25.301135 2026] [:error] [pid 21138:tid 21216] [client 20.151.138.87:6035] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afIH8ZuzwUiyMeUnp33pdAAAARM"]
[Wed Apr 29 21:30:26.127112 2026] [:error] [pid 21137:tid 21186] [client 20.151.138.87:6110] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afIH8vw-HnaioFPIurVfSAAAABE"]
[Wed Apr 29 21:30:26.557892 2026] [:error] [pid 21536:tid 21554] [client 20.151.138.87:6057] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afIH8iREaVkH9P5H_LQp_AAAAJA"]
[Wed Apr 29 21:30:27.059007 2026] [:error] [pid 21536:tid 21544] [client 20.151.138.87:6102] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "afIH8yREaVkH9P5H_LQp_wAAAIY"]
[Wed Apr 29 21:30:27.579280 2026] [:error] [pid 21536:tid 21551] [client 20.151.138.87:6113] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "afIH8yREaVkH9P5H_LQqAAAAAI0"]
[Wed Apr 29 21:30:28.006760 2026] [:error] [pid 21137:tid 21177] [client 20.151.138.87:6111] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "afIH9Pw-HnaioFPIurVfXAAAAAg"]
[Wed Apr 29 21:30:28.423006 2026] [:error] [pid 21136:tid 21161] [client 20.151.138.87:6136] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "afIH9ClIfGGQdPVv8_PrIgAAAFQ"]
[Wed Apr 29 21:30:28.850414 2026] [:error] [pid 21137:tid 21190] [client 20.151.138.87:6122] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "afIH9Pw-HnaioFPIurVfYgAAABU"]
[Wed Apr 29 21:30:29.372724 2026] [:error] [pid 21136:tid 21164] [client 20.151.138.87:6104] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "afIH9SlIfGGQdPVv8_PrJgAAAFc"]
[Wed Apr 29 21:30:29.893720 2026] [:error] [pid 47618:tid 47640] [client 20.151.138.87:6091] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "afIH9XHYUSxIrhce2OAkdgAAAVM"]
[Wed Apr 29 21:30:30.512280 2026] [:error] [pid 47618:tid 47637] [client 20.151.138.87:6130] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "afIH9nHYUSxIrhce2OAkegAAAVA"]
[Wed Apr 29 21:30:30.930397 2026] [:error] [pid 21138:tid 21219] [client 20.151.138.87:6085] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "afIH9puzwUiyMeUnp33phgAAARY"]
[Wed Apr 29 21:30:31.371282 2026] [:error] [pid 21138:tid 21202] [client 20.151.138.87:6080] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "afIH95uzwUiyMeUnp33piAAAAQU"]
[Wed Apr 29 21:30:31.802311 2026] [:error] [pid 21138:tid 21210] [client 20.151.138.87:6117] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "afIH95uzwUiyMeUnp33pigAAAQ0"]
[Wed Apr 29 21:30:32.395369 2026] [:error] [pid 47618:tid 47641] [client 20.151.138.87:6056] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "afIH-HHYUSxIrhce2OAkgQAAAVQ"]
[Wed Apr 29 21:30:32.939804 2026] [:error] [pid 21137:tid 21179] [client 20.151.138.87:6101] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conf.php"] [unique_id "afIH-Pw-HnaioFPIurVfbAAAAAo"]
[Wed Apr 29 21:30:33.423819 2026] [:error] [pid 47618:tid 47639] [client 20.151.138.87:6029] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conf.php"] [unique_id "afIH-XHYUSxIrhce2OAkhQAAAVI"]
[Wed Apr 29 21:30:33.922560 2026] [:error] [pid 21136:tid 21147] [client 20.151.138.87:6126] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conf.php"] [unique_id "afIH-SlIfGGQdPVv8_PrJwAAAEY"]
[Wed Apr 29 21:30:34.360817 2026] [:error] [pid 21536:tid 21562] [client 20.151.138.87:6089] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conf.php"] [unique_id "afIH-iREaVkH9P5H_LQqDgAAAJg"]
[Wed Apr 29 21:30:34.798579 2026] [:error] [pid 21136:tid 21158] [client 20.151.138.87:6116] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "afIH-ilIfGGQdPVv8_PrKAAAAFE"]
[Wed Apr 29 21:30:35.224950 2026] [:error] [pid 21138:tid 21209] [client 20.151.138.87:6131] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "afIH-5uzwUiyMeUnp33pkQAAAQw"]
[Wed Apr 29 21:30:35.715460 2026] [:error] [pid 21136:tid 21162] [client 20.151.138.87:6082] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "afIH-ylIfGGQdPVv8_PrKgAAAFU"]
[Wed Apr 29 21:30:36.301031 2026] [:error] [pid 21137:tid 21173] [client 20.151.138.87:6037] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "afIH_Pw-HnaioFPIurVfcwAAAAQ"]
[Wed Apr 29 21:30:36.950763 2026] [:error] [pid 21138:tid 21197] [client 20.151.138.87:6097] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "afIH_JuzwUiyMeUnp33pogAAAQE"]
[Wed Apr 29 21:30:37.455782 2026] [:error] [pid 47618:tid 47625] [client 20.151.138.87:6132] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "afIH_XHYUSxIrhce2OAkjgAAAUQ"]
[Wed Apr 29 21:30:37.939458 2026] [:error] [pid 21138:tid 21206] [client 20.151.138.87:6077] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "afIH_ZuzwUiyMeUnp33ppgAAAQk"]
[Wed Apr 29 21:30:38.612742 2026] [:error] [pid 21536:tid 21549] [client 20.151.138.87:6092] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "afIH_iREaVkH9P5H_LQqDwAAAIs"]
[Wed Apr 29 21:30:39.418792 2026] [:error] [pid 47618:tid 47632] [client 20.151.138.87:5962] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "afIH_3HYUSxIrhce2OAkjwAAAUs"]
[Wed Apr 29 21:30:40.102972 2026] [:error] [pid 21138:tid 21212] [client 20.151.138.87:6088] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "afIIAJuzwUiyMeUnp33ptQAAAQ8"]
[Wed Apr 29 21:30:40.693446 2026] [:error] [pid 21536:tid 21557] [client 20.151.138.87:6143] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "afIIACREaVkH9P5H_LQqEQAAAJM"]
[Wed Apr 29 21:30:41.176154 2026] [:error] [pid 21138:tid 21221] [client 20.151.138.87:6063] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "afIIAZuzwUiyMeUnp33pugAAARg"]
[Wed Apr 29 21:30:41.867946 2026] [:error] [pid 21136:tid 21152] [client 20.151.138.87:6139] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "afIIASlIfGGQdPVv8_PrKwAAAEs"]
[Wed Apr 29 21:30:42.280558 2026] [:error] [pid 21536:tid 21543] [client 20.151.138.87:6086] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "afIIAiREaVkH9P5H_LQqEgAAAIU"]
[Wed Apr 29 21:30:42.833614 2026] [:error] [pid 21136:tid 21144] [client 20.151.138.87:6123] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "afIIAilIfGGQdPVv8_PrLQAAAEM"]
[Wed Apr 29 21:30:43.281538 2026] [:error] [pid 47618:tid 47633] [client 20.151.138.87:6025] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "afIIA3HYUSxIrhce2OAklQAAAUw"]
[Wed Apr 29 21:30:43.766171 2026] [:error] [pid 21227:tid 21257] [client 20.151.138.87:6119] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "afIIA8B3c6U5AGPPsXqWNwAAANg"]
[Wed Apr 29 21:30:44.306743 2026] [:error] [pid 47618:tid 47643] [client 20.151.138.87:6137] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "afIIBHHYUSxIrhce2OAklwAAAVY"]
[Wed Apr 29 21:30:44.730839 2026] [:error] [pid 21138:tid 21196] [client 20.151.138.87:6016] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "afIIBJuzwUiyMeUnp33pvAAAAQA"]
[Wed Apr 29 21:30:45.262176 2026] [:error] [pid 21137:tid 21192] [client 20.151.138.87:6074] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "afIIBfw-HnaioFPIurVffAAAABc"]
[Wed Apr 29 21:30:45.674529 2026] [:error] [pid 21536:tid 21538] [client 20.151.138.87:5955] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "afIIBSREaVkH9P5H_LQqFQAAAIA"]
[Wed Apr 29 21:30:46.094304 2026] [:error] [pid 47618:tid 47632] [client 20.151.138.87:6107] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "afIIBnHYUSxIrhce2OAkmwAAAUs"]
[Wed Apr 29 21:30:46.529462 2026] [:error] [pid 47618:tid 47624] [client 20.151.138.87:6017] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "afIIBnHYUSxIrhce2OAknQAAAUM"]
[Wed Apr 29 21:30:46.967998 2026] [:error] [pid 47618:tid 47626] [client 20.151.138.87:6133] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "afIIBnHYUSxIrhce2OAkngAAAUU"]
[Wed Apr 29 21:30:47.474340 2026] [:error] [pid 21536:tid 21546] [client 20.151.138.87:6058] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "afIIByREaVkH9P5H_LQqFgAAAIg"]
[Wed Apr 29 21:30:48.007618 2026] [:error] [pid 47618:tid 47644] [client 20.151.138.87:6021] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "afIICHHYUSxIrhce2OAknwAAAVc"]
[Wed Apr 29 21:30:48.426196 2026] [:error] [pid 21138:tid 21206] [client 20.151.138.87:5969] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "afIICJuzwUiyMeUnp33pvgAAAQk"]
[Wed Apr 29 21:30:48.964849 2026] [:error] [pid 21138:tid 21203] [client 20.151.138.87:6020] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "afIICJuzwUiyMeUnp33pvwAAAQY"]
[Wed Apr 29 21:30:49.396690 2026] [:error] [pid 21137:tid 21177] [client 20.151.138.87:6059] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "afIICfw-HnaioFPIurVffgAAAAg"]
[Wed Apr 29 21:30:49.821319 2026] [:error] [pid 21227:tid 21238] [client 20.151.138.87:6140] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "afIICcB3c6U5AGPPsXqWOAAAAMU"]
[Wed Apr 29 21:30:50.515036 2026] [:error] [pid 21227:tid 21248] [client 20.151.138.87:6066] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "afIICsB3c6U5AGPPsXqWOQAAAM8"]
[Wed Apr 29 21:30:51.467395 2026] [:error] [pid 47618:tid 47631] [client 20.151.138.87:6028] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "afIIC3HYUSxIrhce2OAkogAAAUo"]
[Wed Apr 29 21:30:52.097101 2026] [:error] [pid 21138:tid 21221] [client 20.151.138.87:6060] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afIIDJuzwUiyMeUnp33pwQAAARg"]
[Wed Apr 29 21:30:52.829339 2026] [:error] [pid 47618:tid 47633] [client 20.151.138.87:6057] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afIIDHHYUSxIrhce2OAkowAAAUw"]
[Wed Apr 29 21:30:54.679991 2026] [:error] [pid 47618:tid 47643] [client 20.151.138.87:6024] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afIIDnHYUSxIrhce2OAkpwAAAVY"]
[Wed Apr 29 21:30:55.909376 2026] [:error] [pid 47618:tid 47641] [client 20.151.138.87:6112] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afIID3HYUSxIrhce2OAkqAAAAVQ"]
[Wed Apr 29 21:30:58.572861 2026] [:error] [pid 21137:tid 21171] [client 20.151.138.87:6108] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "afIIEvw-HnaioFPIurVfgwAAAAI"]
[Wed Apr 29 21:30:59.025774 2026] [:error] [pid 21137:tid 21189] [client 20.151.138.87:6109] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "afIIE_w-HnaioFPIurVfhAAAABQ"]
[Wed Apr 29 21:30:59.447887 2026] [:error] [pid 21536:tid 21551] [client 20.151.138.87:6042] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "afIIEyREaVkH9P5H_LQqGQAAAI0"]
[Wed Apr 29 21:31:00.022612 2026] [:error] [pid 47618:tid 47626] [client 20.151.138.87:6023] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "afIIFHHYUSxIrhce2OAkrAAAAUU"]
[Wed Apr 29 21:31:00.592671 2026] [:error] [pid 21536:tid 21558] [client 20.151.138.87:6062] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afIIFCREaVkH9P5H_LQqGwAAAJQ"]
[Wed Apr 29 21:31:01.189958 2026] [:error] [pid 21136:tid 21161] [client 20.151.138.87:6127] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afIIFSlIfGGQdPVv8_PrMQAAAFQ"]
[Wed Apr 29 21:31:01.674019 2026] [:error] [pid 21136:tid 21153] [client 20.151.138.87:6087] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afIIFSlIfGGQdPVv8_PrMgAAAEw"]
[Wed Apr 29 21:31:02.099300 2026] [:error] [pid 21137:tid 21184] [client 20.151.138.87:6048] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afIIFvw-HnaioFPIurVfhgAAAA8"]
[Wed Apr 29 21:31:02.511860 2026] [:error] [pid 21137:tid 21176] [client 20.151.138.87:6039] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "afIIFvw-HnaioFPIurVfhwAAAAc"]
[Wed Apr 29 21:31:03.002579 2026] [:error] [pid 21137:tid 21183] [client 20.151.138.87:6098] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "afIIF_w-HnaioFPIurVfiQAAAA4"]
[Wed Apr 29 21:31:03.478937 2026] [:error] [pid 47618:tid 47631] [client 20.151.138.87:5967] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "afIIF3HYUSxIrhce2OAkrgAAAUo"]
[Wed Apr 29 21:31:03.920507 2026] [:error] [pid 21137:tid 21192] [client 20.151.138.87:6038] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "afIIF_w-HnaioFPIurVfiwAAABc"]
[Wed Apr 29 21:31:04.339753 2026] [:error] [pid 21227:tid 21237] [client 20.151.138.87:6033] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "afIIGMB3c6U5AGPPsXqWPAAAAMQ"]
[Wed Apr 29 21:31:04.757578 2026] [:error] [pid 21137:tid 21186] [client 20.151.138.87:5995] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "afIIGPw-HnaioFPIurVfjAAAABE"]
[Wed Apr 29 21:31:05.224552 2026] [:error] [pid 21136:tid 21157] [client 20.151.138.87:6044] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "afIIGSlIfGGQdPVv8_PrNQAAAFA"]
[Wed Apr 29 21:31:05.872392 2026] [:error] [pid 21138:tid 21219] [client 20.151.138.87:6083] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "afIIGZuzwUiyMeUnp33pxwAAARY"]
[Wed Apr 29 21:31:06.388357 2026] [:error] [pid 47618:tid 47640] [client 20.151.138.87:6081] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "afIIGnHYUSxIrhce2OAkrwAAAVM"]
[Wed Apr 29 21:31:06.912133 2026] [:error] [pid 21138:tid 21197] [client 20.151.138.87:6103] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "afIIGpuzwUiyMeUnp33pygAAAQE"]
[Wed Apr 29 21:31:07.366490 2026] [:error] [pid 21138:tid 21212] [client 20.151.138.87:5909] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "afIIG5uzwUiyMeUnp33pywAAAQ8"]
[Wed Apr 29 21:31:07.817525 2026] [:error] [pid 47618:tid 47627] [client 20.151.138.87:6095] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "afIIG3HYUSxIrhce2OAksgAAAUY"]
[Wed Apr 29 21:31:08.305725 2026] [:error] [pid 47618:tid 47629] [client 20.151.138.87:6120] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kbfr.php"] [unique_id "afIIHHHYUSxIrhce2OAktAAAAUg"]
[Wed Apr 29 21:31:08.735956 2026] [:error] [pid 21138:tid 21203] [client 20.151.138.87:6141] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kbfr.php"] [unique_id "afIIHJuzwUiyMeUnp33pzAAAAQY"]
[Wed Apr 29 21:31:09.239147 2026] [:error] [pid 21227:tid 21233] [client 20.151.138.87:5931] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kbfr.php"] [unique_id "afIIHcB3c6U5AGPPsXqWPgAAAMA"]
[Wed Apr 29 21:31:09.731784 2026] [:error] [pid 47618:tid 47628] [client 20.151.138.87:6134] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kbfr.php"] [unique_id "afIIHXHYUSxIrhce2OAktgAAAUc"]
[Wed Apr 29 21:31:10.162137 2026] [:error] [pid 21227:tid 21242] [client 20.151.138.87:6106] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "afIIHsB3c6U5AGPPsXqWPwAAAMk"]
[Wed Apr 29 21:31:10.582000 2026] [:error] [pid 47618:tid 47638] [client 20.151.138.87:6026] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "afIIHnHYUSxIrhce2OAkuAAAAVE"]
[Wed Apr 29 21:31:11.005606 2026] [:error] [pid 47618:tid 47642] [client 20.151.138.87:6114] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "afIIH3HYUSxIrhce2OAkuQAAAVU"]
[Wed Apr 29 21:31:11.476954 2026] [:error] [pid 21136:tid 21159] [client 20.151.138.87:6067] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "afIIHylIfGGQdPVv8_PrNwAAAFI"]
[Wed Apr 29 21:31:11.955583 2026] [:error] [pid 47618:tid 47639] [client 20.151.138.87:6054] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "afIIH3HYUSxIrhce2OAkugAAAVI"]
[Wed Apr 29 21:31:12.491594 2026] [:error] [pid 21227:tid 21244] [client 20.151.138.87:6105] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "afIIIMB3c6U5AGPPsXqWQAAAAMs"]
[Wed Apr 29 21:31:13.021030 2026] [:error] [pid 47618:tid 47632] [client 20.151.138.87:6071] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "afIIIXHYUSxIrhce2OAkuwAAAUs"]
[Wed Apr 29 21:31:13.437682 2026] [:error] [pid 21138:tid 21214] [client 20.151.138.87:6051] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "afIIIZuzwUiyMeUnp33p0AAAARE"]
[Wed Apr 29 21:31:13.896941 2026] [:error] [pid 47618:tid 47626] [client 20.151.138.87:6099] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "afIIIXHYUSxIrhce2OAkvAAAAUU"]
[Wed Apr 29 21:31:14.318813 2026] [:error] [pid 47618:tid 47623] [client 20.151.138.87:6069] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "afIIInHYUSxIrhce2OAkvQAAAUI"]
[Wed Apr 29 21:31:14.802956 2026] [:error] [pid 21227:tid 21236] [client 20.151.138.87:6075] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "afIIIsB3c6U5AGPPsXqWQQAAAMM"]
[Wed Apr 29 21:31:15.229476 2026] [:error] [pid 21137:tid 21177] [client 20.151.138.87:6053] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "afIII_w-HnaioFPIurVflwAAAAg"]
[Wed Apr 29 21:31:15.643449 2026] [:error] [pid 47618:tid 47627] [client 20.151.138.87:6093] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/defaults.php"] [unique_id "afIII3HYUSxIrhce2OAkvwAAAUY"]
[Wed Apr 29 21:31:16.073857 2026] [:error] [pid 21136:tid 21148] [client 20.151.138.87:6032] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/defaults.php"] [unique_id "afIIJClIfGGQdPVv8_PrOQAAAEc"]
[Wed Apr 29 21:31:16.585764 2026] [:error] [pid 21536:tid 21562] [client 20.151.138.87:6100] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/defaults.php"] [unique_id "afIIJCREaVkH9P5H_LQqHAAAAJg"]
[Wed Apr 29 21:31:17.000154 2026] [:error] [pid 21137:tid 21171] [client 20.151.138.87:6027] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/defaults.php"] [unique_id "afIIJPw-HnaioFPIurVfmAAAAAI"]
[Wed Apr 29 21:31:17.759171 2026] [:error] [pid 21227:tid 21251] [client 20.151.138.87:5977] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/"] [unique_id "afIIJcB3c6U5AGPPsXqWRAAAANI"]
[Wed Apr 29 21:31:18.175945 2026] [:error] [pid 21138:tid 21203] [client 20.151.138.87:6124] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/"] [unique_id "afIIJpuzwUiyMeUnp33p1QAAAQY"]
[Wed Apr 29 21:31:18.634857 2026] [:error] [pid 21137:tid 21189] [client 20.151.138.87:6090] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/"] [unique_id "afIIJvw-HnaioFPIurVfmQAAABQ"]
[Wed Apr 29 21:31:19.110964 2026] [:error] [pid 21536:tid 21539] [client 20.151.138.87:5953] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/"] [unique_id "afIIJyREaVkH9P5H_LQqHQAAAIE"]
[Wed Apr 29 21:31:19.634288 2026] [:error] [pid 47618:tid 47633] [client 20.151.138.87:6064] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/"] [unique_id "afIIJ3HYUSxIrhce2OAkwgAAAUw"]
[Wed Apr 29 21:31:20.264431 2026] [:error] [pid 21138:tid 21201] [client 20.151.138.87:6129] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Wed Apr 29 21:31:21.103679 2026] [:error] [pid 21138:tid 21217] [client 20.151.138.87:6129] [client 20.151.138.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "afIIKZuzwUiyMeUnp33p3gAAARQ"]
[Wed Apr 29 21:31:22.869751 2026] [:error] [pid 21227:tid 21238] [client 20.151.138.87:6030] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "afIIKsB3c6U5AGPPsXqWSwAAAMU"]
[Wed Apr 29 21:31:23.307097 2026] [:error] [pid 21227:tid 21250] [client 20.151.138.87:6011] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "afIIK8B3c6U5AGPPsXqWTAAAANE"]
[Wed Apr 29 21:31:23.750028 2026] [:error] [pid 21138:tid 21200] [client 20.151.138.87:5954] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "afIIK5uzwUiyMeUnp33p4QAAAQM"]
[Wed Apr 29 21:31:24.230116 2026] [:error] [pid 21138:tid 21212] [client 20.151.138.87:5959] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "afIILJuzwUiyMeUnp33p4gAAAQ8"]
[Wed Apr 29 21:31:24.707349 2026] [:error] [pid 21227:tid 21243] [client 20.151.138.87:5973] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "afIILMB3c6U5AGPPsXqWTwAAAMo"]
[Wed Apr 29 21:31:25.120735 2026] [:error] [pid 47618:tid 47635] [client 20.151.138.87:6046] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "afIILXHYUSxIrhce2OAkwwAAAU4"]
[Wed Apr 29 21:31:25.576775 2026] [:error] [pid 21138:tid 21203] [client 20.151.138.87:6041] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "afIILZuzwUiyMeUnp33p4wAAAQY"]
[Wed Apr 29 21:31:25.992914 2026] [:error] [pid 47618:tid 47628] [client 20.151.138.87:6034] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "afIILXHYUSxIrhce2OAkxAAAAUc"]
[Wed Apr 29 21:31:26.428521 2026] [:error] [pid 21138:tid 21211] [client 20.151.138.87:5970] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/"] [unique_id "afIILpuzwUiyMeUnp33p5AAAAQ4"]
[Wed Apr 29 21:31:26.868820 2026] [:error] [pid 47618:tid 47630] [client 20.151.138.87:6125] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/"] [unique_id "afIILnHYUSxIrhce2OAkxgAAAUk"]
[Wed Apr 29 21:31:27.282509 2026] [:error] [pid 47618:tid 47639] [client 20.151.138.87:5913] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/"] [unique_id "afIIL3HYUSxIrhce2OAkyAAAAVI"]
[Wed Apr 29 21:31:27.741311 2026] [:error] [pid 47618:tid 47631] [client 20.151.138.87:5963] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/"] [unique_id "afIIL3HYUSxIrhce2OAk0AAAAUo"]
[Wed Apr 29 21:31:28.161348 2026] [:error] [pid 21138:tid 21205] [client 20.151.138.87:6094] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "afIIMJuzwUiyMeUnp33p5QAAAQg"]
[Wed Apr 29 21:31:28.582925 2026] [:error] [pid 21138:tid 21201] [client 20.151.138.87:5958] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "afIIMJuzwUiyMeUnp33p5gAAAQQ"]
[Wed Apr 29 21:31:29.000383 2026] [:error] [pid 21136:tid 21151] [client 20.151.138.87:5994] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "afIIMClIfGGQdPVv8_PrPAAAAEo"]
[Wed Apr 29 21:31:29.415470 2026] [:error] [pid 21227:tid 21246] [client 20.151.138.87:6018] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/WordPressCore/"] [unique_id "afIIMcB3c6U5AGPPsXqWWgAAAM0"]
[Wed Apr 29 21:31:29.832663 2026] [:error] [pid 21137:tid 21181] [client 20.151.138.87:6065] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "afIIMfw-HnaioFPIurVfxwAAAAw"]
[Wed Apr 29 21:31:30.277298 2026] [:error] [pid 21137:tid 21190] [client 20.151.138.87:5965] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "afIIMvw-HnaioFPIurVfyAAAABU"]
[Wed Apr 29 21:31:30.731867 2026] [:error] [pid 21136:tid 21150] [client 20.151.138.87:5979] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "afIIMilIfGGQdPVv8_PrRAAAAEk"]
[Wed Apr 29 21:31:31.160003 2026] [:error] [pid 21536:tid 21542] [client 20.151.138.87:6078] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "afIIMyREaVkH9P5H_LQqKQAAAIQ"]
[Wed Apr 29 21:31:31.604801 2026] [:error] [pid 21136:tid 21146] [client 20.151.138.87:5985] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "afIIMylIfGGQdPVv8_PrRgAAAEU"]
[Wed Apr 29 21:31:32.040450 2026] [:error] [pid 21536:tid 21545] [client 20.151.138.87:5978] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "afIINCREaVkH9P5H_LQqKgAAAIc"]
[Wed Apr 29 21:31:32.470889 2026] [:error] [pid 21227:tid 21234] [client 20.151.138.87:6013] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "afIINMB3c6U5AGPPsXqWYAAAAME"]
[Wed Apr 29 21:31:32.883437 2026] [:error] [pid 21227:tid 21243] [client 20.151.138.87:6052] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "afIINMB3c6U5AGPPsXqWYQAAAMo"]
[Wed Apr 29 21:31:33.325955 2026] [:error] [pid 21227:tid 21237] [client 20.151.138.87:5925] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "afIINcB3c6U5AGPPsXqWYwAAAMQ"]
[Wed Apr 29 21:31:33.741275 2026] [:error] [pid 21227:tid 21247] [client 20.151.138.87:5930] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "afIINcB3c6U5AGPPsXqWZQAAAM4"]
[Wed Apr 29 21:31:34.174417 2026] [:error] [pid 21536:tid 21561] [client 20.151.138.87:5990] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "afIINiREaVkH9P5H_LQqPwAAAJc"]
[Wed Apr 29 21:31:34.596508 2026] [:error] [pid 21536:tid 21547] [client 20.151.138.87:6135] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "afIINiREaVkH9P5H_LQqQAAAAIk"]
[Wed Apr 29 21:31:35.011251 2026] [:error] [pid 21536:tid 21543] [client 20.151.138.87:6045] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "afIINyREaVkH9P5H_LQqQgAAAIU"]
[Wed Apr 29 21:31:35.436495 2026] [:error] [pid 21138:tid 21211] [client 20.151.138.87:6142] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "afIIN5uzwUiyMeUnp33qDQAAAQ4"]
[Wed Apr 29 21:31:35.854030 2026] [:error] [pid 21137:tid 21179] [client 20.151.138.87:5944] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "afIIN_w-HnaioFPIurVf_wAAAAo"]
[Wed Apr 29 21:31:36.311424 2026] [:error] [pid 47618:tid 47633] [client 20.151.138.87:6068] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "afIIOHHYUSxIrhce2OAk-QAAAUw"]
[Wed Apr 29 21:31:36.747865 2026] [:error] [pid 47618:tid 47630] [client 20.151.138.87:6050] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "afIIOHHYUSxIrhce2OAk-wAAAUk"]
[Wed Apr 29 21:31:37.170550 2026] [:error] [pid 21138:tid 21214] [client 20.151.138.87:5982] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "afIIOZuzwUiyMeUnp33qEQAAARE"]
[Wed Apr 29 21:31:37.594662 2026] [:error] [pid 21138:tid 21221] [client 20.151.138.87:5896] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "afIIOZuzwUiyMeUnp33qGAAAARg"]
[Wed Apr 29 21:31:38.043729 2026] [:error] [pid 21138:tid 21203] [client 20.151.138.87:6128] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "afIIOpuzwUiyMeUnp33qHAAAAQY"]
[Wed Apr 29 21:31:38.495152 2026] [:error] [pid 21137:tid 21184] [client 20.151.138.87:5999] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afIIOvw-HnaioFPIurVgAgAAAA8"]
[Wed Apr 29 21:31:38.910159 2026] [:error] [pid 21136:tid 21153] [client 20.151.138.87:6047] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afIIOilIfGGQdPVv8_PrUgAAAEw"]
[Wed Apr 29 21:31:39.354103 2026] [:error] [pid 21137:tid 21176] [client 20.151.138.87:6009] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afIIO_w-HnaioFPIurVgBQAAAAc"]
[Wed Apr 29 21:31:39.768282 2026] [:error] [pid 47618:tid 47637] [client 20.151.138.87:5984] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afIIO3HYUSxIrhce2OAlAQAAAVA"]
[Wed Apr 29 21:31:40.243407 2026] [:error] [pid 21138:tid 21205] [client 20.151.138.87:6073] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "afIIPJuzwUiyMeUnp33qJwAAAQg"]
[Wed Apr 29 21:31:40.662793 2026] [:error] [pid 21536:tid 21544] [client 20.151.138.87:5900] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "afIIPCREaVkH9P5H_LQqSAAAAIY"]
[Wed Apr 29 21:31:41.085356 2026] [:error] [pid 47618:tid 47636] [client 20.151.138.87:5952] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "afIIPXHYUSxIrhce2OAlAgAAAU8"]
[Wed Apr 29 21:31:41.542050 2026] [:error] [pid 47618:tid 47640] [client 20.151.138.87:6031] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "afIIPXHYUSxIrhce2OAlBQAAAVM"]
[Wed Apr 29 21:31:41.959510 2026] [:error] [pid 21227:tid 21247] [client 20.151.138.87:5917] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "afIIPcB3c6U5AGPPsXqWcgAAAM4"]
[Wed Apr 29 21:31:42.400943 2026] [:error] [pid 21227:tid 21246] [client 20.151.138.87:5964] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "afIIPsB3c6U5AGPPsXqWcwAAAM0"]
[Wed Apr 29 21:31:42.907307 2026] [:error] [pid 21227:tid 21236] [client 20.151.138.87:6043] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "afIIPsB3c6U5AGPPsXqWdAAAAMM"]
[Wed Apr 29 21:31:43.345036 2026] [:error] [pid 21227:tid 21239] [client 20.151.138.87:6138] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "afIIP8B3c6U5AGPPsXqWdgAAAMY"]
[Wed Apr 29 21:31:43.757440 2026] [:error] [pid 21227:tid 21255] [client 20.151.138.87:5989] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmrlpc.php"] [unique_id "afIIP8B3c6U5AGPPsXqWdwAAANY"]
[Wed Apr 29 21:31:44.207955 2026] [:error] [pid 21136:tid 21152] [client 20.151.138.87:5992] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmrlpc.php"] [unique_id "afIIQClIfGGQdPVv8_PrVAAAAEs"]
[Wed Apr 29 21:31:44.621916 2026] [:error] [pid 21227:tid 21235] [client 20.151.138.87:5976] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmrlpc.php"] [unique_id "afIIQMB3c6U5AGPPsXqWeAAAAMI"]
[Wed Apr 29 21:31:45.101786 2026] [:error] [pid 47618:tid 47642] [client 20.151.138.87:6022] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmrlpc.php"] [unique_id "afIIQXHYUSxIrhce2OAlDAAAAVU"]
[Wed Apr 29 21:31:45.527536 2026] [:error] [pid 21227:tid 21252] [client 20.151.138.87:5901] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "afIIQcB3c6U5AGPPsXqWeQAAANM"]
[Wed Apr 29 21:31:45.945450 2026] [:error] [pid 21227:tid 21238] [client 20.151.138.87:5928] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "afIIQcB3c6U5AGPPsXqWegAAAMU"]
[Wed Apr 29 21:31:46.382344 2026] [:error] [pid 21137:tid 21171] [client 20.151.138.87:6076] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "afIIQvw-HnaioFPIurVgDQAAAAI"]
[Wed Apr 29 21:31:46.813742 2026] [:error] [pid 21137:tid 21186] [client 20.151.138.87:5922] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "afIIQvw-HnaioFPIurVgEAAAABE"]
[Wed Apr 29 21:31:47.236397 2026] [:error] [pid 21136:tid 21147] [client 20.151.138.87:6000] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "afIIQylIfGGQdPVv8_PrWAAAAEY"]
[Wed Apr 29 21:31:47.673816 2026] [:error] [pid 47618:tid 47639] [client 20.151.138.87:5912] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "afIIQ3HYUSxIrhce2OAlEQAAAVI"]
[Wed Apr 29 21:31:48.103574 2026] [:error] [pid 21136:tid 21165] [client 20.151.138.87:5916] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "afIIRClIfGGQdPVv8_PrWQAAAFg"]
[Wed Apr 29 21:31:48.527757 2026] [:error] [pid 21227:tid 21254] [client 20.151.138.87:6055] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "afIIRMB3c6U5AGPPsXqWfgAAANU"]
[Wed Apr 29 21:31:48.987350 2026] [:error] [pid 21136:tid 21159] [client 20.151.138.87:5845] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "afIIRClIfGGQdPVv8_PrWgAAAFI"]
[Wed Apr 29 21:31:49.400224 2026] [:error] [pid 47618:tid 47640] [client 20.151.138.87:6040] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "afIIRXHYUSxIrhce2OAlEwAAAVM"]
[Wed Apr 29 21:31:49.812303 2026] [:error] [pid 21227:tid 21241] [client 20.151.138.87:5960] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "afIIRcB3c6U5AGPPsXqWgwAAAMg"]
[Wed Apr 29 21:31:50.240324 2026] [:error] [pid 21138:tid 21210] [client 20.151.138.87:6015] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "afIIRpuzwUiyMeUnp33qNAAAAQ0"]
[Wed Apr 29 21:31:50.653362 2026] [:error] [pid 21227:tid 21236] [client 20.151.138.87:5937] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "afIIRsB3c6U5AGPPsXqWhQAAAMM"]
[Wed Apr 29 21:31:51.067992 2026] [:error] [pid 21536:tid 21550] [client 20.151.138.87:5986] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "afIIRyREaVkH9P5H_LQqVAAAAIw"]
[Wed Apr 29 21:31:51.498386 2026] [:error] [pid 21536:tid 21554] [client 20.151.138.87:6072] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "afIIRyREaVkH9P5H_LQqVQAAAJA"]
[Wed Apr 29 21:31:51.911200 2026] [:error] [pid 47618:tid 47627] [client 20.151.138.87:5974] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "afIIR3HYUSxIrhce2OAlFgAAAUY"]
[Wed Apr 29 21:31:52.330522 2026] [:error] [pid 21536:tid 21541] [client 20.151.138.87:6061] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "afIISCREaVkH9P5H_LQqWQAAAIM"]
[Wed Apr 29 21:31:52.754790 2026] [:error] [pid 21227:tid 21256] [client 20.151.138.87:5898] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "afIISMB3c6U5AGPPsXqWjQAAANc"]
[Wed Apr 29 21:31:53.171622 2026] [:error] [pid 21138:tid 21211] [client 20.151.138.87:6079] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "afIISZuzwUiyMeUnp33qOQAAAQ4"]
[Wed Apr 29 21:31:53.594452 2026] [:error] [pid 21138:tid 21213] [client 20.151.138.87:6118] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "afIISZuzwUiyMeUnp33qPAAAARA"]
[Wed Apr 29 21:31:54.008910 2026] [:error] [pid 21138:tid 21201] [client 20.151.138.87:5988] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bb.php"] [unique_id "afIISpuzwUiyMeUnp33qQgAAAQQ"]
[Wed Apr 29 21:31:54.477336 2026] [:error] [pid 21138:tid 21200] [client 20.151.138.87:5831] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bb.php"] [unique_id "afIISpuzwUiyMeUnp33qQwAAAQM"]
[Wed Apr 29 21:31:54.988765 2026] [:error] [pid 21138:tid 21221] [client 20.151.138.87:6008] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bb.php"] [unique_id "afIISpuzwUiyMeUnp33qRgAAARg"]
[Wed Apr 29 21:31:55.441988 2026] [:error] [pid 21138:tid 21211] [client 20.151.138.87:5996] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bb.php"] [unique_id "afIIS5uzwUiyMeUnp33qSQAAAQ4"]
[Wed Apr 29 21:31:55.882419 2026] [:error] [pid 21138:tid 21213] [client 20.151.138.87:5921] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "afIIS5uzwUiyMeUnp33qSwAAARA"]
[Wed Apr 29 21:31:56.381296 2026] [:error] [pid 21138:tid 21209] [client 20.151.138.87:5825] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "afIITJuzwUiyMeUnp33qTAAAAQw"]
[Wed Apr 29 21:31:56.805769 2026] [:error] [pid 21138:tid 21220] [client 20.151.138.87:5899] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "afIITJuzwUiyMeUnp33qUgAAARc"]
[Wed Apr 29 21:31:57.273801 2026] [:error] [pid 21138:tid 21207] [client 20.151.138.87:5957] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "afIITZuzwUiyMeUnp33qVAAAAQo"]
[Wed Apr 29 21:31:57.683960 2026] [:error] [pid 21138:tid 21199] [client 20.151.138.87:5854] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "afIITZuzwUiyMeUnp33qVgAAAQI"]
[Wed Apr 29 21:31:58.103758 2026] [:error] [pid 21138:tid 21211] [client 20.151.138.87:5907] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "afIITpuzwUiyMeUnp33qVwAAAQ4"]
[Wed Apr 29 21:31:58.573443 2026] [:error] [pid 21138:tid 21212] [client 20.151.138.87:6003] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "afIITpuzwUiyMeUnp33qWAAAAQ8"]
[Wed Apr 29 21:31:59.188630 2026] [:error] [pid 21138:tid 21213] [client 20.151.138.87:5993] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "afIIT5uzwUiyMeUnp33qWQAAARA"]
[Wed Apr 29 21:31:59.609169 2026] [:error] [pid 21138:tid 21209] [client 20.151.138.87:6010] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "afIIT5uzwUiyMeUnp33qWgAAAQw"]
[Wed Apr 29 21:32:00.061510 2026] [:error] [pid 21138:tid 21202] [client 20.151.138.87:5972] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "afIIUJuzwUiyMeUnp33qWwAAAQU"]
[Wed Apr 29 21:32:00.482894 2026] [:error] [pid 21138:tid 21200] [client 20.151.138.87:5862] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "afIIUJuzwUiyMeUnp33qXQAAAQM"]
[Wed Apr 29 21:32:00.913521 2026] [:error] [pid 21138:tid 21196] [client 20.151.138.87:5863] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "afIIUJuzwUiyMeUnp33qYAAAAQA"]
[Wed Apr 29 21:32:01.371962 2026] [:error] [pid 47618:tid 47637] [client 20.151.138.87:5950] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "afIIUXHYUSxIrhce2OAlFwAAAVA"]
[Wed Apr 29 21:32:01.786156 2026] [:error] [pid 21138:tid 21197] [client 20.151.138.87:5932] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "afIIUZuzwUiyMeUnp33qYwAAAQE"]
[Wed Apr 29 21:32:02.245883 2026] [:error] [pid 47618:tid 47636] [client 20.151.138.87:5843] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "afIIUnHYUSxIrhce2OAlGgAAAU8"]
[Wed Apr 29 21:32:02.659677 2026] [:error] [pid 21138:tid 21215] [client 20.151.138.87:5947] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "afIIUpuzwUiyMeUnp33qZAAAARI"]
[Wed Apr 29 21:32:03.089520 2026] [:error] [pid 21536:tid 21549] [client 20.151.138.87:5924] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "afIIUyREaVkH9P5H_LQqXQAAAIs"]
[Wed Apr 29 21:32:03.519852 2026] [:error] [pid 21138:tid 21209] [client 20.151.138.87:5908] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "afIIU5uzwUiyMeUnp33qaAAAAQw"]
[Wed Apr 29 21:32:03.942367 2026] [:error] [pid 21536:tid 21553] [client 20.151.138.87:5961] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "afIIUyREaVkH9P5H_LQqXwAAAI8"]
[Wed Apr 29 21:32:04.368327 2026] [:error] [pid 47618:tid 47640] [client 20.151.138.87:6096] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/autoload_classmap.php"] [unique_id "afIIVHHYUSxIrhce2OAlGwAAAVM"]
[Wed Apr 29 21:32:04.805913 2026] [:error] [pid 47618:tid 47628] [client 20.151.138.87:5997] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fx.php"] [unique_id "afIIVHHYUSxIrhce2OAlHAAAAUc"]
[Wed Apr 29 21:32:05.265619 2026] [:error] [pid 21138:tid 21200] [client 20.151.138.87:5844] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fx.php"] [unique_id "afIIVZuzwUiyMeUnp33qagAAAQM"]
[Wed Apr 29 21:32:05.687132 2026] [:error] [pid 21138:tid 21204] [client 20.151.138.87:5998] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fx.php"] [unique_id "afIIVZuzwUiyMeUnp33qawAAAQc"]
[Wed Apr 29 21:32:06.110133 2026] [:error] [pid 21536:tid 21550] [client 20.151.138.87:5905] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fx.php"] [unique_id "afIIViREaVkH9P5H_LQqYQAAAIw"]
[Wed Apr 29 21:32:06.548461 2026] [:error] [pid 21138:tid 21210] [client 20.151.138.87:5891] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelay.php"] [unique_id "afIIVpuzwUiyMeUnp33qbAAAAQ0"]
[Wed Apr 29 21:32:06.961443 2026] [:error] [pid 47618:tid 47641] [client 20.151.138.87:6001] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelay.php"] [unique_id "afIIVnHYUSxIrhce2OAlHgAAAVQ"]
[Wed Apr 29 21:32:07.378589 2026] [:error] [pid 21138:tid 21207] [client 20.151.138.87:5828] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelay.php"] [unique_id "afIIV5uzwUiyMeUnp33qbwAAAQo"]
[Wed Apr 29 21:32:07.793870 2026] [:error] [pid 21138:tid 21216] [client 20.151.138.87:5914] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelay.php"] [unique_id "afIIV5uzwUiyMeUnp33qcQAAARM"]
[Wed Apr 29 21:32:08.271750 2026] [:error] [pid 21138:tid 21197] [client 20.151.138.87:5889] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/god4m.php"] [unique_id "afIIWJuzwUiyMeUnp33qcgAAAQE"]
[Wed Apr 29 21:32:08.710194 2026] [:error] [pid 47618:tid 47621] [client 20.151.138.87:5987] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/god4m.php"] [unique_id "afIIWHHYUSxIrhce2OAlIAAAAUA"]
[Wed Apr 29 21:32:09.157977 2026] [:error] [pid 21137:tid 21193] [client 20.151.138.87:5943] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/god4m.php"] [unique_id "afIIWfw-HnaioFPIurVgFQAAABg"]
[Wed Apr 29 21:32:09.609532 2026] [:error] [pid 21137:tid 21185] [client 20.151.138.87:6002] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/god4m.php"] [unique_id "afIIWfw-HnaioFPIurVgFgAAABA"]
[Wed Apr 29 21:32:10.061003 2026] [:error] [pid 21536:tid 21555] [client 20.151.138.87:5980] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mari.php"] [unique_id "afIIWiREaVkH9P5H_LQqZAAAAJE"]
[Wed Apr 29 21:32:10.472305 2026] [:error] [pid 21138:tid 21208] [client 20.151.138.87:5929] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mari.php"] [unique_id "afIIWpuzwUiyMeUnp33qdAAAAQs"]
[Wed Apr 29 21:32:10.914763 2026] [:error] [pid 47618:tid 47633] [client 20.151.138.87:6012] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mari.php"] [unique_id "afIIWnHYUSxIrhce2OAlIQAAAUw"]
[Wed Apr 29 21:32:11.394471 2026] [:error] [pid 21137:tid 21180] [client 20.151.138.87:5927] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mari.php"] [unique_id "afIIW_w-HnaioFPIurVgGQAAAAs"]
[Wed Apr 29 21:32:11.846924 2026] [:error] [pid 21138:tid 21206] [client 20.151.138.87:5949] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moon.php"] [unique_id "afIIW5uzwUiyMeUnp33qdgAAAQk"]
[Wed Apr 29 21:32:12.258201 2026] [:error] [pid 21138:tid 21217] [client 20.151.138.87:5869] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moon.php"] [unique_id "afIIXJuzwUiyMeUnp33qeQAAARQ"]
[Wed Apr 29 21:32:12.722339 2026] [:error] [pid 21138:tid 21214] [client 20.151.138.87:6005] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moon.php"] [unique_id "afIIXJuzwUiyMeUnp33qewAAARE"]
[Wed Apr 29 21:32:13.133453 2026] [:error] [pid 47618:tid 47634] [client 20.151.138.87:5923] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/moon.php"] [unique_id "afIIXXHYUSxIrhce2OAlKAAAAU0"]
[Wed Apr 29 21:32:13.544929 2026] [:error] [pid 47618:tid 47629] [client 20.151.138.87:5832] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "afIIXXHYUSxIrhce2OAlKQAAAUg"]
[Wed Apr 29 21:32:13.989432 2026] [:error] [pid 21227:tid 21235] [client 20.151.138.87:6006] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "afIIXcB3c6U5AGPPsXqWpQAAAMI"]
[Wed Apr 29 21:32:14.424012 2026] [:error] [pid 21138:tid 21197] [client 20.151.138.87:5897] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "afIIXpuzwUiyMeUnp33qfwAAAQE"]
[Wed Apr 29 21:32:14.887435 2026] [:error] [pid 47618:tid 47624] [client 20.151.138.87:5888] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/o.php"] [unique_id "afIIXnHYUSxIrhce2OAlLAAAAUM"]
[Wed Apr 29 21:32:15.347407 2026] [:error] [pid 21137:tid 21184] [client 20.151.138.87:5838] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tmp.php"] [unique_id "afIIX_w-HnaioFPIurVgHQAAAA8"]
[Wed Apr 29 21:32:15.767083 2026] [:error] [pid 47618:tid 47644] [client 20.151.138.87:5892] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tmp.php"] [unique_id "afIIX3HYUSxIrhce2OAlLQAAAVc"]
[Wed Apr 29 21:32:16.177812 2026] [:error] [pid 21227:tid 21252] [client 20.151.138.87:5935] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tmp.php"] [unique_id "afIIYMB3c6U5AGPPsXqWpgAAANM"]
[Wed Apr 29 21:32:16.602995 2026] [:error] [pid 21536:tid 21548] [client 20.151.138.87:5911] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tmp.php"] [unique_id "afIIYCREaVkH9P5H_LQqaAAAAIo"]
[Wed Apr 29 21:32:17.048426 2026] [:error] [pid 21138:tid 21206] [client 20.151.138.87:5983] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/"] [unique_id "afIIYZuzwUiyMeUnp33qggAAAQk"]
[Wed Apr 29 21:32:17.466978 2026] [:error] [pid 21536:tid 21549] [client 20.151.138.87:6014] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/"] [unique_id "afIIYSREaVkH9P5H_LQqawAAAIs"]
[Wed Apr 29 21:32:17.879301 2026] [:error] [pid 21536:tid 21546] [client 20.151.138.87:5971] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/"] [unique_id "afIIYSREaVkH9P5H_LQqbAAAAIg"]
[Wed Apr 29 21:32:18.322427 2026] [:error] [pid 47618:tid 47625] [client 20.151.138.87:5826] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/"] [unique_id "afIIYnHYUSxIrhce2OAlMAAAAUQ"]
[Wed Apr 29 21:32:18.738431 2026] [:error] [pid 21536:tid 21553] [client 20.151.138.87:5882] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/a.php"] [unique_id "afIIYiREaVkH9P5H_LQqbQAAAI8"]
[Wed Apr 29 21:32:19.171378 2026] [:error] [pid 21138:tid 21219] [client 20.151.138.87:5968] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/a.php"] [unique_id "afIIY5uzwUiyMeUnp33qgwAAARY"]
[Wed Apr 29 21:32:19.636030 2026] [:error] [pid 21138:tid 21211] [client 20.151.138.87:5941] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/a.php"] [unique_id "afIIY5uzwUiyMeUnp33qhAAAAQ4"]
[Wed Apr 29 21:32:20.076411 2026] [:error] [pid 21137:tid 21173] [client 20.151.138.87:5763] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/a.php"] [unique_id "afIIZPw-HnaioFPIurVgHwAAAAQ"]
[Wed Apr 29 21:32:20.490938 2026] [:error] [pid 21137:tid 21190] [client 20.151.138.87:6013] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/alfa.php"] [unique_id "afIIZPw-HnaioFPIurVgIAAAABU"]
[Wed Apr 29 21:32:20.907311 2026] [:error] [pid 21227:tid 21257] [client 20.151.138.87:6049] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/alfa.php"] [unique_id "afIIZMB3c6U5AGPPsXqWqwAAANg"]
[Wed Apr 29 21:32:21.320076 2026] [:error] [pid 21136:tid 21159] [client 20.151.138.87:5956] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/alfa.php"] [unique_id "afIIZSlIfGGQdPVv8_PrZAAAAFI"]
[Wed Apr 29 21:32:21.742786 2026] [:error] [pid 21138:tid 21205] [client 20.151.138.87:5885] [client 20.151.138.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/alfa.php"] [unique_id "afIIZZuzwUiyMeUnp33qhgAAAQg"]
[Wed Apr 29 21:32:23.045911 2026] [:error] [pid 21138:tid 21203] [client 20.151.138.87:5933] [client 20.151.138.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/test1.php"] [unique_id "afIIZ5uzwUiyMeUnp33qiwAAAQY"]
[Wed Apr 29 21:32:23.493192 2026] [:error] [pid 21138:tid 21215] [client 20.151.138.87:5942] [client 20.151.138.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/cropper.php"] [unique_id "afIIZ5uzwUiyMeUnp33qjAAAARI"]
[Thu Apr 30 03:21:39.397401 2026] [:error] [pid 21138:tid 21202] [client 78.96.80.214:27437] [client 78.96.80.214] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.96.80.214, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afJaQ5uzwUiyMeUnp31Q7QAAAQU"]
[Thu Apr 30 03:21:39.402892 2026] [:error] [pid 21138:tid 21202] [client 78.96.80.214:27437] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu Apr 30 05:15:52.050581 2026] [:error] [pid 18112:tid 18172] [client 172.213.161.119:30550] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Thu Apr 30 05:15:52.286466 2026] [:error] [pid 18112:tid 18155] [client 172.213.161.119:30550] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Thu Apr 30 05:15:52.521735 2026] [:error] [pid 18112:tid 18157] [client 172.213.161.119:30550] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Thu Apr 30 05:15:52.769913 2026] [:error] [pid 18112:tid 18152] [client 172.213.161.119:30550] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Thu Apr 30 05:15:53.005667 2026] [:error] [pid 18112:tid 18171] [client 172.213.161.119:30550] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Thu Apr 30 05:15:53.240988 2026] [:error] [pid 18112:tid 18165] [client 172.213.161.119:30550] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu Apr 30 05:15:53.476975 2026] [:error] [pid 18112:tid 18151] [client 172.213.161.119:30550] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Thu Apr 30 05:15:53.713212 2026] [:error] [pid 18112:tid 18159] [client 172.213.161.119:30550] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu Apr 30 05:15:54.633907 2026] [:error] [pid 18112:tid 18160] [client 172.213.161.119:30550] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Thu Apr 30 05:15:56.177470 2026] [:error] [pid 18112:tid 18166] [client 172.213.161.119:30550] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Thu Apr 30 05:15:56.645152 2026] [:error] [pid 18112:tid 18163] [client 172.213.161.119:30550] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afJ1DCUrJv3y8j6Lm1uXVAAAAE0"]
[Thu Apr 30 05:15:57.607784 2026] [:error] [pid 18113:tid 18177] [client 172.213.161.119:33837] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afJ1DXiIjwsVGkvz5IlOtwAAAIA"]
[Thu Apr 30 05:15:58.545541 2026] [:error] [pid 52350:tid 52367] [client 172.213.161.119:38293] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afJ1Dv1j4GHE9hm7bfct_gAAAQk"]
[Thu Apr 30 05:15:59.608376 2026] [:error] [pid 52436:tid 52455] [client 172.213.161.119:38275] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "afJ1DwLFWPk_P7AfE8fZ2QAAAVA"]
[Thu Apr 30 11:34:40.255883 2026] [:error] [pid 53641:tid 53669] [client 172.213.161.119:38312] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Thu Apr 30 11:34:40.492447 2026] [:error] [pid 53641:tid 53667] [client 172.213.161.119:38312] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Thu Apr 30 11:34:40.967655 2026] [:error] [pid 53641:tid 53668] [client 172.213.161.119:38312] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Thu Apr 30 11:34:41.446478 2026] [:error] [pid 53641:tid 53657] [client 172.213.161.119:38312] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Thu Apr 30 11:34:41.688363 2026] [:error] [pid 53641:tid 53659] [client 172.213.161.119:38312] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Thu Apr 30 11:34:41.927525 2026] [:error] [pid 53641:tid 53658] [client 172.213.161.119:38312] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Thu Apr 30 11:34:42.164011 2026] [:error] [pid 53641:tid 53654] [client 172.213.161.119:38312] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Thu Apr 30 11:34:42.402381 2026] [:error] [pid 53641:tid 53660] [client 172.213.161.119:38312] File does not exist: /usr/local/apache/htdocs/suspended-page/meta.php
[Thu Apr 30 11:34:42.635045 2026] [:error] [pid 53641:tid 53673] [client 172.213.161.119:38312] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "afLN0mC119wja3QGeAGjAgAAAZU"]
[Thu Apr 30 11:34:43.595811 2026] [:error] [pid 52350:tid 52359] [client 172.213.161.119:34347] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "afLN0_1j4GHE9hm7bfd1fAAAAQI"]
[Thu Apr 30 11:34:44.538434 2026] [:error] [pid 52436:tid 52458] [client 172.213.161.119:38285] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "afLN1ALFWPk_P7AfE8cRuQAAAVM"]
[Thu Apr 30 11:34:45.472178 2026] [:error] [pid 52436:tid 52453] [client 172.213.161.119:45288] [client 172.213.161.119] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "afLN1QLFWPk_P7AfE8cRugAAAU4"]
[Thu Apr 30 22:39:59.363157 2026] [:error] [pid 5820:tid 5843] [client 106.215.164.185:6198] [client 106.215.164.185] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 106.215.164.185, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afNpvwyrLh3-LgH3Xv9o9gAAABU"]
[Thu Apr 30 22:39:59.368605 2026] [:error] [pid 5820:tid 5843] [client 106.215.164.185:6198] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 01 01:39:04.202243 2026] [:error] [pid 21839:tid 21866] [client 37.120.153.42:36120] [client 37.120.153.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afOTuJ_Sh66m95WwxJ4agwAAAVg"]
[Fri May 01 01:39:04.203544 2026] [:error] [pid 47620:tid 47637] [client 37.120.153.42:36136] [client 37.120.153.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env/%5C"] [unique_id "afOTuL9bO-ytgFJ2lwOCDQAAAYk"]
[Fri May 01 01:39:04.487965 2026] [:error] [pid 5733:tid 5805] [client 37.120.153.42:36154] [client 37.120.153.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afOTuPT55_Ioa9J2OpIcEQAAAQ8"]
[Fri May 01 01:39:04.492671 2026] [:error] [pid 21839:tid 21865] [client 37.120.153.42:36140] [client 37.120.153.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afOTuJ_Sh66m95WwxJ4ahQAAAVc"]
[Fri May 01 01:39:05.491956 2026] [:error] [pid 47620:tid 47633] [client 37.120.153.42:36168] [client 37.120.153.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afOTub9bO-ytgFJ2lwOCDgAAAYU"]
[Fri May 01 01:39:06.491481 2026] [:error] [pid 5731:tid 5747] [client 37.120.153.42:36172] [client 37.120.153.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afOTug8tX7TbSfYoUIxiiAAAAIw"]
[Fri May 01 01:39:06.496946 2026] [:error] [pid 5731:tid 5755] [client 37.120.153.42:36174] [client 37.120.153.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afOTug8tX7TbSfYoUIxiiQAAAJQ"]
[Fri May 01 01:39:07.487852 2026] [:error] [pid 21839:tid 21860] [client 37.120.153.42:36180] [client 37.120.153.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env/."] [unique_id "afOTu5_Sh66m95WwxJ4aiQAAAVI"]
[Fri May 01 03:24:38.504836 2026] [:error] [pid 5732:tid 5772] [client 104.28.214.115:35322] [client 104.28.214.115] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "afOsdtuJ3iSd5Gdjqlh9ogAAAMk"]
[Fri May 01 04:56:40.687730 2026] [:error] [pid 5976:tid 5992] [client 92.53.64.155:58668] [client 92.53.64.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afPCCLbCb0ye2WjKlddy2wAAAQw"]
[Sat May 02 07:56:35.501456 2026] [:error] [pid 11894:tid 11917] [client 143.20.37.61:39172] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afU9szHh6DQF1tkXIKxyPAAAAVQ"]
[Sat May 02 07:56:35.754101 2026] [:error] [pid 53434:tid 53461] [client 143.20.37.61:59674] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "afU9s-9BXmRQcbfsxlzvlAAAABI"]
[Sat May 02 07:56:35.755496 2026] [:error] [pid 22846:tid 22859] [client 143.20.37.61:59670] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.bak" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-config.bak"] [unique_id "afU9s4m1Ms03Mfhp3aa4vAAAAQs"]
[Sat May 02 07:56:35.755901 2026] [:error] [pid 22846:tid 22863] [client 143.20.37.61:59664] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-config.php~"] [unique_id "afU9s4m1Ms03Mfhp3aa4vQAAAQ8"]
[Sat May 02 07:56:35.759144 2026] [:error] [pid 53434:tid 53450] [client 143.20.37.61:59634] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nextspaceconsulting.com.au|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nextspaceconsulting.com.au"] [uri "/terraform.tfstate.backup"] [unique_id "afU9s-9BXmRQcbfsxlzvlwAAAAc"]
[Sat May 02 07:56:36.005405 2026] [:error] [pid 22846:tid 22871] [client 143.20.37.61:59444] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "afU9tIm1Ms03Mfhp3aa4vgAAARc"]
[Sat May 02 07:56:36.005734 2026] [:error] [pid 53435:tid 53496] [client 143.20.37.61:59526] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "afU9tIDmp7_z8QkjSzNH2wAAAFg"]
[Sat May 02 07:56:36.006425 2026] [:error] [pid 11894:tid 11906] [client 143.20.37.61:59422] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "afU9tDHh6DQF1tkXIKxyPQAAAUk"]
[Sat May 02 07:56:36.006684 2026] [:error] [pid 11894:tid 11918] [client 143.20.37.61:59482] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "afU9tDHh6DQF1tkXIKxyPgAAAVU"]
[Sat May 02 07:56:36.007438 2026] [:error] [pid 22846:tid 22861] [client 143.20.37.61:59486] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "afU9tIm1Ms03Mfhp3aa4vwAAAQ0"]
[Sat May 02 07:56:36.007660 2026] [:error] [pid 53434:tid 53449] [client 143.20.37.61:59512] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "afU9tO9BXmRQcbfsxlzvmwAAAAY"]
[Sat May 02 07:56:36.008147 2026] [:error] [pid 53434:tid 53462] [client 143.20.37.61:59402] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "afU9tO9BXmRQcbfsxlzvnAAAABM"]
[Sat May 02 07:56:36.008732 2026] [:error] [pid 53435:tid 53475] [client 143.20.37.61:59456] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "afU9tIDmp7_z8QkjSzNH3gAAAEM"]
[Sat May 02 07:56:36.010044 2026] [:error] [pid 53434:tid 53456] [client 143.20.37.61:59430] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "afU9tO9BXmRQcbfsxlzvngAAAA0"]
[Sat May 02 07:56:36.010221 2026] [:error] [pid 53434:tid 53455] [client 143.20.37.61:59470] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "afU9tO9BXmRQcbfsxlzvnQAAAAw"]
[Sat May 02 07:56:36.011092 2026] [:error] [pid 53435:tid 53488] [client 143.20.37.61:59500] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env"] [unique_id "afU9tIDmp7_z8QkjSzNH3wAAAFA"]
[Sat May 02 07:56:36.026942 2026] [:error] [pid 22846:tid 22865] [client 143.20.37.61:59410] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "afU9tIm1Ms03Mfhp3aa4wAAAARE"]
[Sat May 02 07:56:36.086903 2026] [:error] [pid 22846:tid 22864] [client 143.20.37.61:59446] [client 143.20.37.61] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production.bak"] [unique_id "afU9tIm1Ms03Mfhp3aa4wQAAARA"]
[Sat May 02 12:35:12.717810 2026] [:error] [pid 52012:tid 52089] [client 192.96.159.129:59720] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afV_AEzSWr-8cpS83mhWVQAAA0w"]
[Sat May 02 15:40:41.337750 2026] [:error] [pid 51917:tid 51941] [client 34.83.85.222:50009] [client 34.83.85.222] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.85.222, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afWqea7wZviJ7BgcCi8m8AAAAdY"]
[Sat May 02 15:40:41.342985 2026] [:error] [pid 51917:tid 51941] [client 34.83.85.222:50009] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 02 15:40:43.221893 2026] [:error] [pid 51917:tid 51930] [client 34.83.85.222:50009] [client 34.83.85.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afWqe67wZviJ7BgcCi8m-wAAAcs"]
[Sat May 02 15:40:43.535941 2026] [:error] [pid 52010:tid 52065] [client 34.83.85.222:53700] [client 34.83.85.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afWqewiR6wohDtdeJMDKRwAAAtY"]
[Sat May 02 15:40:43.852000 2026] [:error] [pid 51917:tid 51927] [client 34.83.85.222:61816] [client 34.83.85.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afWqe67wZviJ7BgcCi8m_AAAAcg"]
[Sat May 02 15:40:44.182255 2026] [:error] [pid 52010:tid 52059] [client 34.83.85.222:61518] [client 34.83.85.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afWqfAiR6wohDtdeJMDKSwAAAtA"]
[Sat May 02 15:40:44.569828 2026] [:error] [pid 53435:tid 53488] [client 34.83.85.222:60309] [client 34.83.85.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afWqfIDmp7_z8QkjSzOH7AAAAFA"]
[Sat May 02 15:40:44.902510 2026] [:error] [pid 53434:tid 53447] [client 34.83.85.222:55186] [client 34.83.85.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afWqfO9BXmRQcbfsxlxasgAAAAQ"]
[Sat May 02 15:40:45.231464 2026] [:error] [pid 53434:tid 53443] [client 34.83.85.222:54319] [client 34.83.85.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afWqfe9BXmRQcbfsxlxatAAAAAA"]
[Sun May 03 03:57:05.272073 2026] [:error] [pid 40732:tid 40754] [client 35.232.27.124:50510] [client 35.232.27.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "afZXEf1lQrIvlEdzcVfiTgAAAMo"]
[Sun May 03 14:36:11.331420 2026] [:error] [pid 40386:tid 40394] [client 20.104.48.143:19447] File does not exist: /usr/local/apache/htdocs/suspended-page/png.php
[Sun May 03 14:36:11.541430 2026] [:error] [pid 40386:tid 40411] [client 20.104.48.143:19447] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-x7.php
[Sun May 03 14:36:11.749800 2026] [:error] [pid 40386:tid 40398] [client 20.104.48.143:19447] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sun May 03 14:36:11.958347 2026] [:error] [pid 40386:tid 40399] [client 20.104.48.143:19447] File does not exist: /usr/local/apache/htdocs/suspended-page/AxAo.php
[Sun May 03 14:36:12.174466 2026] [:error] [pid 40386:tid 40395] [client 20.104.48.143:19447] File does not exist: /usr/local/apache/htdocs/suspended-page/siln.php
[Sun May 03 14:36:12.384208 2026] [:error] [pid 40386:tid 40397] [client 20.104.48.143:19447] File does not exist: /usr/local/apache/htdocs/suspended-page/ext.php
[Sun May 03 14:36:12.594956 2026] [:error] [pid 40386:tid 40410] [client 20.104.48.143:19447] File does not exist: /usr/local/apache/htdocs/suspended-page/about3.php
[Sun May 03 14:36:12.812230 2026] [:error] [pid 40386:tid 40406] [client 20.104.48.143:19447] File does not exist: /usr/local/apache/htdocs/suspended-page/raw.php
[Sun May 03 14:36:14.265111 2026] [:error] [pid 40386:tid 40406] [client 20.104.48.143:19447] File does not exist: /usr/local/apache/htdocs/suspended-page/puvil.php
[Sun May 03 14:36:14.475117 2026] [:error] [pid 40386:tid 40407] [client 20.104.48.143:19447] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Sun May 03 14:36:14.680517 2026] [:error] [pid 40386:tid 40390] [client 20.104.48.143:19447] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tmpls.php"] [unique_id "afbs3lHJDYRXUf3IbRQOXQAAAMI"]
[Sun May 03 14:36:15.158387 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:19416] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tmpls.php"] [unique_id "afbs30HBbBLrXh6PBusSqQAAAUg"]
[Sun May 03 14:36:15.643678 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19420] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tmpls.php"] [unique_id "afbs30HBbBLrXh6PBusSqgAAAUs"]
[Sun May 03 14:36:16.066563 2026] [:error] [pid 40422:tid 40438] [client 20.104.48.143:19406] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tmpls.php"] [unique_id "afbs4EHBbBLrXh6PBusSqwAAAUw"]
[Sun May 03 14:36:16.725558 2026] [:error] [pid 40422:tid 40450] [client 20.104.48.143:19330] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3.php"] [unique_id "afbs4EHBbBLrXh6PBusSrQAAAVg"]
[Sun May 03 14:36:17.193797 2026] [:error] [pid 37127:tid 37186] [client 20.104.48.143:19427] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3.php"] [unique_id "afbs4f8khJXb5O5aWVUiOwAAAEI"]
[Sun May 03 14:36:17.726424 2026] [:error] [pid 37127:tid 37206] [client 20.104.48.143:19398] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3.php"] [unique_id "afbs4f8khJXb5O5aWVUiPQAAAFQ"]
[Sun May 03 14:36:18.203176 2026] [:error] [pid 37246:tid 37264] [client 20.104.48.143:19413] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/n3.php"] [unique_id "afbs4jhvYFGNwhnPamrkXAAAAQ4"]
[Sun May 03 14:36:18.713317 2026] [:error] [pid 40456:tid 40470] [client 20.104.48.143:19333] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "afbs4jSujTvwdzEkjScslAAAAYw"]
[Sun May 03 14:36:19.235807 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:19338] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "afbs4zhvYFGNwhnPamrkXwAAARQ"]
[Sun May 03 14:36:19.681375 2026] [:error] [pid 37127:tid 37187] [client 20.104.48.143:19344] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "afbs4_8khJXb5O5aWVUiPwAAAEM"]
[Sun May 03 14:36:20.098753 2026] [:error] [pid 40422:tid 40448] [client 20.104.48.143:19399] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aaa.php"] [unique_id "afbs5EHBbBLrXh6PBusStAAAAVY"]
[Sun May 03 14:36:20.647124 2026] [:error] [pid 40422:tid 40446] [client 20.104.48.143:19343] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afbs5EHBbBLrXh6PBusStQAAAVQ"]
[Sun May 03 14:36:21.115791 2026] [:error] [pid 37246:tid 37269] [client 20.104.48.143:19360] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afbs5ThvYFGNwhnPamrkYAAAARM"]
[Sun May 03 14:36:21.577400 2026] [:error] [pid 40422:tid 40440] [client 20.104.48.143:19434] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afbs5UHBbBLrXh6PBusStwAAAU4"]
[Sun May 03 14:36:22.038759 2026] [:error] [pid 37246:tid 37259] [client 20.104.48.143:19435] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afbs5jhvYFGNwhnPamrkYwAAAQo"]
[Sun May 03 14:36:22.474916 2026] [:error] [pid 40422:tid 40426] [client 20.104.48.143:19335] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mo.php"] [unique_id "afbs5kHBbBLrXh6PBusSuQAAAUA"]
[Sun May 03 14:36:22.918708 2026] [:error] [pid 40422:tid 40432] [client 20.104.48.143:19341] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mo.php"] [unique_id "afbs5kHBbBLrXh6PBusSugAAAUY"]
[Sun May 03 14:36:23.346879 2026] [:error] [pid 37126:tid 37164] [client 20.104.48.143:19395] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mo.php"] [unique_id "afbs5_R_A42N-LtDyrsH3gAAAAs"]
[Sun May 03 14:36:23.762666 2026] [:error] [pid 40386:tid 40401] [client 20.104.48.143:19436] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mo.php"] [unique_id "afbs51HJDYRXUf3IbRQOYwAAAM0"]
[Sun May 03 14:36:24.197083 2026] [:error] [pid 40422:tid 40445] [client 20.104.48.143:19393] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "afbs6EHBbBLrXh6PBusSvgAAAVM"]
[Sun May 03 14:36:24.673981 2026] [:error] [pid 40422:tid 40444] [client 20.104.48.143:19453] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "afbs6EHBbBLrXh6PBusSvwAAAVI"]
[Sun May 03 14:36:25.129592 2026] [:error] [pid 37130:tid 37229] [client 20.104.48.143:19414] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "afbs6aIu7bmXKXicRk9sIwAAAJA"]
[Sun May 03 14:36:25.690341 2026] [:error] [pid 37130:tid 37235] [client 20.104.48.143:19418] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file5.php"] [unique_id "afbs6aIu7bmXKXicRk9sJQAAAJY"]
[Sun May 03 14:36:26.164824 2026] [:error] [pid 37246:tid 37266] [client 20.104.48.143:19346] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xrm.php"] [unique_id "afbs6jhvYFGNwhnPamrkZQAAARA"]
[Sun May 03 14:36:26.589677 2026] [:error] [pid 40456:tid 40464] [client 20.104.48.143:19415] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xrm.php"] [unique_id "afbs6jSujTvwdzEkjScsngAAAYY"]
[Sun May 03 14:36:27.022714 2026] [:error] [pid 40386:tid 40406] [client 20.104.48.143:19438] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xrm.php"] [unique_id "afbs61HJDYRXUf3IbRQOZwAAANI"]
[Sun May 03 14:36:27.451119 2026] [:error] [pid 40456:tid 40474] [client 20.104.48.143:19451] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xrm.php"] [unique_id "afbs6zSujTvwdzEkjScsnwAAAZA"]
[Sun May 03 14:36:28.058901 2026] [:error] [pid 40422:tid 40426] [client 20.104.48.143:19423] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asudo.php"] [unique_id "afbs7EHBbBLrXh6PBusSxAAAAUA"]
[Sun May 03 14:36:28.484480 2026] [:error] [pid 40422:tid 40427] [client 20.104.48.143:19444] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asudo.php"] [unique_id "afbs7EHBbBLrXh6PBusSxgAAAUE"]
[Sun May 03 14:36:28.929319 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19371] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asudo.php"] [unique_id "afbs7EHBbBLrXh6PBusSyAAAAUs"]
[Sun May 03 14:36:29.428586 2026] [:error] [pid 40422:tid 40444] [client 20.104.48.143:19364] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asudo.php"] [unique_id "afbs7UHBbBLrXh6PBusSzAAAAVI"]
[Sun May 03 14:36:29.867042 2026] [:error] [pid 37127:tid 37196] [client 20.104.48.143:19358] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdone1.php"] [unique_id "afbs7f8khJXb5O5aWVUiRAAAAEw"]
[Sun May 03 14:36:30.306117 2026] [:error] [pid 40422:tid 40447] [client 20.104.48.143:19328] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdone1.php"] [unique_id "afbs7kHBbBLrXh6PBusSzgAAAVU"]
[Sun May 03 14:36:30.746921 2026] [:error] [pid 40422:tid 40441] [client 20.104.48.143:19334] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdone1.php"] [unique_id "afbs7kHBbBLrXh6PBusS0gAAAU8"]
[Sun May 03 14:36:31.174271 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19345] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wdone1.php"] [unique_id "afbs70HBbBLrXh6PBusS1QAAAUs"]
[Sun May 03 14:36:31.614316 2026] [:error] [pid 40422:tid 40445] [client 20.104.48.143:19442] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file3.php"] [unique_id "afbs70HBbBLrXh6PBusS1wAAAVM"]
[Sun May 03 14:36:32.055638 2026] [:error] [pid 40422:tid 40428] [client 20.104.48.143:19337] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file3.php"] [unique_id "afbs8EHBbBLrXh6PBusS2AAAAUI"]
[Sun May 03 14:36:32.542663 2026] [:error] [pid 37246:tid 37253] [client 20.104.48.143:19443] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file3.php"] [unique_id "afbs8DhvYFGNwhnPamrkZgAAAQU"]
[Sun May 03 14:36:32.979477 2026] [:error] [pid 37246:tid 37256] [client 20.104.48.143:19388] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file3.php"] [unique_id "afbs8DhvYFGNwhnPamrkZwAAAQg"]
[Sun May 03 14:36:33.492020 2026] [:error] [pid 37246:tid 37254] [client 20.104.48.143:19410] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "afbs8ThvYFGNwhnPamrkaAAAAQY"]
[Sun May 03 14:36:33.925944 2026] [:error] [pid 40386:tid 40393] [client 20.104.48.143:19426] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "afbs8VHJDYRXUf3IbRQObAAAAMU"]
[Sun May 03 14:36:34.390809 2026] [:error] [pid 40422:tid 40438] [client 20.104.48.143:19332] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "afbs8kHBbBLrXh6PBusS2gAAAUw"]
[Sun May 03 14:36:34.820299 2026] [:error] [pid 37130:tid 37216] [client 20.104.48.143:19368] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "afbs8qIu7bmXKXicRk9sJwAAAIM"]
[Sun May 03 14:36:35.361048 2026] [:error] [pid 40422:tid 40433] [client 20.104.48.143:19387] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blox.php"] [unique_id "afbs80HBbBLrXh6PBusS3AAAAUc"]
[Sun May 03 14:36:35.837552 2026] [:error] [pid 40422:tid 40450] [client 20.104.48.143:19411] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blox.php"] [unique_id "afbs80HBbBLrXh6PBusS3QAAAVg"]
[Sun May 03 14:36:36.267153 2026] [:error] [pid 37246:tid 37255] [client 20.104.48.143:19278] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blox.php"] [unique_id "afbs9DhvYFGNwhnPamrkawAAAQc"]
[Sun May 03 14:36:36.696292 2026] [:error] [pid 40456:tid 40480] [client 20.104.48.143:19422] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blox.php"] [unique_id "afbs9DSujTvwdzEkjScspQAAAZY"]
[Sun May 03 14:36:37.119778 2026] [:error] [pid 40422:tid 40447] [client 20.104.48.143:19339] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "afbs9UHBbBLrXh6PBusS4AAAAVU"]
[Sun May 03 14:36:37.538217 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:19408] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "afbs9UHBbBLrXh6PBusS4QAAAUg"]
[Sun May 03 14:36:37.966941 2026] [:error] [pid 37126:tid 37158] [client 20.104.48.143:19369] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "afbs9fR_A42N-LtDyrsH4AAAAAU"]
[Sun May 03 14:36:38.408923 2026] [:error] [pid 40456:tid 40471] [client 20.104.48.143:19402] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "afbs9jSujTvwdzEkjScspgAAAY0"]
[Sun May 03 14:36:38.866748 2026] [:error] [pid 37246:tid 37274] [client 20.104.48.143:19445] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "afbs9jhvYFGNwhnPamrkbQAAARg"]
[Sun May 03 14:36:39.304135 2026] [:error] [pid 37127:tid 37206] [client 20.104.48.143:19353] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "afbs9_8khJXb5O5aWVUiSAAAAFQ"]
[Sun May 03 14:36:39.805618 2026] [:error] [pid 37246:tid 37261] [client 20.104.48.143:19431] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "afbs9zhvYFGNwhnPamrkbgAAAQs"]
[Sun May 03 14:36:40.454634 2026] [:error] [pid 37126:tid 37169] [client 20.104.48.143:19267] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zwso.php"] [unique_id "afbs-PR_A42N-LtDyrsH4wAAABA"]
[Sun May 03 14:36:40.874431 2026] [:error] [pid 37126:tid 37159] [client 20.104.48.143:19303] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelap.php"] [unique_id "afbs-PR_A42N-LtDyrsH5QAAAAY"]
[Sun May 03 14:36:41.349811 2026] [:error] [pid 40456:tid 40462] [client 20.104.48.143:19283] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelap.php"] [unique_id "afbs-TSujTvwdzEkjScspwAAAYQ"]
[Sun May 03 14:36:41.779679 2026] [:error] [pid 37127:tid 37193] [client 20.104.48.143:19266] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelap.php"] [unique_id "afbs-f8khJXb5O5aWVUiSQAAAEk"]
[Sun May 03 14:36:42.223484 2026] [:error] [pid 40456:tid 40475] [client 20.104.48.143:19382] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gelap.php"] [unique_id "afbs-jSujTvwdzEkjScsqQAAAZE"]
[Sun May 03 14:36:42.647537 2026] [:error] [pid 37246:tid 37264] [client 20.104.48.143:19407] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1vx.php"] [unique_id "afbs-jhvYFGNwhnPamrkdAAAAQ4"]
[Sun May 03 14:36:43.086178 2026] [:error] [pid 37127:tid 37202] [client 20.104.48.143:19351] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1vx.php"] [unique_id "afbs-_8khJXb5O5aWVUiTAAAAFE"]
[Sun May 03 14:36:43.530936 2026] [:error] [pid 37126:tid 37151] [client 20.104.48.143:19272] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1vx.php"] [unique_id "afbs-_R_A42N-LtDyrsH6AAAAAA"]
[Sun May 03 14:36:44.027788 2026] [:error] [pid 37127:tid 37195] [client 20.104.48.143:19441] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1vx.php"] [unique_id "afbs_P8khJXb5O5aWVUiTgAAAEs"]
[Sun May 03 14:36:44.476883 2026] [:error] [pid 37246:tid 37269] [client 20.104.48.143:19340] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "afbs_DhvYFGNwhnPamrkdgAAARM"]
[Sun May 03 14:36:45.001801 2026] [:error] [pid 37126:tid 37163] [client 20.104.48.143:19315] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "afbs_fR_A42N-LtDyrsH6gAAAAo"]
[Sun May 03 14:36:45.446715 2026] [:error] [pid 40456:tid 40460] [client 20.104.48.143:19450] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "afbs_TSujTvwdzEkjScsrgAAAYI"]
[Sun May 03 14:36:46.022749 2026] [:error] [pid 37246:tid 37249] [client 20.104.48.143:19446] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fe5.php"] [unique_id "afbs_jhvYFGNwhnPamrkeQAAAQE"]
[Sun May 03 14:36:46.488050 2026] [:error] [pid 37246:tid 37265] [client 20.104.48.143:19336] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "afbs_jhvYFGNwhnPamrkegAAAQ8"]
[Sun May 03 14:36:47.146653 2026] [:error] [pid 37126:tid 37164] [client 20.104.48.143:19365] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "afbs__R_A42N-LtDyrsH6wAAAAs"]
[Sun May 03 14:36:48.111146 2026] [:error] [pid 40456:tid 40470] [client 20.104.48.143:19448] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "afbtADSujTvwdzEkjScstwAAAYw"]
[Sun May 03 14:36:48.582092 2026] [:error] [pid 37126:tid 37175] [client 20.104.48.143:19405] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "afbtAPR_A42N-LtDyrsH7QAAABY"]
[Sun May 03 14:36:49.163513 2026] [:error] [pid 37126:tid 37158] [client 20.104.48.143:19356] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afbtAfR_A42N-LtDyrsH7wAAAAU"]
[Sun May 03 14:36:49.834776 2026] [:error] [pid 37126:tid 37161] [client 20.104.48.143:19301] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afbtAfR_A42N-LtDyrsH8AAAAAg"]
[Sun May 03 14:36:50.922212 2026] [:error] [pid 40456:tid 40473] [client 20.104.48.143:19295] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afbtAjSujTvwdzEkjScsuwAAAY8"]
[Sun May 03 14:36:51.811975 2026] [:error] [pid 40456:tid 40465] [client 20.104.48.143:19288] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afbtAzSujTvwdzEkjScsvwAAAYc"]
[Sun May 03 14:36:52.544392 2026] [:error] [pid 37246:tid 37250] [client 20.104.48.143:19285] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oylki.php"] [unique_id "afbtBDhvYFGNwhnPamrkfwAAAQI"]
[Sun May 03 14:36:53.019546 2026] [:error] [pid 37126:tid 37152] [client 20.104.48.143:19367] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oylki.php"] [unique_id "afbtBfR_A42N-LtDyrsH8wAAAAE"]
[Sun May 03 14:36:53.444278 2026] [:error] [pid 37127:tid 37187] [client 20.104.48.143:19287] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oylki.php"] [unique_id "afbtBf8khJXb5O5aWVUiUgAAAEM"]
[Sun May 03 14:36:53.903777 2026] [:error] [pid 40386:tid 40405] [client 20.104.48.143:19359] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/oylki.php"] [unique_id "afbtBVHJDYRXUf3IbRQOcgAAANE"]
[Sun May 03 14:36:54.383283 2026] [:error] [pid 40456:tid 40469] [client 20.104.48.143:19286] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about25.php"] [unique_id "afbtBjSujTvwdzEkjScswgAAAYs"]
[Sun May 03 14:36:54.827869 2026] [:error] [pid 40456:tid 40474] [client 20.104.48.143:19432] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about25.php"] [unique_id "afbtBjSujTvwdzEkjScsxQAAAZA"]
[Sun May 03 14:36:55.255788 2026] [:error] [pid 37127:tid 37193] [client 20.104.48.143:19383] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about25.php"] [unique_id "afbtB_8khJXb5O5aWVUiVQAAAEk"]
[Sun May 03 14:36:55.717885 2026] [:error] [pid 40386:tid 40404] [client 20.104.48.143:19455] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about25.php"] [unique_id "afbtB1HJDYRXUf3IbRQOcwAAANA"]
[Sun May 03 14:36:56.177441 2026] [:error] [pid 37127:tid 37207] [client 20.104.48.143:19381] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/path.php"] [unique_id "afbtCP8khJXb5O5aWVUiWAAAAFU"]
[Sun May 03 14:36:56.635375 2026] [:error] [pid 37127:tid 37199] [client 20.104.48.143:19227] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/path.php"] [unique_id "afbtCP8khJXb5O5aWVUiWgAAAE4"]
[Sun May 03 14:36:57.104007 2026] [:error] [pid 37130:tid 37226] [client 20.104.48.143:19419] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/path.php"] [unique_id "afbtCaIu7bmXKXicRk9sLAAAAI0"]
[Sun May 03 14:36:57.578953 2026] [:error] [pid 37127:tid 37190] [client 20.104.48.143:19362] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/path.php"] [unique_id "afbtCf8khJXb5O5aWVUiXAAAAEY"]
[Sun May 03 14:36:58.103788 2026] [:error] [pid 37126:tid 37168] [client 20.104.48.143:19380] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "afbtCvR_A42N-LtDyrsH9wAAAA8"]
[Sun May 03 14:36:58.573509 2026] [:error] [pid 40456:tid 40472] [client 20.104.48.143:19425] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "afbtCjSujTvwdzEkjScsywAAAY4"]
[Sun May 03 14:36:59.163480 2026] [:error] [pid 40422:tid 40439] [client 20.104.48.143:19389] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "afbtC0HBbBLrXh6PBusS5gAAAU0"]
[Sun May 03 14:36:59.595661 2026] [:error] [pid 40422:tid 40442] [client 20.104.48.143:19403] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/r4f_1.php"] [unique_id "afbtC0HBbBLrXh6PBusS6AAAAVA"]
[Sun May 03 14:37:00.088795 2026] [:error] [pid 40456:tid 40463] [client 20.104.48.143:19391] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "afbtDDSujTvwdzEkjScszgAAAYU"]
[Sun May 03 14:37:00.562793 2026] [:error] [pid 37246:tid 37263] [client 20.104.48.143:19366] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "afbtDDhvYFGNwhnPamrkgQAAAQ0"]
[Sun May 03 14:37:00.999076 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:19439] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "afbtDDhvYFGNwhnPamrkgwAAARQ"]
[Sun May 03 14:37:01.475848 2026] [:error] [pid 40456:tid 40467] [client 20.104.48.143:19277] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1.php"] [unique_id "afbtDTSujTvwdzEkjScs0AAAAYk"]
[Sun May 03 14:37:02.038893 2026] [:error] [pid 37246:tid 37254] [client 20.104.48.143:19331] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "afbtDjhvYFGNwhnPamrkhQAAAQY"]
[Sun May 03 14:37:02.581209 2026] [:error] [pid 37246:tid 37248] [client 20.104.48.143:19355] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "afbtDjhvYFGNwhnPamrkhwAAAQA"]
[Sun May 03 14:37:03.106037 2026] [:error] [pid 40456:tid 40461] [client 20.104.48.143:19409] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "afbtDzSujTvwdzEkjScs0wAAAYM"]
[Sun May 03 14:37:03.545263 2026] [:error] [pid 40456:tid 40474] [client 20.104.48.143:19394] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/33.php"] [unique_id "afbtDzSujTvwdzEkjScs1QAAAZA"]
[Sun May 03 14:37:04.065446 2026] [:error] [pid 40386:tid 40405] [client 20.104.48.143:19390] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "afbtEFHJDYRXUf3IbRQOegAAANE"]
[Sun May 03 14:37:04.507080 2026] [:error] [pid 37246:tid 37269] [client 20.104.48.143:19363] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "afbtEDhvYFGNwhnPamrkiQAAARM"]
[Sun May 03 14:37:05.006317 2026] [:error] [pid 37126:tid 37170] [client 20.104.48.143:19373] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "afbtEfR_A42N-LtDyrsH-AAAABE"]
[Sun May 03 14:37:05.516118 2026] [:error] [pid 37246:tid 37274] [client 20.104.48.143:19452] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-gr.php"] [unique_id "afbtEThvYFGNwhnPamrkigAAARg"]
[Sun May 03 14:37:05.996333 2026] [:error] [pid 37246:tid 37267] [client 20.104.48.143:19397] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mans.php"] [unique_id "afbtEThvYFGNwhnPamrkiwAAARE"]
[Sun May 03 14:37:06.780061 2026] [:error] [pid 40456:tid 40470] [client 20.104.48.143:19284] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mans.php"] [unique_id "afbtEjSujTvwdzEkjScs1gAAAYw"]
[Sun May 03 14:37:07.229904 2026] [:error] [pid 40456:tid 40465] [client 20.104.48.143:19386] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mans.php"] [unique_id "afbtEzSujTvwdzEkjScs1wAAAYc"]
[Sun May 03 14:37:07.669213 2026] [:error] [pid 40456:tid 40478] [client 20.104.48.143:19430] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mans.php"] [unique_id "afbtEzSujTvwdzEkjScs2AAAAZQ"]
[Sun May 03 14:37:08.102064 2026] [:error] [pid 40456:tid 40481] [client 20.104.48.143:19350] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "afbtFDSujTvwdzEkjScs2QAAAZc"]
[Sun May 03 14:37:08.521197 2026] [:error] [pid 37127:tid 37193] [client 20.104.48.143:19361] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "afbtFP8khJXb5O5aWVUiXgAAAEk"]
[Sun May 03 14:37:08.970652 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19207] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "afbtFEHBbBLrXh6PBusS6wAAAUs"]
[Sun May 03 14:37:09.520484 2026] [:error] [pid 37127:tid 37208] [client 20.104.48.143:19274] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "afbtFf8khJXb5O5aWVUiXwAAAFY"]
[Sun May 03 14:37:09.957084 2026] [:error] [pid 37127:tid 37202] [client 20.104.48.143:19329] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "afbtFf8khJXb5O5aWVUiYAAAAFE"]
[Sun May 03 14:37:10.438963 2026] [:error] [pid 37130:tid 37224] [client 20.104.48.143:19396] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "afbtFqIu7bmXKXicRk9sMwAAAIs"]
[Sun May 03 14:37:10.874432 2026] [:error] [pid 40422:tid 40445] [client 20.104.48.143:19375] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "afbtFkHBbBLrXh6PBusS7QAAAVM"]
[Sun May 03 14:37:11.367714 2026] [:error] [pid 40422:tid 40447] [client 20.104.48.143:19290] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zxin.php"] [unique_id "afbtF0HBbBLrXh6PBusS8QAAAVU"]
[Sun May 03 14:37:11.830803 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:19370] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "afbtF0HBbBLrXh6PBusS8gAAAUg"]
[Sun May 03 14:37:12.322348 2026] [:error] [pid 37246:tid 37253] [client 20.104.48.143:19349] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "afbtGDhvYFGNwhnPamrkkAAAAQU"]
[Sun May 03 14:37:12.862434 2026] [:error] [pid 40422:tid 40426] [client 20.104.48.143:19417] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "afbtGEHBbBLrXh6PBusS9wAAAUA"]
[Sun May 03 14:37:13.403556 2026] [:error] [pid 40422:tid 40433] [client 20.104.48.143:19454] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "afbtGUHBbBLrXh6PBusS-gAAAUc"]
[Sun May 03 14:37:13.897553 2026] [:error] [pid 37127:tid 37191] [client 20.104.48.143:19308] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "afbtGf8khJXb5O5aWVUiYwAAAEc"]
[Sun May 03 14:37:14.352251 2026] [:error] [pid 40386:tid 40402] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-at.php
[Sun May 03 14:37:14.560958 2026] [:error] [pid 40386:tid 40408] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/hk.php
[Sun May 03 14:37:14.769230 2026] [:error] [pid 40386:tid 40390] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/lco.php
[Sun May 03 14:37:14.993787 2026] [:error] [pid 40386:tid 40400] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/fun.php
[Sun May 03 14:37:15.221629 2026] [:error] [pid 40386:tid 40396] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sun May 03 14:37:15.441055 2026] [:error] [pid 40386:tid 40409] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/huyaa.php
[Sun May 03 14:37:15.649059 2026] [:error] [pid 40386:tid 40394] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/te.php
[Sun May 03 14:37:15.871666 2026] [:error] [pid 40386:tid 40393] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sun May 03 14:37:16.080298 2026] [:error] [pid 40386:tid 40392] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-2019.php
[Sun May 03 14:37:16.298950 2026] [:error] [pid 40386:tid 40411] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/X57.php
[Sun May 03 14:37:16.509493 2026] [:error] [pid 40386:tid 40398] [client 20.104.48.143:19293] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sun May 03 14:37:16.714831 2026] [:error] [pid 40386:tid 40399] [client 20.104.48.143:19293] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "afbtHFHJDYRXUf3IbRQOiwAAAMs"]
[Sun May 03 14:37:17.135455 2026] [:error] [pid 37246:tid 37269] [client 20.104.48.143:19440] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "afbtHThvYFGNwhnPamrkkwAAARM"]
[Sun May 03 14:37:17.588740 2026] [:error] [pid 37246:tid 37274] [client 20.104.48.143:19429] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "afbtHThvYFGNwhnPamrklAAAARg"]
[Sun May 03 14:37:18.030093 2026] [:error] [pid 37127:tid 37203] [client 20.104.48.143:19354] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "afbtHv8khJXb5O5aWVUiZQAAAFI"]
[Sun May 03 14:37:18.461020 2026] [:error] [pid 37127:tid 37190] [client 20.104.48.143:19305] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "afbtHv8khJXb5O5aWVUiZgAAAEY"]
[Sun May 03 14:37:18.936636 2026] [:error] [pid 40386:tid 40397] [client 20.104.48.143:19401] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "afbtHlHJDYRXUf3IbRQOjQAAAMk"]
[Sun May 03 14:37:19.379100 2026] [:error] [pid 40456:tid 40478] [client 20.104.48.143:19219] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "afbtHzSujTvwdzEkjScs4AAAAZQ"]
[Sun May 03 14:37:19.805523 2026] [:error] [pid 40422:tid 40427] [client 20.104.48.143:19314] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "afbtH0HBbBLrXh6PBusS_gAAAUE"]
[Sun May 03 14:37:20.303855 2026] [:error] [pid 40456:tid 40475] [client 20.104.48.143:19282] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "afbtIDSujTvwdzEkjScs4wAAAZE"]
[Sun May 03 14:37:20.732107 2026] [:error] [pid 37130:tid 37222] [client 20.104.48.143:19202] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "afbtIKIu7bmXKXicRk9sOgAAAIk"]
[Sun May 03 14:37:21.181044 2026] [:error] [pid 37130:tid 37236] [client 20.104.48.143:19289] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "afbtIaIu7bmXKXicRk9sOwAAAJc"]
[Sun May 03 14:37:21.655798 2026] [:error] [pid 37130:tid 37217] [client 20.104.48.143:19213] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "afbtIaIu7bmXKXicRk9sPQAAAIQ"]
[Sun May 03 14:37:22.093131 2026] [:error] [pid 37130:tid 37227] [client 20.104.48.143:19268] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "afbtIqIu7bmXKXicRk9sPwAAAI4"]
[Sun May 03 14:37:22.523794 2026] [:error] [pid 40386:tid 40405] [client 20.104.48.143:19449] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "afbtIlHJDYRXUf3IbRQOkQAAANE"]
[Sun May 03 14:37:22.938484 2026] [:error] [pid 37130:tid 37214] [client 20.104.48.143:19232] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "afbtIqIu7bmXKXicRk9sQQAAAIE"]
[Sun May 03 14:37:23.377917 2026] [:error] [pid 37246:tid 37261] [client 20.104.48.143:19384] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sk25_1.php"] [unique_id "afbtIzhvYFGNwhnPamrklgAAAQs"]
[Sun May 03 14:37:23.803026 2026] [:error] [pid 37130:tid 37226] [client 20.104.48.143:19200] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/usep.php"] [unique_id "afbtI6Iu7bmXKXicRk9sRAAAAI0"]
[Sun May 03 14:37:24.301211 2026] [:error] [pid 37126:tid 37161] [client 20.104.48.143:19299] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/usep.php"] [unique_id "afbtJPR_A42N-LtDyrsIAAAAAAg"]
[Sun May 03 14:37:24.733916 2026] [:error] [pid 40386:tid 40388] [client 20.104.48.143:19230] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/usep.php"] [unique_id "afbtJFHJDYRXUf3IbRQOkwAAAMA"]
[Sun May 03 14:37:25.170493 2026] [:error] [pid 40422:tid 40444] [client 20.104.48.143:19437] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/usep.php"] [unique_id "afbtJUHBbBLrXh6PBusS_wAAAVI"]
[Sun May 03 14:37:25.592052 2026] [:error] [pid 37246:tid 37265] [client 20.104.48.143:19421] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "afbtJThvYFGNwhnPamrknAAAAQ8"]
[Sun May 03 14:37:26.011466 2026] [:error] [pid 40456:tid 40480] [client 20.104.48.143:19235] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "afbtJjSujTvwdzEkjScs5gAAAZY"]
[Sun May 03 14:37:26.442535 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:19276] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "afbtJjhvYFGNwhnPamrknwAAARQ"]
[Sun May 03 14:37:26.911493 2026] [:error] [pid 40422:tid 40431] [client 20.104.48.143:19348] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "afbtJkHBbBLrXh6PBusTAAAAAUU"]
[Sun May 03 14:37:27.352627 2026] [:error] [pid 37246:tid 37254] [client 20.104.48.143:19347] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "afbtJzhvYFGNwhnPamrkoQAAAQY"]
[Sun May 03 14:37:27.772999 2026] [:error] [pid 40422:tid 40447] [client 20.104.48.143:19239] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "afbtJ0HBbBLrXh6PBusTAgAAAVU"]
[Sun May 03 14:37:28.202163 2026] [:error] [pid 37127:tid 37202] [client 20.104.48.143:19224] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "afbtKP8khJXb5O5aWVUiawAAAFE"]
[Sun May 03 14:37:28.634816 2026] [:error] [pid 37126:tid 37162] [client 20.104.48.143:19275] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v4.php"] [unique_id "afbtKPR_A42N-LtDyrsIAgAAAAk"]
[Sun May 03 14:37:29.070056 2026] [:error] [pid 37126:tid 37152] [client 20.104.48.143:19433] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp4.php"] [unique_id "afbtKfR_A42N-LtDyrsIBAAAAAE"]
[Sun May 03 14:37:29.519749 2026] [:error] [pid 37126:tid 37177] [client 20.104.48.143:19297] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp4.php"] [unique_id "afbtKfR_A42N-LtDyrsIBgAAABg"]
[Sun May 03 14:37:29.933375 2026] [:error] [pid 37130:tid 37221] [client 20.104.48.143:19412] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp4.php"] [unique_id "afbtKaIu7bmXKXicRk9sRQAAAIg"]
[Sun May 03 14:37:30.363374 2026] [:error] [pid 37130:tid 37234] [client 20.104.48.143:19377] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp4.php"] [unique_id "afbtKqIu7bmXKXicRk9sRwAAAJU"]
[Sun May 03 14:37:30.782599 2026] [:error] [pid 37130:tid 37224] [client 20.104.48.143:19220] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "afbtKqIu7bmXKXicRk9sSAAAAIs"]
[Sun May 03 14:37:31.216692 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:19321] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "afbtK0HBbBLrXh6PBusTBQAAAUg"]
[Sun May 03 14:37:31.657658 2026] [:error] [pid 40422:tid 40446] [client 20.104.48.143:19229] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "afbtK0HBbBLrXh6PBusTBgAAAVQ"]
[Sun May 03 14:37:32.096934 2026] [:error] [pid 40456:tid 40468] [client 20.104.48.143:19169] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "afbtLDSujTvwdzEkjScs6AAAAYo"]
[Sun May 03 14:37:32.515135 2026] [:error] [pid 40386:tid 40409] [client 20.104.48.143:19324] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mamzi.php"] [unique_id "afbtLFHJDYRXUf3IbRQOlAAAANU"]
[Sun May 03 14:37:32.928053 2026] [:error] [pid 40422:tid 40441] [client 20.104.48.143:19253] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mamzi.php"] [unique_id "afbtLEHBbBLrXh6PBusTCQAAAU8"]
[Sun May 03 14:37:33.401217 2026] [:error] [pid 40386:tid 40393] [client 20.104.48.143:19243] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mamzi.php"] [unique_id "afbtLVHJDYRXUf3IbRQOlQAAAMU"]
[Sun May 03 14:37:33.852414 2026] [:error] [pid 40386:tid 40392] [client 20.104.48.143:19273] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mamzi.php"] [unique_id "afbtLVHJDYRXUf3IbRQOlwAAAMQ"]
[Sun May 03 14:37:34.402453 2026] [:error] [pid 40386:tid 40398] [client 20.104.48.143:19279] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpls.php"] [unique_id "afbtLlHJDYRXUf3IbRQOmAAAAMo"]
[Sun May 03 14:37:34.865283 2026] [:error] [pid 37130:tid 37237] [client 20.104.48.143:19271] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpls.php"] [unique_id "afbtLqIu7bmXKXicRk9sSgAAAJg"]
[Sun May 03 14:37:35.379187 2026] [:error] [pid 37246:tid 37261] [client 20.104.48.143:19205] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpls.php"] [unique_id "afbtLzhvYFGNwhnPamrkqgAAAQs"]
[Sun May 03 14:37:35.937710 2026] [:error] [pid 37246:tid 37251] [client 20.104.48.143:19264] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpls.php"] [unique_id "afbtLzhvYFGNwhnPamrkrQAAAQM"]
[Sun May 03 14:37:36.556294 2026] [:error] [pid 37246:tid 37257] [client 20.104.48.143:19267] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xrp.php"] [unique_id "afbtMDhvYFGNwhnPamrksQAAAQk"]
[Sun May 03 14:37:37.357244 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:19313] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xrp.php"] [unique_id "afbtMThvYFGNwhnPamrkswAAARQ"]
[Sun May 03 14:37:38.165074 2026] [:error] [pid 37127:tid 37194] [client 20.104.48.143:19280] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xrp.php"] [unique_id "afbtMv8khJXb5O5aWVUicgAAAEo"]
[Sun May 03 14:37:39.045420 2026] [:error] [pid 37130:tid 37220] [client 20.104.48.143:19225] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xrp.php"] [unique_id "afbtM6Iu7bmXKXicRk9sUQAAAIc"]
[Sun May 03 14:37:40.452952 2026] [:error] [pid 37130:tid 37214] [client 20.104.48.143:19291] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "afbtNKIu7bmXKXicRk9sWQAAAIE"]
[Sun May 03 14:37:41.511887 2026] [:error] [pid 40456:tid 40475] [client 20.104.48.143:19385] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "afbtNTSujTvwdzEkjScs7AAAAZE"]
[Sun May 03 14:37:42.270224 2026] [:error] [pid 37130:tid 37223] [client 20.104.48.143:19218] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "afbtNqIu7bmXKXicRk9sYQAAAIo"]
[Sun May 03 14:37:42.792507 2026] [:error] [pid 40456:tid 40467] [client 20.104.48.143:19153] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "afbtNjSujTvwdzEkjScs7gAAAYk"]
[Sun May 03 14:37:43.352991 2026] [:error] [pid 40456:tid 40469] [client 20.104.48.143:19155] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-acc.php"] [unique_id "afbtNzSujTvwdzEkjScs8AAAAYs"]
[Sun May 03 14:37:43.837424 2026] [:error] [pid 37246:tid 37263] [client 20.104.48.143:19236] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-acc.php"] [unique_id "afbtNzhvYFGNwhnPamrkugAAAQ0"]
[Sun May 03 14:37:44.263880 2026] [:error] [pid 37246:tid 37253] [client 20.104.48.143:19245] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-acc.php"] [unique_id "afbtODhvYFGNwhnPamrkvAAAAQU"]
[Sun May 03 14:37:44.709462 2026] [:error] [pid 40456:tid 40473] [client 20.104.48.143:19404] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-acc.php"] [unique_id "afbtODSujTvwdzEkjScs8gAAAY8"]
[Sun May 03 14:37:45.140657 2026] [:error] [pid 37246:tid 37273] [client 20.104.48.143:19424] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "afbtOThvYFGNwhnPamrkvgAAARc"]
[Sun May 03 14:37:45.590596 2026] [:error] [pid 40456:tid 40482] [client 20.104.48.143:19209] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "afbtOTSujTvwdzEkjScs8wAAAZg"]
[Sun May 03 14:37:46.013521 2026] [:error] [pid 37126:tid 37159] [client 20.104.48.143:19376] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "afbtOvR_A42N-LtDyrsIDgAAAAY"]
[Sun May 03 14:37:46.480692 2026] [:error] [pid 40456:tid 40463] [client 20.104.48.143:19352] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "afbtOjSujTvwdzEkjScs9QAAAYU"]
[Sun May 03 14:37:46.992475 2026] [:error] [pid 40456:tid 40465] [client 20.104.48.143:19254] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "afbtOjSujTvwdzEkjScs9wAAAYc"]
[Sun May 03 14:37:47.446009 2026] [:error] [pid 37127:tid 37209] [client 20.104.48.143:19137] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "afbtO_8khJXb5O5aWVUiwAAAAFc"]
[Sun May 03 14:37:47.934651 2026] [:error] [pid 37246:tid 37261] [client 20.104.48.143:19312] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "afbtOzhvYFGNwhnPamrkwwAAAQs"]
[Sun May 03 14:37:48.411973 2026] [:error] [pid 37127:tid 37201] [client 20.104.48.143:19311] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/031.php"] [unique_id "afbtPP8khJXb5O5aWVUiwgAAAFA"]
[Sun May 03 14:37:48.882906 2026] [:error] [pid 37246:tid 37267] [client 20.104.48.143:19342] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "afbtPDhvYFGNwhnPamrkxAAAARE"]
[Sun May 03 14:37:49.368854 2026] [:error] [pid 40422:tid 40427] [client 20.104.48.143:19323] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "afbtPUHBbBLrXh6PBusTFAAAAUE"]
[Sun May 03 14:37:49.847628 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19204] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "afbtPUHBbBLrXh6PBusTFgAAAUs"]
[Sun May 03 14:37:50.288996 2026] [:error] [pid 37246:tid 37265] [client 20.104.48.143:19185] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "afbtPjhvYFGNwhnPamrkyQAAAQ8"]
[Sun May 03 14:37:50.750415 2026] [:error] [pid 40456:tid 40466] [client 20.104.48.143:19269] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xx.php"] [unique_id "afbtPjSujTvwdzEkjScs-wAAAYg"]
[Sun May 03 14:37:51.209792 2026] [:error] [pid 40456:tid 40477] [client 20.104.48.143:19281] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xx.php"] [unique_id "afbtPzSujTvwdzEkjScs_QAAAZM"]
[Sun May 03 14:37:51.638479 2026] [:error] [pid 37246:tid 37254] [client 20.104.48.143:19206] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xx.php"] [unique_id "afbtPzhvYFGNwhnPamrkywAAAQY"]
[Sun May 03 14:37:52.106463 2026] [:error] [pid 37127:tid 37188] [client 20.104.48.143:19208] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xx.php"] [unique_id "afbtQP8khJXb5O5aWVUizQAAAEQ"]
[Sun May 03 14:37:52.521174 2026] [:error] [pid 37246:tid 37256] [client 20.104.48.143:19372] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/testo.php"] [unique_id "afbtQDhvYFGNwhnPamrkzAAAAQg"]
[Sun May 03 14:37:52.933251 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:19318] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/testo.php"] [unique_id "afbtQEHBbBLrXh6PBusTGQAAAUg"]
[Sun May 03 14:37:53.344476 2026] [:error] [pid 40422:tid 40446] [client 20.104.48.143:19233] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/testo.php"] [unique_id "afbtQUHBbBLrXh6PBusTGgAAAVQ"]
[Sun May 03 14:37:53.755249 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:19304] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/testo.php"] [unique_id "afbtQThvYFGNwhnPamrk0QAAARQ"]
[Sun May 03 14:37:54.172210 2026] [:error] [pid 37127:tid 37205] [client 20.104.48.143:19234] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/row.php"] [unique_id "afbtQv8khJXb5O5aWVUi1AAAAFM"]
[Sun May 03 14:37:54.595185 2026] [:error] [pid 37246:tid 37250] [client 20.104.48.143:19217] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/row.php"] [unique_id "afbtQjhvYFGNwhnPamrk0wAAAQI"]
[Sun May 03 14:37:55.037290 2026] [:error] [pid 37127:tid 37189] [client 20.104.48.143:19357] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/row.php"] [unique_id "afbtQ_8khJXb5O5aWVUi1QAAAEU"]
[Sun May 03 14:37:55.476953 2026] [:error] [pid 40422:tid 40430] [client 20.104.48.143:19262] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/row.php"] [unique_id "afbtQ0HBbBLrXh6PBusTIQAAAUQ"]
[Sun May 03 14:37:55.908057 2026] [:error] [pid 40422:tid 40448] [client 20.104.48.143:19166] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/555.php"] [unique_id "afbtQ0HBbBLrXh6PBusTJgAAAVY"]
[Sun May 03 14:37:56.337304 2026] [:error] [pid 40422:tid 40446] [client 20.104.48.143:19392] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/555.php"] [unique_id "afbtREHBbBLrXh6PBusTKQAAAVQ"]
[Sun May 03 14:37:56.795740 2026] [:error] [pid 40422:tid 40429] [client 20.104.48.143:19428] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/555.php"] [unique_id "afbtREHBbBLrXh6PBusTKwAAAUM"]
[Sun May 03 14:37:57.213002 2026] [:error] [pid 40422:tid 40449] [client 20.104.48.143:19151] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/555.php"] [unique_id "afbtRUHBbBLrXh6PBusTLgAAAVc"]
[Sun May 03 14:37:57.641683 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19173] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conflg.php"] [unique_id "afbtRUHBbBLrXh6PBusTMQAAAUs"]
[Sun May 03 14:37:58.060971 2026] [:error] [pid 40422:tid 40433] [client 20.104.48.143:19325] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conflg.php"] [unique_id "afbtRkHBbBLrXh6PBusTNQAAAUc"]
[Sun May 03 14:37:58.470731 2026] [:error] [pid 40422:tid 40440] [client 20.104.48.143:19400] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conflg.php"] [unique_id "afbtRkHBbBLrXh6PBusTOQAAAU4"]
[Sun May 03 14:37:58.953944 2026] [:error] [pid 37127:tid 37186] [client 20.104.48.143:19192] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-conflg.php"] [unique_id "afbtRv8khJXb5O5aWVUi1wAAAEI"]
[Sun May 03 14:37:59.372759 2026] [:error] [pid 37130:tid 37225] [client 20.104.48.143:19250] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "afbtR6Iu7bmXKXicRk9sbQAAAIw"]
[Sun May 03 14:37:59.792257 2026] [:error] [pid 37130:tid 37219] [client 20.104.48.143:19237] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "afbtR6Iu7bmXKXicRk9sbwAAAIY"]
[Sun May 03 14:38:00.239881 2026] [:error] [pid 37126:tid 37168] [client 20.104.48.143:19223] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "afbtSPR_A42N-LtDyrsIFAAAAA8"]
[Sun May 03 14:38:00.697342 2026] [:error] [pid 37126:tid 37165] [client 20.104.48.143:19210] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "afbtSPR_A42N-LtDyrsIFQAAAAw"]
[Sun May 03 14:38:01.134377 2026] [:error] [pid 37126:tid 37174] [client 20.104.48.143:19296] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jmfi2.php"] [unique_id "afbtSfR_A42N-LtDyrsIFwAAABU"]
[Sun May 03 14:38:01.600694 2026] [:error] [pid 37126:tid 37161] [client 20.104.48.143:19228] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jmfi2.php"] [unique_id "afbtSfR_A42N-LtDyrsIGQAAAAg"]
[Sun May 03 14:38:02.035492 2026] [:error] [pid 40386:tid 40404] [client 20.104.48.143:19307] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jmfi2.php"] [unique_id "afbtSlHJDYRXUf3IbRQOsgAAANA"]
[Sun May 03 14:38:02.513802 2026] [:error] [pid 37126:tid 37153] [client 20.104.48.143:19212] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jmfi2.php"] [unique_id "afbtSvR_A42N-LtDyrsIHAAAAAI"]
[Sun May 03 14:38:02.990889 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:19180] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "afbtSjhvYFGNwhnPamrk1QAAARQ"]
[Sun May 03 14:38:03.515340 2026] [:error] [pid 37130:tid 37218] [client 20.104.48.143:19171] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "afbtS6Iu7bmXKXicRk9sdQAAAIU"]
[Sun May 03 14:38:04.109886 2026] [:error] [pid 37246:tid 37251] [client 20.104.48.143:19256] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "afbtTDhvYFGNwhnPamrk2gAAAQM"]
[Sun May 03 14:38:04.548002 2026] [:error] [pid 37130:tid 37229] [client 20.104.48.143:19082] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-Blogs.php"] [unique_id "afbtTKIu7bmXKXicRk9sdwAAAJA"]
[Sun May 03 14:38:04.979200 2026] [:error] [pid 37127:tid 37205] [client 20.104.48.143:19265] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/card.php"] [unique_id "afbtTP8khJXb5O5aWVUi3wAAAFM"]
[Sun May 03 14:38:05.409495 2026] [:error] [pid 37246:tid 37273] [client 20.104.48.143:19292] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/card.php"] [unique_id "afbtTThvYFGNwhnPamrk3wAAARc"]
[Sun May 03 14:38:05.837182 2026] [:error] [pid 37130:tid 37231] [client 20.104.48.143:19319] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/card.php"] [unique_id "afbtTaIu7bmXKXicRk9seQAAAJI"]
[Sun May 03 14:38:06.275093 2026] [:error] [pid 40456:tid 40474] [client 20.104.48.143:19255] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/card.php"] [unique_id "afbtTjSujTvwdzEkjSctAQAAAZA"]
[Sun May 03 14:38:06.698106 2026] [:error] [pid 37127:tid 37208] [client 20.104.48.143:19248] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "afbtTv8khJXb5O5aWVUi5AAAAFY"]
[Sun May 03 14:38:07.153897 2026] [:error] [pid 40456:tid 40469] [client 20.104.48.143:19246] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "afbtTzSujTvwdzEkjSctBgAAAYs"]
[Sun May 03 14:38:07.649967 2026] [:error] [pid 40456:tid 40480] [client 20.104.48.143:19316] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "afbtTzSujTvwdzEkjSctCQAAAZY"]
[Sun May 03 14:38:08.132776 2026] [:error] [pid 40422:tid 40427] [client 20.104.48.143:19238] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mds.php"] [unique_id "afbtUEHBbBLrXh6PBusTPQAAAUE"]
[Sun May 03 14:38:08.607858 2026] [:error] [pid 40456:tid 40458] [client 20.104.48.143:19161] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hey.php"] [unique_id "afbtUDSujTvwdzEkjSctCwAAAYA"]
[Sun May 03 14:38:09.077203 2026] [:error] [pid 40422:tid 40442] [client 20.104.48.143:19163] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hey.php"] [unique_id "afbtUUHBbBLrXh6PBusTPwAAAVA"]
[Sun May 03 14:38:09.515380 2026] [:error] [pid 37127:tid 37207] [client 20.104.48.143:19379] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hey.php"] [unique_id "afbtUf8khJXb5O5aWVUi5gAAAFU"]
[Sun May 03 14:38:09.947898 2026] [:error] [pid 40456:tid 40459] [client 20.104.48.143:19214] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hey.php"] [unique_id "afbtUTSujTvwdzEkjSctDQAAAYE"]
[Sun May 03 14:38:10.409872 2026] [:error] [pid 40456:tid 40481] [client 20.104.48.143:19149] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "afbtUjSujTvwdzEkjSctDwAAAZc"]
[Sun May 03 14:38:10.880038 2026] [:error] [pid 40456:tid 40471] [client 20.104.48.143:19300] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "afbtUjSujTvwdzEkjSctEwAAAY0"]
[Sun May 03 14:38:11.335015 2026] [:error] [pid 37127:tid 37200] [client 20.104.48.143:19198] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "afbtU_8khJXb5O5aWVUi6QAAAE8"]
[Sun May 03 14:38:11.784816 2026] [:error] [pid 37130:tid 37224] [client 20.104.48.143:19327] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "afbtU6Iu7bmXKXicRk9sfQAAAIs"]
[Sun May 03 14:38:12.235431 2026] [:error] [pid 37130:tid 37234] [client 20.104.48.143:19240] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h.php"] [unique_id "afbtVKIu7bmXKXicRk9sfwAAAJU"]
[Sun May 03 14:38:12.749187 2026] [:error] [pid 37246:tid 37251] [client 20.104.48.143:19242] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h.php"] [unique_id "afbtVDhvYFGNwhnPamrk5gAAAQM"]
[Sun May 03 14:38:13.349600 2026] [:error] [pid 40456:tid 40463] [client 20.104.48.143:19320] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h.php"] [unique_id "afbtVTSujTvwdzEkjSctGgAAAYU"]
[Sun May 03 14:38:13.779979 2026] [:error] [pid 40456:tid 40470] [client 20.104.48.143:19138] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h.php"] [unique_id "afbtVTSujTvwdzEkjSctHAAAAYw"]
[Sun May 03 14:38:14.296136 2026] [:error] [pid 40422:tid 40447] [client 20.104.48.143:19215] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdroot.php"] [unique_id "afbtVkHBbBLrXh6PBusTRAAAAVU"]
[Sun May 03 14:38:14.759580 2026] [:error] [pid 37130:tid 37214] [client 20.104.48.143:19221] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdroot.php"] [unique_id "afbtVqIu7bmXKXicRk9sgwAAAIE"]
[Sun May 03 14:38:15.292754 2026] [:error] [pid 37130:tid 37218] [client 20.104.48.143:19191] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdroot.php"] [unique_id "afbtV6Iu7bmXKXicRk9shQAAAIU"]
[Sun May 03 14:38:15.726445 2026] [:error] [pid 40422:tid 40450] [client 20.104.48.143:19144] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bdroot.php"] [unique_id "afbtV0HBbBLrXh6PBusTSgAAAVg"]
[Sun May 03 14:38:16.165522 2026] [:error] [pid 37246:tid 37257] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/class-config.php
[Sun May 03 14:38:16.385327 2026] [:error] [pid 37246:tid 37254] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Sun May 03 14:38:16.597769 2026] [:error] [pid 37246:tid 37263] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/444.php
[Sun May 03 14:38:16.845917 2026] [:error] [pid 37246:tid 37259] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Sun May 03 14:38:17.057994 2026] [:error] [pid 37246:tid 37261] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/himu.php
[Sun May 03 14:38:17.276414 2026] [:error] [pid 37246:tid 37266] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Sun May 03 14:38:17.539968 2026] [:error] [pid 37246:tid 37256] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Sun May 03 14:38:17.793730 2026] [:error] [pid 37246:tid 37267] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/hans.php
[Sun May 03 14:38:18.014486 2026] [:error] [pid 37246:tid 37262] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/lgr.php
[Sun May 03 14:38:18.244885 2026] [:error] [pid 37246:tid 37268] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/an7.php
[Sun May 03 14:38:18.469566 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:19251] File does not exist: /usr/local/apache/htdocs/suspended-page/file1.php
[Sun May 03 14:38:18.679158 2026] [:error] [pid 37246:tid 37253] [client 20.104.48.143:19251] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luxe.php"] [unique_id "afbtWjhvYFGNwhnPamrk9AAAAQU"]
[Sun May 03 14:38:19.171024 2026] [:error] [pid 37130:tid 37236] [client 20.104.48.143:19145] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luxe.php"] [unique_id "afbtW6Iu7bmXKXicRk9siQAAAJc"]
[Sun May 03 14:38:19.639587 2026] [:error] [pid 37126:tid 37162] [client 20.104.48.143:19203] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luxe.php"] [unique_id "afbtW_R_A42N-LtDyrsIJAAAAAk"]
[Sun May 03 14:38:20.119291 2026] [:error] [pid 40456:tid 40468] [client 20.104.48.143:19193] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/luxe.php"] [unique_id "afbtXDSujTvwdzEkjSctJQAAAYo"]
[Sun May 03 14:38:20.556780 2026] [:error] [pid 40456:tid 40471] [client 20.104.48.143:19222] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp_ok.php"] [unique_id "afbtXDSujTvwdzEkjSctJwAAAY0"]
[Sun May 03 14:38:21.011427 2026] [:error] [pid 37126:tid 37159] [client 20.104.48.143:19270] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp_ok.php"] [unique_id "afbtXfR_A42N-LtDyrsIJgAAAAY"]
[Sun May 03 14:38:21.431499 2026] [:error] [pid 37126:tid 37151] [client 20.104.48.143:19306] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp_ok.php"] [unique_id "afbtXfR_A42N-LtDyrsIKAAAAAA"]
[Sun May 03 14:38:21.923358 2026] [:error] [pid 37126:tid 37167] [client 20.104.48.143:19302] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp_ok.php"] [unique_id "afbtXfR_A42N-LtDyrsIKwAAAA4"]
[Sun May 03 14:38:22.477680 2026] [:error] [pid 37130:tid 37224] [client 20.104.48.143:19294] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afbtXqIu7bmXKXicRk9sjQAAAIs"]
[Sun May 03 14:38:22.935353 2026] [:error] [pid 37127:tid 37201] [client 20.104.48.143:19165] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afbtXv8khJXb5O5aWVUi6gAAAFA"]
[Sun May 03 14:38:23.402487 2026] [:error] [pid 37130:tid 37219] [client 20.104.48.143:19216] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afbtX6Iu7bmXKXicRk9sjwAAAIY"]
[Sun May 03 14:38:23.862275 2026] [:error] [pid 40422:tid 40448] [client 20.104.48.143:19241] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "afbtX0HBbBLrXh6PBusTWQAAAVY"]
[Sun May 03 14:38:24.323071 2026] [:error] [pid 40422:tid 40426] [client 20.104.48.143:19167] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inde.php"] [unique_id "afbtYEHBbBLrXh6PBusTWwAAAUA"]
[Sun May 03 14:38:24.764016 2026] [:error] [pid 37130:tid 37230] [client 20.104.48.143:19378] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inde.php"] [unique_id "afbtYKIu7bmXKXicRk9skwAAAJE"]
[Sun May 03 14:38:25.223106 2026] [:error] [pid 40422:tid 40427] [client 20.104.48.143:19179] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inde.php"] [unique_id "afbtYUHBbBLrXh6PBusTXgAAAUE"]
[Sun May 03 14:38:25.697555 2026] [:error] [pid 40422:tid 40431] [client 20.104.48.143:19073] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inde.php"] [unique_id "afbtYUHBbBLrXh6PBusTYQAAAUU"]
[Sun May 03 14:38:26.152284 2026] [:error] [pid 37130:tid 37233] [client 20.104.48.143:19111] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xtt.php"] [unique_id "afbtYqIu7bmXKXicRk9slgAAAJQ"]
[Sun May 03 14:38:26.639026 2026] [:error] [pid 37126:tid 37177] [client 20.104.48.143:19310] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xtt.php"] [unique_id "afbtYvR_A42N-LtDyrsIMgAAABg"]
[Sun May 03 14:38:27.113914 2026] [:error] [pid 40422:tid 40446] [client 20.104.48.143:19298] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xtt.php"] [unique_id "afbtY0HBbBLrXh6PBusTZQAAAVQ"]
[Sun May 03 14:38:27.546099 2026] [:error] [pid 37127:tid 37192] [client 20.104.48.143:19122] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xtt.php"] [unique_id "afbtY_8khJXb5O5aWVUi7QAAAEg"]
[Sun May 03 14:38:27.996963 2026] [:error] [pid 40422:tid 40432] [client 20.104.48.143:19326] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "afbtY0HBbBLrXh6PBusTbAAAAUY"]
[Sun May 03 14:38:28.482024 2026] [:error] [pid 40422:tid 40431] [client 20.104.48.143:19084] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "afbtZEHBbBLrXh6PBusTbgAAAUU"]
[Sun May 03 14:38:29.036699 2026] [:error] [pid 37127:tid 37195] [client 20.104.48.143:19164] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "afbtZf8khJXb5O5aWVUi8AAAAEs"]
[Sun May 03 14:38:29.520758 2026] [:error] [pid 37127:tid 37207] [client 20.104.48.143:19259] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "afbtZf8khJXb5O5aWVUi8gAAAFU"]
[Sun May 03 14:38:29.981619 2026] [:error] [pid 37127:tid 37186] [client 20.104.48.143:19263] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "afbtZf8khJXb5O5aWVUi8wAAAEI"]
[Sun May 03 14:38:30.584003 2026] [:error] [pid 40422:tid 40445] [client 20.104.48.143:19374] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "afbtZkHBbBLrXh6PBusTdAAAAVM"]
[Sun May 03 14:38:31.095530 2026] [:error] [pid 40422:tid 40438] [client 20.104.48.143:19078] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "afbtZ0HBbBLrXh6PBusTdwAAAUw"]
[Sun May 03 14:38:31.631700 2026] [:error] [pid 40456:tid 40481] [client 20.104.48.143:19085] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "afbtZzSujTvwdzEkjSctLQAAAZc"]
[Sun May 03 14:38:32.248391 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19261] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zicgg.php"] [unique_id "afbtaEHBbBLrXh6PBusTfQAAAUs"]
[Sun May 03 14:38:32.842968 2026] [:error] [pid 40422:tid 40428] [client 20.104.48.143:19148] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zicgg.php"] [unique_id "afbtaEHBbBLrXh6PBusTfwAAAUI"]
[Sun May 03 14:38:33.457078 2026] [:error] [pid 40422:tid 40446] [client 20.104.48.143:19139] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zicgg.php"] [unique_id "afbtaUHBbBLrXh6PBusThAAAAVQ"]
[Sun May 03 14:38:34.037111 2026] [:error] [pid 37130:tid 37231] [client 20.104.48.143:19247] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zicgg.php"] [unique_id "afbtaqIu7bmXKXicRk9sngAAAJI"]
[Sun May 03 14:38:34.543681 2026] [:error] [pid 37246:tid 37263] [client 20.104.48.143:19152] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pouhg.php"] [unique_id "afbtajhvYFGNwhnPamrk-gAAAQ0"]
[Sun May 03 14:38:35.024689 2026] [:error] [pid 40456:tid 40465] [client 20.104.48.143:19132] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pouhg.php"] [unique_id "afbtazSujTvwdzEkjSctMAAAAYc"]
[Sun May 03 14:38:35.517384 2026] [:error] [pid 40386:tid 40405] [client 20.104.48.143:19196] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pouhg.php"] [unique_id "afbta1HJDYRXUf3IbRQOuQAAANE"]
[Sun May 03 14:38:36.016286 2026] [:error] [pid 37126:tid 37152] [client 20.104.48.143:19317] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pouhg.php"] [unique_id "afbtbPR_A42N-LtDyrsIOQAAAAE"]
[Sun May 03 14:38:36.542140 2026] [:error] [pid 37246:tid 37266] [client 20.104.48.143:19186] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "afbtbDhvYFGNwhnPamrk_QAAARA"]
[Sun May 03 14:38:37.119778 2026] [:error] [pid 37130:tid 37216] [client 20.104.48.143:19188] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "afbtbaIu7bmXKXicRk9sowAAAIM"]
[Sun May 03 14:38:37.729229 2026] [:error] [pid 37130:tid 37225] [client 20.104.48.143:18964] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "afbtbaIu7bmXKXicRk9spAAAAIw"]
[Sun May 03 14:38:38.205965 2026] [:error] [pid 37126:tid 37167] [client 20.104.48.143:19112] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file88.php"] [unique_id "afbtbvR_A42N-LtDyrsIPgAAAA4"]
[Sun May 03 14:38:38.699248 2026] [:error] [pid 37246:tid 37274] [client 20.104.48.143:19322] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xenon1337.php"] [unique_id "afbtbjhvYFGNwhnPamrlAAAAARg"]
[Sun May 03 14:38:39.164031 2026] [:error] [pid 37246:tid 37253] [client 20.104.48.143:19124] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xenon1337.php"] [unique_id "afbtbzhvYFGNwhnPamrlAwAAAQU"]
[Sun May 03 14:38:39.608365 2026] [:error] [pid 37246:tid 37259] [client 20.104.48.143:19074] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xenon1337.php"] [unique_id "afbtbzhvYFGNwhnPamrlDwAAAQo"]
[Sun May 03 14:38:40.102204 2026] [:error] [pid 37246:tid 37269] [client 20.104.48.143:19087] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xenon1337.php"] [unique_id "afbtcDhvYFGNwhnPamrlPwAAARM"]
[Sun May 03 14:38:40.591289 2026] [:error] [pid 40386:tid 40404] [client 20.104.48.143:19083] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "afbtcFHJDYRXUf3IbRQOvQAAANA"]
[Sun May 03 14:38:41.057454 2026] [:error] [pid 37130:tid 37221] [client 20.104.48.143:19131] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "afbtcaIu7bmXKXicRk9spgAAAIg"]
[Sun May 03 14:38:41.490617 2026] [:error] [pid 40456:tid 40459] [client 20.104.48.143:19130] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "afbtcTSujTvwdzEkjSctZgAAAYE"]
[Sun May 03 14:38:41.981846 2026] [:error] [pid 37246:tid 37264] [client 20.104.48.143:19226] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "afbtcThvYFGNwhnPamrlTAAAAQ4"]
[Sun May 03 14:38:42.455540 2026] [:error] [pid 37127:tid 37187] [client 20.104.48.143:19076] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "afbtcv8khJXb5O5aWVUi9wAAAEM"]
[Sun May 03 14:38:42.987659 2026] [:error] [pid 37127:tid 37203] [client 20.104.48.143:19189] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "afbtcv8khJXb5O5aWVUi-AAAAFI"]
[Sun May 03 14:38:43.471016 2026] [:error] [pid 37246:tid 37263] [client 20.104.48.143:19264] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "afbtczhvYFGNwhnPamrlTQAAAQ0"]
[Sun May 03 14:38:43.896149 2026] [:error] [pid 37246:tid 37254] [client 20.104.48.143:19172] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "afbtczhvYFGNwhnPamrlTgAAAQY"]
[Sun May 03 14:38:44.386292 2026] [:error] [pid 37246:tid 37261] [client 20.104.48.143:19105] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "afbtdDhvYFGNwhnPamrlUQAAAQs"]
[Sun May 03 14:38:44.866852 2026] [:error] [pid 37246:tid 37265] [client 20.104.48.143:19097] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "afbtdDhvYFGNwhnPamrlUwAAAQ8"]
[Sun May 03 14:38:45.360900 2026] [:error] [pid 40386:tid 40402] [client 20.104.48.143:19077] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "afbtdVHJDYRXUf3IbRQOvgAAAM4"]
[Sun May 03 14:38:45.862472 2026] [:error] [pid 40386:tid 40400] [client 20.104.48.143:19117] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "afbtdVHJDYRXUf3IbRQOvwAAAMw"]
[Sun May 03 14:38:46.324997 2026] [:error] [pid 40386:tid 40396] [client 20.104.48.143:19231] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cache.php"] [unique_id "afbtdlHJDYRXUf3IbRQOwAAAAMg"]
[Sun May 03 14:38:47.000122 2026] [:error] [pid 37130:tid 37232] [client 20.104.48.143:19156] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cache.php"] [unique_id "afbtdqIu7bmXKXicRk9sqQAAAJM"]
[Sun May 03 14:38:47.590306 2026] [:error] [pid 37126:tid 37157] [client 20.104.48.143:19125] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cache.php"] [unique_id "afbtd_R_A42N-LtDyrsIVgAAAAQ"]
[Sun May 03 14:38:48.240649 2026] [:error] [pid 37126:tid 37175] [client 20.104.48.143:19330] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cache.php"] [unique_id "afbtePR_A42N-LtDyrsIWgAAABY"]
[Sun May 03 14:38:48.839322 2026] [:error] [pid 40422:tid 40444] [client 20.104.48.143:19309] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "afbteEHBbBLrXh6PBusTlwAAAVI"]
[Sun May 03 14:38:49.325360 2026] [:error] [pid 37126:tid 37169] [client 20.104.48.143:19081] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "afbtefR_A42N-LtDyrsIXwAAABA"]
[Sun May 03 14:38:49.836318 2026] [:error] [pid 40386:tid 40393] [client 20.104.48.143:19160] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "afbteVHJDYRXUf3IbRQOwgAAAMU"]
[Sun May 03 14:38:50.288891 2026] [:error] [pid 40422:tid 40430] [client 20.104.48.143:19127] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "afbtekHBbBLrXh6PBusTmwAAAUQ"]
[Sun May 03 14:38:50.789797 2026] [:error] [pid 40386:tid 40394] [client 20.104.48.143:19249] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "afbtelHJDYRXUf3IbRQOxAAAAMY"]
[Sun May 03 14:38:51.312457 2026] [:error] [pid 40386:tid 40411] [client 20.104.48.143:18952] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "afbte1HJDYRXUf3IbRQOxwAAANc"]
[Sun May 03 14:38:51.758905 2026] [:error] [pid 40422:tid 40449] [client 20.104.48.143:19088] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "afbte0HBbBLrXh6PBusTnAAAAVc"]
[Sun May 03 14:38:52.342830 2026] [:error] [pid 40422:tid 40446] [client 20.104.48.143:19095] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file32.php"] [unique_id "afbtfEHBbBLrXh6PBusToAAAAVQ"]
[Sun May 03 14:38:52.792634 2026] [:error] [pid 40422:tid 40444] [client 20.104.48.143:18954] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cvrvk.php"] [unique_id "afbtfEHBbBLrXh6PBusTowAAAVI"]
[Sun May 03 14:38:53.280592 2026] [:error] [pid 40422:tid 40430] [client 20.104.48.143:19260] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cvrvk.php"] [unique_id "afbtfUHBbBLrXh6PBusTqAAAAUQ"]
[Sun May 03 14:38:53.829121 2026] [:error] [pid 40422:tid 40449] [client 20.104.48.143:19100] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cvrvk.php"] [unique_id "afbtfUHBbBLrXh6PBusTrQAAAVc"]
[Sun May 03 14:38:54.313859 2026] [:error] [pid 37127:tid 37198] [client 20.104.48.143:19157] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cvrvk.php"] [unique_id "afbtfv8khJXb5O5aWVUi_gAAAE0"]
[Sun May 03 14:38:54.754109 2026] [:error] [pid 40386:tid 40412] [client 20.104.48.143:19170] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp.php"] [unique_id "afbtflHJDYRXUf3IbRQO4wAAANg"]
[Sun May 03 14:38:55.388837 2026] [:error] [pid 37246:tid 37257] [client 20.104.48.143:19203] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp.php"] [unique_id "afbtfzhvYFGNwhnPamrlWQAAAQk"]
[Sun May 03 14:38:55.953973 2026] [:error] [pid 40422:tid 40427] [client 20.104.48.143:19140] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp.php"] [unique_id "afbtf0HBbBLrXh6PBusTtgAAAUE"]
[Sun May 03 14:38:56.411955 2026] [:error] [pid 40422:tid 40444] [client 20.104.48.143:19257] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-wp.php"] [unique_id "afbtgEHBbBLrXh6PBusTuAAAAVI"]
[Sun May 03 14:38:56.888156 2026] [:error] [pid 37127:tid 37188] [client 20.104.48.143:19175] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "afbtgP8khJXb5O5aWVUjAQAAAEQ"]
[Sun May 03 14:38:57.349370 2026] [:error] [pid 40422:tid 40432] [client 20.104.48.143:19162] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "afbtgUHBbBLrXh6PBusTuwAAAUY"]
[Sun May 03 14:38:57.880066 2026] [:error] [pid 37246:tid 37252] [client 20.104.48.143:18992] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "afbtgThvYFGNwhnPamrlXQAAAQQ"]
[Sun May 03 14:38:58.614770 2026] [:error] [pid 37246:tid 37255] [client 20.104.48.143:19133] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "afbtgjhvYFGNwhnPamrlYQAAAQc"]
[Sun May 03 14:38:59.062342 2026] [:error] [pid 37127:tid 37203] [client 20.104.48.143:19211] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hello.php"] [unique_id "afbtg_8khJXb5O5aWVUjBAAAAFI"]
[Sun May 03 14:38:59.673051 2026] [:error] [pid 40422:tid 40446] [client 20.104.48.143:18972] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hello.php"] [unique_id "afbtg0HBbBLrXh6PBusTvwAAAVQ"]
[Sun May 03 14:39:00.141190 2026] [:error] [pid 37127:tid 37202] [client 20.104.48.143:19201] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hello.php"] [unique_id "afbthP8khJXb5O5aWVUjCQAAAFE"]
[Sun May 03 14:39:00.655890 2026] [:error] [pid 37130:tid 37226] [client 20.104.48.143:19080] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hello.php"] [unique_id "afbthKIu7bmXKXicRk9s2AAAAI0"]
[Sun May 03 14:39:01.170157 2026] [:error] [pid 40422:tid 40441] [client 20.104.48.143:19102] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "afbthUHBbBLrXh6PBusTxAAAAU8"]
[Sun May 03 14:39:01.663562 2026] [:error] [pid 37130:tid 37221] [client 20.104.48.143:18967] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "afbthaIu7bmXKXicRk9s2gAAAIg"]
[Sun May 03 14:39:02.130594 2026] [:error] [pid 37127:tid 37206] [client 20.104.48.143:19079] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "afbthv8khJXb5O5aWVUjEAAAAFQ"]
[Sun May 03 14:39:02.641927 2026] [:error] [pid 37246:tid 37274] [client 20.104.48.143:19093] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-links-opml.php"] [unique_id "afbthjhvYFGNwhnPamrlZwAAARg"]
[Sun May 03 14:39:03.090602 2026] [:error] [pid 40386:tid 40403] [client 20.104.48.143:19120] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lti.php"] [unique_id "afbth1HJDYRXUf3IbRQO9gAAAM8"]
[Sun May 03 14:39:03.603490 2026] [:error] [pid 37127:tid 37194] [client 20.104.48.143:19121] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lti.php"] [unique_id "afbth_8khJXb5O5aWVUjEgAAAEo"]
[Sun May 03 14:39:04.109610 2026] [:error] [pid 37127:tid 37209] [client 20.104.48.143:19147] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lti.php"] [unique_id "afbtiP8khJXb5O5aWVUjFQAAAFc"]
[Sun May 03 14:39:04.684592 2026] [:error] [pid 37126:tid 37176] [client 20.104.48.143:19118] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lti.php"] [unique_id "afbtiPR_A42N-LtDyrsIfQAAABc"]
[Sun May 03 14:39:05.251682 2026] [:error] [pid 37127:tid 37189] [client 20.104.48.143:18947] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "afbtif8khJXb5O5aWVUjFwAAAEU"]
[Sun May 03 14:39:05.714573 2026] [:error] [pid 40422:tid 40427] [client 20.104.48.143:19109] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "afbtiUHBbBLrXh6PBusTygAAAUE"]
[Sun May 03 14:39:06.238942 2026] [:error] [pid 40422:tid 40435] [client 20.104.48.143:18950] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "afbtikHBbBLrXh6PBusTzgAAAUk"]
[Sun May 03 14:39:06.678788 2026] [:error] [pid 40456:tid 40480] [client 20.104.48.143:18946] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "afbtijSujTvwdzEkjSctiQAAAZY"]
[Sun May 03 14:39:07.149277 2026] [:error] [pid 40456:tid 40477] [client 20.104.48.143:19099] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellalfa.php"] [unique_id "afbtizSujTvwdzEkjSctiwAAAZM"]
[Sun May 03 14:39:07.617845 2026] [:error] [pid 40386:tid 40390] [client 20.104.48.143:19141] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellalfa.php"] [unique_id "afbti1HJDYRXUf3IbRQO-gAAAMI"]
[Sun May 03 14:39:08.042722 2026] [:error] [pid 40386:tid 40409] [client 20.104.48.143:19194] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellalfa.php"] [unique_id "afbtjFHJDYRXUf3IbRQO_QAAANU"]
[Sun May 03 14:39:08.533224 2026] [:error] [pid 37130:tid 37213] [client 20.104.48.143:19036] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shellalfa.php"] [unique_id "afbtjKIu7bmXKXicRk9s3wAAAIA"]
[Sun May 03 14:39:09.081210 2026] [:error] [pid 37130:tid 37220] [client 20.104.48.143:19090] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "afbtjaIu7bmXKXicRk9s4wAAAIc"]
[Sun May 03 14:39:09.571978 2026] [:error] [pid 40386:tid 40405] [client 20.104.48.143:19177] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "afbtjVHJDYRXUf3IbRQPAAAAANE"]
[Sun May 03 14:39:10.083590 2026] [:error] [pid 37130:tid 37216] [client 20.104.48.143:19008] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "afbtjqIu7bmXKXicRk9s5wAAAIM"]
[Sun May 03 14:39:10.547804 2026] [:error] [pid 40456:tid 40470] [client 20.104.48.143:19176] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "afbtjjSujTvwdzEkjSctjwAAAYw"]
[Sun May 03 14:39:11.056172 2026] [:error] [pid 37246:tid 37274] [client 20.104.48.143:19184] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "afbtjzhvYFGNwhnPamrlcAAAARg"]
[Sun May 03 14:39:11.497408 2026] [:error] [pid 40422:tid 40449] [client 20.104.48.143:19123] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "afbtj0HBbBLrXh6PBusT0gAAAVc"]
[Sun May 03 14:39:11.964984 2026] [:error] [pid 40456:tid 40478] [client 20.104.48.143:19101] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "afbtjzSujTvwdzEkjSctkQAAAZQ"]
[Sun May 03 14:39:12.407176 2026] [:error] [pid 40422:tid 40438] [client 20.104.48.143:19110] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xmu.php"] [unique_id "afbtkEHBbBLrXh6PBusT0wAAAUw"]
[Sun May 03 14:39:12.928684 2026] [:error] [pid 37130:tid 37237] [client 20.104.48.143:19075] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shelp.php"] [unique_id "afbtkKIu7bmXKXicRk9s6gAAAJg"]
[Sun May 03 14:39:13.388385 2026] [:error] [pid 40386:tid 40403] [client 20.104.48.143:18956] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shelp.php"] [unique_id "afbtkVHJDYRXUf3IbRQPAwAAAM8"]
[Sun May 03 14:39:13.831305 2026] [:error] [pid 37246:tid 37262] [client 20.104.48.143:19136] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shelp.php"] [unique_id "afbtkThvYFGNwhnPamrldgAAAQw"]
[Sun May 03 14:39:14.358007 2026] [:error] [pid 37127:tid 37203] [client 20.104.48.143:19150] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shelp.php"] [unique_id "afbtkv8khJXb5O5aWVUjHQAAAFI"]
[Sun May 03 14:39:14.810592 2026] [:error] [pid 40386:tid 40408] [client 20.104.48.143:19253] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "afbtklHJDYRXUf3IbRQPBQAAANQ"]
[Sun May 03 14:39:15.255836 2026] [:error] [pid 37127:tid 37210] [client 20.104.48.143:19195] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "afbtk_8khJXb5O5aWVUjIAAAAFg"]
[Sun May 03 14:39:15.843815 2026] [:error] [pid 37126:tid 37160] [client 20.104.48.143:19142] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "afbtk_R_A42N-LtDyrsIhAAAAAc"]
[Sun May 03 14:39:16.326797 2026] [:error] [pid 40386:tid 40396] [client 20.104.48.143:19091] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "afbtlFHJDYRXUf3IbRQPCAAAAMg"]
[Sun May 03 14:39:16.790774 2026] [:error] [pid 37246:tid 37263] [client 20.104.48.143:18961] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pucci.php"] [unique_id "afbtlDhvYFGNwhnPamrlfAAAAQ0"]
[Sun May 03 14:39:17.217904 2026] [:error] [pid 37126:tid 37165] [client 20.104.48.143:18963] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pucci.php"] [unique_id "afbtlfR_A42N-LtDyrsIhQAAAAw"]
[Sun May 03 14:39:17.663833 2026] [:error] [pid 37246:tid 37269] [client 20.104.48.143:19154] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pucci.php"] [unique_id "afbtlThvYFGNwhnPamrlfgAAARM"]
[Sun May 03 14:39:18.134639 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/pucci.php
[Sun May 03 14:39:18.347489 2026] [:error] [pid 40422:tid 40435] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Sun May 03 14:39:18.561465 2026] [:error] [pid 40422:tid 40441] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Sun May 03 14:39:18.802784 2026] [:error] [pid 40422:tid 40429] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sun May 03 14:39:19.013678 2026] [:error] [pid 40422:tid 40432] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sun May 03 14:39:19.223011 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/ol.php
[Sun May 03 14:39:19.454828 2026] [:error] [pid 40422:tid 40442] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/mws.php
[Sun May 03 14:39:19.664934 2026] [:error] [pid 40422:tid 40433] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Sun May 03 14:39:19.877867 2026] [:error] [pid 40422:tid 40428] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Sun May 03 14:39:20.098994 2026] [:error] [pid 40422:tid 40448] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/doc.php
[Sun May 03 14:39:20.310546 2026] [:error] [pid 40422:tid 40449] [client 20.104.48.143:19258] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sun May 03 14:39:20.520311 2026] [:error] [pid 40422:tid 40440] [client 20.104.48.143:19258] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/06.php"] [unique_id "afbtmEHBbBLrXh6PBusT4wAAAU4"]
[Sun May 03 14:39:20.997277 2026] [:error] [pid 40422:tid 40430] [client 20.104.48.143:18999] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/06.php"] [unique_id "afbtmEHBbBLrXh6PBusUFAAAAUQ"]
[Sun May 03 14:39:21.442997 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19244] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/06.php"] [unique_id "afbtmUHBbBLrXh6PBusUOgAAAUs"]
[Sun May 03 14:39:21.890177 2026] [:error] [pid 37246:tid 37266] [client 20.104.48.143:18948] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/06.php"] [unique_id "afbtmThvYFGNwhnPamrllwAAARA"]
[Sun May 03 14:39:22.301053 2026] [:error] [pid 37246:tid 37254] [client 20.104.48.143:19128] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "afbtmjhvYFGNwhnPamrlmQAAAQY"]
[Sun May 03 14:39:22.798660 2026] [:error] [pid 37127:tid 37191] [client 20.104.48.143:19000] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "afbtmv8khJXb5O5aWVUjKQAAAEc"]
[Sun May 03 14:39:23.239105 2026] [:error] [pid 40386:tid 40412] [client 20.104.48.143:18966] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "afbtm1HJDYRXUf3IbRQPCwAAANg"]
[Sun May 03 14:39:23.674073 2026] [:error] [pid 40386:tid 40391] [client 20.104.48.143:18958] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "afbtm1HJDYRXUf3IbRQPDgAAAMM"]
[Sun May 03 14:39:24.092428 2026] [:error] [pid 40422:tid 40450] [client 20.104.48.143:19187] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/owl.php"] [unique_id "afbtnEHBbBLrXh6PBusUUwAAAVg"]
[Sun May 03 14:39:24.505052 2026] [:error] [pid 40422:tid 40426] [client 20.104.48.143:19182] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/owl.php"] [unique_id "afbtnEHBbBLrXh6PBusUVgAAAUA"]
[Sun May 03 14:39:24.918179 2026] [:error] [pid 40456:tid 40469] [client 20.104.48.143:18990] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/owl.php"] [unique_id "afbtnDSujTvwdzEkjSctlwAAAYs"]
[Sun May 03 14:39:25.352827 2026] [:error] [pid 40422:tid 40441] [client 20.104.48.143:18981] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/owl.php"] [unique_id "afbtnUHBbBLrXh6PBusUWAAAAU8"]
[Sun May 03 14:39:25.777564 2026] [:error] [pid 40456:tid 40458] [client 20.104.48.143:19190] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hook.php"] [unique_id "afbtnTSujTvwdzEkjSctmgAAAYA"]
[Sun May 03 14:39:26.199606 2026] [:error] [pid 40422:tid 40433] [client 20.104.48.143:18955] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hook.php"] [unique_id "afbtnkHBbBLrXh6PBusUXAAAAUc"]
[Sun May 03 14:39:26.615878 2026] [:error] [pid 37127:tid 37192] [client 20.104.48.143:19143] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hook.php"] [unique_id "afbtnv8khJXb5O5aWVUjLQAAAEg"]
[Sun May 03 14:39:27.049724 2026] [:error] [pid 40422:tid 40440] [client 20.104.48.143:19069] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hook.php"] [unique_id "afbtn0HBbBLrXh6PBusUYgAAAU4"]
[Sun May 03 14:39:27.479180 2026] [:error] [pid 40422:tid 40426] [client 20.104.48.143:19013] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "afbtn0HBbBLrXh6PBusUZQAAAUA"]
[Sun May 03 14:39:27.898386 2026] [:error] [pid 40422:tid 40444] [client 20.104.48.143:19086] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "afbtn0HBbBLrXh6PBusUZgAAAVI"]
[Sun May 03 14:39:28.320916 2026] [:error] [pid 40386:tid 40402] [client 20.104.48.143:19158] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "afbtoFHJDYRXUf3IbRQPEQAAAM4"]
[Sun May 03 14:39:28.737731 2026] [:error] [pid 40386:tid 40393] [client 20.104.48.143:19089] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "afbtoFHJDYRXUf3IbRQPEwAAAMU"]
[Sun May 03 14:39:29.159406 2026] [:error] [pid 40456:tid 40472] [client 20.104.48.143:18982] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "afbtoTSujTvwdzEkjSctnAAAAY4"]
[Sun May 03 14:39:29.571131 2026] [:error] [pid 40386:tid 40389] [client 20.104.48.143:19094] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "afbtoVHJDYRXUf3IbRQPGQAAAME"]
[Sun May 03 14:39:30.025078 2026] [:error] [pid 37246:tid 37263] [client 20.104.48.143:18962] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "afbtojhvYFGNwhnPamrlpQAAAQ0"]
[Sun May 03 14:39:30.469832 2026] [:error] [pid 37246:tid 37251] [client 20.104.48.143:19092] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "afbtojhvYFGNwhnPamrlpwAAAQM"]
[Sun May 03 14:39:30.899369 2026] [:error] [pid 37127:tid 37186] [client 20.104.48.143:19104] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "afbtov8khJXb5O5aWVUjMQAAAEI"]
[Sun May 03 14:39:31.320601 2026] [:error] [pid 37246:tid 37262] [client 20.104.48.143:19018] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "afbtozhvYFGNwhnPamrlqgAAAQw"]
[Sun May 03 14:39:31.748645 2026] [:error] [pid 37126:tid 37173] [client 20.104.48.143:19103] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "afbto_R_A42N-LtDyrsIjAAAABQ"]
[Sun May 03 14:39:32.178359 2026] [:error] [pid 40422:tid 40445] [client 20.104.48.143:19022] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/less.php"] [unique_id "afbtpEHBbBLrXh6PBusUaAAAAVM"]
[Sun May 03 14:39:32.610790 2026] [:error] [pid 37130:tid 37217] [client 20.104.48.143:19146] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clirp.php"] [unique_id "afbtpKIu7bmXKXicRk9s-QAAAIQ"]
[Sun May 03 14:39:33.055380 2026] [:error] [pid 37126:tid 37160] [client 20.104.48.143:18974] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clirp.php"] [unique_id "afbtpfR_A42N-LtDyrsIjgAAAAc"]
[Sun May 03 14:39:33.496997 2026] [:error] [pid 37246:tid 37252] [client 20.104.48.143:19116] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clirp.php"] [unique_id "afbtpThvYFGNwhnPamrlqwAAAQQ"]
[Sun May 03 14:39:33.922786 2026] [:error] [pid 37127:tid 37188] [client 20.104.48.143:19115] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/clirp.php"] [unique_id "afbtpf8khJXb5O5aWVUjNAAAAEQ"]
[Sun May 03 14:39:34.394189 2026] [:error] [pid 40422:tid 40442] [client 20.104.48.143:19114] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "afbtpkHBbBLrXh6PBusUbQAAAVA"]
[Sun May 03 14:39:34.842999 2026] [:error] [pid 40386:tid 40388] [client 20.104.48.143:19197] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "afbtplHJDYRXUf3IbRQPHAAAAMA"]
[Sun May 03 14:39:35.369273 2026] [:error] [pid 40386:tid 40393] [client 20.104.48.143:19113] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "afbtp1HJDYRXUf3IbRQPHwAAAMU"]
[Sun May 03 14:39:35.819250 2026] [:error] [pid 40456:tid 40462] [client 20.104.48.143:19106] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "afbtpzSujTvwdzEkjSctoQAAAYQ"]
[Sun May 03 14:39:36.251275 2026] [:error] [pid 37246:tid 37265] [client 20.104.48.143:18969] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wkdec.php"] [unique_id "afbtqDhvYFGNwhnPamrlrAAAAQ8"]
[Sun May 03 14:39:36.669829 2026] [:error] [pid 37246:tid 37253] [client 20.104.48.143:19129] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wkdec.php"] [unique_id "afbtqDhvYFGNwhnPamrlrgAAAQU"]
[Sun May 03 14:39:37.089413 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:19056] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wkdec.php"] [unique_id "afbtqThvYFGNwhnPamrlsAAAARQ"]
[Sun May 03 14:39:37.537035 2026] [:error] [pid 37130:tid 37219] [client 20.104.48.143:18944] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wkdec.php"] [unique_id "afbtqaIu7bmXKXicRk9s-wAAAIY"]
[Sun May 03 14:39:37.970256 2026] [:error] [pid 40456:tid 40469] [client 20.104.48.143:18945] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lo.php"] [unique_id "afbtqTSujTvwdzEkjSctpQAAAYs"]
[Sun May 03 14:39:38.460971 2026] [:error] [pid 40422:tid 40450] [client 20.104.48.143:19159] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lo.php"] [unique_id "afbtqkHBbBLrXh6PBusUbwAAAVg"]
[Sun May 03 14:39:38.874228 2026] [:error] [pid 37126:tid 37164] [client 20.104.48.143:19168] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lo.php"] [unique_id "afbtqvR_A42N-LtDyrsIlgAAAAs"]
[Sun May 03 14:39:39.317029 2026] [:error] [pid 37126:tid 37158] [client 20.104.48.143:19108] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lo.php"] [unique_id "afbtq_R_A42N-LtDyrsIlwAAAAU"]
[Sun May 03 14:39:39.760987 2026] [:error] [pid 37126:tid 37170] [client 20.104.48.143:18965] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "afbtq_R_A42N-LtDyrsImgAAABE"]
[Sun May 03 14:39:40.190821 2026] [:error] [pid 37130:tid 37218] [client 20.104.48.143:18989] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "afbtrKIu7bmXKXicRk9tAAAAAIU"]
[Sun May 03 14:39:40.651115 2026] [:error] [pid 40422:tid 40427] [client 20.104.48.143:19001] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "afbtrEHBbBLrXh6PBusUcwAAAUE"]
[Sun May 03 14:39:41.063792 2026] [:error] [pid 37246:tid 37255] [client 20.104.48.143:18994] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "afbtrThvYFGNwhnPamrlsgAAAQc"]
[Sun May 03 14:39:41.481796 2026] [:error] [pid 37126:tid 37151] [client 20.104.48.143:19044] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "afbtrfR_A42N-LtDyrsImwAAAAA"]
[Sun May 03 14:39:41.908573 2026] [:error] [pid 40422:tid 40449] [client 20.104.48.143:19025] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "afbtrUHBbBLrXh6PBusUeAAAAVc"]
[Sun May 03 14:39:42.357639 2026] [:error] [pid 37246:tid 37272] [client 20.104.48.143:18971] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "afbtrjhvYFGNwhnPamrltgAAARY"]
[Sun May 03 14:39:42.773938 2026] [:error] [pid 37127:tid 37193] [client 20.104.48.143:19010] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "afbtrv8khJXb5O5aWVUjOgAAAEk"]
[Sun May 03 14:39:43.198028 2026] [:error] [pid 37130:tid 37225] [client 20.104.48.143:18953] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "afbtr6Iu7bmXKXicRk9tAwAAAIw"]
[Sun May 03 14:39:43.691799 2026] [:error] [pid 37127:tid 37186] [client 20.104.48.143:19023] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "afbtr_8khJXb5O5aWVUjPgAAAEI"]
[Sun May 03 14:39:44.168065 2026] [:error] [pid 37127:tid 37206] [client 20.104.48.143:19061] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "afbtsP8khJXb5O5aWVUjQAAAAFQ"]
[Sun May 03 14:39:44.597763 2026] [:error] [pid 37127:tid 37194] [client 20.104.48.143:18985] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog.php"] [unique_id "afbtsP8khJXb5O5aWVUjRAAAAEo"]
[Sun May 03 14:39:45.024874 2026] [:error] [pid 40386:tid 40403] [client 20.104.48.143:18997] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "afbtsVHJDYRXUf3IbRQPJQAAAM8"]
[Sun May 03 14:39:45.460900 2026] [:error] [pid 37246:tid 37250] [client 20.104.48.143:19063] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "afbtsThvYFGNwhnPamrltwAAAQI"]
[Sun May 03 14:39:45.913141 2026] [:error] [pid 37130:tid 37227] [client 20.104.48.143:19006] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "afbtsaIu7bmXKXicRk9tCAAAAI4"]
[Sun May 03 14:39:46.389178 2026] [:error] [pid 40456:tid 40475] [client 20.104.48.143:19178] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "afbtsjSujTvwdzEkjSctqwAAAZE"]
[Sun May 03 14:39:46.803135 2026] [:error] [pid 37246:tid 37252] [client 20.104.48.143:19174] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "afbtsjhvYFGNwhnPamrlvAAAAQQ"]
[Sun May 03 14:39:47.253075 2026] [:error] [pid 37126:tid 37167] [client 20.104.48.143:18949] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "afbts_R_A42N-LtDyrsIoAAAAA4"]
[Sun May 03 14:39:47.681917 2026] [:error] [pid 37246:tid 37265] [client 20.104.48.143:18988] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "afbtszhvYFGNwhnPamrlvwAAAQ8"]
[Sun May 03 14:39:48.139291 2026] [:error] [pid 37127:tid 37196] [client 20.104.48.143:18980] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "afbttP8khJXb5O5aWVUjRgAAAEw"]
[Sun May 03 14:39:48.595457 2026] [:error] [pid 37246:tid 37253] [client 20.104.48.143:19037] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cliner.php"] [unique_id "afbttDhvYFGNwhnPamrlwQAAAQU"]
[Sun May 03 14:39:49.008438 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:18978] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cliner.php"] [unique_id "afbttThvYFGNwhnPamrlwwAAARQ"]
[Sun May 03 14:39:49.504356 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19014] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cliner.php"] [unique_id "afbttUHBbBLrXh6PBusUewAAAUs"]
[Sun May 03 14:39:49.940481 2026] [:error] [pid 40422:tid 40427] [client 20.104.48.143:19098] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-cliner.php"] [unique_id "afbttUHBbBLrXh6PBusUfQAAAUE"]
[Sun May 03 14:39:50.378036 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:18979] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "afbttkHBbBLrXh6PBusUfwAAAUg"]
[Sun May 03 14:39:50.816620 2026] [:error] [pid 37246:tid 37264] [client 20.104.48.143:18918] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "afbttjhvYFGNwhnPamrlyAAAAQ4"]
[Sun May 03 14:39:51.229193 2026] [:error] [pid 37246:tid 37273] [client 20.104.48.143:19028] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "afbttzhvYFGNwhnPamrlyQAAARc"]
[Sun May 03 14:39:51.648771 2026] [:error] [pid 37246:tid 37249] [client 20.104.48.143:18897] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v3.php"] [unique_id "afbttzhvYFGNwhnPamrlygAAAQE"]
[Sun May 03 14:39:52.091102 2026] [:error] [pid 37246:tid 37248] [client 20.104.48.143:19134] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "afbtuDhvYFGNwhnPamrlzAAAAQA"]
[Sun May 03 14:39:52.521133 2026] [:error] [pid 37246:tid 37274] [client 20.104.48.143:19252] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "afbtuDhvYFGNwhnPamrlzQAAARg"]
[Sun May 03 14:39:52.935846 2026] [:error] [pid 37246:tid 37251] [client 20.104.48.143:18970] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "afbtuDhvYFGNwhnPamrlzwAAAQM"]
[Sun May 03 14:39:53.390520 2026] [:error] [pid 37246:tid 37262] [client 20.104.48.143:19003] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "afbtuThvYFGNwhnPamrl0AAAAQw"]
[Sun May 03 14:39:53.821530 2026] [:error] [pid 40422:tid 40428] [client 20.104.48.143:18896] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "afbtuUHBbBLrXh6PBusUigAAAUI"]
[Sun May 03 14:39:54.238826 2026] [:error] [pid 40422:tid 40435] [client 20.104.48.143:18977] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "afbtukHBbBLrXh6PBusUjAAAAUk"]
[Sun May 03 14:39:54.694929 2026] [:error] [pid 40422:tid 40431] [client 20.104.48.143:19107] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "afbtukHBbBLrXh6PBusUkAAAAUU"]
[Sun May 03 14:39:55.140756 2026] [:error] [pid 37130:tid 37224] [client 20.104.48.143:19242] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "afbtu6Iu7bmXKXicRk9tCwAAAIs"]
[Sun May 03 14:39:55.563895 2026] [:error] [pid 40386:tid 40402] [client 20.104.48.143:18983] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ton.php"] [unique_id "afbtu1HJDYRXUf3IbRQPKQAAAM4"]
[Sun May 03 14:39:55.989200 2026] [:error] [pid 40422:tid 40439] [client 20.104.48.143:19026] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ton.php"] [unique_id "afbtu0HBbBLrXh6PBusUmQAAAU0"]
[Sun May 03 14:39:56.486075 2026] [:error] [pid 37127:tid 37186] [client 20.104.48.143:19020] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ton.php"] [unique_id "afbtvP8khJXb5O5aWVUjSQAAAEI"]
[Sun May 03 14:39:56.903945 2026] [:error] [pid 37127:tid 37200] [client 20.104.48.143:19041] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ton.php"] [unique_id "afbtvP8khJXb5O5aWVUjSgAAAE8"]
[Sun May 03 14:39:57.349788 2026] [:error] [pid 37127:tid 37185] [client 20.104.48.143:18968] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "afbtvf8khJXb5O5aWVUjSwAAAEE"]
[Sun May 03 14:39:57.778062 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:19183] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "afbtvUHBbBLrXh6PBusUnwAAAUg"]
[Sun May 03 14:39:58.283585 2026] [:error] [pid 37127:tid 37194] [client 20.104.48.143:19016] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "afbtvv8khJXb5O5aWVUjTQAAAEo"]
[Sun May 03 14:39:58.718823 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:19199] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "afbtvjhvYFGNwhnPamrl0wAAARQ"]
[Sun May 03 14:39:59.170426 2026] [:error] [pid 37127:tid 37198] [client 20.104.48.143:19035] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zzkhe.php"] [unique_id "afbtv_8khJXb5O5aWVUjTgAAAE0"]
[Sun May 03 14:39:59.607249 2026] [:error] [pid 40386:tid 40395] [client 20.104.48.143:19071] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zzkhe.php"] [unique_id "afbtv1HJDYRXUf3IbRQPLAAAAMc"]
[Sun May 03 14:40:00.054437 2026] [:error] [pid 37246:tid 37264] [client 20.104.48.143:19012] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zzkhe.php"] [unique_id "afbtwDhvYFGNwhnPamrl1AAAAQ4"]
[Sun May 03 14:40:00.507323 2026] [:error] [pid 37246:tid 37248] [client 20.104.48.143:18996] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zzkhe.php"] [unique_id "afbtwDhvYFGNwhnPamrl2AAAAQA"]
[Sun May 03 14:40:00.998988 2026] [:error] [pid 37126:tid 37173] [client 20.104.48.143:19015] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xm.php"] [unique_id "afbtwPR_A42N-LtDyrsIqQAAABQ"]
[Sun May 03 14:40:01.427701 2026] [:error] [pid 37246:tid 37251] [client 20.104.48.143:18909] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xm.php"] [unique_id "afbtwThvYFGNwhnPamrl2wAAAQM"]
[Sun May 03 14:40:01.847425 2026] [:error] [pid 37246:tid 37262] [client 20.104.48.143:18899] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xm.php"] [unique_id "afbtwThvYFGNwhnPamrl3AAAAQw"]
[Sun May 03 14:40:02.272480 2026] [:error] [pid 40456:tid 40458] [client 20.104.48.143:19021] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xm.php"] [unique_id "afbtwjSujTvwdzEkjSctsAAAAYA"]
[Sun May 03 14:40:02.734383 2026] [:error] [pid 37127:tid 37210] [client 20.104.48.143:18895] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "afbtwv8khJXb5O5aWVUjUwAAAFg"]
[Sun May 03 14:40:03.240183 2026] [:error] [pid 37127:tid 37189] [client 20.104.48.143:18891] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "afbtw_8khJXb5O5aWVUjVwAAAEU"]
[Sun May 03 14:40:03.761005 2026] [:error] [pid 40422:tid 40444] [client 20.104.48.143:19135] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "afbtw0HBbBLrXh6PBusUpQAAAVI"]
[Sun May 03 14:40:04.200109 2026] [:error] [pid 40386:tid 40396] [client 20.104.48.143:19047] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cc13.php"] [unique_id "afbtxFHJDYRXUf3IbRQPLwAAAMg"]
[Sun May 03 14:40:04.640047 2026] [:error] [pid 40386:tid 40392] [client 20.104.48.143:19096] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "afbtxFHJDYRXUf3IbRQPMAAAAMQ"]
[Sun May 03 14:40:05.080661 2026] [:error] [pid 40422:tid 40429] [client 20.104.48.143:19046] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "afbtxUHBbBLrXh6PBusUrwAAAUM"]
[Sun May 03 14:40:05.509260 2026] [:error] [pid 40422:tid 40448] [client 20.104.48.143:18932] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "afbtxUHBbBLrXh6PBusUtAAAAVY"]
[Sun May 03 14:40:05.961186 2026] [:error] [pid 40422:tid 40438] [client 20.104.48.143:19072] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "afbtxUHBbBLrXh6PBusUtgAAAUw"]
[Sun May 03 14:40:06.404781 2026] [:error] [pid 37130:tid 37219] [client 20.104.48.143:19067] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tires.php"] [unique_id "afbtxqIu7bmXKXicRk9tGAAAAIY"]
[Sun May 03 14:40:06.840702 2026] [:error] [pid 40422:tid 40431] [client 20.104.48.143:19059] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tires.php"] [unique_id "afbtxkHBbBLrXh6PBusUuwAAAUU"]
[Sun May 03 14:40:07.273133 2026] [:error] [pid 37127:tid 37186] [client 20.104.48.143:19030] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tires.php"] [unique_id "afbtx_8khJXb5O5aWVUjWQAAAEI"]
[Sun May 03 14:40:07.724787 2026] [:error] [pid 40422:tid 40428] [client 20.104.48.143:19054] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tires.php"] [unique_id "afbtx0HBbBLrXh6PBusUwgAAAUI"]
[Sun May 03 14:40:08.142958 2026] [:error] [pid 37127:tid 37200] [client 20.104.48.143:19048] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asas.php"] [unique_id "afbtyP8khJXb5O5aWVUjWgAAAE8"]
[Sun May 03 14:40:08.578092 2026] [:error] [pid 40422:tid 40441] [client 20.104.48.143:18959] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asas.php"] [unique_id "afbtyEHBbBLrXh6PBusUxgAAAU8"]
[Sun May 03 14:40:09.042638 2026] [:error] [pid 40422:tid 40427] [client 20.104.48.143:18976] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asas.php"] [unique_id "afbtyUHBbBLrXh6PBusUyAAAAUE"]
[Sun May 03 14:40:09.460270 2026] [:error] [pid 37246:tid 37264] [client 20.104.48.143:19005] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asas.php"] [unique_id "afbtyThvYFGNwhnPamrl4QAAAQ4"]
[Sun May 03 14:40:09.990419 2026] [:error] [pid 37246:tid 37263] [client 20.104.48.143:19058] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "afbtyThvYFGNwhnPamrl5AAAAQ0"]
[Sun May 03 14:40:10.515980 2026] [:error] [pid 37246:tid 37254] [client 20.104.48.143:18884] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "afbtyjhvYFGNwhnPamrl6gAAAQY"]
[Sun May 03 14:40:11.015368 2026] [:error] [pid 37246:tid 37262] [client 20.104.48.143:19004] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "afbtyzhvYFGNwhnPamrl7QAAAQw"]
[Sun May 03 14:40:11.671707 2026] [:error] [pid 40422:tid 40445] [client 20.104.48.143:19045] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class19.php"] [unique_id "afbty0HBbBLrXh6PBusUywAAAVM"]
[Sun May 03 14:40:12.154438 2026] [:error] [pid 37246:tid 37253] [client 20.104.48.143:18912] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "afbtzDhvYFGNwhnPamrl8gAAAQU"]
[Sun May 03 14:40:12.602200 2026] [:error] [pid 40422:tid 40435] [client 20.104.48.143:19002] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "afbtzEHBbBLrXh6PBusU0AAAAUk"]
[Sun May 03 14:40:13.027805 2026] [:error] [pid 40422:tid 40443] [client 20.104.48.143:18923] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "afbtzUHBbBLrXh6PBusU0QAAAVE"]
[Sun May 03 14:40:13.439848 2026] [:error] [pid 40422:tid 40439] [client 20.104.48.143:18880] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "afbtzUHBbBLrXh6PBusU0wAAAU0"]
[Sun May 03 14:40:13.878587 2026] [:error] [pid 37246:tid 37257] [client 20.104.48.143:18975] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "afbtzThvYFGNwhnPamrl9QAAAQk"]
[Sun May 03 14:40:14.352588 2026] [:error] [pid 37246:tid 37254] [client 20.104.48.143:19031] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "afbtzjhvYFGNwhnPamrl-AAAAQY"]
[Sun May 03 14:40:14.820531 2026] [:error] [pid 40422:tid 40429] [client 20.104.48.143:18998] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "afbtzkHBbBLrXh6PBusU2AAAAUM"]
[Sun May 03 14:40:15.317909 2026] [:error] [pid 37246:tid 37262] [client 20.104.48.143:18995] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "afbtzzhvYFGNwhnPamrl-wAAAQw"]
[Sun May 03 14:40:15.801080 2026] [:error] [pid 37246:tid 37249] [client 20.104.48.143:18993] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "afbtzzhvYFGNwhnPamrl_QAAAQE"]
[Sun May 03 14:40:16.254553 2026] [:error] [pid 37130:tid 37233] [client 20.104.48.143:19060] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "afbt0KIu7bmXKXicRk9tHQAAAJQ"]
[Sun May 03 14:40:16.696255 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19029] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "afbt0EHBbBLrXh6PBusU4QAAAUs"]
[Sun May 03 14:40:17.197431 2026] [:error] [pid 40422:tid 40446] [client 20.104.48.143:19032] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "afbt0UHBbBLrXh6PBusU5gAAAVQ"]
[Sun May 03 14:40:17.689967 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:19039] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "afbt0UHBbBLrXh6PBusU6gAAAUg"]
[Sun May 03 14:40:18.156693 2026] [:error] [pid 37246:tid 37252] [client 20.104.48.143:19068] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "afbt0jhvYFGNwhnPamrmAQAAAQQ"]
[Sun May 03 14:40:18.602670 2026] [:error] [pid 37246:tid 37249] [client 20.104.48.143:19065] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "afbt0jhvYFGNwhnPamrmAwAAAQE"]
[Sun May 03 14:40:19.039508 2026] [:error] [pid 37246:tid 37269] [client 20.104.48.143:18960] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "afbt0zhvYFGNwhnPamrmBwAAARM"]
[Sun May 03 14:40:19.502062 2026] [:error] [pid 37127:tid 37203] [client 20.104.48.143:19049] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new4.php"] [unique_id "afbt0_8khJXb5O5aWVUjXQAAAFI"]
[Sun May 03 14:40:20.011798 2026] [:error] [pid 40456:tid 40478] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Sun May 03 14:40:20.641821 2026] [:error] [pid 40456:tid 40478] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/myfile.php
[Sun May 03 14:40:20.851097 2026] [:error] [pid 40456:tid 40465] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/fileas.php
[Sun May 03 14:40:21.058998 2026] [:error] [pid 40456:tid 40463] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/system.php
[Sun May 03 14:40:21.324090 2026] [:error] [pid 40456:tid 40472] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Sun May 03 14:40:21.546009 2026] [:error] [pid 40456:tid 40474] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/wolv2.php
[Sun May 03 14:40:21.761739 2026] [:error] [pid 40456:tid 40471] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/class-db.php
[Sun May 03 14:40:21.970711 2026] [:error] [pid 40456:tid 40475] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sx10.php
[Sun May 03 14:40:22.186868 2026] [:error] [pid 40456:tid 40460] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/xml.php
[Sun May 03 14:40:22.402987 2026] [:error] [pid 40456:tid 40467] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/moon3.php
[Sun May 03 14:40:22.612031 2026] [:error] [pid 40456:tid 40466] [client 20.104.48.143:19034] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sun May 03 14:40:22.825708 2026] [:error] [pid 40456:tid 40462] [client 20.104.48.143:19034] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "afbt1jSujTvwdzEkjSctvwAAAYQ"]
[Sun May 03 14:40:23.283467 2026] [:error] [pid 37126:tid 37159] [client 20.104.48.143:19050] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "afbt1_R_A42N-LtDyrsItAAAAAY"]
[Sun May 03 14:40:23.746802 2026] [:error] [pid 40422:tid 40429] [client 20.104.48.143:18892] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "afbt10HBbBLrXh6PBusU_AAAAUM"]
[Sun May 03 14:40:24.337619 2026] [:error] [pid 37127:tid 37189] [client 20.104.48.143:18987] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xy.php"] [unique_id "afbt2P8khJXb5O5aWVUjYwAAAEU"]
[Sun May 03 14:40:24.781922 2026] [:error] [pid 37246:tid 37251] [client 20.104.48.143:18951] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "afbt2DhvYFGNwhnPamrmEQAAAQM"]
[Sun May 03 14:40:25.201998 2026] [:error] [pid 37127:tid 37191] [client 20.104.48.143:19119] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "afbt2f8khJXb5O5aWVUjawAAAEc"]
[Sun May 03 14:40:25.657731 2026] [:error] [pid 37130:tid 37223] [client 20.104.48.143:18957] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "afbt2aIu7bmXKXicRk9tIwAAAIo"]
[Sun May 03 14:40:26.097136 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:18936] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "afbt2kHBbBLrXh6PBusU_wAAAUg"]
[Sun May 03 14:40:26.524834 2026] [:error] [pid 40456:tid 40482] [client 20.104.48.143:19033] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "afbt2jSujTvwdzEkjSctwQAAAZg"]
[Sun May 03 14:40:26.966077 2026] [:error] [pid 37246:tid 37273] [client 20.104.48.143:19040] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "afbt2jhvYFGNwhnPamrmFwAAARc"]
[Sun May 03 14:40:27.393900 2026] [:error] [pid 37130:tid 37226] [client 20.104.48.143:18881] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "afbt26Iu7bmXKXicRk9tJQAAAI0"]
[Sun May 03 14:40:27.819589 2026] [:error] [pid 40422:tid 40446] [client 20.104.48.143:18907] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tox.php"] [unique_id "afbt20HBbBLrXh6PBusVAwAAAVQ"]
[Sun May 03 14:40:28.250834 2026] [:error] [pid 40422:tid 40445] [client 20.104.48.143:18888] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packed.php"] [unique_id "afbt3EHBbBLrXh6PBusVBAAAAVM"]
[Sun May 03 14:40:28.696478 2026] [:error] [pid 40456:tid 40464] [client 20.104.48.143:19066] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packed.php"] [unique_id "afbt3DSujTvwdzEkjSctxAAAAYY"]
[Sun May 03 14:40:29.118939 2026] [:error] [pid 40456:tid 40470] [client 20.104.48.143:18883] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packed.php"] [unique_id "afbt3TSujTvwdzEkjSctyAAAAYw"]
[Sun May 03 14:40:29.572214 2026] [:error] [pid 37246:tid 37267] [client 20.104.48.143:18984] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/packed.php"] [unique_id "afbt3ThvYFGNwhnPamrmHQAAARE"]
[Sun May 03 14:40:30.060280 2026] [:error] [pid 37130:tid 37232] [client 20.104.48.143:19398] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "afbt3qIu7bmXKXicRk9tKAAAAJM"]
[Sun May 03 14:40:30.473522 2026] [:error] [pid 40422:tid 40444] [client 20.104.48.143:18935] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "afbt3kHBbBLrXh6PBusVBwAAAVI"]
[Sun May 03 14:40:30.905593 2026] [:error] [pid 40422:tid 40438] [client 20.104.48.143:19051] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "afbt3kHBbBLrXh6PBusVCAAAAUw"]
[Sun May 03 14:40:31.317730 2026] [:error] [pid 37246:tid 37264] [client 20.104.48.143:19043] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "afbt3zhvYFGNwhnPamrmJQAAAQ4"]
[Sun May 03 14:40:31.749679 2026] [:error] [pid 37130:tid 37236] [client 20.104.48.143:19344] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccu.php"] [unique_id "afbt36Iu7bmXKXicRk9tKQAAAJc"]
[Sun May 03 14:40:32.200478 2026] [:error] [pid 40422:tid 40440] [client 20.104.48.143:18832] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccu.php"] [unique_id "afbt4EHBbBLrXh6PBusVCwAAAU4"]
[Sun May 03 14:40:32.634357 2026] [:error] [pid 40386:tid 40397] [client 20.104.48.143:18853] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccu.php"] [unique_id "afbt4FHJDYRXUf3IbRQPPQAAAMk"]
[Sun May 03 14:40:33.179487 2026] [:error] [pid 37246:tid 37250] [client 20.104.48.143:19181] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccu.php"] [unique_id "afbt4ThvYFGNwhnPamrmKQAAAQI"]
[Sun May 03 14:40:33.593997 2026] [:error] [pid 40386:tid 40410] [client 20.104.48.143:18920] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ffile.php"] [unique_id "afbt4VHJDYRXUf3IbRQPQQAAANY"]
[Sun May 03 14:40:34.066347 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:19399] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ffile.php"] [unique_id "afbt4kHBbBLrXh6PBusVDgAAAUs"]
[Sun May 03 14:40:34.483275 2026] [:error] [pid 40386:tid 40405] [client 20.104.48.143:19070] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ffile.php"] [unique_id "afbt4lHJDYRXUf3IbRQPRwAAANE"]
[Sun May 03 14:40:34.893452 2026] [:error] [pid 37127:tid 37205] [client 20.104.48.143:19434] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ffile.php"] [unique_id "afbt4v8khJXb5O5aWVUjdQAAAFM"]
[Sun May 03 14:40:35.320284 2026] [:error] [pid 37246:tid 37267] [client 20.104.48.143:18898] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.1.php"] [unique_id "afbt4zhvYFGNwhnPamrmLAAAARE"]
[Sun May 03 14:40:35.747710 2026] [:error] [pid 37246:tid 37271] [client 20.104.48.143:19007] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.1.php"] [unique_id "afbt4zhvYFGNwhnPamrmLgAAARU"]
[Sun May 03 14:40:36.161665 2026] [:error] [pid 40422:tid 40432] [client 20.104.48.143:19063] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.1.php"] [unique_id "afbt5EHBbBLrXh6PBusVFwAAAUY"]
[Sun May 03 14:40:36.575601 2026] [:error] [pid 40422:tid 40448] [client 20.104.48.143:19333] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.1.php"] [unique_id "afbt5EHBbBLrXh6PBusVGgAAAVY"]
[Sun May 03 14:40:37.003101 2026] [:error] [pid 37130:tid 37235] [client 20.104.48.143:18893] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "afbt5aIu7bmXKXicRk9tLwAAAJY"]
[Sun May 03 14:40:37.437573 2026] [:error] [pid 40422:tid 40437] [client 20.104.48.143:18848] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "afbt5UHBbBLrXh6PBusVHwAAAUs"]
[Sun May 03 14:40:37.849596 2026] [:error] [pid 40386:tid 40390] [client 20.104.48.143:19416] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "afbt5VHJDYRXUf3IbRQPSQAAAMI"]
[Sun May 03 14:40:38.262528 2026] [:error] [pid 40422:tid 40430] [client 20.104.48.143:19338] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/popo.php"] [unique_id "afbt5kHBbBLrXh6PBusVIQAAAUQ"]
[Sun May 03 14:40:38.686016 2026] [:error] [pid 40386:tid 40391] [client 20.104.48.143:19360] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/academy.php"] [unique_id "afbt5lHJDYRXUf3IbRQPSgAAAMM"]
[Sun May 03 14:40:39.108902 2026] [:error] [pid 37130:tid 37213] [client 20.104.48.143:19017] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/academy.php"] [unique_id "afbt56Iu7bmXKXicRk9tNAAAAIA"]
[Sun May 03 14:40:39.521807 2026] [:error] [pid 37130:tid 37227] [client 20.104.48.143:19453] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/academy.php"] [unique_id "afbt56Iu7bmXKXicRk9tNwAAAI4"]
[Sun May 03 14:40:39.954028 2026] [:error] [pid 37246:tid 37249] [client 20.104.48.143:19024] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/academy.php"] [unique_id "afbt5zhvYFGNwhnPamrmNQAAAQE"]
[Sun May 03 14:40:40.374881 2026] [:error] [pid 40422:tid 40444] [client 20.104.48.143:19346] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xml.php"] [unique_id "afbt6EHBbBLrXh6PBusVIgAAAVI"]
[Sun May 03 14:40:40.790894 2026] [:error] [pid 37246:tid 37271] [client 20.104.48.143:19420] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xml.php"] [unique_id "afbt6DhvYFGNwhnPamrmOQAAARU"]
[Sun May 03 14:40:41.202713 2026] [:error] [pid 37246:tid 37263] [client 20.104.48.143:18991] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xml.php"] [unique_id "afbt6ThvYFGNwhnPamrmOwAAAQ0"]
[Sun May 03 14:40:41.627426 2026] [:error] [pid 37246:tid 37268] [client 20.104.48.143:19343] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-xml.php"] [unique_id "afbt6ThvYFGNwhnPamrmPwAAARI"]
[Sun May 03 14:40:42.055643 2026] [:error] [pid 37246:tid 37266] [client 20.104.48.143:19438] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "afbt6jhvYFGNwhnPamrmQwAAARA"]
[Sun May 03 14:40:42.483070 2026] [:error] [pid 40386:tid 40399] [client 20.104.48.143:19358] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "afbt6lHJDYRXUf3IbRQPTAAAAMs"]
[Sun May 03 14:40:42.943178 2026] [:error] [pid 40386:tid 40404] [client 20.104.48.143:18905] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "afbt6lHJDYRXUf3IbRQPTgAAANA"]
[Sun May 03 14:40:43.392473 2026] [:error] [pid 40386:tid 40407] [client 20.104.48.143:19126] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/layout.php"] [unique_id "afbt61HJDYRXUf3IbRQPUwAAANM"]
[Sun May 03 14:40:43.805554 2026] [:error] [pid 40422:tid 40434] [client 20.104.48.143:18919] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "afbt60HBbBLrXh6PBusVKAAAAUg"]
[Sun May 03 14:40:44.223276 2026] [:error] [pid 37126:tid 37166] [client 20.104.48.143:18903] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "afbt7PR_A42N-LtDyrsIugAAAA0"]
[Sun May 03 14:40:44.650095 2026] [:error] [pid 37126:tid 37164] [client 20.104.48.143:19427] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "afbt7PR_A42N-LtDyrsIvAAAAAs"]
[Sun May 03 14:40:45.071958 2026] [:error] [pid 37126:tid 37167] [client 20.104.48.143:19334] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "afbt7fR_A42N-LtDyrsIvQAAAA4"]
[Sun May 03 14:40:45.482821 2026] [:error] [pid 40422:tid 40442] [client 20.104.48.143:18845] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "afbt7UHBbBLrXh6PBusVKgAAAVA"]
[Sun May 03 14:40:45.895598 2026] [:error] [pid 37127:tid 37199] [client 20.104.48.143:18925] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "afbt7f8khJXb5O5aWVUjdgAAAE4"]
[Sun May 03 14:40:46.323874 2026] [:error] [pid 40422:tid 40445] [client 20.104.48.143:18886] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "afbt7kHBbBLrXh6PBusVLgAAAVM"]
[Sun May 03 14:40:46.745440 2026] [:error] [pid 37130:tid 37233] [client 20.104.48.143:18922] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Sanskrit.php"] [unique_id "afbt7qIu7bmXKXicRk9tPwAAAJQ"]
[Sun May 03 14:40:47.177700 2026] [:error] [pid 37130:tid 37217] [client 20.104.48.143:19418] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "afbt76Iu7bmXKXicRk9tQQAAAIQ"]
[Sun May 03 14:40:47.590733 2026] [:error] [pid 37130:tid 37215] [client 20.104.48.143:18928] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "afbt76Iu7bmXKXicRk9tRAAAAII"]
[Sun May 03 14:40:48.020326 2026] [:error] [pid 37246:tid 37255] [client 20.104.48.143:19011] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "afbt8DhvYFGNwhnPamrmSQAAAQc"]
[Sun May 03 14:40:48.453831 2026] [:error] [pid 40422:tid 40432] [client 20.104.48.143:19368] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kikikoko.php"] [unique_id "afbt8EHBbBLrXh6PBusVNAAAAUY"]
[Sun May 03 14:40:48.872088 2026] [:error] [pid 37246:tid 37270] [client 20.104.48.143:19388] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "afbt8DhvYFGNwhnPamrmSwAAARQ"]
[Sun May 03 14:40:49.344050 2026] [:error] [pid 37130:tid 37220] [client 20.104.48.143:19422] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "afbt8aIu7bmXKXicRk9tRgAAAIc"]
[Sun May 03 14:40:49.764892 2026] [:error] [pid 37130:tid 37223] [client 20.104.48.143:19345] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "afbt8aIu7bmXKXicRk9tSQAAAIo"]
[Sun May 03 14:40:50.183813 2026] [:error] [pid 37246:tid 37269] [client 20.104.48.143:19042] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/opts.php"] [unique_id "afbt8jhvYFGNwhnPamrmUAAAARM"]
[Sun May 03 14:40:50.594821 2026] [:error] [pid 40386:tid 40408] [client 20.104.48.143:18839] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ouh.php"] [unique_id "afbt8lHJDYRXUf3IbRQPXQAAANQ"]
[Sun May 03 14:40:51.014239 2026] [:error] [pid 37130:tid 37214] [client 20.104.48.143:19447] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ouh.php"] [unique_id "afbt86Iu7bmXKXicRk9tSgAAAIE"]
[Sun May 03 14:40:51.457613 2026] [:error] [pid 40422:tid 40433] [client 20.104.48.143:18916] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ouh.php"] [unique_id "afbt80HBbBLrXh6PBusVNgAAAUc"]
[Sun May 03 14:40:51.869735 2026] [:error] [pid 37246:tid 37253] [client 20.104.48.143:19019] [client 20.104.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ouh.php"] [unique_id "afbt8zhvYFGNwhnPamrmVAAAAQU"]
[Sun May 03 15:15:27.363834 2026] [:error] [pid 34432:tid 34454] [client 34.118.102.66:55038] [client 34.118.102.66] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "afb2D573JKVQ0wlof4IcjwAAAdQ"]
[Mon May 04 01:01:00.788263 2026] [:error] [pid 37246:tid 37268] [client 34.116.248.91:46566] [client 34.116.248.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "afd_TDhvYFGNwhnPampHOgAAARI"]
[Mon May 04 01:45:08.336635 2026] [:error] [pid 34432:tid 34436] [client 20.104.97.84:42764] File does not exist: /usr/local/apache/htdocs/suspended-page/BDKR28WP.php
[Mon May 04 01:45:08.554828 2026] [:error] [pid 34432:tid 34448] [client 20.104.97.84:42764] File does not exist: /usr/local/apache/htdocs/suspended-page/card.php
[Mon May 04 01:45:08.937389 2026] [:error] [pid 34432:tid 34457] [client 20.104.97.84:42764] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Mon May 04 01:45:09.160293 2026] [:error] [pid 34432:tid 34445] [client 20.104.97.84:42764] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-lacoto.php
[Mon May 04 01:45:09.394306 2026] [:error] [pid 34432:tid 34439] [client 20.104.97.84:42764] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kikikoko.php
[Mon May 04 01:45:09.708974 2026] [:error] [pid 34432:tid 34447] [client 20.104.97.84:42764] File does not exist: /usr/local/apache/htdocs/suspended-page/ganja.php
[Mon May 04 01:45:09.921968 2026] [:error] [pid 34432:tid 34456] [client 20.104.97.84:42764] File does not exist: /usr/local/apache/htdocs/suspended-page/eetu.php
[Mon May 04 01:45:10.135504 2026] [:error] [pid 34432:tid 34451] [client 20.104.97.84:42764] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-X1s2e6h3p7.php
[Mon May 04 01:45:10.351588 2026] [:error] [pid 34432:tid 34446] [client 20.104.97.84:42764] File does not exist: /usr/local/apache/htdocs/suspended-page/dragonshell.php
[Mon May 04 01:45:10.564914 2026] [:error] [pid 34432:tid 34454] [client 20.104.97.84:42764] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Mon May 04 01:45:10.774772 2026] [:error] [pid 34432:tid 34444] [client 20.104.97.84:42764] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "afeJpp73JKVQ0wlof4KnjwAAAco"]
[Mon May 04 01:45:13.845920 2026] [:error] [pid 40422:tid 40441] [client 20.104.97.84:43073] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "afeJqUHBbBLrXh6PButhSAAAAU8"]
[Mon May 04 01:45:14.685332 2026] [:error] [pid 37126:tid 37159] [client 20.104.97.84:42765] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "afeJqvR_A42N-LtDyrtd8QAAAAY"]
[Mon May 04 01:45:15.419645 2026] [:error] [pid 37127:tid 37194] [client 20.104.97.84:43084] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "afeJq_8khJXb5O5aWVVV1wAAAEo"]
[Mon May 04 01:45:18.229918 2026] [:error] [pid 37126:tid 37153] [client 20.104.97.84:43110] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj11.php"] [unique_id "afeJrvR_A42N-LtDyrtd8wAAAAI"]
[Mon May 04 01:45:20.594913 2026] [:error] [pid 40386:tid 40388] [client 20.104.97.84:43097] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj11.php"] [unique_id "afeJsFHJDYRXUf3IbRQ_zQAAAMA"]
[Mon May 04 01:45:21.424644 2026] [:error] [pid 37246:tid 37274] [client 20.104.97.84:43116] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj11.php"] [unique_id "afeJsThvYFGNwhnPampJtQAAARg"]
[Mon May 04 01:45:23.933467 2026] [:error] [pid 37246:tid 37265] [client 20.104.97.84:43124] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aj11.php"] [unique_id "afeJszhvYFGNwhnPampJuAAAAQ8"]
[Mon May 04 01:45:25.297074 2026] [:error] [pid 40386:tid 40403] [client 20.104.97.84:42772] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tires.php"] [unique_id "afeJtVHJDYRXUf3IbRQ_zwAAAM8"]
[Mon May 04 01:45:28.486739 2026] [:error] [pid 40422:tid 40435] [client 20.104.97.84:43134] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tires.php"] [unique_id "afeJuEHBbBLrXh6PButhSQAAAUk"]
[Mon May 04 01:45:30.091957 2026] [:error] [pid 40386:tid 40406] [client 20.104.97.84:42761] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tires.php"] [unique_id "afeJulHJDYRXUf3IbRQ_0gAAANI"]
[Mon May 04 01:45:31.119211 2026] [:error] [pid 37126:tid 37156] [client 20.104.97.84:43111] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tires.php"] [unique_id "afeJu_R_A42N-LtDyrtd9gAAAAM"]
[Mon May 04 01:45:35.682346 2026] [:error] [pid 37126:tid 37158] [client 20.104.97.84:42770] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xroot.php"] [unique_id "afeJv_R_A42N-LtDyrtd-QAAAAU"]
[Mon May 04 01:45:41.940986 2026] [:error] [pid 37130:tid 37234] [client 20.104.97.84:43109] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xroot.php"] [unique_id "afeJxaIu7bmXKXicRk-kxAAAAJU"]
[Mon May 04 01:45:42.619877 2026] [:error] [pid 37127:tid 37202] [client 20.104.97.84:43085] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xroot.php"] [unique_id "afeJxv8khJXb5O5aWVVV4AAAAFE"]
[Mon May 04 01:45:45.091512 2026] [:error] [pid 37127:tid 37205] [client 20.104.97.84:42754] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xroot.php"] [unique_id "afeJyf8khJXb5O5aWVVV4QAAAFM"]
[Mon May 04 01:45:50.600890 2026] [:error] [pid 40422:tid 40447] [client 20.104.97.84:43086] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "afeJzkHBbBLrXh6PButhVgAAAVU"]
[Mon May 04 01:45:51.834591 2026] [:error] [pid 40422:tid 40434] [client 20.104.97.84:43113] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "afeJz0HBbBLrXh6PButhWQAAAUg"]
[Mon May 04 01:45:53.586062 2026] [:error] [pid 40456:tid 40470] [client 20.104.97.84:42783] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "afeJ0TSujTvwdzEkjSdy0QAAAYw"]
[Mon May 04 01:45:55.709717 2026] [:error] [pid 37130:tid 37218] [client 20.104.97.84:42776] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tea.php"] [unique_id "afeJ06Iu7bmXKXicRk-kyQAAAIU"]
[Mon May 04 01:45:58.250188 2026] [:error] [pid 40456:tid 40469] [client 20.104.97.84:43122] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uwu.php"] [unique_id "afeJ1jSujTvwdzEkjSdy1QAAAYs"]
[Mon May 04 01:46:00.755350 2026] [:error] [pid 37126:tid 37167] [client 20.104.97.84:43078] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uwu.php"] [unique_id "afeJ2PR_A42N-LtDyrtd_QAAAA4"]
[Mon May 04 01:46:02.173767 2026] [:error] [pid 37126:tid 37163] [client 20.104.97.84:43095] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uwu.php"] [unique_id "afeJ2vR_A42N-LtDyrteAgAAAAo"]
[Mon May 04 01:46:03.247661 2026] [:error] [pid 37126:tid 37169] [client 20.104.97.84:43108] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uwu.php"] [unique_id "afeJ2_R_A42N-LtDyrteBgAAABA"]
[Mon May 04 01:46:05.058589 2026] [:error] [pid 40456:tid 40473] [client 20.104.97.84:43091] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aios-bootstrap.php"] [unique_id "afeJ3TSujTvwdzEkjSdy1gAAAY8"]
[Mon May 04 01:46:08.805335 2026] [:error] [pid 40456:tid 40477] [client 20.104.97.84:42769] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aios-bootstrap.php"] [unique_id "afeJ4DSujTvwdzEkjSdy2QAAAZM"]
[Mon May 04 01:46:10.514883 2026] [:error] [pid 34432:tid 34449] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/aios-bootstrap.php
[Mon May 04 01:46:10.724497 2026] [:error] [pid 34432:tid 34438] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/one.php
[Mon May 04 01:46:11.616203 2026] [:error] [pid 34432:tid 34453] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/006.php
[Mon May 04 01:46:12.309872 2026] [:error] [pid 34432:tid 34434] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Mon May 04 01:46:12.527536 2026] [:error] [pid 34432:tid 34450] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/2026w.php
[Mon May 04 01:46:12.750297 2026] [:error] [pid 34432:tid 34443] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/11.php
[Mon May 04 01:46:12.960456 2026] [:error] [pid 34432:tid 34455] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Mon May 04 01:46:13.169729 2026] [:error] [pid 34432:tid 34435] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/qhupyoon.php
[Mon May 04 01:46:13.393660 2026] [:error] [pid 34432:tid 34441] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/dx.php
[Mon May 04 01:46:13.757307 2026] [:error] [pid 34432:tid 34457] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Mon May 04 01:46:14.138484 2026] [:error] [pid 34432:tid 34439] [client 20.104.97.84:42777] File does not exist: /usr/local/apache/htdocs/suspended-page/6ap7e.php
[Mon May 04 01:46:14.360482 2026] [:error] [pid 34432:tid 34456] [client 20.104.97.84:42777] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "afeJ5p73JKVQ0wlof4KnrgAAAdY"]
[Mon May 04 01:46:15.639519 2026] [:error] [pid 40422:tid 40444] [client 20.104.97.84:43092] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "afeJ50HBbBLrXh6PButhaAAAAVI"]
[Mon May 04 01:46:17.471989 2026] [:error] [pid 40386:tid 40406] [client 20.104.97.84:43106] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "afeJ6VHJDYRXUf3IbRQ_3AAAANI"]
[Mon May 04 01:46:18.948934 2026] [:error] [pid 40386:tid 40395] [client 20.104.97.84:43328] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "afeJ6lHJDYRXUf3IbRQ_3gAAAMc"]
[Mon May 04 01:46:21.568912 2026] [:error] [pid 40386:tid 40412] [client 20.104.97.84:43105] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "afeJ7VHJDYRXUf3IbRQ_4AAAANg"]
[Mon May 04 01:46:23.060493 2026] [:error] [pid 40386:tid 40407] [client 20.104.97.84:43093] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "afeJ71HJDYRXUf3IbRQ_5AAAANM"]
[Mon May 04 01:46:24.402858 2026] [:error] [pid 40386:tid 40404] [client 20.104.97.84:42779] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "afeJ8FHJDYRXUf3IbRQ_5QAAANA"]
[Mon May 04 01:46:26.877836 2026] [:error] [pid 54535:tid 54552] [client 20.104.97.84:42781] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "afeJ8vRyz79iR-ntJRIk4AAAAg8"]
[Mon May 04 01:46:31.143648 2026] [:error] [pid 40456:tid 40468] [client 20.104.97.84:43103] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "afeJ9zSujTvwdzEkjSdy3gAAAYo"]
[Mon May 04 01:46:32.876295 2026] [:error] [pid 34432:tid 34444] [client 20.104.97.84:43127] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "afeJ-J73JKVQ0wlof4KnvQAAAco"]
[Mon May 04 01:46:34.160708 2026] [:error] [pid 34432:tid 34438] [client 20.104.97.84:42756] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "afeJ-p73JKVQ0wlof4KnvwAAAcQ"]
[Mon May 04 01:46:35.757598 2026] [:error] [pid 40456:tid 40480] [client 20.104.97.84:43081] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "afeJ-zSujTvwdzEkjSdy5AAAAZY"]
[Mon May 04 01:46:39.694425 2026] [:error] [pid 40456:tid 40476] [client 20.104.97.84:42780] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "afeJ_zSujTvwdzEkjSdy5wAAAZI"]
[Mon May 04 01:46:42.545438 2026] [:error] [pid 37127:tid 37209] [client 20.104.97.84:43130] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "afeKAv8khJXb5O5aWVVV7AAAAFc"]
[Mon May 04 01:46:44.741891 2026] [:error] [pid 40456:tid 40458] [client 20.104.97.84:42760] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "afeKBDSujTvwdzEkjSdy7wAAAYA"]
[Mon May 04 01:46:49.575004 2026] [:error] [pid 37246:tid 37259] [client 20.104.97.84:43135] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zogy1.php"] [unique_id "afeKCThvYFGNwhnPampJygAAAQo"]
[Mon May 04 01:46:52.909818 2026] [:error] [pid 37246:tid 37262] [client 20.104.97.84:43079] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "afeKDDhvYFGNwhnPampJzAAAAQw"]
[Mon May 04 01:46:56.136784 2026] [:error] [pid 54535:tid 54546] [client 20.104.97.84:43115] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "afeKEPRyz79iR-ntJRIlCAAAAgk"]
[Mon May 04 01:47:00.865086 2026] [:error] [pid 37127:tid 37207] [client 20.104.97.84:42807] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "afeKFP8khJXb5O5aWVVV7wAAAFU"]
[Mon May 04 01:47:01.562707 2026] [:error] [pid 40456:tid 40458] [client 20.104.97.84:43125] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "afeKFTSujTvwdzEkjSdy-wAAAYA"]
[Mon May 04 01:47:08.613307 2026] [:error] [pid 37130:tid 37218] [client 20.104.97.84:43349] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "afeKHKIu7bmXKXicRk-k4wAAAIU"]
[Mon May 04 01:47:12.101323 2026] [:error] [pid 40456:tid 40466] [client 20.104.97.84:43117] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "afeKIDSujTvwdzEkjSdzBgAAAYg"]
[Mon May 04 01:47:13.306945 2026] [:error] [pid 37130:tid 37233] [client 20.104.97.84:43115] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "afeKIaIu7bmXKXicRk-k6AAAAJQ"]
[Mon May 04 01:47:15.617188 2026] [:error] [pid 37127:tid 37195] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/atkno.php
[Mon May 04 01:47:15.831753 2026] [:error] [pid 37127:tid 37189] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Mon May 04 01:47:16.040290 2026] [:error] [pid 37127:tid 37186] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Mon May 04 01:47:16.248945 2026] [:error] [pid 37127:tid 37188] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/wpxl.php
[Mon May 04 01:47:16.460025 2026] [:error] [pid 37127:tid 37203] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/admlo.php
[Mon May 04 01:47:16.686749 2026] [:error] [pid 37127:tid 37202] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/f5.php
[Mon May 04 01:47:16.921753 2026] [:error] [pid 37127:tid 37205] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/ptanf.php
[Mon May 04 01:47:17.150275 2026] [:error] [pid 37127:tid 37206] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Mon May 04 01:47:17.401877 2026] [:error] [pid 37127:tid 37187] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Mon May 04 01:47:17.626183 2026] [:error] [pid 37127:tid 37199] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Mon May 04 01:47:17.855398 2026] [:error] [pid 37127:tid 37194] [client 20.104.97.84:43132] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Mon May 04 01:47:18.061166 2026] [:error] [pid 37127:tid 37209] [client 20.104.97.84:43132] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axe.php"] [unique_id "afeKJv8khJXb5O5aWVVV_wAAAFc"]
[Mon May 04 01:47:19.243135 2026] [:error] [pid 40456:tid 40465] [client 20.104.97.84:43131] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axe.php"] [unique_id "afeKJzSujTvwdzEkjSdzCQAAAYc"]
[Mon May 04 01:47:20.297332 2026] [:error] [pid 54535:tid 54556] [client 20.104.97.84:43362] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axe.php"] [unique_id "afeKKPRyz79iR-ntJRIlGQAAAhM"]
[Mon May 04 01:47:24.325356 2026] [:error] [pid 40456:tid 40473] [client 20.104.97.84:42792] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/axe.php"] [unique_id "afeKLDSujTvwdzEkjSdzDAAAAY8"]
[Mon May 04 01:47:27.633275 2026] [:error] [pid 37246:tid 37263] [client 20.104.97.84:43076] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index0.php"] [unique_id "afeKLzhvYFGNwhnPampJ1wAAAQ0"]
[Mon May 04 01:47:30.117249 2026] [:error] [pid 54535:tid 54547] [client 20.104.97.84:43281] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index0.php"] [unique_id "afeKMvRyz79iR-ntJRIlLgAAAgo"]
[Mon May 04 01:47:33.612209 2026] [:error] [pid 40456:tid 40465] [client 20.104.97.84:43365] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index0.php"] [unique_id "afeKNTSujTvwdzEkjSdzGwAAAYc"]
[Mon May 04 01:47:36.345872 2026] [:error] [pid 37246:tid 37253] [client 20.104.97.84:43104] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index0.php"] [unique_id "afeKODhvYFGNwhnPampJ3QAAAQU"]
[Mon May 04 01:47:37.428548 2026] [:error] [pid 40456:tid 40473] [client 20.104.97.84:43343] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-01ul.php"] [unique_id "afeKOTSujTvwdzEkjSdzHQAAAY8"]
[Mon May 04 01:47:38.957485 2026] [:error] [pid 40386:tid 40412] [client 20.104.97.84:43094] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-01ul.php"] [unique_id "afeKOlHJDYRXUf3IbRQ__gAAANg"]
[Mon May 04 01:47:41.006485 2026] [:error] [pid 40456:tid 40471] [client 20.104.97.84:42806] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-01ul.php"] [unique_id "afeKPTSujTvwdzEkjSdzHwAAAY0"]
[Mon May 04 01:47:42.602949 2026] [:error] [pid 54535:tid 54548] [client 20.104.97.84:42787] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-01ul.php"] [unique_id "afeKPvRyz79iR-ntJRIlPQAAAgs"]
[Mon May 04 01:47:45.638919 2026] [:error] [pid 37127:tid 37199] [client 20.104.97.84:43102] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "afeKQf8khJXb5O5aWVVWEQAAAE4"]
[Mon May 04 01:47:47.242834 2026] [:error] [pid 54535:tid 54541] [client 20.104.97.84:42814] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "afeKQ_Ryz79iR-ntJRIlQgAAAgQ"]
[Mon May 04 01:47:48.930247 2026] [:error] [pid 40456:tid 40464] [client 20.104.97.84:43088] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "afeKRDSujTvwdzEkjSdzIAAAAYY"]
[Mon May 04 01:47:50.391272 2026] [:error] [pid 40422:tid 40437] [client 20.104.97.84:42784] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/e3.php"] [unique_id "afeKRkHBbBLrXh6PButhowAAAUs"]
[Mon May 04 01:47:51.760184 2026] [:error] [pid 40386:tid 40406] [client 20.104.97.84:43350] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fkohd.php"] [unique_id "afeKR1HJDYRXUf3IbRRADAAAANI"]
[Mon May 04 01:47:53.755373 2026] [:error] [pid 40386:tid 40412] [client 20.104.97.84:43072] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fkohd.php"] [unique_id "afeKSVHJDYRXUf3IbRRADgAAANg"]
[Mon May 04 01:47:55.946967 2026] [:error] [pid 37127:tid 37207] [client 20.104.97.84:43074] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fkohd.php"] [unique_id "afeKS_8khJXb5O5aWVVWFwAAAFU"]
[Mon May 04 01:47:57.725290 2026] [:error] [pid 34432:tid 34438] [client 20.104.97.84:43340] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fkohd.php"] [unique_id "afeKTZ73JKVQ0wlof4KoCwAAAcQ"]
[Mon May 04 01:48:02.567925 2026] [:error] [pid 54535:tid 54545] [client 20.104.97.84:43347] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "afeKUvRyz79iR-ntJRIlUgAAAgg"]
[Mon May 04 01:48:05.817069 2026] [:error] [pid 37246:tid 37271] [client 20.104.97.84:42773] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "afeKVThvYFGNwhnPampJ5gAAARU"]
[Mon May 04 01:48:06.565394 2026] [:error] [pid 37246:tid 37259] [client 20.104.97.84:42774] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "afeKVjhvYFGNwhnPampJ5wAAAQo"]
[Mon May 04 01:48:08.037271 2026] [:error] [pid 37130:tid 37229] [client 20.104.97.84:43120] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "afeKWKIu7bmXKXicRk-lBQAAAJA"]
[Mon May 04 01:48:09.293529 2026] [:error] [pid 37127:tid 37189] [client 20.104.97.84:42771] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "afeKWf8khJXb5O5aWVVWHgAAAEU"]
[Mon May 04 01:48:11.036764 2026] [:error] [pid 40386:tid 40388] [client 20.104.97.84:43331] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "afeKW1HJDYRXUf3IbRRAGQAAAMA"]
[Mon May 04 01:48:11.760692 2026] [:error] [pid 40386:tid 40394] [client 20.104.97.84:43118] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "afeKW1HJDYRXUf3IbRRAGwAAAMY"]
[Mon May 04 01:48:12.370325 2026] [:error] [pid 37126:tid 37160] [client 20.104.97.84:43082] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws80.php"] [unique_id "afeKXPR_A42N-LtDyrteLQAAAAc"]
[Mon May 04 01:48:14.498029 2026] [:error] [pid 34432:tid 34437] [client 20.104.97.84:42786] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zo.php"] [unique_id "afeKXp73JKVQ0wlof4KoEQAAAcM"]
[Mon May 04 01:48:15.550749 2026] [:error] [pid 40386:tid 40396] [client 20.104.97.84:43129] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zo.php"] [unique_id "afeKX1HJDYRXUf3IbRRAJAAAAMg"]
[Mon May 04 01:48:17.823431 2026] [:error] [pid 34432:tid 34435] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/zo.php
[Mon May 04 01:48:18.033008 2026] [:error] [pid 34432:tid 34441] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/xy.php
[Mon May 04 01:48:18.252154 2026] [:error] [pid 34432:tid 34434] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/masks.php
[Mon May 04 01:48:18.588836 2026] [:error] [pid 34432:tid 34455] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php
[Mon May 04 01:48:18.798862 2026] [:error] [pid 34432:tid 34457] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/xfun.php
[Mon May 04 01:48:19.032516 2026] [:error] [pid 34432:tid 34439] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Mon May 04 01:48:19.252451 2026] [:error] [pid 34432:tid 34447] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/vv.php
[Mon May 04 01:48:19.461612 2026] [:error] [pid 34432:tid 34451] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/wpconf.php
[Mon May 04 01:48:19.670979 2026] [:error] [pid 34432:tid 34436] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Mon May 04 01:48:19.882652 2026] [:error] [pid 34432:tid 34456] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-zx.php
[Mon May 04 01:48:20.290479 2026] [:error] [pid 34432:tid 34445] [client 20.104.97.84:42803] File does not exist: /usr/local/apache/htdocs/suspended-page/000.php
[Mon May 04 01:48:20.651530 2026] [:error] [pid 34432:tid 34446] [client 20.104.97.84:42803] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mar.php"] [unique_id "afeKZJ73JKVQ0wlof4KoHgAAAcw"]
[Mon May 04 01:48:22.304898 2026] [:error] [pid 40456:tid 40465] [client 20.104.97.84:43096] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mar.php"] [unique_id "afeKZjSujTvwdzEkjSdzKwAAAYc"]
[Mon May 04 01:48:24.514899 2026] [:error] [pid 54535:tid 54539] [client 20.104.97.84:43357] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mar.php"] [unique_id "afeKaPRyz79iR-ntJRIlbQAAAgI"]
[Mon May 04 01:48:26.708381 2026] [:error] [pid 40422:tid 40447] [client 20.104.97.84:42788] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mar.php"] [unique_id "afeKakHBbBLrXh6PButhqAAAAVU"]
[Mon May 04 01:48:27.944924 2026] [:error] [pid 54535:tid 54537] [client 20.104.97.84:42801] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iov.php"] [unique_id "afeKa_Ryz79iR-ntJRIldgAAAgA"]
[Mon May 04 01:48:30.363305 2026] [:error] [pid 54535:tid 54561] [client 20.104.97.84:43107] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iov.php"] [unique_id "afeKbvRyz79iR-ntJRIleQAAAhg"]
[Mon May 04 01:48:31.704540 2026] [:error] [pid 54535:tid 54542] [client 20.104.97.84:43077] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iov.php"] [unique_id "afeKb_Ryz79iR-ntJRIlewAAAgU"]
[Mon May 04 01:48:32.913335 2026] [:error] [pid 37127:tid 37194] [client 20.104.97.84:43114] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/iov.php"] [unique_id "afeKcP8khJXb5O5aWVVWIwAAAEo"]
[Mon May 04 01:48:35.938655 2026] [:error] [pid 54535:tid 54551] [client 20.104.97.84:43378] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jodohghi.php"] [unique_id "afeKc_Ryz79iR-ntJRIlnAAAAg4"]
[Mon May 04 01:48:37.978086 2026] [:error] [pid 37126:tid 37173] [client 20.104.97.84:42810] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jodohghi.php"] [unique_id "afeKdfR_A42N-LtDyrteMwAAABQ"]
[Mon May 04 01:48:40.490668 2026] [:error] [pid 37126:tid 37163] [client 20.104.97.84:42767] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jodohghi.php"] [unique_id "afeKePR_A42N-LtDyrteOQAAAAo"]
[Mon May 04 01:48:44.715277 2026] [:error] [pid 40456:tid 40461] [client 20.104.97.84:43090] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jodohghi.php"] [unique_id "afeKfDSujTvwdzEkjSdzPQAAAYM"]
[Mon May 04 01:48:45.573854 2026] [:error] [pid 54535:tid 54538] [client 20.104.97.84:42762] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rendi59.php"] [unique_id "afeKffRyz79iR-ntJRIlqwAAAgE"]
[Mon May 04 01:48:49.221918 2026] [:error] [pid 40456:tid 40480] [client 20.104.97.84:43083] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rendi59.php"] [unique_id "afeKgTSujTvwdzEkjSdzPwAAAZY"]
[Mon May 04 01:48:52.496654 2026] [:error] [pid 40456:tid 40479] [client 20.104.97.84:43329] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rendi59.php"] [unique_id "afeKhDSujTvwdzEkjSdzQgAAAZU"]
[Mon May 04 01:48:55.300895 2026] [:error] [pid 40386:tid 40401] [client 20.104.97.84:42805] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rendi59.php"] [unique_id "afeKh1HJDYRXUf3IbRRARAAAAM0"]
[Mon May 04 01:48:58.322924 2026] [:error] [pid 54535:tid 54560] [client 20.104.97.84:42797] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rivasqup.php"] [unique_id "afeKivRyz79iR-ntJRIlzQAAAhc"]
[Mon May 04 01:49:05.354464 2026] [:error] [pid 40386:tid 40396] [client 20.104.97.84:43356] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rivasqup.php"] [unique_id "afeKkVHJDYRXUf3IbRRAUAAAAMg"]
[Mon May 04 01:49:07.770068 2026] [:error] [pid 54535:tid 54548] [client 20.104.97.84:43354] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rivasqup.php"] [unique_id "afeKk_Ryz79iR-ntJRIl0gAAAgs"]
[Mon May 04 01:49:11.941215 2026] [:error] [pid 54535:tid 54542] [client 20.104.97.84:43268] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mga.php"] [unique_id "afeKl_Ryz79iR-ntJRIl4gAAAgU"]
[Mon May 04 01:49:14.184522 2026] [:error] [pid 40386:tid 40400] [client 20.104.97.84:43128] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mga.php"] [unique_id "afeKmlHJDYRXUf3IbRRAUgAAAMw"]
[Mon May 04 01:49:16.339161 2026] [:error] [pid 54535:tid 54545] [client 20.104.97.84:43382] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mga.php"] [unique_id "afeKnPRyz79iR-ntJRIl6QAAAgg"]
[Mon May 04 01:49:18.544916 2026] [:error] [pid 40386:tid 40405] [client 20.104.97.84:43112] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mga.php"] [unique_id "afeKnlHJDYRXUf3IbRRAWQAAANE"]
[Mon May 04 01:49:19.991886 2026] [:error] [pid 37246:tid 37262] [client 20.104.97.84:42757] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dshtv.php"] [unique_id "afeKnzhvYFGNwhnPampJ-QAAAQw"]
[Mon May 04 01:49:20.804003 2026] [:error] [pid 37127:tid 37187] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/dshtv.php
[Mon May 04 01:49:21.012449 2026] [:error] [pid 37127:tid 37209] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/sym403.php
[Mon May 04 01:49:21.223208 2026] [:error] [pid 37127:tid 37194] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/temp1.php
[Mon May 04 01:49:21.497685 2026] [:error] [pid 37127:tid 37199] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Mon May 04 01:49:21.706823 2026] [:error] [pid 37127:tid 37196] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Mon May 04 01:49:21.915643 2026] [:error] [pid 37127:tid 37191] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Mon May 04 01:49:22.245870 2026] [:error] [pid 37127:tid 37192] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/bbny.php
[Mon May 04 01:49:22.455512 2026] [:error] [pid 37127:tid 37198] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/ggb.php
[Mon May 04 01:49:22.785010 2026] [:error] [pid 37127:tid 37193] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/zhw.php
[Mon May 04 01:49:22.992838 2026] [:error] [pid 37127:tid 37185] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Mon May 04 01:49:23.203757 2026] [:error] [pid 37127:tid 37184] [client 20.104.97.84:43348] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Mon May 04 01:49:23.429268 2026] [:error] [pid 37127:tid 37210] [client 20.104.97.84:43348] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lov.php"] [unique_id "afeKo_8khJXb5O5aWVVWPQAAAFg"]
[Mon May 04 01:49:25.509814 2026] [:error] [pid 34432:tid 34443] [client 20.104.97.84:42808] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lov.php"] [unique_id "afeKpZ73JKVQ0wlof4KoOQAAAck"]
[Mon May 04 01:49:26.785620 2026] [:error] [pid 54535:tid 54544] [client 20.104.97.84:43119] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lov.php"] [unique_id "afeKpvRyz79iR-ntJRIl8QAAAgc"]
[Mon May 04 01:49:27.704077 2026] [:error] [pid 37130:tid 37214] [client 20.104.97.84:43363] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lov.php"] [unique_id "afeKp6Iu7bmXKXicRk-lHQAAAIE"]
[Mon May 04 01:49:30.770776 2026] [:error] [pid 37126:tid 37159] [client 20.104.97.84:43121] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/knw.php"] [unique_id "afeKqvR_A42N-LtDyrteSAAAAAY"]
[Mon May 04 01:49:32.729268 2026] [:error] [pid 37130:tid 37213] [client 20.104.97.84:43276] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/knw.php"] [unique_id "afeKrKIu7bmXKXicRk-lJAAAAIA"]
[Mon May 04 01:49:33.581921 2026] [:error] [pid 37246:tid 37267] [client 20.104.97.84:42815] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/knw.php"] [unique_id "afeKrThvYFGNwhnPampKAgAAARE"]
[Mon May 04 01:49:35.333144 2026] [:error] [pid 40386:tid 40401] [client 20.104.97.84:42766] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/knw.php"] [unique_id "afeKr1HJDYRXUf3IbRRAYAAAAM0"]
[Mon May 04 01:49:36.487551 2026] [:error] [pid 54535:tid 54538] [client 20.104.97.84:42753] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "afeKsPRyz79iR-ntJRIl-QAAAgE"]
[Mon May 04 01:49:39.575981 2026] [:error] [pid 37246:tid 37248] [client 20.104.97.84:43124] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "afeKszhvYFGNwhnPampKBQAAAQA"]
[Mon May 04 01:49:40.950044 2026] [:error] [pid 40386:tid 40393] [client 20.104.97.84:42782] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "afeKtFHJDYRXUf3IbRRAYQAAAMU"]
[Mon May 04 01:49:43.692219 2026] [:error] [pid 40422:tid 40441] [client 20.104.97.84:42789] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fi.php"] [unique_id "afeKt0HBbBLrXh6PButhvQAAAU8"]
[Mon May 04 01:49:44.281594 2026] [:error] [pid 54535:tid 54555] [client 20.104.97.84:43388] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jlex.php"] [unique_id "afeKuPRyz79iR-ntJRIl_QAAAhI"]
[Mon May 04 01:49:48.006556 2026] [:error] [pid 37130:tid 37216] [client 20.104.97.84:42812] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jlex.php"] [unique_id "afeKvKIu7bmXKXicRk-lMAAAAIM"]
[Mon May 04 01:49:50.310688 2026] [:error] [pid 37246:tid 37250] [client 20.104.97.84:42794] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jlex.php"] [unique_id "afeKvjhvYFGNwhnPampKEAAAAQI"]
[Mon May 04 01:49:52.896080 2026] [:error] [pid 40386:tid 40392] [client 20.104.97.84:43087] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jlex.php"] [unique_id "afeKwFHJDYRXUf3IbRRAaQAAAMQ"]
[Mon May 04 01:49:53.595791 2026] [:error] [pid 37130:tid 37228] [client 20.104.97.84:42772] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "afeKwaIu7bmXKXicRk-lMQAAAI8"]
[Mon May 04 01:49:56.204381 2026] [:error] [pid 37127:tid 37203] [client 20.104.97.84:43333] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "afeKxP8khJXb5O5aWVVWQwAAAFI"]
[Mon May 04 01:49:58.111998 2026] [:error] [pid 54535:tid 54560] [client 20.104.97.84:43353] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "afeKxvRyz79iR-ntJRImCQAAAhc"]
[Mon May 04 01:49:59.544183 2026] [:error] [pid 34432:tid 34439] [client 20.104.97.84:43084] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "afeKx573JKVQ0wlof4KoTQAAAcU"]
[Mon May 04 01:50:01.361996 2026] [:error] [pid 54535:tid 54545] [client 20.104.97.84:43123] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tiroto.php"] [unique_id "afeKyfRyz79iR-ntJRImGAAAAgg"]
[Mon May 04 01:50:02.084739 2026] [:error] [pid 40386:tid 40410] [client 20.104.97.84:43352] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tiroto.php"] [unique_id "afeKylHJDYRXUf3IbRRAbwAAANY"]
[Mon May 04 01:50:03.694358 2026] [:error] [pid 34432:tid 34454] [client 20.104.97.84:42768] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tiroto.php"] [unique_id "afeKy573JKVQ0wlof4KoUQAAAdQ"]
[Mon May 04 01:50:04.816304 2026] [:error] [pid 40456:tid 40461] [client 20.104.97.84:43278] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-tiroto.php"] [unique_id "afeKzDSujTvwdzEkjSdzawAAAYM"]
[Mon May 04 01:50:07.712101 2026] [:error] [pid 54535:tid 54540] [client 20.104.97.84:43125] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son.php"] [unique_id "afeKz_Ryz79iR-ntJRImIAAAAgM"]
[Mon May 04 01:50:10.322751 2026] [:error] [pid 54535:tid 54550] [client 20.104.97.84:43109] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son.php"] [unique_id "afeK0vRyz79iR-ntJRImLQAAAg0"]
[Mon May 04 01:50:13.103465 2026] [:error] [pid 54535:tid 54540] [client 20.104.97.84:43133] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son.php"] [unique_id "afeK1fRyz79iR-ntJRImMwAAAgM"]
[Mon May 04 01:50:14.562810 2026] [:error] [pid 54535:tid 54551] [client 20.104.97.84:42752] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son.php"] [unique_id "afeK1vRyz79iR-ntJRImNgAAAg4"]
[Mon May 04 01:50:16.248552 2026] [:error] [pid 37127:tid 37187] [client 20.104.97.84:42783] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/99.php"] [unique_id "afeK2P8khJXb5O5aWVVWRQAAAEM"]
[Mon May 04 01:50:17.791144 2026] [:error] [pid 40386:tid 40398] [client 20.104.97.84:43126] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/99.php"] [unique_id "afeK2VHJDYRXUf3IbRRAegAAAMo"]
[Mon May 04 01:50:19.204518 2026] [:error] [pid 40456:tid 40479] [client 20.104.97.84:42763] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/99.php"] [unique_id "afeK2zSujTvwdzEkjSdzcwAAAZU"]
[Mon May 04 01:50:20.310806 2026] [:error] [pid 37126:tid 37153] [client 20.104.97.84:42790] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/99.php"] [unique_id "afeK3PR_A42N-LtDyrteVAAAAAI"]
[Mon May 04 01:50:21.220779 2026] [:error] [pid 40456:tid 40462] [client 20.104.97.84:42759] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "afeK3TSujTvwdzEkjSdzdwAAAYQ"]
[Mon May 04 01:50:22.038380 2026] [:error] [pid 37126:tid 37152] [client 20.104.97.84:42765] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "afeK3vR_A42N-LtDyrteVQAAAAE"]
[Mon May 04 01:50:24.521055 2026] [:error] [pid 37246:tid 37270] [client 20.104.97.84:43097] File does not exist: /usr/local/apache/htdocs/suspended-page/bal.php
[Mon May 04 01:50:24.731695 2026] [:error] [pid 37246:tid 37262] [client 20.104.97.84:43097] File does not exist: /usr/local/apache/htdocs/suspended-page/filefuns.php
[Mon May 04 01:50:24.956828 2026] [:error] [pid 37246:tid 37266] [client 20.104.97.84:43097] File does not exist: /usr/local/apache/htdocs/suspended-page/ay.php
[Mon May 04 01:50:25.459696 2026] [:error] [pid 37246:tid 37263] [client 20.104.97.84:43097] File does not exist: /usr/local/apache/htdocs/suspended-page/options.php
[Mon May 04 01:50:25.667857 2026] [:error] [pid 37246:tid 37264] [client 20.104.97.84:43097] [client 20.104.97.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "afeK4ThvYFGNwhnPampKKgAAAQ4"]
[Mon May 04 01:50:27.766671 2026] [:error] [pid 54535:tid 54559] [client 20.104.97.84:42795] File does not exist: /usr/local/apache/htdocs/suspended-page/d.php
[Mon May 04 01:50:27.986051 2026] [:error] [pid 54535:tid 54544] [client 20.104.97.84:42795] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Mon May 04 01:50:28.195786 2026] [:error] [pid 54535:tid 54548] [client 20.104.97.84:42795] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Mon May 04 01:50:28.412442 2026] [:error] [pid 54535:tid 54554] [client 20.104.97.84:42795] File does not exist: /usr/local/apache/htdocs/suspended-page/file-kikikoko.php
[Mon May 04 01:50:28.667971 2026] [:error] [pid 54535:tid 54545] [client 20.104.97.84:42795] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Mon May 04 01:50:28.915911 2026] [:error] [pid 54535:tid 54556] [client 20.104.97.84:42795] File does not exist: /usr/local/apache/htdocs/suspended-page/tramuibs.php
[Mon May 04 01:50:29.332364 2026] [:error] [pid 54535:tid 54546] [client 20.104.97.84:42795] File does not exist: /usr/local/apache/htdocs/suspended-page/19.php
[Mon May 04 01:50:29.538866 2026] [:error] [pid 54535:tid 54553] [client 20.104.97.84:42795] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "afeK5fRyz79iR-ntJRImRgAAAhA"]
[Mon May 04 01:50:31.154681 2026] [:error] [pid 34432:tid 34449] [client 20.104.97.84:43134] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "afeK5573JKVQ0wlof4KoZQAAAc8"]
[Mon May 04 01:50:33.087919 2026] [:error] [pid 40456:tid 40480] [client 20.104.97.84:42793] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "afeK6TSujTvwdzEkjSdzgAAAAZY"]
[Mon May 04 01:50:36.411860 2026] [:error] [pid 37130:tid 37221] [client 20.104.97.84:43359] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "afeK7KIu7bmXKXicRk-lQQAAAIg"]
[Mon May 04 01:50:39.483689 2026] [:error] [pid 34432:tid 34439] [client 20.104.97.84:42779] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bpxrn.php"] [unique_id "afeK7573JKVQ0wlof4KoawAAAcU"]
[Mon May 04 01:50:41.036437 2026] [:error] [pid 40456:tid 40466] [client 20.104.97.84:42809] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bpxrn.php"] [unique_id "afeK8TSujTvwdzEkjSdzggAAAYg"]
[Mon May 04 01:50:49.358872 2026] [:error] [pid 40456:tid 40460] [client 20.104.97.84:43100] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bpxrn.php"] [unique_id "afeK-TSujTvwdzEkjSdzhQAAAYI"]
[Mon May 04 01:50:52.835559 2026] [:error] [pid 54535:tid 54557] [client 20.104.97.84:43116] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "afeK_PRyz79iR-ntJRImXQAAAhQ"]
[Mon May 04 01:50:57.485109 2026] [:error] [pid 40456:tid 40480] [client 20.104.97.84:43335] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "afeLATSujTvwdzEkjSdzkgAAAZY"]
[Mon May 04 01:50:59.399712 2026] [:error] [pid 40456:tid 40469] [client 20.104.97.84:43127] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "afeLAzSujTvwdzEkjSdzlQAAAYs"]
[Mon May 04 01:51:02.424302 2026] [:error] [pid 40456:tid 40465] [client 20.104.97.84:43305] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "afeLBjSujTvwdzEkjSdzmgAAAYc"]
[Mon May 04 01:51:04.122052 2026] [:error] [pid 37130:tid 37230] [client 20.104.97.84:43085] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws37.php"] [unique_id "afeLCKIu7bmXKXicRk-lTQAAAJE"]
[Mon May 04 01:51:14.004002 2026] [:error] [pid 54535:tid 54557] [client 20.104.97.84:43384] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws37.php"] [unique_id "afeLEvRyz79iR-ntJRImbwAAAhQ"]
[Mon May 04 01:51:16.337754 2026] [:error] [pid 54535:tid 54541] [client 20.104.97.84:42760] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws37.php"] [unique_id "afeLFPRyz79iR-ntJRImcgAAAgQ"]
[Mon May 04 01:51:21.480302 2026] [:error] [pid 40456:tid 40458] [client 20.104.97.84:43337] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sky.php"] [unique_id "afeLGTSujTvwdzEkjSdznAAAAYA"]
[Mon May 04 01:51:22.903336 2026] [:error] [pid 40456:tid 40463] [client 20.104.97.84:42798] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sky.php"] [unique_id "afeLGjSujTvwdzEkjSdzngAAAYU"]
[Mon May 04 01:51:23.851938 2026] [:error] [pid 40456:tid 40459] [client 20.104.97.84:43113] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sky.php"] [unique_id "afeLGzSujTvwdzEkjSdznwAAAYE"]
[Mon May 04 01:51:25.478681 2026] [:error] [pid 40386:tid 40392] [client 20.104.97.84:43115] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sky.php"] [unique_id "afeLHVHJDYRXUf3IbRRAgwAAAMQ"]
[Mon May 04 01:51:27.450046 2026] [:error] [pid 37130:tid 37218] [client 20.104.97.84:42778] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bojcdooq.php"] [unique_id "afeLH6Iu7bmXKXicRk-lVQAAAIU"]
[Mon May 04 01:51:29.237825 2026] [:error] [pid 37130:tid 37226] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/bojcdooq.php
[Mon May 04 01:51:29.457122 2026] [:error] [pid 37130:tid 37236] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/zdd.php
[Mon May 04 01:51:29.680813 2026] [:error] [pid 37130:tid 37235] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/133.php
[Mon May 04 01:51:29.893119 2026] [:error] [pid 37130:tid 37215] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/jq.php
[Mon May 04 01:51:30.106269 2026] [:error] [pid 37130:tid 37230] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/cro.php
[Mon May 04 01:51:30.320835 2026] [:error] [pid 37130:tid 37214] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/wwx.php
[Mon May 04 01:51:30.533944 2026] [:error] [pid 37130:tid 37216] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/trx24.php
[Mon May 04 01:51:30.747837 2026] [:error] [pid 37130:tid 37224] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/blox.php
[Mon May 04 01:51:30.986650 2026] [:error] [pid 37130:tid 37223] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/berax.php
[Mon May 04 01:51:31.199362 2026] [:error] [pid 37130:tid 37232] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/bkxzo.php
[Mon May 04 01:51:31.417134 2026] [:error] [pid 37130:tid 37237] [client 20.104.97.84:43081] File does not exist: /usr/local/apache/htdocs/suspended-page/cdxadmin.php
[Mon May 04 01:51:31.627497 2026] [:error] [pid 37130:tid 37231] [client 20.104.97.84:43081] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dfre.php"] [unique_id "afeLI6Iu7bmXKXicRk-lYwAAAJI"]
[Mon May 04 01:51:33.277873 2026] [:error] [pid 37126:tid 37164] [client 20.104.97.84:42813] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dfre.php"] [unique_id "afeLJfR_A42N-LtDyrtebgAAAAs"]
[Mon May 04 01:51:36.236188 2026] [:error] [pid 40386:tid 40390] [client 20.104.97.84:43122] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dfre.php"] [unique_id "afeLKFHJDYRXUf3IbRRAhQAAAMI"]
[Mon May 04 01:51:38.264232 2026] [:error] [pid 40422:tid 40430] [client 20.104.97.84:43130] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dfre.php"] [unique_id "afeLKkHBbBLrXh6PButhyQAAAUQ"]
[Mon May 04 01:51:41.079151 2026] [:error] [pid 54535:tid 54539] [client 20.104.97.84:43282] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "afeLLfRyz79iR-ntJRImfQAAAgI"]
[Mon May 04 01:51:42.989871 2026] [:error] [pid 54535:tid 54559] [client 20.104.97.84:43328] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "afeLLvRyz79iR-ntJRImfgAAAhY"]
[Mon May 04 01:51:44.415398 2026] [:error] [pid 40456:tid 40458] [client 20.104.97.84:43387] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "afeLMDSujTvwdzEkjSdzpgAAAYA"]
[Mon May 04 01:51:45.184287 2026] [:error] [pid 40456:tid 40481] [client 20.104.97.84:42758] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sko.php"] [unique_id "afeLMTSujTvwdzEkjSdzpwAAAZc"]
[Mon May 04 01:51:48.101517 2026] [:error] [pid 40386:tid 40401] [client 20.104.97.84:43307] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shorw.php"] [unique_id "afeLNFHJDYRXUf3IbRRAiQAAAM0"]
[Mon May 04 01:51:53.529464 2026] [:error] [pid 54535:tid 54544] [client 20.104.97.84:42775] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shorw.php"] [unique_id "afeLOfRyz79iR-ntJRImlAAAAgc"]
[Mon May 04 01:51:55.728790 2026] [:error] [pid 34432:tid 34455] [client 20.104.97.84:43342] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shorw.php"] [unique_id "afeLO573JKVQ0wlof4Ko4wAAAdU"]
[Mon May 04 01:51:56.846429 2026] [:error] [pid 37126:tid 37175] [client 20.104.97.84:43079] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shorw.php"] [unique_id "afeLPPR_A42N-LtDyrtecAAAABY"]
[Mon May 04 01:51:57.540658 2026] [:error] [pid 40386:tid 40392] [client 20.104.97.84:43075] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shelp.php"] [unique_id "afeLPVHJDYRXUf3IbRRAkQAAAMQ"]
[Mon May 04 01:51:59.910112 2026] [:error] [pid 34432:tid 34456] [client 20.104.97.84:43355] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shelp.php"] [unique_id "afeLP573JKVQ0wlof4Ko5AAAAdY"]
[Mon May 04 01:52:01.183439 2026] [:error] [pid 54535:tid 54558] [client 20.104.97.84:43341] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shelp.php"] [unique_id "afeLQfRyz79iR-ntJRImmgAAAhU"]
[Mon May 04 01:52:03.317358 2026] [:error] [pid 54535:tid 54559] [client 20.104.97.84:43334] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shelp.php"] [unique_id "afeLQ_Ryz79iR-ntJRImnAAAAhY"]
[Mon May 04 01:52:04.300477 2026] [:error] [pid 37130:tid 37235] [client 20.104.97.84:42803] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seyv.php"] [unique_id "afeLRKIu7bmXKXicRk-lZwAAAJY"]
[Mon May 04 01:52:06.891640 2026] [:error] [pid 37126:tid 37163] [client 20.104.97.84:43117] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seyv.php"] [unique_id "afeLRvR_A42N-LtDyrtecgAAAAo"]
[Mon May 04 01:52:08.731370 2026] [:error] [pid 40422:tid 40432] [client 20.104.97.84:43108] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seyv.php"] [unique_id "afeLSEHBbBLrXh6PButhzQAAAUY"]
[Mon May 04 01:52:10.319838 2026] [:error] [pid 54535:tid 54544] [client 20.104.97.84:42756] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/seyv.php"] [unique_id "afeLSvRyz79iR-ntJRImngAAAgc"]
[Mon May 04 01:52:11.949312 2026] [:error] [pid 37127:tid 37196] [client 20.104.97.84:43376] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad821.php"] [unique_id "afeLS_8khJXb5O5aWVVWVQAAAEw"]
[Mon May 04 01:52:13.305379 2026] [:error] [pid 37126:tid 37167] [client 20.104.97.84:42807] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad821.php"] [unique_id "afeLTfR_A42N-LtDyrtedgAAAA4"]
[Mon May 04 01:52:14.452834 2026] [:error] [pid 37127:tid 37192] [client 20.104.97.84:42785] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad821.php"] [unique_id "afeLTv8khJXb5O5aWVVWVgAAAEg"]
[Mon May 04 01:52:18.279413 2026] [:error] [pid 54535:tid 54549] [client 20.104.97.84:43131] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad821.php"] [unique_id "afeLUvRyz79iR-ntJRImowAAAgw"]
[Mon May 04 01:52:20.135362 2026] [:error] [pid 54535:tid 54545] [client 20.104.97.84:43101] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad8210.php"] [unique_id "afeLVPRyz79iR-ntJRImpQAAAgg"]
[Mon May 04 01:52:21.245713 2026] [:error] [pid 37246:tid 37253] [client 20.104.97.84:43076] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad8210.php"] [unique_id "afeLVThvYFGNwhnPampKQQAAAQU"]
[Mon May 04 01:52:22.067776 2026] [:error] [pid 37126:tid 37157] [client 20.104.97.84:43338] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad8210.php"] [unique_id "afeLVvR_A42N-LtDyrtedwAAAAQ"]
[Mon May 04 01:52:23.212993 2026] [:error] [pid 40456:tid 40475] [client 20.104.97.84:42784] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad8210.php"] [unique_id "afeLVzSujTvwdzEkjSdzrgAAAZE"]
[Mon May 04 01:52:24.364311 2026] [:error] [pid 40422:tid 40449] [client 20.104.97.84:42780] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad8rd1.php"] [unique_id "afeLWEHBbBLrXh6PButh0AAAAVc"]
[Mon May 04 01:52:26.153284 2026] [:error] [pid 34432:tid 34453] [client 20.104.97.84:42764] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad8rd1.php"] [unique_id "afeLWp73JKVQ0wlof4Ko6QAAAdM"]
[Mon May 04 01:52:27.581507 2026] [:error] [pid 34432:tid 34440] [client 20.104.97.84:42769] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad8rd1.php"] [unique_id "afeLW573JKVQ0wlof4Ko6gAAAcY"]
[Mon May 04 01:52:30.965479 2026] [:error] [pid 37130:tid 37224] [client 20.104.97.84:43279] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sad8rd1.php"] [unique_id "afeLXqIu7bmXKXicRk-lagAAAIs"]
[Mon May 04 01:52:31.670741 2026] [:error] [pid 40386:tid 40405] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/saxzgf5.php
[Mon May 04 01:52:31.891213 2026] [:error] [pid 40386:tid 40411] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/saxzw9t.php
[Mon May 04 01:52:32.232846 2026] [:error] [pid 40386:tid 40407] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/sder5252u.php
[Mon May 04 01:52:32.456145 2026] [:error] [pid 40386:tid 40399] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/sderty5u.php
[Mon May 04 01:52:32.667776 2026] [:error] [pid 40386:tid 40395] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/hilk.php
[Mon May 04 01:52:32.879091 2026] [:error] [pid 40386:tid 40398] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/miso.php
[Mon May 04 01:52:33.092613 2026] [:error] [pid 40386:tid 40390] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Mon May 04 01:52:33.317996 2026] [:error] [pid 40386:tid 40402] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/checkout.php
[Mon May 04 01:52:33.529319 2026] [:error] [pid 40386:tid 40391] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/fictioner.php
[Mon May 04 01:52:33.824445 2026] [:error] [pid 40386:tid 40388] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Mon May 04 01:52:34.037472 2026] [:error] [pid 40386:tid 40406] [client 20.104.97.84:43351] File does not exist: /usr/local/apache/htdocs/suspended-page/xxa.php
[Mon May 04 01:52:34.442026 2026] [:error] [pid 40386:tid 40410] [client 20.104.97.84:43351] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file6.php"] [unique_id "afeLYlHJDYRXUf3IbRRAowAAANY"]
[Mon May 04 01:52:36.012363 2026] [:error] [pid 54535:tid 54542] [client 20.104.97.84:43106] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file6.php"] [unique_id "afeLZPRyz79iR-ntJRImqgAAAgU"]
[Mon May 04 01:52:38.207973 2026] [:error] [pid 37130:tid 37213] [client 20.104.97.84:43103] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file6.php"] [unique_id "afeLZqIu7bmXKXicRk-lbQAAAIA"]
[Mon May 04 01:52:40.926220 2026] [:error] [pid 40386:tid 40405] [client 20.104.97.84:43093] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file6.php"] [unique_id "afeLaFHJDYRXUf3IbRRAqgAAANE"]
[Mon May 04 01:52:41.630378 2026] [:error] [pid 40386:tid 40395] [client 20.104.97.84:43344] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "afeLaVHJDYRXUf3IbRRArAAAAMc"]
[Mon May 04 01:52:43.347476 2026] [:error] [pid 40386:tid 40402] [client 20.104.97.84:43091] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "afeLa1HJDYRXUf3IbRRArwAAAM4"]
[Mon May 04 01:52:45.819794 2026] [:error] [pid 40456:tid 40460] [client 20.104.97.84:43293] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "afeLbTSujTvwdzEkjSdzuAAAAYI"]
[Mon May 04 01:52:47.109798 2026] [:error] [pid 40456:tid 40479] [client 20.104.97.84:43367] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-asyn-upload.php"] [unique_id "afeLbzSujTvwdzEkjSdzugAAAZU"]
[Mon May 04 01:52:48.472331 2026] [:error] [pid 40386:tid 40389] [client 20.104.97.84:43099] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/redixsx.php"] [unique_id "afeLcFHJDYRXUf3IbRRAsgAAAME"]
[Mon May 04 01:52:51.210567 2026] [:error] [pid 37126:tid 37170] [client 20.104.97.84:43308] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/redixsx.php"] [unique_id "afeLc_R_A42N-LtDyrteegAAABE"]
[Mon May 04 01:52:54.299202 2026] [:error] [pid 37130:tid 37218] [client 20.104.97.84:42801] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/redixsx.php"] [unique_id "afeLdqIu7bmXKXicRk-lcgAAAIU"]
[Mon May 04 01:52:55.821698 2026] [:error] [pid 37130:tid 37226] [client 20.104.97.84:43096] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/redixsx.php"] [unique_id "afeLd6Iu7bmXKXicRk-lcwAAAI0"]
[Mon May 04 01:52:57.707456 2026] [:error] [pid 37127:tid 37195] [client 20.104.97.84:43332] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "afeLef8khJXb5O5aWVVWWgAAAEs"]
[Mon May 04 01:52:58.854711 2026] [:error] [pid 40422:tid 40427] [client 20.104.97.84:43280] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "afeLekHBbBLrXh6PButh1gAAAUE"]
[Mon May 04 01:52:59.562372 2026] [:error] [pid 37246:tid 37267] [client 20.104.97.84:43132] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "afeLezhvYFGNwhnPampKRQAAARE"]
[Mon May 04 01:53:02.120555 2026] [:error] [pid 37127:tid 37190] [client 20.104.97.84:43378] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "afeLfv8khJXb5O5aWVVWWwAAAEY"]
[Mon May 04 01:53:07.197067 2026] [:error] [pid 40386:tid 40397] [client 20.104.97.84:43339] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bc.php"] [unique_id "afeLg1HJDYRXUf3IbRRAugAAAMk"]
[Mon May 04 01:53:08.287157 2026] [:error] [pid 40456:tid 40465] [client 20.104.97.84:43277] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bc.php"] [unique_id "afeLhDSujTvwdzEkjSdzxAAAAYc"]
[Mon May 04 01:53:09.562195 2026] [:error] [pid 40456:tid 40482] [client 20.104.97.84:43316] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bc.php"] [unique_id "afeLhTSujTvwdzEkjSdzxQAAAZg"]
[Mon May 04 01:53:10.160846 2026] [:error] [pid 40386:tid 40392] [client 20.104.97.84:42788] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bc.php"] [unique_id "afeLhlHJDYRXUf3IbRRAvQAAAMQ"]
[Mon May 04 01:53:13.116804 2026] [:error] [pid 40386:tid 40407] [client 20.104.97.84:43104] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/67.php"] [unique_id "afeLiVHJDYRXUf3IbRRAvgAAANM"]
[Mon May 04 01:53:14.196688 2026] [:error] [pid 37246:tid 37270] [client 20.104.97.84:42806] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/67.php"] [unique_id "afeLijhvYFGNwhnPampKSAAAARQ"]
[Mon May 04 01:53:15.912142 2026] [:error] [pid 40456:tid 40459] [client 20.104.97.84:43320] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/67.php"] [unique_id "afeLizSujTvwdzEkjSdzywAAAYE"]
[Mon May 04 01:53:17.190797 2026] [:error] [pid 40386:tid 40390] [client 20.104.97.84:43365] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/67.php"] [unique_id "afeLjVHJDYRXUf3IbRRAxAAAAMI"]
[Mon May 04 01:53:20.974614 2026] [:error] [pid 40386:tid 40389] [client 20.104.97.84:42774] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1mrX.php"] [unique_id "afeLkFHJDYRXUf3IbRRAyAAAAME"]
[Mon May 04 01:53:21.903450 2026] [:error] [pid 40422:tid 40426] [client 20.104.97.84:43266] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1mrX.php"] [unique_id "afeLkUHBbBLrXh6PButh1wAAAUA"]
[Mon May 04 01:53:26.006797 2026] [:error] [pid 40456:tid 40462] [client 20.104.97.84:43391] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1mrX.php"] [unique_id "afeLljSujTvwdzEkjSdzzwAAAYQ"]
[Mon May 04 01:53:27.276841 2026] [:error] [pid 37130:tid 37222] [client 20.104.97.84:43288] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1mrX.php"] [unique_id "afeLl6Iu7bmXKXicRk-ldwAAAIk"]
[Mon May 04 01:53:28.086678 2026] [:error] [pid 40386:tid 40407] [client 20.104.97.84:43370] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x402.php"] [unique_id "afeLmFHJDYRXUf3IbRRAywAAANM"]
[Mon May 04 01:53:28.835377 2026] [:error] [pid 37126:tid 37163] [client 20.104.97.84:42800] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x402.php"] [unique_id "afeLmPR_A42N-LtDyrtefwAAAAo"]
[Mon May 04 01:53:31.372641 2026] [:error] [pid 40386:tid 40402] [client 20.104.97.84:43072] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x402.php"] [unique_id "afeLm1HJDYRXUf3IbRRAzwAAAM4"]
[Mon May 04 01:53:33.433907 2026] [:error] [pid 40386:tid 40390] [client 20.104.97.84:43092] [client 20.104.97.84] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x402.php"] [unique_id "afeLnVHJDYRXUf3IbRRA0QAAAMI"]
[Mon May 04 01:53:34.411427 2026] [:error] [pid 54535:tid 54547] [client 20.104.97.84:43102] File does not exist: /usr/local/apache/htdocs/suspended-page/485.php
[Mon May 04 01:53:34.620359 2026] [:error] [pid 54535:tid 54558] [client 20.104.97.84:43102] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Mon May 04 01:53:36.080468 2026] [:error] [pid 54535:tid 54558] [client 20.104.97.84:43102] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Mon May 04 04:41:22.906167 2026] [:error] [pid 58625:tid 58641] [client 62.164.177.15:48944] File does not exist: /usr/local/apache/htdocs/suspended-page/unzipper.php
[Mon May 04 09:04:36.895123 2026] [:error] [pid 33186:tid 33212] [client 20.9.90.138:17429] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Mon May 04 09:04:37.084151 2026] [:error] [pid 33186:tid 33205] [client 20.9.90.138:17429] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Mon May 04 09:04:37.271750 2026] [:error] [pid 33186:tid 33194] [client 20.9.90.138:17429] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "affwpbqlqe0DcmBS9VzPEwAAAAU"]
[Mon May 04 09:04:38.108193 2026] [:error] [pid 12051:tid 12065] [client 20.9.90.138:17585] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "affwpurVB-w_PyOHK6lLfgAAAUw"]
[Mon May 04 09:04:38.920647 2026] [:error] [pid 33186:tid 33204] [client 20.9.90.138:10700] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "affwprqlqe0DcmBS9VzPJgAAAA8"]
[Mon May 04 09:04:39.681447 2026] [:error] [pid 12022:tid 12046] [client 20.9.90.138:10400] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "affwp0VhgvCNKBWnaTI0igAAAJY"]
[Mon May 04 14:35:41.081782 2026] [:error] [pid 51340:tid 51353] [client 5.45.132.38:29752] [client 5.45.132.38] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 5.45.132.38, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afg-PVKUGYH4I3LlVH436gAAAMk"]
[Mon May 04 14:35:41.088034 2026] [:error] [pid 51340:tid 51353] [client 5.45.132.38:29752] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon May 04 15:45:06.416091 2026] [:error] [pid 3341:tid 3368] [client 136.107.232.91:64330] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "afhOgk9o3_LordU0wW7qTwAAAJg"]
[Mon May 04 15:45:06.874358 2026] [:error] [pid 3341:tid 3363] [client 136.107.232.91:49233] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "afhOgk9o3_LordU0wW7qcAAAAJM"]
[Mon May 04 15:45:07.304427 2026] [:error] [pid 61042:tid 61046] [client 136.107.232.91:50893] [client 136.107.232.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afhOg0nAPPS1fjubA9Qq5wAAAMA"]
[Mon May 04 19:33:15.893298 2026] [:error] [pid 3341:tid 3357] [client 209.87.169.74:60291] [client 209.87.169.74] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afiD-09o3_LordU0wW47bAAAAI0"]
[Mon May 04 20:24:07.825838 2026] [:error] [pid 61043:tid 61096] [client 34.24.211.32:54322] [client 34.24.211.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "afiP558-LwtfURjiAbC9LAAAAFU"]
[Tue May 05 05:21:35.924379 2026] [:error] [pid 41055:tid 41064] [client 35.197.181.190:50904] [client 35.197.181.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "afkN3yepFwKgA_SKOHirlgAAAQY"]
[Tue May 05 07:45:11.731885 2026] [:error] [pid 39071:tid 39094] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/bless.php
[Tue May 05 07:45:12.028654 2026] [:error] [pid 39071:tid 39097] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/O-Simple.php
[Tue May 05 07:45:12.310301 2026] [:error] [pid 39071:tid 39103] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue May 05 07:45:12.605652 2026] [:error] [pid 39071:tid 39089] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Tue May 05 07:45:12.905986 2026] [:error] [pid 39071:tid 39090] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/chosen.php
[Tue May 05 07:45:13.180706 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Tue May 05 07:45:13.469950 2026] [:error] [pid 39071:tid 39101] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue May 05 07:45:13.766923 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/mah.php
[Tue May 05 07:45:14.325232 2026] [:error] [pid 39071:tid 39097] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Tue May 05 07:45:14.599479 2026] [:error] [pid 39071:tid 39099] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/robots.php
[Tue May 05 07:45:14.946872 2026] [:error] [pid 39071:tid 39089] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue May 05 07:45:15.232585 2026] [:error] [pid 39071:tid 39080] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/mini.php
[Tue May 05 07:45:15.540505 2026] [:error] [pid 39071:tid 39085] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue May 05 07:45:15.815004 2026] [:error] [pid 39071:tid 39091] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/file5.php
[Tue May 05 07:45:16.103163 2026] [:error] [pid 39071:tid 39090] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/ahax.php
[Tue May 05 07:45:16.571817 2026] [:error] [pid 39071:tid 39090] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue May 05 07:45:16.848475 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Tue May 05 07:45:17.132573 2026] [:error] [pid 39071:tid 39089] [client 45.86.200.53:27617] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Tue May 05 07:45:21.133568 2026] [:error] [pid 39071:tid 39096] [client 45.86.200.53:27617] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afkvkYvmnRMz9gRzix2b1gAAABA"]
[Tue May 05 07:45:22.547644 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.97:62847] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "afkvknG_NPOxSH0O9aQLfwAAAUM"]
[Tue May 05 07:45:23.926728 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.90:41897] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Tue May 05 07:45:24.766596 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.90:41897] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "afkvlHG_NPOxSH0O9aQL7QAAAUM"]
[Tue May 05 07:45:25.899956 2026] [:error] [pid 39071:tid 39088] [client 45.86.200.83:35855] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Tue May 05 07:45:26.180974 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.83:35855] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "afkvlovmnRMz9gRzix2cPwAAAA0"]
[Tue May 05 07:45:26.993890 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.108:35449] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue May 05 07:45:28.397791 2026] [:error] [pid 39178:tid 39193] [client 45.86.200.108:35449] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "afkvmDaPrgTaiOD_15uq2gAAAM0"]
[Tue May 05 07:45:29.216123 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.77:57073] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "afkvmYvmnRMz9gRzix2cogAAAA0"]
[Tue May 05 07:45:29.798017 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.73:24445] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "afkvmfolSHl4aAnrIoslKQAAAFU"]
[Tue May 05 07:45:30.353152 2026] [:error] [pid 41055:tid 41065] [client 45.86.200.109:52835] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "afkvmiepFwKgA_SKOHgPBQAAAQc"]
[Tue May 05 07:45:30.900379 2026] [:error] [pid 39178:tid 39193] [client 45.86.200.98:47883] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "afkvmjaPrgTaiOD_15urPwAAAM0"]
[Tue May 05 07:45:31.449461 2026] [:error] [pid 41055:tid 41079] [client 45.86.200.91:60291] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "afkvmyepFwKgA_SKOHgPHgAAARU"]
[Tue May 05 07:45:32.260036 2026] [:error] [pid 39178:tid 39185] [client 45.86.200.92:45197] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "afkvnDaPrgTaiOD_15urZgAAAMU"]
[Tue May 05 07:45:32.830728 2026] [:error] [pid 41055:tid 41069] [client 45.86.200.54:51561] File does not exist: /usr/local/apache/htdocs/suspended-page/inc.php
[Tue May 05 07:45:33.385880 2026] [:error] [pid 41055:tid 41062] [client 45.86.200.54:51561] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "afkvnSepFwKgA_SKOHgPXwAAAQQ"]
[Tue May 05 07:45:34.505931 2026] [:error] [pid 39072:tid 39121] [client 45.86.200.91:34847] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "afkvnvolSHl4aAnrIosltwAAAE4"]
[Tue May 05 07:45:35.306052 2026] [:error] [pid 39178:tid 39188] [client 45.86.200.83:37337] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "afkvnzaPrgTaiOD_15urzwAAAMg"]
[Tue May 05 07:45:35.852090 2026] [:error] [pid 41055:tid 41059] [client 45.86.200.99:53599] File does not exist: /usr/local/apache/htdocs/suspended-page/function.php
[Tue May 05 07:45:36.124901 2026] [:error] [pid 41055:tid 41065] [client 45.86.200.99:53599] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "afkvoCepFwKgA_SKOHgPwQAAAQc"]
[Tue May 05 07:45:36.694473 2026] [:error] [pid 41055:tid 41081] [client 45.86.200.108:50965] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-signup.php
[Tue May 05 07:45:37.559671 2026] [:error] [pid 41055:tid 41064] [client 45.86.200.108:50965] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Tue May 05 07:45:38.468041 2026] [:error] [pid 41055:tid 41078] [client 45.86.200.108:50965] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "afkvoiepFwKgA_SKOHgQHwAAARQ"]
[Tue May 05 07:45:39.023730 2026] [:error] [pid 39072:tid 39117] [client 45.86.200.105:35529] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-l0gin.php
[Tue May 05 07:45:39.301112 2026] [:error] [pid 39072:tid 39112] [client 45.86.200.105:35529] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "afkvo_olSHl4aAnrIosmVQAAAEU"]
[Tue May 05 07:45:39.847984 2026] [:error] [pid 39073:tid 39158] [client 45.86.200.84:30327] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue May 05 07:45:40.404070 2026] [:error] [pid 39073:tid 39134] [client 45.86.200.84:30327] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "afkvpP0kT1BNjk46BkdoGAAAAIA"]
[Tue May 05 07:45:41.243886 2026] [:error] [pid 39071:tid 39100] [client 45.86.200.53:51051] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "afkvpYvmnRMz9gRzix2eBgAAABQ"]
[Tue May 05 07:45:42.136962 2026] [:error] [pid 41055:tid 41060] [client 45.86.200.99:30181] File does not exist: /usr/local/apache/htdocs/suspended-page/natural.php
[Tue May 05 07:45:42.435116 2026] [:error] [pid 41055:tid 41070] [client 45.86.200.99:30181] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Tue May 05 07:45:43.023962 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.99:30181] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "afkvpyepFwKgA_SKOHgQmQAAARg"]
[Tue May 05 07:45:43.857279 2026] [:error] [pid 41055:tid 41076] [client 45.86.200.110:48033] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "afkvpyepFwKgA_SKOHgQrQAAARI"]
[Tue May 05 07:45:44.732929 2026] [:error] [pid 39072:tid 39126] [client 45.86.200.112:39087] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "afkvqPolSHl4aAnrIosm9AAAAFM"]
[Tue May 05 07:45:45.324043 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.78:51643] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "afkvqXG_NPOxSH0O9aQPbAAAAUk"]
[Tue May 05 07:45:45.864960 2026] [:error] [pid 39073:tid 39156] [client 45.86.200.92:50567] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afkvqf0kT1BNjk46Bkdo1AAAAJY"]
[Tue May 05 07:45:46.993346 2026] [:error] [pid 39072:tid 39107] [client 185.82.72.4:36945] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Tue May 05 07:45:47.272153 2026] [:error] [pid 39072:tid 39123] [client 185.82.72.4:36945] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "afkvq_olSHl4aAnrIosnUgAAAFA"]
[Tue May 05 07:45:47.827777 2026] [:error] [pid 39071:tid 39102] [client 45.86.200.87:64951] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "afkvq4vmnRMz9gRzix2ezgAAABY"]
[Tue May 05 07:45:48.398010 2026] [:error] [pid 53856:tid 53879] [client 45.86.200.111:51513] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afkvrHG_NPOxSH0O9aQQBgAAAU4"]
[Tue May 05 07:45:49.567562 2026] [:error] [pid 39073:tid 39139] [client 45.86.200.104:31645] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Tue May 05 07:45:50.165702 2026] [:error] [pid 39073:tid 39140] [client 45.86.200.104:31645] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Tue May 05 07:45:51.391550 2026] [:error] [pid 39073:tid 39147] [client 45.86.200.104:31645] [client 45.86.200.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/admin.php"] [unique_id "afkvr_0kT1BNjk46BkdpiwAAAI0"]
[Tue May 05 07:45:52.856705 2026] [:error] [pid 39178:tid 39204] [client 45.86.200.74:40351] [client 45.86.200.74] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.74, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "afkvsDaPrgTaiOD_15utzQAAANg"]
[Tue May 05 07:45:53.137427 2026] [:error] [pid 39178:tid 39192] [client 45.86.200.74:40351] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Tue May 05 07:45:53.417141 2026] [:error] [pid 39178:tid 39202] [client 45.86.200.74:40351] [client 45.86.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/rk2.php"] [unique_id "afkvsTaPrgTaiOD_15ut4AAAANY"]
[Tue May 05 07:45:55.086555 2026] [:error] [pid 53856:tid 53885] [client 45.86.200.57:62013] File does not exist: /usr/local/apache/htdocs/suspended-page/bypass.php
[Tue May 05 07:45:55.381230 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.57:62013] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Tue May 05 07:45:56.813602 2026] [:error] [pid 53856:tid 53871] [client 45.86.200.57:62013] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "afkvtHG_NPOxSH0O9aQRrAAAAUY"]
[Tue May 05 07:45:57.672695 2026] [:error] [pid 53856:tid 53876] [client 45.86.200.73:22253] File does not exist: /usr/local/apache/htdocs/suspended-page/init.php
[Tue May 05 07:45:57.971617 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.73:22253] [client 45.86.200.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.73, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "afkvtXG_NPOxSH0O9aQR2wAAAVM"]
[Tue May 05 07:45:58.534718 2026] [:error] [pid 53856:tid 53871] [client 45.86.200.73:22253] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/item.php"] [unique_id "afkvtnG_NPOxSH0O9aQR8wAAAUY"]
[Tue May 05 07:46:06.489645 2026] [:error] [pid 41055:tid 41071] [client 45.86.200.57:41925] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue May 05 07:46:07.083701 2026] [:error] [pid 41055:tid 41080] [client 45.86.200.57:41925] File does not exist: /usr/local/apache/htdocs/suspended-page/wp_wlx.php
[Tue May 05 07:46:07.675919 2026] [:error] [pid 41055:tid 41064] [client 45.86.200.57:41925] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "afkvvyepFwKgA_SKOHgS0AAAAQY"]
[Tue May 05 07:46:08.228329 2026] [:error] [pid 53856:tid 53866] [client 45.86.200.94:35795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue May 05 07:46:09.112417 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.94:35795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-header.php
[Tue May 05 07:46:09.686556 2026] [:error] [pid 53856:tid 53870] [client 45.86.200.94:35795] File does not exist: /usr/local/apache/htdocs/suspended-page/Marvins.php
[Tue May 05 07:46:10.260958 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.94:35795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-class.php
[Tue May 05 07:46:10.525919 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.94:35795] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "afkvwnG_NPOxSH0O9aQUdwAAAVE"]
[Tue May 05 07:46:11.075618 2026] [:error] [pid 39072:tid 39121] [client 45.86.200.94:59049] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Tue May 05 07:46:11.359937 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.94:59049] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Tue May 05 07:46:11.633056 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.94:59049] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "afkvw_olSHl4aAnrIosqIgAAAEQ"]
[Tue May 05 07:46:12.479605 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.95:53533] File does not exist: /usr/local/apache/htdocs/suspended-page/content.php
[Tue May 05 07:46:13.045341 2026] [:error] [pid 39178:tid 39204] [client 45.86.200.95:53533] [client 45.86.200.95] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.95, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "afkvxTaPrgTaiOD_15uxKgAAANg"]
[Tue May 05 07:46:13.335615 2026] [:error] [pid 39178:tid 39190] [client 45.86.200.95:53533] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "afkvxTaPrgTaiOD_15uxNwAAAMo"]
[Tue May 05 07:46:16.686770 2026] [:error] [pid 39072:tid 39129] [client 45.86.200.87:47821] File does not exist: /usr/local/apache/htdocs/suspended-page/web.php
[Tue May 05 07:46:21.965126 2026] [:error] [pid 39072:tid 39120] [client 45.86.200.87:47821] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue May 05 07:46:22.236352 2026] [:error] [pid 39072:tid 39130] [client 45.86.200.87:47821] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "afkvzvolSHl4aAnrIosrygAAAFc"]
[Tue May 05 07:46:22.849589 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.59:31889] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Tue May 05 07:46:23.717162 2026] [:error] [pid 39178:tid 39199] [client 45.86.200.59:31889] [client 45.86.200.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.59, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "afkvzzaPrgTaiOD_15uyxQAAANM"]
[Tue May 05 07:46:23.995122 2026] [:error] [pid 39178:tid 39180] [client 45.86.200.59:31889] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Tue May 05 07:46:24.297186 2026] [:error] [pid 39178:tid 39187] [client 45.86.200.59:31889] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-setup.php
[Tue May 05 07:46:24.586077 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.59:31889] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-themes.php
[Tue May 05 07:46:24.859733 2026] [:error] [pid 39178:tid 39204] [client 45.86.200.59:31889] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "afkv0DaPrgTaiOD_15uy5AAAANg"]
[Tue May 05 07:46:25.429283 2026] [:error] [pid 53856:tid 53866] [client 45.86.200.86:35347] File does not exist: /usr/local/apache/htdocs/suspended-page/style.php
[Tue May 05 07:46:25.706994 2026] [:error] [pid 53856:tid 53868] [client 45.86.200.86:35347] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/infi.php"] [unique_id "afkv0XG_NPOxSH0O9aQX-AAAAUM"]
[Tue May 05 07:46:26.555919 2026] [:error] [pid 41055:tid 41059] [client 45.86.200.88:56523] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Tue May 05 07:46:26.825110 2026] [:error] [pid 41055:tid 41064] [client 45.86.200.88:56523] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "afkv0iepFwKgA_SKOHgVDQAAAQY"]
[Tue May 05 07:46:27.933167 2026] [:error] [pid 53856:tid 53882] [client 45.86.200.56:62595] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-user.php
[Tue May 05 07:46:28.205026 2026] [:error] [pid 53856:tid 53888] [client 45.86.200.56:62595] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "afkv1HG_NPOxSH0O9aQYmwAAAVc"]
[Tue May 05 07:46:28.751734 2026] [:error] [pid 39073:tid 39135] [client 45.86.200.83:38535] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "afkv1P0kT1BNjk46BkdtfQAAAIE"]
[Tue May 05 07:46:29.295246 2026] [:error] [pid 39178:tid 39181] [client 45.86.200.83:27605] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Tue May 05 07:46:29.579154 2026] [:error] [pid 39178:tid 39202] [client 45.86.200.83:27605] File does not exist: /usr/local/apache/htdocs/suspended-page/special.php
[Tue May 05 07:46:30.704144 2026] [:error] [pid 39178:tid 39201] [client 45.86.200.83:27605] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "afkv1jaPrgTaiOD_15uzuAAAANU"]
[Tue May 05 07:46:31.533630 2026] [:error] [pid 39178:tid 39200] [client 45.86.200.55:39455] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "afkv1zaPrgTaiOD_15uz3gAAANQ"]
[Tue May 05 07:46:32.972250 2026] [:error] [pid 39072:tid 39127] [client 45.86.200.108:39069] [client 45.86.200.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/edit.php"] [unique_id "afkv2PolSHl4aAnrIostJAAAAFQ"]
[Tue May 05 07:47:21.305890 2026] [:error] [pid 39072:tid 39118] [client 45.86.200.79:65207] [client 45.86.200.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/acme-challenge/"] [unique_id "afkwCfolSHl4aAnrIos0SQAAAEs"]
[Tue May 05 07:47:21.967348 2026] [autoindex:error] [pid 39071:tid 39081] [client 45.86.200.53:25625] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:27.986177 2026] [:error] [pid 39071:tid 39096] [client 45.86.200.53:25625] [client 45.86.200.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfour/"] [unique_id "afkwD4vmnRMz9gRzix2n3AAAABA"]
[Tue May 05 11:52:26.413957 2026] [:error] [pid 25743:tid 25771] [client 177.55.75.213:53956] [client 177.55.75.213] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 177.55.75.213, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aflpem-PCMRhF5DdUnN3ugAAABg"]
[Tue May 05 11:52:26.419679 2026] [:error] [pid 25743:tid 25771] [client 177.55.75.213:53956] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 05 22:14:39.908819 2026] [:error] [pid 25743:tid 25771] [client 194.62.107.131:56265] [client 194.62.107.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afn7T2-PCMRhF5DdUnMCQAAAABg"]
[Tue May 05 23:17:55.925999 2026] [:error] [pid 25744:tid 25785] [client 20.197.62.144:5057] File does not exist: /usr/local/apache/htdocs/suspended-page/functions.php
[Tue May 05 23:17:56.067297 2026] [:error] [pid 25744:tid 25789] [client 20.197.62.144:5057] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Tue May 05 23:17:56.350694 2026] [:error] [pid 25744:tid 25775] [client 20.197.62.144:5057] File does not exist: /usr/local/apache/htdocs/suspended-page/index.php
[Tue May 05 23:17:56.633436 2026] [:error] [pid 25744:tid 25774] [client 20.197.62.144:5057] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Tue May 05 23:17:56.775284 2026] [:error] [pid 25744:tid 25794] [client 20.197.62.144:5057] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue May 05 23:17:56.917754 2026] [:error] [pid 25744:tid 25784] [client 20.197.62.144:5057] File does not exist: /usr/local/apache/htdocs/suspended-page/k.php
[Tue May 05 23:17:57.064505 2026] [:error] [pid 25744:tid 25783] [client 20.197.62.144:5057] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue May 05 23:17:57.206815 2026] [:error] [pid 25744:tid 25786] [client 20.197.62.144:5057] File does not exist: /usr/local/apache/htdocs/suspended-page/meta.php
[Tue May 05 23:17:57.345956 2026] [:error] [pid 25744:tid 25782] [client 20.197.62.144:5057] [client 20.197.62.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "afoKJSR8IuyzjkW06OMRrgAAAIg"]
[Tue May 05 23:17:59.739424 2026] [:error] [pid 2324:tid 2335] [client 20.197.62.144:5119] [client 20.197.62.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "afoKJ2qe2hrcI52A1Hy31gAAAUk"]
[Tue May 05 23:18:00.301909 2026] [:error] [pid 25835:tid 25855] [client 20.197.62.144:5835] [client 20.197.62.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "afoKKFDT5nGJyh1439z5VwAAARI"]
[Tue May 05 23:18:00.896906 2026] [:error] [pid 2324:tid 2339] [client 20.197.62.144:5935] [client 20.197.62.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "afoKKGqe2hrcI52A1Hy32AAAAU0"]
[Wed May 06 00:08:05.417567 2026] [:error] [pid 25745:tid 25811] [client 20.249.13.215:2639] [client 20.249.13.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xleet.php"] [unique_id "afoV5Zsd7hb7vrvCNBlktgAAAMo"]
[Wed May 06 00:08:05.975951 2026] [:error] [pid 25745:tid 25818] [client 20.249.13.215:1699] [client 20.249.13.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xleet.php"] [unique_id "afoV5Zsd7hb7vrvCNBlktwAAANE"]
[Wed May 06 00:08:06.605168 2026] [:error] [pid 25835:tid 25842] [client 20.249.13.215:1716] [client 20.249.13.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xleet.php"] [unique_id "afoV5lDT5nGJyh1439wATAAAAQU"]
[Wed May 06 00:08:07.233862 2026] [:error] [pid 25744:tid 25780] [client 20.249.13.215:1705] [client 20.249.13.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xleet.php"] [unique_id "afoV5yR8IuyzjkW06OMbwgAAAIY"]
[Wed May 06 06:22:37.829110 2026] [:error] [pid 48757:tid 48788] [client 204.195.163.83:62348] [client 204.195.163.83] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 204.195.163.83, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afptrUAivC3C614LoA5rgwAAABY"]
[Wed May 06 06:22:37.834057 2026] [:error] [pid 48757:tid 48788] [client 204.195.163.83:62348] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 06 10:04:43.418956 2026] [:error] [pid 9659:tid 9742] [client 137.184.163.53:51222] [client 137.184.163.53] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 137.184.163.53, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "afqhu_wJnWjd8JHpBttM4gAAAMg"]
[Wed May 06 10:04:43.423157 2026] [:error] [pid 9659:tid 9742] [client 137.184.163.53:51222] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed May 06 11:01:53.335131 2026] [:error] [pid 9653:tid 9698] [client 157.230.99.54:63274] [client 157.230.99.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.99.54, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "afqvIahJ49Xc4dqq0B50rgAAAAA"]
[Wed May 06 11:01:53.338806 2026] [:error] [pid 9653:tid 9698] [client 157.230.99.54:63274] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed May 06 14:43:52.866433 2026] [:error] [pid 482:tid 486] [client 178.18.246.56:55062] [client 178.18.246.56] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 178.18.246.56, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "afrjKMxs8HOc_nWgOW4DkAAAAcI"]
[Wed May 06 14:43:52.870513 2026] [:error] [pid 482:tid 486] [client 178.18.246.56:55062] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Wed May 06 14:43:52.998769 2026] [:error] [pid 482:tid 499] [client 178.18.246.56:55076] [client 178.18.246.56] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 178.18.246.56, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afrjKMxs8HOc_nWgOW4DkgAAAc8"]
[Wed May 06 14:43:53.002430 2026] [:error] [pid 482:tid 499] [client 178.18.246.56:55076] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 06 19:48:46.043857 2026] [:error] [pid 482:tid 493] [client 79.127.164.136:25744] [client 79.127.164.136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "afsqnsxs8HOc_nWgOW5B-AAAAck"]
[Thu May 07 01:30:13.381574 2026] [:error] [pid 13443:tid 13468] [client 176.224.218.131:60707] [client 176.224.218.131] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.224.218.131, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aft6pQCyfZallDmsQreyQQAAAVc"]
[Thu May 07 01:30:13.387358 2026] [:error] [pid 13443:tid 13468] [client 176.224.218.131:60707] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 04:12:51.317446 2026] [:error] [pid 29606:tid 29659] [client 2.24.70.91:37572] [client 2.24.70.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "afugwxR5HjZ1PlSAiKtHOQAAAFI"]
[Thu May 07 05:25:54.645683 2026] [:error] [pid 4539:tid 4559] [client 20.169.74.48:48011] [client 20.169.74.48] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.169.74.48, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "afux4oPEZE1565sDGnwb5wAAARI"]
[Thu May 07 15:58:59.495005 2026] [:error] [pid 15715:tid 15730] [client 35.247.52.87:53128] [client 35.247.52.87] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.247.52.87, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afxGQyY4dZsLOttMkcdoPgAAAQo"]
[Thu May 07 15:58:59.501135 2026] [:error] [pid 15715:tid 15730] [client 35.247.52.87:53128] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 15:59:01.473622 2026] [:error] [pid 15715:tid 15743] [client 35.247.52.87:53128] [client 35.247.52.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afxGRSY4dZsLOttMkcdoTAAAARc"]
[Thu May 07 15:59:01.826131 2026] [:error] [pid 15630:tid 15676] [client 35.247.52.87:49177] [client 35.247.52.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afxGRXTithRAi4821quUQgAAAJA"]
[Thu May 07 15:59:02.220092 2026] [:error] [pid 15715:tid 15737] [client 35.247.52.87:56406] [client 35.247.52.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afxGRiY4dZsLOttMkcdoTQAAARE"]
[Thu May 07 15:59:02.627763 2026] [:error] [pid 15630:tid 15670] [client 35.247.52.87:56577] [client 35.247.52.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afxGRnTithRAi4821quUQwAAAIo"]
[Thu May 07 15:59:03.015968 2026] [:error] [pid 15715:tid 15733] [client 35.247.52.87:54113] [client 35.247.52.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afxGRyY4dZsLOttMkcdoTgAAAQ0"]
[Thu May 07 15:59:03.496679 2026] [:error] [pid 15630:tid 15671] [client 35.247.52.87:57917] [client 35.247.52.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afxGR3TithRAi4821quURAAAAIs"]
[Thu May 07 15:59:03.940689 2026] [:error] [pid 15629:tid 15651] [client 35.247.52.87:57975] [client 35.247.52.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afxGR_rIJCALdUrO43ldNAAAABI"]
[Thu May 07 18:49:40.043067 2026] [:error] [pid 15630:tid 15674] [client 34.11.87.201:61756] [client 34.11.87.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.11.87.201, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afxuRHTithRAi4821quq3wAAAI4"]
[Thu May 07 18:49:40.048106 2026] [:error] [pid 15630:tid 15674] [client 34.11.87.201:61756] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 18:49:42.454926 2026] [:error] [pid 15630:tid 15661] [client 34.11.87.201:61756] [client 34.11.87.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afxuRnTithRAi4821quq7AAAAIE"]
[Thu May 07 18:49:42.894952 2026] [:error] [pid 28098:tid 28115] [client 34.11.87.201:49389] [client 34.11.87.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afxuRsvhwfljlt8trSrUFgAAAE8"]
[Thu May 07 18:49:43.326477 2026] [:error] [pid 15631:tid 15709] [client 34.11.87.201:60201] [client 34.11.87.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afxuR3vP1GkPUuuLfqUwMAAAANY"]
[Thu May 07 18:49:43.786937 2026] [:error] [pid 15629:tid 15650] [client 34.11.87.201:60313] [client 34.11.87.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afxuR_rIJCALdUrO43lxAgAAABE"]
[Thu May 07 18:49:44.223294 2026] [:error] [pid 28098:tid 28119] [client 34.11.87.201:56575] [client 34.11.87.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afxuSMvhwfljlt8trSrUGAAAAFM"]
[Thu May 07 18:49:44.663641 2026] [:error] [pid 15631:tid 15700] [client 34.11.87.201:54455] [client 34.11.87.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afxuSHvP1GkPUuuLfqUwMwAAAM0"]
[Thu May 07 18:49:45.093529 2026] [:error] [pid 15629:tid 15646] [client 34.11.87.201:60147] [client 34.11.87.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afxuSfrIJCALdUrO43lxAwAAAA0"]
[Thu May 07 21:49:05.359062 2026] [:error] [pid 28098:tid 28100] [client 180.190.52.66:33173] [client 180.190.52.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 180.190.52.66, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "afyYUcvhwfljlt8trSoUDAAAAEA"]
[Thu May 07 21:49:05.368605 2026] [:error] [pid 28098:tid 28100] [client 180.190.52.66:33173] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 07 23:08:11.419140 2026] [:error] [pid 15715:tid 15736] [client 136.119.52.67:54818] [client 136.119.52.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "afyq2yY4dZsLOttMkcfQ3gAAARA"]
[Fri May 08 03:55:16.717506 2026] [:error] [pid 51008:tid 51059] [client 20.151.226.69:9606] File does not exist: /usr/local/apache/htdocs/suspended-page/class-t.api.php
[Fri May 08 03:55:16.928858 2026] [:error] [pid 51008:tid 51070] [client 20.151.226.69:9606] File does not exist: /usr/local/apache/htdocs/suspended-page/zwso.php
[Fri May 08 03:55:17.365985 2026] [:error] [pid 51008:tid 51055] [client 20.151.226.69:9606] File does not exist: /usr/local/apache/htdocs/suspended-page/class19.php
[Fri May 08 03:55:17.579924 2026] [:error] [pid 51008:tid 51056] [client 20.151.226.69:9606] File does not exist: /usr/local/apache/htdocs/suspended-page/class20.php
[Fri May 08 03:55:17.791512 2026] [:error] [pid 51008:tid 51058] [client 20.151.226.69:9606] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Fri May 08 03:55:18.001899 2026] [:error] [pid 51008:tid 51068] [client 20.151.226.69:9606] File does not exist: /usr/local/apache/htdocs/suspended-page/randkeyword.php
[Fri May 08 03:55:18.212012 2026] [:error] [pid 51008:tid 51073] [client 20.151.226.69:9606] File does not exist: /usr/local/apache/htdocs/suspended-page/fwe.php
[Fri May 08 03:55:18.683915 2026] [:error] [pid 51008:tid 51052] [client 20.151.226.69:9606] File does not exist: /usr/local/apache/htdocs/suspended-page/g.php
[Fri May 08 03:55:18.890179 2026] [:error] [pid 51008:tid 51057] [client 20.151.226.69:9606] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "afzuJnB58C2Y1tgLtuLn6wAAAEg"]
[Fri May 08 03:55:21.953683 2026] [:error] [pid 51113:tid 51127] [client 20.151.226.69:9620] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "afzuKUQfs7sWtqkpQIfWgAAAAMw"]
[Fri May 08 03:55:25.803404 2026] [:error] [pid 51008:tid 51058] [client 20.151.226.69:48815] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "afzuLXB58C2Y1tgLtuLn9gAAAEk"]
[Fri May 08 03:55:27.733298 2026] [:error] [pid 51007:tid 51026] [client 20.151.226.69:39475] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx1.php"] [unique_id "afzuL1MagSGstWKyzzVcTwAAAAQ"]
[Fri May 08 03:55:30.066833 2026] [:error] [pid 51009:tid 51092] [client 20.151.226.69:39427] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "afzuMuB0GbUWhxgzX9V4UwAAAJA"]
[Fri May 08 03:55:32.076941 2026] [:error] [pid 51009:tid 51083] [client 20.151.226.69:39477] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "afzuNOB0GbUWhxgzX9V4WgAAAIc"]
[Fri May 08 03:55:35.241855 2026] [:error] [pid 51008:tid 51057] [client 20.151.226.69:50677] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "afzuN3B58C2Y1tgLtuLoBAAAAEg"]
[Fri May 08 03:55:36.709605 2026] [:error] [pid 51008:tid 51065] [client 20.151.226.69:50630] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xv.php"] [unique_id "afzuOHB58C2Y1tgLtuLoCQAAAFA"]
[Fri May 08 03:55:38.960830 2026] [:error] [pid 51007:tid 51045] [client 20.151.226.69:50659] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "afzuOlMagSGstWKyzzVcWAAAABc"]
[Fri May 08 03:55:41.056978 2026] [:error] [pid 51008:tid 51058] [client 20.151.226.69:50651] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "afzuPXB58C2Y1tgLtuLoCwAAAEk"]
[Fri May 08 03:55:43.424474 2026] [:error] [pid 51113:tid 51139] [client 20.151.226.69:9256] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "afzuP0Qfs7sWtqkpQIfWxQAAANg"]
[Fri May 08 03:55:50.189185 2026] [:error] [pid 51009:tid 51083] [client 20.151.226.69:34871] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x56.php"] [unique_id "afzuRuB0GbUWhxgzX9V4dgAAAIc"]
[Fri May 08 03:55:58.978873 2026] [:error] [pid 51008:tid 51064] [client 20.151.226.69:47653] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "afzuTnB58C2Y1tgLtuLoEwAAAE8"]
[Fri May 08 03:56:03.944980 2026] [:error] [pid 51008:tid 51053] [client 20.151.226.69:10052] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htaccess.php"] [unique_id "afzuU3B58C2Y1tgLtuLoGAAAAEQ"]
[Fri May 08 03:56:07.689679 2026] [:error] [pid 51009:tid 51078] [client 20.151.226.69:52007] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "afzuV-B0GbUWhxgzX9V4iAAAAII"]
[Fri May 08 03:56:10.298717 2026] [:error] [pid 51007:tid 51033] [client 20.151.226.69:61020] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "afzuWlMagSGstWKyzzVcdAAAAAs"]
[Fri May 08 03:56:11.842251 2026] [:error] [pid 51007:tid 51032] [client 20.151.226.69:10068] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "afzuW1MagSGstWKyzzVcfAAAAAo"]
[Fri May 08 03:56:14.420595 2026] [:error] [pid 51113:tid 51120] [client 20.151.226.69:32447] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/readme.php"] [unique_id "afzuXkQfs7sWtqkpQIfXAwAAAMU"]
[Fri May 08 03:56:17.959037 2026] [:error] [pid 51113:tid 51125] [client 20.151.226.69:37614] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x50.php"] [unique_id "afzuYUQfs7sWtqkpQIfXDwAAAMo"]
[Fri May 08 03:56:20.048748 2026] [:error] [pid 51009:tid 51087] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/x50.php
[Fri May 08 03:56:20.291337 2026] [:error] [pid 51009:tid 51079] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/fv.php
[Fri May 08 03:56:20.515917 2026] [:error] [pid 51009:tid 51097] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Fri May 08 03:56:20.733887 2026] [:error] [pid 51009:tid 51077] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/lsd.php
[Fri May 08 03:56:21.090381 2026] [:error] [pid 51009:tid 51086] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Fri May 08 03:56:21.315717 2026] [:error] [pid 51009:tid 51099] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/wsd.php
[Fri May 08 03:56:21.530948 2026] [:error] [pid 51009:tid 51078] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/gtc.php
[Fri May 08 03:56:21.743752 2026] [:error] [pid 51009:tid 51090] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/atx.php
[Fri May 08 03:56:21.961183 2026] [:error] [pid 51009:tid 51084] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/z60.php
[Fri May 08 03:56:22.188325 2026] [:error] [pid 51009:tid 51088] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri May 08 03:56:22.405698 2026] [:error] [pid 51009:tid 51092] [client 20.151.226.69:30465] File does not exist: /usr/local/apache/htdocs/suspended-page/m.php
[Fri May 08 03:56:22.614249 2026] [:error] [pid 51009:tid 51083] [client 20.151.226.69:30465] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "afzuZuB0GbUWhxgzX9V4qgAAAIc"]
[Fri May 08 03:56:28.409097 2026] [:error] [pid 51113:tid 51136] [client 20.151.226.69:30523] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "afzubEQfs7sWtqkpQIfXHQAAANU"]
[Fri May 08 03:56:34.490882 2026] [:error] [pid 51009:tid 51090] [client 20.151.226.69:50587] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "afzucuB0GbUWhxgzX9V4zwAAAI4"]
[Fri May 08 03:56:45.241832 2026] [:error] [pid 51113:tid 51124] [client 20.151.226.69:59670] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "afzufUQfs7sWtqkpQIfXNgAAAMk"]
[Fri May 08 03:56:47.780696 2026] [:error] [pid 51008:tid 51073] [client 20.151.226.69:48382] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "afzuf3B58C2Y1tgLtuLoWwAAAFg"]
[Fri May 08 03:56:49.978004 2026] [:error] [pid 51113:tid 51119] [client 20.151.226.69:36438] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "afzugUQfs7sWtqkpQIfXUAAAAMQ"]
[Fri May 08 03:56:51.022676 2026] [:error] [pid 51008:tid 51054] [client 20.151.226.69:48370] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "afzug3B58C2Y1tgLtuLoXwAAAEU"]
[Fri May 08 03:56:54.910628 2026] [:error] [pid 51008:tid 51060] [client 20.151.226.69:36459] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzuhnB58C2Y1tgLtuLoZgAAAEs"]
[Fri May 08 03:56:57.752077 2026] [:error] [pid 51113:tid 51119] [client 20.151.226.69:46562] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzuiUQfs7sWtqkpQIfXeQAAAMQ"]
[Fri May 08 03:56:59.281645 2026] [:error] [pid 51008:tid 51049] [client 20.151.226.69:39968] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzui3B58C2Y1tgLtuLoagAAAEA"]
[Fri May 08 03:57:01.087638 2026] [:error] [pid 51007:tid 51042] [client 20.151.226.69:46577] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/network/wp-conflg.php"] [unique_id "afzujVMagSGstWKyzzVdFgAAABQ"]
[Fri May 08 03:57:01.839913 2026] [:error] [pid 51009:tid 51097] [client 20.151.226.69:36464] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "afzujeB0GbUWhxgzX9V4-AAAAJU"]
[Fri May 08 03:57:03.516773 2026] [:error] [pid 51113:tid 51132] [client 20.151.226.69:48331] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "afzuj0Qfs7sWtqkpQIfXjgAAANE"]
[Fri May 08 03:57:08.346613 2026] [:error] [pid 51009:tid 51098] [client 20.151.226.69:48365] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "afzulOB0GbUWhxgzX9V5DAAAAJY"]
[Fri May 08 03:57:12.492173 2026] [:error] [pid 51113:tid 51120] [client 20.151.226.69:60132] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/click.php"] [unique_id "afzumEQfs7sWtqkpQIfXygAAAMU"]
[Fri May 08 03:57:16.619185 2026] [:error] [pid 51009:tid 51095] [client 20.151.226.69:46536] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "afzunOB0GbUWhxgzX9V5IwAAAJM"]
[Fri May 08 03:57:17.824366 2026] [:error] [pid 51113:tid 51120] [client 20.151.226.69:27290] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "afzunUQfs7sWtqkpQIfX3gAAAMU"]
[Fri May 08 03:57:20.156945 2026] [:error] [pid 51007:tid 51037] [client 20.151.226.69:27950] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "afzuoFMagSGstWKyzzVdIQAAAA8"]
[Fri May 08 03:57:24.923268 2026] [:error] [pid 51008:tid 51067] [client 20.151.226.69:61425] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Fri May 08 03:57:25.211961 2026] [:error] [pid 51008:tid 51058] [client 20.151.226.69:61425] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Fri May 08 03:57:25.437384 2026] [:error] [pid 51008:tid 51052] [client 20.151.226.69:61425] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Fri May 08 03:57:25.656660 2026] [:error] [pid 51008:tid 51072] [client 20.151.226.69:61425] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri May 08 03:57:25.871514 2026] [:error] [pid 51008:tid 51061] [client 20.151.226.69:61425] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri May 08 03:57:26.088218 2026] [:error] [pid 51008:tid 51066] [client 20.151.226.69:61425] [client 20.151.226.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afzupnB58C2Y1tgLtuLooAAAAFE"]
[Fri May 08 03:57:38.459137 2026] [:error] [pid 51113:tid 51131] [client 20.151.226.69:61424] File does not exist: /usr/local/apache/htdocs/suspended-page/cong.php
[Fri May 08 03:57:40.258585 2026] [:error] [pid 51113:tid 51128] [client 20.151.226.69:61424] File does not exist: /usr/local/apache/htdocs/suspended-page/w.php
[Fri May 08 03:57:40.518777 2026] [:error] [pid 51113:tid 51132] [client 20.151.226.69:61424] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Fri May 08 03:57:40.756070 2026] [:error] [pid 51113:tid 51126] [client 20.151.226.69:61424] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Fri May 08 03:57:40.986547 2026] [:error] [pid 51113:tid 51119] [client 20.151.226.69:61424] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Fri May 08 03:57:41.220796 2026] [:error] [pid 51113:tid 51138] [client 20.151.226.69:61424] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Fri May 08 03:57:41.427448 2026] [:error] [pid 51113:tid 51121] [client 20.151.226.69:61424] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "afzutUQfs7sWtqkpQIfYXgAAAMY"]
[Fri May 08 03:57:45.320813 2026] [:error] [pid 51113:tid 51135] [client 20.151.226.69:59630] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "afzuuUQfs7sWtqkpQIfYbAAAANQ"]
[Fri May 08 03:57:48.252756 2026] [:error] [pid 51008:tid 51064] [client 20.151.226.69:56491] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "afzuvHB58C2Y1tgLtuLo4gAAAE8"]
[Fri May 08 03:57:55.067515 2026] [:error] [pid 51007:tid 51036] [client 20.151.226.69:56490] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "afzuw1MagSGstWKyzzVdPwAAAA4"]
[Fri May 08 03:58:00.164780 2026] [:error] [pid 51113:tid 51118] [client 20.151.226.69:55070] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "afzuyEQfs7sWtqkpQIfYowAAAMM"]
[Fri May 08 03:58:02.462596 2026] [:error] [pid 51113:tid 51135] [client 20.151.226.69:55090] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "afzuykQfs7sWtqkpQIfYrQAAANQ"]
[Fri May 08 03:58:05.672869 2026] [:error] [pid 51008:tid 51072] [client 20.151.226.69:57317] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "afzuzXB58C2Y1tgLtuLpMAAAAFc"]
[Fri May 08 03:58:08.314254 2026] [:error] [pid 51009:tid 51095] [client 20.151.226.69:62036] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "afzu0OB0GbUWhxgzX9V5bAAAAJM"]
[Fri May 08 03:58:11.777381 2026] [:error] [pid 51009:tid 51085] [client 20.151.226.69:10142] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "afzu0-B0GbUWhxgzX9V5dgAAAIk"]
[Fri May 08 03:58:18.235178 2026] [:error] [pid 51113:tid 51115] [client 20.151.226.69:58058] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "afzu2kQfs7sWtqkpQIfYwwAAAMA"]
[Fri May 08 03:58:22.073696 2026] [:error] [pid 51113:tid 51130] [client 20.151.226.69:58050] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "afzu3kQfs7sWtqkpQIfY0gAAAM8"]
[Fri May 08 03:58:27.252198 2026] [:error] [pid 51113:tid 51122] [client 20.151.226.69:30991] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "afzu40Qfs7sWtqkpQIfY3gAAAMc"]
[Fri May 08 03:58:30.796192 2026] [:error] [pid 51009:tid 51085] [client 20.151.226.69:9437] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "afzu5uB0GbUWhxgzX9V5iwAAAIk"]
[Fri May 08 03:58:34.536272 2026] [:error] [pid 51113:tid 51124] [client 20.151.226.69:9438] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "afzu6kQfs7sWtqkpQIfY8QAAAMk"]
[Fri May 08 03:58:36.234492 2026] [:error] [pid 51113:tid 51133] [client 20.151.226.69:49321] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/maint.php"] [unique_id "afzu7EQfs7sWtqkpQIfY-wAAANI"]
[Fri May 08 03:58:45.580869 2026] [:error] [pid 51113:tid 51124] [client 20.151.226.69:31039] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Fri May 08 03:58:45.799705 2026] [:error] [pid 51113:tid 51116] [client 20.151.226.69:31039] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri May 08 03:58:46.023417 2026] [:error] [pid 51113:tid 51127] [client 20.151.226.69:31039] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Fri May 08 03:58:46.235150 2026] [:error] [pid 51113:tid 51136] [client 20.151.226.69:31039] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Fri May 08 03:58:46.654684 2026] [:error] [pid 51113:tid 51138] [client 20.151.226.69:31039] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri May 08 03:58:46.866072 2026] [:error] [pid 51113:tid 51118] [client 20.151.226.69:31039] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri May 08 03:58:47.976478 2026] [:error] [pid 51113:tid 51133] [client 20.151.226.69:31039] File does not exist: /usr/local/apache/htdocs/suspended-page/manager.php
[Fri May 08 03:58:48.183441 2026] [:error] [pid 51113:tid 51134] [client 20.151.226.69:31039] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "afzu-EQfs7sWtqkpQIfZKgAAANM"]
[Fri May 08 03:58:52.184766 2026] [:error] [pid 51008:tid 51066] [client 20.151.226.69:29817] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "afzu_HB58C2Y1tgLtuLp3wAAAFE"]
[Fri May 08 03:58:54.684738 2026] [:error] [pid 51007:tid 51029] [client 20.151.226.69:52033] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "afzu_lMagSGstWKyzzVdhgAAAAc"]
[Fri May 08 03:59:01.167111 2026] [:error] [pid 51009:tid 51083] [client 20.151.226.69:37541] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/item.php"] [unique_id "afzvBeB0GbUWhxgzX9V5vwAAAIc"]
[Fri May 08 03:59:05.383947 2026] [:error] [pid 51113:tid 51129] [client 20.151.226.69:53065] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "afzvCUQfs7sWtqkpQIfZaAAAAM4"]
[Fri May 08 03:59:08.375534 2026] [:error] [pid 51008:tid 51053] [client 20.151.226.69:56516] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "afzvDHB58C2Y1tgLtuLp-wAAAEQ"]
[Fri May 08 03:59:09.660915 2026] [:error] [pid 51008:tid 51055] [client 20.151.226.69:37547] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "afzvDXB58C2Y1tgLtuLp_QAAAEY"]
[Fri May 08 03:59:12.991745 2026] [:error] [pid 51008:tid 51068] [client 20.151.226.69:53001] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/Cache/footer.php"] [unique_id "afzvEHB58C2Y1tgLtuLqAwAAAFM"]
[Fri May 08 03:59:15.329102 2026] [:error] [pid 51008:tid 51053] [client 20.151.226.69:37530] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "afzvE3B58C2Y1tgLtuLqBgAAAEQ"]
[Fri May 08 03:59:23.290580 2026] [:error] [pid 51113:tid 51120] [client 20.151.226.69:31031] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "afzvG0Qfs7sWtqkpQIfZswAAAMU"]
[Fri May 08 03:59:27.318459 2026] [:error] [pid 51007:tid 51041] [client 20.151.226.69:27971] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "afzvH1MagSGstWKyzzVdqwAAABM"]
[Fri May 08 03:59:31.556197 2026] [:error] [pid 51113:tid 51138] [client 20.151.226.69:9439] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "afzvI0Qfs7sWtqkpQIfZ3QAAANc"]
[Fri May 08 03:59:35.727106 2026] [:error] [pid 51007:tid 51045] [client 20.151.226.69:29248] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "afzvJ1MagSGstWKyzzVdugAAABc"]
[Fri May 08 03:59:40.120216 2026] [:error] [pid 51008:tid 51067] [client 20.151.226.69:9860] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "afzvLHB58C2Y1tgLtuLqKwAAAFI"]
[Fri May 08 03:59:42.885249 2026] [:error] [pid 51009:tid 51097] [client 20.151.226.69:9626] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail.php"] [unique_id "afzvLuB0GbUWhxgzX9V6IwAAAJU"]
[Fri May 08 03:59:44.553762 2026] [:error] [pid 51113:tid 51128] [client 20.151.226.69:58029] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "afzvMEQfs7sWtqkpQIfaBgAAAM0"]
[Fri May 08 03:59:47.556310 2026] [:error] [pid 51113:tid 51138] [client 20.151.226.69:9454] File does not exist: /usr/local/apache/htdocs/suspended-page/sx.php
[Fri May 08 03:59:47.992789 2026] [:error] [pid 51113:tid 51130] [client 20.151.226.69:9454] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Fri May 08 03:59:48.205191 2026] [:error] [pid 51113:tid 51128] [client 20.151.226.69:9454] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri May 08 03:59:48.414658 2026] [:error] [pid 51113:tid 51119] [client 20.151.226.69:9454] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Fri May 08 03:59:48.623138 2026] [:error] [pid 51113:tid 51116] [client 20.151.226.69:9454] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Fri May 08 03:59:49.487168 2026] [:error] [pid 51113:tid 51138] [client 20.151.226.69:9454] File does not exist: /usr/local/apache/htdocs/suspended-page/gmo.php
[Fri May 08 03:59:50.839396 2026] [:error] [pid 51113:tid 51123] [client 20.151.226.69:9454] [client 20.151.226.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afzvNkQfs7sWtqkpQIfaJAAAAMg"]
[Fri May 08 03:59:54.324995 2026] [:error] [pid 51009:tid 51081] [client 20.151.226.69:9629] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "afzvOuB0GbUWhxgzX9V6MwAAAIU"]
[Fri May 08 04:00:01.633177 2026] [:error] [pid 51007:tid 51042] [client 20.151.226.69:48814] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "afzvQVMagSGstWKyzzVeAQAAABQ"]
[Fri May 08 04:00:05.159903 2026] [:error] [pid 51008:tid 51054] [client 20.151.226.69:39424] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/index.php"] [unique_id "afzvRXB58C2Y1tgLtuLqRwAAAEU"]
[Fri May 08 04:00:05.801943 2026] [:error] [pid 51113:tid 51118] [client 20.151.226.69:58556] [client 20.151.226.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "afzvRUQfs7sWtqkpQIfaPgAAAMM"]
[Fri May 08 04:00:06.681831 2026] [:error] [pid 51009:tid 51083] [client 20.151.226.69:53757] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "afzvRuB0GbUWhxgzX9V6TgAAAIc"]
[Fri May 08 04:00:14.583781 2026] [:error] [pid 51008:tid 51060] [client 20.151.226.69:39479] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "afzvTnB58C2Y1tgLtuLqUQAAAEs"]
[Fri May 08 04:00:20.313049 2026] [:error] [pid 51113:tid 51126] [client 20.151.226.69:29715] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "afzvVEQfs7sWtqkpQIfacAAAAMs"]
[Fri May 08 04:00:26.282439 2026] [:error] [pid 51009:tid 51099] [client 20.151.226.69:9512] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "afzvWuB0GbUWhxgzX9V6WAAAAJc"]
[Fri May 08 04:00:29.748514 2026] [:error] [pid 51009:tid 51085] [client 20.151.226.69:34819] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "afzvXeB0GbUWhxgzX9V6YgAAAIk"]
[Fri May 08 04:00:32.737384 2026] [:error] [pid 51009:tid 51088] [client 20.151.226.69:29722] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "afzvYOB0GbUWhxgzX9V6bQAAAIw"]
[Fri May 08 04:00:35.464112 2026] [:error] [pid 51009:tid 51083] [client 20.151.226.69:34843] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "afzvY-B0GbUWhxgzX9V6eQAAAIc"]
[Fri May 08 04:00:36.941803 2026] [:error] [pid 51007:tid 51023] [client 20.151.226.69:47654] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "afzvZFMagSGstWKyzzVeGQAAAAE"]
[Fri May 08 04:00:38.510618 2026] [:error] [pid 51009:tid 51088] [client 20.151.226.69:9559] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "afzvZuB0GbUWhxgzX9V6hAAAAIw"]
[Fri May 08 04:00:44.080533 2026] [:error] [pid 51008:tid 51063] [client 20.151.226.69:9555] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "afzvbHB58C2Y1tgLtuLqdAAAAE4"]
[Fri May 08 04:00:47.637497 2026] [:error] [pid 51008:tid 51073] [client 20.151.226.69:57231] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "afzvb3B58C2Y1tgLtuLqgQAAAFg"]
[Fri May 08 04:00:49.808185 2026] [:error] [pid 51008:tid 51054] [client 20.151.226.69:57246] [client 20.151.226.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "afzvcXB58C2Y1tgLtuLqhwAAAEU"]
[Fri May 08 04:00:55.740052 2026] [:error] [pid 51008:tid 51052] [client 20.151.226.69:57265] [client 20.151.226.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/style-engine/about.php"] [unique_id "afzvd3B58C2Y1tgLtuLqlQAAAEM"]
[Fri May 08 04:01:01.285858 2026] [:error] [pid 51113:tid 51125] [client 20.151.226.69:34848] File does not exist: /usr/local/apache/htdocs/suspended-page/ww1.php
[Fri May 08 04:01:02.382581 2026] [:error] [pid 51113:tid 51130] [client 20.151.226.69:34848] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Fri May 08 04:01:02.811220 2026] [:error] [pid 51113:tid 51139] [client 20.151.226.69:34848] File does not exist: /usr/local/apache/htdocs/suspended-page/security.php
[Fri May 08 04:01:04.498345 2026] [:error] [pid 51113:tid 51126] [client 20.151.226.69:34848] [client 20.151.226.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "afzvgEQfs7sWtqkpQIfaqgAAAMs"]
[Fri May 08 04:01:11.595371 2026] [:error] [pid 51008:tid 51061] [client 20.151.226.69:29733] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "afzvh3B58C2Y1tgLtuLqqQAAAEw"]
[Fri May 08 04:01:15.592029 2026] [:error] [pid 51007:tid 51029] [client 20.151.226.69:50600] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "afzvi1MagSGstWKyzzVeUwAAAAc"]
[Fri May 08 04:01:19.718170 2026] [:error] [pid 51007:tid 51026] [client 20.151.226.69:48269] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "afzvj1MagSGstWKyzzVeWgAAAAQ"]
[Fri May 08 04:01:22.624491 2026] [:error] [pid 51113:tid 51129] [client 20.151.226.69:62014] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afzvkkQfs7sWtqkpQIfaywAAAM4"]
[Fri May 08 04:01:24.812316 2026] [:error] [pid 51008:tid 51058] [client 20.151.226.69:33772] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afzvlHB58C2Y1tgLtuLquwAAAEk"]
[Fri May 08 04:01:30.305300 2026] [:error] [pid 51113:tid 51129] [client 20.151.226.69:61021] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afzvmkQfs7sWtqkpQIfa1QAAAM4"]
[Fri May 08 04:01:34.033808 2026] [:error] [pid 51008:tid 51071] [client 20.151.226.69:51984] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afzvnnB58C2Y1tgLtuLqzAAAAFY"]
[Fri May 08 04:01:43.728034 2026] [:error] [pid 51113:tid 51129] [client 20.151.226.69:48370] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/admin.php"] [unique_id "afzvp0Qfs7sWtqkpQIfa7wAAAM4"]
[Fri May 08 04:01:48.975508 2026] [:error] [pid 51007:tid 51046] [client 20.151.226.69:10072] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/admin.php"] [unique_id "afzvrFMagSGstWKyzzVeZwAAABg"]
[Fri May 08 04:01:52.445037 2026] [:error] [pid 51007:tid 51045] [client 20.151.226.69:36411] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "afzvsFMagSGstWKyzzVebAAAABc"]
[Fri May 08 04:02:02.763495 2026] [:error] [pid 51007:tid 51036] [client 20.151.226.69:55608] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "afzvulMagSGstWKyzzVedwAAAA4"]
[Fri May 08 04:02:12.359789 2026] [:error] [pid 51113:tid 51137] [client 20.151.226.69:48864] File does not exist: /usr/local/apache/htdocs/suspended-page/class.php
[Fri May 08 04:02:12.570065 2026] [:error] [pid 51113:tid 51122] [client 20.151.226.69:48864] File does not exist: /usr/local/apache/htdocs/suspended-page/bless5.php
[Fri May 08 04:02:12.780176 2026] [:error] [pid 51113:tid 51117] [client 20.151.226.69:48864] [client 20.151.226.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "afzvxEQfs7sWtqkpQIfbJwAAAMI"]
[Fri May 08 04:02:18.537898 2026] [:error] [pid 51113:tid 51125] [client 20.151.226.69:46535] [client 20.151.226.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-patterns/index.php"] [unique_id "afzvykQfs7sWtqkpQIfbNgAAAMo"]
[Fri May 08 04:02:27.711355 2026] [:error] [pid 51113:tid 51127] [client 20.151.226.69:61001] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Fri May 08 04:02:27.928153 2026] [:error] [pid 51113:tid 51129] [client 20.151.226.69:61001] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Fri May 08 04:02:28.168964 2026] [:error] [pid 51113:tid 51121] [client 20.151.226.69:61001] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o1.php
[Fri May 08 04:02:28.390066 2026] [:error] [pid 51113:tid 51125] [client 20.151.226.69:61001] File does not exist: /usr/local/apache/htdocs/suspended-page/juuuu.php
[Fri May 08 04:02:28.599115 2026] [:error] [pid 51113:tid 51119] [client 20.151.226.69:61001] File does not exist: /usr/local/apache/htdocs/suspended-page/ha.php
[Fri May 08 04:02:28.807053 2026] [:error] [pid 51113:tid 51139] [client 20.151.226.69:61001] File does not exist: /usr/local/apache/htdocs/suspended-page/gg.php
[Fri May 08 04:02:29.011303 2026] [:error] [pid 51113:tid 51128] [client 20.151.226.69:61001] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "afzv1UQfs7sWtqkpQIfbZAAAAM0"]
[Fri May 08 04:02:33.863670 2026] [:error] [pid 51113:tid 51128] [client 20.151.226.69:9585] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "afzv2UQfs7sWtqkpQIfbfgAAAM0"]
[Fri May 08 04:02:34.548061 2026] [:error] [pid 51009:tid 51079] [client 20.151.226.69:53736] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "afzv2uB0GbUWhxgzX9V7HAAAAIM"]
[Fri May 08 04:02:38.497566 2026] [:error] [pid 51009:tid 51090] [client 20.151.226.69:61414] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/we2.php"] [unique_id "afzv3uB0GbUWhxgzX9V7KAAAAI4"]
[Fri May 08 04:02:50.171279 2026] [:error] [pid 51113:tid 51130] [client 20.151.226.69:61380] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/04.php"] [unique_id "afzv6kQfs7sWtqkpQIfbmwAAAM8"]
[Fri May 08 04:03:10.049336 2026] [:error] [pid 51113:tid 51128] [client 20.151.226.69:9924] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "afzv_kQfs7sWtqkpQIfbtgAAAM0"]
[Fri May 08 04:03:13.100544 2026] [:error] [pid 51113:tid 51117] [client 20.151.226.69:61413] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/520.php"] [unique_id "afzwAUQfs7sWtqkpQIfbxAAAAMI"]
[Fri May 08 04:03:17.170184 2026] [:error] [pid 51007:tid 51028] [client 20.151.226.69:61412] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/520.php"] [unique_id "afzwBVMagSGstWKyzzVerwAAAAY"]
[Fri May 08 04:03:21.619580 2026] [:error] [pid 51007:tid 51039] [client 20.151.226.69:9980] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/520.php"] [unique_id "afzwCVMagSGstWKyzzVetAAAABE"]
[Fri May 08 04:03:26.046893 2026] [:error] [pid 51113:tid 51117] [client 20.151.226.69:58579] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/520.php"] [unique_id "afzwDkQfs7sWtqkpQIfb2wAAAMI"]
[Fri May 08 04:03:30.237359 2026] [:error] [pid 51008:tid 51072] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/ar.php
[Fri May 08 04:03:30.447026 2026] [:error] [pid 51008:tid 51051] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Fri May 08 04:03:30.657889 2026] [:error] [pid 51008:tid 51049] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Fri May 08 04:03:30.867163 2026] [:error] [pid 51008:tid 51056] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass4.php
[Fri May 08 04:03:31.136016 2026] [:error] [pid 51008:tid 51052] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/2clas.php
[Fri May 08 04:03:31.355428 2026] [:error] [pid 51008:tid 51065] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/ave.php
[Fri May 08 04:03:31.564422 2026] [:error] [pid 51008:tid 51061] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/wrt.php
[Fri May 08 04:03:31.787892 2026] [:error] [pid 51008:tid 51073] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/bibil.php
[Fri May 08 04:03:31.997384 2026] [:error] [pid 51008:tid 51071] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/radio.php
[Fri May 08 04:03:32.206305 2026] [:error] [pid 51008:tid 51064] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/files.php
[Fri May 08 04:03:32.427725 2026] [:error] [pid 51008:tid 51054] [client 20.151.226.69:27965] File does not exist: /usr/local/apache/htdocs/suspended-page/file7.php
[Fri May 08 04:03:32.633195 2026] [:error] [pid 51008:tid 51063] [client 20.151.226.69:27965] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "afzwFHB58C2Y1tgLtuLrXAAAAE4"]
[Fri May 08 04:03:34.464614 2026] [:error] [pid 51009:tid 51078] [client 20.151.226.69:9933] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "afzwFuB0GbUWhxgzX9V7gQAAAII"]
[Fri May 08 04:03:36.742448 2026] [:error] [pid 51009:tid 51096] [client 20.151.226.69:10031] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "afzwGOB0GbUWhxgzX9V7hAAAAJQ"]
[Fri May 08 04:03:39.733859 2026] [:error] [pid 51009:tid 51091] [client 20.151.226.69:27966] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "afzwG-B0GbUWhxgzX9V7jgAAAI8"]
[Fri May 08 04:03:40.807479 2026] [:error] [pid 51008:tid 51061] [client 20.151.226.69:61398] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "afzwHHB58C2Y1tgLtuLrYgAAAEw"]
[Fri May 08 04:03:50.968565 2026] [:error] [pid 51113:tid 51138] [client 20.151.226.69:27961] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/midnight/about.php"] [unique_id "afzwJkQfs7sWtqkpQIfb_wAAANc"]
[Fri May 08 04:03:57.040314 2026] [:error] [pid 51113:tid 51137] [client 20.151.226.69:38237] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "afzwLUQfs7sWtqkpQIfcAgAAANY"]
[Fri May 08 04:04:01.247352 2026] [:error] [pid 51008:tid 51065] [client 20.151.226.69:10006] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "afzwMXB58C2Y1tgLtuLregAAAFA"]
[Fri May 08 04:04:05.896152 2026] [:error] [pid 51113:tid 51129] [client 20.151.226.69:30998] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/nox.php"] [unique_id "afzwNUQfs7sWtqkpQIfcFwAAAM4"]
[Fri May 08 04:04:16.347202 2026] [:error] [pid 51009:tid 51093] [client 20.151.226.69:53007] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "afzwQOB0GbUWhxgzX9V7pQAAAJE"]
[Fri May 08 04:04:21.440834 2026] [:error] [pid 51008:tid 51050] [client 20.151.226.69:29807] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "afzwRXB58C2Y1tgLtuLrjwAAAEE"]
[Fri May 08 04:04:25.546132 2026] [:error] [pid 51007:tid 51041] [client 20.151.226.69:29816] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file48.php"] [unique_id "afzwSVMagSGstWKyzzVe7QAAABM"]
[Fri May 08 04:04:33.144222 2026] [:error] [pid 51113:tid 51139] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Fri May 08 04:04:33.354136 2026] [:error] [pid 51113:tid 51130] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/class9.php
[Fri May 08 04:04:33.567739 2026] [:error] [pid 51113:tid 51123] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Fri May 08 04:04:33.778392 2026] [:error] [pid 51113:tid 51127] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/bless11.php
[Fri May 08 04:04:33.988939 2026] [:error] [pid 51113:tid 51119] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Fri May 08 04:04:34.200107 2026] [:error] [pid 51113:tid 51120] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/ton.php
[Fri May 08 04:04:34.452698 2026] [:error] [pid 51113:tid 51131] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/403.php
[Fri May 08 04:04:34.692517 2026] [:error] [pid 51113:tid 51134] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/file9.php
[Fri May 08 04:04:34.902180 2026] [:error] [pid 51113:tid 51116] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Fri May 08 04:04:35.115695 2026] [:error] [pid 51113:tid 51135] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Fri May 08 04:04:35.339986 2026] [:error] [pid 51113:tid 51133] [client 20.151.226.69:37555] File does not exist: /usr/local/apache/htdocs/suspended-page/pop.php
[Fri May 08 04:04:35.564590 2026] [:error] [pid 51113:tid 51137] [client 20.151.226.69:37555] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "afzwU0Qfs7sWtqkpQIfcOQAAANY"]
[Fri May 08 04:04:41.933400 2026] [:error] [pid 51008:tid 51051] [client 20.151.226.69:53049] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "afzwWXB58C2Y1tgLtuLrqgAAAEI"]
[Fri May 08 04:04:48.487817 2026] [:error] [pid 51009:tid 51082] [client 20.151.226.69:31072] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/az.php"] [unique_id "afzwYOB0GbUWhxgzX9V7vAAAAIY"]
[Fri May 08 04:04:57.944543 2026] [:error] [pid 51008:tid 51059] [client 20.151.226.69:54384] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xaz.php"] [unique_id "afzwaXB58C2Y1tgLtuLruQAAAEo"]
[Fri May 08 04:05:00.829549 2026] [:error] [pid 51113:tid 51131] [client 20.151.226.69:55662] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xaz.php"] [unique_id "afzwbEQfs7sWtqkpQIfcTAAAANA"]
[Fri May 08 04:05:03.126358 2026] [:error] [pid 51113:tid 51137] [client 20.151.226.69:55678] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xaz.php"] [unique_id "afzwb0Qfs7sWtqkpQIfcUgAAANY"]
[Fri May 08 04:05:05.531781 2026] [:error] [pid 51009:tid 51089] [client 20.151.226.69:47696] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xaz.php"] [unique_id "afzwceB0GbUWhxgzX9V73QAAAI0"]
[Fri May 08 04:05:09.082593 2026] [:error] [pid 51008:tid 51064] [client 20.151.226.69:60487] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/up4.php"] [unique_id "afzwdXB58C2Y1tgLtuLrxAAAAE8"]
[Fri May 08 04:05:14.851767 2026] [:error] [pid 51008:tid 51056] [client 20.151.226.69:55679] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/up4.php"] [unique_id "afzwenB58C2Y1tgLtuLr0QAAAEc"]
[Fri May 08 04:05:17.220921 2026] [:error] [pid 51008:tid 51058] [client 20.151.226.69:40017] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/up4.php"] [unique_id "afzwfXB58C2Y1tgLtuLr1wAAAEk"]
[Fri May 08 04:05:24.207367 2026] [:error] [pid 51113:tid 51131] [client 20.151.226.69:9527] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1aa.php"] [unique_id "afzwhEQfs7sWtqkpQIfcZQAAANA"]
[Fri May 08 04:05:29.693711 2026] [:error] [pid 51008:tid 51053] [client 20.151.226.69:48783] [client 20.151.226.69] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1aa.php"] [unique_id "afzwiXB58C2Y1tgLtuLr6AAAAEQ"]
[Fri May 08 04:05:38.646629 2026] [:error] [pid 51007:tid 51023] [client 20.151.226.69:32503] File does not exist: /usr/local/apache/htdocs/suspended-page/1aa.php
[Fri May 08 04:05:40.464551 2026] [:error] [pid 51009:tid 51091] [client 20.151.226.69:61338] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Fri May 08 04:05:40.675548 2026] [:error] [pid 51009:tid 51081] [client 20.151.226.69:61338] File does not exist: /usr/local/apache/htdocs/suspended-page/wtz.php
[Fri May 08 04:05:40.888049 2026] [:error] [pid 51009:tid 51093] [client 20.151.226.69:61338] File does not exist: /usr/local/apache/htdocs/suspended-page/galex.php
[Fri May 08 04:05:41.104960 2026] [:error] [pid 51009:tid 51085] [client 20.151.226.69:61338] File does not exist: /usr/local/apache/htdocs/suspended-page/xb.php
[Fri May 08 04:05:41.349708 2026] [:error] [pid 51009:tid 51084] [client 20.151.226.69:61338] File does not exist: /usr/local/apache/htdocs/suspended-page/ova.php
[Fri May 08 04:05:41.561101 2026] [:error] [pid 51009:tid 51094] [client 20.151.226.69:61338] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Fri May 08 04:05:41.772142 2026] [:error] [pid 51009:tid 51079] [client 20.151.226.69:61338] File does not exist: /usr/local/apache/htdocs/suspended-page/rh.php
[Fri May 08 04:05:41.984131 2026] [:error] [pid 51009:tid 51083] [client 20.151.226.69:61338] File does not exist: /usr/local/apache/htdocs/suspended-page/webindex.php
[Fri May 08 06:08:17.733065 2026] [:error] [pid 34318:tid 34332] [client 18.191.202.63:64654] [client 18.191.202.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 18.191.202.63, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "af0NUcr3guirgJiKhzBviAAAAQw"]
[Fri May 08 06:08:17.738728 2026] [:error] [pid 34318:tid 34332] [client 18.191.202.63:64654] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri May 08 07:20:26.656071 2026] [:error] [pid 61355:tid 61373] [client 34.18.150.186:43172] [client 34.18.150.186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "af0eOvkhJTi30CBXmMnNewAAAYw"]
[Fri May 08 10:21:32.466940 2026] [:error] [pid 51009:tid 51077] [client 4.193.137.131:12431] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Fri May 08 10:21:32.562040 2026] [:error] [pid 51009:tid 51081] [client 4.193.137.131:12431] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Fri May 08 10:21:32.653593 2026] [:error] [pid 51009:tid 51084] [client 4.193.137.131:12431] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Fri May 08 10:21:32.745616 2026] [:error] [pid 51009:tid 51100] [client 4.193.137.131:12431] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Fri May 08 10:21:32.838684 2026] [:error] [pid 51009:tid 51099] [client 4.193.137.131:12431] File does not exist: /usr/local/apache/htdocs/suspended-page/a.php
[Fri May 08 10:21:32.930765 2026] [:error] [pid 51009:tid 51083] [client 4.193.137.131:12431] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Fri May 08 10:21:33.021866 2026] [:error] [pid 51009:tid 51080] [client 4.193.137.131:12431] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Fri May 08 10:21:33.117946 2026] [:error] [pid 51009:tid 51096] [client 4.193.137.131:12431] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Fri May 08 10:21:33.209604 2026] [:error] [pid 51009:tid 51097] [client 4.193.137.131:12431] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Fri May 08 10:21:33.396910 2026] [:error] [pid 51009:tid 51085] [client 4.193.137.131:12431] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Fri May 08 10:21:33.485480 2026] [:error] [pid 51009:tid 51092] [client 4.193.137.131:12431] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "af1IreB0GbUWhxgzX9XFvAAAAJA"]
[Fri May 08 10:21:33.846100 2026] [:error] [pid 61317:tid 61326] [client 4.193.137.131:22613] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "af1Irc-fFk_CedOCOYtiwwAAAUY"]
[Fri May 08 10:21:34.224815 2026] [:error] [pid 51008:tid 51067] [client 4.193.137.131:13186] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "af1IrnB58C2Y1tgLtuJM6QAAAFI"]
[Fri May 08 10:21:34.585916 2026] [:error] [pid 51008:tid 51049] [client 4.193.137.131:22606] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "af1IrnB58C2Y1tgLtuJM7gAAAEA"]
[Fri May 08 13:38:35.945314 2026] [:error] [pid 51009:tid 51100] [client 34.84.121.90:55810] [client 34.84.121.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "af122-B0GbUWhxgzX9XgfAAAAJg"]
[Fri May 08 14:10:25.816013 2026] [:error] [pid 61356:tid 61405] [client 34.127.75.19:55527] [client 34.127.75.19] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.127.75.19, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "af1-UYx3vpB8oWhUq2MX0wAAAdE"]
[Fri May 08 14:10:25.819494 2026] [:error] [pid 61356:tid 61405] [client 34.127.75.19:55527] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 08 14:10:28.103498 2026] [:error] [pid 61356:tid 61401] [client 34.127.75.19:55527] [client 34.127.75.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "af1-VIx3vpB8oWhUq2MX3gAAAc0"]
[Fri May 08 14:10:28.540734 2026] [:error] [pid 61317:tid 61325] [client 34.127.75.19:58795] [client 34.127.75.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "af1-VM-fFk_CedOCOYuGZAAAAUU"]
[Fri May 08 14:10:28.934429 2026] [:error] [pid 34318:tid 34341] [client 34.127.75.19:49815] [client 34.127.75.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "af1-VMr3guirgJiKhzC1IAAAARU"]
[Fri May 08 14:10:29.367453 2026] [:error] [pid 51009:tid 51079] [client 34.127.75.19:50252] [client 34.127.75.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "af1-VeB0GbUWhxgzX9XmcwAAAIM"]
[Fri May 08 14:10:29.840069 2026] [:error] [pid 51008:tid 51066] [client 34.127.75.19:57366] [client 34.127.75.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "af1-VXB58C2Y1tgLtuJoIQAAAFE"]
[Fri May 08 14:10:30.228868 2026] [:error] [pid 51008:tid 51049] [client 34.127.75.19:60200] [client 34.127.75.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "af1-VnB58C2Y1tgLtuJoIgAAAEA"]
[Fri May 08 14:10:30.655756 2026] [:error] [pid 51009:tid 51077] [client 34.127.75.19:59808] [client 34.127.75.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "af1-VuB0GbUWhxgzX9XmdQAAAIE"]
[Fri May 08 15:28:56.765172 2026] [:error] [pid 61356:tid 61394] [client 34.122.144.100:61695] [client 34.122.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "af2QuIx3vpB8oWhUq2M0-QAAAcY"]
[Fri May 08 18:13:27.621845 2026] [:error] [pid 51008:tid 51054] [client 114.10.39.66:38460] [client 114.10.39.66] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 114.10.39.66, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "af23R3B58C2Y1tgLtuKIowAAAEU"]
[Fri May 08 18:13:27.628141 2026] [:error] [pid 51008:tid 51054] [client 114.10.39.66:38460] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 08 23:28:55.253736 2026] [:error] [pid 61356:tid 61401] [client 103.87.192.34:45540] [client 103.87.192.34] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.87.192.34, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "af4BN4x3vpB8oWhUq2P3iwAAAc0"]
[Fri May 08 23:28:55.258669 2026] [:error] [pid 61356:tid 61401] [client 103.87.192.34:45540] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 09 01:31:34.510497 2026] [:error] [pid 61355:tid 61368] [client 18.169.171.229:49218] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "af4d9vkhJTi30CBXmMku6AAAAYc"]
[Sat May 09 01:31:35.794279 2026] [:error] [pid 51009:tid 51076] [client 18.169.171.229:49220] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4d9-B0GbUWhxgzX9WRNQAAAIA"]
[Sat May 09 01:31:36.814580 2026] [:error] [pid 61356:tid 61405] [client 18.169.171.229:49226] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat May 09 01:31:37.071482 2026] [:error] [pid 61356:tid 61392] [client 18.169.171.229:49226] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat May 09 01:31:37.334523 2026] [:error] [pid 61356:tid 61399] [client 18.169.171.229:49226] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat May 09 01:31:37.590992 2026] [:error] [pid 61356:tid 61388] [client 18.169.171.229:49226] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sat May 09 01:31:37.846556 2026] [:error] [pid 61356:tid 61390] [client 18.169.171.229:49226] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sat May 09 01:31:38.093283 2026] [:error] [pid 61356:tid 61408] [client 18.169.171.229:49226] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sat May 09 01:31:38.358117 2026] [:error] [pid 61356:tid 61394] [client 18.169.171.229:49226] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat May 09 01:31:38.881014 2026] [:error] [pid 61356:tid 61407] [client 18.169.171.229:49226] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat May 09 01:31:39.136942 2026] [:error] [pid 61356:tid 61392] [client 18.169.171.229:49226] File does not exist: /usr/local/apache/htdocs/suspended-page/debug.php
[Sat May 09 01:31:39.642614 2026] [:error] [pid 61356:tid 61390] [client 18.169.171.229:49226] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4d-4x3vpB8oWhUq2MnqAAAAcI"]
[Sat May 09 01:31:40.660092 2026] [:error] [pid 51009:tid 51078] [client 18.169.171.229:41200] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4d_OB0GbUWhxgzX9WRRwAAAII"]
[Sat May 09 01:31:41.679465 2026] [:error] [pid 61356:tid 61405] [client 18.169.171.229:41212] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4d_Yx3vpB8oWhUq2MntAAAAdE"]
[Sat May 09 01:31:42.654358 2026] [:error] [pid 51009:tid 51077] [client 18.169.171.229:41220] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4d_uB0GbUWhxgzX9WRSQAAAIE"]
[Sat May 09 01:31:43.632998 2026] [:error] [pid 51009:tid 51086] [client 18.169.171.229:41232] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4d_-B0GbUWhxgzX9WRTwAAAIo"]
[Sat May 09 01:31:44.612775 2026] [:error] [pid 51009:tid 51092] [client 18.169.171.229:41236] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info"] [unique_id "af4eAOB0GbUWhxgzX9WRWQAAAJA"]
[Sat May 09 01:31:45.596011 2026] [:error] [pid 34318:tid 34326] [client 18.169.171.229:41246] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/php-info.php"] [unique_id "af4eAcr3guirgJiKhzADeQAAAQY"]
[Sat May 09 01:31:46.576757 2026] [:error] [pid 51008:tid 51050] [client 18.169.171.229:41260] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpversion.php"] [unique_id "af4eAnB58C2Y1tgLtuLapwAAAEE"]
[Sat May 09 01:31:47.555908 2026] [:error] [pid 51008:tid 51056] [client 18.169.171.229:41268] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/_phpinfo.php"] [unique_id "af4eA3B58C2Y1tgLtuLaqwAAAEc"]
[Sat May 09 01:31:48.541660 2026] [:error] [pid 51008:tid 51065] [client 18.169.171.229:53564] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4eBHB58C2Y1tgLtuLasQAAAFA"]
[Sat May 09 01:31:49.518026 2026] [:error] [pid 51008:tid 51068] [client 18.169.171.229:53578] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/server-info.php"] [unique_id "af4eBXB58C2Y1tgLtuLatwAAAFM"]
[Sat May 09 01:31:50.492389 2026] [:error] [pid 51009:tid 51085] [client 18.169.171.229:53580] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/server-status.php"] [unique_id "af4eBuB0GbUWhxgzX9WRZwAAAIk"]
[Sat May 09 01:31:51.477863 2026] [:error] [pid 51008:tid 51060] [client 18.169.171.229:53584] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4eB3B58C2Y1tgLtuLawgAAAEs"]
[Sat May 09 01:31:52.464440 2026] [:error] [pid 51008:tid 51064] [client 18.169.171.229:53586] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/_environment"] [unique_id "af4eCHB58C2Y1tgLtuLaxQAAAE8"]
[Sat May 09 01:31:53.449962 2026] [:error] [pid 51007:tid 51044] [client 18.169.171.229:53596] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4eCVMagSGstWKyzzUaXAAAABY"]
[Sat May 09 01:31:54.427247 2026] [:error] [pid 51008:tid 51052] [client 18.169.171.229:53602] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4eCnB58C2Y1tgLtuLazgAAAEM"]
[Sat May 09 01:31:55.401509 2026] [:error] [pid 51007:tid 51031] [client 18.169.171.229:53614] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4eC1MagSGstWKyzzUaYgAAAAk"]
[Sat May 09 01:31:56.383120 2026] [:error] [pid 61356:tid 61394] [client 18.169.171.229:53618] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4eDIx3vpB8oWhUq2MnwwAAAcY"]
[Sat May 09 01:31:57.374362 2026] [:error] [pid 61317:tid 61320] [client 18.169.171.229:53632] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4eDc-fFk_CedOCOYsLyQAAAUA"]
[Sat May 09 01:31:58.348833 2026] [:error] [pid 51009:tid 51089] [client 18.169.171.229:38394] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4eDuB0GbUWhxgzX9WRdwAAAI0"]
[Sat May 09 01:31:59.324363 2026] [:error] [pid 51009:tid 51100] [client 18.169.171.229:38400] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4eD-B0GbUWhxgzX9WRewAAAJg"]
[Sat May 09 01:32:00.298908 2026] [:error] [pid 51009:tid 51093] [client 18.169.171.229:38406] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4eEOB0GbUWhxgzX9WRfAAAAJE"]
[Sat May 09 01:32:01.274985 2026] [:error] [pid 51009:tid 51096] [client 18.169.171.229:38412] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpinfo.php~"] [unique_id "af4eEeB0GbUWhxgzX9WRgAAAAJQ"]
[Sat May 09 01:32:02.252957 2026] [:error] [pid 61356:tid 61404] [client 18.169.171.229:38420] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php.bak"] [unique_id "af4eEox3vpB8oWhUq2Mn0gAAAdA"]
[Sat May 09 01:32:03.231697 2026] [:error] [pid 61317:tid 61328] [client 18.169.171.229:38426] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4eE8-fFk_CedOCOYsLzwAAAUg"]
[Sat May 09 01:32:04.213544 2026] [:error] [pid 51113:tid 51130] [client 18.169.171.229:38438] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4eFEQfs7sWtqkpQIebHAAAAM8"]
[Sat May 09 01:32:05.196300 2026] [:error] [pid 51009:tid 51088] [client 18.169.171.229:38440] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4eFeB0GbUWhxgzX9WRoAAAAIw"]
[Sat May 09 01:32:06.185517 2026] [:error] [pid 61356:tid 61403] [client 18.169.171.229:38454] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4eFox3vpB8oWhUq2Mn1AAAAc8"]
[Sat May 09 01:32:07.173264 2026] [:error] [pid 51009:tid 51092] [client 18.169.171.229:38456] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4eF-B0GbUWhxgzX9WRqAAAAJA"]
[Sat May 09 01:32:08.170517 2026] [:error] [pid 34318:tid 34325] [client 18.169.171.229:35762] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4eGMr3guirgJiKhzADgQAAAQU"]
[Sat May 09 01:32:09.159532 2026] [:error] [pid 51009:tid 51081] [client 18.169.171.229:35770] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4eGeB0GbUWhxgzX9WRrQAAAIU"]
[Sat May 09 01:32:10.150090 2026] [:error] [pid 61356:tid 61406] [client 18.169.171.229:35774] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4eGox3vpB8oWhUq2Mn5AAAAdI"]
[Sat May 09 01:32:11.133935 2026] [:error] [pid 61355:tid 61366] [client 18.169.171.229:35784] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4eG_khJTi30CBXmMkvKgAAAYU"]
[Sat May 09 01:32:12.113962 2026] [:error] [pid 61355:tid 61373] [client 18.169.171.229:35790] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4eHPkhJTi30CBXmMkvMwAAAYw"]
[Sat May 09 01:32:13.090289 2026] [:error] [pid 51008:tid 51062] [client 18.169.171.229:35798] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4eHXB58C2Y1tgLtuLa9QAAAE0"]
[Sat May 09 01:32:14.078617 2026] [:error] [pid 61355:tid 61385] [client 18.169.171.229:35812] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4eHvkhJTi30CBXmMkvQQAAAZg"]
[Sat May 09 01:32:15.065274 2026] [:error] [pid 61317:tid 61339] [client 18.169.171.229:35822] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4eH8-fFk_CedOCOYsL1wAAAVM"]
[Sat May 09 01:32:16.039348 2026] [:error] [pid 61355:tid 61382] [client 18.169.171.229:35836] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4eIPkhJTi30CBXmMkvSgAAAZU"]
[Sat May 09 01:32:17.033478 2026] [:error] [pid 61355:tid 61376] [client 18.169.171.229:35852] [client 18.169.171.229] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4eIfkhJTi30CBXmMkvVAAAAY8"]
[Sat May 09 02:02:48.406946 2026] [:error] [pid 61317:tid 61340] [client 47.129.87.50:53114] [client 47.129.87.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "af4lSM-fFk_CedOCOYsWOQAAAVQ"]
[Sat May 09 02:02:49.164711 2026] [:error] [pid 61355:tid 61361] [client 47.129.87.50:53128] [client 47.129.87.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4lSfkhJTi30CBXmMlLcwAAAYA"]
[Sat May 09 02:02:49.762861 2026] [:error] [pid 61356:tid 61410] [client 47.129.87.50:53130] File does not exist: /usr/local/apache/htdocs/suspended-page/phpinfo.php
[Sat May 09 02:02:49.883902 2026] [:error] [pid 61356:tid 61389] [client 47.129.87.50:53130] File does not exist: /usr/local/apache/htdocs/suspended-page/info.php
[Sat May 09 02:02:50.056155 2026] [:error] [pid 61356:tid 61391] [client 47.129.87.50:53130] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Sat May 09 02:02:50.193122 2026] [:error] [pid 61356:tid 61399] [client 47.129.87.50:53130] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sat May 09 02:02:50.312248 2026] [:error] [pid 61356:tid 61405] [client 47.129.87.50:53130] File does not exist: /usr/local/apache/htdocs/suspended-page/pi.php
[Sat May 09 02:02:50.454133 2026] [:error] [pid 61356:tid 61400] [client 47.129.87.50:53130] File does not exist: /usr/local/apache/htdocs/suspended-page/pinfo.php
[Sat May 09 02:02:50.582835 2026] [:error] [pid 61356:tid 61412] [client 47.129.87.50:53130] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sat May 09 02:02:50.861193 2026] [:error] [pid 61356:tid 61394] [client 47.129.87.50:53130] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Sat May 09 02:02:50.987753 2026] [:error] [pid 61356:tid 61407] [client 47.129.87.50:53130] File does not exist: /usr/local/apache/htdocs/suspended-page/debug.php
[Sat May 09 02:02:51.297412 2026] [:error] [pid 61356:tid 61401] [client 47.129.87.50:53130] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4lS4x3vpB8oWhUq2M5UAAAAc0"]
[Sat May 09 02:02:51.941112 2026] [:error] [pid 61356:tid 61410] [client 47.129.87.50:53146] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4lS4x3vpB8oWhUq2M5UwAAAdY"]
[Sat May 09 02:02:52.511960 2026] [:error] [pid 61356:tid 61392] [client 47.129.87.50:53160] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4lTIx3vpB8oWhUq2M5WAAAAcQ"]
[Sat May 09 02:02:53.071134 2026] [:error] [pid 51008:tid 51067] [client 47.129.87.50:53174] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4lTXB58C2Y1tgLtuLj4QAAAFI"]
[Sat May 09 02:02:53.657175 2026] [:error] [pid 61355:tid 61379] [client 47.129.87.50:53184] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4lTfkhJTi30CBXmMlLhQAAAZI"]
[Sat May 09 02:02:54.373235 2026] [:error] [pid 61355:tid 61380] [client 47.129.87.50:53186] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/info"] [unique_id "af4lTvkhJTi30CBXmMlLjQAAAZM"]
[Sat May 09 02:02:55.003023 2026] [:error] [pid 61356:tid 61409] [client 47.129.87.50:53198] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/php-info.php"] [unique_id "af4lT4x3vpB8oWhUq2M5XQAAAdU"]
[Sat May 09 02:02:55.642521 2026] [:error] [pid 51008:tid 51070] [client 47.129.87.50:53206] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/phpversion.php"] [unique_id "af4lT3B58C2Y1tgLtuLj5AAAAFU"]
[Sat May 09 02:02:56.205503 2026] [:error] [pid 51008:tid 51062] [client 47.129.87.50:53216] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/_phpinfo.php"] [unique_id "af4lUHB58C2Y1tgLtuLj6QAAAE0"]
[Sat May 09 02:02:56.867968 2026] [:error] [pid 61356:tid 61393] [client 47.129.87.50:52380] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4lUIx3vpB8oWhUq2M5ZgAAAcU"]
[Sat May 09 02:02:57.445067 2026] [:error] [pid 34318:tid 34332] [client 47.129.87.50:52388] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/server-info.php"] [unique_id "af4lUcr3guirgJiKhzAJgwAAAQw"]
[Sat May 09 02:02:58.017664 2026] [:error] [pid 51008:tid 51051] [client 47.129.87.50:52394] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/server-status.php"] [unique_id "af4lUnB58C2Y1tgLtuLj7gAAAEI"]
[Sat May 09 02:02:58.573947 2026] [:error] [pid 51008:tid 51057] [client 47.129.87.50:52396] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4lUnB58C2Y1tgLtuLj7wAAAEg"]
[Sat May 09 02:02:59.083431 2026] [:error] [pid 61355:tid 61382] [client 47.129.87.50:52412] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/_environment"] [unique_id "af4lU_khJTi30CBXmMlLmQAAAZU"]
[Sat May 09 02:02:59.792287 2026] [:error] [pid 51008:tid 51069] [client 47.129.87.50:52428] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4lU3B58C2Y1tgLtuLj8QAAAFQ"]
[Sat May 09 02:03:00.409330 2026] [:error] [pid 61317:tid 61328] [client 47.129.87.50:52440] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4lVM-fFk_CedOCOYsWRQAAAUg"]
[Sat May 09 02:03:01.038040 2026] [:error] [pid 61356:tid 61394] [client 47.129.87.50:52444] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4lVYx3vpB8oWhUq2M5cQAAAcY"]
[Sat May 09 02:03:01.657862 2026] [:error] [pid 61356:tid 61393] [client 47.129.87.50:52454] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4lVYx3vpB8oWhUq2M5dAAAAcU"]
[Sat May 09 02:03:02.275681 2026] [:error] [pid 51009:tid 51093] [client 47.129.87.50:52468] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4lVuB0GbUWhxgzX9WgGgAAAJE"]
[Sat May 09 02:03:02.830566 2026] [:error] [pid 51009:tid 51088] [client 47.129.87.50:52470] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4lVuB0GbUWhxgzX9WgHQAAAIw"]
[Sat May 09 02:03:03.586494 2026] [:error] [pid 61356:tid 61391] [client 47.129.87.50:52480] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4lV4x3vpB8oWhUq2M5egAAAcM"]
[Sat May 09 02:03:04.226651 2026] [:error] [pid 61317:tid 61324] [client 47.129.87.50:52494] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4lWM-fFk_CedOCOYsWUAAAAUQ"]
[Sat May 09 02:03:04.856030 2026] [:error] [pid 34318:tid 34328] [client 47.129.87.50:52506] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/phpinfo.php~"] [unique_id "af4lWMr3guirgJiKhzAJjwAAAQg"]
[Sat May 09 02:03:05.444967 2026] [:error] [pid 51008:tid 51061] [client 47.129.87.50:52510] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/info.php.bak"] [unique_id "af4lWXB58C2Y1tgLtuLj9gAAAEw"]
[Sat May 09 02:03:06.009642 2026] [:error] [pid 61356:tid 61405] [client 47.129.87.50:52526] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4lWox3vpB8oWhUq2M5gwAAAdE"]
[Sat May 09 02:03:06.674606 2026] [:error] [pid 51007:tid 51028] [client 47.129.87.50:33166] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4lWlMagSGstWKyzzUh9AAAAAY"]
[Sat May 09 02:03:07.229800 2026] [:error] [pid 51007:tid 51025] [client 47.129.87.50:33172] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4lW1MagSGstWKyzzUh9wAAAAM"]
[Sat May 09 02:03:07.887995 2026] [:error] [pid 51009:tid 51080] [client 47.129.87.50:33188] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4lW-B0GbUWhxgzX9WgJQAAAIQ"]
[Sat May 09 02:03:08.513637 2026] [:error] [pid 61317:tid 61335] [client 47.129.87.50:33196] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4lXM-fFk_CedOCOYsWXAAAAU8"]
[Sat May 09 02:03:09.141047 2026] [:error] [pid 51113:tid 51135] [client 47.129.87.50:33212] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4lXUQfs7sWtqkpQIefqwAAANQ"]
[Sat May 09 02:03:09.879116 2026] [:error] [pid 51007:tid 51033] [client 47.129.87.50:33228] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4lXVMagSGstWKyzzUiAwAAAAs"]
[Sat May 09 02:03:10.559048 2026] [:error] [pid 61317:tid 61330] [client 47.129.87.50:33230] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4lXs-fFk_CedOCOYsWYwAAAUo"]
[Sat May 09 02:03:11.136568 2026] [:error] [pid 61355:tid 61382] [client 47.129.87.50:33238] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4lX_khJTi30CBXmMlLqAAAAZU"]
[Sat May 09 02:03:11.682724 2026] [:error] [pid 61317:tid 61320] [client 47.129.87.50:33242] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4lX8-fFk_CedOCOYsWZgAAAUA"]
[Sat May 09 02:03:12.216481 2026] [:error] [pid 51009:tid 51090] [client 47.129.87.50:33258] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4lYOB0GbUWhxgzX9WgMgAAAI4"]
[Sat May 09 02:03:12.780515 2026] [:error] [pid 61356:tid 61401] [client 47.129.87.50:33274] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4lYIx3vpB8oWhUq2M5jgAAAc0"]
[Sat May 09 02:03:13.389492 2026] [:error] [pid 61356:tid 61407] [client 47.129.87.50:33286] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4lYYx3vpB8oWhUq2M5lgAAAdM"]
[Sat May 09 02:03:13.973098 2026] [:error] [pid 61356:tid 61396] [client 47.129.87.50:33288] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4lYYx3vpB8oWhUq2M5ngAAAcg"]
[Sat May 09 02:03:14.679661 2026] [:error] [pid 61355:tid 61361] [client 47.129.87.50:33300] [client 47.129.87.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4lYvkhJTi30CBXmMlLsAAAAYA"]
[Sat May 09 02:40:01.369510 2026] [:error] [pid 61355:tid 61380] [client 74.249.238.26:11660] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Sat May 09 02:40:01.571428 2026] [:error] [pid 61355:tid 61378] [client 74.249.238.26:11660] File does not exist: /usr/local/apache/htdocs/suspended-page/casp1.php
[Sat May 09 02:40:02.058733 2026] [:error] [pid 61355:tid 61378] [client 74.249.238.26:11660] File does not exist: /usr/local/apache/htdocs/suspended-page/ws78.php
[Sat May 09 02:40:02.299647 2026] [:error] [pid 61355:tid 61376] [client 74.249.238.26:11660] File does not exist: /usr/local/apache/htdocs/suspended-page/koiy.php
[Sat May 09 02:40:02.767019 2026] [:error] [pid 61355:tid 61383] [client 74.249.238.26:11660] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Sat May 09 02:40:03.977637 2026] [:error] [pid 61355:tid 61373] [client 74.249.238.26:11660] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Sat May 09 02:40:04.180525 2026] [:error] [pid 61355:tid 61364] [client 74.249.238.26:11660] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Sat May 09 02:40:04.381936 2026] [:error] [pid 61355:tid 61362] [client 74.249.238.26:11660] File does not exist: /usr/local/apache/htdocs/suspended-page/press.php
[Sat May 09 02:40:04.586895 2026] [:error] [pid 61355:tid 61370] [client 74.249.238.26:11660] File does not exist: /usr/local/apache/htdocs/suspended-page/ws88.php
[Sat May 09 02:40:06.129924 2026] [:error] [pid 61355:tid 61370] [client 74.249.238.26:11660] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxfyf.php"] [unique_id "af4uBvkhJTi30CBXmMlhLQAAAYk"]
[Sat May 09 02:40:09.217001 2026] [:error] [pid 34318:tid 34337] [client 74.249.238.26:11632] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxfyf.php"] [unique_id "af4uCcr3guirgJiKhzAPBwAAARE"]
[Sat May 09 02:40:11.014184 2026] [:error] [pid 51113:tid 51137] [client 74.249.238.26:11584] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxfyf.php"] [unique_id "af4uC0Qfs7sWtqkpQIej5wAAANY"]
[Sat May 09 02:40:12.718912 2026] [:error] [pid 61355:tid 61377] [client 74.249.238.26:11599] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wxfyf.php"] [unique_id "af4uDPkhJTi30CBXmMlhMgAAAZA"]
[Sat May 09 02:40:14.004126 2026] [:error] [pid 51008:tid 51052] [client 74.249.238.26:11670] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "af4uDnB58C2Y1tgLtuLsfAAAAEM"]
[Sat May 09 02:40:25.378151 2026] [:error] [pid 61355:tid 61385] [client 74.249.238.26:11594] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "af4uGfkhJTi30CBXmMlhWAAAAZg"]
[Sat May 09 02:40:27.021121 2026] [:error] [pid 61317:tid 61336] [client 74.249.238.26:11613] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blog-header.php"] [unique_id "af4uG8-fFk_CedOCOYse4gAAAVA"]
[Sat May 09 02:40:33.811559 2026] [:error] [pid 51009:tid 51076] [client 74.249.238.26:11659] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "af4uIeB0GbUWhxgzX9WrTwAAAIA"]
[Sat May 09 02:40:36.226173 2026] [:error] [pid 61355:tid 61362] [client 74.249.238.26:11616] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "af4uJPkhJTi30CBXmMlhewAAAYE"]
[Sat May 09 02:40:39.462654 2026] [:error] [pid 61355:tid 61362] [client 74.249.238.26:11624] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "af4uJ_khJTi30CBXmMlhjQAAAYE"]
[Sat May 09 02:40:42.558183 2026] [:error] [pid 51007:tid 51044] [client 74.249.238.26:11631] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sa.php7"] [unique_id "af4uKlMagSGstWKyzzUoVgAAABY"]
[Sat May 09 02:40:43.842430 2026] [:error] [pid 61355:tid 61365] [client 74.249.238.26:11651] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "af4uK_khJTi30CBXmMlhnAAAAYQ"]
[Sat May 09 02:40:44.922584 2026] [:error] [pid 61356:tid 61391] [client 74.249.238.26:11601] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "af4uLIx3vpB8oWhUq2NLdAAAAcM"]
[Sat May 09 02:40:46.062411 2026] [:error] [pid 61356:tid 61405] [client 74.249.238.26:11652] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "af4uLox3vpB8oWhUq2NLewAAAdE"]
[Sat May 09 02:40:49.152645 2026] [:error] [pid 51008:tid 51063] [client 74.249.238.26:11586] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/ws49.php"] [unique_id "af4uMXB58C2Y1tgLtuLskgAAAE4"]
[Sat May 09 02:40:51.223311 2026] [:error] [pid 51009:tid 51080] [client 74.249.238.26:11629] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "af4uM-B0GbUWhxgzX9WrlgAAAIQ"]
[Sat May 09 02:40:57.696478 2026] [:error] [pid 61317:tid 61342] [client 74.249.238.26:11647] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "af4uOc-fFk_CedOCOYse_wAAAVY"]
[Sat May 09 02:40:59.450519 2026] [:error] [pid 61356:tid 61411] [client 74.249.238.26:11644] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "af4uO4x3vpB8oWhUq2NLyQAAAdc"]
[Sat May 09 02:41:07.017840 2026] [:error] [pid 61356:tid 61402] [client 74.249.238.26:11597] File does not exist: /usr/local/apache/htdocs/suspended-page/xxw.php
[Sat May 09 02:41:07.298282 2026] [:error] [pid 61356:tid 61398] [client 74.249.238.26:11597] File does not exist: /usr/local/apache/htdocs/suspended-page/amwxl.php
[Sat May 09 02:41:07.681513 2026] [:error] [pid 61356:tid 61395] [client 74.249.238.26:11597] File does not exist: /usr/local/apache/htdocs/suspended-page/ws83.php
[Sat May 09 02:41:08.066539 2026] [:error] [pid 61356:tid 61405] [client 74.249.238.26:11597] File does not exist: /usr/local/apache/htdocs/suspended-page/amax.php
[Sat May 09 02:41:08.456486 2026] [:error] [pid 61356:tid 61401] [client 74.249.238.26:11597] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-104.php
[Sat May 09 02:41:08.648522 2026] [:error] [pid 61356:tid 61395] [client 74.249.238.26:11597] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Sat May 09 02:41:08.839147 2026] [:error] [pid 61356:tid 61403] [client 74.249.238.26:11597] File does not exist: /usr/local/apache/htdocs/suspended-page/wp9.php
[Sat May 09 02:41:09.033169 2026] [:error] [pid 61356:tid 61389] [client 74.249.238.26:11597] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Sat May 09 02:41:09.350128 2026] [:error] [pid 61356:tid 61405] [client 74.249.238.26:11597] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat May 09 02:41:09.564700 2026] [:error] [pid 61356:tid 61400] [client 74.249.238.26:11597] File does not exist: /usr/local/apache/htdocs/suspended-page/5b9ac.php
[Sat May 09 02:41:09.769733 2026] [:error] [pid 61356:tid 61392] [client 74.249.238.26:11597] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "af4uRYx3vpB8oWhUq2NMCAAAAcQ"]
[Sat May 09 02:41:14.951161 2026] [:error] [pid 51009:tid 51076] [client 74.249.238.26:11602] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "af4uSuB0GbUWhxgzX9Wr0QAAAIA"]
[Sat May 09 02:41:16.658606 2026] [:error] [pid 61355:tid 61375] [client 74.249.238.26:11648] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "af4uTPkhJTi30CBXmMliGQAAAY4"]
[Sat May 09 02:41:17.724505 2026] [:error] [pid 61355:tid 61361] [client 74.249.238.26:11709] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "af4uTfkhJTi30CBXmMliGwAAAYA"]
[Sat May 09 02:41:20.855008 2026] [:error] [pid 61355:tid 61376] [client 74.249.238.26:11637] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "af4uUPkhJTi30CBXmMliJAAAAY8"]
[Sat May 09 02:41:21.692035 2026] [:error] [pid 61317:tid 61343] [client 74.249.238.26:11705] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "af4uUc-fFk_CedOCOYsfJQAAAVc"]
[Sat May 09 02:41:24.350296 2026] [:error] [pid 61355:tid 61367] [client 74.249.238.26:11677] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "af4uVPkhJTi30CBXmMliPQAAAYY"]
[Sat May 09 02:41:28.648027 2026] [:error] [pid 61356:tid 61406] [client 74.249.238.26:11645] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "af4uWIx3vpB8oWhUq2NMLgAAAdI"]
[Sat May 09 02:41:31.733897 2026] [:error] [pid 61355:tid 61369] [client 74.249.238.26:11608] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "af4uW_khJTi30CBXmMliWwAAAYg"]
[Sat May 09 02:41:34.084224 2026] [:error] [pid 51009:tid 51097] [client 74.249.238.26:11614] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "af4uXuB0GbUWhxgzX9Wr9wAAAJU"]
[Sat May 09 02:41:36.161667 2026] [:error] [pid 61317:tid 61341] [client 74.249.238.26:11655] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "af4uYM-fFk_CedOCOYsfMwAAAVU"]
[Sat May 09 02:41:38.403556 2026] [:error] [pid 61356:tid 61402] [client 74.249.238.26:11641] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wtiiy.php"] [unique_id "af4uYox3vpB8oWhUq2NMVQAAAc4"]
[Sat May 09 02:41:45.090387 2026] [:error] [pid 51008:tid 51070] [client 74.249.238.26:11636] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "af4uaXB58C2Y1tgLtuLs1wAAAFU"]
[Sat May 09 02:41:46.781902 2026] [:error] [pid 61317:tid 61324] [client 74.249.238.26:11685] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "af4uas-fFk_CedOCOYsfTwAAAUQ"]
[Sat May 09 02:41:53.683201 2026] [:error] [pid 51009:tid 51090] [client 74.249.238.26:11656] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "af4uceB0GbUWhxgzX9WsHwAAAI4"]
[Sat May 09 02:41:59.642545 2026] [:error] [pid 61356:tid 61399] [client 74.249.238.26:11593] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "af4ud4x3vpB8oWhUq2NMeAAAAcs"]
[Sat May 09 02:42:01.555781 2026] [:error] [pid 51008:tid 51070] [client 74.249.238.26:11699] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "af4ueXB58C2Y1tgLtuLs5AAAAFU"]
[Sat May 09 02:42:03.680578 2026] [:error] [pid 61355:tid 61378] [client 74.249.238.26:11663] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "af4ue_khJTi30CBXmMlimQAAAZE"]
[Sat May 09 02:42:05.640186 2026] [:error] [pid 51008:tid 51072] [client 74.249.238.26:11620] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "af4ufXB58C2Y1tgLtuLs6wAAAFc"]
[Sat May 09 02:42:07.830149 2026] [:error] [pid 61317:tid 61321] [client 74.249.238.26:11706] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "af4uf8-fFk_CedOCOYsfbgAAAUE"]
[Sat May 09 02:42:14.902765 2026] [:error] [pid 61355:tid 61365] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/jga.php
[Sat May 09 02:42:15.099432 2026] [:error] [pid 61355:tid 61382] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/gifclass.php
[Sat May 09 02:42:15.296415 2026] [:error] [pid 61355:tid 61379] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/ajax.php
[Sat May 09 02:42:15.486979 2026] [:error] [pid 61355:tid 61362] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/tx78.php
[Sat May 09 02:42:15.677562 2026] [:error] [pid 61355:tid 61366] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/csv.php
[Sat May 09 02:42:15.892029 2026] [:error] [pid 61355:tid 61368] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/n3yUmQ6Q9xwQ8ocdefault.php
[Sat May 09 02:42:16.432786 2026] [:error] [pid 61355:tid 61374] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/ne2026.php
[Sat May 09 02:42:16.623422 2026] [:error] [pid 61355:tid 61377] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-act.php
[Sat May 09 02:42:16.814124 2026] [:error] [pid 61355:tid 61385] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/ws86.php
[Sat May 09 02:42:17.024152 2026] [:error] [pid 61355:tid 61367] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Sat May 09 02:42:17.309298 2026] [:error] [pid 61355:tid 61365] [client 74.249.238.26:11643] File does not exist: /usr/local/apache/htdocs/suspended-page/torsa1.php
[Sat May 09 02:42:17.495819 2026] [:error] [pid 61355:tid 61382] [client 74.249.238.26:11643] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "af4uifkhJTi30CBXmMlizwAAAZU"]
[Sat May 09 02:42:29.746796 2026] [:error] [pid 51113:tid 51122] [client 74.249.238.26:11642] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a4.php"] [unique_id "af4ulUQfs7sWtqkpQIekwwAAAMc"]
[Sat May 09 02:42:43.830164 2026] [:error] [pid 61355:tid 61385] [client 74.249.238.26:11680] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "af4uo_khJTi30CBXmMljFgAAAZg"]
[Sat May 09 02:42:45.614663 2026] [:error] [pid 51009:tid 51078] [client 74.249.238.26:11598] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "af4upeB0GbUWhxgzX9Ws-gAAAII"]
[Sat May 09 02:42:46.519149 2026] [:error] [pid 61317:tid 61341] [client 74.249.238.26:11633] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "af4ups-fFk_CedOCOYsfswAAAVU"]
[Sat May 09 02:42:51.742851 2026] [:error] [pid 61356:tid 61401] [client 74.249.238.26:11626] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "af4uq4x3vpB8oWhUq2NNBgAAAc0"]
[Sat May 09 02:42:55.036284 2026] [:error] [pid 51009:tid 51089] [client 74.249.238.26:11534] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "af4ur-B0GbUWhxgzX9WtBgAAAI0"]
[Sat May 09 02:42:56.171382 2026] [:error] [pid 51008:tid 51062] [client 74.249.238.26:11691] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "af4usHB58C2Y1tgLtuLtJQAAAE0"]
[Sat May 09 02:43:04.137055 2026] [:error] [pid 51009:tid 51079] [client 74.249.238.26:11674] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "af4uuOB0GbUWhxgzX9WtHgAAAIM"]
[Sat May 09 02:43:16.821839 2026] [:error] [pid 61355:tid 61372] [client 74.249.238.26:11682] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cu.php"] [unique_id "af4uxPkhJTi30CBXmMljXwAAAYs"]
[Sat May 09 02:43:17.511949 2026] [:error] [pid 51113:tid 51136] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/cu.php
[Sat May 09 02:43:17.701948 2026] [:error] [pid 51113:tid 51132] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Sat May 09 02:43:17.892843 2026] [:error] [pid 51113:tid 51120] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Sat May 09 02:43:18.085559 2026] [:error] [pid 51113:tid 51122] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/saorix1.php
[Sat May 09 02:43:18.291454 2026] [:error] [pid 51113:tid 51125] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/packsin1.php
[Sat May 09 02:43:18.486098 2026] [:error] [pid 51113:tid 51128] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/menu.php
[Sat May 09 02:43:18.677159 2026] [:error] [pid 51113:tid 51135] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/admin-footer.php
[Sat May 09 02:43:18.867636 2026] [:error] [pid 51113:tid 51116] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/shop.php
[Sat May 09 02:43:19.057936 2026] [:error] [pid 51113:tid 51126] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/maul.php
[Sat May 09 02:43:19.249652 2026] [:error] [pid 51113:tid 51133] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blogs.php
[Sat May 09 02:43:19.458224 2026] [:error] [pid 51113:tid 51124] [client 74.249.238.26:11658] File does not exist: /usr/local/apache/htdocs/suspended-page/bjfl.php
[Sat May 09 02:43:19.645279 2026] [:error] [pid 51113:tid 51123] [client 74.249.238.26:11658] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "af4ux0Qfs7sWtqkpQIelFwAAAMg"]
[Sat May 09 02:43:21.789539 2026] [:error] [pid 61356:tid 61405] [client 74.249.238.26:11649] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "af4uyYx3vpB8oWhUq2NNNgAAAdE"]
[Sat May 09 02:43:26.298659 2026] [:error] [pid 34318:tid 34332] [client 74.249.238.26:11657] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "af4uzsr3guirgJiKhzAPvwAAAQw"]
[Sat May 09 02:43:29.689953 2026] [:error] [pid 51113:tid 51126] [client 74.249.238.26:11702] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "af4u0UQfs7sWtqkpQIelIgAAAMs"]
[Sat May 09 02:43:34.064400 2026] [:error] [pid 61356:tid 61406] [client 74.249.238.26:11668] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lowpr.php"] [unique_id "af4u1ox3vpB8oWhUq2NNSAAAAdI"]
[Sat May 09 02:43:35.731731 2026] [:error] [pid 61317:tid 61333] [client 74.249.238.26:11596] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lowpr.php"] [unique_id "af4u18-fFk_CedOCOYsf4AAAAU0"]
[Sat May 09 02:43:39.731207 2026] [:error] [pid 51007:tid 51039] [client 74.249.238.26:11609] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lowpr.php"] [unique_id "af4u21MagSGstWKyzzUpVQAAABE"]
[Sat May 09 02:43:43.805210 2026] [:error] [pid 51009:tid 51099] [client 74.249.238.26:11607] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lowpr.php"] [unique_id "af4u3-B0GbUWhxgzX9WtcgAAAJc"]
[Sat May 09 02:43:46.911339 2026] [:error] [pid 34318:tid 34326] [client 74.249.238.26:11595] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "af4u4sr3guirgJiKhzAP1wAAAQY"]
[Sat May 09 02:43:54.127178 2026] [:error] [pid 61355:tid 61361] [client 74.249.238.26:11537] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "af4u6vkhJTi30CBXmMljpQAAAYA"]
[Sat May 09 02:43:55.880600 2026] [:error] [pid 61355:tid 61372] [client 74.249.238.26:11627] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "af4u6_khJTi30CBXmMljqwAAAYs"]
[Sat May 09 02:43:58.875802 2026] [:error] [pid 51007:tid 51042] [client 74.249.238.26:11623] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/term.php"] [unique_id "af4u7lMagSGstWKyzzUpcwAAABQ"]
[Sat May 09 02:44:35.686055 2026] [:error] [pid 51009:tid 51082] [client 74.249.238.26:11611] File does not exist: /usr/local/apache/htdocs/suspended-page/ortasekerli1.php
[Sat May 09 02:44:35.899404 2026] [:error] [pid 51009:tid 51076] [client 74.249.238.26:11611] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Sat May 09 02:44:36.090904 2026] [:error] [pid 51009:tid 51092] [client 74.249.238.26:11611] File does not exist: /usr/local/apache/htdocs/suspended-page/gk.php
[Sat May 09 02:44:37.682723 2026] [:error] [pid 51009:tid 51092] [client 74.249.238.26:11611] File does not exist: /usr/local/apache/htdocs/suspended-page/varb.php
[Sat May 09 02:44:38.090075 2026] [:error] [pid 51009:tid 51082] [client 74.249.238.26:11611] File does not exist: /usr/local/apache/htdocs/suspended-page/classwithtostring.php
[Sat May 09 02:44:38.283163 2026] [:error] [pid 51009:tid 51084] [client 74.249.238.26:11611] File does not exist: /usr/local/apache/htdocs/suspended-page/uuu.php
[Sat May 09 02:44:38.480562 2026] [:error] [pid 51009:tid 51078] [client 74.249.238.26:11611] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat May 09 02:44:38.678793 2026] [:error] [pid 51009:tid 51076] [client 74.249.238.26:11611] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Sat May 09 02:44:38.955275 2026] [:error] [pid 51009:tid 51094] [client 74.249.238.26:11611] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Sat May 09 02:44:39.244109 2026] [:error] [pid 51009:tid 51086] [client 74.249.238.26:11611] File does not exist: /usr/local/apache/htdocs/suspended-page/ws60.php
[Sat May 09 02:44:39.778721 2026] [:error] [pid 51009:tid 51093] [client 74.249.238.26:11611] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "af4vF-B0GbUWhxgzX9WuAAAAAJE"]
[Sat May 09 02:44:41.114783 2026] [:error] [pid 61356:tid 61394] [client 74.249.238.26:11521] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "af4vGYx3vpB8oWhUq2NN5wAAAcY"]
[Sat May 09 02:44:43.092977 2026] [:error] [pid 61355:tid 61373] [client 74.249.238.26:11525] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "af4vG_khJTi30CBXmMlkgwAAAYw"]
[Sat May 09 02:44:45.230301 2026] [:error] [pid 51007:tid 51029] [client 74.249.238.26:11714] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rzki.php"] [unique_id "af4vHVMagSGstWKyzzUpuwAAAAc"]
[Sat May 09 02:44:47.544163 2026] [:error] [pid 51009:tid 51077] [client 74.249.238.26:11569] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "af4vH-B0GbUWhxgzX9WuBQAAAIE"]
[Sat May 09 02:44:49.402786 2026] [:error] [pid 51113:tid 51117] [client 74.249.238.26:11599] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "af4vIUQfs7sWtqkpQIelhAAAAMI"]
[Sat May 09 02:44:51.955583 2026] [:error] [pid 61317:tid 61341] [client 74.249.238.26:11669] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "af4vI8-fFk_CedOCOYsgTAAAAVU"]
[Sat May 09 02:44:55.385509 2026] [:error] [pid 61356:tid 61395] [client 74.249.238.26:11528] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jp.php"] [unique_id "af4vJ4x3vpB8oWhUq2NOIwAAAcc"]
[Sat May 09 02:44:58.844433 2026] [:error] [pid 61355:tid 61371] [client 74.249.238.26:11777] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "af4vKvkhJTi30CBXmMlk6gAAAYo"]
[Sat May 09 02:45:01.356355 2026] [:error] [pid 51007:tid 51043] [client 74.249.238.26:11698] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "af4vLVMagSGstWKyzzUpxgAAABU"]
[Sat May 09 02:45:04.733664 2026] [:error] [pid 61355:tid 61375] [client 74.249.238.26:11667] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/G-In.php"] [unique_id "af4vMPkhJTi30CBXmMllFAAAAY4"]
[Sat May 09 02:45:13.874585 2026] [:error] [pid 34318:tid 34323] [client 74.249.238.26:11588] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "af4vOcr3guirgJiKhzAQfgAAAQM"]
[Sat May 09 02:45:16.597702 2026] [:error] [pid 51007:tid 51038] [client 74.249.238.26:11603] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "af4vPFMagSGstWKyzzUp2QAAABA"]
[Sat May 09 02:45:20.036272 2026] [:error] [pid 61355:tid 61365] [client 74.249.238.26:11557] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "af4vQPkhJTi30CBXmMllTgAAAYQ"]
[Sat May 09 02:45:23.128714 2026] [:error] [pid 61356:tid 61399] [client 74.249.238.26:11632] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/file.php"] [unique_id "af4vQ4x3vpB8oWhUq2NOawAAAcs"]
[Sat May 09 02:45:25.281037 2026] [:error] [pid 61356:tid 61405] [client 74.249.238.26:11617] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "af4vRYx3vpB8oWhUq2NOdQAAAdE"]
[Sat May 09 02:45:36.817612 2026] [:error] [pid 51009:tid 51100] [client 74.249.238.26:11688] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "af4vUOB0GbUWhxgzX9WuZAAAAJg"]
[Sat May 09 02:45:37.728808 2026] [:error] [pid 61356:tid 61393] [client 74.249.238.26:11644] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "af4vUYx3vpB8oWhUq2NOpwAAAcU"]
[Sat May 09 02:45:38.501495 2026] [:error] [pid 51009:tid 51080] [client 74.249.238.26:11601] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "af4vUuB0GbUWhxgzX9WubAAAAIQ"]
[Sat May 09 02:45:39.555335 2026] [:error] [pid 51009:tid 51096] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/dass.php
[Sat May 09 02:45:39.748582 2026] [:error] [pid 51009:tid 51088] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/ws85.php
[Sat May 09 02:45:40.188666 2026] [:error] [pid 51009:tid 51081] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/buc.php
[Sat May 09 02:45:40.382855 2026] [:error] [pid 51009:tid 51079] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/gptsh.php
[Sat May 09 02:45:40.580334 2026] [:error] [pid 51009:tid 51080] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Sat May 09 02:45:40.780718 2026] [:error] [pid 51009:tid 51094] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Sat May 09 02:45:40.990590 2026] [:error] [pid 51009:tid 51089] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sat May 09 02:45:41.487647 2026] [:error] [pid 51009:tid 51100] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Sat May 09 02:45:42.166984 2026] [:error] [pid 51009:tid 51087] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/hots.php
[Sat May 09 02:45:42.578535 2026] [:error] [pid 51009:tid 51076] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/install.php
[Sat May 09 02:45:42.770776 2026] [:error] [pid 51009:tid 51081] [client 74.249.238.26:11568] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Sat May 09 02:45:42.973889 2026] [:error] [pid 51009:tid 51097] [client 74.249.238.26:11568] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/users.php"] [unique_id "af4vVuB0GbUWhxgzX9WuiAAAAJU"]
[Sat May 09 02:45:43.811345 2026] [:error] [pid 61356:tid 61388] [client 74.249.238.26:11604] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/users.php"] [unique_id "af4vV4x3vpB8oWhUq2NOuwAAAcA"]
[Sat May 09 02:45:45.472031 2026] [:error] [pid 51113:tid 51125] [client 74.249.238.26:11622] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/users.php"] [unique_id "af4vWUQfs7sWtqkpQIeltgAAAMo"]
[Sat May 09 02:45:47.349197 2026] [:error] [pid 61355:tid 61363] [client 74.249.238.26:11589] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/users.php"] [unique_id "af4vW_khJTi30CBXmMllngAAAYI"]
[Sat May 09 02:45:48.215102 2026] [:error] [pid 51009:tid 51078] [client 74.249.238.26:11549] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "af4vXOB0GbUWhxgzX9WukwAAAII"]
[Sat May 09 02:45:50.526150 2026] [:error] [pid 51008:tid 51068] [client 74.249.238.26:11673] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "af4vXnB58C2Y1tgLtuLuOwAAAFM"]
[Sat May 09 02:45:51.442529 2026] [:error] [pid 61356:tid 61397] [client 74.249.238.26:11635] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "af4vX4x3vpB8oWhUq2NO0AAAAck"]
[Sat May 09 02:45:56.594974 2026] [:error] [pid 51007:tid 51039] [client 74.249.238.26:11628] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "af4vZFMagSGstWKyzzUp7QAAABE"]
[Sat May 09 02:45:59.617609 2026] [:error] [pid 61355:tid 61366] [client 74.249.238.26:11520] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "af4vZ_khJTi30CBXmMlltgAAAYU"]
[Sat May 09 02:46:01.328657 2026] [:error] [pid 61355:tid 61362] [client 74.249.238.26:11696] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "af4vafkhJTi30CBXmMllwAAAAYE"]
[Sat May 09 02:46:03.953502 2026] [:error] [pid 51009:tid 51078] [client 74.249.238.26:11640] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "af4va-B0GbUWhxgzX9Wu4wAAAII"]
[Sat May 09 02:46:04.756125 2026] [:error] [pid 61355:tid 61364] [client 74.249.238.26:11694] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xwx1.php"] [unique_id "af4vbPkhJTi30CBXmMllzgAAAYM"]
[Sat May 09 02:46:07.718269 2026] [:error] [pid 61317:tid 61340] [client 74.249.238.26:11681] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ox.php"] [unique_id "af4vb8-fFk_CedOCOYsgnQAAAVQ"]
[Sat May 09 02:46:08.983726 2026] [:error] [pid 61356:tid 61402] [client 74.249.238.26:11554] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ox.php"] [unique_id "af4vcIx3vpB8oWhUq2NPBgAAAc4"]
[Sat May 09 02:46:13.478819 2026] [:error] [pid 51007:tid 51043] [client 74.249.238.26:11592] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ox.php"] [unique_id "af4vdVMagSGstWKyzzUqAAAAABU"]
[Sat May 09 02:46:17.140155 2026] [:error] [pid 61356:tid 61389] [client 74.249.238.26:11653] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ox.php"] [unique_id "af4veYx3vpB8oWhUq2NPMAAAAcE"]
[Sat May 09 02:46:20.408404 2026] [:error] [pid 61356:tid 61390] [client 74.249.238.26:11590] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "af4vfIx3vpB8oWhUq2NPQwAAAcI"]
[Sat May 09 02:46:30.960327 2026] [:error] [pid 61355:tid 61367] [client 74.249.238.26:11636] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "af4vhvkhJTi30CBXmMlmFAAAAYY"]
[Sat May 09 02:46:42.009196 2026] [:error] [pid 61356:tid 61403] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/drhunthq.php
[Sat May 09 02:46:42.213894 2026] [:error] [pid 61356:tid 61412] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/s.php
[Sat May 09 02:46:42.420950 2026] [:error] [pid 61356:tid 61388] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/clss.php
[Sat May 09 02:46:42.617635 2026] [:error] [pid 61356:tid 61390] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/mh.php
[Sat May 09 02:46:42.808773 2026] [:error] [pid 61356:tid 61411] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/wen.php
[Sat May 09 02:46:43.000491 2026] [:error] [pid 61356:tid 61398] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/Sanskrit.php
[Sat May 09 02:46:43.190738 2026] [:error] [pid 61356:tid 61412] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Sat May 09 02:46:43.389726 2026] [:error] [pid 61356:tid 61405] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/bfil.php
[Sat May 09 02:46:43.641617 2026] [:error] [pid 61356:tid 61394] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/ww.php
[Sat May 09 02:46:44.748488 2026] [:error] [pid 61356:tid 61406] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/byypas.php
[Sat May 09 02:46:46.350732 2026] [:error] [pid 61356:tid 61406] [client 74.249.238.26:11645] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Sat May 09 02:46:46.537975 2026] [:error] [pid 61356:tid 61401] [client 74.249.238.26:11645] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "af4vlox3vpB8oWhUq2NPpAAAAc0"]
[Sat May 09 02:46:49.617344 2026] [:error] [pid 61356:tid 61397] [client 74.249.238.26:11591] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "af4vmYx3vpB8oWhUq2NPrQAAAck"]
[Sat May 09 02:46:57.731452 2026] [:error] [pid 61317:tid 61341] [client 74.249.238.26:11666] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws87.php"] [unique_id "af4voc-fFk_CedOCOYshDwAAAVU"]
[Sat May 09 02:47:01.993888 2026] [:error] [pid 61317:tid 61330] [client 74.249.238.26:11641] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa21.php"] [unique_id "af4vpc-fFk_CedOCOYshJAAAAUo"]
[Sat May 09 02:47:02.574585 2026] [:error] [pid 61356:tid 61405] [client 74.249.238.26:11615] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa21.php"] [unique_id "af4vpox3vpB8oWhUq2NP2wAAAdE"]
[Sat May 09 02:47:06.836150 2026] [:error] [pid 61356:tid 61398] [client 74.249.238.26:11584] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa21.php"] [unique_id "af4vqox3vpB8oWhUq2NP6wAAAco"]
[Sat May 09 02:47:09.611698 2026] [:error] [pid 61356:tid 61399] [client 74.249.238.26:11634] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa21.php"] [unique_id "af4vrYx3vpB8oWhUq2NP8AAAAcs"]
[Sat May 09 02:47:11.598773 2026] [:error] [pid 61356:tid 61400] [client 74.249.238.26:11630] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/okxh.php"] [unique_id "af4vr4x3vpB8oWhUq2NP9AAAAcw"]
[Sat May 09 02:47:16.442666 2026] [:error] [pid 34318:tid 34323] [client 74.249.238.26:11648] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/okxh.php"] [unique_id "af4vtMr3guirgJiKhzAQ_AAAAQM"]
[Sat May 09 02:47:17.711435 2026] [:error] [pid 61355:tid 61383] [client 74.249.238.26:11652] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/okxh.php"] [unique_id "af4vtfkhJTi30CBXmMlmmAAAAZY"]
[Sat May 09 02:47:20.773398 2026] [:error] [pid 61356:tid 61400] [client 74.249.238.26:11663] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/okxh.php"] [unique_id "af4vuIx3vpB8oWhUq2NQDAAAAcw"]
[Sat May 09 02:47:22.943925 2026] [:error] [pid 51113:tid 51138] [client 74.249.238.26:11650] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "af4vukQfs7sWtqkpQIemIwAAANc"]
[Sat May 09 02:47:24.958795 2026] [:error] [pid 61355:tid 61380] [client 74.249.238.26:11600] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "af4vvPkhJTi30CBXmMlmrgAAAZM"]
[Sat May 09 02:47:26.765488 2026] [:error] [pid 51009:tid 51078] [client 74.249.238.26:11621] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "af4vvuB0GbUWhxgzX9WvhQAAAII"]
[Sat May 09 02:47:29.596994 2026] [:error] [pid 61356:tid 61406] [client 74.249.238.26:11664] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "af4vwYx3vpB8oWhUq2NQHwAAAdI"]
[Sat May 09 02:47:41.790950 2026] [:error] [pid 61355:tid 61379] [client 74.249.238.26:11598] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fsjzs.php"] [unique_id "af4vzfkhJTi30CBXmMlmwwAAAZI"]
[Sat May 09 02:47:52.674931 2026] [:error] [pid 61356:tid 61396] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/sale.php
[Sat May 09 02:47:52.884306 2026] [:error] [pid 61356:tid 61412] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/t00l.php
[Sat May 09 02:47:53.360379 2026] [:error] [pid 61356:tid 61390] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/wziar1.php
[Sat May 09 02:47:53.579061 2026] [:error] [pid 61356:tid 61401] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sat May 09 02:47:53.770017 2026] [:error] [pid 61356:tid 61391] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Sat May 09 02:47:53.959951 2026] [:error] [pid 61356:tid 61400] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/kj.php
[Sat May 09 02:47:54.149944 2026] [:error] [pid 61356:tid 61406] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/amp.php
[Sat May 09 02:47:54.450870 2026] [:error] [pid 61356:tid 61409] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/bo.php
[Sat May 09 02:47:54.650808 2026] [:error] [pid 61356:tid 61399] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/zc-243.php
[Sat May 09 02:47:55.176001 2026] [:error] [pid 61356:tid 61395] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/ws81.php
[Sat May 09 02:47:55.367126 2026] [:error] [pid 61356:tid 61398] [client 74.249.238.26:11704] File does not exist: /usr/local/apache/htdocs/suspended-page/callback.php
[Sat May 09 02:47:55.564093 2026] [:error] [pid 61356:tid 61408] [client 74.249.238.26:11704] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sd.php"] [unique_id "af4v24x3vpB8oWhUq2NQUQAAAdQ"]
[Sat May 09 02:48:05.464996 2026] [:error] [pid 61355:tid 61378] [client 74.249.238.26:11619] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sd.php"] [unique_id "af4v5fkhJTi30CBXmMlm3gAAAZE"]
[Sat May 09 02:48:08.420296 2026] [:error] [pid 51008:tid 51069] [client 74.249.238.26:11526] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sd.php"] [unique_id "af4v6HB58C2Y1tgLtuLuygAAAFQ"]
[Sat May 09 02:48:12.099553 2026] [:error] [pid 51009:tid 51094] [client 74.249.238.26:11566] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "af4v7OB0GbUWhxgzX9WwAQAAAJI"]
[Sat May 09 02:48:13.167779 2026] [:error] [pid 51009:tid 51078] [client 74.249.238.26:11602] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "af4v7eB0GbUWhxgzX9WwCQAAAII"]
[Sat May 09 02:48:15.527703 2026] [:error] [pid 61317:tid 61326] [client 74.249.238.26:11625] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "af4v78-fFk_CedOCOYshiQAAAUY"]
[Sat May 09 02:48:17.006756 2026] [:error] [pid 61356:tid 61398] [client 74.249.238.26:11660] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gpt-sh.php"] [unique_id "af4v8Yx3vpB8oWhUq2NQewAAAco"]
[Sat May 09 02:48:18.070394 2026] [:error] [pid 61355:tid 61384] [client 74.249.238.26:11668] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "af4v8vkhJTi30CBXmMlnPAAAAZc"]
[Sat May 09 02:48:20.749191 2026] [:error] [pid 61356:tid 61393] [client 74.249.238.26:11661] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "af4v9Ix3vpB8oWhUq2NQggAAAcU"]
[Sat May 09 02:48:22.149906 2026] [:error] [pid 61356:tid 61396] [client 74.249.238.26:11643] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "af4v9ox3vpB8oWhUq2NQiAAAAcg"]
[Sat May 09 02:48:23.412136 2026] [:error] [pid 51007:tid 51044] [client 74.249.238.26:11639] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/domains.php"] [unique_id "af4v91MagSGstWKyzzUqfQAAABY"]
[Sat May 09 02:48:27.038738 2026] [:error] [pid 61356:tid 61408] [client 74.249.238.26:11693] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "af4v-4x3vpB8oWhUq2NQmAAAAdQ"]
[Sat May 09 02:48:28.751866 2026] [:error] [pid 61356:tid 61407] [client 74.249.238.26:11756] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "af4v_Ix3vpB8oWhUq2NQnwAAAdM"]
[Sat May 09 02:48:29.980073 2026] [:error] [pid 51007:tid 51028] [client 74.249.238.26:11706] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "af4v_VMagSGstWKyzzUqpAAAAAY"]
[Sat May 09 02:48:32.501992 2026] [:error] [pid 61317:tid 61342] [client 74.249.238.26:11642] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "af4wAM-fFk_CedOCOYshlwAAAVY"]
[Sat May 09 02:48:34.082591 2026] [:error] [pid 51009:tid 51097] [client 74.249.238.26:11681] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bootstrap.php"] [unique_id "af4wAuB0GbUWhxgzX9WwKQAAAJU"]
[Sat May 09 02:48:37.168059 2026] [:error] [pid 51008:tid 51053] [client 74.249.238.26:11541] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bootstrap.php"] [unique_id "af4wBXB58C2Y1tgLtuLu-wAAAEQ"]
[Sat May 09 02:48:38.859034 2026] [:error] [pid 51113:tid 51132] [client 74.249.238.26:11614] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bootstrap.php"] [unique_id "af4wBkQfs7sWtqkpQIemxwAAANE"]
[Sat May 09 02:48:40.987130 2026] [:error] [pid 51009:tid 51098] [client 74.249.238.26:11612] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bootstrap.php"] [unique_id "af4wCOB0GbUWhxgzX9WwOQAAAJY"]
[Sat May 09 02:48:44.163110 2026] [:error] [pid 51008:tid 51072] [client 74.249.238.26:11683] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h2.php"] [unique_id "af4wDHB58C2Y1tgLtuLvFAAAAFc"]
[Sat May 09 02:48:45.835802 2026] [:error] [pid 61356:tid 61406] [client 74.249.238.26:11651] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h2.php"] [unique_id "af4wDYx3vpB8oWhUq2NQ8AAAAdI"]
[Sat May 09 02:48:50.009471 2026] [:error] [pid 61356:tid 61404] [client 74.249.238.26:11626] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h2.php"] [unique_id "af4wEox3vpB8oWhUq2NRCQAAAdA"]
[Sat May 09 02:48:51.263524 2026] [:error] [pid 61317:tid 61331] [client 74.249.238.26:11649] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/h2.php"] [unique_id "af4wE8-fFk_CedOCOYshxAAAAUs"]
[Sat May 09 02:48:56.225776 2026] [:error] [pid 51009:tid 51078] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Sat May 09 02:48:56.439714 2026] [:error] [pid 51009:tid 51092] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/hehe.php
[Sat May 09 02:48:56.632341 2026] [:error] [pid 51009:tid 51091] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/a5e0a.php
[Sat May 09 02:48:56.824314 2026] [:error] [pid 51009:tid 51079] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Sat May 09 02:48:57.016410 2026] [:error] [pid 51009:tid 51086] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/ai.php
[Sat May 09 02:48:57.215816 2026] [:error] [pid 51009:tid 51097] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/rithin.php
[Sat May 09 02:48:57.419945 2026] [:error] [pid 51009:tid 51081] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/Cap.php
[Sat May 09 02:48:57.628026 2026] [:error] [pid 51009:tid 51098] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/xmu.php
[Sat May 09 02:48:58.154922 2026] [:error] [pid 51009:tid 51085] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Sat May 09 02:48:58.426286 2026] [:error] [pid 51009:tid 51100] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/motu.php
[Sat May 09 02:48:58.619551 2026] [:error] [pid 51009:tid 51094] [client 74.249.238.26:11659] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Sat May 09 02:48:58.807777 2026] [:error] [pid 51009:tid 51096] [client 74.249.238.26:11659] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "af4wGuB0GbUWhxgzX9WwWgAAAJQ"]
[Sat May 09 02:49:00.061285 2026] [:error] [pid 51007:tid 51040] [client 74.249.238.26:11633] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "af4wHFMagSGstWKyzzUqzAAAABI"]
[Sat May 09 02:49:01.500400 2026] [:error] [pid 51008:tid 51060] [client 74.249.238.26:11656] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "af4wHXB58C2Y1tgLtuLvIQAAAEs"]
[Sat May 09 02:49:03.047618 2026] [:error] [pid 61356:tid 61400] [client 74.249.238.26:11539] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "af4wH4x3vpB8oWhUq2NRGgAAAcw"]
[Sat May 09 02:49:06.072285 2026] [:error] [pid 61317:tid 61343] [client 74.249.238.26:11597] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "af4wIs-fFk_CedOCOYsh0QAAAVc"]
[Sat May 09 02:49:11.555184 2026] [:error] [pid 61317:tid 61320] [client 74.249.238.26:11646] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "af4wJ8-fFk_CedOCOYsh2wAAAUA"]
[Sat May 09 02:49:12.848115 2026] [:error] [pid 61355:tid 61377] [client 74.249.238.26:11624] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ta0ol.php"] [unique_id "af4wKPkhJTi30CBXmMln2AAAAZA"]
[Sat May 09 02:49:22.322317 2026] [:error] [pid 61355:tid 61375] [client 74.249.238.26:11647] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "af4wMvkhJTi30CBXmMln5QAAAY4"]
[Sat May 09 02:49:23.997787 2026] [:error] [pid 51113:tid 51121] [client 74.249.238.26:11686] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "af4wM0Qfs7sWtqkpQIem6AAAAMY"]
[Sat May 09 02:49:25.686159 2026] [:error] [pid 51008:tid 51064] [client 74.249.238.26:11662] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "af4wNXB58C2Y1tgLtuLvNQAAAE8"]
[Sat May 09 02:49:33.799380 2026] [:error] [pid 61356:tid 61391] [client 74.249.238.26:11655] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acc.php"] [unique_id "af4wPYx3vpB8oWhUq2NRTwAAAcM"]
[Sat May 09 02:49:37.345299 2026] [:error] [pid 51007:tid 51038] [client 74.249.238.26:11638] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "af4wQVMagSGstWKyzzUq-AAAABA"]
[Sat May 09 02:49:38.971178 2026] [:error] [pid 51008:tid 51067] [client 74.249.238.26:11629] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "af4wQnB58C2Y1tgLtuLvVwAAAFI"]
[Sat May 09 02:49:40.557802 2026] [:error] [pid 51009:tid 51084] [client 74.249.238.26:11698] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "af4wROB0GbUWhxgzX9WwmwAAAIg"]
[Sat May 09 02:49:44.984014 2026] [:error] [pid 61355:tid 61365] [client 74.249.238.26:11571] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/htto.php"] [unique_id "af4wSPkhJTi30CBXmMln-gAAAYQ"]
[Sat May 09 02:49:46.573794 2026] [:error] [pid 61355:tid 61367] [client 74.249.238.26:11525] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "af4wSvkhJTi30CBXmMloCAAAAYY"]
[Sat May 09 02:49:47.604400 2026] [:error] [pid 61355:tid 61365] [client 74.249.238.26:11575] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "af4wS_khJTi30CBXmMloEQAAAYQ"]
[Sat May 09 02:49:49.431459 2026] [:error] [pid 61355:tid 61368] [client 74.249.238.26:11623] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "af4wTfkhJTi30CBXmMloIwAAAYc"]
[Sat May 09 02:49:52.904771 2026] [:error] [pid 61355:tid 61367] [client 74.249.238.26:11580] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "af4wUPkhJTi30CBXmMloOAAAAYY"]
[Sat May 09 02:49:55.935995 2026] [:error] [pid 61355:tid 61380] [client 74.249.238.26:11631] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws75.php"] [unique_id "af4wU_khJTi30CBXmMloRgAAAZM"]
[Sat May 09 02:50:04.476760 2026] [:error] [pid 51007:tid 51043] [client 74.249.238.26:11677] File does not exist: /usr/local/apache/htdocs/suspended-page/ws75.php
[Sat May 09 02:50:04.668268 2026] [:error] [pid 51007:tid 51028] [client 74.249.238.26:11677] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Sat May 09 02:50:04.864904 2026] [:error] [pid 51007:tid 51042] [client 74.249.238.26:11677] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Sat May 09 02:50:05.055655 2026] [:error] [pid 51007:tid 51045] [client 74.249.238.26:11677] File does not exist: /usr/local/apache/htdocs/suspended-page/xfun.php
[Sat May 09 02:50:05.246779 2026] [:error] [pid 51007:tid 51036] [client 74.249.238.26:11677] File does not exist: /usr/local/apache/htdocs/suspended-page/ws73.php
[Sat May 09 02:50:05.631710 2026] [:error] [pid 51007:tid 51029] [client 74.249.238.26:11677] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat May 09 02:50:05.847287 2026] [:error] [pid 51007:tid 51034] [client 74.249.238.26:11677] File does not exist: /usr/local/apache/htdocs/suspended-page/green.php
[Sat May 09 02:50:06.065294 2026] [:error] [pid 51007:tid 51039] [client 74.249.238.26:11677] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Sat May 09 02:50:06.259325 2026] [:error] [pid 51007:tid 51025] [client 74.249.238.26:11677] File does not exist: /usr/local/apache/htdocs/suspended-page/ws84.php
[Sat May 09 02:50:06.464883 2026] [:error] [pid 51007:tid 51046] [client 74.249.238.26:11677] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Sat May 09 02:50:06.880974 2026] [:error] [pid 51007:tid 51035] [client 74.249.238.26:11677] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "af4wXlMagSGstWKyzzUrFQAAAA0"]
[Sat May 09 02:50:08.401668 2026] [:error] [pid 61356:tid 61399] [client 74.249.238.26:11569] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "af4wYIx3vpB8oWhUq2NRsQAAAcs"]
[Sat May 09 02:50:10.479512 2026] [:error] [pid 51009:tid 51076] [client 74.249.238.26:11603] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "af4wYuB0GbUWhxgzX9WwvAAAAIA"]
[Sat May 09 02:50:11.712042 2026] [:error] [pid 61317:tid 61332] [client 74.249.238.26:11579] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/vx.php"] [unique_id "af4wY8-fFk_CedOCOYsiEgAAAUw"]
[Sat May 09 02:50:13.398670 2026] [:error] [pid 61356:tid 61396] [client 74.249.238.26:11521] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "af4wZYx3vpB8oWhUq2NRvQAAAcg"]
[Sat May 09 02:50:23.865214 2026] [:error] [pid 61356:tid 61397] [client 74.249.238.26:11665] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "af4wb4x3vpB8oWhUq2NR2gAAAck"]
[Sat May 09 02:50:25.290775 2026] [:error] [pid 61317:tid 61336] [client 74.249.238.26:11550] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ctex1.php"] [unique_id "af4wcc-fFk_CedOCOYsiMQAAAVA"]
[Sat May 09 02:50:31.112700 2026] [:error] [pid 34318:tid 34342] [client 74.249.238.26:11687] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prosellers8.php"] [unique_id "af4wd8r3guirgJiKhzARpwAAARY"]
[Sat May 09 02:50:31.880366 2026] [:error] [pid 51007:tid 51025] [client 74.249.238.26:11601] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prosellers8.php"] [unique_id "af4wd1MagSGstWKyzzUrIQAAAAM"]
[Sat May 09 02:50:34.109189 2026] [:error] [pid 51113:tid 51124] [client 74.249.238.26:11608] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prosellers8.php"] [unique_id "af4wekQfs7sWtqkpQIenGwAAAMk"]
[Sat May 09 02:50:35.572920 2026] [:error] [pid 61356:tid 61407] [client 74.249.238.26:11622] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/prosellers8.php"] [unique_id "af4we4x3vpB8oWhUq2NR9wAAAdM"]
[Sat May 09 02:50:42.389109 2026] [:error] [pid 51009:tid 51089] [client 74.249.238.26:11520] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "af4wguB0GbUWhxgzX9Ww7AAAAI0"]
[Sat May 09 02:50:43.432736 2026] [:error] [pid 51007:tid 51038] [client 74.249.238.26:11604] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xsas.php"] [unique_id "af4wg1MagSGstWKyzzUrKAAAABA"]
[Sat May 09 02:50:55.881275 2026] [:error] [pid 51009:tid 51085] [client 74.249.238.26:11676] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "af4wj-B0GbUWhxgzX9WxDgAAAIk"]
[Sat May 09 02:51:07.997751 2026] [:error] [pid 51113:tid 51121] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/vx.php
[Sat May 09 02:51:08.187902 2026] [:error] [pid 51113:tid 51116] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Sat May 09 02:51:08.384393 2026] [:error] [pid 51113:tid 51133] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/bkyac.php
[Sat May 09 02:51:08.935668 2026] [:error] [pid 51113:tid 51131] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/userfuns.php
[Sat May 09 02:51:09.126246 2026] [:error] [pid 51113:tid 51129] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Sat May 09 02:51:09.319109 2026] [:error] [pid 51113:tid 51119] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Sat May 09 02:51:09.823172 2026] [:error] [pid 51113:tid 51137] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/yuzuru1.php
[Sat May 09 02:51:10.033289 2026] [:error] [pid 51113:tid 51128] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Sat May 09 02:51:10.223360 2026] [:error] [pid 51113:tid 51123] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/166.php
[Sat May 09 02:51:10.413024 2026] [:error] [pid 51113:tid 51139] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/cwclass.php
[Sat May 09 02:51:10.615940 2026] [:error] [pid 51113:tid 51138] [client 74.249.238.26:11702] File does not exist: /usr/local/apache/htdocs/suspended-page/0x.php
[Sat May 09 02:51:10.810414 2026] [:error] [pid 51113:tid 51120] [client 74.249.238.26:11702] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "af4wnkQfs7sWtqkpQIenYgAAAMU"]
[Sat May 09 02:51:12.244134 2026] [:error] [pid 51113:tid 51122] [client 74.249.238.26:11654] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "af4woEQfs7sWtqkpQIenZwAAAMc"]
[Sat May 09 02:51:15.653957 2026] [:error] [pid 51007:tid 51024] [client 74.249.238.26:11671] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "af4wo1MagSGstWKyzzUrZAAAAAI"]
[Sat May 09 02:51:18.435343 2026] [:error] [pid 61356:tid 61394] [client 74.249.238.26:11617] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/radio.php"] [unique_id "af4wpox3vpB8oWhUq2NSGAAAAcY"]
[Sat May 09 02:51:19.501316 2026] [:error] [pid 51009:tid 51094] [client 74.249.238.26:11700] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "af4wp-B0GbUWhxgzX9WxZAAAAJI"]
[Sat May 09 02:51:20.901778 2026] [:error] [pid 61355:tid 61385] [client 74.249.238.26:11528] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "af4wqPkhJTi30CBXmMlpIQAAAZg"]
[Sat May 09 02:51:23.707736 2026] [:error] [pid 51113:tid 51137] [client 74.249.238.26:11708] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "af4wq0Qfs7sWtqkpQIenaQAAANY"]
[Sat May 09 02:51:24.858826 2026] [:error] [pid 51008:tid 51051] [client 74.249.238.26:11589] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zoper1.php"] [unique_id "af4wrHB58C2Y1tgLtuLvpwAAAEI"]
[Sat May 09 02:51:26.119999 2026] [:error] [pid 61317:tid 61335] [client 74.249.238.26:11688] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/144.php"] [unique_id "af4wrs-fFk_CedOCOYsicQAAAU8"]
[Sat May 09 02:51:29.044615 2026] [:error] [pid 34318:tid 34333] [client 74.249.238.26:11682] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/144.php"] [unique_id "af4wscr3guirgJiKhzASkwAAAQ0"]
[Sat May 09 02:51:31.645057 2026] [:error] [pid 61317:tid 61320] [client 74.249.238.26:11594] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/144.php"] [unique_id "af4ws8-fFk_CedOCOYsifgAAAUA"]
[Sat May 09 02:51:32.518504 2026] [:error] [pid 51009:tid 51080] [client 74.249.238.26:11540] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/144.php"] [unique_id "af4wtOB0GbUWhxgzX9WxfAAAAIQ"]
[Sat May 09 02:51:35.187708 2026] [:error] [pid 51009:tid 51087] [client 74.249.238.26:11679] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "af4wt-B0GbUWhxgzX9WxhQAAAIs"]
[Sat May 09 02:51:36.287383 2026] [:error] [pid 51008:tid 51053] [client 74.249.238.26:11572] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aligk.php"] [unique_id "af4wuHB58C2Y1tgLtuLvrAAAAEQ"]
[Sat May 09 02:51:51.591450 2026] [:error] [pid 61355:tid 61370] [client 74.249.238.26:11606] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfd.php"] [unique_id "af4wx_khJTi30CBXmMlpewAAAYk"]
[Sat May 09 02:51:52.757169 2026] [:error] [pid 61356:tid 61400] [client 74.249.238.26:11553] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfd.php"] [unique_id "af4wyIx3vpB8oWhUq2NSOQAAAcw"]
[Sat May 09 02:51:55.024592 2026] [:error] [pid 51007:tid 51042] [client 74.249.238.26:11531] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfd.php"] [unique_id "af4wy1MagSGstWKyzzUrggAAABQ"]
[Sat May 09 02:51:56.394621 2026] [:error] [pid 61355:tid 61363] [client 74.249.238.26:11529] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gfd.php"] [unique_id "af4wzPkhJTi30CBXmMlphgAAAYI"]
[Sat May 09 02:51:58.700813 2026] [:error] [pid 61356:tid 61411] [client 74.249.238.26:11690] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/auth.php"] [unique_id "af4wzox3vpB8oWhUq2NSPwAAAdc"]
[Sat May 09 02:52:00.717721 2026] [:error] [pid 51009:tid 51080] [client 74.249.238.26:11613] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/auth.php"] [unique_id "af4w0OB0GbUWhxgzX9WxvwAAAIQ"]
[Sat May 09 02:52:01.988812 2026] [:error] [pid 61317:tid 61325] [client 74.249.238.26:11691] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/auth.php"] [unique_id "af4w0c-fFk_CedOCOYsilgAAAUU"]
[Sat May 09 02:52:03.398230 2026] [:error] [pid 61317:tid 61322] [client 74.249.238.26:11599] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/auth.php"] [unique_id "af4w08-fFk_CedOCOYsimgAAAUI"]
[Sat May 09 02:52:04.353884 2026] [:error] [pid 61317:tid 61328] [client 74.249.238.26:11592] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rip.php"] [unique_id "af4w1M-fFk_CedOCOYsinAAAAUg"]
[Sat May 09 02:52:15.663435 2026] [:error] [pid 51113:tid 51123] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat May 09 02:52:15.871000 2026] [:error] [pid 51113:tid 51139] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Sat May 09 02:52:16.073948 2026] [:error] [pid 51113:tid 51120] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/baixy.php
[Sat May 09 02:52:16.262804 2026] [:error] [pid 51113:tid 51132] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/ccs.php
[Sat May 09 02:52:16.452272 2026] [:error] [pid 51113:tid 51134] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/55b76.php
[Sat May 09 02:52:16.911910 2026] [:error] [pid 51113:tid 51118] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/elp.php
[Sat May 09 02:52:17.101359 2026] [:error] [pid 51113:tid 51130] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/lm15.php
[Sat May 09 02:52:17.304303 2026] [:error] [pid 51113:tid 51125] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/2ksm17n.php
[Sat May 09 02:52:17.495063 2026] [:error] [pid 51113:tid 51115] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/8.php
[Sat May 09 02:52:17.684418 2026] [:error] [pid 51113:tid 51122] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/xper1.php
[Sat May 09 02:52:17.889156 2026] [:error] [pid 51113:tid 51127] [client 74.249.238.26:11621] File does not exist: /usr/local/apache/htdocs/suspended-page/bnm.php
[Sat May 09 02:52:18.090486 2026] [:error] [pid 51113:tid 51117] [client 74.249.238.26:11621] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "af4w4kQfs7sWtqkpQIenlwAAAMI"]
[Sat May 09 02:52:19.432356 2026] [:error] [pid 61355:tid 61382] [client 74.249.238.26:11650] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "af4w4_khJTi30CBXmMlpngAAAZU"]
[Sat May 09 02:52:21.914726 2026] [:error] [pid 61355:tid 61371] [client 74.249.238.26:11694] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "af4w5fkhJTi30CBXmMlpoQAAAYo"]
[Sat May 09 02:52:24.861029 2026] [:error] [pid 51008:tid 51057] [client 74.249.238.26:11552] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vanda.php"] [unique_id "af4w6HB58C2Y1tgLtuLvzwAAAEg"]
[Sat May 09 02:52:28.941475 2026] [:error] [pid 51113:tid 51134] [client 74.249.238.26:11658] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "af4w7EQfs7sWtqkpQIenoAAAANM"]
[Sat May 09 02:52:46.760189 2026] [:error] [pid 34318:tid 34344] [client 74.249.238.26:11704] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "af4w_sr3guirgJiKhzAS0AAAARg"]
[Sat May 09 02:52:52.359077 2026] [:error] [pid 61355:tid 61362] [client 74.249.238.26:11585] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "af4xBPkhJTi30CBXmMlpzwAAAYE"]
[Sat May 09 02:52:56.601330 2026] [:error] [pid 34318:tid 34339] [client 74.249.238.26:11548] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "af4xCMr3guirgJiKhzAS0wAAARM"]
[Sat May 09 02:52:57.469116 2026] [:error] [pid 61355:tid 61371] [client 74.249.238.26:11526] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "af4xCfkhJTi30CBXmMlp2wAAAYo"]
[Sat May 09 02:53:15.014835 2026] [:error] [pid 34318:tid 34321] [client 74.249.238.26:11696] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "af4xG8r3guirgJiKhzAS2AAAAQE"]
[Sat May 09 02:53:16.067011 2026] [:error] [pid 51008:tid 51050] [client 74.249.238.26:11605] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lb.php"] [unique_id "af4xHHB58C2Y1tgLtuLv7gAAAEE"]
[Sat May 09 02:53:18.593152 2026] [:error] [pid 61356:tid 61412] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/lb.php
[Sat May 09 02:53:18.818681 2026] [:error] [pid 61356:tid 61402] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/abrand.php
[Sat May 09 02:53:19.010142 2026] [:error] [pid 61356:tid 61407] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/ws49.php
[Sat May 09 02:53:19.597250 2026] [:error] [pid 61356:tid 61411] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Sat May 09 02:53:19.807811 2026] [:error] [pid 61356:tid 61403] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/56c53.php
[Sat May 09 02:53:20.087171 2026] [:error] [pid 61356:tid 61392] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/d12.php
[Sat May 09 02:53:20.281529 2026] [:error] [pid 61356:tid 61390] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Sat May 09 02:53:20.623796 2026] [:error] [pid 61356:tid 61396] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/inege.php
[Sat May 09 02:53:21.107703 2026] [:error] [pid 61356:tid 61393] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/8573.php
[Sat May 09 02:53:21.305480 2026] [:error] [pid 61356:tid 61404] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Sat May 09 02:53:21.507819 2026] [:error] [pid 61356:tid 61408] [client 74.249.238.26:11664] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Sat May 09 02:53:21.701297 2026] [:error] [pid 61356:tid 61389] [client 74.249.238.26:11664] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eetu.php"] [unique_id "af4xIYx3vpB8oWhUq2NTCQAAAcE"]
[Sat May 09 02:53:23.747870 2026] [:error] [pid 51008:tid 51064] [client 74.249.238.26:11710] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eetu.php"] [unique_id "af4xI3B58C2Y1tgLtuLv8QAAAE8"]
[Sat May 09 02:53:28.281461 2026] [:error] [pid 51008:tid 51059] [client 74.249.238.26:11648] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eetu.php"] [unique_id "af4xKHB58C2Y1tgLtuLv9QAAAEo"]
[Sat May 09 02:53:30.633477 2026] [:error] [pid 51007:tid 51043] [client 74.249.238.26:11660] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/eetu.php"] [unique_id "af4xKlMagSGstWKyzzUrpAAAABU"]
[Sat May 09 02:53:45.730303 2026] [:error] [pid 51007:tid 51033] [client 74.249.238.26:11685] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/drykl.php"] [unique_id "af4xOVMagSGstWKyzzUrrwAAAAs"]
[Sat May 09 02:53:50.171397 2026] [:error] [pid 51113:tid 51127] [client 74.249.238.26:11666] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "af4xPkQfs7sWtqkpQIen2gAAAMw"]
[Sat May 09 02:53:52.583664 2026] [:error] [pid 34318:tid 34326] [client 74.249.238.26:11740] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "af4xQMr3guirgJiKhzATAwAAAQY"]
[Sat May 09 02:53:54.124881 2026] [:error] [pid 61317:tid 61338] [client 74.249.238.26:11644] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "af4xQs-fFk_CedOCOYsi6gAAAVI"]
[Sat May 09 02:53:55.349308 2026] [:error] [pid 61317:tid 61341] [client 74.249.238.26:11559] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "af4xQ8-fFk_CedOCOYsi6wAAAVU"]
[Sat May 09 02:53:58.660971 2026] [:error] [pid 61317:tid 61339] [client 74.249.238.26:11663] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "af4xRs-fFk_CedOCOYsi7gAAAVM"]
[Sat May 09 02:54:00.284631 2026] [:error] [pid 61317:tid 61325] [client 74.249.238.26:11646] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "af4xSM-fFk_CedOCOYsi7wAAAUU"]
[Sat May 09 02:54:04.836294 2026] [:error] [pid 51113:tid 51136] [client 74.249.238.26:11542] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "af4xTEQfs7sWtqkpQIen7wAAANU"]
[Sat May 09 02:54:08.420771 2026] [:error] [pid 51008:tid 51058] [client 74.249.238.26:11584] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "af4xUHB58C2Y1tgLtuLwCwAAAEk"]
[Sat May 09 02:54:11.470442 2026] [:error] [pid 61355:tid 61381] [client 74.249.238.26:11647] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "af4xU_khJTi30CBXmMlqbwAAAZQ"]
[Sat May 09 02:54:13.889636 2026] [:error] [pid 34318:tid 34322] [client 74.249.238.26:11657] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "af4xVcr3guirgJiKhzATFQAAAQI"]
[Sat May 09 02:54:18.010983 2026] [:error] [pid 61355:tid 61368] [client 74.249.238.26:11656] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "af4xWvkhJTi30CBXmMlqgQAAAYc"]
[Sat May 09 02:54:36.172170 2026] [:error] [pid 51008:tid 51060] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/wo.php
[Sat May 09 02:54:36.729510 2026] [:error] [pid 51008:tid 51069] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/ljbluatr.php
[Sat May 09 02:54:36.922474 2026] [:error] [pid 51008:tid 51054] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/luuinooe.php
[Sat May 09 02:54:37.244072 2026] [:error] [pid 51008:tid 51055] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/qqdwwzge.php
[Sat May 09 02:54:37.436896 2026] [:error] [pid 51008:tid 51065] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/jid0mtxz.php
[Sat May 09 02:54:38.851654 2026] [:error] [pid 51008:tid 51065] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/izgatewp.php
[Sat May 09 02:54:39.193539 2026] [:error] [pid 51008:tid 51061] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/gh.php
[Sat May 09 02:54:39.414049 2026] [:error] [pid 51008:tid 51062] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/groupon.php
[Sat May 09 02:54:39.718968 2026] [:error] [pid 51008:tid 51056] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/lupo.php
[Sat May 09 02:54:39.929030 2026] [:error] [pid 51008:tid 51063] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/villain.php
[Sat May 09 02:54:40.121878 2026] [:error] [pid 51008:tid 51051] [client 74.249.238.26:11637] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX6.php
[Sat May 09 02:54:40.309402 2026] [:error] [pid 51008:tid 51072] [client 74.249.238.26:11637] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX7.php"] [unique_id "af4xcHB58C2Y1tgLtuLwMgAAAFc"]
[Sat May 09 02:54:43.899133 2026] [:error] [pid 34318:tid 34340] [client 74.249.238.26:11659] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX7.php"] [unique_id "af4xc8r3guirgJiKhzATHAAAARQ"]
[Sat May 09 02:54:51.845180 2026] [:error] [pid 51113:tid 51117] [client 74.249.238.26:11524] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX7.php"] [unique_id "af4xe0Qfs7sWtqkpQIeoEAAAAMI"]
[Sat May 09 02:54:55.799277 2026] [:error] [pid 51009:tid 51085] [client 74.249.238.26:11575] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX4.php"] [unique_id "af4xf-B0GbUWhxgzX9WyjwAAAIk"]
[Sat May 09 02:54:59.458700 2026] [:error] [pid 61317:tid 61320] [client 74.249.238.26:11629] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX4.php"] [unique_id "af4xg8-fFk_CedOCOYsjLwAAAUA"]
[Sat May 09 02:55:14.102361 2026] [:error] [pid 61356:tid 61391] [client 74.249.238.26:11601] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX5.php"] [unique_id "af4xkox3vpB8oWhUq2NTlgAAAcM"]
[Sat May 09 02:55:30.200139 2026] [:error] [pid 61356:tid 61403] [client 74.249.238.26:11641] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX3.php"] [unique_id "af4xoox3vpB8oWhUq2NTyQAAAc8"]
[Sat May 09 02:55:31.070071 2026] [:error] [pid 61317:tid 61320] [client 74.249.238.26:11571] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX3.php"] [unique_id "af4xo8-fFk_CedOCOYsjQgAAAUA"]
[Sat May 09 02:55:32.422434 2026] [:error] [pid 61356:tid 61392] [client 74.249.238.26:11612] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX3.php"] [unique_id "af4xpIx3vpB8oWhUq2NTzgAAAcQ"]
[Sat May 09 02:55:39.954283 2026] [:error] [pid 51113:tid 51127] [client 74.249.238.26:11597] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX3.php"] [unique_id "af4xq0Qfs7sWtqkpQIeoQQAAAMw"]
[Sat May 09 02:55:43.300979 2026] [:error] [pid 61355:tid 61367] [client 74.249.238.26:11634] File does not exist: /usr/local/apache/htdocs/suspended-page/wper.php
[Sat May 09 02:55:43.491746 2026] [:error] [pid 61355:tid 61362] [client 74.249.238.26:11634] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sx9.php
[Sat May 09 02:55:44.986515 2026] [:error] [pid 61355:tid 61362] [client 74.249.238.26:11634] File does not exist: /usr/local/apache/htdocs/suspended-page/ibjnu.php
[Sat May 09 02:55:45.193749 2026] [:error] [pid 61355:tid 61375] [client 74.249.238.26:11634] File does not exist: /usr/local/apache/htdocs/suspended-page/sk25_1.php
[Sat May 09 02:55:45.409457 2026] [:error] [pid 61355:tid 61367] [client 74.249.238.26:11634] File does not exist: /usr/local/apache/htdocs/suspended-page/insta.php
[Sat May 09 02:55:46.009249 2026] [:error] [pid 61355:tid 61362] [client 74.249.238.26:11634] File does not exist: /usr/local/apache/htdocs/suspended-page/dgs.php
[Sat May 09 02:55:46.201273 2026] [:error] [pid 61355:tid 61376] [client 74.249.238.26:11634] File does not exist: /usr/local/apache/htdocs/suspended-page/xigmltad.php
[Sat May 09 02:55:46.394800 2026] [:error] [pid 61355:tid 61377] [client 74.249.238.26:11634] File does not exist: /usr/local/apache/htdocs/suspended-page/fff.php
[Sat May 09 02:55:46.593295 2026] [:error] [pid 61355:tid 61367] [client 74.249.238.26:11634] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Sat May 09 02:55:46.923518 2026] [:error] [pid 61355:tid 61371] [client 74.249.238.26:11634] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/academy.php"] [unique_id "af4xsvkhJTi30CBXmMlrDwAAAYo"]
[Sat May 09 02:55:48.644836 2026] [:error] [pid 61355:tid 61379] [client 74.249.238.26:11652] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/academy.php"] [unique_id "af4xtPkhJTi30CBXmMlrEwAAAZI"]
[Sat May 09 02:55:51.859647 2026] [:error] [pid 61317:tid 61325] [client 74.249.238.26:11668] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/academy.php"] [unique_id "af4xt8-fFk_CedOCOYsjfwAAAUU"]
[Sat May 09 02:56:00.608288 2026] [:error] [pid 51009:tid 51085] [client 74.249.238.26:11593] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/academy.php"] [unique_id "af4xwOB0GbUWhxgzX9WyvwAAAIk"]
[Sat May 09 02:56:08.352163 2026] [:error] [pid 51113:tid 51124] [client 74.249.238.26:11632] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lco.php"] [unique_id "af4xyEQfs7sWtqkpQIeoTgAAAMk"]
[Sat May 09 02:56:08.925935 2026] [:error] [pid 51009:tid 51077] [client 74.249.238.26:11589] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lco.php"] [unique_id "af4xyOB0GbUWhxgzX9WyzAAAAIE"]
[Sat May 09 02:56:10.694433 2026] [:error] [pid 51008:tid 51056] [client 74.249.238.26:11703] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lco.php"] [unique_id "af4xynB58C2Y1tgLtuLwmAAAAEc"]
[Sat May 09 02:56:11.986251 2026] [:error] [pid 61355:tid 61373] [client 74.249.238.26:11627] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lco.php"] [unique_id "af4xy_khJTi30CBXmMlrMwAAAYw"]
[Sat May 09 02:56:18.798141 2026] [:error] [pid 51008:tid 51049] [client 74.249.238.26:11645] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lgr.php"] [unique_id "af4x0nB58C2Y1tgLtuLwnAAAAEA"]
[Sat May 09 02:56:28.426878 2026] [:error] [pid 61317:tid 61332] [client 74.249.238.26:11636] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mac.php"] [unique_id "af4x3M-fFk_CedOCOYsjsAAAAUw"]
[Sat May 09 02:56:29.759215 2026] [:error] [pid 51009:tid 51088] [client 74.249.238.26:11677] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mac.php"] [unique_id "af4x3eB0GbUWhxgzX9Wy9wAAAIw"]
[Sat May 09 02:56:32.164760 2026] [:error] [pid 51009:tid 51099] [client 74.249.238.26:11667] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mac.php"] [unique_id "af4x4OB0GbUWhxgzX9Wy-gAAAJc"]
[Sat May 09 02:56:33.197510 2026] [:error] [pid 51113:tid 51116] [client 74.249.238.26:11616] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mac.php"] [unique_id "af4x4UQfs7sWtqkpQIeoYgAAAME"]
[Sat May 09 02:56:36.830930 2026] [:error] [pid 61355:tid 61378] [client 74.249.238.26:11688] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "af4x5PkhJTi30CBXmMlrawAAAZE"]
[Sat May 09 02:56:44.500082 2026] [:error] [pid 51009:tid 51089] [client 74.249.238.26:11619] [client 74.249.238.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wgift1.php"] [unique_id "af4x7OB0GbUWhxgzX9WzAgAAAI0"]
[Sat May 09 02:56:46.867938 2026] [:error] [pid 51113:tid 51124] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/wgift1.php
[Sat May 09 02:56:47.059177 2026] [:error] [pid 51113:tid 51115] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/wglum1.php
[Sat May 09 02:56:47.250219 2026] [:error] [pid 51113:tid 51117] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/awa.php
[Sat May 09 02:56:47.621688 2026] [:error] [pid 51113:tid 51120] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/lti.php
[Sat May 09 02:56:47.842700 2026] [:error] [pid 51113:tid 51126] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/solo1.php
[Sat May 09 02:56:48.034222 2026] [:error] [pid 51113:tid 51133] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/sxdfrt.php
[Sat May 09 02:56:48.225638 2026] [:error] [pid 51113:tid 51132] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/vgtyu.php
[Sat May 09 02:56:48.418501 2026] [:error] [pid 51113:tid 51129] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/kikikoko.php
[Sat May 09 02:56:48.820044 2026] [:error] [pid 51113:tid 51139] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Sat May 09 02:56:49.255354 2026] [:error] [pid 51113:tid 51131] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/gelio1.php
[Sat May 09 02:56:49.447717 2026] [:error] [pid 51113:tid 51135] [client 74.249.238.26:11594] File does not exist: /usr/local/apache/htdocs/suspended-page/xwpg.php
[Sat May 09 03:11:12.216313 2026] [:error] [pid 61355:tid 61383] [client 20.63.39.182:5065] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Sat May 09 03:11:12.438034 2026] [:error] [pid 61355:tid 61382] [client 20.63.39.182:5065] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-thi.php
[Sat May 09 03:11:12.652639 2026] [:error] [pid 61355:tid 61369] [client 20.63.39.182:5065] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-slss.php
[Sat May 09 03:11:12.870257 2026] [:error] [pid 61355:tid 61380] [client 20.63.39.182:5065] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Sat May 09 03:11:13.097186 2026] [:error] [pid 61355:tid 61378] [client 20.63.39.182:5065] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Sat May 09 03:11:13.311509 2026] [:error] [pid 61355:tid 61366] [client 20.63.39.182:5065] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Sat May 09 03:11:13.591561 2026] [:error] [pid 61355:tid 61365] [client 20.63.39.182:5065] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Sat May 09 03:11:13.992062 2026] [:error] [pid 61355:tid 61361] [client 20.63.39.182:5065] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Sat May 09 03:11:14.210470 2026] [:error] [pid 61355:tid 61368] [client 20.63.39.182:5065] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Sat May 09 03:11:14.429053 2026] [:error] [pid 61355:tid 61375] [client 20.63.39.182:5065] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Sat May 09 03:11:14.639567 2026] [:error] [pid 61355:tid 61367] [client 20.63.39.182:5065] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "af41UvkhJTi30CBXmMlxFAAAAYY"]
[Sat May 09 03:11:15.837358 2026] [:error] [pid 51009:tid 51083] [client 20.63.39.182:5092] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "af41U-B0GbUWhxgzX9W5aAAAAIc"]
[Sat May 09 03:11:16.428438 2026] [:error] [pid 61317:tid 61322] [client 20.63.39.182:5073] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "af41VM-fFk_CedOCOYsnSwAAAUI"]
[Sat May 09 03:11:16.909172 2026] [:error] [pid 51113:tid 51134] [client 20.63.39.182:5118] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "af41VEQfs7sWtqkpQIeqQgAAANM"]
[Sat May 09 03:11:17.449799 2026] [:error] [pid 61317:tid 61329] [client 20.63.39.182:5088] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "af41Vc-fFk_CedOCOYsnTQAAAUk"]
[Sat May 09 03:11:18.114800 2026] [:error] [pid 51009:tid 51079] [client 20.63.39.182:5095] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "af41VuB0GbUWhxgzX9W5bgAAAIM"]
[Sat May 09 03:11:18.947538 2026] [:error] [pid 61317:tid 61323] [client 20.63.39.182:5057] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "af41Vs-fFk_CedOCOYsnUAAAAUM"]
[Sat May 09 03:11:19.646749 2026] [:error] [pid 61355:tid 61366] [client 20.63.39.182:5076] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "af41V_khJTi30CBXmMlxGgAAAYU"]
[Sat May 09 03:11:20.251712 2026] [:error] [pid 61355:tid 61377] [client 20.63.39.182:4996] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "af41WPkhJTi30CBXmMlxHQAAAZA"]
[Sat May 09 03:11:20.751403 2026] [:error] [pid 61317:tid 61324] [client 20.63.39.182:5064] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "af41WM-fFk_CedOCOYsnVAAAAUQ"]
[Sat May 09 03:11:21.332571 2026] [:error] [pid 61317:tid 61341] [client 20.63.39.182:5069] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "af41Wc-fFk_CedOCOYsnVgAAAVU"]
[Sat May 09 03:11:22.087034 2026] [:error] [pid 51009:tid 51088] [client 20.63.39.182:5113] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "af41WuB0GbUWhxgzX9W5eQAAAIw"]
[Sat May 09 03:11:22.745203 2026] [:error] [pid 61355:tid 61379] [client 20.63.39.182:5059] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "af41WvkhJTi30CBXmMlxLQAAAZI"]
[Sat May 09 03:11:23.395009 2026] [:error] [pid 51007:tid 51044] [client 20.63.39.182:5093] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "af41W1MagSGstWKyzzUunQAAABY"]
[Sat May 09 03:11:24.100510 2026] [:error] [pid 61355:tid 61384] [client 20.63.39.182:5001] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "af41XPkhJTi30CBXmMlxQAAAAZc"]
[Sat May 09 03:11:24.754027 2026] [:error] [pid 61317:tid 61328] [client 20.63.39.182:4994] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yellow.php"] [unique_id "af41XM-fFk_CedOCOYsnXQAAAUg"]
[Sat May 09 03:11:25.264900 2026] [:error] [pid 51009:tid 51076] [client 20.63.39.182:5115] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "af41XeB0GbUWhxgzX9W5fwAAAIA"]
[Sat May 09 03:11:25.711374 2026] [:error] [pid 61355:tid 61362] [client 20.63.39.182:5005] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "af41XfkhJTi30CBXmMlxUQAAAYE"]
[Sat May 09 03:11:26.168405 2026] [:error] [pid 61355:tid 61366] [client 20.63.39.182:5108] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "af41XvkhJTi30CBXmMlxWAAAAYU"]
[Sat May 09 03:11:26.696093 2026] [:error] [pid 61355:tid 61372] [client 20.63.39.182:5024] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "af41XvkhJTi30CBXmMlxYAAAAYs"]
[Sat May 09 03:11:27.240389 2026] [:error] [pid 51007:tid 51026] [client 20.63.39.182:5086] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "af41X1MagSGstWKyzzUupQAAAAQ"]
[Sat May 09 03:11:27.718026 2026] [:error] [pid 51008:tid 51066] [client 20.63.39.182:5070] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "af41X3B58C2Y1tgLtuLzvwAAAFE"]
[Sat May 09 03:11:28.390736 2026] [:error] [pid 51009:tid 51082] [client 20.63.39.182:4999] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "af41YOB0GbUWhxgzX9W5lwAAAIY"]
[Sat May 09 03:11:28.913392 2026] [:error] [pid 61355:tid 61371] [client 20.63.39.182:5116] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "af41YPkhJTi30CBXmMlxfwAAAYo"]
[Sat May 09 03:11:29.480353 2026] [:error] [pid 51009:tid 51076] [client 20.63.39.182:5067] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "af41YeB0GbUWhxgzX9W5oQAAAIA"]
[Sat May 09 03:11:30.010706 2026] [:error] [pid 51008:tid 51061] [client 20.63.39.182:5006] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "af41YnB58C2Y1tgLtuLz0gAAAEw"]
[Sat May 09 03:11:30.475811 2026] [:error] [pid 51007:tid 51037] [client 20.63.39.182:5103] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "af41YlMagSGstWKyzzUuqwAAAA8"]
[Sat May 09 03:11:30.974697 2026] [:error] [pid 51113:tid 51136] [client 20.63.39.182:5083] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "af41YkQfs7sWtqkpQIeqRAAAANU"]
[Sat May 09 03:11:31.458055 2026] [:error] [pid 61355:tid 61379] [client 20.63.39.182:5100] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "af41Y_khJTi30CBXmMlxoQAAAZI"]
[Sat May 09 03:11:31.890068 2026] [:error] [pid 61355:tid 61375] [client 20.63.39.182:5090] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "af41Y_khJTi30CBXmMlxqQAAAY4"]
[Sat May 09 03:11:32.347422 2026] [:error] [pid 61355:tid 61371] [client 20.63.39.182:5004] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "af41ZPkhJTi30CBXmMlxsQAAAYo"]
[Sat May 09 03:11:32.790531 2026] [:error] [pid 51009:tid 51083] [client 20.63.39.182:5018] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "af41ZOB0GbUWhxgzX9W5tgAAAIc"]
[Sat May 09 03:11:33.281973 2026] [:error] [pid 51009:tid 51086] [client 20.63.39.182:5052] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "af41ZeB0GbUWhxgzX9W5uwAAAIo"]
[Sat May 09 03:11:33.763048 2026] [:error] [pid 51009:tid 51082] [client 20.63.39.182:5009] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "af41ZeB0GbUWhxgzX9W5vgAAAIY"]
[Sat May 09 03:11:34.247711 2026] [:error] [pid 51113:tid 51130] [client 20.63.39.182:4928] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "af41ZkQfs7sWtqkpQIeqSgAAAM8"]
[Sat May 09 03:11:34.685662 2026] [:error] [pid 51113:tid 51139] [client 20.63.39.182:5061] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "af41ZkQfs7sWtqkpQIeqTQAAANg"]
[Sat May 09 03:11:35.202993 2026] [:error] [pid 51009:tid 51086] [client 20.63.39.182:5053] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "af41Z-B0GbUWhxgzX9W5yAAAAIo"]
[Sat May 09 03:11:35.677964 2026] [:error] [pid 51009:tid 51093] [client 20.63.39.182:5110] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "af41Z-B0GbUWhxgzX9W5zAAAAJE"]
[Sat May 09 03:11:36.152511 2026] [:error] [pid 61355:tid 61375] [client 20.63.39.182:5077] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "af41aPkhJTi30CBXmMlx7wAAAY4"]
[Sat May 09 03:11:36.600018 2026] [:error] [pid 61356:tid 61399] [client 20.63.39.182:5071] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "af41aIx3vpB8oWhUq2NZhwAAAcs"]
[Sat May 09 03:11:37.061504 2026] [:error] [pid 51007:tid 51023] [client 20.63.39.182:4997] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "af41aVMagSGstWKyzzUuswAAAAE"]
[Sat May 09 03:11:37.572900 2026] [:error] [pid 51008:tid 51058] [client 20.63.39.182:5112] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "af41aXB58C2Y1tgLtuLz7QAAAEk"]
[Sat May 09 03:11:38.102592 2026] [:error] [pid 61356:tid 61409] [client 20.63.39.182:5040] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "af41aox3vpB8oWhUq2NZjgAAAdU"]
[Sat May 09 03:11:38.599026 2026] [:error] [pid 51008:tid 51071] [client 20.63.39.182:4932] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "af41anB58C2Y1tgLtuLz8AAAAFY"]
[Sat May 09 03:11:39.066894 2026] [:error] [pid 51008:tid 51063] [client 20.63.39.182:4998] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-firewall.php"] [unique_id "af41a3B58C2Y1tgLtuLz8QAAAE4"]
[Sat May 09 03:11:39.532494 2026] [:error] [pid 51009:tid 51079] [client 20.63.39.182:5058] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-firewall.php"] [unique_id "af41a-B0GbUWhxgzX9W54wAAAIM"]
[Sat May 09 03:11:39.957442 2026] [:error] [pid 51009:tid 51084] [client 20.63.39.182:5089] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-firewall.php"] [unique_id "af41a-B0GbUWhxgzX9W56AAAAIg"]
[Sat May 09 03:11:40.375382 2026] [:error] [pid 51008:tid 51053] [client 20.63.39.182:4993] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-firewall.php"] [unique_id "af41bHB58C2Y1tgLtuLz9QAAAEQ"]
[Sat May 09 03:11:40.813082 2026] [:error] [pid 51113:tid 51133] [client 20.63.39.182:5060] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "af41bEQfs7sWtqkpQIeqTwAAANI"]
[Sat May 09 03:11:41.248861 2026] [:error] [pid 51113:tid 51122] [client 20.63.39.182:5098] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "af41bUQfs7sWtqkpQIeqVAAAAMc"]
[Sat May 09 03:11:41.738271 2026] [:error] [pid 51008:tid 51070] [client 20.63.39.182:5066] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "af41bXB58C2Y1tgLtuLz-AAAAFU"]
[Sat May 09 03:11:42.197728 2026] [:error] [pid 61356:tid 61391] [client 20.63.39.182:5072] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "af41box3vpB8oWhUq2NZlQAAAcM"]
[Sat May 09 03:11:42.645741 2026] [:error] [pid 61356:tid 61400] [client 20.63.39.182:5081] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "af41box3vpB8oWhUq2NZmAAAAcw"]
[Sat May 09 03:11:43.176040 2026] [:error] [pid 51009:tid 51089] [client 20.63.39.182:5020] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "af41b-B0GbUWhxgzX9W6AQAAAI0"]
[Sat May 09 03:11:43.608288 2026] [:error] [pid 51007:tid 51031] [client 20.63.39.182:5016] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "af41b1MagSGstWKyzzUuvwAAAAk"]
[Sat May 09 03:11:44.042964 2026] [:error] [pid 51009:tid 51094] [client 20.63.39.182:4992] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "af41cOB0GbUWhxgzX9W6CgAAAJI"]
[Sat May 09 03:11:44.473260 2026] [:error] [pid 61356:tid 61397] [client 20.63.39.182:5049] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "af41cIx3vpB8oWhUq2NZnAAAAck"]
[Sat May 09 03:11:44.936007 2026] [:error] [pid 61317:tid 61338] [client 20.63.39.182:5010] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "af41cM-fFk_CedOCOYsnbAAAAVI"]
[Sat May 09 03:11:45.374654 2026] [:error] [pid 34318:tid 34338] [client 20.63.39.182:5078] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "af41ccr3guirgJiKhzAWhAAAARI"]
[Sat May 09 03:11:45.824825 2026] [:error] [pid 51113:tid 51135] [client 20.63.39.182:5063] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "af41cUQfs7sWtqkpQIeqXgAAANQ"]
[Sat May 09 03:11:46.263807 2026] [:error] [pid 34318:tid 34332] [client 20.63.39.182:5039] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "af41csr3guirgJiKhzAWhgAAAQw"]
[Sat May 09 03:11:46.699498 2026] [:error] [pid 61355:tid 61385] [client 20.63.39.182:5082] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "af41cvkhJTi30CBXmMlyGwAAAZg"]
[Sat May 09 03:11:47.137284 2026] [:error] [pid 34318:tid 34322] [client 20.63.39.182:5104] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "af41c8r3guirgJiKhzAWhwAAAQI"]
[Sat May 09 03:11:47.566584 2026] [:error] [pid 51009:tid 51081] [client 20.63.39.182:5080] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "af41c-B0GbUWhxgzX9W6HQAAAIU"]
[Sat May 09 03:11:47.997127 2026] [:error] [pid 51007:tid 51035] [client 20.63.39.182:4933] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "af41c1MagSGstWKyzzUuxQAAAA0"]
[Sat May 09 03:11:48.493151 2026] [:error] [pid 51008:tid 51071] [client 20.63.39.182:5056] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "af41dHB58C2Y1tgLtuL0BAAAAFY"]
[Sat May 09 03:11:49.020772 2026] [:error] [pid 61317:tid 61327] [client 20.63.39.182:5002] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "af41dc-fFk_CedOCOYsnbwAAAUc"]
[Sat May 09 03:11:49.501900 2026] [:error] [pid 51007:tid 51044] [client 20.63.39.182:5038] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "af41dVMagSGstWKyzzUuyAAAABY"]
[Sat May 09 03:11:49.931824 2026] [:error] [pid 51009:tid 51089] [client 20.63.39.182:4959] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "af41deB0GbUWhxgzX9W6IAAAAI0"]
[Sat May 09 03:11:50.459655 2026] [:error] [pid 51113:tid 51130] [client 20.63.39.182:5094] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "af41dkQfs7sWtqkpQIeqYwAAAM8"]
[Sat May 09 03:11:50.876699 2026] [:error] [pid 61317:tid 61340] [client 20.63.39.182:5031] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "af41ds-fFk_CedOCOYsncwAAAVQ"]
[Sat May 09 03:11:51.374421 2026] [:error] [pid 51007:tid 51023] [client 20.63.39.182:5119] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "af41d1MagSGstWKyzzUuywAAAAE"]
[Sat May 09 03:11:51.872018 2026] [:error] [pid 51007:tid 51045] [client 20.63.39.182:5028] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "af41d1MagSGstWKyzzUuzgAAABc"]
[Sat May 09 03:11:52.424360 2026] [:error] [pid 61355:tid 61370] [client 20.63.39.182:5007] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "af41ePkhJTi30CBXmMlyIAAAAYk"]
[Sat May 09 03:11:52.856002 2026] [:error] [pid 61356:tid 61410] [client 20.63.39.182:4995] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "af41eIx3vpB8oWhUq2NZnwAAAdY"]
[Sat May 09 03:11:53.317639 2026] [:error] [pid 51007:tid 51046] [client 20.63.39.182:4941] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "af41eVMagSGstWKyzzUu1AAAABg"]
[Sat May 09 03:11:53.754328 2026] [:error] [pid 61356:tid 61411] [client 20.63.39.182:5086] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "af41eYx3vpB8oWhUq2NZpQAAAdc"]
[Sat May 09 03:11:54.237766 2026] [:error] [pid 51009:tid 51084] [client 20.63.39.182:5008] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "af41euB0GbUWhxgzX9W6PgAAAIg"]
[Sat May 09 03:11:54.686848 2026] [:error] [pid 61355:tid 61376] [client 20.63.39.182:4934] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "af41evkhJTi30CBXmMlyMAAAAY8"]
[Sat May 09 03:11:55.112036 2026] [:error] [pid 51009:tid 51081] [client 20.63.39.182:4937] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "af41e-B0GbUWhxgzX9W6SQAAAIU"]
[Sat May 09 03:11:55.602882 2026] [:error] [pid 51007:tid 51032] [client 20.63.39.182:5111] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fun.php"] [unique_id "af41e1MagSGstWKyzzUu2wAAAAo"]
[Sat May 09 03:11:56.153637 2026] [:error] [pid 51007:tid 51023] [client 20.63.39.182:4952] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fun.php"] [unique_id "af41fFMagSGstWKyzzUu3AAAAAE"]
[Sat May 09 03:11:56.619183 2026] [:error] [pid 61317:tid 61321] [client 20.63.39.182:4929] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fun.php"] [unique_id "af41fM-fFk_CedOCOYsneAAAAUE"]
[Sat May 09 03:11:57.114916 2026] [:error] [pid 61355:tid 61366] [client 20.63.39.182:5013] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fun.php"] [unique_id "af41ffkhJTi30CBXmMlyMgAAAYU"]
[Sat May 09 03:11:57.772674 2026] [:error] [pid 51113:tid 51117] [client 20.63.39.182:5106] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af41fUQfs7sWtqkpQIeqcQAAAMI"]
[Sat May 09 03:11:58.217183 2026] [:error] [pid 51009:tid 51085] [client 20.63.39.182:5003] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af41fuB0GbUWhxgzX9W6UwAAAIk"]
[Sat May 09 03:11:58.719133 2026] [:error] [pid 51113:tid 51127] [client 20.63.39.182:5037] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af41fkQfs7sWtqkpQIeqcwAAAMw"]
[Sat May 09 03:11:59.210621 2026] [:error] [pid 61355:tid 61374] [client 20.63.39.182:4930] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "af41f_khJTi30CBXmMlyNQAAAY0"]
[Sat May 09 03:11:59.774194 2026] [:error] [pid 61356:tid 61398] [client 20.63.39.182:4967] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "af41f4x3vpB8oWhUq2NZtQAAAco"]
[Sat May 09 03:12:00.239006 2026] [:error] [pid 61355:tid 61377] [client 20.63.39.182:5047] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "af41gPkhJTi30CBXmMlyOQAAAZA"]
[Sat May 09 03:12:00.676606 2026] [:error] [pid 61355:tid 61372] [client 20.63.39.182:5117] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "af41gPkhJTi30CBXmMlyPQAAAYs"]
[Sat May 09 03:12:01.111532 2026] [:error] [pid 61355:tid 61367] [client 20.63.39.182:5102] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "af41gfkhJTi30CBXmMlyQAAAAYY"]
[Sat May 09 03:12:01.552300 2026] [:error] [pid 51113:tid 51116] [client 20.63.39.182:5043] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "af41gUQfs7sWtqkpQIeqdwAAAME"]
[Sat May 09 03:12:01.989814 2026] [:error] [pid 51113:tid 51133] [client 20.63.39.182:5032] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "af41gUQfs7sWtqkpQIeqeAAAANI"]
[Sat May 09 03:12:02.415510 2026] [:error] [pid 61356:tid 61390] [client 20.63.39.182:4864] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "af41gox3vpB8oWhUq2NZtwAAAcI"]
[Sat May 09 03:12:02.852948 2026] [:error] [pid 51008:tid 51054] [client 20.63.39.182:5109] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "af41gnB58C2Y1tgLtuL0DAAAAEU"]
[Sat May 09 03:12:03.276817 2026] [:error] [pid 51008:tid 51055] [client 20.63.39.182:4957] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af41g3B58C2Y1tgLtuL0DgAAAEY"]
[Sat May 09 03:12:03.745922 2026] [:error] [pid 51113:tid 51137] [client 20.63.39.182:4962] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af41g0Qfs7sWtqkpQIeqfAAAANY"]
[Sat May 09 03:12:04.203878 2026] [:error] [pid 61356:tid 61405] [client 20.63.39.182:5017] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af41hIx3vpB8oWhUq2NZuAAAAdE"]
[Sat May 09 03:12:04.627012 2026] [:error] [pid 51007:tid 51034] [client 20.63.39.182:4939] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "af41hFMagSGstWKyzzUu4QAAAAw"]
[Sat May 09 03:12:05.085232 2026] [:error] [pid 61317:tid 61324] [client 20.63.39.182:4940] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "af41hc-fFk_CedOCOYsnfgAAAUQ"]
[Sat May 09 03:12:05.528927 2026] [:error] [pid 51009:tid 51076] [client 20.63.39.182:5048] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "af41heB0GbUWhxgzX9W6WwAAAIA"]
[Sat May 09 03:12:05.986404 2026] [:error] [pid 51113:tid 51130] [client 20.63.39.182:4897] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "af41hUQfs7sWtqkpQIeqfQAAAM8"]
[Sat May 09 03:12:06.432857 2026] [:error] [pid 51007:tid 51024] [client 20.63.39.182:5074] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "af41hlMagSGstWKyzzUu4wAAAAI"]
[Sat May 09 03:12:06.889766 2026] [:error] [pid 61355:tid 61384] [client 20.63.39.182:4935] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "af41hvkhJTi30CBXmMlyUwAAAZc"]
[Sat May 09 03:12:07.318141 2026] [:error] [pid 51009:tid 51089] [client 20.63.39.182:5029] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "af41h-B0GbUWhxgzX9W6YQAAAI0"]
[Sat May 09 03:12:07.744081 2026] [:error] [pid 51113:tid 51139] [client 20.63.39.182:5014] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "af41h0Qfs7sWtqkpQIeqfgAAANg"]
[Sat May 09 03:12:08.195008 2026] [:error] [pid 51113:tid 51120] [client 20.63.39.182:5096] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "af41iEQfs7sWtqkpQIeqfwAAAMU"]
[Sat May 09 03:12:08.623658 2026] [:error] [pid 61356:tid 61406] [client 20.63.39.182:5084] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app.php"] [unique_id "af41iIx3vpB8oWhUq2NZvAAAAdI"]
[Sat May 09 03:12:09.108062 2026] [:error] [pid 61317:tid 61322] [client 20.63.39.182:5062] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app.php"] [unique_id "af41ic-fFk_CedOCOYsnhwAAAUI"]
[Sat May 09 03:12:09.535729 2026] [:error] [pid 51009:tid 51090] [client 20.63.39.182:4985] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app.php"] [unique_id "af41ieB0GbUWhxgzX9W6agAAAI4"]
[Sat May 09 03:12:09.960881 2026] [:error] [pid 51008:tid 51069] [client 20.63.39.182:4936] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app.php"] [unique_id "af41iXB58C2Y1tgLtuL0EAAAAFQ"]
[Sat May 09 03:12:10.391928 2026] [:error] [pid 61356:tid 61412] [client 20.63.39.182:4966] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "af41iox3vpB8oWhUq2NZvQAAAdg"]
[Sat May 09 03:12:10.825531 2026] [:error] [pid 61317:tid 61320] [client 20.63.39.182:4988] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "af41is-fFk_CedOCOYsniwAAAUA"]
[Sat May 09 03:12:11.253002 2026] [:error] [pid 61356:tid 61411] [client 20.63.39.182:4982] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "af41i4x3vpB8oWhUq2NZwAAAAdc"]
[Sat May 09 03:12:11.685487 2026] [:error] [pid 61317:tid 61333] [client 20.63.39.182:4945] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "af41i8-fFk_CedOCOYsnjgAAAU0"]
[Sat May 09 03:12:12.136721 2026] [:error] [pid 61317:tid 61323] [client 20.63.39.182:4947] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "af41jM-fFk_CedOCOYsnkAAAAUM"]
[Sat May 09 03:12:12.557896 2026] [:error] [pid 51009:tid 51089] [client 20.63.39.182:5099] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "af41jOB0GbUWhxgzX9W6cgAAAI0"]
[Sat May 09 03:12:12.975313 2026] [:error] [pid 51009:tid 51099] [client 20.63.39.182:5085] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "af41jOB0GbUWhxgzX9W6dgAAAJc"]
[Sat May 09 03:12:13.418649 2026] [:error] [pid 51009:tid 51093] [client 20.63.39.182:5022] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "af41jeB0GbUWhxgzX9W6egAAAJE"]
[Sat May 09 03:12:13.845271 2026] [:error] [pid 61317:tid 61330] [client 20.63.39.182:5068] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "af41jc-fFk_CedOCOYsnkwAAAUo"]
[Sat May 09 03:12:14.298901 2026] [:error] [pid 61317:tid 61338] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Sat May 09 03:12:14.510750 2026] [:error] [pid 61317:tid 61326] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-at.php
[Sat May 09 03:12:14.723085 2026] [:error] [pid 61317:tid 61331] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Sat May 09 03:12:14.933398 2026] [:error] [pid 61317:tid 61322] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sat May 09 03:12:15.142956 2026] [:error] [pid 61317:tid 61320] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Sat May 09 03:12:15.352278 2026] [:error] [pid 61317:tid 61339] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Sat May 09 03:12:15.565565 2026] [:error] [pid 61317:tid 61335] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Sat May 09 03:12:15.775703 2026] [:error] [pid 61317:tid 61328] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sat May 09 03:12:15.989360 2026] [:error] [pid 61317:tid 61342] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Sat May 09 03:12:16.207581 2026] [:error] [pid 61317:tid 61336] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sat May 09 03:12:16.427022 2026] [:error] [pid 61317:tid 61334] [client 20.63.39.182:5019] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Sat May 09 03:12:16.637244 2026] [:error] [pid 61317:tid 61325] [client 20.63.39.182:5019] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "af41kM-fFk_CedOCOYsnowAAAUU"]
[Sat May 09 03:12:17.079905 2026] [:error] [pid 51009:tid 51100] [client 20.63.39.182:5079] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "af41keB0GbUWhxgzX9W6iQAAAJg"]
[Sat May 09 03:12:17.521487 2026] [:error] [pid 51009:tid 51088] [client 20.63.39.182:5050] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "af41keB0GbUWhxgzX9W6jAAAAIw"]
[Sat May 09 03:12:17.957999 2026] [:error] [pid 51009:tid 51091] [client 20.63.39.182:5027] [client 20.63.39.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "af41keB0GbUWhxgzX9W6jgAAAI8"]
[Sat May 09 04:00:19.040985 2026] [:error] [pid 9293:tid 9319] [client 45.92.229.138:21521] [client 45.92.229.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.92.229.138, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "af5A05R__qEzV5O6Z2OGCwAAANY"]
[Sat May 09 04:00:19.045393 2026] [:error] [pid 9293:tid 9319] [client 45.92.229.138:21521] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Sat May 09 05:13:16.852740 2026] [:error] [pid 9293:tid 9313] [client 18.169.171.229:34972] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "af5R7JR__qEzV5O6Z2O2KQAAANA"]
[Sat May 09 05:13:18.074066 2026] [:error] [pid 9293:tid 9308] [client 18.169.171.229:57946] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "af5R7pR__qEzV5O6Z2O2LQAAAMs"]
[Sat May 09 05:13:19.175148 2026] [:error] [pid 9187:tid 9276] [client 18.169.171.229:57952] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "af5R7xC7An6gkXsRsaHZ8QAAAJc"]
[Sat May 09 05:13:20.160441 2026] [:error] [pid 9293:tid 9305] [client 18.169.171.229:57954] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "af5R8JR__qEzV5O6Z2O2MgAAAMg"]
[Sat May 09 05:13:21.136150 2026] [:error] [pid 9186:tid 9248] [client 18.169.171.229:57968] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "af5R8RW4eFOEw1mKOgJxogAAAFY"]
[Sat May 09 05:13:22.111182 2026] [:error] [pid 9293:tid 9304] [client 18.169.171.229:57984] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "af5R8pR__qEzV5O6Z2O2QAAAAMc"]
[Sat May 09 05:13:23.084224 2026] [:error] [pid 9760:tid 9777] [client 18.169.171.229:57994] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "af5R82IkCp-C_fh0s7ICPAAAAUs"]
[Sat May 09 05:13:24.064515 2026] [:error] [pid 9186:tid 9234] [client 18.169.171.229:58010] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.remote"] [unique_id "af5R9BW4eFOEw1mKOgJxpQAAAEg"]
[Sat May 09 05:13:25.046635 2026] [:error] [pid 9186:tid 9236] [client 18.169.171.229:58012] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "af5R9RW4eFOEw1mKOgJxqgAAAEo"]
[Sat May 09 05:13:26.034785 2026] [:error] [pid 9663:tid 9678] [client 18.169.171.229:58022] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "af5R9pcWIu01SCxbjwvBVwAAAQw"]
[Sat May 09 05:13:27.022087 2026] [:error] [pid 9293:tid 9302] [client 18.169.171.229:58034] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "af5R95R__qEzV5O6Z2O2TQAAAMU"]
[Sat May 09 05:13:27.997039 2026] [:error] [pid 9186:tid 9230] [client 18.169.171.229:46702] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "af5R9xW4eFOEw1mKOgJxsAAAAEQ"]
[Sat May 09 05:13:28.976459 2026] [:error] [pid 9833:tid 9847] [client 18.169.171.229:46712] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.sample"] [unique_id "af5R-CM9JmxIS0KGZUAtxAAAAYk"]
[Sat May 09 05:13:29.958399 2026] [:error] [pid 9920:tid 9925] [client 18.169.171.229:46726] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "af5R-UxitGYhlzgZb5ZSFAAAAcM"]
[Sat May 09 05:13:30.934093 2026] [:error] [pid 9760:tid 9774] [client 18.169.171.229:46736] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "af5R-mIkCp-C_fh0s7ICTwAAAUg"]
[Sat May 09 05:13:31.907788 2026] [:error] [pid 9760:tid 9768] [client 18.169.171.229:46740] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "af5R-2IkCp-C_fh0s7ICUgAAAUI"]
[Sat May 09 05:13:32.881618 2026] [:error] [pid 9920:tid 9933] [client 18.169.171.229:46744] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.stage"] [unique_id "af5R_ExitGYhlzgZb5ZSHAAAAcs"]
[Sat May 09 05:13:33.856354 2026] [:error] [pid 9187:tid 9261] [client 18.169.171.229:46746] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.ci"] [unique_id "af5R_RC7An6gkXsRsaHaAQAAAIg"]
[Sat May 09 05:13:34.837712 2026] [:error] [pid 9920:tid 9930] [client 18.169.171.229:46760] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.docker"] [unique_id "af5R_kxitGYhlzgZb5ZSIgAAAcg"]
[Sat May 09 05:13:35.809216 2026] [:error] [pid 9293:tid 9297] [client 18.169.171.229:46776] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.live"] [unique_id "af5R_5R__qEzV5O6Z2O2WQAAAMA"]
[Sat May 09 05:13:36.801591 2026] [:error] [pid 9293:tid 9302] [client 18.169.171.229:46788] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.preprod"] [unique_id "af5SAJR__qEzV5O6Z2O2XwAAAMU"]
[Sat May 09 05:13:37.774202 2026] [:error] [pid 9293:tid 9300] [client 18.169.171.229:51024] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.uat"] [unique_id "af5SAZR__qEzV5O6Z2O2YQAAAMM"]
[Sat May 09 05:13:38.750450 2026] [:error] [pid 9663:tid 9681] [client 18.169.171.229:51032] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "af5SApcWIu01SCxbjwvBYgAAAQ8"]
[Sat May 09 05:13:39.722595 2026] [:error] [pid 9663:tid 9684] [client 18.169.171.229:51036] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.swp"] [unique_id "af5SA5cWIu01SCxbjwvBZQAAARI"]
[Sat May 09 05:13:40.701565 2026] [:error] [pid 9663:tid 9685] [client 18.169.171.229:51042] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "af5SBJcWIu01SCxbjwvBagAAARM"]
[Sat May 09 05:13:41.683710 2026] [:error] [pid 9187:tid 9254] [client 18.169.171.229:51052] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env1"] [unique_id "af5SBRC7An6gkXsRsaHaDwAAAIE"]
[Sat May 09 05:13:42.661164 2026] [:error] [pid 9187:tid 9266] [client 18.169.171.229:51066] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env2"] [unique_id "af5SBhC7An6gkXsRsaHaFQAAAI0"]
[Sat May 09 05:13:43.633748 2026] [:error] [pid 9293:tid 9314] [client 18.169.171.229:51068] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_copy"] [unique_id "af5SB5R__qEzV5O6Z2O2bQAAANE"]
[Sat May 09 05:13:44.606925 2026] [:error] [pid 9293:tid 9297] [client 18.169.171.229:51078] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.txt"] [unique_id "af5SCJR__qEzV5O6Z2O2cwAAAMA"]
[Sat May 09 05:13:45.609580 2026] [:error] [pid 9760:tid 9768] [client 18.169.171.229:51080] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.json"] [unique_id "af5SCWIkCp-C_fh0s7ICVwAAAUI"]
[Sat May 09 05:13:46.595861 2026] [:error] [pid 9293:tid 9307] [client 18.169.171.229:51094] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.yaml"] [unique_id "af5SCpR__qEzV5O6Z2O2dgAAAMo"]
[Sat May 09 05:13:47.573765 2026] [:error] [pid 9663:tid 9688] [client 18.169.171.229:51100] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.yml"] [unique_id "af5SC5cWIu01SCxbjwvBgQAAARY"]
[Sat May 09 05:13:48.552570 2026] [:error] [pid 9293:tid 9318] [client 18.169.171.229:57854] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "af5SDJR__qEzV5O6Z2O2dwAAANU"]
[Sat May 09 05:13:49.533700 2026] [:error] [pid 9920:tid 9927] [client 18.169.171.229:57870] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/apps/.env"] [unique_id "af5SDUxitGYhlzgZb5ZSNAAAAcU"]
[Sat May 09 05:13:50.507872 2026] [:error] [pid 9663:tid 9682] [client 18.169.171.229:57872] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "af5SDpcWIu01SCxbjwvBigAAARA"]
[Sat May 09 05:13:51.482961 2026] [:error] [pid 9760:tid 9790] [client 18.169.171.229:57886] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/web/.env"] [unique_id "af5SD2IkCp-C_fh0s7ICYAAAAVg"]
[Sat May 09 05:13:52.462843 2026] [:error] [pid 9760:tid 9786] [client 18.169.171.229:57892] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/site/.env"] [unique_id "af5SEGIkCp-C_fh0s7ICYQAAAVQ"]
[Sat May 09 05:13:53.440398 2026] [:error] [pid 9920:tid 9944] [client 18.169.171.229:57902] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env"] [unique_id "af5SEUxitGYhlzgZb5ZSPgAAAdY"]
[Sat May 09 05:13:54.417581 2026] [:error] [pid 9760:tid 9781] [client 18.169.171.229:57906] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "af5SEmIkCp-C_fh0s7ICZAAAAU8"]
[Sat May 09 05:13:55.392610 2026] [:error] [pid 9920:tid 9923] [client 18.169.171.229:57910] [client 18.169.171.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "af5SE0xitGYhlzgZb5ZSSAAAAcE"]
[Sat May 09 10:19:43.132700 2026] [:error] [pid 9293:tid 9301] [client 20.151.175.120:20118] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat May 09 10:19:43.369879 2026] [:error] [pid 9293:tid 9320] [client 20.151.175.120:20118] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "af6Zv5R__qEzV5O6Z2M53wAAANc"]
[Sat May 09 10:19:44.292160 2026] [:error] [pid 9293:tid 9300] [client 20.151.175.120:20096] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "af6ZwJR__qEzV5O6Z2M58QAAAMM"]
[Sat May 09 10:19:45.176044 2026] [:error] [pid 9920:tid 9938] [client 20.151.175.120:20145] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "af6ZwUxitGYhlzgZb5agJgAAAdA"]
[Sat May 09 10:19:46.003778 2026] [:error] [pid 9186:tid 9241] [client 20.151.175.120:19908] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "af6ZwhW4eFOEw1mKOgKjUwAAAE8"]
[Sat May 09 12:23:08.281501 2026] [:error] [pid 9833:tid 9849] [client 20.220.146.147:12152] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sat May 09 12:23:08.492511 2026] [:error] [pid 9833:tid 9851] [client 20.220.146.147:12152] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sat May 09 12:23:08.910801 2026] [:error] [pid 9833:tid 9855] [client 20.220.146.147:12152] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sat May 09 12:23:09.121358 2026] [:error] [pid 9833:tid 9843] [client 20.220.146.147:12152] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sat May 09 12:23:09.539111 2026] [:error] [pid 9833:tid 9840] [client 20.220.146.147:12152] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sat May 09 12:23:09.748014 2026] [:error] [pid 9833:tid 9841] [client 20.220.146.147:12152] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sat May 09 12:23:09.956857 2026] [:error] [pid 9833:tid 9858] [client 20.220.146.147:12152] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sat May 09 12:23:10.391324 2026] [:error] [pid 9833:tid 9854] [client 20.220.146.147:12152] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af62riM9JmxIS0KGZUBqYgAAAZA"]
[Sat May 09 12:23:11.217491 2026] [:error] [pid 9920:tid 9938] [client 20.220.146.147:12049] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af62r0xitGYhlzgZb5a6-QAAAdA"]
[Sat May 09 12:23:12.046860 2026] [:error] [pid 9187:tid 9277] [client 20.220.146.147:12118] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af62sBC7An6gkXsRsaFaogAAAJg"]
[Sat May 09 12:23:12.872341 2026] [:error] [pid 9187:tid 9253] [client 20.220.146.147:12105] [client 20.220.146.147] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af62sBC7An6gkXsRsaFaqAAAAIA"]
[Sat May 09 14:08:57.380327 2026] [:error] [pid 9920:tid 9926] [client 34.82.168.61:51967] [client 34.82.168.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.82.168.61, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "af7PeUxitGYhlzgZb5bRmgAAAcQ"]
[Sat May 09 14:08:57.385261 2026] [:error] [pid 9920:tid 9926] [client 34.82.168.61:51967] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 09 14:08:59.957285 2026] [:error] [pid 9920:tid 9936] [client 34.82.168.61:51967] [client 34.82.168.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "af7Pe0xitGYhlzgZb5bRpQAAAc4"]
[Sat May 09 14:09:00.451160 2026] [:error] [pid 9187:tid 9263] [client 34.82.168.61:55045] [client 34.82.168.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "af7PfBC7An6gkXsRsaF8igAAAIo"]
[Sat May 09 14:09:00.847966 2026] [:error] [pid 9920:tid 9924] [client 34.82.168.61:63293] [client 34.82.168.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "af7PfExitGYhlzgZb5bRpgAAAcI"]
[Sat May 09 14:09:01.256927 2026] [:error] [pid 9293:tid 9312] [client 34.82.168.61:57956] [client 34.82.168.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "af7PfZR__qEzV5O6Z2OIvgAAAM8"]
[Sat May 09 14:09:01.661317 2026] [:error] [pid 9920:tid 9942] [client 34.82.168.61:49372] [client 34.82.168.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "af7PfUxitGYhlzgZb5bRqAAAAdQ"]
[Sat May 09 14:09:02.063378 2026] [:error] [pid 9833:tid 9854] [client 34.82.168.61:63295] [client 34.82.168.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "af7PfiM9JmxIS0KGZUB1jwAAAZA"]
[Sat May 09 14:09:02.468822 2026] [:error] [pid 9663:tid 9689] [client 34.82.168.61:50026] [client 34.82.168.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "af7PfpcWIu01SCxbjwspZAAAARc"]
[Sat May 09 15:55:59.537848 2026] [:error] [pid 9293:tid 9315] [client 124.217.81.14:45232] [client 124.217.81.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 124.217.81.14, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "af7oj5R__qEzV5O6Z2OpCwAAANI"]
[Sat May 09 15:55:59.543788 2026] [:error] [pid 9293:tid 9315] [client 124.217.81.14:45232] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 09 17:59:11.386105 2026] [:error] [pid 9920:tid 9929] [client 34.18.95.103:45134] [client 34.18.95.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "af8Fb0xitGYhlzgZb5b_xwAAAcc"]
[Sat May 09 21:05:33.850345 2026] [:error] [pid 55353:tid 55375] [client 94.247.172.129:14329] [client 94.247.172.129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.nextspaceconsulting.com.au|F|4"] [data "close, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.nextspaceconsulting.com.au"] [uri "/"] [unique_id "af8xHSDuyNO3XosoIYRCygAAARQ"]
[Sun May 10 18:56:19.879468 2026] [:error] [pid 16136:tid 16156] [client 140.245.50.113:56851] [client 140.245.50.113] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "agBkU0OBGdmCMnPX0MfoJQAAAJI"]
[Sun May 10 22:57:16.634332 2026] [:error] [pid 37030:tid 37046] [client 34.159.202.6:56270] [client 34.159.202.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "agCczJrBzfXWwKkDkdbB8gAAAM4"]
[Sun May 10 22:57:16.635636 2026] [:error] [pid 16136:tid 16139] [client 34.159.202.6:56282] [client 34.159.202.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "agCczEOBGdmCMnPX0McQ-wAAAIE"]
[Sun May 10 22:57:16.740549 2026] [:error] [pid 16037:tid 16050] [client 34.159.202.6:56302] [client 34.159.202.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev.local"] [unique_id "agCczHzjLQfyYTkAdSSJ2wAAAAk"]
[Sun May 10 22:57:16.743893 2026] [:error] [pid 16037:tid 16064] [client 34.159.202.6:56294] [client 34.159.202.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development.local"] [unique_id "agCczHzjLQfyYTkAdSSJ3AAAABc"]
[Sun May 10 22:57:16.919783 2026] [:error] [pid 16037:tid 16044] [client 34.159.202.6:56320] [client 34.159.202.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "agCczHzjLQfyYTkAdSSJ3gAAAAM"]
[Sun May 10 22:57:16.926055 2026] [:error] [pid 16037:tid 16041] [client 34.159.202.6:56310] [client 34.159.202.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "agCczHzjLQfyYTkAdSSJ3wAAAAA"]
[Sun May 10 22:57:16.947032 2026] [:error] [pid 37030:tid 37043] [client 34.159.202.6:56336] [client 34.159.202.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env.local"] [unique_id "agCczJrBzfXWwKkDkdbB9QAAAMs"]
[Sun May 10 22:57:16.956312 2026] [:error] [pid 37030:tid 37040] [client 34.159.202.6:56344] [client 34.159.202.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "agCczJrBzfXWwKkDkdbB9gAAAMg"]
[Sun May 10 22:57:16.970533 2026] [:error] [pid 37030:tid 37044] [client 34.159.202.6:56352] [client 34.159.202.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "agCczJrBzfXWwKkDkdbB9wAAAMw"]
[Sun May 10 22:57:17.226946 2026] [:error] [pid 37030:tid 37050] [client 34.159.202.6:56364] [client 34.159.202.6] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.docker"] [unique_id "agCczZrBzfXWwKkDkdbB-AAAANI"]
[Sun May 10 23:06:18.656868 2026] [:error] [pid 37030:tid 37048] [client 34.47.76.52:51028] [client 34.47.76.52] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "agCe6prBzfXWwKkDkdbDuwAAANA"]
[Sun May 10 23:53:02.661256 2026] [:error] [pid 37030:tid 37039] [client 35.195.254.138:32796] [client 35.195.254.138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "agCp3prBzfXWwKkDkdbMpgAAAMc"]
[Mon May 11 00:24:51.183187 2026] [:error] [pid 9842:tid 9860] [client 35.205.208.178:42292] [client 35.205.208.178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "agCxU0KCvgYKKAjiZbJhNAAAAQ8"]
[Mon May 11 03:13:03.345874 2026] [:error] [pid 16038:tid 16081] [client 45.154.98.150:63926] [client 45.154.98.150] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.154.98.150, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agDYv04hf5Tcsfa2scKO8QAAAY0"]
[Mon May 11 03:13:03.348994 2026] [:error] [pid 16038:tid 16081] [client 45.154.98.150:63926] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Mon May 11 14:36:31.532431 2026] [:error] [pid 58615:tid 58628] [client 78.190.92.63:43622] [client 78.190.92.63] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 78.190.92.63, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agF471K28yH055J8TSq9LAAAAAk"]
[Mon May 11 14:36:31.537488 2026] [:error] [pid 58615:tid 58628] [client 78.190.92.63:43622] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 12 04:50:23.266094 2026] [:error] [pid 40061:tid 40067] [client 176.65.139.239:37890] [client 176.65.139.239] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "agJBD7ycIKt8hxHMBYt6awAAAMQ"]
[Tue May 12 10:51:20.721321 2026] [:error] [pid 42143:tid 42157] [client 120.29.86.55:51581] [client 120.29.86.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.29.86.55, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agKVqES2WmK92iCO2L2W8QAAAUo"]
[Tue May 12 10:51:20.727059 2026] [:error] [pid 42143:tid 42157] [client 120.29.86.55:51581] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 12 11:00:59.018712 2026] [:error] [pid 42143:tid 42157] [client 120.29.86.55:36588] [client 120.29.86.55] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 120.29.86.55, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agKX60S2WmK92iCO2L2Z2wAAAUo"]
[Tue May 12 11:00:59.024224 2026] [:error] [pid 42143:tid 42157] [client 120.29.86.55:36588] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 12 15:34:00.866869 2026] [:error] [pid 42143:tid 42149] [client 96.62.228.111:49608] [client 96.62.228.111] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "167.114.139.41_38fe0bde74a94317ba64948c2013b47a85fb6514"): Internal error (specific information not available) [hostname "nextspaceconsulting.com.au"] [uri "/index.html"] [unique_id "agLX5US2WmK92iCO2L3oEAAAAUI"]
[Tue May 12 15:34:06.874142 2026] [:error] [pid 42143:tid 42160] [client 96.62.228.111:49608] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "agLX7kS2WmK92iCO2L3oGAAAAU0"]
[Tue May 12 15:34:07.797057 2026] [:error] [pid 42143:tid 42162] [client 96.62.228.111:60414] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "agLX70S2WmK92iCO2L3oHAAAAU8"]
[Tue May 12 15:34:07.798768 2026] [:error] [pid 21242:tid 21260] [client 96.62.228.111:60438] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "agLX78zeh8JWZob6PnKxfwAAAY4"]
[Tue May 12 15:34:07.826603 2026] [:error] [pid 42143:tid 42157] [client 96.62.228.111:60544] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "agLX70S2WmK92iCO2L3oHQAAAUo"]
[Tue May 12 15:34:07.827518 2026] [:error] [pid 55559:tid 55644] [client 96.62.228.111:60426] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "agLX79j0hVMLJAOI_fycRgAAARc"]
[Tue May 12 15:34:07.876502 2026] [:error] [pid 42143:tid 42154] [client 96.62.228.111:60468] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "agLX70S2WmK92iCO2L3oHgAAAUc"]
[Tue May 12 15:34:07.878480 2026] [:error] [pid 39956:tid 39967] [client 96.62.228.111:60560] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env"] [unique_id "agLX742K3wZDsNji3Mz5hwAAAAI"]
[Tue May 12 15:34:07.879856 2026] [:error] [pid 42143:tid 42169] [client 96.62.228.111:60526] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "agLX70S2WmK92iCO2L3oIAAAAVY"]
[Tue May 12 15:34:07.881264 2026] [:error] [pid 39956:tid 39984] [client 96.62.228.111:60494] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "agLX742K3wZDsNji3Mz5igAAABM"]
[Tue May 12 15:34:07.904802 2026] [:error] [pid 40061:tid 40069] [client 96.62.228.111:60538] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "agLX77ycIKt8hxHMBYvekAAAAMY"]
[Tue May 12 15:34:07.908753 2026] [:error] [pid 42143:tid 42152] [client 96.62.228.111:60460] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "agLX70S2WmK92iCO2L3oIwAAAUU"]
[Tue May 12 15:34:07.908754 2026] [:error] [pid 39956:tid 39974] [client 96.62.228.111:60520] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "agLX742K3wZDsNji3Mz5jAAAAAk"]
[Tue May 12 15:34:08.538229 2026] [:error] [pid 42143:tid 42159] [client 96.62.228.111:60576] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||nextspaceconsulting.com.au|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/logs/laravel.log"] [unique_id "agLX8ES2WmK92iCO2L3oJwAAAUw"]
[Tue May 12 15:34:08.656830 2026] [:error] [pid 55559:tid 55623] [client 96.62.228.111:60590] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "agLX8Nj0hVMLJAOI_fycSAAAAQU"]
[Tue May 12 15:34:08.663005 2026] [:error] [pid 40061:tid 40079] [client 96.62.228.111:60656] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "agLX8LycIKt8hxHMBYvekQAAANA"]
[Tue May 12 15:34:08.724480 2026] [:error] [pid 42143:tid 42162] [client 96.62.228.111:60640] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "agLX8ES2WmK92iCO2L3oKAAAAU8"]
[Tue May 12 15:34:08.724480 2026] [:error] [pid 39956:tid 39977] [client 96.62.228.111:60336] [client 96.62.228.111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "agLX8I2K3wZDsNji3Mz5kAAAAAw"]
[Tue May 12 21:42:05.031663 2026] [:error] [pid 39958:tid 40042] [client 20.63.83.104:17179] File does not exist: /usr/local/apache/htdocs/suspended-page/shoha.php
[Tue May 12 21:42:05.310810 2026] [:error] [pid 39958:tid 40032] [client 20.63.83.104:17179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-thi.php
[Tue May 12 21:42:05.589436 2026] [:error] [pid 39958:tid 40020] [client 20.63.83.104:17179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-slss.php
[Tue May 12 21:42:05.871938 2026] [:error] [pid 39958:tid 40040] [client 20.63.83.104:17179] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-load.php
[Tue May 12 21:42:06.292890 2026] [:error] [pid 39958:tid 40024] [client 20.63.83.104:17179] File does not exist: /usr/local/apache/htdocs/suspended-page/ftde.php
[Tue May 12 21:42:06.571699 2026] [:error] [pid 39958:tid 40035] [client 20.63.83.104:17179] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Tue May 12 21:42:06.850581 2026] [:error] [pid 39958:tid 40029] [client 20.63.83.104:17179] File does not exist: /usr/local/apache/htdocs/suspended-page/ff1.php
[Tue May 12 21:42:07.143132 2026] [:error] [pid 39958:tid 40019] [client 20.63.83.104:17179] File does not exist: /usr/local/apache/htdocs/suspended-page/bthil.php
[Tue May 12 21:42:07.422214 2026] [:error] [pid 39958:tid 40033] [client 20.63.83.104:17179] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Tue May 12 21:42:07.700619 2026] [:error] [pid 39958:tid 40038] [client 20.63.83.104:17179] File does not exist: /usr/local/apache/htdocs/suspended-page/ccou.php
[Tue May 12 21:42:08.049224 2026] [:error] [pid 39958:tid 40021] [client 20.63.83.104:17179] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "agMuMOVI9FVDxXB2XxiGHgAAAII"]
[Tue May 12 21:42:18.803567 2026] [:error] [pid 21242:tid 21267] [client 20.63.83.104:5844] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "agMuOszeh8JWZob6PnIWwQAAAZU"]
[Tue May 12 21:42:20.959702 2026] [:error] [pid 55559:tid 55633] [client 20.63.83.104:5845] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "agMuPNj0hVMLJAOI_fy_DQAAAQ4"]
[Tue May 12 21:42:26.886576 2026] [:error] [pid 21242:tid 21258] [client 20.63.83.104:36763] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "agMuQszeh8JWZob6PnIWzAAAAYw"]
[Tue May 12 21:42:29.540209 2026] [:error] [pid 39957:tid 40015] [client 20.63.83.104:39780] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "agMuReAfHHyq0DBh5BKMogAAAFc"]
[Tue May 12 21:42:31.026266 2026] [:error] [pid 39957:tid 39998] [client 20.63.83.104:37846] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "agMuR-AfHHyq0DBh5BKMpQAAAEY"]
[Tue May 12 21:42:38.657992 2026] [:error] [pid 21242:tid 21256] [client 20.63.83.104:48724] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "agMuTszeh8JWZob6PnIW4AAAAYo"]
[Tue May 12 21:42:47.945460 2026] [:error] [pid 42143:tid 42164] [client 20.63.83.104:17369] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "agMuV0S2WmK92iCO2L0ufQAAAVE"]
[Tue May 12 21:43:09.008316 2026] [:error] [pid 21242:tid 21255] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/yellow.php
[Tue May 12 21:43:09.230068 2026] [:error] [pid 21242:tid 21270] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Tue May 12 21:43:10.002542 2026] [:error] [pid 21242:tid 21265] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Tue May 12 21:43:10.217186 2026] [:error] [pid 21242:tid 21262] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/revealability.php
[Tue May 12 21:43:10.428740 2026] [:error] [pid 21242:tid 21266] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Tue May 12 21:43:10.660965 2026] [:error] [pid 21242:tid 21269] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue May 12 21:43:10.870300 2026] [:error] [pid 21242:tid 21257] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Tue May 12 21:43:11.079370 2026] [:error] [pid 21242:tid 21267] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/forbidals.php
[Tue May 12 21:43:11.294151 2026] [:error] [pid 21242:tid 21248] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-firewall.php
[Tue May 12 21:43:11.519506 2026] [:error] [pid 21242:tid 21246] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Tue May 12 21:43:11.733989 2026] [:error] [pid 21242:tid 21256] [client 20.63.83.104:25763] File does not exist: /usr/local/apache/htdocs/suspended-page/wuasr.php
[Tue May 12 21:43:11.939276 2026] [:error] [pid 21242:tid 21264] [client 20.63.83.104:25763] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "agMub8zeh8JWZob6PnIXBgAAAZI"]
[Tue May 12 21:43:19.756897 2026] [:error] [pid 39958:tid 40020] [client 20.63.83.104:40541] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "agMud-VI9FVDxXB2XxiGNQAAAIE"]
[Tue May 12 21:43:22.814262 2026] [:error] [pid 55559:tid 55620] [client 20.63.83.104:64784] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "agMuetj0hVMLJAOI_fy_LQAAAQI"]
[Tue May 12 21:43:24.426193 2026] [:error] [pid 42143:tid 42164] [client 20.63.83.104:36201] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "agMufES2WmK92iCO2L0uoAAAAVE"]
[Tue May 12 21:43:27.179314 2026] [:error] [pid 21242:tid 21259] [client 20.63.83.104:64800] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "agMuf8zeh8JWZob6PnIXDwAAAY0"]
[Tue May 12 21:43:31.448930 2026] [:error] [pid 21242:tid 21263] [client 20.63.83.104:53889] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "agMug8zeh8JWZob6PnIXGwAAAZE"]
[Tue May 12 21:43:33.163799 2026] [:error] [pid 39958:tid 40038] [client 20.63.83.104:44859] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "agMuheVI9FVDxXB2XxiGPAAAAJM"]
[Tue May 12 21:43:37.996690 2026] [:error] [pid 42143:tid 42150] [client 20.63.83.104:20954] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "agMuiUS2WmK92iCO2L0urAAAAUM"]
[Tue May 12 21:43:43.788690 2026] [:error] [pid 39957:tid 40010] [client 20.63.83.104:48922] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "agMuj-AfHHyq0DBh5BKM7wAAAFI"]
[Tue May 12 21:43:46.866057 2026] [:error] [pid 21242:tid 21254] [client 20.63.83.104:5537] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "agMukszeh8JWZob6PnIXLgAAAYg"]
[Tue May 12 21:43:49.275931 2026] [:error] [pid 55559:tid 55627] [client 20.63.83.104:48910] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "agMuldj0hVMLJAOI_fy_OAAAAQk"]
[Tue May 12 21:44:00.793495 2026] [:error] [pid 40061:tid 40081] [client 20.63.83.104:57582] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "agMuoLycIKt8hxHMBYsJmwAAANI"]
[Tue May 12 21:44:03.745832 2026] [:error] [pid 39957:tid 39992] [client 20.63.83.104:57579] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "agMuo-AfHHyq0DBh5BKM-gAAAEA"]
[Tue May 12 21:44:04.708678 2026] [:error] [pid 21242:tid 21254] [client 20.63.83.104:47024] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "agMupMzeh8JWZob6PnIXPAAAAYg"]
[Tue May 12 21:44:09.047179 2026] [:error] [pid 21242:tid 21252] [client 20.63.83.104:47017] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "agMuqczeh8JWZob6PnIXPQAAAYY"]
[Tue May 12 21:44:13.287173 2026] [:error] [pid 39957:tid 40009] [client 20.63.83.104:46986] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Tue May 12 21:44:13.505137 2026] [:error] [pid 39957:tid 39998] [client 20.63.83.104:46986] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Tue May 12 21:44:13.735395 2026] [:error] [pid 39957:tid 39999] [client 20.63.83.104:46986] File does not exist: /usr/local/apache/htdocs/suspended-page/fun.php
[Tue May 12 21:44:13.949730 2026] [:error] [pid 39957:tid 40004] [client 20.63.83.104:46986] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-kd4xalrg7m.php
[Tue May 12 21:44:14.431985 2026] [:error] [pid 39957:tid 40016] [client 20.63.83.104:46986] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Tue May 12 21:44:14.864587 2026] [:error] [pid 39957:tid 39992] [client 20.63.83.104:46986] File does not exist: /usr/local/apache/htdocs/suspended-page/new.php
[Tue May 12 21:44:15.243920 2026] [:error] [pid 39957:tid 40000] [client 20.63.83.104:46986] File does not exist: /usr/local/apache/htdocs/suspended-page/aevly.php
[Tue May 12 21:44:15.692875 2026] [:error] [pid 39957:tid 40010] [client 20.63.83.104:46986] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Tue May 12 21:44:15.930643 2026] [:error] [pid 39957:tid 39995] [client 20.63.83.104:46986] File does not exist: /usr/local/apache/htdocs/suspended-page/txets.php
[Tue May 12 21:44:16.143393 2026] [:error] [pid 39957:tid 40014] [client 20.63.83.104:46986] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "agMusOAfHHyq0DBh5BKNEgAAAFY"]
[Tue May 12 21:44:19.611207 2026] [:error] [pid 21242:tid 21268] [client 20.63.83.104:64761] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "agMus8zeh8JWZob6PnIXRgAAAZY"]
[Tue May 12 21:44:20.831253 2026] [:error] [pid 39957:tid 40014] [client 20.63.83.104:36089] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "agMutOAfHHyq0DBh5BKNJwAAAFY"]
[Tue May 12 21:44:22.322265 2026] [:error] [pid 21242:tid 21252] [client 20.63.83.104:62665] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "agMutszeh8JWZob6PnIXSwAAAYY"]
[Tue May 12 21:44:23.531938 2026] [:error] [pid 21242:tid 21253] [client 20.63.83.104:39741] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "agMut8zeh8JWZob6PnIXTgAAAYc"]
[Tue May 12 21:44:27.023870 2026] [:error] [pid 42143:tid 42147] [client 20.63.83.104:7321] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "agMuu0S2WmK92iCO2L0uzwAAAUA"]
[Tue May 12 21:44:31.579308 2026] [:error] [pid 40061:tid 40087] [client 20.63.83.104:43733] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "agMuv7ycIKt8hxHMBYsJtQAAANg"]
[Tue May 12 21:44:33.454005 2026] [:error] [pid 21242:tid 21247] [client 20.63.83.104:39740] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "agMuwczeh8JWZob6PnIXUQAAAYE"]
[Tue May 12 21:44:35.853095 2026] [:error] [pid 40061:tid 40072] [client 20.63.83.104:64704] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "agMuw7ycIKt8hxHMBYsJuQAAAMk"]
[Tue May 12 21:44:41.411952 2026] [:error] [pid 40061:tid 40086] [client 20.63.83.104:47319] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "agMuybycIKt8hxHMBYsJwgAAANc"]
[Tue May 12 21:44:43.331218 2026] [:error] [pid 21242:tid 21261] [client 20.63.83.104:43755] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "agMuy8zeh8JWZob6PnIXbQAAAY8"]
[Tue May 12 21:44:44.623704 2026] [:error] [pid 21242:tid 21259] [client 20.63.83.104:34567] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "agMuzMzeh8JWZob6PnIXcgAAAY0"]
[Tue May 12 21:44:45.389378 2026] [:error] [pid 21242:tid 21251] [client 20.63.83.104:39737] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "agMuzczeh8JWZob6PnIXdwAAAYU"]
[Tue May 12 21:44:47.199856 2026] [:error] [pid 21242:tid 21257] [client 20.63.83.104:42085] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "agMuz8zeh8JWZob6PnIXegAAAYs"]
[Tue May 12 21:44:49.391875 2026] [:error] [pid 21242:tid 21267] [client 20.63.83.104:38030] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "agMu0czeh8JWZob6PnIXfgAAAZU"]
[Tue May 12 21:44:55.194118 2026] [:error] [pid 55559:tid 55642] [client 20.63.83.104:56797] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "agMu19j0hVMLJAOI_fy_cAAAARU"]
[Tue May 12 21:44:58.918600 2026] [:error] [pid 39957:tid 40015] [client 20.63.83.104:34601] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sys.php"] [unique_id "agMu2uAfHHyq0DBh5BKNMwAAAFc"]
[Tue May 12 21:45:03.702623 2026] [:error] [pid 39957:tid 40006] [client 20.63.83.104:47321] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sys.php"] [unique_id "agMu3-AfHHyq0DBh5BKNOwAAAE4"]
[Tue May 12 21:45:06.324830 2026] [:error] [pid 21242:tid 21246] [client 20.63.83.104:32520] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sys.php"] [unique_id "agMu4szeh8JWZob6PnIXkAAAAYA"]
[Tue May 12 21:45:07.589645 2026] [:error] [pid 21242:tid 21264] [client 20.63.83.104:9886] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sys.php"] [unique_id "agMu48zeh8JWZob6PnIXlQAAAZI"]
[Tue May 12 21:45:09.446710 2026] [:error] [pid 40061:tid 40076] [client 20.63.83.104:47042] [client 20.63.83.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "agMu5bycIKt8hxHMBYsJzwAAAM0"]
[Tue May 12 21:45:16.946746 2026] [:error] [pid 39956:tid 39980] [client 20.63.83.104:25667] File does not exist: /usr/local/apache/htdocs/suspended-page/lv.php
[Tue May 12 21:45:17.180054 2026] [:error] [pid 39956:tid 39983] [client 20.63.83.104:25667] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue May 12 21:45:17.392493 2026] [:error] [pid 39956:tid 39978] [client 20.63.83.104:25667] File does not exist: /usr/local/apache/htdocs/suspended-page/db.php
[Tue May 12 21:45:17.606615 2026] [:error] [pid 39956:tid 39976] [client 20.63.83.104:25667] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Tue May 12 21:45:17.820918 2026] [:error] [pid 39956:tid 39989] [client 20.63.83.104:25667] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Tue May 12 21:45:18.048305 2026] [:error] [pid 39956:tid 39986] [client 20.63.83.104:25667] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Tue May 12 21:45:18.276524 2026] [:error] [pid 39956:tid 39973] [client 20.63.83.104:25667] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Tue May 12 21:45:18.492734 2026] [:error] [pid 39956:tid 39987] [client 20.63.83.104:25667] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Wed May 13 05:24:21.911548 2026] [:error] [pid 23787:tid 23851] [client 131.100.39.158:65522] [client 131.100.39.158] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 131.100.39.158, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agOahR1cs5wE7VT6wiqVzgAAAIM"]
[Wed May 13 05:24:21.916169 2026] [:error] [pid 23787:tid 23851] [client 131.100.39.158:65522] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 13 09:07:52.539603 2026] [:error] [pid 3259:tid 3262] [client 146.70.194.236:54578] [client 146.70.194.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.194.236, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agPO6OWJB4YwcPVLeAquHwAAAQE"]
[Wed May 13 09:07:52.544018 2026] [:error] [pid 3259:tid 3262] [client 146.70.194.236:54578] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 13 09:07:55.517777 2026] [:error] [pid 3259:tid 3277] [client 146.70.194.236:54578] [client 146.70.194.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "agPO6-WJB4YwcPVLeAquKwAAARA"]
[Wed May 13 09:07:56.047579 2026] [:error] [pid 23887:tid 23919] [client 146.70.194.236:50010] [client 146.70.194.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "agPO7NSKmvZJZkXBFDAldQAAANg"]
[Wed May 13 09:07:56.582390 2026] [:error] [pid 23887:tid 23899] [client 146.70.194.236:50022] [client 146.70.194.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "agPO7NSKmvZJZkXBFDAldwAAAMQ"]
[Wed May 13 09:07:57.115874 2026] [:error] [pid 3259:tid 3283] [client 146.70.194.236:50024] [client 146.70.194.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "agPO7eWJB4YwcPVLeAquLwAAARY"]
[Wed May 13 09:07:57.656251 2026] [:error] [pid 23887:tid 23918] [client 146.70.194.236:50034] [client 146.70.194.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "agPO7dSKmvZJZkXBFDAleQAAANc"]
[Wed May 13 09:07:58.189595 2026] [:error] [pid 23887:tid 23911] [client 146.70.194.236:50048] [client 146.70.194.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "agPO7tSKmvZJZkXBFDAlegAAANA"]
[Wed May 13 09:07:58.719406 2026] [:error] [pid 23887:tid 23914] [client 146.70.194.236:50052] [client 146.70.194.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "agPO7tSKmvZJZkXBFDAlewAAANM"]
[Thu May 14 19:50:46.198818 2026] [:error] [pid 47721:tid 47726] [client 142.248.80.118:55072] [client 142.248.80.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "agW3FnEmh7_G0hfOa6sVCAAAAYM"]
[Thu May 14 19:50:46.199438 2026] [:error] [pid 47721:tid 47731] [client 142.248.80.118:55050] [client 142.248.80.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "agW3FnEmh7_G0hfOa6sVCQAAAYg"]
[Thu May 14 19:50:46.199566 2026] [:error] [pid 47721:tid 47729] [client 142.248.80.118:55056] [client 142.248.80.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "agW3FnEmh7_G0hfOa6sVCgAAAYY"]
[Thu May 14 19:50:46.200316 2026] [:error] [pid 11690:tid 11706] [client 142.248.80.118:55074] [client 142.248.80.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "agW3FinxWuLN8Hptw8kwNgAAAMc"]
[Thu May 14 19:50:46.200491 2026] [:error] [pid 47721:tid 47737] [client 142.248.80.118:55058] [client 142.248.80.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "agW3FnEmh7_G0hfOa6sVDAAAAY4"]
[Thu May 14 19:50:46.201073 2026] [:error] [pid 11582:tid 11647] [client 142.248.80.118:55042] [client 142.248.80.118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "agW3Fvuw2cmFDpGcKhA0FAAAAFY"]
[Thu May 14 22:56:46.439815 2026] [:error] [pid 11588:tid 11660] [client 165.101.254.224:62180] [client 165.101.254.224] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 165.101.254.224, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agXirtUr21rOixkeGKbDawAAAIg"]
[Thu May 14 22:56:46.445799 2026] [:error] [pid 11588:tid 11660] [client 165.101.254.224:62180] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Fri May 15 04:51:16.560619 2026] [:error] [pid 1189:tid 1242] [client 34.81.149.223:50608] [client 34.81.149.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "agY1xAe36qIGegR4kclCZAAAAFE"]
[Fri May 15 05:20:15.034233 2026] [:error] [pid 1295:tid 1301] [client 34.174.57.65:55968] [client 34.174.57.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "agY8j9mMhqLvs0GYixnRtgAAAMM"]
[Fri May 15 05:54:14.949279 2026] [:error] [pid 1295:tid 1304] [client 34.131.174.60:37036] [client 34.131.174.60] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "agZEhtmMhqLvs0GYixnZGQAAAMY"]
[Fri May 15 06:23:16.494391 2026] [:error] [pid 1189:tid 1229] [client 34.155.12.104:56328] [client 34.155.12.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "agZLVAe36qIGegR4kclOoAAAAEQ"]
[Fri May 15 06:37:22.022593 2026] [:error] [pid 1295:tid 1302] [client 34.97.156.112:35150] [client 34.97.156.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "agZOotmMhqLvs0GYixnf3wAAAMQ"]
[Fri May 15 10:16:03.919522 2026] [:error] [pid 51234:tid 51254] [client 38.154.97.38:44236] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nextspaceconsulting.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "agaB4972N9CbeiqcqgPbPgAAAVI"]
[Fri May 15 10:16:03.919555 2026] [:error] [pid 51234:tid 51237] [client 38.154.97.38:59222] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nextspaceconsulting.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/robots.txt"] [unique_id "agaB4972N9CbeiqcqgPbPwAAAUE"]
[Fri May 15 10:16:03.927393 2026] [:error] [pid 51234:tid 51252] [client 38.154.97.38:59806] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nextspaceconsulting.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/sitemap.xml"] [unique_id "agaB4972N9CbeiqcqgPbQAAAAVA"]
[Fri May 15 10:16:05.266473 2026] [:error] [pid 51234:tid 51245] [client 38.154.97.38:50371] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nextspaceconsulting.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/robots.txt"] [unique_id "agaB5d72N9CbeiqcqgPbSQAAAUk"]
[Fri May 15 10:16:05.286848 2026] [:error] [pid 51234:tid 51260] [client 38.154.97.38:39990] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nextspaceconsulting.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/sitemap.xml"] [unique_id "agaB5d72N9CbeiqcqgPbSgAAAVg"]
[Fri May 15 10:16:05.896431 2026] [:error] [pid 1190:tid 1268] [client 38.154.97.38:35350] [client 38.154.97.38] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||nextspaceconsulting.com.au|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "agaB5dqiXrD7hne4gFbLjAAAAJA"]
[Fri May 15 14:01:16.716771 2026] [:error] [pid 30272:tid 30290] [client 208.84.100.220:42796] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aga2rHvc_jSFaQ_7_weSkQAAAZA"]
[Fri May 15 14:01:16.743690 2026] [:error] [pid 9305:tid 9341] [client 208.84.100.220:42828] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "aga2rN5FZyBmdCM8GsFzZwAAAEM"]
[Fri May 15 14:01:16.744307 2026] [:error] [pid 30240:tid 30265] [client 208.84.100.220:42824] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "aga2rK8ckHvaA6bpews3PQAAAVc"]
[Fri May 15 14:01:16.744464 2026] [:error] [pid 30208:tid 30212] [client 208.84.100.220:42818] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "aga2rJmLMCJujX-JTvgQogAAAII"]
[Fri May 15 14:01:16.744904 2026] [:error] [pid 9392:tid 9415] [client 208.84.100.220:42802] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "aga2rNBWJIjH1U9zGfaVSwAAARU"]
[Fri May 15 14:01:16.745097 2026] [:error] [pid 30208:tid 30210] [client 208.84.100.220:42798] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "aga2rJmLMCJujX-JTvgQowAAAIA"]
[Fri May 15 14:01:17.475182 2026] [:error] [pid 9392:tid 9403] [client 208.84.100.220:42854] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production.copy"] [unique_id "aga2rdBWJIjH1U9zGfaVTwAAAQk"]
[Fri May 15 14:01:17.546074 2026] [:error] [pid 9392:tid 9414] [client 208.84.100.220:42858] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "aga2rdBWJIjH1U9zGfaVUAAAARQ"]
[Fri May 15 14:01:17.546846 2026] [:error] [pid 9392:tid 9406] [client 208.84.100.220:42872] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aga2rdBWJIjH1U9zGfaVUQAAAQw"]
[Fri May 15 14:01:17.548173 2026] [:error] [pid 30272:tid 30280] [client 208.84.100.220:42882] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/FETCH_HEAD"] [unique_id "aga2rXvc_jSFaQ_7_weSkwAAAYY"]
[Fri May 15 14:01:17.830101 2026] [:error] [pid 30272:tid 30279] [client 208.84.100.220:42980] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.copy"] [unique_id "aga2rXvc_jSFaQ_7_weSlQAAAYU"]
[Fri May 15 14:01:17.830215 2026] [:error] [pid 30272:tid 30284] [client 208.84.100.220:42964] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.orig"] [unique_id "aga2rXvc_jSFaQ_7_weSlgAAAYo"]
[Fri May 15 14:01:17.832228 2026] [:error] [pid 30272:tid 30297] [client 208.84.100.220:42956] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.swp"] [unique_id "aga2rXvc_jSFaQ_7_weSlwAAAZc"]
[Fri May 15 14:01:17.832603 2026] [:error] [pid 30272:tid 30288] [client 208.84.100.220:42954] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "aga2rXvc_jSFaQ_7_weSmAAAAY4"]
[Fri May 15 14:01:17.833357 2026] [:error] [pid 30208:tid 30213] [client 208.84.100.220:42936] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "aga2rZmLMCJujX-JTvgQqgAAAIM"]
[Fri May 15 14:01:17.833721 2026] [:error] [pid 30272:tid 30295] [client 208.84.100.220:42930] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "aga2rXvc_jSFaQ_7_weSmgAAAZU"]
[Fri May 15 14:01:17.833826 2026] [:error] [pid 30272:tid 30286] [client 208.84.100.220:42944] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "aga2rXvc_jSFaQ_7_weSmQAAAYw"]
[Fri May 15 14:01:17.834036 2026] [:error] [pid 30272:tid 30282] [client 208.84.100.220:42916] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/logs/HEAD"] [unique_id "aga2rXvc_jSFaQ_7_weSmwAAAYg"]
[Fri May 15 14:01:17.834581 2026] [:error] [pid 30208:tid 30220] [client 208.84.100.220:42906] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "aga2rZmLMCJujX-JTvgQqwAAAIo"]
[Fri May 15 14:01:17.834852 2026] [:error] [pid 30272:tid 30287] [client 208.84.100.220:42894] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local.bak"] [unique_id "aga2rXvc_jSFaQ_7_weSnAAAAY0"]
[Fri May 15 14:01:17.835346 2026] [:error] [pid 30272:tid 30275] [client 208.84.100.220:43034] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local.swp"] [unique_id "aga2rXvc_jSFaQ_7_weSnQAAAYE"]
[Fri May 15 14:01:17.835595 2026] [:error] [pid 30272:tid 30282] [client 208.84.100.220:43048] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local.orig"] [unique_id "aga2rXvc_jSFaQ_7_weSngAAAYg"]
[Fri May 15 14:01:17.836072 2026] [:error] [pid 30272:tid 30296] [client 208.84.100.220:43078] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production.backup"] [unique_id "aga2rXvc_jSFaQ_7_weSnwAAAZY"]
[Fri May 15 14:01:17.836643 2026] [:error] [pid 30208:tid 30217] [client 208.84.100.220:43024] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local~"] [unique_id "aga2rZmLMCJujX-JTvgQrAAAAIc"]
[Fri May 15 14:01:17.836954 2026] [:error] [pid 30272:tid 30274] [client 208.84.100.220:43074] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production.old"] [unique_id "aga2rXvc_jSFaQ_7_weSoAAAAYA"]
[Fri May 15 14:01:17.837353 2026] [:error] [pid 30272:tid 30290] [client 208.84.100.220:43066] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/refs/heads/master"] [unique_id "aga2rXvc_jSFaQ_7_weSoQAAAZA"]
[Fri May 15 14:01:17.837688 2026] [:error] [pid 30272:tid 30278] [client 208.84.100.220:43010] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local.save"] [unique_id "aga2rXvc_jSFaQ_7_weSogAAAYQ"]
[Fri May 15 14:01:17.838204 2026] [:error] [pid 30208:tid 30233] [client 208.84.100.220:43004] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local.backup"] [unique_id "aga2rZmLMCJujX-JTvgQrQAAAJc"]
[Fri May 15 14:01:17.838454 2026] [:error] [pid 30272:tid 30285] [client 208.84.100.220:42996] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local.old"] [unique_id "aga2rXvc_jSFaQ_7_weSowAAAYs"]
[Fri May 15 14:01:17.839194 2026] [:error] [pid 30272:tid 30277] [client 208.84.100.220:43110] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production.swp"] [unique_id "aga2rXvc_jSFaQ_7_weSpQAAAYM"]
[Fri May 15 14:01:17.839612 2026] [:error] [pid 30272:tid 30280] [client 208.84.100.220:43092] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production.save"] [unique_id "aga2rXvc_jSFaQ_7_weSpgAAAYY"]
[Fri May 15 14:01:17.839661 2026] [:error] [pid 30272:tid 30298] [client 208.84.100.220:43118] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production.orig"] [unique_id "aga2rXvc_jSFaQ_7_weSpAAAAZg"]
[Fri May 15 14:01:17.840003 2026] [:error] [pid 30208:tid 30215] [client 208.84.100.220:43104] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production~"] [unique_id "aga2rZmLMCJujX-JTvgQrgAAAIU"]
[Fri May 15 14:01:17.841024 2026] [:error] [pid 30272:tid 30281] [client 208.84.100.220:43052] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/refs/heads/main"] [unique_id "aga2rXvc_jSFaQ_7_weSpwAAAYc"]
[Fri May 15 14:01:17.874996 2026] [:error] [pid 9392:tid 9398] [client 208.84.100.220:43132] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.local.copy"] [unique_id "aga2rdBWJIjH1U9zGfaVUwAAAQQ"]
[Fri May 15 14:01:17.875106 2026] [:error] [pid 9392:tid 9395] [client 208.84.100.220:43128] [client 208.84.100.220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env.production.bak"] [unique_id "aga2rdBWJIjH1U9zGfaVVAAAAQE"]
[Fri May 15 18:40:08.636113 2026] [:error] [pid 9307:tid 9387] [client 34.174.126.21:57394] [client 34.174.126.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "agb4CCC43jY1IRzK5VZSNQAAANY"]
[Fri May 15 20:51:31.036130 2026] [:error] [pid 9392:tid 9414] [client 94.187.21.202:5289] [client 94.187.21.202] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 94.187.21.202, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agcW09BWJIjH1U9zGfbZhgAAARQ"]
[Fri May 15 20:51:31.040061 2026] [:error] [pid 9392:tid 9414] [client 94.187.21.202:5289] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 16 07:19:06.066552 2026] [:error] [pid 5602:tid 5628] [client 37.139.53.198:50932] [client 37.139.53.198] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nextspaceconsulting.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agep6tzTTsu77r3UIsnT8AAAARg"]
[Sat May 16 07:19:07.401537 2026] [:error] [pid 24979:tid 25005] [client 77.83.28.47:54112] [client 77.83.28.47] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/usr/local/apache/modsecurity-cwaf/rules/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||nextspaceconsulting.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-json/wp/v2/users/"] [unique_id "agep67vSFUQiwLaOL2o7rgAAANg"]
[Sat May 16 08:15:50.215555 2026] [:error] [pid 24979:tid 25003] [client 20.151.108.19:36354] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "age3NrvSFUQiwLaOL2pFlQAAANY"]
[Sat May 16 08:15:51.916058 2026] [:error] [pid 5602:tid 5614] [client 20.151.108.19:23314] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "age3N9zTTsu77r3UIsnk1gAAAQo"]
[Sat May 16 08:15:53.980370 2026] [:error] [pid 5602:tid 5620] [client 20.151.108.19:23337] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "age3OdzTTsu77r3UIsnk3wAAARA"]
[Sat May 16 08:15:55.616074 2026] [:error] [pid 5602:tid 5604] [client 20.151.108.19:43532] [client 20.151.108.19] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "age3O9zTTsu77r3UIsnk6AAAAQA"]
[Sat May 16 10:53:12.529601 2026] [:error] [pid 61463:tid 61484] [client 172.64.223.244:9437] [client 172.64.223.244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "agfcGDXdL1WU7nYXPmTaZAAAAdM"], referer: https://www.google.com/search?q=www.nextspaceconsulting.com.au
[Sat May 16 10:54:05.430510 2026] [:error] [pid 24979:tid 24996] [client 172.64.223.119:9691] [client 172.64.223.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "agfcTbvSFUQiwLaOL2plqQAAAM8"]
[Sat May 16 19:30:24.794626 2026] [:error] [pid 62210:tid 62233] [client 146.70.221.138:10388] [client 146.70.221.138] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 146.70.221.138, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "aghVUMjHonCA4ORo40HOyAAAAlU"]
[Sat May 16 19:30:25.092895 2026] [:error] [pid 62210:tid 62233] [client 146.70.221.138:10388] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 17 01:19:56.842544 2026] [:error] [pid 61411:tid 61414] [client 103.153.183.126:52276] [client 103.153.183.126] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||nextspaceconsulting.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aginPGVkiEwGnPL_dvE8NAAAAYE"]
[Sun May 17 01:19:56.842619 2026] [:error] [pid 61411:tid 61414] [client 103.153.183.126:52276] [client 103.153.183.126] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||nextspaceconsulting.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aginPGVkiEwGnPL_dvE8NAAAAYE"]
[Sun May 17 01:19:57.090892 2026] [:error] [pid 61411:tid 61425] [client 103.153.183.126:52276] [client 103.153.183.126] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||nextspaceconsulting.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aginPWVkiEwGnPL_dvE8NQAAAYw"]
[Sun May 17 01:19:57.090985 2026] [:error] [pid 61411:tid 61425] [client 103.153.183.126:52276] [client 103.153.183.126] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||nextspaceconsulting.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aginPWVkiEwGnPL_dvE8NQAAAYw"]
[Sun May 17 03:01:53.167755 2026] [:error] [pid 61411:tid 61414] [client 20.213.26.126:1818] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun May 17 03:01:53.187442 2026] [:error] [pid 61411:tid 61437] [client 20.213.26.126:1818] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun May 17 03:01:53.230564 2026] [:error] [pid 61411:tid 61436] [client 20.213.26.126:1818] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun May 17 03:01:53.250777 2026] [:error] [pid 61411:tid 61428] [client 20.213.26.126:1818] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun May 17 03:01:53.292345 2026] [:error] [pid 61411:tid 61416] [client 20.213.26.126:1818] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun May 17 03:01:53.313340 2026] [:error] [pid 61411:tid 61432] [client 20.213.26.126:1818] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun May 17 03:01:53.334196 2026] [:error] [pid 61411:tid 61415] [client 20.213.26.126:1818] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun May 17 03:01:53.401660 2026] [:error] [pid 61411:tid 61435] [client 20.213.26.126:1818] [client 20.213.26.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agi_IWVkiEwGnPL_dvFNBQAAAZY"]
[Sun May 17 03:01:53.467883 2026] [:error] [pid 61411:tid 61426] [client 20.213.26.126:2188] [client 20.213.26.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agi_IWVkiEwGnPL_dvFNBgAAAY0"]
[Sun May 17 03:01:53.527887 2026] [:error] [pid 61411:tid 61425] [client 20.213.26.126:1292] [client 20.213.26.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agi_IWVkiEwGnPL_dvFNBwAAAYw"]
[Sun May 17 03:01:53.587324 2026] [:error] [pid 24874:tid 24957] [client 20.213.26.126:1819] [client 20.213.26.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agi_Iciii6x3XidYGHHxtwAAAJY"]
[Sun May 17 12:10:55.898451 2026] [:error] [pid 36652:tid 36668] [client 20.198.91.212:7561] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Sun May 17 12:10:56.041909 2026] [:error] [pid 36652:tid 36676] [client 20.198.91.212:7561] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Sun May 17 12:10:56.339615 2026] [:error] [pid 36652:tid 36672] [client 20.198.91.212:7561] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Sun May 17 12:10:56.484444 2026] [:error] [pid 36652:tid 36666] [client 20.198.91.212:7561] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Sun May 17 12:10:56.783593 2026] [:error] [pid 36652:tid 36654] [client 20.198.91.212:7561] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Sun May 17 12:10:56.927544 2026] [:error] [pid 36652:tid 36671] [client 20.198.91.212:7561] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Sun May 17 12:10:57.073362 2026] [:error] [pid 36652:tid 36661] [client 20.198.91.212:7561] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Sun May 17 12:10:57.515600 2026] [:error] [pid 36652:tid 36657] [client 20.198.91.212:7561] [client 20.198.91.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agk_0TZrzQadnZADvj9CSgAAAQM"]
[Sun May 17 12:10:58.084112 2026] [:error] [pid 36652:tid 36669] [client 20.198.91.212:7615] [client 20.198.91.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agk_0jZrzQadnZADvj9CTAAAAQ8"]
[Sun May 17 12:10:58.649029 2026] [:error] [pid 59060:tid 59074] [client 20.198.91.212:6435] [client 20.198.91.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agk_0vvwvq3bndkPE4nZKgAAAAU"]
[Sun May 17 12:10:59.217854 2026] [:error] [pid 17234:tid 17253] [client 20.198.91.212:6935] [client 20.198.91.212] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agk_09J4QOrYRCeDR2gyJQAAAVE"]
[Sun May 17 12:55:27.063052 2026] [:error] [pid 59060:tid 59092] [client 172.68.192.222:11316] [client 172.68.192.222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "aglKP_vwvq3bndkPE4ncVAAAABc"]
[Sun May 17 13:03:23.220372 2026] [:error] [pid 59166:tid 59190] [client 192.96.159.129:63799] [client 192.96.159.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "aglMG0_puQ1I47_0Urja-gAAANY"]
[Sun May 17 20:40:40.701386 2026] [:error] [pid 10835:tid 10884] [client 95.74.141.199:31880] [client 95.74.141.199] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 95.74.141.199, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agm3SEk8lW0-dtknLl8otQAAAgs"]
[Sun May 17 20:40:40.715594 2026] [:error] [pid 10835:tid 10884] [client 95.74.141.199:31880] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 17 22:21:22.188278 2026] [:error] [pid 59062:tid 59142] [client 136.115.174.60:57791] [client 136.115.174.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.115.174.60, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agnO4j4V9GkVWmCFmGY5WQAAAJM"]
[Sun May 17 22:21:22.193577 2026] [:error] [pid 59062:tid 59142] [client 136.115.174.60:57791] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 17 22:21:25.131335 2026] [:error] [pid 59062:tid 59132] [client 136.115.174.60:57791] [client 136.115.174.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "agnO5T4V9GkVWmCFmGY5eAAAAIk"]
[Sun May 17 22:21:25.541941 2026] [:error] [pid 10835:tid 10887] [client 136.115.174.60:65213] [client 136.115.174.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "agnO5Uk8lW0-dtknLl81cgAAAg4"]
[Sun May 17 22:21:26.001809 2026] [:error] [pid 10835:tid 10892] [client 136.115.174.60:61373] [client 136.115.174.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "agnO5kk8lW0-dtknLl81dAAAAhM"]
[Sun May 17 22:21:26.423867 2026] [:error] [pid 10835:tid 10875] [client 136.115.174.60:51592] [client 136.115.174.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "agnO5kk8lW0-dtknLl81dgAAAgI"]
[Sun May 17 22:21:26.837349 2026] [:error] [pid 59062:tid 59124] [client 136.115.174.60:59068] [client 136.115.174.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "agnO5j4V9GkVWmCFmGY5iAAAAIE"]
[Sun May 17 22:21:27.327572 2026] [:error] [pid 59062:tid 59129] [client 136.115.174.60:51523] [client 136.115.174.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "agnO5z4V9GkVWmCFmGY5jgAAAIY"]
[Sun May 17 22:21:27.763013 2026] [:error] [pid 59062:tid 59138] [client 136.115.174.60:50351] [client 136.115.174.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "agnO5z4V9GkVWmCFmGY5kwAAAI8"]
[Mon May 18 00:43:27.004313 2026] [:error] [pid 11079:tid 11125] [client 103.253.27.67:57754] [client 103.253.27.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "agnwL2eR3-DrxhvUqxEZgQAAAlU"]
[Mon May 18 00:43:27.696093 2026] [:error] [pid 11079:tid 11123] [client 103.253.27.67:57773] [client 103.253.27.67] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.vscode/sftp-config.json"] [unique_id "agnwL2eR3-DrxhvUqxEZiQAAAlM"]
[Mon May 18 11:26:55.182789 2026] [:error] [pid 43916:tid 43928] [client 45.92.1.211:59605] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-plain.php, referer: www.google.com
[Mon May 18 11:26:55.445695 2026] [:error] [pid 36579:tid 36588] [client 45.92.1.211:59598] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "agqG_1-aoZxBfgL5vDw57AAAAEY"], referer: www.google.com
[Mon May 18 11:26:55.447247 2026] [:error] [pid 36579:tid 36591] [client 45.92.1.211:59608] File does not exist: /usr/local/apache/htdocs/suspended-page/ufcthmjr.php, referer: www.google.com
[Mon May 18 11:26:55.947763 2026] [:error] [pid 36493:tid 36568] [client 45.92.1.211:61388] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "agqG_wynkzQB5nM668qS2QAAARM"], referer: www.google.com
[Mon May 18 11:26:56.199921 2026] [:error] [pid 36579:tid 36587] [client 45.92.1.211:60739] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agqHAF-aoZxBfgL5vDw5_AAAAEU"], referer: www.google.com
[Mon May 18 11:26:56.454952 2026] [:error] [pid 36492:tid 36540] [client 45.92.1.211:61390] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-plain.php"] [unique_id "agqHAGCVlogrkn9m2w5zKwAAABI"], referer: www.google.com
[Mon May 18 11:26:56.454994 2026] [:error] [pid 36492:tid 36536] [client 45.92.1.211:62765] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "agqHAGCVlogrkn9m2w5zKgAAAA4"], referer: www.google.com
[Mon May 18 11:26:56.957174 2026] [:error] [pid 36492:tid 36541] [client 45.92.1.211:63971] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "agqHAGCVlogrkn9m2w5zNgAAABM"], referer: www.google.com
[Mon May 18 11:26:57.226944 2026] [:error] [pid 36579:tid 36590] [client 45.92.1.211:63393] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agqHAV-aoZxBfgL5vDw6CwAAAEg"], referer: www.google.com
[Mon May 18 11:26:57.464457 2026] [:error] [pid 36493:tid 36557] [client 45.92.1.211:63974] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-plain.php"] [unique_id "agqHAQynkzQB5nM668qS3wAAAQg"], referer: www.google.com
[Mon May 18 11:26:57.465838 2026] [:error] [pid 44010:tid 44030] [client 45.92.1.211:65413] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfacgiapi/perl.alfa"] [unique_id "agqHATcFUuogD3-74-ZY_wAAANI"], referer: www.google.com
[Mon May 18 11:26:58.268691 2026] [:error] [pid 43916:tid 43928] [client 45.92.1.211:49802] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agqHAtQC236p33zJJvmuNwAAAIQ"], referer: www.google.com
[Mon May 18 11:26:58.466938 2026] [:error] [pid 44010:tid 44018] [client 45.92.1.211:50229] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-plain.php"] [unique_id "agqHAjcFUuogD3-74-ZZAgAAAMY"], referer: www.google.com
[Mon May 18 11:26:58.470281 2026] [:error] [pid 36491:tid 36503] [client 45.92.1.211:50235] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agqHAk555B9CZb6D60l4xwAAAUg"], referer: www.google.com
[Mon May 18 11:26:59.274101 2026] [:error] [pid 44010:tid 44036] [client 45.92.1.211:52050] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agqHAzcFUuogD3-74-ZZBQAAANg"], referer: www.google.com
[Mon May 18 11:26:59.475297 2026] [:error] [pid 36492:tid 36531] [client 45.92.1.211:52477] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agqHA2CVlogrkn9m2w5zUAAAAAk"], referer: www.google.com
[Mon May 18 11:26:59.476781 2026] [:error] [pid 36492:tid 36525] [client 45.92.1.211:52453] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-plain.php"] [unique_id "agqHA2CVlogrkn9m2w5zUQAAAAM"], referer: www.google.com
[Mon May 18 11:27:00.287787 2026] [:error] [pid 44046:tid 44072] [client 45.92.1.211:54298] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "agqHBIYF4k2jfXJBXk3UZQAAAZg"], referer: www.google.com
[Mon May 18 11:27:00.481173 2026] [:error] [pid 36579:tid 36594] [client 45.92.1.211:54704] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-plain.php"] [unique_id "agqHBF-aoZxBfgL5vDw6IQAAAEw"], referer: www.google.com
[Mon May 18 11:27:00.481810 2026] [:error] [pid 36579:tid 36601] [client 45.92.1.211:54700] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agqHBF-aoZxBfgL5vDw6IgAAAFM"], referer: www.google.com
[Mon May 18 11:27:01.487423 2026] [:error] [pid 36579:tid 36597] [client 45.92.1.211:57163] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agqHBV-aoZxBfgL5vDw6KAAAAE8"], referer: www.google.com
[Mon May 18 11:27:02.488015 2026] [:error] [pid 36491:tid 36510] [client 45.92.1.211:59646] [client 45.92.1.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "agqHBk555B9CZb6D60l4zQAAAU8"], referer: www.google.com
[Mon May 18 11:36:58.936088 2026] [:error] [pid 44046:tid 44057] [client 194.62.107.77:53373] [client 194.62.107.77] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "agqJWoYF4k2jfXJBXk3VaAAAAYk"]
[Mon May 18 19:45:35.283093 2026] [:error] [pid 43916:tid 43929] [client 138.84.75.85:54782] [client 138.84.75.85] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 138.84.75.85, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agr739QC236p33zJJvnLPgAAAIU"]
[Mon May 18 19:45:35.288018 2026] [:error] [pid 43916:tid 43929] [client 138.84.75.85:54782] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 19 00:04:03.288208 2026] [:error] [pid 44046:tid 44064] [client 34.16.230.160:40818] [client 34.16.230.160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "ags4c4YF4k2jfXJBXk0JWwAAAZA"]
[Tue May 19 04:49:42.751906 2026] [:error] [pid 38699:tid 38763] [client 103.65.237.216:54840] [client 103.65.237.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "agt7Zr--Adsw_P-dthYhNQAAAFU"]
[Tue May 19 04:49:43.017406 2026] [:error] [pid 38705:tid 38785] [client 103.65.237.216:54872] [client 103.65.237.216] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.vscode/sftp.json"] [unique_id "agt7Z8g5dNOZ5umN9lsNUwAAAJA"]
[Tue May 19 06:07:03.875925 2026] [:error] [pid 46815:tid 46828] [client 35.235.71.243:51894] [client 35.235.71.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "aguNhyPnRhJOmA06Lgr6cQAAAUs"]
[Tue May 19 14:18:31.784494 2026] [:error] [pid 38814:tid 38839] [client 223.178.80.162:8882] [client 223.178.80.162] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 223.178.80.162, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "agwAtwvkKuBwP0epzWd9iAAAANc"]
[Tue May 19 14:18:31.791211 2026] [:error] [pid 38814:tid 38839] [client 223.178.80.162:8882] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 19 21:12:27.780962 2026] [:error] [pid 38705:tid 38792] [client 104.43.249.64:9851] File does not exist: /usr/local/apache/htdocs/suspended-page/r.php
[Tue May 19 21:12:27.973450 2026] [:error] [pid 38705:tid 38779] [client 104.43.249.64:9851] File does not exist: /usr/local/apache/htdocs/suspended-page/ight.php
[Tue May 19 21:12:28.167277 2026] [:error] [pid 38705:tid 38773] [client 104.43.249.64:9851] File does not exist: /usr/local/apache/htdocs/suspended-page/wpns.php
[Tue May 19 21:12:28.378290 2026] [:error] [pid 38705:tid 38777] [client 104.43.249.64:9851] File does not exist: /usr/local/apache/htdocs/suspended-page/er.php
[Tue May 19 21:12:28.701999 2026] [:error] [pid 38705:tid 38781] [client 104.43.249.64:9851] File does not exist: /usr/local/apache/htdocs/suspended-page/sql.php
[Tue May 19 21:12:29.175536 2026] [:error] [pid 38705:tid 38789] [client 104.43.249.64:9851] File does not exist: /usr/local/apache/htdocs/suspended-page/getir.php
[Tue May 19 21:12:29.565511 2026] [:error] [pid 38705:tid 38788] [client 104.43.249.64:9851] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue May 19 21:12:29.757358 2026] [:error] [pid 38705:tid 38791] [client 104.43.249.64:9851] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Tue May 19 21:12:31.233767 2026] [:error] [pid 38705:tid 38791] [client 104.43.249.64:9851] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "agxhv8g5dNOZ5umN9ltjHwAAAJY"]
[Tue May 19 21:12:31.787334 2026] [:error] [pid 29823:tid 29853] [client 104.43.249.64:9835] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "agxhv2O09C0nAz8vRk5RaAAAAc4"]
[Tue May 19 21:12:32.449876 2026] [:error] [pid 29823:tid 29854] [client 104.43.249.64:9729] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "agxhwGO09C0nAz8vRk5RbQAAAc8"]
[Tue May 19 21:12:33.090691 2026] [:error] [pid 29823:tid 29840] [client 104.43.249.64:9827] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class.php"] [unique_id "agxhwWO09C0nAz8vRk5RbwAAAcU"]
[Tue May 19 21:12:33.501421 2026] [:error] [pid 29823:tid 29849] [client 104.43.249.64:9849] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "agxhwWO09C0nAz8vRk5RcQAAAco"]
[Tue May 19 21:12:34.154753 2026] [:error] [pid 29823:tid 29847] [client 104.43.249.64:9795] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "agxhwmO09C0nAz8vRk5RcgAAAcg"]
[Tue May 19 21:12:34.563377 2026] [:error] [pid 38699:tid 38758] [client 104.43.249.64:9741] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "agxhwr--Adsw_P-dthalxgAAAFA"]
[Tue May 19 21:12:35.048572 2026] [:error] [pid 29823:tid 29863] [client 104.43.249.64:9802] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/goods.php"] [unique_id "agxhw2O09C0nAz8vRk5RcwAAAdg"]
[Tue May 19 21:12:35.735922 2026] [:error] [pid 38697:tid 38739] [client 104.43.249.64:9846] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "agxhw6XP9pP6Kgt-msRWQQAAABg"]
[Tue May 19 21:12:36.327477 2026] [:error] [pid 29622:tid 29636] [client 104.43.249.64:9820] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "agxhxDkOqPKWkPs_P15TeQAAAgw"]
[Tue May 19 21:12:36.886762 2026] [:error] [pid 41573:tid 41599] [client 104.43.249.64:9811] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "agxhxC1A2bd6JDSW9RaXWAAAARg"]
[Tue May 19 21:12:37.493402 2026] [:error] [pid 38697:tid 38716] [client 104.43.249.64:9830] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "agxhxaXP9pP6Kgt-msRWRAAAAAE"]
[Tue May 19 21:12:38.012052 2026] [:error] [pid 38697:tid 38736] [client 104.43.249.64:9852] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "agxhxqXP9pP6Kgt-msRWRQAAABU"]
[Tue May 19 21:12:38.480691 2026] [:error] [pid 29823:tid 29835] [client 104.43.249.64:9748] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "agxhxmO09C0nAz8vRk5RdgAAAcA"]
[Tue May 19 21:12:38.969073 2026] [:error] [pid 29823:tid 29856] [client 104.43.249.64:9746] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "agxhxmO09C0nAz8vRk5ReAAAAdE"]
[Tue May 19 21:12:39.501284 2026] [:error] [pid 29823:tid 29852] [client 104.43.249.64:9844] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "agxhx2O09C0nAz8vRk5ReQAAAc0"]
[Tue May 19 21:12:40.026801 2026] [:error] [pid 29823:tid 29853] [client 104.43.249.64:9804] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "agxhyGO09C0nAz8vRk5RfAAAAc4"]
[Tue May 19 21:12:40.682385 2026] [:error] [pid 29823:tid 29854] [client 104.43.249.64:9730] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "agxhyGO09C0nAz8vRk5RfQAAAc8"]
[Tue May 19 21:12:41.229795 2026] [:error] [pid 41573:tid 41586] [client 104.43.249.64:9796] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "agxhyS1A2bd6JDSW9RaXXAAAAQs"]
[Tue May 19 21:12:41.994143 2026] [:error] [pid 38814:tid 38830] [client 104.43.249.64:9842] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aw.php"] [unique_id "agxhyQvkKuBwP0epzWegogAAAM4"]
[Tue May 19 21:12:42.642433 2026] [:error] [pid 38697:tid 38717] [client 104.43.249.64:9837] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bb.php"] [unique_id "agxhyqXP9pP6Kgt-msRWRgAAAAI"]
[Tue May 19 21:12:43.295590 2026] [:error] [pid 38699:tid 38754] [client 104.43.249.64:9843] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bb.php"] [unique_id "agxhy7--Adsw_P-dthalyAAAAEw"]
[Tue May 19 21:12:43.823974 2026] [:error] [pid 41573:tid 41594] [client 104.43.249.64:9738] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bb.php"] [unique_id "agxhyy1A2bd6JDSW9RaXXgAAARM"]
[Tue May 19 21:12:44.383050 2026] [:error] [pid 38697:tid 38725] [client 104.43.249.64:9749] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bb.php"] [unique_id "agxhzKXP9pP6Kgt-msRWSQAAAAo"]
[Tue May 19 21:12:45.035735 2026] [:error] [pid 29622:tid 29638] [client 104.43.249.64:9759] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "agxhzTkOqPKWkPs_P15TegAAAg4"]
[Tue May 19 21:12:45.668931 2026] [:error] [pid 38697:tid 38727] [client 104.43.249.64:9828] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "agxhzaXP9pP6Kgt-msRWSgAAAAw"]
[Tue May 19 21:12:46.230574 2026] [:error] [pid 29622:tid 29643] [client 104.43.249.64:10189] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "agxhzjkOqPKWkPs_P15TewAAAhM"]
[Tue May 19 21:12:46.955098 2026] [:error] [pid 29823:tid 29856] [client 104.43.249.64:9742] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "agxhzmO09C0nAz8vRk5RiAAAAdE"]
[Tue May 19 21:12:47.718912 2026] [:error] [pid 29823:tid 29839] [client 104.43.249.64:9798] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "agxhz2O09C0nAz8vRk5RiwAAAcQ"]
[Tue May 19 21:12:48.265889 2026] [:error] [pid 38814:tid 38838] [client 104.43.249.64:9819] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "agxh0AvkKuBwP0epzWegpQAAANY"]
[Tue May 19 21:12:48.829327 2026] [:error] [pid 38814:tid 38827] [client 104.43.249.64:9751] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "agxh0AvkKuBwP0epzWegpwAAAMs"]
[Tue May 19 21:12:49.415401 2026] [:error] [pid 29622:tid 29642] [client 104.43.249.64:9745] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "agxh0TkOqPKWkPs_P15TfgAAAhI"]
[Tue May 19 21:12:50.093341 2026] [:error] [pid 38814:tid 38821] [client 104.43.249.64:9728] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "agxh0gvkKuBwP0epzWegqQAAAMU"]
[Tue May 19 21:12:50.595027 2026] [:error] [pid 41573:tid 41587] [client 104.43.249.64:10196] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "agxh0i1A2bd6JDSW9RaXYAAAAQw"]
[Tue May 19 21:12:51.229706 2026] [:error] [pid 38699:tid 38760] [client 104.43.249.64:9797] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "agxh07--Adsw_P-dthalzAAAAFI"]
[Tue May 19 21:12:51.870975 2026] [:error] [pid 41573:tid 41591] [client 104.43.249.64:9807] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test1.php"] [unique_id "agxh0y1A2bd6JDSW9RaXYQAAARA"]
[Tue May 19 21:12:52.440227 2026] [:error] [pid 38697:tid 38738] [client 104.43.249.64:9847] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mail.php"] [unique_id "agxh1KXP9pP6Kgt-msRWSwAAABc"]
[Tue May 19 21:12:53.006011 2026] [:error] [pid 41573:tid 41597] [client 104.43.249.64:9735] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mail.php"] [unique_id "agxh1S1A2bd6JDSW9RaXYwAAARY"]
[Tue May 19 21:12:53.676046 2026] [:error] [pid 38697:tid 38729] [client 104.43.249.64:9781] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mail.php"] [unique_id "agxh1aXP9pP6Kgt-msRWTAAAAA4"]
[Tue May 19 21:12:54.494894 2026] [:error] [pid 38697:tid 38737] [client 104.43.249.64:9831] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-mail.php"] [unique_id "agxh1qXP9pP6Kgt-msRWTQAAABY"]
[Tue May 19 21:12:54.977267 2026] [:error] [pid 29622:tid 29648] [client 104.43.249.64:9815] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "agxh1jkOqPKWkPs_P15TgwAAAhg"]
[Tue May 19 21:12:55.423092 2026] [:error] [pid 38697:tid 38739] [client 104.43.249.64:9834] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "agxh16XP9pP6Kgt-msRWTgAAABg"]
[Tue May 19 21:12:56.160918 2026] [:error] [pid 46896:tid 46919] [client 104.43.249.64:9841] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "agxh2KCHyzL3Ci9LGE1k5QAAAZU"]
[Tue May 19 21:12:56.792439 2026] [:error] [pid 41573:tid 41592] [client 104.43.249.64:9739] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "agxh2C1A2bd6JDSW9RaXZQAAARE"]
[Tue May 19 21:12:57.617432 2026] [:error] [pid 46896:tid 46921] [client 104.43.249.64:9840] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "agxh2aCHyzL3Ci9LGE1k5gAAAZc"]
[Tue May 19 21:12:58.437407 2026] [:error] [pid 41573:tid 41575] [client 104.43.249.64:9766] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "agxh2i1A2bd6JDSW9RaXZgAAAQA"]
[Tue May 19 21:13:00.213881 2026] [:error] [pid 38699:tid 38763] [client 104.43.249.64:9740] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "agxh3L--Adsw_P-dthalzgAAAFU"]
[Tue May 19 21:13:01.272805 2026] [:error] [pid 38697:tid 38734] [client 104.43.249.64:9829] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "agxh3aXP9pP6Kgt-msRWVQAAABM"]
[Tue May 19 21:13:02.292031 2026] [:error] [pid 46896:tid 46912] [client 104.43.249.64:9839] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/php8.php"] [unique_id "agxh3qCHyzL3Ci9LGE1k5wAAAY4"]
[Tue May 19 21:13:03.319682 2026] [:error] [pid 46815:tid 46822] [client 104.43.249.64:9832] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/php8.php"] [unique_id "agxh3yPnRhJOmA06Lgp2wQAAAUU"]
[Tue May 19 21:13:04.073659 2026] [:error] [pid 55881:tid 55891] [client 104.43.249.64:9824] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/php8.php"] [unique_id "agxh4O-UExma0LUC7WAHoQAAAkg"]
[Tue May 19 21:13:05.032410 2026] [:error] [pid 29823:tid 29850] [client 104.43.249.64:9764] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/php8.php"] [unique_id "agxh4WO09C0nAz8vRk5RmwAAAcs"]
[Tue May 19 21:13:05.626039 2026] [:error] [pid 29823:tid 29859] [client 104.43.249.64:9805] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "agxh4WO09C0nAz8vRk5RngAAAdQ"]
[Tue May 19 21:13:06.122862 2026] [:error] [pid 29823:tid 29861] [client 104.43.249.64:9806] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "agxh4mO09C0nAz8vRk5RnwAAAdY"]
[Tue May 19 21:13:06.613667 2026] [:error] [pid 55881:tid 55900] [client 104.43.249.64:9761] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "agxh4u-UExma0LUC7WAHpAAAAlE"]
[Tue May 19 21:13:07.291353 2026] [:error] [pid 38699:tid 38746] [client 104.43.249.64:10193] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ioxi-o.php"] [unique_id "agxh47--Adsw_P-dthal1QAAAEQ"]
[Tue May 19 21:13:07.812708 2026] [:error] [pid 46815:tid 46819] [client 104.43.249.64:9734] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "agxh4yPnRhJOmA06Lgp2xAAAAUI"]
[Tue May 19 21:13:08.232466 2026] [:error] [pid 29823:tid 29862] [client 104.43.249.64:9793] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "agxh5GO09C0nAz8vRk5RpAAAAdc"]
[Tue May 19 21:13:08.777182 2026] [:error] [pid 46815:tid 46836] [client 104.43.249.64:10202] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "agxh5CPnRhJOmA06Lgp2xQAAAVM"]
[Tue May 19 21:13:09.388417 2026] [:error] [pid 46815:tid 46825] [client 104.43.249.64:9838] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "agxh5SPnRhJOmA06Lgp2xwAAAUg"]
[Tue May 19 21:13:09.882327 2026] [:error] [pid 38699:tid 38761] [client 104.43.249.64:9791] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "agxh5b--Adsw_P-dthal2AAAAFM"]
[Tue May 19 21:13:10.575574 2026] [:error] [pid 29823:tid 29837] [client 104.43.249.64:9850] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "agxh5mO09C0nAz8vRk5RpwAAAcI"]
[Tue May 19 21:13:11.409616 2026] [:error] [pid 38705:tid 38783] [client 104.43.249.64:9777] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "agxh58g5dNOZ5umN9ltjJgAAAI4"]
[Tue May 19 21:13:12.152658 2026] [:error] [pid 55881:tid 55887] [client 104.43.249.64:9733] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "agxh6O-UExma0LUC7WAHpQAAAkQ"]
[Tue May 19 21:13:12.796376 2026] [:error] [pid 29622:tid 29636] [client 104.43.249.64:10209] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/load.php"] [unique_id "agxh6DkOqPKWkPs_P15ThwAAAgw"]
[Tue May 19 21:13:13.445297 2026] [:error] [pid 29823:tid 29856] [client 104.43.249.64:9809] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/load.php"] [unique_id "agxh6WO09C0nAz8vRk5RqwAAAdE"]
[Tue May 19 21:13:13.951299 2026] [:error] [pid 29823:tid 29853] [client 104.43.249.64:9737] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/load.php"] [unique_id "agxh6WO09C0nAz8vRk5RrAAAAc4"]
[Tue May 19 21:13:14.943175 2026] [:error] [pid 29823:tid 29838] [client 104.43.249.64:10183] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/load.php"] [unique_id "agxh6mO09C0nAz8vRk5RsAAAAcM"]
[Tue May 19 21:13:15.528080 2026] [:error] [pid 29823:tid 29848] [client 104.43.249.64:10181] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "agxh62O09C0nAz8vRk5RsQAAAck"]
[Tue May 19 21:13:16.736265 2026] [:error] [pid 38699:tid 38744] [client 104.43.249.64:9747] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "agxh7L--Adsw_P-dthal3AAAAEI"]
[Tue May 19 21:13:17.237286 2026] [:error] [pid 29622:tid 29631] [client 104.43.249.64:9763] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "agxh7TkOqPKWkPs_P15TiQAAAgc"]
[Tue May 19 21:13:17.876178 2026] [:error] [pid 38699:tid 38747] [client 104.43.249.64:9821] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "agxh7b--Adsw_P-dthal3gAAAEU"]
[Tue May 19 21:13:19.027455 2026] [:error] [pid 38699:tid 38746] [client 104.43.249.64:9792] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "agxh77--Adsw_P-dthal4AAAAEQ"]
[Tue May 19 21:13:20.779297 2026] [:error] [pid 38699:tid 38764] [client 104.43.249.64:9789] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "agxh8L--Adsw_P-dthal4gAAAFY"]
[Tue May 19 21:13:22.511988 2026] [:error] [pid 38699:tid 38760] [client 104.43.249.64:10182] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "agxh8r--Adsw_P-dthal4wAAAFI"]
[Tue May 19 21:13:24.278497 2026] [:error] [pid 46896:tid 46900] [client 104.43.249.64:9736] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "agxh9KCHyzL3Ci9LGE1k8QAAAYI"]
[Tue May 19 21:13:26.244045 2026] [:error] [pid 38699:tid 38759] [client 104.43.249.64:9800] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpinfo/info.php"] [unique_id "agxh9r--Adsw_P-dthal5gAAAFE"]
[Tue May 19 21:13:26.895517 2026] [:error] [pid 46896:tid 46918] [client 104.43.249.64:9744] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpinfo/info.php"] [unique_id "agxh9qCHyzL3Ci9LGE1k8wAAAZQ"]
[Tue May 19 21:13:27.496945 2026] [:error] [pid 38699:tid 38744] [client 104.43.249.64:9762] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpinfo/info.php"] [unique_id "agxh97--Adsw_P-dthal6AAAAEI"]
[Tue May 19 21:13:28.052374 2026] [:error] [pid 38705:tid 38779] [client 104.43.249.64:10137] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpinfo/info.php"] [unique_id "agxh-Mg5dNOZ5umN9ltjLAAAAIo"]
[Tue May 19 21:13:28.658989 2026] [:error] [pid 38705:tid 38773] [client 104.43.249.64:9816] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "agxh-Mg5dNOZ5umN9ltjLQAAAIQ"]
[Tue May 19 21:13:29.323088 2026] [:error] [pid 38699:tid 38755] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Tue May 19 21:13:29.828555 2026] [:error] [pid 38699:tid 38747] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/CDX2.php
[Tue May 19 21:13:30.020979 2026] [:error] [pid 38699:tid 38762] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/profile.php
[Tue May 19 21:13:30.225693 2026] [:error] [pid 38699:tid 38753] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Tue May 19 21:13:30.440194 2026] [:error] [pid 38699:tid 38758] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/a4.php
[Tue May 19 21:13:30.631681 2026] [:error] [pid 38699:tid 38756] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Tue May 19 21:13:30.836497 2026] [:error] [pid 38699:tid 38746] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Tue May 19 21:13:31.029220 2026] [:error] [pid 38699:tid 38766] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/core.php
[Tue May 19 21:13:31.221314 2026] [:error] [pid 38699:tid 38754] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Tue May 19 21:13:31.612190 2026] [:error] [pid 38699:tid 38751] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/bc.php
[Tue May 19 21:13:31.804519 2026] [:error] [pid 38699:tid 38760] [client 104.43.249.64:9817] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Tue May 19 21:13:31.993690 2026] [:error] [pid 38699:tid 38761] [client 104.43.249.64:9817] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "agxh-7--Adsw_P-dthal9QAAAFM"]
[Tue May 19 21:13:32.689605 2026] [:error] [pid 46896:tid 46910] [client 104.43.249.64:9743] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "agxh_KCHyzL3Ci9LGE1k-AAAAYw"]
[Tue May 19 21:13:33.248267 2026] [:error] [pid 29823:tid 29838] [client 104.43.249.64:9731] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "agxh_WO09C0nAz8vRk5RuAAAAcM"]
[Tue May 19 21:13:33.661000 2026] [:error] [pid 29823:tid 29848] [client 104.43.249.64:9769] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/casp1.php"] [unique_id "agxh_WO09C0nAz8vRk5RuQAAAck"]
[Tue May 19 21:13:34.103269 2026] [:error] [pid 38699:tid 38750] [client 104.43.249.64:9779] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file6.php"] [unique_id "agxh_r--Adsw_P-dthal9gAAAEg"]
[Tue May 19 21:13:34.591418 2026] [:error] [pid 38705:tid 38784] [client 104.43.249.64:10238] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file6.php"] [unique_id "agxh_sg5dNOZ5umN9ltjLwAAAI8"]
[Tue May 19 21:13:35.321862 2026] [:error] [pid 38699:tid 38763] [client 104.43.249.64:9752] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file6.php"] [unique_id "agxh_7--Adsw_P-dthal-QAAAFU"]
[Tue May 19 21:13:35.835675 2026] [:error] [pid 29823:tid 29847] [client 104.43.249.64:9782] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file6.php"] [unique_id "agxh_2O09C0nAz8vRk5RvQAAAcg"]
[Tue May 19 21:13:36.553691 2026] [:error] [pid 38705:tid 38786] [client 104.43.249.64:9787] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xs.php"] [unique_id "agxiAMg5dNOZ5umN9ltjMQAAAJE"]
[Tue May 19 21:13:37.044072 2026] [:error] [pid 38814:tid 38822] [client 104.43.249.64:9757] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xs.php"] [unique_id "agxiAQvkKuBwP0epzWegsQAAAMY"]
[Tue May 19 21:13:37.563922 2026] [:error] [pid 46815:tid 46827] [client 104.43.249.64:9768] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xs.php"] [unique_id "agxiASPnRhJOmA06Lgp2ygAAAUo"]
[Tue May 19 21:13:38.089633 2026] [:error] [pid 38814:tid 38823] [client 104.43.249.64:9836] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xs.php"] [unique_id "agxiAgvkKuBwP0epzWegswAAAMc"]
[Tue May 19 21:13:38.617220 2026] [:error] [pid 46815:tid 46841] [client 104.43.249.64:9750] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxa.php"] [unique_id "agxiAiPnRhJOmA06Lgp2zAAAAVg"]
[Tue May 19 21:13:39.107738 2026] [:error] [pid 38697:tid 38723] [client 104.43.249.64:9855] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxa.php"] [unique_id "agxiA6XP9pP6Kgt-msRWZQAAAAg"]
[Tue May 19 21:13:39.766532 2026] [:error] [pid 38697:tid 38735] [client 104.43.249.64:10214] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxa.php"] [unique_id "agxiA6XP9pP6Kgt-msRWZgAAABQ"]
[Tue May 19 21:13:40.413382 2026] [:error] [pid 38697:tid 38722] [client 104.43.249.64:9776] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxa.php"] [unique_id "agxiBKXP9pP6Kgt-msRWaAAAAAc"]
[Tue May 19 21:13:40.860443 2026] [:error] [pid 38697:tid 38716] [client 104.43.249.64:9818] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index0.php"] [unique_id "agxiBKXP9pP6Kgt-msRWaQAAAAE"]
[Tue May 19 21:13:41.436885 2026] [:error] [pid 46815:tid 46821] [client 104.43.249.64:10192] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index0.php"] [unique_id "agxiBSPnRhJOmA06Lgp2zQAAAUQ"]
[Tue May 19 21:13:41.988063 2026] [:error] [pid 38697:tid 38718] [client 104.43.249.64:10227] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index0.php"] [unique_id "agxiBaXP9pP6Kgt-msRWbAAAAAM"]
[Tue May 19 21:13:42.557972 2026] [:error] [pid 55881:tid 55893] [client 104.43.249.64:9799] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index0.php"] [unique_id "agxiBu-UExma0LUC7WAHtQAAAko"]
[Tue May 19 21:13:43.220917 2026] [:error] [pid 38705:tid 38771] [client 104.43.249.64:9786] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "agxiB8g5dNOZ5umN9ltjNAAAAII"]
[Tue May 19 21:13:43.688473 2026] [:error] [pid 38705:tid 38780] [client 104.43.249.64:9770] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "agxiB8g5dNOZ5umN9ltjNQAAAIs"]
[Tue May 19 21:13:44.256567 2026] [:error] [pid 46815:tid 46833] [client 104.43.249.64:9772] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "agxiCCPnRhJOmA06Lgp2zwAAAVA"]
[Tue May 19 21:13:44.801751 2026] [:error] [pid 55881:tid 55891] [client 104.43.249.64:9854] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kz.php"] [unique_id "agxiCO-UExma0LUC7WAHugAAAkg"]
[Tue May 19 21:13:45.414491 2026] [:error] [pid 29823:tid 29853] [client 104.43.249.64:10135] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/19.php"] [unique_id "agxiCWO09C0nAz8vRk5RwQAAAc4"]
[Tue May 19 21:13:45.843728 2026] [:error] [pid 38699:tid 38746] [client 104.43.249.64:10230] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/19.php"] [unique_id "agxiCb--Adsw_P-dthal_gAAAEQ"]
[Tue May 19 21:13:46.327399 2026] [:error] [pid 38697:tid 38725] [client 104.43.249.64:10179] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/19.php"] [unique_id "agxiCqXP9pP6Kgt-msRWbwAAAAo"]
[Tue May 19 21:13:46.827065 2026] [:error] [pid 41573:tid 41597] [client 104.43.249.64:9732] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/19.php"] [unique_id "agxiCi1A2bd6JDSW9RaXcAAAARY"]
[Tue May 19 21:13:47.359978 2026] [:error] [pid 55881:tid 55890] [client 104.43.249.64:10191] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "agxiC--UExma0LUC7WAHvAAAAkc"]
[Tue May 19 21:13:47.781364 2026] [:error] [pid 38705:tid 38792] [client 104.43.249.64:9771] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "agxiC8g5dNOZ5umN9ltjNwAAAJc"]
[Tue May 19 21:13:48.193670 2026] [:error] [pid 38705:tid 38779] [client 104.43.249.64:9801] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "agxiDMg5dNOZ5umN9ltjOQAAAIo"]
[Tue May 19 21:13:48.633554 2026] [:error] [pid 38814:tid 38828] [client 104.43.249.64:10228] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/11.php"] [unique_id "agxiDAvkKuBwP0epzWegtQAAAMw"]
[Tue May 19 21:13:49.236053 2026] [:error] [pid 38697:tid 38715] [client 104.43.249.64:10213] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "agxiDaXP9pP6Kgt-msRWcAAAAAA"]
[Tue May 19 21:13:49.917869 2026] [:error] [pid 38699:tid 38766] [client 104.43.249.64:9790] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "agxiDb--Adsw_P-dthal_wAAAFg"]
[Tue May 19 21:13:50.548611 2026] [:error] [pid 46815:tid 46837] [client 104.43.249.64:9765] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "agxiDiPnRhJOmA06Lgp20QAAAVQ"]
[Tue May 19 21:13:50.952994 2026] [:error] [pid 55881:tid 55886] [client 104.43.249.64:9754] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "agxiDu-UExma0LUC7WAHwgAAAkM"]
[Tue May 19 21:13:51.573468 2026] [:error] [pid 41573:tid 41579] [client 104.43.249.64:9753] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "agxiDy1A2bd6JDSW9RaXdAAAAQQ"]
[Tue May 19 21:13:52.458707 2026] [:error] [pid 41573:tid 41598] [client 104.43.249.64:9826] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "agxiEC1A2bd6JDSW9RaXdwAAARc"]
[Tue May 19 21:13:53.548730 2026] [:error] [pid 41573:tid 41581] [client 104.43.249.64:10153] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "agxiES1A2bd6JDSW9RaXeQAAAQY"]
[Tue May 19 21:13:54.134725 2026] [:error] [pid 29622:tid 29628] [client 104.43.249.64:9773] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws78.php"] [unique_id "agxiEjkOqPKWkPs_P15TlQAAAgQ"]
[Tue May 19 21:13:54.901040 2026] [:error] [pid 38697:tid 38737] [client 104.43.249.64:10199] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "agxiEqXP9pP6Kgt-msRWdAAAABY"]
[Tue May 19 21:13:55.943843 2026] [:error] [pid 55881:tid 55898] [client 104.43.249.64:10171] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "agxiE--UExma0LUC7WAHxQAAAk8"]
[Tue May 19 21:13:56.989987 2026] [:error] [pid 46815:tid 46830] [client 104.43.249.64:9814] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "agxiFCPnRhJOmA06Lgp20gAAAU0"]
[Tue May 19 21:13:58.469277 2026] [:error] [pid 38705:tid 38789] [client 104.43.249.64:9784] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "agxiFsg5dNOZ5umN9ltjOwAAAJQ"]
[Tue May 19 21:14:00.113018 2026] [:error] [pid 38814:tid 38835] [client 104.43.249.64:10184] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "agxiGAvkKuBwP0epzWeguAAAANM"]
[Tue May 19 21:14:00.733833 2026] [:error] [pid 38705:tid 38785] [client 104.43.249.64:10186] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "agxiGMg5dNOZ5umN9ltjPgAAAJA"]
[Tue May 19 21:14:01.450462 2026] [:error] [pid 29622:tid 29632] [client 104.43.249.64:9825] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "agxiGTkOqPKWkPs_P15TmAAAAgg"]
[Tue May 19 21:14:02.183321 2026] [:error] [pid 38705:tid 38783] [client 104.43.249.64:10139] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a7.php"] [unique_id "agxiGsg5dNOZ5umN9ltjQAAAAI4"]
[Tue May 19 21:14:02.917641 2026] [:error] [pid 38705:tid 38791] [client 104.43.249.64:10114] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "agxiGsg5dNOZ5umN9ltjQgAAAJY"]
[Tue May 19 21:14:03.574789 2026] [:error] [pid 55881:tid 55901] [client 104.43.249.64:10236] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "agxiG--UExma0LUC7WAHywAAAlI"]
[Tue May 19 21:14:04.196480 2026] [:error] [pid 38705:tid 38779] [client 104.43.249.64:10217] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "agxiHMg5dNOZ5umN9ltjRAAAAIo"]
[Tue May 19 21:14:04.766131 2026] [:error] [pid 46815:tid 46840] [client 104.43.249.64:10229] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/BDKR28WP.php"] [unique_id "agxiHCPnRhJOmA06Lgp21QAAAVc"]
[Tue May 19 21:14:05.371060 2026] [:error] [pid 38699:tid 38751] [client 104.43.249.64:10197] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "agxiHb--Adsw_P-dthamAQAAAEk"]
[Tue May 19 21:14:05.972795 2026] [:error] [pid 38705:tid 38772] [client 104.43.249.64:10185] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "agxiHcg5dNOZ5umN9ltjTAAAAIM"]
[Tue May 19 21:14:06.761207 2026] [:error] [pid 38705:tid 38770] [client 104.43.249.64:10194] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "agxiHsg5dNOZ5umN9ltjTQAAAIE"]
[Tue May 19 21:14:07.387998 2026] [:error] [pid 29823:tid 29849] [client 104.43.249.64:10200] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "agxiH2O09C0nAz8vRk5RxQAAAco"]
[Tue May 19 21:14:08.507759 2026] [:error] [pid 46815:tid 46820] [client 104.43.249.64:10131] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d.php"] [unique_id "agxiICPnRhJOmA06Lgp21wAAAUM"]
[Tue May 19 21:14:09.401826 2026] [:error] [pid 55881:tid 55888] [client 104.43.249.64:10237] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d.php"] [unique_id "agxiIe-UExma0LUC7WAH0QAAAkU"]
[Tue May 19 21:14:10.337588 2026] [:error] [pid 38697:tid 38724] [client 104.43.249.64:10187] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d.php"] [unique_id "agxiIqXP9pP6Kgt-msRWdgAAAAk"]
[Tue May 19 21:14:11.132075 2026] [:error] [pid 29823:tid 29842] [client 104.43.249.64:9822] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/d.php"] [unique_id "agxiI2O09C0nAz8vRk5RxgAAAcc"]
[Tue May 19 21:14:11.757182 2026] [:error] [pid 55881:tid 55890] [client 104.43.249.64:10130] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "agxiI--UExma0LUC7WAH1AAAAkc"]
[Tue May 19 21:14:12.412795 2026] [:error] [pid 38699:tid 38750] [client 104.43.249.64:10207] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "agxiJL--Adsw_P-dthamBAAAAEg"]
[Tue May 19 21:14:12.841838 2026] [:error] [pid 38697:tid 38717] [client 104.43.249.64:10212] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "agxiJKXP9pP6Kgt-msRWewAAAAI"]
[Tue May 19 21:14:13.483942 2026] [:error] [pid 46815:tid 46824] [client 104.43.249.64:10190] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xff.php"] [unique_id "agxiJSPnRhJOmA06Lgp22QAAAUc"]
[Tue May 19 21:14:14.087023 2026] [:error] [pid 38814:tid 38825] [client 104.43.249.64:10226] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "agxiJgvkKuBwP0epzWegvAAAAMk"]
[Tue May 19 21:14:14.577813 2026] [:error] [pid 46896:tid 46910] [client 104.43.249.64:9823] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "agxiJqCHyzL3Ci9LGE1lCQAAAYw"]
[Tue May 19 21:14:15.231276 2026] [:error] [pid 46896:tid 46908] [client 104.43.249.64:9780] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "agxiJ6CHyzL3Ci9LGE1lCgAAAYo"]
[Tue May 19 21:14:16.036600 2026] [:error] [pid 46896:tid 46920] [client 104.43.249.64:10133] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bal.php"] [unique_id "agxiKKCHyzL3Ci9LGE1lCwAAAZY"]
[Tue May 19 21:14:16.641568 2026] [:error] [pid 29823:tid 29847] [client 104.43.249.64:10224] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "agxiKGO09C0nAz8vRk5RyAAAAcg"]
[Tue May 19 21:14:17.159081 2026] [:error] [pid 29823:tid 29851] [client 104.43.249.64:10158] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "agxiKWO09C0nAz8vRk5RygAAAcw"]
[Tue May 19 21:14:17.751451 2026] [:error] [pid 29823:tid 29841] [client 104.43.249.64:9808] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "agxiKWO09C0nAz8vRk5RywAAAcY"]
[Tue May 19 21:14:18.299142 2026] [:error] [pid 46896:tid 46901] [client 104.43.249.64:10116] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xltt.php"] [unique_id "agxiKqCHyzL3Ci9LGE1lDAAAAYM"]
[Tue May 19 21:14:18.809022 2026] [:error] [pid 29823:tid 29850] [client 104.43.249.64:9803] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son.php"] [unique_id "agxiKmO09C0nAz8vRk5RzgAAAcs"]
[Tue May 19 21:14:19.347899 2026] [:error] [pid 29823:tid 29856] [client 104.43.249.64:9812] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son.php"] [unique_id "agxiK2O09C0nAz8vRk5RzwAAAdE"]
[Tue May 19 21:14:20.089705 2026] [:error] [pid 46815:tid 46837] [client 104.43.249.64:10134] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son.php"] [unique_id "agxiLCPnRhJOmA06Lgp24AAAAVQ"]
[Tue May 19 21:14:20.537140 2026] [:error] [pid 41573:tid 41577] [client 104.43.249.64:10239] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son.php"] [unique_id "agxiLC1A2bd6JDSW9RaXfQAAAQI"]
[Tue May 19 21:14:21.219824 2026] [:error] [pid 29823:tid 29854] [client 104.43.249.64:10225] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "agxiLWO09C0nAz8vRk5R0gAAAc8"]
[Tue May 19 21:14:21.877749 2026] [:error] [pid 41573:tid 41575] [client 104.43.249.64:10117] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "agxiLS1A2bd6JDSW9RaXfgAAAQA"]
[Tue May 19 21:14:22.471907 2026] [:error] [pid 41573:tid 41579] [client 104.43.249.64:10198] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "agxiLi1A2bd6JDSW9RaXfwAAAQQ"]
[Tue May 19 21:14:22.939105 2026] [:error] [pid 41573:tid 41589] [client 104.43.249.64:9834] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "agxiLi1A2bd6JDSW9RaXgQAAAQ4"]
[Tue May 19 21:14:23.480630 2026] [:error] [pid 46896:tid 46906] [client 104.43.249.64:10144] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zo.php"] [unique_id "agxiL6CHyzL3Ci9LGE1lDQAAAYg"]
[Tue May 19 21:14:24.086506 2026] [:error] [pid 41573:tid 41598] [client 104.43.249.64:9775] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zo.php"] [unique_id "agxiMC1A2bd6JDSW9RaXgwAAARc"]
[Tue May 19 21:14:24.532336 2026] [:error] [pid 46815:tid 46824] [client 104.43.249.64:10216] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zo.php"] [unique_id "agxiMCPnRhJOmA06Lgp24QAAAUc"]
[Tue May 19 21:14:25.109617 2026] [:error] [pid 46896:tid 46904] [client 104.43.249.64:10148] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zo.php"] [unique_id "agxiMaCHyzL3Ci9LGE1lDwAAAYY"]
[Tue May 19 21:14:25.630011 2026] [:error] [pid 38705:tid 38789] [client 104.43.249.64:10201] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "agxiMcg5dNOZ5umN9ltjUwAAAJQ"]
[Tue May 19 21:14:26.091490 2026] [:error] [pid 38705:tid 38774] [client 104.43.249.64:10203] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "agxiMsg5dNOZ5umN9ltjVQAAAIU"]
[Tue May 19 21:14:26.663900 2026] [:error] [pid 38705:tid 38784] [client 104.43.249.64:10160] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "agxiMsg5dNOZ5umN9ltjVgAAAI8"]
[Tue May 19 21:14:27.352212 2026] [:error] [pid 46896:tid 46902] [client 104.43.249.64:10115] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xper1.php"] [unique_id "agxiM6CHyzL3Ci9LGE1lEAAAAYQ"]
[Tue May 19 21:14:28.015373 2026] [:error] [pid 46815:tid 46823] [client 104.43.249.64:10077] [client 104.43.249.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "agxiNCPnRhJOmA06Lgp24wAAAUY"]
[Tue May 19 21:14:28.625735 2026] [:error] [pid 46815:tid 46841] [client 104.43.249.64:10132] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s1.php"] [unique_id "agxiNCPnRhJOmA06Lgp25AAAAVg"]
[Tue May 19 21:14:29.227309 2026] [:error] [pid 46815:tid 46834] [client 104.43.249.64:9785] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s1.php"] [unique_id "agxiNSPnRhJOmA06Lgp25gAAAVE"]
[Tue May 19 21:14:29.793856 2026] [:error] [pid 46815:tid 46833] [client 104.43.249.64:10143] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s1.php"] [unique_id "agxiNSPnRhJOmA06Lgp25wAAAVA"]
[Tue May 19 21:14:30.220000 2026] [:error] [pid 38699:tid 38759] [client 104.43.249.64:10177] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/de.php"] [unique_id "agxiNr--Adsw_P-dthamBgAAAFE"]
[Tue May 19 21:14:30.674589 2026] [:error] [pid 41573:tid 41594] [client 104.43.249.64:9783] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/de.php"] [unique_id "agxiNi1A2bd6JDSW9RaXhwAAARM"]
[Tue May 19 21:14:31.455048 2026] [:error] [pid 29823:tid 29863] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/de.php
[Tue May 19 21:14:31.647422 2026] [:error] [pid 29823:tid 29847] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/1a.php
[Tue May 19 21:14:31.838798 2026] [:error] [pid 29823:tid 29851] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Tue May 19 21:14:32.032223 2026] [:error] [pid 29823:tid 29841] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/f35.php
[Tue May 19 21:14:32.247548 2026] [:error] [pid 29823:tid 29862] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/sky.php
[Tue May 19 21:14:32.438709 2026] [:error] [pid 29823:tid 29835] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/man.php
[Tue May 19 21:14:32.641660 2026] [:error] [pid 29823:tid 29837] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue May 19 21:14:32.831899 2026] [:error] [pid 29823:tid 29860] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Tue May 19 21:14:33.022015 2026] [:error] [pid 29823:tid 29858] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/pp.php
[Tue May 19 21:14:33.212294 2026] [:error] [pid 29823:tid 29850] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/mar.php
[Tue May 19 21:14:33.402997 2026] [:error] [pid 29823:tid 29856] [client 104.43.249.64:10206] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue May 19 21:14:33.590355 2026] [:error] [pid 29823:tid 29857] [client 104.43.249.64:10206] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "agxiOWO09C0nAz8vRk5R4AAAAdI"]
[Tue May 19 21:14:34.096266 2026] [:error] [pid 29823:tid 29853] [client 104.43.249.64:10233] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "agxiOmO09C0nAz8vRk5R4QAAAc4"]
[Tue May 19 21:14:34.737480 2026] [:error] [pid 29823:tid 29859] [client 104.43.249.64:10146] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "agxiOmO09C0nAz8vRk5R4gAAAdQ"]
[Tue May 19 21:14:35.303404 2026] [:error] [pid 38705:tid 38778] [client 104.43.249.64:10121] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/acp.php"] [unique_id "agxiO8g5dNOZ5umN9ltjWgAAAIk"]
[Tue May 19 21:14:35.976569 2026] [:error] [pid 29823:tid 29852] [client 104.43.249.64:10188] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zdd.php"] [unique_id "agxiO2O09C0nAz8vRk5R5gAAAc0"]
[Tue May 19 21:14:36.514487 2026] [:error] [pid 46815:tid 46837] [client 104.43.249.64:9774] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zdd.php"] [unique_id "agxiPCPnRhJOmA06Lgp26gAAAVQ"]
[Tue May 19 21:14:37.123818 2026] [:error] [pid 29823:tid 29863] [client 104.43.249.64:10058] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zdd.php"] [unique_id "agxiPWO09C0nAz8vRk5R6gAAAdg"]
[Tue May 19 21:14:37.782796 2026] [:error] [pid 38705:tid 38792] [client 104.43.249.64:10142] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zdd.php"] [unique_id "agxiPcg5dNOZ5umN9ltjXAAAAJc"]
[Tue May 19 21:14:38.314572 2026] [:error] [pid 41573:tid 41593] [client 104.43.249.64:10078] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "agxiPi1A2bd6JDSW9RaXiAAAARI"]
[Tue May 19 21:14:39.159609 2026] [:error] [pid 41573:tid 41587] [client 104.43.249.64:10161] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "agxiPy1A2bd6JDSW9RaXiQAAAQw"]
[Tue May 19 21:14:39.807987 2026] [:error] [pid 38814:tid 38817] [client 104.43.249.64:10208] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "agxiPwvkKuBwP0epzWegvQAAAME"]
[Tue May 19 21:14:40.603144 2026] [:error] [pid 29622:tid 29647] [client 104.43.249.64:10204] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "agxiQDkOqPKWkPs_P15TnQAAAhc"]
[Tue May 19 21:14:41.425568 2026] [:error] [pid 29823:tid 29850] [client 104.43.249.64:10138] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sallu.php"] [unique_id "agxiQWO09C0nAz8vRk5R7wAAAcs"]
[Tue May 19 21:14:41.951329 2026] [:error] [pid 29823:tid 29853] [client 104.43.249.64:9848] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sallu.php"] [unique_id "agxiQWO09C0nAz8vRk5R8QAAAc4"]
[Tue May 19 21:14:42.478012 2026] [:error] [pid 29823:tid 29839] [client 104.43.249.64:10087] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sallu.php"] [unique_id "agxiQmO09C0nAz8vRk5R8wAAAcQ"]
[Tue May 19 21:14:43.005819 2026] [:error] [pid 41573:tid 41576] [client 104.43.249.64:10129] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sallu.php"] [unique_id "agxiQy1A2bd6JDSW9RaXigAAAQE"]
[Tue May 19 21:14:43.559554 2026] [:error] [pid 38814:tid 38837] [client 104.43.249.64:10195] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "agxiQwvkKuBwP0epzWegwQAAANU"]
[Tue May 19 21:14:44.013643 2026] [:error] [pid 41573:tid 41577] [client 104.43.249.64:9755] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "agxiRC1A2bd6JDSW9RaXjQAAAQI"]
[Tue May 19 21:14:44.464153 2026] [:error] [pid 38814:tid 38828] [client 104.43.249.64:9788] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "agxiRAvkKuBwP0epzWegwgAAAMw"]
[Tue May 19 21:14:44.996420 2026] [:error] [pid 41573:tid 41579] [client 104.43.249.64:10176] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboute.php"] [unique_id "agxiRC1A2bd6JDSW9RaXkAAAAQQ"]
[Tue May 19 21:14:45.702165 2026] [:error] [pid 38814:tid 38831] [client 104.43.249.64:10221] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "agxiRQvkKuBwP0epzWegxAAAAM8"]
[Tue May 19 21:14:46.370276 2026] [:error] [pid 38814:tid 38832] [client 104.43.249.64:10168] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "agxiRgvkKuBwP0epzWegxQAAANA"]
[Tue May 19 21:14:47.392492 2026] [:error] [pid 41573:tid 41598] [client 104.43.249.64:10210] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "agxiRy1A2bd6JDSW9RaXkgAAARc"]
[Tue May 19 21:14:48.222434 2026] [:error] [pid 29823:tid 29850] [client 104.43.249.64:10223] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ayk.php"] [unique_id "agxiSGO09C0nAz8vRk5R-QAAAcs"]
[Tue May 19 21:14:48.661504 2026] [:error] [pid 38699:tid 38755] [client 104.43.249.64:10205] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/one.php"] [unique_id "agxiSL--Adsw_P-dthamCAAAAE0"]
[Tue May 19 21:14:49.130604 2026] [:error] [pid 38699:tid 38752] [client 104.43.249.64:10178] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/one.php"] [unique_id "agxiSb--Adsw_P-dthamCQAAAEo"]
[Tue May 19 21:14:49.944715 2026] [:error] [pid 38699:tid 38753] [client 104.43.249.64:10154] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/one.php"] [unique_id "agxiSb--Adsw_P-dthamCwAAAEs"]
[Tue May 19 21:14:50.915095 2026] [:error] [pid 38814:tid 38816] [client 104.43.249.64:10070] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/one.php"] [unique_id "agxiSgvkKuBwP0epzWegxwAAAMA"]
[Tue May 19 21:14:51.797264 2026] [:error] [pid 41573:tid 41588] [client 104.43.249.64:10112] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "agxiSy1A2bd6JDSW9RaXmAAAAQ0"]
[Tue May 19 21:14:52.551329 2026] [:error] [pid 38814:tid 38829] [client 104.43.249.64:10157] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "agxiTAvkKuBwP0epzWegyAAAAM0"]
[Tue May 19 21:14:53.424382 2026] [:error] [pid 41573:tid 41591] [client 104.43.249.64:10232] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "agxiTS1A2bd6JDSW9RaXnAAAARA"]
[Tue May 19 21:14:54.906553 2026] [:error] [pid 38699:tid 38754] [client 104.43.249.64:10128] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tx79.php"] [unique_id "agxiTr--Adsw_P-dthamDgAAAEw"]
[Tue May 19 21:14:55.963359 2026] [:error] [pid 41573:tid 41590] [client 104.43.249.64:9833] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "agxiTy1A2bd6JDSW9RaXpAAAAQ8"]
[Tue May 19 21:14:56.963841 2026] [:error] [pid 38814:tid 38818] [client 104.43.249.64:9760] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "agxiUAvkKuBwP0epzWegywAAAMI"]
[Tue May 19 21:14:59.548243 2026] [:error] [pid 41573:tid 41590] [client 104.43.249.64:10180] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "agxiUy1A2bd6JDSW9RaXsgAAAQ8"]
[Tue May 19 21:15:01.600645 2026] [:error] [pid 55881:tid 55891] [client 104.43.249.64:10097] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-class.php"] [unique_id "agxiVe-UExma0LUC7WAH2wAAAkg"]
[Tue May 19 21:15:02.618838 2026] [:error] [pid 38814:tid 38828] [client 104.43.249.64:9756] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "agxiVgvkKuBwP0epzWeg0AAAAMw"]
[Tue May 19 21:15:03.714376 2026] [:error] [pid 55881:tid 55904] [client 104.43.249.64:10124] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "agxiV--UExma0LUC7WAH4AAAAlU"]
[Tue May 19 21:15:04.615550 2026] [:error] [pid 29823:tid 29835] [client 104.43.249.64:10069] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "agxiWGO09C0nAz8vRk5SAQAAAcA"]
[Tue May 19 21:15:05.225162 2026] [:error] [pid 38705:tid 38774] [client 104.43.249.64:10235] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "agxiWcg5dNOZ5umN9ltjZAAAAIU"]
[Tue May 19 21:15:05.962105 2026] [:error] [pid 29823:tid 29862] [client 104.43.249.64:10080] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/options.php"] [unique_id "agxiWWO09C0nAz8vRk5SBwAAAdc"]
[Tue May 19 21:15:06.591102 2026] [:error] [pid 29622:tid 29631] [client 104.43.249.64:10011] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/options.php"] [unique_id "agxiWjkOqPKWkPs_P15ToAAAAgc"]
[Tue May 19 21:15:07.219328 2026] [:error] [pid 38705:tid 38787] [client 104.43.249.64:10169] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/options.php"] [unique_id "agxiW8g5dNOZ5umN9ltjaAAAAJI"]
[Tue May 19 21:15:07.800420 2026] [:error] [pid 55881:tid 55893] [client 104.43.249.64:10052] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/options.php"] [unique_id "agxiW--UExma0LUC7WAH5AAAAko"]
[Tue May 19 21:15:08.308084 2026] [:error] [pid 38705:tid 38780] [client 104.43.249.64:10218] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f5.php"] [unique_id "agxiXMg5dNOZ5umN9ltjaQAAAIs"]
[Tue May 19 21:15:08.894364 2026] [:error] [pid 38705:tid 38786] [client 104.43.249.64:10174] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f5.php"] [unique_id "agxiXMg5dNOZ5umN9ltjagAAAJE"]
[Tue May 19 21:15:09.635930 2026] [:error] [pid 38814:tid 38835] [client 104.43.249.64:10211] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f5.php"] [unique_id "agxiXQvkKuBwP0epzWeg1gAAANM"]
[Tue May 19 21:15:10.164294 2026] [:error] [pid 38814:tid 38826] [client 104.43.249.64:10231] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f5.php"] [unique_id "agxiXgvkKuBwP0epzWeg1wAAAMo"]
[Tue May 19 21:15:10.908208 2026] [:error] [pid 46815:tid 46818] [client 104.43.249.64:10118] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "agxiXiPnRhJOmA06Lgp3CAAAAUE"]
[Tue May 19 21:15:11.992800 2026] [:error] [pid 38814:tid 38825] [client 104.43.249.64:10123] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "agxiXwvkKuBwP0epzWeg2QAAAMk"]
[Tue May 19 21:15:13.117086 2026] [:error] [pid 46896:tid 46908] [client 104.43.249.64:9798] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "agxiYaCHyzL3Ci9LGE1lGQAAAYo"]
[Tue May 19 21:15:14.295395 2026] [:error] [pid 29823:tid 29851] [client 104.43.249.64:10054] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alpha.php"] [unique_id "agxiYmO09C0nAz8vRk5SEQAAAcw"]
[Tue May 19 21:15:15.295414 2026] [:error] [pid 38699:tid 38755] [client 104.43.249.64:10073] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son1.php"] [unique_id "agxiY7--Adsw_P-dthamFAAAAE0"]
[Tue May 19 21:15:15.951983 2026] [:error] [pid 38699:tid 38752] [client 104.43.249.64:10234] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son1.php"] [unique_id "agxiY7--Adsw_P-dthamFQAAAEo"]
[Tue May 19 21:15:16.585127 2026] [:error] [pid 29823:tid 29857] [client 104.43.249.64:10156] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son1.php"] [unique_id "agxiZGO09C0nAz8vRk5SFgAAAdI"]
[Tue May 19 21:15:17.133905 2026] [:error] [pid 38699:tid 38753] [client 104.43.249.64:10122] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/son1.php"] [unique_id "agxiZb--Adsw_P-dthamFwAAAEs"]
[Tue May 19 21:15:17.610071 2026] [:error] [pid 29823:tid 29849] [client 104.43.249.64:10063] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "agxiZWO09C0nAz8vRk5SGAAAAco"]
[Tue May 19 21:15:18.196943 2026] [:error] [pid 46815:tid 46826] [client 104.43.249.64:10215] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "agxiZiPnRhJOmA06Lgp3DQAAAUk"]
[Tue May 19 21:15:19.003114 2026] [:error] [pid 38705:tid 38777] [client 104.43.249.64:10038] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "agxiZ8g5dNOZ5umN9ltjbAAAAIg"]
[Tue May 19 21:15:19.583264 2026] [:error] [pid 46815:tid 46819] [client 104.43.249.64:10167] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ggb.php"] [unique_id "agxiZyPnRhJOmA06Lgp3EQAAAUI"]
[Tue May 19 21:15:20.265944 2026] [:error] [pid 46815:tid 46840] [client 104.43.249.64:10071] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amxloxxr.php"] [unique_id "agxiaCPnRhJOmA06Lgp3FAAAAVc"]
[Tue May 19 21:15:20.888301 2026] [:error] [pid 46896:tid 46913] [client 104.43.249.64:10120] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amxloxxr.php"] [unique_id "agxiaKCHyzL3Ci9LGE1lHgAAAY8"]
[Tue May 19 21:15:21.489729 2026] [:error] [pid 41573:tid 41575] [client 104.43.249.64:10141] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amxloxxr.php"] [unique_id "agxiaS1A2bd6JDSW9RaYHgAAAQA"]
[Tue May 19 21:15:21.947717 2026] [:error] [pid 38814:tid 38831] [client 104.43.249.64:10070] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amxloxxr.php"] [unique_id "agxiaQvkKuBwP0epzWeg3gAAAM8"]
[Tue May 19 21:15:22.793467 2026] [:error] [pid 38699:tid 38756] [client 104.43.249.64:10104] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "agxiar--Adsw_P-dthamGQAAAE4"]
[Tue May 19 21:15:23.477744 2026] [:error] [pid 29823:tid 29850] [client 104.43.249.64:10108] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "agxia2O09C0nAz8vRk5SIAAAAcs"]
[Tue May 19 21:15:24.010908 2026] [:error] [pid 38699:tid 38764] [client 104.43.249.64:10150] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "agxibL--Adsw_P-dthamGwAAAFY"]
[Tue May 19 21:15:24.564764 2026] [:error] [pid 46815:tid 46833] [client 104.43.249.64:10067] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ss.php"] [unique_id "agxibCPnRhJOmA06Lgp3GAAAAVA"]
[Tue May 19 21:15:25.041557 2026] [:error] [pid 29823:tid 29859] [client 104.43.249.64:10110] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "agxibWO09C0nAz8vRk5SIwAAAdQ"]
[Tue May 19 21:15:25.691469 2026] [:error] [pid 29823:tid 29839] [client 104.43.249.64:10145] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "agxibWO09C0nAz8vRk5SJQAAAcQ"]
[Tue May 19 21:15:26.157259 2026] [:error] [pid 29622:tid 29637] [client 104.43.249.64:10051] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "agxibjkOqPKWkPs_P15TqQAAAg0"]
[Tue May 19 21:15:26.622659 2026] [:error] [pid 46815:tid 46830] [client 104.43.249.64:9810] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "agxibiPnRhJOmA06Lgp3GwAAAU0"]
[Tue May 19 21:15:29.928715 2026] [:error] [pid 46815:tid 46820] [client 104.43.249.64:10098] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rh.php"] [unique_id "agxicSPnRhJOmA06Lgp3JQAAAUM"]
[Tue May 19 21:15:30.368112 2026] [:error] [pid 46815:tid 46834] [client 104.43.249.64:10219] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rh.php"] [unique_id "agxiciPnRhJOmA06Lgp3JgAAAVE"]
[Tue May 19 21:15:30.793332 2026] [:error] [pid 38697:tid 38723] [client 104.43.249.64:10062] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rh.php"] [unique_id "agxicqXP9pP6Kgt-msRWigAAAAg"]
[Tue May 19 21:15:31.293640 2026] [:error] [pid 38699:tid 38759] [client 104.43.249.64:10086] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rh.php"] [unique_id "agxic7--Adsw_P-dthamMwAAAFE"]
[Tue May 19 21:15:31.860849 2026] [:error] [pid 38697:tid 38735] [client 104.43.249.64:10162] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/99.php"] [unique_id "agxic6XP9pP6Kgt-msRWiwAAABQ"]
[Tue May 19 21:15:32.333674 2026] [:error] [pid 38697:tid 38719] [client 104.43.249.64:9997] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/99.php"] [unique_id "agxidKXP9pP6Kgt-msRWjQAAAAQ"]
[Tue May 19 21:15:32.859127 2026] [:error] [pid 38814:tid 38820] [client 104.43.249.64:10053] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/99.php"] [unique_id "agxidAvkKuBwP0epzWeg7AAAAMQ"]
[Tue May 19 21:15:33.632396 2026] [:error] [pid 38697:tid 38721] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/99.php
[Tue May 19 21:15:34.873496 2026] [:error] [pid 38697:tid 38721] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/layout.php
[Tue May 19 21:15:35.064596 2026] [:error] [pid 38697:tid 38717] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/12.php
[Tue May 19 21:15:35.258084 2026] [:error] [pid 38697:tid 38736] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Tue May 19 21:15:35.448945 2026] [:error] [pid 38697:tid 38734] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/aaa.php
[Tue May 19 21:15:35.679907 2026] [:error] [pid 38697:tid 38718] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/Ov-Simple1.php
[Tue May 19 21:15:35.890302 2026] [:error] [pid 38697:tid 38728] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Tue May 19 21:15:36.138008 2026] [:error] [pid 38697:tid 38720] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Tue May 19 21:15:36.331766 2026] [:error] [pid 38697:tid 38727] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/bolt.php
[Tue May 19 21:15:36.523000 2026] [:error] [pid 38697:tid 38733] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue May 19 21:15:36.846134 2026] [:error] [pid 38697:tid 38739] [client 104.43.249.64:10103] File does not exist: /usr/local/apache/htdocs/suspended-page/file2.php
[Tue May 19 21:15:37.034176 2026] [:error] [pid 38697:tid 38738] [client 104.43.249.64:10103] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "agxieaXP9pP6Kgt-msRWnQAAABc"]
[Tue May 19 21:15:37.783141 2026] [:error] [pid 38705:tid 38792] [client 104.43.249.64:9853] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "agxiecg5dNOZ5umN9ltjeAAAAJc"]
[Tue May 19 21:15:38.468139 2026] [:error] [pid 41573:tid 41584] [client 104.43.249.64:10049] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "agxiei1A2bd6JDSW9RaYJgAAAQk"]
[Tue May 19 21:15:39.115781 2026] [:error] [pid 41573:tid 41585] [client 104.43.249.64:10060] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "agxiey1A2bd6JDSW9RaYKAAAAQo"]
[Tue May 19 21:15:39.598500 2026] [:error] [pid 38699:tid 38749] [client 104.43.249.64:10048] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wk/index.php"] [unique_id "agxie7--Adsw_P-dthamOwAAAEc"]
[Tue May 19 21:15:40.199387 2026] [:error] [pid 29823:tid 29849] [client 104.43.249.64:10072] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wk/index.php"] [unique_id "agxifGO09C0nAz8vRk5SSQAAAco"]
[Tue May 19 21:15:40.787410 2026] [:error] [pid 41573:tid 41582] [client 104.43.249.64:10068] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wk/index.php"] [unique_id "agxifC1A2bd6JDSW9RaYKgAAAQc"]
[Tue May 19 21:15:41.531120 2026] [:error] [pid 29823:tid 29835] [client 104.43.249.64:10065] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wk/index.php"] [unique_id "agxifWO09C0nAz8vRk5STAAAAcA"]
[Tue May 19 21:15:42.084964 2026] [:error] [pid 29823:tid 29851] [client 104.43.249.64:10105] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "agxifmO09C0nAz8vRk5STQAAAcw"]
[Tue May 19 21:15:42.631833 2026] [:error] [pid 29823:tid 29863] [client 104.43.249.64:10119] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "agxifmO09C0nAz8vRk5SUAAAAdg"]
[Tue May 19 21:15:43.057202 2026] [:error] [pid 29823:tid 29841] [client 104.43.249.64:10127] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "agxif2O09C0nAz8vRk5SUQAAAcY"]
[Tue May 19 21:15:43.517101 2026] [:error] [pid 55881:tid 55888] [client 104.43.249.64:10222] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "agxif--UExma0LUC7WAIDQAAAkU"]
[Tue May 19 21:15:43.948367 2026] [:error] [pid 55881:tid 55884] [client 104.43.249.64:10033] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-theme.php"] [unique_id "agxif--UExma0LUC7WAIDgAAAkE"]
[Tue May 19 21:15:44.360539 2026] [:error] [pid 38699:tid 38765] [client 104.43.249.64:10037] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-theme.php"] [unique_id "agxigL--Adsw_P-dthamQAAAAFc"]
[Tue May 19 21:15:45.660196 2026] [:error] [pid 29823:tid 29848] [client 104.43.249.64:10102] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-theme.php"] [unique_id "agxigWO09C0nAz8vRk5SWQAAAck"]
[Tue May 19 21:15:46.089054 2026] [:error] [pid 38705:tid 38791] [client 104.43.249.64:10172] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-theme.php"] [unique_id "agxigsg5dNOZ5umN9ltjegAAAJY"]
[Tue May 19 21:15:46.659731 2026] [:error] [pid 38699:tid 38763] [client 104.43.249.64:10149] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-file.php"] [unique_id "agxigr--Adsw_P-dthamQgAAAFU"]
[Tue May 19 21:15:47.119741 2026] [:error] [pid 29823:tid 29838] [client 104.43.249.64:10055] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-file.php"] [unique_id "agxig2O09C0nAz8vRk5SWgAAAcM"]
[Tue May 19 21:15:47.564278 2026] [:error] [pid 29823:tid 29847] [client 104.43.249.64:9986] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-file.php"] [unique_id "agxig2O09C0nAz8vRk5SWwAAAcg"]
[Tue May 19 21:15:47.982674 2026] [:error] [pid 55881:tid 55904] [client 104.43.249.64:10159] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-file.php"] [unique_id "agxig--UExma0LUC7WAIEAAAAlU"]
[Tue May 19 21:15:48.390995 2026] [:error] [pid 46896:tid 46921] [client 104.43.249.64:10152] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "agxihKCHyzL3Ci9LGE1lLwAAAZc"]
[Tue May 19 21:15:48.833800 2026] [:error] [pid 55881:tid 55892] [client 104.43.249.64:10094] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "agxihO-UExma0LUC7WAIEQAAAkk"]
[Tue May 19 21:15:49.386484 2026] [:error] [pid 55881:tid 55907] [client 104.43.249.64:9991] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "agxihe-UExma0LUC7WAIEgAAAlg"]
[Tue May 19 21:15:50.039147 2026] [:error] [pid 29823:tid 29859] [client 104.43.249.64:10222] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "agxihmO09C0nAz8vRk5SXgAAAdQ"]
[Tue May 19 21:15:50.495562 2026] [:error] [pid 29823:tid 29848] [client 104.43.249.64:10092] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah.php"] [unique_id "agxihmO09C0nAz8vRk5SYAAAAck"]
[Tue May 19 21:15:50.933502 2026] [:error] [pid 41573:tid 41578] [client 104.43.249.64:10155] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah.php"] [unique_id "agxihi1A2bd6JDSW9RaYLAAAAQM"]
[Tue May 19 21:15:51.356852 2026] [:error] [pid 41573:tid 41594] [client 104.43.249.64:9999] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah.php"] [unique_id "agxihy1A2bd6JDSW9RaYLQAAARM"]
[Tue May 19 21:15:51.959693 2026] [:error] [pid 55881:tid 55900] [client 104.43.249.64:10164] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah.php"] [unique_id "agxih--UExma0LUC7WAIFAAAAlE"]
[Tue May 19 21:15:52.418986 2026] [:error] [pid 29823:tid 29841] [client 104.43.249.64:10220] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "agxiiGO09C0nAz8vRk5SYwAAAcY"]
[Tue May 19 21:15:52.824286 2026] [:error] [pid 29823:tid 29854] [client 104.43.249.64:10084] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "agxiiGO09C0nAz8vRk5SZgAAAc8"]
[Tue May 19 21:15:53.285769 2026] [:error] [pid 55881:tid 55901] [client 104.43.249.64:10090] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "agxiie-UExma0LUC7WAIFQAAAlI"]
[Tue May 19 21:15:53.729496 2026] [:error] [pid 29823:tid 29849] [client 104.43.249.64:10012] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins.php"] [unique_id "agxiiWO09C0nAz8vRk5SaAAAAco"]
[Tue May 19 21:15:54.578092 2026] [:error] [pid 38705:tid 38771] [client 104.43.249.64:10082] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "agxiisg5dNOZ5umN9ltjewAAAII"]
[Tue May 19 21:15:55.068147 2026] [:error] [pid 29823:tid 29835] [client 104.43.249.64:9758] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "agxii2O09C0nAz8vRk5SagAAAcA"]
[Tue May 19 21:15:55.587355 2026] [:error] [pid 29823:tid 29852] [client 104.43.249.64:10021] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "agxii2O09C0nAz8vRk5SawAAAc0"]
[Tue May 19 21:15:56.065051 2026] [:error] [pid 38697:tid 38728] [client 104.43.249.64:10081] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sf.php"] [unique_id "agxijKXP9pP6Kgt-msRWpAAAAA0"]
[Tue May 19 21:15:56.488673 2026] [:error] [pid 38705:tid 38782] [client 104.43.249.64:10075] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "agxijMg5dNOZ5umN9ltjfQAAAI0"]
[Tue May 19 21:15:57.017136 2026] [:error] [pid 46896:tid 46902] [client 104.43.249.64:9412] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "agxijaCHyzL3Ci9LGE1lMgAAAYQ"]
[Tue May 19 21:15:57.560947 2026] [:error] [pid 55881:tid 55888] [client 104.43.249.64:10001] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "agxije-UExma0LUC7WAIHgAAAkU"]
[Tue May 19 21:15:58.040934 2026] [:error] [pid 38699:tid 38756] [client 104.43.249.64:10083] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "agxijr--Adsw_P-dthamRgAAAE4"]
[Tue May 19 21:15:58.544819 2026] [:error] [pid 55881:tid 55894] [client 104.43.249.64:10020] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "agxiju-UExma0LUC7WAIKQAAAks"]
[Tue May 19 21:15:59.314736 2026] [:error] [pid 41573:tid 41595] [client 104.43.249.64:10091] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "agxijy1A2bd6JDSW9RaYMwAAARQ"]
[Tue May 19 21:16:00.345144 2026] [:error] [pid 55881:tid 55906] [client 104.43.249.64:10046] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "agxikO-UExma0LUC7WAIKwAAAlc"]
[Tue May 19 21:16:00.871654 2026] [:error] [pid 55881:tid 55897] [client 104.43.249.64:10173] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "agxikO-UExma0LUC7WAILQAAAk4"]
[Tue May 19 21:16:01.469201 2026] [:error] [pid 46815:tid 46826] [client 104.43.249.64:10140] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ini.php"] [unique_id "agxikSPnRhJOmA06Lgp3LgAAAUk"]
[Tue May 19 21:16:02.320389 2026] [:error] [pid 55881:tid 55889] [client 104.43.249.64:10023] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ini.php"] [unique_id "agxiku-UExma0LUC7WAILwAAAkY"]
[Tue May 19 21:16:03.180354 2026] [:error] [pid 55881:tid 55898] [client 104.43.249.64:10150] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ini.php"] [unique_id "agxik--UExma0LUC7WAIMQAAAk8"]
[Tue May 19 21:16:04.054576 2026] [:error] [pid 46815:tid 46822] [client 104.43.249.64:10125] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ini.php"] [unique_id "agxilCPnRhJOmA06Lgp3LwAAAUU"]
[Tue May 19 21:16:04.875644 2026] [:error] [pid 46896:tid 46913] [client 104.43.249.64:10015] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ca4.php"] [unique_id "agxilKCHyzL3Ci9LGE1lNAAAAY8"]
[Tue May 19 21:16:05.471405 2026] [:error] [pid 29823:tid 29841] [client 104.43.249.64:10000] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ca4.php"] [unique_id "agxilWO09C0nAz8vRk5ScgAAAcY"]
[Tue May 19 21:16:06.134575 2026] [:error] [pid 38697:tid 38715] [client 104.43.249.64:10106] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ca4.php"] [unique_id "agxilqXP9pP6Kgt-msRWqAAAAAA"]
[Tue May 19 21:16:07.249817 2026] [:error] [pid 55881:tid 55907] [client 104.43.249.64:10151] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ca4.php"] [unique_id "agxil--UExma0LUC7WAINQAAAlg"]
[Tue May 19 21:16:07.859583 2026] [:error] [pid 55881:tid 55891] [client 104.43.249.64:10013] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agxil--UExma0LUC7WAINwAAAkg"]
[Tue May 19 21:16:08.502091 2026] [:error] [pid 46815:tid 46825] [client 104.43.249.64:10113] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agximCPnRhJOmA06Lgp3MgAAAUg"]
[Tue May 19 21:16:09.353315 2026] [:error] [pid 29622:tid 29639] [client 104.43.249.64:10165] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agximTkOqPKWkPs_P15TygAAAg8"]
[Tue May 19 21:16:10.220745 2026] [:error] [pid 55881:tid 55899] [client 104.43.249.64:10088] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/index.php"] [unique_id "agximu-UExma0LUC7WAIOQAAAlA"]
[Tue May 19 21:16:10.706648 2026] [:error] [pid 38697:tid 38733] [client 104.43.249.64:10022] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-info.php"] [unique_id "agximqXP9pP6Kgt-msRWqQAAABI"]
[Tue May 19 21:16:11.173745 2026] [:error] [pid 41573:tid 41577] [client 104.43.249.64:10030] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-info.php"] [unique_id "agximy1A2bd6JDSW9RaYPAAAAQI"]
[Tue May 19 21:16:11.661609 2026] [:error] [pid 41573:tid 41599] [client 104.43.249.64:10006] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-info.php"] [unique_id "agximy1A2bd6JDSW9RaYPQAAARg"]
[Tue May 19 21:16:12.467412 2026] [:error] [pid 41573:tid 41588] [client 104.43.249.64:10096] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-info.php"] [unique_id "agxinC1A2bd6JDSW9RaYQAAAAQ0"]
[Tue May 19 21:16:13.140115 2026] [:error] [pid 46815:tid 46830] [client 104.43.249.64:10057] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "agxinSPnRhJOmA06Lgp3NAAAAU0"]
[Tue May 19 21:16:13.697135 2026] [:error] [pid 38705:tid 38789] [client 104.43.249.64:10029] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "agxincg5dNOZ5umN9ltjgQAAAJQ"]
[Tue May 19 21:16:14.258221 2026] [:error] [pid 41573:tid 41581] [client 104.43.249.64:9436] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "agxini1A2bd6JDSW9RaYRQAAAQY"]
[Tue May 19 21:16:14.823679 2026] [:error] [pid 41573:tid 41576] [client 104.43.249.64:10085] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "agxini1A2bd6JDSW9RaYRwAAAQE"]
[Tue May 19 21:16:15.528819 2026] [:error] [pid 38705:tid 38790] [client 104.43.249.64:10170] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "agxin8g5dNOZ5umN9ltjggAAAJU"]
[Tue May 19 21:16:16.113288 2026] [:error] [pid 38697:tid 38739] [client 104.43.249.64:9984] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "agxioKXP9pP6Kgt-msRWqgAAABg"]
[Tue May 19 21:16:16.702326 2026] [:error] [pid 38705:tid 38773] [client 104.43.249.64:10045] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "agxioMg5dNOZ5umN9ltjhAAAAIQ"]
[Tue May 19 21:16:17.332793 2026] [:error] [pid 38697:tid 38738] [client 104.43.249.64:10035] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/100.php"] [unique_id "agxioaXP9pP6Kgt-msRWqwAAABc"]
[Tue May 19 21:16:17.819087 2026] [:error] [pid 55881:tid 55884] [client 104.43.249.64:10040] [client 104.43.249.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "agxioe-UExma0LUC7WAIOwAAAkE"]
[Tue May 19 21:16:18.346771 2026] [:error] [pid 41573:tid 41579] [client 104.43.249.64:10066] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.ph"] [unique_id "agxioi1A2bd6JDSW9RaYSgAAAQQ"]
[Tue May 19 21:16:18.829816 2026] [:error] [pid 41573:tid 41593] [client 104.43.249.64:10007] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.ph"] [unique_id "agxioi1A2bd6JDSW9RaYTQAAARI"]
[Tue May 19 21:16:19.325139 2026] [:error] [pid 41573:tid 41576] [client 104.43.249.64:9446] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.ph"] [unique_id "agxioy1A2bd6JDSW9RaYUQAAAQE"]
[Tue May 19 21:16:19.827940 2026] [:error] [pid 38705:tid 38785] [client 104.43.249.64:10064] [client 104.43.249.64] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.ph"] [unique_id "agxio8g5dNOZ5umN9ltjhwAAAJA"]
[Tue May 19 21:16:59.837904 2026] [:error] [pid 29622:tid 29627] [client 52.187.242.126:3240] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue May 19 21:16:59.855313 2026] [:error] [pid 29622:tid 29636] [client 52.187.242.126:3240] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Tue May 19 21:16:59.891319 2026] [:error] [pid 29622:tid 29637] [client 52.187.242.126:3240] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Tue May 19 21:16:59.928675 2026] [:error] [pid 29622:tid 29646] [client 52.187.242.126:3240] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Tue May 19 21:16:59.967408 2026] [:error] [pid 29622:tid 29631] [client 52.187.242.126:3240] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Tue May 19 21:16:59.987037 2026] [:error] [pid 29622:tid 29625] [client 52.187.242.126:3240] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Tue May 19 21:17:00.005612 2026] [:error] [pid 29622:tid 29632] [client 52.187.242.126:3240] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Tue May 19 21:17:00.061099 2026] [:error] [pid 29622:tid 29640] [client 52.187.242.126:3240] [client 52.187.242.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agxizDkOqPKWkPs_P15T5AAAAhA"]
[Tue May 19 21:17:00.124125 2026] [:error] [pid 38697:tid 38719] [client 52.187.242.126:3151] [client 52.187.242.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agxizKXP9pP6Kgt-msRWtwAAAAQ"]
[Tue May 19 21:17:00.219822 2026] [:error] [pid 41573:tid 41578] [client 52.187.242.126:2543] [client 52.187.242.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agxizC1A2bd6JDSW9RaYcAAAAQM"]
[Tue May 19 21:17:00.284285 2026] [:error] [pid 38697:tid 38736] [client 52.187.242.126:1798] [client 52.187.242.126] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "agxizKXP9pP6Kgt-msRWuAAAABU"]
[Wed May 20 06:47:54.524543 2026] [:error] [pid 59245:tid 59280] [client 130.131.71.16:62500] [client 130.131.71.16] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 130.131.71.16, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp/xmlrpc.php"] [unique_id "agzomqOutR70QIZRVkTY4QAAAEA"]
[Wed May 20 10:05:17.425789 2026] [:error] [pid 41364:tid 41380] [client 20.226.25.243:40795] File does not exist: /usr/local/apache/htdocs/suspended-page/rip.php
[Wed May 20 10:05:17.756299 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:40795] File does not exist: /usr/local/apache/htdocs/suspended-page/archive.php
[Wed May 20 10:05:18.190397 2026] [:error] [pid 41364:tid 41375] [client 20.226.25.243:40795] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Wed May 20 10:05:18.518404 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:40795] File does not exist: /usr/local/apache/htdocs/suspended-page/ioxi-o.php
[Wed May 20 10:05:18.891197 2026] [:error] [pid 41364:tid 41390] [client 20.226.25.243:40795] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed May 20 10:05:19.578770 2026] [:error] [pid 41364:tid 41384] [client 20.226.25.243:40795] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Wed May 20 10:05:20.019102 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:40795] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Wed May 20 10:05:20.391685 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:40795] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed May 20 10:05:20.716999 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:40795] File does not exist: /usr/local/apache/htdocs/suspended-page/byp.php
[Wed May 20 10:05:21.038433 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:40795] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index.php"] [unique_id "ag0W4RKTmyvxtNXrN-hUXgAAAJM"]
[Wed May 20 10:05:21.729261 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:60065] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index.php"] [unique_id "ag0W4RKTmyvxtNXrN-hUcQAAAJM"]
[Wed May 20 10:05:22.417806 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:49135] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index.php"] [unique_id "ag0W4hfFs-oSOOcyjyxyuAAAARI"]
[Wed May 20 10:05:23.209288 2026] [:error] [pid 41279:tid 41349] [client 20.226.25.243:58190] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index.php"] [unique_id "ag0W47EFyfaehGZbt4xLOAAAAM0"]
[Wed May 20 10:05:23.977968 2026] [:error] [pid 41279:tid 41352] [client 20.226.25.243:58237] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/chosen.php"] [unique_id "ag0W47EFyfaehGZbt4xLOgAAANA"]
[Wed May 20 10:05:24.789121 2026] [:error] [pid 41279:tid 41350] [client 20.226.25.243:36529] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/chosen.php"] [unique_id "ag0W5LEFyfaehGZbt4xLPAAAAM4"]
[Wed May 20 10:05:25.544931 2026] [:error] [pid 41278:tid 41309] [client 20.226.25.243:45367] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/chosen.php"] [unique_id "ag0W5fWiNKASEfiGdwZ2HwAAAEA"]
[Wed May 20 10:05:26.242897 2026] [:error] [pid 41277:tid 41294] [client 20.226.25.243:43246] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/chosen.php"] [unique_id "ag0W5rTTCltJmboB5ufKogAAAAw"]
[Wed May 20 10:05:26.961168 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:36497] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/chosen.php"] [unique_id "ag0W5hfFs-oSOOcyjyxyvwAAAQM"]
[Wed May 20 10:05:27.940504 2026] [:error] [pid 41279:tid 41346] [client 20.226.25.243:55450] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/chosen.php"] [unique_id "ag0W57EFyfaehGZbt4xLWQAAAMo"]
[Wed May 20 10:05:28.606606 2026] [:error] [pid 44059:tid 44072] [client 20.226.25.243:46794] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/chosen.php"] [unique_id "ag0W6BfFs-oSOOcyjyxyygAAAQs"]
[Wed May 20 10:05:29.289870 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:43928] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about/chosen.php"] [unique_id "ag0W6RfFs-oSOOcyjyxy1AAAAQM"]
[Wed May 20 10:05:29.948382 2026] [:error] [pid 41277:tid 41297] [client 20.226.25.243:19769] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as/chosen.php"] [unique_id "ag0W6bTTCltJmboB5ufKuQAAAA8"]
[Wed May 20 10:05:30.692699 2026] [:error] [pid 41279:tid 41341] [client 20.226.25.243:46843] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as/chosen.php"] [unique_id "ag0W6rEFyfaehGZbt4xLdwAAAMU"]
[Wed May 20 10:05:31.366249 2026] [:error] [pid 41277:tid 41293] [client 20.226.25.243:20245] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as/chosen.php"] [unique_id "ag0W67TTCltJmboB5ufKxQAAAAs"]
[Wed May 20 10:05:32.018445 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:46421] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as/chosen.php"] [unique_id "ag0W7BKTmyvxtNXrN-hUkAAAAIc"]
[Wed May 20 10:05:32.680922 2026] [:error] [pid 44059:tid 44072] [client 20.226.25.243:19886] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "ag0W7BfFs-oSOOcyjyxzDgAAAQs"]
[Wed May 20 10:05:33.592693 2026] [:error] [pid 41364:tid 41384] [client 20.226.25.243:39009] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "ag0W7RKTmyvxtNXrN-hUmgAAAJI"]
[Wed May 20 10:05:34.328419 2026] [:error] [pid 41277:tid 41286] [client 20.226.25.243:58960] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "ag0W7rTTCltJmboB5ufK0QAAAAQ"]
[Wed May 20 10:05:35.138554 2026] [:error] [pid 41278:tid 41314] [client 20.226.25.243:57312] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/init.php"] [unique_id "ag0W7_WiNKASEfiGdwZ2UQAAAEU"]
[Wed May 20 10:05:35.821413 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:19875] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file/chosen.php"] [unique_id "ag0W7xKTmyvxtNXrN-hUpwAAAJU"]
[Wed May 20 10:05:36.531311 2026] [:error] [pid 44059:tid 44078] [client 20.226.25.243:19867] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file/chosen.php"] [unique_id "ag0W8BfFs-oSOOcyjyxzOAAAARE"]
[Wed May 20 10:05:37.238307 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:60178] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file/chosen.php"] [unique_id "ag0W8RfFs-oSOOcyjyxzPQAAARY"]
[Wed May 20 10:05:38.049542 2026] [:error] [pid 44059:tid 44069] [client 20.226.25.243:19345] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file/chosen.php"] [unique_id "ag0W8hfFs-oSOOcyjyxzPgAAAQg"]
[Wed May 20 10:05:38.788841 2026] [:error] [pid 41364:tid 41390] [client 20.226.25.243:42174] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen/chosen.php"] [unique_id "ag0W8hKTmyvxtNXrN-hUrAAAAJg"]
[Wed May 20 10:05:39.540396 2026] [:error] [pid 41277:tid 41304] [client 20.226.25.243:38986] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen/chosen.php"] [unique_id "ag0W87TTCltJmboB5ufK3AAAABY"]
[Wed May 20 10:05:40.202197 2026] [:error] [pid 41364:tid 41375] [client 20.226.25.243:58650] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen/chosen.php"] [unique_id "ag0W9BKTmyvxtNXrN-hUrgAAAIk"]
[Wed May 20 10:05:40.901715 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:58998] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen/chosen.php"] [unique_id "ag0W9BfFs-oSOOcyjyxzQwAAAQI"]
[Wed May 20 10:05:41.623224 2026] [:error] [pid 41277:tid 41297] [client 20.226.25.243:47466] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/chosen.php"] [unique_id "ag0W9bTTCltJmboB5ufK3gAAAA8"]
[Wed May 20 10:05:42.294615 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:42152] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/chosen.php"] [unique_id "ag0W9hKTmyvxtNXrN-hUsAAAAI8"]
[Wed May 20 10:05:42.996107 2026] [:error] [pid 41277:tid 41284] [client 20.226.25.243:54015] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/chosen.php"] [unique_id "ag0W9rTTCltJmboB5ufK3wAAAAI"]
[Wed May 20 10:05:43.746365 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:48288] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/css/chosen.php"] [unique_id "ag0W9xKTmyvxtNXrN-hUsgAAAJU"]
[Wed May 20 10:05:44.421915 2026] [:error] [pid 41278:tid 41319] [client 20.226.25.243:31608] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "ag0W-PWiNKASEfiGdwZ2YAAAAEo"]
[Wed May 20 10:05:45.110970 2026] [:error] [pid 41277:tid 41302] [client 20.226.25.243:57539] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "ag0W-bTTCltJmboB5ufLBgAAABQ"]
[Wed May 20 10:05:45.760150 2026] [:error] [pid 44059:tid 44066] [client 20.226.25.243:56537] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "ag0W-RfFs-oSOOcyjyxzSwAAAQU"]
[Wed May 20 10:05:46.679171 2026] [:error] [pid 41278:tid 41317] [client 20.226.25.243:48528] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ALFA_DATA/alfacgiapi/perl.alfa"] [unique_id "ag0W-vWiNKASEfiGdwZ2dQAAAEg"]
[Wed May 20 10:05:47.342435 2026] [:error] [pid 44059:tid 44069] [client 20.226.25.243:53953] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ag0W-xfFs-oSOOcyjyxzTwAAAQg"]
[Wed May 20 10:05:48.115723 2026] [:error] [pid 41279:tid 41345] [client 20.226.25.243:48315] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ag0W_LEFyfaehGZbt4xLngAAAMk"]
[Wed May 20 10:05:48.768813 2026] [:error] [pid 41279:tid 41346] [client 20.226.25.243:49659] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ag0W_LEFyfaehGZbt4xLoQAAAMo"]
[Wed May 20 10:05:49.482442 2026] [:error] [pid 41277:tid 41304] [client 20.226.25.243:56550] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ag0W_bTTCltJmboB5ufLTgAAABY"]
[Wed May 20 10:05:50.348243 2026] [:error] [pid 41278:tid 41320] [client 20.226.25.243:49624] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ag0W_vWiNKASEfiGdwZ2jAAAAEs"]
[Wed May 20 10:05:51.129452 2026] [:error] [pid 44059:tid 44078] [client 20.226.25.243:56556] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ag0W_xfFs-oSOOcyjyxzVAAAARE"]
[Wed May 20 10:05:51.862614 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:60107] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ag0W_xKTmyvxtNXrN-hUtAAAAI0"]
[Wed May 20 10:05:52.787477 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:49632] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ag0XABKTmyvxtNXrN-hUyQAAAJc"]
[Wed May 20 10:05:53.726167 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:59599] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ag0XARfFs-oSOOcyjyxzZQAAAQM"]
[Wed May 20 10:05:54.449241 2026] [:error] [pid 41279:tid 41355] [client 20.226.25.243:59164] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ag0XArEFyfaehGZbt4xLpQAAANM"]
[Wed May 20 10:05:55.261794 2026] [:error] [pid 41364:tid 41372] [client 20.226.25.243:57889] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ag0XAxKTmyvxtNXrN-hU6wAAAIY"]
[Wed May 20 10:05:55.938793 2026] [:error] [pid 41277:tid 41305] [client 20.226.25.243:57885] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ag0XA7TTCltJmboB5ufLYQAAABc"]
[Wed May 20 10:05:56.619511 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:59602] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "ag0XBBKTmyvxtNXrN-hU8QAAAJc"]
[Wed May 20 10:05:57.325904 2026] [:error] [pid 41277:tid 41304] [client 20.226.25.243:55209] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "ag0XBbTTCltJmboB5ufLYgAAABY"]
[Wed May 20 10:05:57.998041 2026] [:error] [pid 41277:tid 41285] [client 20.226.25.243:45776] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "ag0XBbTTCltJmboB5ufLYwAAAAM"]
[Wed May 20 10:05:58.669859 2026] [:error] [pid 41278:tid 41318] [client 20.226.25.243:52375] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "ag0XBvWiNKASEfiGdwZ2kwAAAEk"]
[Wed May 20 10:05:59.343135 2026] [:error] [pid 44059:tid 44085] [client 20.226.25.243:39934] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wk/index.php"] [unique_id "ag0XBxfFs-oSOOcyjyxzngAAARg"]
[Wed May 20 10:06:00.033620 2026] [:error] [pid 41364:tid 41372] [client 20.226.25.243:57860] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wk/index.php"] [unique_id "ag0XCBKTmyvxtNXrN-hVFAAAAIY"]
[Wed May 20 10:06:00.678780 2026] [:error] [pid 41278:tid 41314] [client 20.226.25.243:59943] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wk/index.php"] [unique_id "ag0XCPWiNKASEfiGdwZ2lgAAAEU"]
[Wed May 20 10:06:01.596277 2026] [:error] [pid 41277:tid 41294] [client 20.226.25.243:55224] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wk/index.php"] [unique_id "ag0XCbTTCltJmboB5ufLZgAAAAw"]
[Wed May 20 10:06:02.403269 2026] [:error] [pid 41277:tid 41306] [client 20.226.25.243:59250] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ag0XCrTTCltJmboB5ufLaQAAABg"]
[Wed May 20 10:06:03.083517 2026] [:error] [pid 41277:tid 41299] [client 20.226.25.243:52364] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ag0XC7TTCltJmboB5ufLawAAABE"]
[Wed May 20 10:06:03.913399 2026] [:error] [pid 41279:tid 41351] [client 20.226.25.243:52379] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ag0XC7EFyfaehGZbt4xLpwAAAM8"]
[Wed May 20 10:06:04.651711 2026] [:error] [pid 41277:tid 41293] [client 20.226.25.243:48330] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ag0XDLTTCltJmboB5ufLbQAAAAs"]
[Wed May 20 10:06:05.366765 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:56755] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "ag0XDRfFs-oSOOcyjyxzsAAAAQY"]
[Wed May 20 10:06:06.138085 2026] [:error] [pid 44059:tid 44081] [client 20.226.25.243:58833] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "ag0XDhfFs-oSOOcyjyxzuQAAARQ"]
[Wed May 20 10:06:06.902496 2026] [:error] [pid 41279:tid 41346] [client 20.226.25.243:39852] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "ag0XDrEFyfaehGZbt4xLrAAAAMo"]
[Wed May 20 10:06:07.638916 2026] [:error] [pid 41279:tid 41336] [client 20.226.25.243:60156] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "ag0XD7EFyfaehGZbt4xLsAAAAMA"]
[Wed May 20 10:06:08.420849 2026] [:error] [pid 41277:tid 41305] [client 20.226.25.243:56760] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ag0XELTTCltJmboB5ufLbwAAABc"]
[Wed May 20 10:06:09.341061 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:31022] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ag0XERfFs-oSOOcyjyxz-QAAAQE"]
[Wed May 20 10:06:10.052908 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:57628] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ag0XEhfFs-oSOOcyjyx0BgAAARA"]
[Wed May 20 10:06:10.810605 2026] [:error] [pid 41279:tid 41348] [client 20.226.25.243:41713] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ag0XErEFyfaehGZbt4xLsQAAAMw"]
[Wed May 20 10:06:11.533188 2026] [:error] [pid 44059:tid 44076] [client 20.226.25.243:39389] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ag0XExfFs-oSOOcyjyx0FwAAAQ8"]
[Wed May 20 10:06:12.248575 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:57338] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ag0XFBKTmyvxtNXrN-hVGwAAAIg"]
[Wed May 20 10:06:12.978918 2026] [:error] [pid 41364:tid 41378] [client 20.226.25.243:56514] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ag0XFBKTmyvxtNXrN-hVHAAAAIw"]
[Wed May 20 10:06:13.639185 2026] [:error] [pid 41364:tid 41380] [client 20.226.25.243:58835] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ag0XFRKTmyvxtNXrN-hVHQAAAI4"]
[Wed May 20 10:06:14.375433 2026] [:error] [pid 41279:tid 41342] [client 20.226.25.243:42235] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "ag0XFrEFyfaehGZbt4xLtQAAAMY"]
[Wed May 20 10:06:15.281070 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:42211] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "ag0XFxKTmyvxtNXrN-hVIQAAAJU"]
[Wed May 20 10:06:16.036577 2026] [:error] [pid 41364:tid 41372] [client 20.226.25.243:58677] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "ag0XGBKTmyvxtNXrN-hVIgAAAIY"]
[Wed May 20 10:06:16.681892 2026] [:error] [pid 44059:tid 44071] [client 20.226.25.243:47458] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/elp.php"] [unique_id "ag0XGBfFs-oSOOcyjyx0XQAAAQo"]
[Wed May 20 10:06:17.343206 2026] [:error] [pid 44059:tid 44078] [client 20.226.25.243:20258] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ag0XGRfFs-oSOOcyjyx0ZQAAARE"]
[Wed May 20 10:06:18.220027 2026] [:error] [pid 41278:tid 41332] [client 20.226.25.243:45324] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ag0XGvWiNKASEfiGdwZ2tQAAAFc"]
[Wed May 20 10:06:19.020677 2026] [:error] [pid 44059:tid 44070] [client 20.226.25.243:55425] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ag0XGxfFs-oSOOcyjyx0fQAAAQk"]
[Wed May 20 10:06:19.837825 2026] [:error] [pid 41278:tid 41318] [client 20.226.25.243:40800] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ag0XG_WiNKASEfiGdwZ2tgAAAEk"]
[Wed May 20 10:06:20.522090 2026] [:error] [pid 41364:tid 41383] [client 20.226.25.243:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/666.php
[Wed May 20 10:06:21.200771 2026] [:error] [pid 41364:tid 41367] [client 20.226.25.243:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/ws54.php
[Wed May 20 10:06:21.528026 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/deepseek_d.php
[Wed May 20 10:06:21.897754 2026] [:error] [pid 41364:tid 41388] [client 20.226.25.243:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/nw.php
[Wed May 20 10:06:23.020957 2026] [:error] [pid 41364:tid 41388] [client 20.226.25.243:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/xleet.php
[Wed May 20 10:06:23.350329 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Wed May 20 10:06:23.740439 2026] [:error] [pid 41364:tid 41390] [client 20.226.25.243:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/155.php
[Wed May 20 10:06:24.089466 2026] [:error] [pid 41364:tid 41367] [client 20.226.25.243:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/96i.php
[Wed May 20 10:06:24.774037 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed May 20 10:06:25.101612 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:46789] File does not exist: /usr/local/apache/htdocs/suspended-page/php8.php
[Wed May 20 10:06:25.425308 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:46789] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "ag0XIRKTmyvxtNXrN-hVdAAAAJc"]
[Wed May 20 10:06:26.120782 2026] [:error] [pid 41279:tid 41339] [client 20.226.25.243:17136] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "ag0XIrEFyfaehGZbt4xLuwAAAMM"]
[Wed May 20 10:06:26.774550 2026] [:error] [pid 44059:tid 44074] [client 20.226.25.243:60240] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "ag0XIhfFs-oSOOcyjyx0qwAAAQ0"]
[Wed May 20 10:06:27.458970 2026] [:error] [pid 41278:tid 41309] [client 20.226.25.243:51341] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "ag0XI_WiNKASEfiGdwZ2uQAAAEA"]
[Wed May 20 10:06:28.114199 2026] [:error] [pid 41278:tid 41313] [client 20.226.25.243:47784] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "ag0XJPWiNKASEfiGdwZ2ugAAAEQ"]
[Wed May 20 10:06:28.767064 2026] [:error] [pid 41364:tid 41377] [client 20.226.25.243:54294] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "ag0XJBKTmyvxtNXrN-hVdgAAAIs"]
[Wed May 20 10:06:29.528836 2026] [:error] [pid 44059:tid 44071] [client 20.226.25.243:44681] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "ag0XJRfFs-oSOOcyjyx0rAAAAQo"]
[Wed May 20 10:06:30.182895 2026] [:error] [pid 44059:tid 44081] [client 20.226.25.243:51323] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/222.php"] [unique_id "ag0XJhfFs-oSOOcyjyx0rQAAARQ"]
[Wed May 20 10:06:30.839089 2026] [:error] [pid 41364:tid 41375] [client 20.226.25.243:57230] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "ag0XJhKTmyvxtNXrN-hVkQAAAIk"]
[Wed May 20 10:06:31.489718 2026] [:error] [pid 41364:tid 41367] [client 20.226.25.243:57923] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "ag0XJxKTmyvxtNXrN-hVmAAAAIE"]
[Wed May 20 10:06:32.149857 2026] [:error] [pid 41364:tid 41371] [client 20.226.25.243:38947] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "ag0XKBKTmyvxtNXrN-hVowAAAIU"]
[Wed May 20 10:06:32.794302 2026] [:error] [pid 41364:tid 41367] [client 20.226.25.243:31514] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/il.php"] [unique_id "ag0XKBKTmyvxtNXrN-hVrgAAAIE"]
[Wed May 20 10:06:33.482829 2026] [:error] [pid 44059:tid 44069] [client 20.226.25.243:54549] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "ag0XKRfFs-oSOOcyjyx0rwAAAQg"]
[Wed May 20 10:06:34.171169 2026] [:error] [pid 41277:tid 41287] [client 20.226.25.243:54847] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "ag0XKrTTCltJmboB5ufLxAAAAAU"]
[Wed May 20 10:06:34.839119 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:35449] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "ag0XKhfFs-oSOOcyjyx0sQAAAQY"]
[Wed May 20 10:06:35.498013 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:41613] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "ag0XKxfFs-oSOOcyjyx0swAAAQI"]
[Wed May 20 10:06:36.158350 2026] [:error] [pid 44059:tid 44066] [client 20.226.25.243:55522] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ag0XLBfFs-oSOOcyjyx0tQAAAQU"]
[Wed May 20 10:06:36.829616 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:55409] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ag0XLBfFs-oSOOcyjyx0tgAAAQw"]
[Wed May 20 10:06:37.511131 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:47897] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ag0XLRKTmyvxtNXrN-hVxQAAAIg"]
[Wed May 20 10:06:38.166297 2026] [:error] [pid 41278:tid 41324] [client 20.226.25.243:56675] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ag0XLvWiNKASEfiGdwZ27AAAAE8"]
[Wed May 20 10:06:38.820937 2026] [:error] [pid 41364:tid 41371] [client 20.226.25.243:49056] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ag0XLhKTmyvxtNXrN-hVyAAAAIU"]
[Wed May 20 10:06:39.471232 2026] [:error] [pid 41278:tid 41310] [client 20.226.25.243:46133] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ag0XL_WiNKASEfiGdwZ27QAAAEE"]
[Wed May 20 10:06:40.131346 2026] [:error] [pid 41279:tid 41351] [client 20.226.25.243:50662] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ag0XMLEFyfaehGZbt4xL0wAAAM8"]
[Wed May 20 10:06:40.841787 2026] [:error] [pid 41279:tid 41345] [client 20.226.25.243:56628] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ag0XMLEFyfaehGZbt4xL1gAAAMk"]
[Wed May 20 10:06:41.493453 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:57761] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "ag0XMRKTmyvxtNXrN-hVyQAAAI8"]
[Wed May 20 10:06:42.191825 2026] [:error] [pid 41364:tid 41390] [client 20.226.25.243:53887] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "ag0XMhKTmyvxtNXrN-hV0QAAAJg"]
[Wed May 20 10:06:42.869452 2026] [:error] [pid 44059:tid 44080] [client 20.226.25.243:58355] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "ag0XMhfFs-oSOOcyjyx0wQAAARM"]
[Wed May 20 10:06:43.553667 2026] [:error] [pid 41277:tid 41306] [client 20.226.25.243:19687] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "ag0XM7TTCltJmboB5ufL0gAAABg"]
[Wed May 20 10:06:44.207187 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:19399] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/controller/extension/"] [unique_id "ag0XNBKTmyvxtNXrN-hV7gAAAIc"]
[Wed May 20 10:06:44.881618 2026] [:error] [pid 41364:tid 41376] [client 20.226.25.243:51595] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/controller/extension/"] [unique_id "ag0XNBKTmyvxtNXrN-hV9wAAAIo"]
[Wed May 20 10:06:45.598937 2026] [:error] [pid 41278:tid 41316] [client 20.226.25.243:8280] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/controller/extension/"] [unique_id "ag0XNfWiNKASEfiGdwZ27wAAAEc"]
[Wed May 20 10:06:46.247512 2026] [:error] [pid 41278:tid 41327] [client 20.226.25.243:47900] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/controller/extension/"] [unique_id "ag0XNvWiNKASEfiGdwZ28QAAAFI"]
[Wed May 20 10:06:46.911520 2026] [:error] [pid 41279:tid 41358] [client 20.226.25.243:45385] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wap.php"] [unique_id "ag0XNrEFyfaehGZbt4xL7AAAANY"]
[Wed May 20 10:06:47.671568 2026] [:error] [pid 41279:tid 41339] [client 20.226.25.243:60363] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wap.php"] [unique_id "ag0XN7EFyfaehGZbt4xL7gAAAMM"]
[Wed May 20 10:06:48.448753 2026] [:error] [pid 41278:tid 41312] [client 20.226.25.243:57426] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wap.php"] [unique_id "ag0XOPWiNKASEfiGdwZ28wAAAEM"]
[Wed May 20 10:06:49.176368 2026] [:error] [pid 41278:tid 41326] [client 20.226.25.243:59817] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wap.php"] [unique_id "ag0XOfWiNKASEfiGdwZ29AAAAFE"]
[Wed May 20 10:06:49.984433 2026] [:error] [pid 41278:tid 41314] [client 20.226.25.243:19680] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp.php"] [unique_id "ag0XOfWiNKASEfiGdwZ29wAAAEU"]
[Wed May 20 10:06:50.710929 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:50020] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp.php"] [unique_id "ag0XOhKTmyvxtNXrN-hWGwAAAJU"]
[Wed May 20 10:06:51.481727 2026] [:error] [pid 41278:tid 41320] [client 20.226.25.243:54515] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp.php"] [unique_id "ag0XO_WiNKASEfiGdwZ2-gAAAEs"]
[Wed May 20 10:06:52.387183 2026] [:error] [pid 41279:tid 41337] [client 20.226.25.243:19658] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp.php"] [unique_id "ag0XPLEFyfaehGZbt4xL8AAAAME"]
[Wed May 20 10:06:53.355848 2026] [:error] [pid 41279:tid 41347] [client 20.226.25.243:54502] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ag0XPbEFyfaehGZbt4xL8wAAAMs"]
[Wed May 20 10:06:54.147863 2026] [:error] [pid 41278:tid 41317] [client 20.226.25.243:50632] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ag0XPvWiNKASEfiGdwZ2_AAAAEg"]
[Wed May 20 10:06:54.798366 2026] [:error] [pid 41277:tid 41299] [client 20.226.25.243:56269] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ag0XPrTTCltJmboB5ufL5wAAABE"]
[Wed May 20 10:06:55.501742 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:8270] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aa.php"] [unique_id "ag0XPxfFs-oSOOcyjyx1EAAAAQE"]
[Wed May 20 10:06:56.171642 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:34705] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "ag0XQBfFs-oSOOcyjyx1HwAAARU"]
[Wed May 20 10:06:57.068069 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:38293] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "ag0XQRfFs-oSOOcyjyx1MwAAAQw"]
[Wed May 20 10:06:57.804227 2026] [:error] [pid 41278:tid 41331] [client 20.226.25.243:33507] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "ag0XQfWiNKASEfiGdwZ3AwAAAFY"]
[Wed May 20 10:06:58.518416 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:54166] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bolt.php"] [unique_id "ag0XQhKTmyvxtNXrN-hWIAAAAIg"]
[Wed May 20 10:06:59.195250 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:35333] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ag0XQxKTmyvxtNXrN-hWIwAAAJc"]
[Wed May 20 10:06:59.872434 2026] [:error] [pid 41279:tid 41350] [client 20.226.25.243:40168] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ag0XQ7EFyfaehGZbt4xMHgAAAM4"]
[Wed May 20 10:07:00.557177 2026] [:error] [pid 41277:tid 41282] [client 20.226.25.243:54471] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ag0XRLTTCltJmboB5ufMBgAAAAA"]
[Wed May 20 10:07:01.227904 2026] [:error] [pid 41277:tid 41301] [client 20.226.25.243:57431] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ag0XRbTTCltJmboB5ufMCAAAABM"]
[Wed May 20 10:07:01.920984 2026] [:error] [pid 41277:tid 41304] [client 20.226.25.243:57026] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "ag0XRbTTCltJmboB5ufMCgAAABY"]
[Wed May 20 10:07:02.675915 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:60404] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "ag0XRhfFs-oSOOcyjyx1agAAAQ4"]
[Wed May 20 10:07:03.449884 2026] [:error] [pid 44059:tid 44068] [client 20.226.25.243:47891] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "ag0XRxfFs-oSOOcyjyx1bAAAAQc"]
[Wed May 20 10:07:04.354940 2026] [:error] [pid 41279:tid 41346] [client 20.226.25.243:46080] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cgi-bin/"] [unique_id "ag0XSLEFyfaehGZbt4xMIQAAAMo"]
[Wed May 20 10:07:05.098260 2026] [:error] [pid 41277:tid 41296] [client 20.226.25.243:58327] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ag0XSbTTCltJmboB5ufMDQAAAA4"]
[Wed May 20 10:07:05.916857 2026] [:error] [pid 41279:tid 41341] [client 20.226.25.243:20016] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ag0XSbEFyfaehGZbt4xMIgAAAMU"]
[Wed May 20 10:07:06.590142 2026] [:error] [pid 41279:tid 41357] [client 20.226.25.243:5758] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ag0XSrEFyfaehGZbt4xMIwAAANU"]
[Wed May 20 10:07:07.276102 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:53868] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ag0XSxKTmyvxtNXrN-hWLQAAAIc"]
[Wed May 20 10:07:08.029214 2026] [:error] [pid 41278:tid 41317] [client 20.226.25.243:57688] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "ag0XTPWiNKASEfiGdwZ3CAAAAEg"]
[Wed May 20 10:07:08.694756 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:51555] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "ag0XTBKTmyvxtNXrN-hWLwAAAJc"]
[Wed May 20 10:07:09.490689 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:20025] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "ag0XTRKTmyvxtNXrN-hWMgAAAJM"]
[Wed May 20 10:07:10.206913 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:53177] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/index/function.php"] [unique_id "ag0XThKTmyvxtNXrN-hWNAAAAI0"]
[Wed May 20 10:07:11.023255 2026] [:error] [pid 44059:tid 44072] [client 20.226.25.243:19476] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "ag0XTxfFs-oSOOcyjyx1bgAAAQs"]
[Wed May 20 10:07:11.682499 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:52895] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "ag0XTxKTmyvxtNXrN-hWNgAAAJU"]
[Wed May 20 10:07:12.376983 2026] [:error] [pid 41279:tid 41337] [client 20.226.25.243:19488] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "ag0XULEFyfaehGZbt4xMJAAAAME"]
[Wed May 20 10:07:13.113589 2026] [:error] [pid 44059:tid 44069] [client 20.226.25.243:65264] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aaa.php"] [unique_id "ag0XURfFs-oSOOcyjyx1bwAAAQg"]
[Wed May 20 10:07:13.793960 2026] [:error] [pid 41364:tid 41390] [client 20.226.25.243:52914] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "ag0XURKTmyvxtNXrN-hWOQAAAJg"]
[Wed May 20 10:07:14.486580 2026] [:error] [pid 41364:tid 41366] [client 20.226.25.243:58326] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "ag0XUhKTmyvxtNXrN-hWOgAAAIA"]
[Wed May 20 10:07:15.209671 2026] [:error] [pid 41279:tid 41336] [client 20.226.25.243:54197] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "ag0XU7EFyfaehGZbt4xMJgAAAMA"]
[Wed May 20 10:07:15.852912 2026] [:error] [pid 41279:tid 41347] [client 20.226.25.243:40701] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abcd.php"] [unique_id "ag0XU7EFyfaehGZbt4xMKQAAAMs"]
[Wed May 20 10:07:16.804840 2026] [:error] [pid 41279:tid 41348] [client 20.226.25.243:65265] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "ag0XVLEFyfaehGZbt4xMKgAAAMw"]
[Wed May 20 10:07:25.290739 2026] [:error] [pid 41279:tid 41354] [client 20.226.25.243:8319] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Wed May 20 10:07:25.616420 2026] [:error] [pid 41279:tid 41337] [client 20.226.25.243:8319] File does not exist: /usr/local/apache/htdocs/suspended-page/edit-tags.php
[Wed May 20 10:07:26.355785 2026] [:error] [pid 41279:tid 41339] [client 20.226.25.243:8319] File does not exist: /usr/local/apache/htdocs/suspended-page/a7.php
[Wed May 20 10:07:27.060810 2026] [:error] [pid 41279:tid 41353] [client 20.226.25.243:8319] [client 20.226.25.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "ag0XX7EFyfaehGZbt4xMYQAAANE"]
[Wed May 20 10:07:28.215613 2026] [:error] [pid 41279:tid 41336] [client 20.226.25.243:50271] File does not exist: /usr/local/apache/htdocs/suspended-page/NewFile.php
[Wed May 20 10:07:28.541091 2026] [:error] [pid 41279:tid 41351] [client 20.226.25.243:50271] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-Blogs.php
[Wed May 20 10:07:29.018127 2026] [:error] [pid 41279:tid 41351] [client 20.226.25.243:50271] [client 20.226.25.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "ag0XYbEFyfaehGZbt4xMgwAAAM8"]
[Wed May 20 10:07:29.697484 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:34802] File does not exist: /usr/local/apache/htdocs/suspended-page/themes.php
[Wed May 20 10:07:30.676624 2026] [:error] [pid 44059:tid 44071] [client 20.226.25.243:34802] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "ag0XYhfFs-oSOOcyjyx1hgAAAQo"]
[Wed May 20 10:07:31.406449 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:40676] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "ag0XYxfFs-oSOOcyjyx1hwAAAQY"]
[Wed May 20 10:07:32.115297 2026] [:error] [pid 41279:tid 41350] [client 20.226.25.243:57830] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "ag0XZLEFyfaehGZbt4xMhAAAAM4"]
[Wed May 20 10:07:32.805506 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:44783] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws83.php"] [unique_id "ag0XZBfFs-oSOOcyjyx1igAAAQ4"]
[Wed May 20 10:07:33.511553 2026] [:error] [pid 44059:tid 44076] [client 20.226.25.243:40697] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atex1.php"] [unique_id "ag0XZRfFs-oSOOcyjyx1iwAAAQ8"]
[Wed May 20 10:07:34.271106 2026] [:error] [pid 44059:tid 44080] [client 20.226.25.243:48637] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atex1.php"] [unique_id "ag0XZhfFs-oSOOcyjyx1jAAAARM"]
[Wed May 20 10:07:34.956918 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:37996] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atex1.php"] [unique_id "ag0XZhKTmyvxtNXrN-hWVwAAAIg"]
[Wed May 20 10:07:35.675237 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:58763] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atex1.php"] [unique_id "ag0XZxKTmyvxtNXrN-hWWgAAAIc"]
[Wed May 20 10:07:36.403433 2026] [:error] [pid 41364:tid 41366] [client 20.226.25.243:47909] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "ag0XaBKTmyvxtNXrN-hWXAAAAIA"]
[Wed May 20 10:07:37.121633 2026] [:error] [pid 41278:tid 41324] [client 20.226.25.243:52236] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "ag0XafWiNKASEfiGdwZ3CgAAAE8"]
[Wed May 20 10:07:37.850661 2026] [:error] [pid 44059:tid 44061] [client 20.226.25.243:57819] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "ag0XaRfFs-oSOOcyjyx1kAAAAQA"]
[Wed May 20 10:07:38.646761 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:51605] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "ag0XahfFs-oSOOcyjyx1kQAAARA"]
[Wed May 20 10:07:39.529065 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:58443] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "ag0XaxfFs-oSOOcyjyx1qgAAARA"]
[Wed May 20 10:07:40.325290 2026] [:error] [pid 41278:tid 41310] [client 20.226.25.243:53384] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "ag0XbPWiNKASEfiGdwZ3CwAAAEE"]
[Wed May 20 10:07:41.071739 2026] [:error] [pid 41364:tid 41386] [client 20.226.25.243:58311] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "ag0XbRKTmyvxtNXrN-hWbQAAAJQ"]
[Wed May 20 10:07:41.839816 2026] [:error] [pid 44059:tid 44074] [client 20.226.25.243:56455] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/w.php"] [unique_id "ag0XbRfFs-oSOOcyjyx1wAAAAQ0"]
[Wed May 20 10:07:42.507277 2026] [:error] [pid 44059:tid 44071] [client 20.226.25.243:54507] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "ag0XbhfFs-oSOOcyjyx1xwAAAQo"]
[Wed May 20 10:07:43.162394 2026] [:error] [pid 41277:tid 41289] [client 20.226.25.243:57003] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "ag0Xb7TTCltJmboB5ufMFgAAAAc"]
[Wed May 20 10:07:43.843358 2026] [:error] [pid 41278:tid 41323] [client 20.226.25.243:54496] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "ag0Xb_WiNKASEfiGdwZ3DQAAAE4"]
[Wed May 20 10:07:44.577118 2026] [:error] [pid 41279:tid 41347] [client 20.226.25.243:56256] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless.php"] [unique_id "ag0XcLEFyfaehGZbt4xMhwAAAMs"]
[Wed May 20 10:07:45.333211 2026] [:error] [pid 41277:tid 41293] [client 20.226.25.243:48026] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagax1.php"] [unique_id "ag0XcbTTCltJmboB5ufMFwAAAAs"]
[Wed May 20 10:07:45.982678 2026] [:error] [pid 41277:tid 41295] [client 20.226.25.243:52244] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagax1.php"] [unique_id "ag0XcbTTCltJmboB5ufMGQAAAA0"]
[Wed May 20 10:07:46.667819 2026] [:error] [pid 41278:tid 41321] [client 20.226.25.243:30003] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagax1.php"] [unique_id "ag0XcvWiNKASEfiGdwZ3DwAAAEw"]
[Wed May 20 10:07:47.366140 2026] [:error] [pid 41279:tid 41348] [client 20.226.25.243:52267] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagax1.php"] [unique_id "ag0Xc7EFyfaehGZbt4xMiQAAAMw"]
[Wed May 20 10:07:48.068069 2026] [:error] [pid 41364:tid 41375] [client 20.226.25.243:5717] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpc.php"] [unique_id "ag0XdBKTmyvxtNXrN-hWdwAAAIk"]
[Wed May 20 10:07:48.736536 2026] [:error] [pid 41279:tid 41351] [client 20.226.25.243:48114] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpc.php"] [unique_id "ag0XdLEFyfaehGZbt4xMigAAAM8"]
[Wed May 20 10:07:49.472549 2026] [:error] [pid 41277:tid 41303] [client 20.226.25.243:54099] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpc.php"] [unique_id "ag0XdbTTCltJmboB5ufMGwAAABU"]
[Wed May 20 10:07:50.227022 2026] [:error] [pid 41279:tid 41337] [client 20.226.25.243:40690] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wpc.php"] [unique_id "ag0XdrEFyfaehGZbt4xMjAAAAME"]
[Wed May 20 10:07:50.909872 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:53828] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "ag0XdhKTmyvxtNXrN-hWeQAAAI0"]
[Wed May 20 10:07:51.642838 2026] [:error] [pid 41364:tid 41376] [client 20.226.25.243:57743] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "ag0XdxKTmyvxtNXrN-hWegAAAIo"]
[Wed May 20 10:07:52.322079 2026] [:error] [pid 41278:tid 41314] [client 20.226.25.243:20143] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "ag0XePWiNKASEfiGdwZ3EgAAAEU"]
[Wed May 20 10:07:53.006124 2026] [:error] [pid 41278:tid 41331] [client 20.226.25.243:54120] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fone1.php"] [unique_id "ag0XefWiNKASEfiGdwZ3EwAAAFY"]
[Wed May 20 10:07:53.668458 2026] [:error] [pid 41364:tid 41377] [client 20.226.25.243:54128] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ncx.php"] [unique_id "ag0XeRKTmyvxtNXrN-hWewAAAIs"]
[Wed May 20 10:07:54.346863 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:58388] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ncx.php"] [unique_id "ag0XehKTmyvxtNXrN-hWfQAAAIg"]
[Wed May 20 10:07:55.044842 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:5740] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ncx.php"] [unique_id "ag0XexKTmyvxtNXrN-hWfwAAAI8"]
[Wed May 20 10:07:55.736124 2026] [:error] [pid 44059:tid 44066] [client 20.226.25.243:29953] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ncx.php"] [unique_id "ag0XexfFs-oSOOcyjyx1ygAAAQU"]
[Wed May 20 10:07:56.493450 2026] [:error] [pid 41277:tid 41282] [client 20.226.25.243:52243] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ag0XfLTTCltJmboB5ufMRwAAAAA"]
[Wed May 20 10:07:57.164037 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:53872] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ag0XfRfFs-oSOOcyjyx1zAAAAQw"]
[Wed May 20 10:07:57.860548 2026] [:error] [pid 41279:tid 41338] [client 20.226.25.243:45823] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ag0XfbEFyfaehGZbt4xMmwAAAMI"]
[Wed May 20 10:07:58.520763 2026] [:error] [pid 41364:tid 41384] [client 20.226.25.243:37363] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ag0XfhKTmyvxtNXrN-hWjwAAAJI"]
[Wed May 20 10:07:59.351031 2026] [:error] [pid 44059:tid 44061] [client 20.226.25.243:55920] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wso.php"] [unique_id "ag0XfxfFs-oSOOcyjyx1zwAAAQA"]
[Wed May 20 10:08:00.178900 2026] [:error] [pid 41277:tid 41293] [client 20.226.25.243:45779] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wso.php"] [unique_id "ag0XgLTTCltJmboB5ufMWAAAAAs"]
[Wed May 20 10:08:00.956705 2026] [:error] [pid 41279:tid 41351] [client 20.226.25.243:52723] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wso.php"] [unique_id "ag0XgLEFyfaehGZbt4xMnAAAAM8"]
[Wed May 20 10:08:01.675771 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:5707] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wso.php"] [unique_id "ag0XgRfFs-oSOOcyjyx10QAAARY"]
[Wed May 20 10:08:02.569470 2026] [:error] [pid 41279:tid 41359] [client 20.226.25.243:56777] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zup.php73"] [unique_id "ag0XgrEFyfaehGZbt4xMnQAAANc"]
[Wed May 20 10:08:03.389183 2026] [:error] [pid 41364:tid 41371] [client 20.226.25.243:40702] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zup.php73"] [unique_id "ag0XgxKTmyvxtNXrN-hWkgAAAIU"]
[Wed May 20 10:08:04.144909 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:5725] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zup.php73"] [unique_id "ag0XhBfFs-oSOOcyjyx10gAAARI"]
[Wed May 20 10:08:05.005180 2026] [:error] [pid 41279:tid 41349] [client 20.226.25.243:40687] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zup.php73"] [unique_id "ag0XhbEFyfaehGZbt4xMngAAAM0"]
[Wed May 20 10:08:05.833391 2026] [:error] [pid 41364:tid 41380] [client 20.226.25.243:59548] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ag0XhRKTmyvxtNXrN-hWlQAAAI4"]
[Wed May 20 10:08:06.538630 2026] [:error] [pid 41364:tid 41378] [client 20.226.25.243:57468] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ag0XhhKTmyvxtNXrN-hWlgAAAIw"]
[Wed May 20 10:08:07.219203 2026] [:error] [pid 41364:tid 41367] [client 20.226.25.243:40665] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ag0XhxKTmyvxtNXrN-hWmAAAAIE"]
[Wed May 20 10:08:08.100851 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:55890] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/k.php"] [unique_id "ag0XiBKTmyvxtNXrN-hWmQAAAJM"]
[Wed May 20 10:08:08.859891 2026] [:error] [pid 41279:tid 41360] [client 20.226.25.243:59531] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blink.php"] [unique_id "ag0XiLEFyfaehGZbt4xMoQAAANg"]
[Wed May 20 10:08:09.623235 2026] [:error] [pid 41279:tid 41352] [client 20.226.25.243:19935] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blink.php"] [unique_id "ag0XibEFyfaehGZbt4xMogAAANA"]
[Wed May 20 10:08:10.379942 2026] [:error] [pid 41277:tid 41298] [client 20.226.25.243:35332] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blink.php"] [unique_id "ag0XirTTCltJmboB5ufMWQAAABA"]
[Wed May 20 10:08:11.290120 2026] [:error] [pid 44059:tid 44076] [client 20.226.25.243:5743] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-blink.php"] [unique_id "ag0XixfFs-oSOOcyjyx13QAAAQ8"]
[Wed May 20 10:08:12.139861 2026] [:error] [pid 44059:tid 44071] [client 20.226.25.243:57494] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ag0XjBfFs-oSOOcyjyx14gAAAQo"]
[Wed May 20 10:08:12.923576 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:56261] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ag0XjBKTmyvxtNXrN-hWnAAAAI0"]
[Wed May 20 10:08:13.729714 2026] [:error] [pid 41364:tid 41372] [client 20.226.25.243:37902] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ag0XjRKTmyvxtNXrN-hWnwAAAIY"]
[Wed May 20 10:08:14.760141 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:53211] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ag0XjhfFs-oSOOcyjyx16AAAAQM"]
[Wed May 20 10:08:15.816306 2026] [:error] [pid 41364:tid 41380] [client 20.226.25.243:10497] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "ag0XjxKTmyvxtNXrN-hWogAAAI4"]
[Wed May 20 10:08:17.447392 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:10497] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "ag0XkRfFs-oSOOcyjyx18wAAAQw"]
[Wed May 20 10:08:18.200582 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:43582] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "ag0XkhfFs-oSOOcyjyx19wAAARI"]
[Wed May 20 10:08:18.891424 2026] [:error] [pid 41278:tid 41326] [client 20.226.25.243:58357] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/ectoplasm/"] [unique_id "ag0XkvWiNKASEfiGdwZ3IQAAAFE"]
[Wed May 20 10:08:19.632548 2026] [:error] [pid 41278:tid 41314] [client 20.226.25.243:60561] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "ag0Xk_WiNKASEfiGdwZ3IgAAAEU"]
[Wed May 20 10:08:20.330495 2026] [:error] [pid 41278:tid 41331] [client 20.226.25.243:53862] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "ag0XlPWiNKASEfiGdwZ3IwAAAFY"]
[Wed May 20 10:08:21.067845 2026] [:error] [pid 41279:tid 41336] [client 20.226.25.243:57084] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "ag0XlbEFyfaehGZbt4xMpwAAAMA"]
[Wed May 20 10:08:21.785103 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:43595] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/"] [unique_id "ag0XlRKTmyvxtNXrN-hWpAAAAJU"]
[Wed May 20 10:08:22.519437 2026] [:error] [pid 44059:tid 44080] [client 20.226.25.243:20199] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww5.php"] [unique_id "ag0XlhfFs-oSOOcyjyx1-gAAARM"]
[Wed May 20 10:08:23.208726 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:56286] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww5.php"] [unique_id "ag0XlxfFs-oSOOcyjyx1-wAAAQY"]
[Wed May 20 10:08:23.955625 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:10552] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww5.php"] [unique_id "ag0XlxfFs-oSOOcyjyx1_AAAARA"]
[Wed May 20 10:08:24.722157 2026] [:error] [pid 41278:tid 41325] [client 20.226.25.243:38377] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ww5.php"] [unique_id "ag0XmPWiNKASEfiGdwZ3JAAAAFA"]
[Wed May 20 10:08:25.659266 2026] [:error] [pid 41277:tid 41292] [client 20.226.25.243:32778] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ag0XmbTTCltJmboB5ufMXgAAAAo"]
[Wed May 20 10:08:26.326105 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:10557] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ag0XmhKTmyvxtNXrN-hWpQAAAI0"]
[Wed May 20 10:08:27.031028 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:65402] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ag0XmxfFs-oSOOcyjyx1_wAAAQM"]
[Wed May 20 10:08:27.703421 2026] [:error] [pid 44059:tid 44070] [client 20.226.25.243:37916] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/2.php"] [unique_id "ag0XmxfFs-oSOOcyjyx2AAAAAQk"]
[Wed May 20 10:08:28.644386 2026] [:error] [pid 41364:tid 41377] [client 20.226.25.243:43555] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "ag0XnBKTmyvxtNXrN-hWpgAAAIs"]
[Wed May 20 10:08:29.341398 2026] [:error] [pid 44059:tid 44061] [client 20.226.25.243:51631] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "ag0XnRfFs-oSOOcyjyx2AgAAAQA"]
[Wed May 20 10:08:30.530552 2026] [:error] [pid 41277:tid 41288] [client 20.226.25.243:5753] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Wed May 20 10:08:30.898060 2026] [:error] [pid 41277:tid 41306] [client 20.226.25.243:5753] File does not exist: /usr/local/apache/htdocs/suspended-page/p.php
[Wed May 20 10:08:31.224020 2026] [:error] [pid 41277:tid 41294] [client 20.226.25.243:5753] File does not exist: /usr/local/apache/htdocs/suspended-page/php.php
[Wed May 20 10:08:31.551891 2026] [:error] [pid 41277:tid 41286] [client 20.226.25.243:5753] File does not exist: /usr/local/apache/htdocs/suspended-page/test1.php
[Wed May 20 10:08:32.222010 2026] [:error] [pid 41277:tid 41296] [client 20.226.25.243:5753] File does not exist: /usr/local/apache/htdocs/suspended-page/zoom1.php
[Wed May 20 10:08:32.549556 2026] [:error] [pid 41277:tid 41289] [client 20.226.25.243:5753] File does not exist: /usr/local/apache/htdocs/suspended-page/lock360.php
[Wed May 20 10:08:32.875116 2026] [:error] [pid 41277:tid 41299] [client 20.226.25.243:5753] File does not exist: /usr/local/apache/htdocs/suspended-page/b.php
[Wed May 20 10:08:33.202085 2026] [:error] [pid 41277:tid 41293] [client 20.226.25.243:5753] File does not exist: /usr/local/apache/htdocs/suspended-page/buy.php
[Wed May 20 10:08:33.527872 2026] [:error] [pid 41277:tid 41301] [client 20.226.25.243:5753] File does not exist: /usr/local/apache/htdocs/suspended-page/config.php
[Wed May 20 10:08:33.855419 2026] [:error] [pid 41277:tid 41287] [client 20.226.25.243:5753] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/num.php"] [unique_id "ag0XobTTCltJmboB5ufMagAAAAU"]
[Wed May 20 10:08:34.590489 2026] [:error] [pid 41279:tid 41341] [client 20.226.25.243:36051] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/num.php"] [unique_id "ag0XorEFyfaehGZbt4xMvQAAAMU"]
[Wed May 20 10:08:35.244421 2026] [:error] [pid 41279:tid 41358] [client 20.226.25.243:52221] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/num.php"] [unique_id "ag0Xo7EFyfaehGZbt4xMwQAAANY"]
[Wed May 20 10:08:36.149162 2026] [:error] [pid 41277:tid 41295] [client 20.226.25.243:57024] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/num.php"] [unique_id "ag0XpLTTCltJmboB5ufMawAAAA0"]
[Wed May 20 10:08:36.953267 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:20200] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "ag0XpBKTmyvxtNXrN-hWqAAAAI8"]
[Wed May 20 10:08:37.686997 2026] [:error] [pid 41364:tid 41372] [client 20.226.25.243:56225] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "ag0XpRKTmyvxtNXrN-hWqQAAAIY"]
[Wed May 20 10:08:38.400316 2026] [:error] [pid 41277:tid 41290] [client 20.226.25.243:40648] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "ag0XprTTCltJmboB5ufMcAAAAAg"]
[Wed May 20 10:08:39.088485 2026] [:error] [pid 41279:tid 41341] [client 20.226.25.243:5744] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/areak1.php"] [unique_id "ag0Xp7EFyfaehGZbt4xM0wAAAMU"]
[Wed May 20 10:08:39.741705 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:55786] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vc.php"] [unique_id "ag0XpxKTmyvxtNXrN-hWqgAAAIc"]
[Wed May 20 10:08:40.480742 2026] [:error] [pid 41277:tid 41284] [client 20.226.25.243:38394] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vc.php"] [unique_id "ag0XqLTTCltJmboB5ufMcwAAAAI"]
[Wed May 20 10:08:41.178099 2026] [:error] [pid 44059:tid 44080] [client 20.226.25.243:56206] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vc.php"] [unique_id "ag0XqRfFs-oSOOcyjyx2BgAAARM"]
[Wed May 20 10:08:41.881005 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:20168] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vc.php"] [unique_id "ag0XqRfFs-oSOOcyjyx2GQAAARU"]
[Wed May 20 10:08:42.588301 2026] [:error] [pid 41277:tid 41305] [client 20.226.25.243:32810] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ag0XqrTTCltJmboB5ufMdQAAABc"]
[Wed May 20 10:08:43.252873 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:32779] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ag0XqxKTmyvxtNXrN-hWvAAAAI0"]
[Wed May 20 10:08:44.012396 2026] [:error] [pid 41278:tid 41313] [client 20.226.25.243:40246] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ag0XrPWiNKASEfiGdwZ3LwAAAEQ"]
[Wed May 20 10:08:44.655296 2026] [:error] [pid 41278:tid 41316] [client 20.226.25.243:59776] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/admin.php"] [unique_id "ag0XrPWiNKASEfiGdwZ3MQAAAEc"]
[Wed May 20 10:08:45.381635 2026] [:error] [pid 41279:tid 41344] [client 20.226.25.243:38390] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core.php"] [unique_id "ag0XrbEFyfaehGZbt4xM7wAAAMg"]
[Wed May 20 10:08:46.059886 2026] [:error] [pid 41279:tid 41340] [client 20.226.25.243:53848] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core.php"] [unique_id "ag0XrrEFyfaehGZbt4xM8gAAAMQ"]
[Wed May 20 10:08:46.710181 2026] [:error] [pid 41364:tid 41390] [client 20.226.25.243:57058] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core.php"] [unique_id "ag0XrhKTmyvxtNXrN-hWwgAAAJg"]
[Wed May 20 10:08:47.567421 2026] [:error] [pid 41364:tid 41378] [client 20.226.25.243:48066] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core.php"] [unique_id "ag0XrxKTmyvxtNXrN-hWwwAAAIw"]
[Wed May 20 10:08:48.344187 2026] [:error] [pid 41277:tid 41301] [client 20.226.25.243:54523] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/"] [unique_id "ag0XsLTTCltJmboB5ufMeQAAABM"]
[Wed May 20 10:08:49.061150 2026] [:error] [pid 41364:tid 41369] [client 20.226.25.243:54492] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/"] [unique_id "ag0XsRKTmyvxtNXrN-hWxAAAAIM"]
[Wed May 20 10:08:49.734858 2026] [:error] [pid 41278:tid 41331] [client 20.226.25.243:56249] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/"] [unique_id "ag0XsfWiNKASEfiGdwZ3NQAAAFY"]
[Wed May 20 10:08:50.437641 2026] [:error] [pid 41277:tid 41282] [client 20.226.25.243:39315] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/"] [unique_id "ag0XsrTTCltJmboB5ufMegAAAAA"]
[Wed May 20 10:08:51.844837 2026] [:error] [pid 41277:tid 41290] [client 20.226.25.243:57079] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ag0Xs7TTCltJmboB5ufMewAAAAg"]
[Wed May 20 10:08:52.528827 2026] [:error] [pid 41277:tid 41302] [client 20.226.25.243:65400] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ag0XtLTTCltJmboB5ufMfAAAABQ"]
[Wed May 20 10:08:53.318705 2026] [:error] [pid 41277:tid 41283] [client 20.226.25.243:20174] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ag0XtbTTCltJmboB5ufMfQAAAAE"]
[Wed May 20 10:08:54.027873 2026] [:error] [pid 41364:tid 41388] [client 20.226.25.243:34147] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ag0XthKTmyvxtNXrN-hWyAAAAJY"]
[Wed May 20 10:08:54.878749 2026] [:error] [pid 44059:tid 44065] [client 20.226.25.243:33434] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/min.php"] [unique_id "ag0XthfFs-oSOOcyjyx2GgAAAQQ"]
[Wed May 20 10:08:55.598156 2026] [:error] [pid 41277:tid 41291] [client 20.226.25.243:19418] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/min.php"] [unique_id "ag0Xt7TTCltJmboB5ufMfgAAAAk"]
[Wed May 20 10:08:56.337506 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:38393] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/min.php"] [unique_id "ag0XuBKTmyvxtNXrN-hWygAAAII"]
[Wed May 20 10:08:56.983905 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:59818] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/min.php"] [unique_id "ag0XuBfFs-oSOOcyjyx2HQAAAQE"]
[Wed May 20 10:08:57.654908 2026] [:error] [pid 41364:tid 41376] [client 20.226.25.243:19421] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/beteng88/ws83.php"] [unique_id "ag0XuRKTmyvxtNXrN-hW2QAAAIo"]
[Wed May 20 10:08:58.299032 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:38344] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/beteng88/ws83.php"] [unique_id "ag0XuhKTmyvxtNXrN-hW4AAAAII"]
[Wed May 20 10:08:58.980680 2026] [:error] [pid 41279:tid 41338] [client 20.226.25.243:59205] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/beteng88/ws83.php"] [unique_id "ag0XurEFyfaehGZbt4xNDAAAAMI"]
[Wed May 20 10:08:59.640157 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:56022] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/beteng88/ws83.php"] [unique_id "ag0XuxKTmyvxtNXrN-hW4gAAAI8"]
[Wed May 20 10:09:00.301306 2026] [:error] [pid 41364:tid 41383] [client 20.226.25.243:42615] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws37.php"] [unique_id "ag0XvBKTmyvxtNXrN-hW4wAAAJE"]
[Wed May 20 10:09:01.017862 2026] [:error] [pid 41278:tid 41309] [client 20.226.25.243:33435] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws37.php"] [unique_id "ag0XvfWiNKASEfiGdwZ3RwAAAEA"]
[Wed May 20 10:09:01.667817 2026] [:error] [pid 41277:tid 41296] [client 20.226.25.243:20177] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws37.php"] [unique_id "ag0XvbTTCltJmboB5ufMhwAAAA4"]
[Wed May 20 10:09:02.348341 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:40231] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws37.php"] [unique_id "ag0XvhKTmyvxtNXrN-hW5gAAAJM"]
[Wed May 20 10:09:03.038750 2026] [:error] [pid 41277:tid 41289] [client 20.226.25.243:56207] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ag0Xv7TTCltJmboB5ufMiAAAAAc"]
[Wed May 20 10:09:03.688502 2026] [:error] [pid 41278:tid 41321] [client 20.226.25.243:59201] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ag0Xv_WiNKASEfiGdwZ3SQAAAEw"]
[Wed May 20 10:09:04.342749 2026] [:error] [pid 41277:tid 41293] [client 20.226.25.243:56008] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ag0XwLTTCltJmboB5ufMiQAAAAs"]
[Wed May 20 10:09:05.004412 2026] [:error] [pid 41277:tid 41301] [client 20.226.25.243:32802] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ag0XwbTTCltJmboB5ufMigAAABM"]
[Wed May 20 10:09:05.680231 2026] [:error] [pid 41277:tid 41282] [client 20.226.25.243:34142] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "ag0XwbTTCltJmboB5ufMjAAAAAA"]
[Wed May 20 10:09:06.383480 2026] [:error] [pid 41277:tid 41304] [client 20.226.25.243:20181] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "ag0XwrTTCltJmboB5ufMjgAAABY"]
[Wed May 20 10:09:07.060192 2026] [:error] [pid 41278:tid 41328] [client 20.226.25.243:59220] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "ag0Xw_WiNKASEfiGdwZ3SwAAAFM"]
[Wed May 20 10:09:07.835506 2026] [:error] [pid 41278:tid 41329] [client 20.226.25.243:32791] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/widgets/"] [unique_id "ag0Xw_WiNKASEfiGdwZ3TAAAAFQ"]
[Wed May 20 10:09:08.500208 2026] [:error] [pid 41278:tid 41317] [client 20.226.25.243:39333] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/il.php"] [unique_id "ag0XxPWiNKASEfiGdwZ3TQAAAEg"]
[Wed May 20 10:09:09.185526 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:19823] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/il.php"] [unique_id "ag0XxRKTmyvxtNXrN-hW6wAAAIc"]
[Wed May 20 10:09:09.884574 2026] [:error] [pid 41364:tid 41371] [client 20.226.25.243:55944] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/il.php"] [unique_id "ag0XxRKTmyvxtNXrN-hW7AAAAIU"]
[Wed May 20 10:09:10.604849 2026] [:error] [pid 44059:tid 44071] [client 20.226.25.243:47866] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/il.php"] [unique_id "ag0XxhfFs-oSOOcyjyx2KwAAAQo"]
[Wed May 20 10:09:11.264714 2026] [:error] [pid 41279:tid 41344] [client 20.226.25.243:56238] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lite.php"] [unique_id "ag0Xx7EFyfaehGZbt4xNEgAAAMg"]
[Wed May 20 10:09:11.926823 2026] [:error] [pid 44059:tid 44072] [client 20.226.25.243:39301] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lite.php"] [unique_id "ag0XxxfFs-oSOOcyjyx2LAAAAQs"]
[Wed May 20 10:09:12.679177 2026] [:error] [pid 41279:tid 41360] [client 20.226.25.243:40515] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lite.php"] [unique_id "ag0XyLEFyfaehGZbt4xNFAAAANg"]
[Wed May 20 10:09:13.390845 2026] [:error] [pid 41278:tid 41324] [client 20.226.25.243:19438] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lite.php"] [unique_id "ag0XyfWiNKASEfiGdwZ3UAAAAE8"]
[Wed May 20 10:09:14.228362 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:59260] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/load.php"] [unique_id "ag0XyhKTmyvxtNXrN-hW7gAAAII"]
[Wed May 20 10:09:14.883501 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:39368] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/load.php"] [unique_id "ag0XyhKTmyvxtNXrN-hW7wAAAI8"]
[Wed May 20 10:09:15.627095 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:59262] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/load.php"] [unique_id "ag0XyxfFs-oSOOcyjyx2MQAAAQw"]
[Wed May 20 10:09:16.380507 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:42589] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/load.php"] [unique_id "ag0XzBfFs-oSOOcyjyx2MwAAAQI"]
[Wed May 20 10:09:17.040574 2026] [:error] [pid 41277:tid 41286] [client 20.226.25.243:47621] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/"] [unique_id "ag0XzbTTCltJmboB5ufMkwAAAAQ"]
[Wed May 20 10:09:17.723115 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:59811] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/"] [unique_id "ag0XzRfFs-oSOOcyjyx2NgAAARI"]
[Wed May 20 10:09:18.426552 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:58006] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/"] [unique_id "ag0XzhfFs-oSOOcyjyx2OwAAAQ4"]
[Wed May 20 10:09:19.104969 2026] [:error] [pid 41279:tid 41357] [client 20.226.25.243:19816] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/"] [unique_id "ag0Xz7EFyfaehGZbt4xNGAAAANU"]
[Wed May 20 10:09:19.805061 2026] [:error] [pid 41279:tid 41342] [client 20.226.25.243:48994] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-themes.php"] [unique_id "ag0Xz7EFyfaehGZbt4xNGQAAAMY"]
[Wed May 20 10:09:20.483467 2026] [:error] [pid 41364:tid 41366] [client 20.226.25.243:34141] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-themes.php"] [unique_id "ag0X0BKTmyvxtNXrN-hW8gAAAIA"]
[Wed May 20 10:09:21.136382 2026] [:error] [pid 44059:tid 44065] [client 20.226.25.243:55964] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-themes.php"] [unique_id "ag0X0RfFs-oSOOcyjyx2PQAAAQQ"]
[Wed May 20 10:09:21.807851 2026] [:error] [pid 41278:tid 41323] [client 20.226.25.243:19431] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-themes.php"] [unique_id "ag0X0fWiNKASEfiGdwZ3UQAAAE4"]
[Wed May 20 10:09:22.508456 2026] [:error] [pid 41364:tid 41369] [client 20.226.25.243:59339] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ag0X0hKTmyvxtNXrN-hW8wAAAIM"]
[Wed May 20 10:09:23.191593 2026] [:error] [pid 41279:tid 41348] [client 20.226.25.243:19801] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ag0X07EFyfaehGZbt4xNHAAAAMw"]
[Wed May 20 10:09:24.154178 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:47647] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ag0X1BfFs-oSOOcyjyx2QQAAAQI"]
[Wed May 20 10:09:25.014581 2026] [:error] [pid 41364:tid 41388] [client 20.226.25.243:19787] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ag0X1RKTmyvxtNXrN-hW9QAAAJY"]
[Wed May 20 10:09:25.961344 2026] [:error] [pid 41364:tid 41376] [client 20.226.25.243:47868] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.trash7206/index.php"] [unique_id "ag0X1RKTmyvxtNXrN-hW-QAAAIo"]
[Wed May 20 10:09:26.752823 2026] [:error] [pid 41277:tid 41301] [client 20.226.25.243:39400] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.trash7206/index.php"] [unique_id "ag0X1rTTCltJmboB5ufMlQAAABM"]
[Wed May 20 10:09:27.560839 2026] [:error] [pid 41277:tid 41287] [client 20.226.25.243:49006] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.trash7206/index.php"] [unique_id "ag0X17TTCltJmboB5ufMlgAAAAU"]
[Wed May 20 10:09:28.280854 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:40536] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.trash7206/index.php"] [unique_id "ag0X2BKTmyvxtNXrN-hW_gAAAJc"]
[Wed May 20 10:09:29.001149 2026] [:error] [pid 44059:tid 44076] [client 20.226.25.243:59375] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "ag0X2RfFs-oSOOcyjyx2RgAAAQ8"]
[Wed May 20 10:09:29.732580 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:58027] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "ag0X2RKTmyvxtNXrN-hW_wAAAII"]
[Wed May 20 10:09:30.386641 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:47658] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "ag0X2hfFs-oSOOcyjyx2SAAAAQY"]
[Wed May 20 10:09:31.056155 2026] [:error] [pid 44059:tid 44072] [client 20.226.25.243:42613] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "ag0X2xfFs-oSOOcyjyx2SQAAAQs"]
[Wed May 20 10:09:31.699491 2026] [:error] [pid 44059:tid 44066] [client 20.226.25.243:34149] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/index.php"] [unique_id "ag0X2xfFs-oSOOcyjyx2SgAAAQU"]
[Wed May 20 10:09:32.427086 2026] [:error] [pid 41364:tid 41383] [client 20.226.25.243:54422] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/index.php"] [unique_id "ag0X3BKTmyvxtNXrN-hXAAAAAJE"]
[Wed May 20 10:09:33.480890 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:58012] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-content.php
[Wed May 20 10:09:33.809224 2026] [:error] [pid 44059:tid 44070] [client 20.226.25.243:58012] [client 20.226.25.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ag0X3RfFs-oSOOcyjyx2TQAAAQk"]
[Wed May 20 10:09:34.856845 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:54270] [client 20.226.25.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/min.php"] [unique_id "ag0X3hfFs-oSOOcyjyx2TwAAARY"]
[Wed May 20 10:09:35.571350 2026] [:error] [pid 44059:tid 44080] [client 20.226.25.243:59965] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed May 20 10:09:35.897374 2026] [:error] [pid 44059:tid 44085] [client 20.226.25.243:59965] [client 20.226.25.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "ag0X3xfFs-oSOOcyjyx2UgAAARg"]
[Wed May 20 10:09:36.708520 2026] [:error] [pid 41277:tid 41282] [client 20.226.25.243:59374] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-blog.php
[Wed May 20 10:09:37.443202 2026] [:error] [pid 41277:tid 41290] [client 20.226.25.243:59374] [client 20.226.25.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.226.25.243, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ag0X4bTTCltJmboB5ufMmQAAAAg"]
[Wed May 20 10:09:37.447132 2026] [:error] [pid 41277:tid 41290] [client 20.226.25.243:59374] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 20 10:09:37.803164 2026] [:error] [pid 41277:tid 41304] [client 20.226.25.243:59374] File does not exist: /usr/local/apache/htdocs/suspended-page/cd.php
[Wed May 20 10:09:38.129805 2026] [:error] [pid 41277:tid 41303] [client 20.226.25.243:59374] File does not exist: /usr/local/apache/htdocs/suspended-page/css.php
[Wed May 20 10:09:38.495663 2026] [:error] [pid 41277:tid 41302] [client 20.226.25.243:59374] File does not exist: /usr/local/apache/htdocs/suspended-page/lu4.php
[Wed May 20 10:09:39.145610 2026] [:error] [pid 41277:tid 41298] [client 20.226.25.243:59374] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ag0X47TTCltJmboB5ufMoAAAABA"]
[Wed May 20 10:09:39.815159 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:54244] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ag0X4xfFs-oSOOcyjyx2VQAAAQ4"]
[Wed May 20 10:09:40.496447 2026] [:error] [pid 41279:tid 41345] [client 20.226.25.243:41159] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ag0X5LEFyfaehGZbt4xNKgAAAMk"]
[Wed May 20 10:09:41.149039 2026] [:error] [pid 41364:tid 41366] [client 20.226.25.243:59371] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ag0X5RKTmyvxtNXrN-hXAQAAAIA"]
[Wed May 20 10:09:41.822214 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:41618] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ag0X5RfFs-oSOOcyjyx2XAAAAQE"]
[Wed May 20 10:09:42.515001 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:41185] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ag0X5hfFs-oSOOcyjyx2YAAAARI"]
[Wed May 20 10:09:43.279546 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:40519] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ag0X5xfFs-oSOOcyjyx2ZAAAAQM"]
[Wed May 20 10:09:44.117456 2026] [:error] [pid 41364:tid 41376] [client 20.226.25.243:60054] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/upgrade/index.php"] [unique_id "ag0X6BKTmyvxtNXrN-hXBgAAAIo"]
[Wed May 20 10:09:44.759983 2026] [:error] [pid 41277:tid 41306] [client 20.226.25.243:60044] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ag0X6LTTCltJmboB5ufMogAAABg"]
[Wed May 20 10:09:45.437147 2026] [:error] [pid 41277:tid 41286] [client 20.226.25.243:45373] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ag0X6bTTCltJmboB5ufMpAAAAAQ"]
[Wed May 20 10:09:46.087623 2026] [:error] [pid 41277:tid 41292] [client 20.226.25.243:59933] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ag0X6rTTCltJmboB5ufMpQAAAAo"]
[Wed May 20 10:09:46.731936 2026] [:error] [pid 41364:tid 41370] [client 20.226.25.243:55954] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "ag0X6hKTmyvxtNXrN-hXCAAAAIQ"]
[Wed May 20 10:09:47.437655 2026] [:error] [pid 41277:tid 41289] [client 20.226.25.243:46777] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "ag0X67TTCltJmboB5ufMpwAAAAc"]
[Wed May 20 10:09:48.154006 2026] [:error] [pid 41278:tid 41329] [client 20.226.25.243:46742] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "ag0X7PWiNKASEfiGdwZ3WwAAAFQ"]
[Wed May 20 10:09:49.115521 2026] [:error] [pid 41277:tid 41301] [client 20.226.25.243:31521] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "ag0X7bTTCltJmboB5ufMqAAAABM"]
[Wed May 20 10:09:49.957982 2026] [:error] [pid 41277:tid 41287] [client 20.226.25.243:47849] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ant.php"] [unique_id "ag0X7bTTCltJmboB5ufMqQAAAAU"]
[Wed May 20 10:09:50.685229 2026] [:error] [pid 41277:tid 41295] [client 20.226.25.243:40821] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "ag0X7rTTCltJmboB5ufMqgAAAA0"]
[Wed May 20 10:09:51.372684 2026] [:error] [pid 41277:tid 41304] [client 20.226.25.243:40779] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "ag0X77TTCltJmboB5ufMqwAAABY"]
[Wed May 20 10:09:52.047844 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:41149] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "ag0X8BKTmyvxtNXrN-hXCQAAAJU"]
[Wed May 20 10:09:52.785933 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:38940] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "ag0X8BKTmyvxtNXrN-hXCgAAAIg"]
[Wed May 20 10:09:53.595198 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:36491] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/rip.php"] [unique_id "ag0X8RKTmyvxtNXrN-hXCwAAAJc"]
[Wed May 20 10:09:54.263037 2026] [:error] [pid 41277:tid 41283] [client 20.226.25.243:36538] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/rip.php"] [unique_id "ag0X8rTTCltJmboB5ufMrQAAAAE"]
[Wed May 20 10:09:54.991315 2026] [:error] [pid 44059:tid 44065] [client 20.226.25.243:48963] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/rip.php"] [unique_id "ag0X8hfFs-oSOOcyjyx2ZwAAAQQ"]
[Wed May 20 10:09:55.812065 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:41101] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/rip.php"] [unique_id "ag0X8xfFs-oSOOcyjyx2aAAAAQw"]
[Wed May 20 10:09:56.549023 2026] [:error] [pid 41279:tid 41349] [client 20.226.25.243:54253] [client 20.226.25.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tinyfilemanager.php"] [unique_id "ag0X9LEFyfaehGZbt4xNLQAAAM0"]
[Wed May 20 10:09:57.245355 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:59334] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/bk/"] [unique_id "ag0X9RfFs-oSOOcyjyx2aQAAAQI"]
[Wed May 20 10:09:57.964148 2026] [:error] [pid 44059:tid 44061] [client 20.226.25.243:40512] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/bk/"] [unique_id "ag0X9RfFs-oSOOcyjyx2agAAAQA"]
[Wed May 20 10:09:58.676526 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:20233] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/bk/"] [unique_id "ag0X9hfFs-oSOOcyjyx2awAAARI"]
[Wed May 20 10:09:59.354799 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:59390] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/bk/"] [unique_id "ag0X9xfFs-oSOOcyjyx2bAAAARY"]
[Wed May 20 10:10:00.058614 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:54410] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/403.php"] [unique_id "ag0X-BfFs-oSOOcyjyx2bgAAARU"]
[Wed May 20 10:10:00.787507 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:20288] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/403.php"] [unique_id "ag0X-BfFs-oSOOcyjyx2cAAAAQM"]
[Wed May 20 10:10:01.603345 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:38916] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/403.php"] [unique_id "ag0X-RKTmyvxtNXrN-hXDAAAAI8"]
[Wed May 20 10:10:02.251720 2026] [:error] [pid 41279:tid 41360] [client 20.226.25.243:38936] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/403.php"] [unique_id "ag0X-rEFyfaehGZbt4xNLwAAANg"]
[Wed May 20 10:10:02.906596 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:54440] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ag0X-hKTmyvxtNXrN-hXEQAAAJM"]
[Wed May 20 10:10:03.582730 2026] [:error] [pid 41278:tid 41313] [client 20.226.25.243:20256] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ag0X-_WiNKASEfiGdwZ3XAAAAEQ"]
[Wed May 20 10:10:04.259982 2026] [:error] [pid 41277:tid 41296] [client 20.226.25.243:40540] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ag0X_LTTCltJmboB5ufMtgAAAA4"]
[Wed May 20 10:10:04.923818 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:54263] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/av.php"] [unique_id "ag0X_BfFs-oSOOcyjyx2egAAARU"]
[Wed May 20 10:10:05.635811 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:41639] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "ag0X_RfFs-oSOOcyjyx2fAAAAQM"]
[Wed May 20 10:10:06.339158 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:41111] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "ag0X_hfFs-oSOOcyjyx2fQAAAQ4"]
[Wed May 20 10:10:07.205745 2026] [:error] [pid 41277:tid 41299] [client 20.226.25.243:31506] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "ag0X_7TTCltJmboB5ufMuAAAABE"]
[Wed May 20 10:10:07.862708 2026] [:error] [pid 41364:tid 41376] [client 20.226.25.243:36500] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tool.php"] [unique_id "ag0X_xKTmyvxtNXrN-hXEgAAAIo"]
[Wed May 20 10:10:08.654132 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:45700] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/"] [unique_id "ag0YABfFs-oSOOcyjyx2hwAAARU"]
[Wed May 20 10:10:09.317254 2026] [:error] [pid 41364:tid 41384] [client 20.226.25.243:31519] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/"] [unique_id "ag0YARKTmyvxtNXrN-hXFgAAAJI"]
[Wed May 20 10:10:10.082630 2026] [:error] [pid 41278:tid 41311] [client 20.226.25.243:45352] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/"] [unique_id "ag0YAvWiNKASEfiGdwZ3ZgAAAEI"]
[Wed May 20 10:10:10.873143 2026] [:error] [pid 41278:tid 41321] [client 20.226.25.243:38044] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/includes/"] [unique_id "ag0YAvWiNKASEfiGdwZ3bgAAAEw"]
[Wed May 20 10:10:11.557537 2026] [:error] [pid 41278:tid 41311] [client 20.226.25.243:30902] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/index.php"] [unique_id "ag0YA_WiNKASEfiGdwZ3cAAAAEI"]
[Wed May 20 10:10:12.293414 2026] [:error] [pid 44059:tid 44072] [client 20.226.25.243:54894] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/index.php"] [unique_id "ag0YBBfFs-oSOOcyjyx2lgAAAQs"]
[Wed May 20 10:10:12.995869 2026] [:error] [pid 41277:tid 41292] [client 20.226.25.243:52383] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/index.php"] [unique_id "ag0YBLTTCltJmboB5ufMwQAAAAo"]
[Wed May 20 10:10:13.693660 2026] [:error] [pid 41277:tid 41285] [client 20.226.25.243:44018] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/index.php"] [unique_id "ag0YBbTTCltJmboB5ufMwwAAAAM"]
[Wed May 20 10:10:14.362404 2026] [:error] [pid 41279:tid 41349] [client 20.226.25.243:58591] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "ag0YBrEFyfaehGZbt4xNOAAAAM0"]
[Wed May 20 10:10:15.017519 2026] [:error] [pid 41279:tid 41358] [client 20.226.25.243:45719] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "ag0YB7EFyfaehGZbt4xNOQAAANY"]
[Wed May 20 10:10:15.714501 2026] [:error] [pid 41277:tid 41289] [client 20.226.25.243:45711] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "ag0YB7TTCltJmboB5ufMxAAAAAc"]
[Wed May 20 10:10:16.359209 2026] [:error] [pid 41277:tid 41293] [client 20.226.25.243:31038] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "ag0YCLTTCltJmboB5ufMxQAAAAs"]
[Wed May 20 10:10:17.011781 2026] [:error] [pid 41278:tid 41318] [client 20.226.25.243:59155] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/b.php"] [unique_id "ag0YCfWiNKASEfiGdwZ3cwAAAEk"]
[Wed May 20 10:10:17.655334 2026] [:error] [pid 41277:tid 41299] [client 20.226.25.243:59508] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/b.php"] [unique_id "ag0YCbTTCltJmboB5ufMxgAAABE"]
[Wed May 20 10:10:18.322124 2026] [:error] [pid 41278:tid 41319] [client 20.226.25.243:9859] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/b.php"] [unique_id "ag0YCvWiNKASEfiGdwZ3dQAAAEo"]
[Wed May 20 10:10:19.045664 2026] [:error] [pid 41364:tid 41367] [client 20.226.25.243:58853] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/b.php"] [unique_id "ag0YCxKTmyvxtNXrN-hXGwAAAIE"]
[Wed May 20 10:10:19.752629 2026] [:error] [pid 41279:tid 41352] [client 20.226.25.243:41159] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/"] [unique_id "ag0YC7EFyfaehGZbt4xNOwAAANA"]
[Wed May 20 10:10:20.512894 2026] [:error] [pid 41279:tid 41360] [client 20.226.25.243:57887] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/"] [unique_id "ag0YDLEFyfaehGZbt4xNPAAAANg"]
[Wed May 20 10:10:21.241120 2026] [:error] [pid 41279:tid 41355] [client 20.226.25.243:57870] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/"] [unique_id "ag0YDbEFyfaehGZbt4xNPQAAANM"]
[Wed May 20 10:10:21.993897 2026] [:error] [pid 44059:tid 44080] [client 20.226.25.243:33476] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/"] [unique_id "ag0YDRfFs-oSOOcyjyx2mQAAARM"]
[Wed May 20 10:10:22.677369 2026] [:error] [pid 41364:tid 41383] [client 20.226.25.243:47466] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "ag0YDhKTmyvxtNXrN-hXHAAAAJE"]
[Wed May 20 10:10:23.423664 2026] [:error] [pid 41278:tid 41312] [client 20.226.25.243:39036] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "ag0YD_WiNKASEfiGdwZ3dwAAAEM"]
[Wed May 20 10:10:24.093486 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:49612] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "ag0YEBKTmyvxtNXrN-hXHQAAAJM"]
[Wed May 20 10:10:24.764550 2026] [:error] [pid 41279:tid 41340] [client 20.226.25.243:38981] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "ag0YELEFyfaehGZbt4xNPgAAAMQ"]
[Wed May 20 10:10:25.826742 2026] [:error] [pid 41277:tid 41284] [client 20.226.25.243:60215] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "ag0YEbTTCltJmboB5ufMzAAAAAI"]
[Wed May 20 10:10:26.564629 2026] [:error] [pid 41277:tid 41298] [client 20.226.25.243:43232] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "ag0YErTTCltJmboB5ufMzQAAABA"]
[Wed May 20 10:10:27.268989 2026] [:error] [pid 44059:tid 44071] [client 20.226.25.243:46795] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "ag0YExfFs-oSOOcyjyx2nwAAAQo"]
[Wed May 20 10:10:28.039787 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:58636] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws.php"] [unique_id "ag0YFBfFs-oSOOcyjyx2oAAAARA"]
[Wed May 20 10:10:28.684558 2026] [:error] [pid 41279:tid 41346] [client 20.226.25.243:57375] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.bod/.ll/"] [unique_id "ag0YFLEFyfaehGZbt4xNQAAAAMo"]
[Wed May 20 10:10:29.336883 2026] [:error] [pid 44059:tid 44084] [client 20.226.25.243:58980] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.bod/.ll/"] [unique_id "ag0YFRfFs-oSOOcyjyx2pAAAARc"]
[Wed May 20 10:10:29.999563 2026] [:error] [pid 41364:tid 41366] [client 20.226.25.243:46811] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.bod/.ll/"] [unique_id "ag0YFRKTmyvxtNXrN-hXIAAAAIA"]
[Wed May 20 10:10:30.987864 2026] [:error] [pid 41364:tid 41376] [client 20.226.25.243:54623] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.bod/.ll/"] [unique_id "ag0YFhKTmyvxtNXrN-hXIQAAAIo"]
[Wed May 20 10:10:32.087270 2026] [:error] [pid 41278:tid 41333] [client 20.226.25.243:58541] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ag0YGPWiNKASEfiGdwZ3eQAAAFg"]
[Wed May 20 10:10:32.812081 2026] [:error] [pid 41279:tid 41353] [client 20.226.25.243:49119] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ag0YGLEFyfaehGZbt4xNQgAAANE"]
[Wed May 20 10:10:33.470830 2026] [:error] [pid 41279:tid 41345] [client 20.226.25.243:28317] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ag0YGbEFyfaehGZbt4xNQwAAAMk"]
[Wed May 20 10:10:34.376330 2026] [:error] [pid 41278:tid 41314] [client 20.226.25.243:28299] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/0.php"] [unique_id "ag0YGvWiNKASEfiGdwZ3egAAAEU"]
[Wed May 20 10:10:35.029935 2026] [:error] [pid 41278:tid 41332] [client 20.226.25.243:51780] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "ag0YG_WiNKASEfiGdwZ3ewAAAFc"]
[Wed May 20 10:10:35.721007 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:17141] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "ag0YGxfFs-oSOOcyjyx2qAAAAQI"]
[Wed May 20 10:10:36.495155 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:49360] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "ag0YHBfFs-oSOOcyjyx2qgAAAQY"]
[Wed May 20 10:10:37.326374 2026] [:error] [pid 44059:tid 44081] [client 20.226.25.243:59657] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/1index.php"] [unique_id "ag0YHRfFs-oSOOcyjyx2qwAAARQ"]
[Wed May 20 10:10:38.587522 2026] [:error] [pid 44059:tid 44065] [client 20.226.25.243:55564] File does not exist: /usr/local/apache/htdocs/suspended-page/dvve.php
[Wed May 20 10:10:39.237047 2026] [:error] [pid 44059:tid 44085] [client 20.226.25.243:55564] File does not exist: /usr/local/apache/htdocs/suspended-page/ws77.php
[Wed May 20 10:10:39.569496 2026] [:error] [pid 44059:tid 44066] [client 20.226.25.243:55564] File does not exist: /usr/local/apache/autossl_tmp/.well-known/acme-challenge/index.php
[Wed May 20 10:10:41.409595 2026] [:error] [pid 44059:tid 44061] [client 20.226.25.243:55564] File does not exist: /usr/local/apache/htdocs/suspended-page/xx.php
[Wed May 20 10:10:42.067049 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:55564] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-the.php
[Wed May 20 10:10:42.389066 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:55564] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "ag0YIhfFs-oSOOcyjyx2ugAAAQM"]
[Wed May 20 10:10:43.036190 2026] [:error] [pid 41278:tid 41331] [client 20.226.25.243:59309] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "ag0YI_WiNKASEfiGdwZ3gAAAAFY"]
[Wed May 20 10:10:43.724470 2026] [:error] [pid 41278:tid 41329] [client 20.226.25.243:27760] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "ag0YI_WiNKASEfiGdwZ3gQAAAFQ"]
[Wed May 20 10:10:44.560999 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:42549] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws81.php"] [unique_id "ag0YJBKTmyvxtNXrN-hXJgAAAJc"]
[Wed May 20 10:10:45.345476 2026] [:error] [pid 41279:tid 41350] [client 20.226.25.243:57938] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "ag0YJbEFyfaehGZbt4xNRwAAAM4"]
[Wed May 20 10:10:46.018061 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:55582] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "ag0YJhKTmyvxtNXrN-hXKQAAAI8"]
[Wed May 20 10:10:46.795512 2026] [:error] [pid 41277:tid 41295] [client 20.226.25.243:56348] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "ag0YJrTTCltJmboB5ufM0wAAAA0"]
[Wed May 20 10:10:47.454013 2026] [:error] [pid 41278:tid 41319] [client 20.226.25.243:27929] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a1.php"] [unique_id "ag0YJ_WiNKASEfiGdwZ3hAAAAEo"]
[Wed May 20 10:10:48.360447 2026] [:error] [pid 41277:tid 41282] [client 20.226.25.243:19645] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ca5.php"] [unique_id "ag0YKLTTCltJmboB5ufM1AAAAAA"]
[Wed May 20 10:10:49.047935 2026] [:error] [pid 41364:tid 41390] [client 20.226.25.243:54792] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ca5.php"] [unique_id "ag0YKRKTmyvxtNXrN-hXLQAAAJg"]
[Wed May 20 10:10:49.733979 2026] [:error] [pid 41279:tid 41340] [client 20.226.25.243:56344] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ca5.php"] [unique_id "ag0YKbEFyfaehGZbt4xNSgAAAMQ"]
[Wed May 20 10:10:50.690824 2026] [:error] [pid 44059:tid 44065] [client 20.226.25.243:58052] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ca5.php"] [unique_id "ag0YKhfFs-oSOOcyjyx2vQAAAQQ"]
[Wed May 20 10:10:51.384485 2026] [:error] [pid 41278:tid 41314] [client 20.226.25.243:10061] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "ag0YK_WiNKASEfiGdwZ3hQAAAEU"]
[Wed May 20 10:10:52.028263 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:12016] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "ag0YLBKTmyvxtNXrN-hXLgAAAJU"]
[Wed May 20 10:10:52.681052 2026] [:error] [pid 41278:tid 41322] [client 20.226.25.243:49285] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "ag0YLPWiNKASEfiGdwZ3hwAAAE0"]
[Wed May 20 10:10:53.331737 2026] [:error] [pid 41279:tid 41339] [client 20.226.25.243:10102] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/install.php"] [unique_id "ag0YLbEFyfaehGZbt4xNTAAAAMM"]
[Wed May 20 10:10:54.087181 2026] [:error] [pid 41277:tid 41305] [client 20.226.25.243:10090] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "ag0YLrTTCltJmboB5ufM2AAAABc"]
[Wed May 20 10:10:54.732979 2026] [:error] [pid 41364:tid 41371] [client 20.226.25.243:56363] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "ag0YLhKTmyvxtNXrN-hXMAAAAIU"]
[Wed May 20 10:10:55.424685 2026] [:error] [pid 41278:tid 41331] [client 20.226.25.243:60661] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "ag0YL_WiNKASEfiGdwZ3igAAAFY"]
[Wed May 20 10:10:56.169801 2026] [:error] [pid 41364:tid 41378] [client 20.226.25.243:27942] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "ag0YMBKTmyvxtNXrN-hXMgAAAIw"]
[Wed May 20 10:10:56.890842 2026] [:error] [pid 41279:tid 41354] [client 20.226.25.243:12010] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ag0YMLEFyfaehGZbt4xNTQAAANI"]
[Wed May 20 10:10:57.567964 2026] [:error] [pid 41364:tid 41383] [client 20.226.25.243:27714] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ag0YMRKTmyvxtNXrN-hXNAAAAJE"]
[Wed May 20 10:10:58.260662 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:58054] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ag0YMhKTmyvxtNXrN-hXNQAAAJM"]
[Wed May 20 10:10:58.929164 2026] [:error] [pid 41278:tid 41317] [client 20.226.25.243:10048] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "ag0YMvWiNKASEfiGdwZ3jAAAAEg"]
[Wed May 20 10:10:59.666677 2026] [:error] [pid 41277:tid 41286] [client 20.226.25.243:49342] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-signin.php"] [unique_id "ag0YM7TTCltJmboB5ufM2wAAAAQ"]
[Wed May 20 10:11:00.340462 2026] [:error] [pid 41364:tid 41388] [client 20.226.25.243:54813] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-signin.php"] [unique_id "ag0YNBKTmyvxtNXrN-hXOQAAAJY"]
[Wed May 20 10:11:01.062313 2026] [:error] [pid 41278:tid 41328] [client 20.226.25.243:60229] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-signin.php"] [unique_id "ag0YNfWiNKASEfiGdwZ3jQAAAFM"]
[Wed May 20 10:11:01.719273 2026] [:error] [pid 41279:tid 41353] [client 20.226.25.243:27771] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-signin.php"] [unique_id "ag0YNbEFyfaehGZbt4xNTgAAANE"]
[Wed May 20 10:11:02.365476 2026] [:error] [pid 41364:tid 41370] [client 20.226.25.243:27716] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag0YNhKTmyvxtNXrN-hXPQAAAIQ"]
[Wed May 20 10:11:03.141373 2026] [:error] [pid 41364:tid 41372] [client 20.226.25.243:55599] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag0YNxKTmyvxtNXrN-hXPgAAAIY"]
[Wed May 20 10:11:03.793262 2026] [:error] [pid 41364:tid 41384] [client 20.226.25.243:55586] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag0YNxKTmyvxtNXrN-hXPwAAAJI"]
[Wed May 20 10:11:04.489098 2026] [:error] [pid 41279:tid 41357] [client 20.226.25.243:55374] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ag0YOLEFyfaehGZbt4xNUAAAANU"]
[Wed May 20 10:11:05.160815 2026] [:error] [pid 41279:tid 41342] [client 20.226.25.243:47116] [client 20.226.25.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "ag0YObEFyfaehGZbt4xNUQAAAMY"]
[Wed May 20 10:11:05.839741 2026] [:error] [pid 44059:tid 44085] [client 20.226.25.243:55602] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ag0YORfFs-oSOOcyjyx2vwAAARg"]
[Wed May 20 10:11:06.569073 2026] [:error] [pid 44059:tid 44071] [client 20.226.25.243:50011] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ag0YOhfFs-oSOOcyjyx2wQAAAQo"]
[Wed May 20 10:11:07.286070 2026] [:error] [pid 44059:tid 44084] [client 20.226.25.243:49333] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ag0YOxfFs-oSOOcyjyx2wwAAARc"]
[Wed May 20 10:11:07.991102 2026] [:error] [pid 44059:tid 44068] [client 20.226.25.243:47143] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ag0YOxfFs-oSOOcyjyx2xAAAAQc"]
[Wed May 20 10:11:08.654970 2026] [:error] [pid 44059:tid 44070] [client 20.226.25.243:27950] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "ag0YPBfFs-oSOOcyjyx2xgAAAQk"]
[Wed May 20 10:11:09.325437 2026] [:error] [pid 44059:tid 44074] [client 20.226.25.243:46345] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "ag0YPRfFs-oSOOcyjyx2xwAAAQ0"]
[Wed May 20 10:11:09.970655 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:27940] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "ag0YPRfFs-oSOOcyjyx2yQAAAQM"]
[Wed May 20 10:11:10.619841 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:19626] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/hplfuns.php"] [unique_id "ag0YPhfFs-oSOOcyjyx2ygAAAQY"]
[Wed May 20 10:11:11.285409 2026] [:error] [pid 44059:tid 44081] [client 20.226.25.243:11982] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/log.php"] [unique_id "ag0YPxfFs-oSOOcyjyx2ywAAARQ"]
[Wed May 20 10:11:12.961868 2026] [:error] [pid 41278:tid 41318] [client 20.226.25.243:52423] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/log.php"] [unique_id "ag0YQPWiNKASEfiGdwZ3jgAAAEk"]
[Wed May 20 10:11:13.686596 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:49994] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/log.php"] [unique_id "ag0YQRKTmyvxtNXrN-hXQAAAAII"]
[Wed May 20 10:11:14.343045 2026] [:error] [pid 44059:tid 44084] [client 20.226.25.243:27755] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/log.php"] [unique_id "ag0YQhfFs-oSOOcyjyx20QAAARc"]
[Wed May 20 10:11:14.994869 2026] [:error] [pid 41278:tid 41313] [client 20.226.25.243:19597] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "ag0YQvWiNKASEfiGdwZ3kAAAAEQ"]
[Wed May 20 10:11:15.710980 2026] [:error] [pid 41278:tid 41309] [client 20.226.25.243:49041] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "ag0YQ_WiNKASEfiGdwZ3tAAAAEA"]
[Wed May 20 10:11:16.350574 2026] [:error] [pid 44059:tid 44070] [client 20.226.25.243:55597] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "ag0YRBfFs-oSOOcyjyx21AAAAQk"]
[Wed May 20 10:11:16.988521 2026] [:error] [pid 44059:tid 44074] [client 20.226.25.243:52473] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test.php"] [unique_id "ag0YRBfFs-oSOOcyjyx21QAAAQ0"]
[Wed May 20 10:11:17.616165 2026] [:error] [pid 41279:tid 41340] [client 20.226.25.243:60635] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ag0YRbEFyfaehGZbt4xNVgAAAMQ"]
[Wed May 20 10:11:18.264972 2026] [:error] [pid 41278:tid 41317] [client 20.226.25.243:55571] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ag0YRvWiNKASEfiGdwZ3ugAAAEg"]
[Wed May 20 10:11:18.937516 2026] [:error] [pid 41278:tid 41328] [client 20.226.25.243:60621] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ag0YRvWiNKASEfiGdwZ3uwAAAFM"]
[Wed May 20 10:11:19.576462 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:58069] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ag0YRxKTmyvxtNXrN-hXQQAAAI8"]
[Wed May 20 10:11:20.317488 2026] [:error] [pid 41278:tid 41310] [client 20.226.25.243:56658] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "ag0YSPWiNKASEfiGdwZ3vQAAAEE"]
[Wed May 20 10:11:20.964652 2026] [:error] [pid 41279:tid 41339] [client 20.226.25.243:56955] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "ag0YSLEFyfaehGZbt4xNWAAAAMM"]
[Wed May 20 10:11:21.603077 2026] [:error] [pid 41279:tid 41353] [client 20.226.25.243:55378] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "ag0YSbEFyfaehGZbt4xNWgAAANE"]
[Wed May 20 10:11:22.251582 2026] [:error] [pid 41279:tid 41356] [client 20.226.25.243:56917] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "ag0YSrEFyfaehGZbt4xNXAAAANQ"]
[Wed May 20 10:11:22.912748 2026] [:error] [pid 41279:tid 41341] [client 20.226.25.243:55605] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-config-sample.php"] [unique_id "ag0YSrEFyfaehGZbt4xNXQAAAMU"]
[Wed May 20 10:11:23.573116 2026] [:error] [pid 41364:tid 41383] [client 20.226.25.243:19623] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-config-sample.php"] [unique_id "ag0YSxKTmyvxtNXrN-hXQgAAAJE"]
[Wed May 20 10:11:24.255407 2026] [:error] [pid 41279:tid 41348] [client 20.226.25.243:47116] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-config-sample.php"] [unique_id "ag0YTLEFyfaehGZbt4xNXgAAAMw"]
[Wed May 20 10:11:24.952722 2026] [:error] [pid 41279:tid 41358] [client 20.226.25.243:10060] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-config-sample.php"] [unique_id "ag0YTLEFyfaehGZbt4xNYAAAANY"]
[Wed May 20 10:11:25.742526 2026] [:error] [pid 41279:tid 41359] [client 20.226.25.243:56934] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/packed.php"] [unique_id "ag0YTbEFyfaehGZbt4xNYQAAANc"]
[Wed May 20 10:11:26.510755 2026] [:error] [pid 41279:tid 41343] [client 20.226.25.243:59667] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/packed.php"] [unique_id "ag0YTrEFyfaehGZbt4xNYgAAAMc"]
[Wed May 20 10:11:27.175497 2026] [:error] [pid 41364:tid 41366] [client 20.226.25.243:56954] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/packed.php"] [unique_id "ag0YTxKTmyvxtNXrN-hXRwAAAIA"]
[Wed May 20 10:11:27.826726 2026] [:error] [pid 41278:tid 41309] [client 20.226.25.243:55393] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/packed.php"] [unique_id "ag0YT_WiNKASEfiGdwZ3wQAAAEA"]
[Wed May 20 10:11:28.480000 2026] [:error] [pid 41279:tid 41336] [client 20.226.25.243:56331] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "ag0YULEFyfaehGZbt4xNZAAAAMA"]
[Wed May 20 10:11:29.122148 2026] [:error] [pid 44059:tid 44081] [client 20.226.25.243:49314] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "ag0YURfFs-oSOOcyjyx24gAAARQ"]
[Wed May 20 10:11:29.869423 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:46093] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "ag0YURKTmyvxtNXrN-hXSgAAAI0"]
[Wed May 20 10:11:30.547248 2026] [:error] [pid 44059:tid 44065] [client 20.226.25.243:59048] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/"] [unique_id "ag0YUhfFs-oSOOcyjyx25QAAAQQ"]
[Wed May 20 10:11:31.181626 2026] [:error] [pid 44059:tid 44066] [client 20.226.25.243:21677] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "ag0YUxfFs-oSOOcyjyx25wAAAQU"]
[Wed May 20 10:11:31.894983 2026] [:error] [pid 41277:tid 41289] [client 20.226.25.243:51779] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "ag0YU7TTCltJmboB5ufM3wAAAAc"]
[Wed May 20 10:11:32.543307 2026] [:error] [pid 41279:tid 41339] [client 20.226.25.243:10103] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "ag0YVLEFyfaehGZbt4xNZwAAAMM"]
[Wed May 20 10:11:33.189302 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:27966] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php/.well-known/acme-challenge/file.php"] [unique_id "ag0YVRfFs-oSOOcyjyx26wAAARA"]
[Wed May 20 10:11:33.838515 2026] [:error] [pid 41364:tid 41371] [client 20.226.25.243:49283] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "ag0YVRKTmyvxtNXrN-hXTAAAAIU"]
[Wed May 20 10:11:34.465427 2026] [:error] [pid 41364:tid 41377] [client 20.226.25.243:58080] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "ag0YVhKTmyvxtNXrN-hXTQAAAIs"]
[Wed May 20 10:11:35.199785 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:55570] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "ag0YVxKTmyvxtNXrN-hXUQAAAI8"]
[Wed May 20 10:11:35.861300 2026] [:error] [pid 44059:tid 44068] [client 20.226.25.243:19638] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ahax.php"] [unique_id "ag0YVxfFs-oSOOcyjyx27QAAAQc"]
[Wed May 20 10:11:36.631327 2026] [:error] [pid 41278:tid 41328] [client 20.226.25.243:49081] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/breads1.php"] [unique_id "ag0YWPWiNKASEfiGdwZ3xgAAAFM"]
[Wed May 20 10:11:37.304615 2026] [:error] [pid 44059:tid 44081] [client 20.226.25.243:54529] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/breads1.php"] [unique_id "ag0YWRfFs-oSOOcyjyx27gAAARQ"]
[Wed May 20 10:11:37.955014 2026] [:error] [pid 44059:tid 44061] [client 20.226.25.243:27949] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/breads1.php"] [unique_id "ag0YWRfFs-oSOOcyjyx27wAAAQA"]
[Wed May 20 10:11:38.772752 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:49052] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/breads1.php"] [unique_id "ag0YWhfFs-oSOOcyjyx28AAAAQM"]
[Wed May 20 10:11:39.446947 2026] [:error] [pid 41278:tid 41324] [client 20.226.25.243:56881] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/must.php"] [unique_id "ag0YW_WiNKASEfiGdwZ3yAAAAE8"]
[Wed May 20 10:11:40.225564 2026] [:error] [pid 41279:tid 41351] [client 20.226.25.243:19591] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/must.php"] [unique_id "ag0YXLEFyfaehGZbt4xNbAAAAM8"]
[Wed May 20 10:11:40.882153 2026] [:error] [pid 44059:tid 44066] [client 20.226.25.243:27728] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/must.php"] [unique_id "ag0YXBfFs-oSOOcyjyx28gAAAQU"]
[Wed May 20 10:11:41.549576 2026] [:error] [pid 41278:tid 41313] [client 20.226.25.243:19602] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/must.php"] [unique_id "ag0YXfWiNKASEfiGdwZ3ygAAAEQ"]
[Wed May 20 10:11:42.192558 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:10085] File does not exist: /usr/local/apache/htdocs/suspended-page/up.php
[Wed May 20 10:11:42.506599 2026] [:error] [pid 44059:tid 44085] [client 20.226.25.243:10085] File does not exist: /usr/local/apache/htdocs/suspended-page/upload.php
[Wed May 20 10:11:43.816795 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:10085] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Wed May 20 10:11:44.157637 2026] [:error] [pid 44059:tid 44080] [client 20.226.25.243:10085] File does not exist: /usr/local/apache/htdocs/suspended-page/xmrlpc.php
[Wed May 20 10:11:44.808280 2026] [:error] [pid 44059:tid 44070] [client 20.226.25.243:10085] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed May 20 10:11:45.122066 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:10085] File does not exist: /usr/local/apache/htdocs/suspended-page/asw.php
[Wed May 20 10:11:45.435969 2026] [:error] [pid 44059:tid 44078] [client 20.226.25.243:10085] File does not exist: /usr/local/apache/htdocs/suspended-page/item.php
[Wed May 20 10:11:45.763525 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:10085] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "ag0YYRfFs-oSOOcyjyx2_wAAAQY"]
[Wed May 20 10:11:46.468189 2026] [:error] [pid 41278:tid 41309] [client 20.226.25.243:54528] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "ag0YYvWiNKASEfiGdwZ30AAAAEA"]
[Wed May 20 10:11:47.143351 2026] [:error] [pid 41278:tid 41320] [client 20.226.25.243:27946] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "ag0YY_WiNKASEfiGdwZ30wAAAEs"]
[Wed May 20 10:11:47.833360 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:19607] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jga.php"] [unique_id "ag0YYxfFs-oSOOcyjyx3AAAAAQM"]
[Wed May 20 10:11:48.483567 2026] [:error] [pid 41364:tid 41371] [client 20.226.25.243:60225] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mac.php"] [unique_id "ag0YZBKTmyvxtNXrN-hXVwAAAIU"]
[Wed May 20 10:11:49.264547 2026] [:error] [pid 41364:tid 41377] [client 20.226.25.243:60664] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mac.php"] [unique_id "ag0YZRKTmyvxtNXrN-hXWAAAAIs"]
[Wed May 20 10:11:49.996749 2026] [:error] [pid 41279:tid 41343] [client 20.226.25.243:55366] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mac.php"] [unique_id "ag0YZbEFyfaehGZbt4xNcQAAAMc"]
[Wed May 20 10:11:51.124097 2026] [:error] [pid 41279:tid 41350] [client 20.226.25.243:54585] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mac.php"] [unique_id "ag0YZ7EFyfaehGZbt4xNcgAAAM4"]
[Wed May 20 10:11:52.054458 2026] [:error] [pid 41364:tid 41383] [client 20.226.25.243:58061] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system.php"] [unique_id "ag0YaBKTmyvxtNXrN-hXWQAAAJE"]
[Wed May 20 10:11:52.695682 2026] [:error] [pid 44059:tid 44066] [client 20.226.25.243:59295] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system.php"] [unique_id "ag0YaBfFs-oSOOcyjyx3BAAAAQU"]
[Wed May 20 10:11:53.406648 2026] [:error] [pid 41364:tid 41378] [client 20.226.25.243:57975] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system.php"] [unique_id "ag0YaRKTmyvxtNXrN-hXWgAAAIw"]
[Wed May 20 10:11:54.069515 2026] [:error] [pid 41278:tid 41314] [client 20.226.25.243:55557] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system.php"] [unique_id "ag0YavWiNKASEfiGdwZ33gAAAEU"]
[Wed May 20 10:11:54.717690 2026] [:error] [pid 41278:tid 41327] [client 20.226.25.243:50025] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "ag0YavWiNKASEfiGdwZ33wAAAFI"]
[Wed May 20 10:11:55.388811 2026] [:error] [pid 41278:tid 41322] [client 20.226.25.243:49328] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "ag0Ya_WiNKASEfiGdwZ34QAAAE0"]
[Wed May 20 10:11:56.279700 2026] [:error] [pid 44059:tid 44085] [client 20.226.25.243:50039] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "ag0YbBfFs-oSOOcyjyx3BQAAARg"]
[Wed May 20 10:11:56.967916 2026] [:error] [pid 44059:tid 44069] [client 20.226.25.243:54835] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "ag0YbBfFs-oSOOcyjyx3BgAAAQg"]
[Wed May 20 10:11:57.790428 2026] [:error] [pid 41279:tid 41346] [client 20.226.25.243:58063] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ag0YbbEFyfaehGZbt4xNdAAAAMo"]
[Wed May 20 10:11:58.427060 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:11977] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ag0YbhKTmyvxtNXrN-hXWwAAAJM"]
[Wed May 20 10:11:59.078448 2026] [:error] [pid 41364:tid 41367] [client 20.226.25.243:27713] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ag0YbxKTmyvxtNXrN-hXXAAAAIE"]
[Wed May 20 10:11:59.829965 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:11968] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ag0YbxfFs-oSOOcyjyx3CAAAAQ4"]
[Wed May 20 10:12:00.503592 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:49031] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zafir1.php"] [unique_id "ag0YcBfFs-oSOOcyjyx3CgAAAQE"]
[Wed May 20 10:12:01.150361 2026] [:error] [pid 44059:tid 44070] [client 20.226.25.243:54564] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zafir1.php"] [unique_id "ag0YcRfFs-oSOOcyjyx3CwAAAQk"]
[Wed May 20 10:12:01.777137 2026] [:error] [pid 41278:tid 41331] [client 20.226.25.243:10076] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zafir1.php"] [unique_id "ag0YcfWiNKASEfiGdwZ34gAAAFY"]
[Wed May 20 10:12:02.475640 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:60649] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zafir1.php"] [unique_id "ag0YchfFs-oSOOcyjyx3DgAAAQI"]
[Wed May 20 10:12:03.128077 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:27906] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "ag0YcxfFs-oSOOcyjyx3DwAAAQY"]
[Wed May 20 10:12:03.777334 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:57962] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "ag0YcxfFs-oSOOcyjyx3EgAAAQM"]
[Wed May 20 10:12:04.454175 2026] [:error] [pid 41278:tid 41328] [client 20.226.25.243:10073] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "ag0YdPWiNKASEfiGdwZ35AAAAFM"]
[Wed May 20 10:12:05.133455 2026] [:error] [pid 44059:tid 44081] [client 20.226.25.243:57931] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/abc.php"] [unique_id "ag0YdRfFs-oSOOcyjyx3EwAAARQ"]
[Wed May 20 10:12:05.815745 2026] [:error] [pid 41277:tid 41304] [client 20.226.25.243:12026] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/c1.php"] [unique_id "ag0YdbTTCltJmboB5ufM4wAAABY"]
[Wed May 20 10:12:06.542712 2026] [:error] [pid 44059:tid 44065] [client 20.226.25.243:60273] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/c1.php"] [unique_id "ag0YdhfFs-oSOOcyjyx3FQAAAQQ"]
[Wed May 20 10:12:07.343492 2026] [:error] [pid 41278:tid 41316] [client 20.226.25.243:47797] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/c1.php"] [unique_id "ag0Yd_WiNKASEfiGdwZ35wAAAEc"]
[Wed May 20 10:12:08.091981 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:42523] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/c1.php"] [unique_id "ag0YeBfFs-oSOOcyjyx3FgAAARI"]
[Wed May 20 10:12:08.761948 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:51783] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/root.php"] [unique_id "ag0YeBfFs-oSOOcyjyx3GAAAAQ4"]
[Wed May 20 10:12:09.430542 2026] [:error] [pid 44059:tid 44080] [client 20.226.25.243:49077] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/root.php"] [unique_id "ag0YeRfFs-oSOOcyjyx3GgAAARM"]
[Wed May 20 10:12:10.158495 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:49308] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/root.php"] [unique_id "ag0YehKTmyvxtNXrN-hXYwAAAIg"]
[Wed May 20 10:12:10.830166 2026] [:error] [pid 41279:tid 41341] [client 20.226.25.243:57927] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/root.php"] [unique_id "ag0YerEFyfaehGZbt4xNdwAAAMU"]
[Wed May 20 10:12:11.673124 2026] [:error] [pid 41279:tid 41355] [client 20.226.25.243:51806] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "ag0Ye7EFyfaehGZbt4xNeAAAANM"]
[Wed May 20 10:12:12.516867 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:12009] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "ag0YfBKTmyvxtNXrN-hXaAAAAJM"]
[Wed May 20 10:12:13.165873 2026] [:error] [pid 41278:tid 41317] [client 20.226.25.243:47763] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "ag0YffWiNKASEfiGdwZ36QAAAEg"]
[Wed May 20 10:12:13.814583 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:51821] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell.php"] [unique_id "ag0YfRKTmyvxtNXrN-hXdwAAAJU"]
[Wed May 20 10:12:14.575346 2026] [:error] [pid 41364:tid 41382] [client 20.226.25.243:54275] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "ag0YfhKTmyvxtNXrN-hXeAAAAJA"]
[Wed May 20 10:12:15.213513 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:55604] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "ag0YfxKTmyvxtNXrN-hXfAAAAJM"]
[Wed May 20 10:12:15.868453 2026] [:error] [pid 44059:tid 44074] [client 20.226.25.243:27941] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "ag0YfxfFs-oSOOcyjyx3KwAAAQ0"]
[Wed May 20 10:12:16.594396 2026] [:error] [pid 41277:tid 41284] [client 20.226.25.243:59677] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "ag0YgLTTCltJmboB5ufM5QAAAAI"]
[Wed May 20 10:12:17.224845 2026] [:error] [pid 41364:tid 41388] [client 20.226.25.243:36581] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "ag0YgRKTmyvxtNXrN-hXfwAAAJY"]
[Wed May 20 10:12:17.956340 2026] [:error] [pid 41277:tid 41305] [client 20.226.25.243:57217] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "ag0YgbTTCltJmboB5ufM5gAAABc"]
[Wed May 20 10:12:18.593777 2026] [:error] [pid 44059:tid 44061] [client 20.226.25.243:60620] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "ag0YghfFs-oSOOcyjyx3MAAAAQA"]
[Wed May 20 10:12:19.218660 2026] [:error] [pid 41277:tid 41306] [client 20.226.25.243:17125] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-block.php"] [unique_id "ag0Yg7TTCltJmboB5ufM5wAAABg"]
[Wed May 20 10:12:19.884263 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:27967] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "ag0YgxKTmyvxtNXrN-hXgQAAAIc"]
[Wed May 20 10:12:20.537702 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:57926] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "ag0YhBKTmyvxtNXrN-hXggAAAII"]
[Wed May 20 10:12:21.188529 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:42555] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "ag0YhRKTmyvxtNXrN-hXgwAAAIg"]
[Wed May 20 10:12:21.834101 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:59291] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/linkpreview/il.php"] [unique_id "ag0YhRfFs-oSOOcyjyx3MgAAARA"]
[Wed May 20 10:12:22.513056 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:36603] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-header-json.php"] [unique_id "ag0YhhfFs-oSOOcyjyx3MwAAARY"]
[Wed May 20 10:12:23.154206 2026] [:error] [pid 41278:tid 41333] [client 20.226.25.243:28339] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-header-json.php"] [unique_id "ag0Yh_WiNKASEfiGdwZ36wAAAFg"]
[Wed May 20 10:12:23.798594 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:51785] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-header-json.php"] [unique_id "ag0YhxfFs-oSOOcyjyx3NAAAARU"]
[Wed May 20 10:12:24.455021 2026] [:error] [pid 44059:tid 44076] [client 20.226.25.243:49384] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-header-json.php"] [unique_id "ag0YiBfFs-oSOOcyjyx3NQAAAQ8"]
[Wed May 20 10:12:25.160283 2026] [:error] [pid 41279:tid 41348] [client 20.226.25.243:17132] [client 20.226.25.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/index.php"] [unique_id "ag0YibEFyfaehGZbt4xNvAAAAMw"]
[Wed May 20 10:12:25.782981 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:30965] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zup.php"] [unique_id "ag0YiRKTmyvxtNXrN-hXhwAAAJc"]
[Wed May 20 10:12:26.412289 2026] [:error] [pid 41364:tid 41378] [client 20.226.25.243:28290] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zup.php"] [unique_id "ag0YihKTmyvxtNXrN-hXiQAAAIw"]
[Wed May 20 10:12:27.068595 2026] [:error] [pid 44059:tid 44070] [client 20.226.25.243:36606] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/zup.php"] [unique_id "ag0YixfFs-oSOOcyjyx3PAAAAQk"]
[Wed May 20 10:12:27.749020 2026] [:error] [pid 41364:tid 41367] [client 20.226.25.243:44682] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a9.php"] [unique_id "ag0YixKTmyvxtNXrN-hXigAAAIE"]
[Wed May 20 10:12:28.385559 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:60345] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a9.php"] [unique_id "ag0YjBfFs-oSOOcyjyx3PgAAAQE"]
[Wed May 20 10:12:29.077031 2026] [:error] [pid 44059:tid 44080] [client 20.226.25.243:59666] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a9.php"] [unique_id "ag0YjRfFs-oSOOcyjyx3QAAAARM"]
[Wed May 20 10:12:29.783121 2026] [:error] [pid 41279:tid 41354] [client 20.226.25.243:36560] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a9.php"] [unique_id "ag0YjbEFyfaehGZbt4xNvgAAANI"]
[Wed May 20 10:12:30.458737 2026] [:error] [pid 41279:tid 41340] [client 20.226.25.243:54307] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/index.php"] [unique_id "ag0YjrEFyfaehGZbt4xNwAAAAMQ"]
[Wed May 20 10:12:31.291435 2026] [:error] [pid 41364:tid 41369] [client 20.226.25.243:51337] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/index.php"] [unique_id "ag0YjxKTmyvxtNXrN-hXjAAAAIM"]
[Wed May 20 10:12:32.078400 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:38006] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/index.php"] [unique_id "ag0YkBfFs-oSOOcyjyx3QgAAARY"]
[Wed May 20 10:12:32.769860 2026] [:error] [pid 44059:tid 44076] [client 20.226.25.243:51346] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/index.php"] [unique_id "ag0YkBfFs-oSOOcyjyx3QwAAAQ8"]
[Wed May 20 10:12:33.481389 2026] [:error] [pid 41278:tid 41330] [client 20.226.25.243:2909] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "ag0YkfWiNKASEfiGdwZ37gAAAFU"]
[Wed May 20 10:12:34.171591 2026] [:error] [pid 41278:tid 41326] [client 20.226.25.243:40158] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "ag0YkvWiNKASEfiGdwZ37wAAAFE"]
[Wed May 20 10:12:34.798255 2026] [:error] [pid 44059:tid 44074] [client 20.226.25.243:49371] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "ag0YkhfFs-oSOOcyjyx3RQAAAQ0"]
[Wed May 20 10:12:35.465311 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:37958] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "ag0YkxKTmyvxtNXrN-hXkAAAAI0"]
[Wed May 20 10:12:36.324437 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:48054] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "ag0YlBKTmyvxtNXrN-hXkQAAAII"]
[Wed May 20 10:12:37.013168 2026] [:error] [pid 41278:tid 41325] [client 20.226.25.243:52438] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "ag0YlfWiNKASEfiGdwZ38wAAAFA"]
[Wed May 20 10:12:37.658659 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:60311] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "ag0YlRfFs-oSOOcyjyx3SAAAAQY"]
[Wed May 20 10:12:38.419001 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:54321] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gg.php"] [unique_id "ag0YlhKTmyvxtNXrN-hXkwAAAIg"]
[Wed May 20 10:12:39.055247 2026] [:error] [pid 44059:tid 44061] [client 20.226.25.243:54063] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "ag0YlxfFs-oSOOcyjyx3SgAAAQA"]
[Wed May 20 10:12:39.705628 2026] [:error] [pid 41364:tid 41377] [client 20.226.25.243:44703] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "ag0YlxKTmyvxtNXrN-hXlAAAAIs"]
[Wed May 20 10:12:40.383309 2026] [:error] [pid 41279:tid 41345] [client 20.226.25.243:49383] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "ag0YmLEFyfaehGZbt4xNxAAAAMk"]
[Wed May 20 10:12:41.019209 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:57005] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/makeasmtp.php"] [unique_id "ag0YmRfFs-oSOOcyjyx3TgAAARY"]
[Wed May 20 10:12:41.654451 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:54101] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/paku.php"] [unique_id "ag0YmRfFs-oSOOcyjyx3TwAAARU"]
[Wed May 20 10:12:42.307294 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:34147] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/paku.php"] [unique_id "ag0YmhfFs-oSOOcyjyx3UAAAARA"]
[Wed May 20 10:12:43.072547 2026] [:error] [pid 44059:tid 44084] [client 20.226.25.243:59323] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/paku.php"] [unique_id "ag0YmxfFs-oSOOcyjyx3UQAAARc"]
[Wed May 20 10:12:43.822581 2026] [:error] [pid 44059:tid 44070] [client 20.226.25.243:28293] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/paku.php"] [unique_id "ag0YmxfFs-oSOOcyjyx3UwAAAQk"]
[Wed May 20 10:12:44.471660 2026] [:error] [pid 41364:tid 41385] [client 20.226.25.243:51383] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/rtx.php"] [unique_id "ag0YnBKTmyvxtNXrN-hXmQAAAJM"]
[Wed May 20 10:12:45.118966 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:51375] File does not exist: /usr/local/apache/htdocs/suspended-page/rtx.php
[Wed May 20 10:12:47.837293 2026] [:error] [pid 44059:tid 44078] [client 20.226.25.243:51375] [client 20.226.25.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/interactivity-api/index.php"] [unique_id "ag0YnxfFs-oSOOcyjyx3XQAAARE"]
[Wed May 20 10:12:48.510515 2026] [:error] [pid 41277:tid 41293] [client 20.226.25.243:17110] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-info.php
[Wed May 20 10:12:48.832280 2026] [:error] [pid 41277:tid 41299] [client 20.226.25.243:17110] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-wordfence-waf.php
[Wed May 20 10:12:49.183549 2026] [:error] [pid 41277:tid 41301] [client 20.226.25.243:17110] File does not exist: /usr/local/apache/htdocs/suspended-page/ws49.php
[Wed May 20 10:12:49.509064 2026] [:error] [pid 41277:tid 41295] [client 20.226.25.243:17110] File does not exist: /usr/local/apache/htdocs/suspended-page/xxx.php
[Wed May 20 10:12:49.829057 2026] [:error] [pid 41277:tid 41304] [client 20.226.25.243:17110] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "ag0YobTTCltJmboB5ufM8wAAABY"]
[Wed May 20 10:12:50.510132 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:51808] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "ag0YohKTmyvxtNXrN-hXnwAAAII"]
[Wed May 20 10:12:51.293828 2026] [:error] [pid 41279:tid 41337] [client 20.226.25.243:56459] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "ag0Yo7EFyfaehGZbt4xNyAAAAME"]
[Wed May 20 10:12:51.962506 2026] [:error] [pid 41364:tid 41380] [client 20.226.25.243:43628] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/CDX1.php"] [unique_id "ag0YoxKTmyvxtNXrN-hXoAAAAI4"]
[Wed May 20 10:12:52.634622 2026] [:error] [pid 41278:tid 41323] [client 20.226.25.243:30008] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "ag0YpPWiNKASEfiGdwZ39wAAAE4"]
[Wed May 20 10:12:53.298736 2026] [:error] [pid 41278:tid 41327] [client 20.226.25.243:60518] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "ag0YpfWiNKASEfiGdwZ3-gAAAFI"]
[Wed May 20 10:12:53.938971 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:52469] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "ag0YpRKTmyvxtNXrN-hXowAAAJU"]
[Wed May 20 10:12:54.569509 2026] [:error] [pid 44059:tid 44084] [client 20.226.25.243:48633] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/akcc.php"] [unique_id "ag0YphfFs-oSOOcyjyx3YQAAARc"]
[Wed May 20 10:12:55.224793 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:60490] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/control.php"] [unique_id "ag0YpxfFs-oSOOcyjyx3YgAAARA"]
[Wed May 20 10:12:55.942687 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:52424] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/control.php"] [unique_id "ag0YpxfFs-oSOOcyjyx3YwAAARI"]
[Wed May 20 10:12:56.618641 2026] [:error] [pid 41277:tid 41300] [client 20.226.25.243:20071] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/control.php"] [unique_id "ag0YqLTTCltJmboB5ufM9AAAABI"]
[Wed May 20 10:12:57.467894 2026] [:error] [pid 41279:tid 41350] [client 20.226.25.243:30960] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/control.php"] [unique_id "ag0YqbEFyfaehGZbt4xNywAAAM4"]
[Wed May 20 10:12:58.122887 2026] [:error] [pid 41364:tid 41376] [client 20.226.25.243:34106] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "ag0YqhKTmyvxtNXrN-hXpwAAAIo"]
[Wed May 20 10:12:58.805011 2026] [:error] [pid 44059:tid 44068] [client 20.226.25.243:65242] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "ag0YqhfFs-oSOOcyjyx3ZQAAAQc"]
[Wed May 20 10:12:59.680075 2026] [:error] [pid 41278:tid 41320] [client 20.226.25.243:59673] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "ag0Yq_WiNKASEfiGdwZ3_wAAAEs"]
[Wed May 20 10:13:00.876459 2026] [:error] [pid 44059:tid 44080] [client 20.226.25.243:56794] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/mod_footer/tmpl/index.php"] [unique_id "ag0YrBfFs-oSOOcyjyx3ZwAAARM"]
[Wed May 20 10:13:01.505527 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:29975] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ag0YrRfFs-oSOOcyjyx3aAAAAQY"]
[Wed May 20 10:13:02.142880 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:20088] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ag0YrhfFs-oSOOcyjyx3aQAAAQw"]
[Wed May 20 10:13:02.795801 2026] [:error] [pid 44059:tid 44078] [client 20.226.25.243:59264] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ag0YrhfFs-oSOOcyjyx3agAAARE"]
[Wed May 20 10:13:03.799646 2026] [:error] [pid 41364:tid 41390] [client 20.226.25.243:9417] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/s.php"] [unique_id "ag0YrxKTmyvxtNXrN-hXrQAAAJg"]
[Wed May 20 10:13:04.458377 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:60602] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagax.php"] [unique_id "ag0YsBKTmyvxtNXrN-hXrgAAAI0"]
[Wed May 20 10:13:05.115329 2026] [:error] [pid 44059:tid 44065] [client 20.226.25.243:51782] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagax.php"] [unique_id "ag0YsRfFs-oSOOcyjyx3bgAAAQQ"]
[Wed May 20 10:13:05.833005 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:59262] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagax.php"] [unique_id "ag0YsRKTmyvxtNXrN-hXsAAAAII"]
[Wed May 20 10:13:06.591222 2026] [:error] [pid 41278:tid 41310] [client 20.226.25.243:60421] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sagax.php"] [unique_id "ag0YsvWiNKASEfiGdwZ4AQAAAEE"]
[Wed May 20 10:13:07.354503 2026] [:error] [pid 41277:tid 41305] [client 20.226.25.243:50261] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/"] [unique_id "ag0Ys7TTCltJmboB5ufM9wAAABc"]
[Wed May 20 10:13:08.206569 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:60548] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/"] [unique_id "ag0YtBfFs-oSOOcyjyx3cgAAARA"]
[Wed May 20 10:13:09.019557 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:55655] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/"] [unique_id "ag0YtRKTmyvxtNXrN-hXtQAAAJU"]
[Wed May 20 10:13:09.934732 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:55101] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/"] [unique_id "ag0YtRKTmyvxtNXrN-hXtgAAAJc"]
[Wed May 20 10:13:10.676210 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:55100] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-teest.php"] [unique_id "ag0YthfFs-oSOOcyjyx3cwAAARI"]
[Wed May 20 10:13:11.463404 2026] [:error] [pid 41278:tid 41316] [client 20.226.25.243:51545] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-teest.php"] [unique_id "ag0Yt_WiNKASEfiGdwZ4AgAAAEc"]
[Wed May 20 10:13:12.223850 2026] [:error] [pid 41277:tid 41306] [client 20.226.25.243:35437] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-teest.php"] [unique_id "ag0YuLTTCltJmboB5ufM-AAAABg"]
[Wed May 20 10:13:12.945877 2026] [:error] [pid 41278:tid 41312] [client 20.226.25.243:34702] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/wp-teest.php"] [unique_id "ag0YuPWiNKASEfiGdwZ4BAAAAEM"]
[Wed May 20 10:13:13.633919 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:58374] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/ftde.php"] [unique_id "ag0YuRfFs-oSOOcyjyx3eAAAAQw"]
[Wed May 20 10:13:14.339137 2026] [:error] [pid 41279:tid 41360] [client 20.226.25.243:35449] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/ftde.php"] [unique_id "ag0YurEFyfaehGZbt4xNzQAAANg"]
[Wed May 20 10:13:14.976468 2026] [:error] [pid 44059:tid 44072] [client 20.226.25.243:60558] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/ftde.php"] [unique_id "ag0YuhfFs-oSOOcyjyx3fwAAAQs"]
[Wed May 20 10:13:15.688182 2026] [:error] [pid 41277:tid 41290] [client 20.226.25.243:34054] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/ftde.php"] [unique_id "ag0Yu7TTCltJmboB5ufM-QAAAAg"]
[Wed May 20 10:13:16.358986 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:36558] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ag0YvBfFs-oSOOcyjyx3iQAAAQE"]
[Wed May 20 10:13:17.084580 2026] [:error] [pid 41279:tid 41345] [client 20.226.25.243:44798] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ag0YvbEFyfaehGZbt4xN0AAAAMk"]
[Wed May 20 10:13:17.727627 2026] [:error] [pid 41364:tid 41367] [client 20.226.25.243:17121] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ag0YvRKTmyvxtNXrN-hXugAAAIE"]
[Wed May 20 10:13:18.412433 2026] [:error] [pid 41278:tid 41329] [client 20.226.25.243:55009] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "ag0YvvWiNKASEfiGdwZ4BQAAAFQ"]
[Wed May 20 10:13:19.070348 2026] [:error] [pid 41278:tid 41322] [client 20.226.25.243:59290] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "ag0Yv_WiNKASEfiGdwZ4CwAAAE0"]
[Wed May 20 10:13:19.751245 2026] [:error] [pid 41364:tid 41390] [client 20.226.25.243:55069] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "ag0YvxKTmyvxtNXrN-hXvQAAAJg"]
[Wed May 20 10:13:20.394209 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:52440] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "ag0YwBKTmyvxtNXrN-hXvgAAAIc"]
[Wed May 20 10:13:21.208871 2026] [:error] [pid 41279:tid 41349] [client 20.226.25.243:52434] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/"] [unique_id "ag0YwbEFyfaehGZbt4xN1AAAAM0"]
[Wed May 20 10:13:22.256717 2026] [:error] [pid 41364:tid 41386] [client 20.226.25.243:30970] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "ag0YwhKTmyvxtNXrN-hXvwAAAJQ"]
[Wed May 20 10:13:23.094883 2026] [:error] [pid 41279:tid 41337] [client 20.226.25.243:52431] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "ag0Yw7EFyfaehGZbt4xN1QAAAME"]
[Wed May 20 10:13:23.808512 2026] [:error] [pid 41277:tid 41288] [client 20.226.25.243:54329] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "ag0Yw7TTCltJmboB5ufM_AAAAAY"]
[Wed May 20 10:13:24.469506 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:44679] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/z.php"] [unique_id "ag0YxBfFs-oSOOcyjyx3kgAAARA"]
[Wed May 20 10:13:25.158147 2026] [:error] [pid 41279:tid 41343] [client 20.226.25.243:59303] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "ag0YxbEFyfaehGZbt4xN1wAAAMc"]
[Wed May 20 10:13:25.819767 2026] [:error] [pid 41277:tid 41285] [client 20.226.25.243:35975] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "ag0YxbTTCltJmboB5ufM_gAAAAM"]
[Wed May 20 10:13:26.445822 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:30946] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "ag0YxhfFs-oSOOcyjyx3lgAAAQY"]
[Wed May 20 10:13:27.140201 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:58180] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/f35.php"] [unique_id "ag0YxxKTmyvxtNXrN-hXwQAAAJU"]
[Wed May 20 10:13:27.776675 2026] [:error] [pid 41277:tid 41296] [client 20.226.25.243:30951] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "ag0Yx7TTCltJmboB5ufM_wAAAA4"]
[Wed May 20 10:13:28.512611 2026] [:error] [pid 41277:tid 41289] [client 20.226.25.243:35977] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "ag0YyLTTCltJmboB5ufNAAAAAAc"]
[Wed May 20 10:13:29.156895 2026] [:error] [pid 41279:tid 41336] [client 20.226.25.243:59716] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "ag0YybEFyfaehGZbt4xN2AAAAMA"]
[Wed May 20 10:13:29.788601 2026] [:error] [pid 44059:tid 44071] [client 20.226.25.243:30956] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file61.php"] [unique_id "ag0YyRfFs-oSOOcyjyx3mgAAAQo"]
[Wed May 20 10:13:30.448785 2026] [:error] [pid 41277:tid 41293] [client 20.226.25.243:57407] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah.php"] [unique_id "ag0YyrTTCltJmboB5ufNAQAAAAs"]
[Wed May 20 10:13:31.126749 2026] [:error] [pid 44059:tid 44065] [client 20.226.25.243:55475] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah.php"] [unique_id "ag0YyxfFs-oSOOcyjyx3oAAAAQQ"]
[Wed May 20 10:13:31.761351 2026] [:error] [pid 41279:tid 41350] [client 20.226.25.243:59078] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah.php"] [unique_id "ag0Yy7EFyfaehGZbt4xN2QAAAM4"]
[Wed May 20 10:13:32.436449 2026] [:error] [pid 41364:tid 41370] [client 20.226.25.243:30964] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mah.php"] [unique_id "ag0YzBKTmyvxtNXrN-hXwwAAAIQ"]
[Wed May 20 10:13:33.074088 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:55452] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "ag0YzRKTmyvxtNXrN-hXxQAAAIg"]
[Wed May 20 10:13:33.776662 2026] [:error] [pid 44059:tid 44074] [client 20.226.25.243:44735] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "ag0YzRfFs-oSOOcyjyx3pQAAAQ0"]
[Wed May 20 10:13:34.487492 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:49135] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "ag0YzhfFs-oSOOcyjyx3pwAAAQY"]
[Wed May 20 10:13:35.134126 2026] [:error] [pid 44059:tid 44061] [client 20.226.25.243:42888] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "ag0YzxfFs-oSOOcyjyx3qAAAAQA"]
[Wed May 20 10:13:35.761676 2026] [:error] [pid 44059:tid 44068] [client 20.226.25.243:58663] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "ag0YzxfFs-oSOOcyjyx3qgAAAQc"]
[Wed May 20 10:13:36.466061 2026] [:error] [pid 41364:tid 41371] [client 20.226.25.243:58203] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "ag0Y0BKTmyvxtNXrN-hXxgAAAIU"]
[Wed May 20 10:13:37.171842 2026] [:error] [pid 44059:tid 44076] [client 20.226.25.243:33498] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "ag0Y0RfFs-oSOOcyjyx3rQAAAQ8"]
[Wed May 20 10:13:37.875640 2026] [:error] [pid 41277:tid 41284] [client 20.226.25.243:58968] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/system_log.php"] [unique_id "ag0Y0bTTCltJmboB5ufNCQAAAAI"]
[Wed May 20 10:13:38.637204 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:58549] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "ag0Y0hfFs-oSOOcyjyx3sAAAARU"]
[Wed May 20 10:13:39.482754 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:42919] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "ag0Y0xfFs-oSOOcyjyx3sgAAARY"]
[Wed May 20 10:13:40.125112 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:19723] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "ag0Y1BfFs-oSOOcyjyx3tgAAARI"]
[Wed May 20 10:13:40.794171 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:58187] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v.php"] [unique_id "ag0Y1BfFs-oSOOcyjyx3twAAAQw"]
[Wed May 20 10:13:41.782994 2026] [:error] [pid 41277:tid 41293] [client 20.226.25.243:38983] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "ag0Y1bTTCltJmboB5ufNDgAAAAs"]
[Wed May 20 10:13:42.587193 2026] [:error] [pid 41277:tid 41295] [client 20.226.25.243:43174] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "ag0Y1rTTCltJmboB5ufNEAAAAA0"]
[Wed May 20 10:13:43.443608 2026] [:error] [pid 41277:tid 41291] [client 20.226.25.243:19336] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "ag0Y17TTCltJmboB5ufNEgAAAAk"]
[Wed May 20 10:13:44.184119 2026] [:error] [pid 41277:tid 41282] [client 20.226.25.243:59088] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/"] [unique_id "ag0Y2LTTCltJmboB5ufNFAAAAAA"]
[Wed May 20 10:13:44.932765 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:39003] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ag0Y2BfFs-oSOOcyjyx3vAAAAQ4"]
[Wed May 20 10:13:45.682585 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:54609] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ag0Y2RfFs-oSOOcyjyx3vQAAARA"]
[Wed May 20 10:13:46.325584 2026] [:error] [pid 44059:tid 44079] [client 20.226.25.243:38993] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ag0Y2hfFs-oSOOcyjyx3wAAAARI"]
[Wed May 20 10:13:47.260220 2026] [:error] [pid 41278:tid 41323] [client 20.226.25.243:42219] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "ag0Y2_WiNKASEfiGdwZ4GwAAAE4"]
[Wed May 20 10:13:47.885467 2026] [:error] [pid 41278:tid 41315] [client 20.226.25.243:31573] [client 20.226.25.243] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "ag0Y2_WiNKASEfiGdwZ4HAAAAEY"]
[Wed May 20 10:13:48.848898 2026] [:error] [pid 44059:tid 44072] [client 20.226.25.243:19757] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "ag0Y3BfFs-oSOOcyjyx3wwAAAQs"]
[Wed May 20 10:13:49.831542 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:39016] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-index.php
[Wed May 20 10:13:50.461873 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:39016] File does not exist: /usr/local/apache/htdocs/suspended-page/ws80.php
[Wed May 20 10:13:50.898727 2026] [:error] [pid 41364:tid 41386] [client 20.226.25.243:39016] File does not exist: /usr/local/apache/htdocs/suspended-page/ww2.php
[Wed May 20 10:13:51.259477 2026] [:error] [pid 41364:tid 41380] [client 20.226.25.243:39016] File does not exist: /usr/local/apache/htdocs/suspended-page/7logs.php
[Wed May 20 10:13:51.596859 2026] [:error] [pid 41364:tid 41372] [client 20.226.25.243:39016] File does not exist: /usr/local/apache/htdocs/suspended-page/ac.php
[Wed May 20 10:13:51.987847 2026] [:error] [pid 41364:tid 41377] [client 20.226.25.243:39016] File does not exist: /usr/local/apache/htdocs/suspended-page/ctex1.php
[Wed May 20 10:13:52.350251 2026] [:error] [pid 41364:tid 41370] [client 20.226.25.243:39016] File does not exist: /usr/local/apache/htdocs/suspended-page/defaults.php
[Wed May 20 10:13:52.791422 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:39016] File does not exist: /usr/local/apache/htdocs/suspended-page/domains.php
[Wed May 20 10:13:53.121346 2026] [:error] [pid 41364:tid 41389] [client 20.226.25.243:39016] File does not exist: /usr/local/apache/htdocs/suspended-page/dropdown.php
[Wed May 20 10:13:53.433214 2026] [:error] [pid 41364:tid 41378] [client 20.226.25.243:39016] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/files/index.php"] [unique_id "ag0Y4RKTmyvxtNXrN-hX2QAAAIw"]
[Wed May 20 10:13:54.209546 2026] [:error] [pid 41278:tid 41331] [client 20.226.25.243:58981] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/files/index.php"] [unique_id "ag0Y4vWiNKASEfiGdwZ4IQAAAFY"]
[Wed May 20 10:13:55.054304 2026] [:error] [pid 41278:tid 41319] [client 20.226.25.243:31587] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/files/index.php"] [unique_id "ag0Y4_WiNKASEfiGdwZ4JAAAAEo"]
[Wed May 20 10:13:55.752232 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:49646] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/files/index.php"] [unique_id "ag0Y4xfFs-oSOOcyjyx3yQAAAQ4"]
[Wed May 20 10:13:56.466961 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:58659] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "ag0Y5BfFs-oSOOcyjyx3ygAAARU"]
[Wed May 20 10:13:57.137799 2026] [:error] [pid 41278:tid 41329] [client 20.226.25.243:53992] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "ag0Y5fWiNKASEfiGdwZ4JQAAAFQ"]
[Wed May 20 10:13:57.799116 2026] [:error] [pid 41364:tid 41383] [client 20.226.25.243:58990] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "ag0Y5RKTmyvxtNXrN-hX2wAAAJE"]
[Wed May 20 10:13:58.523889 2026] [:error] [pid 41278:tid 41320] [client 20.226.25.243:19901] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "ag0Y5vWiNKASEfiGdwZ4JwAAAEs"]
[Wed May 20 10:13:59.416598 2026] [:error] [pid 41278:tid 41324] [client 20.226.25.243:51320] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/insc.php"] [unique_id "ag0Y5_WiNKASEfiGdwZ4KAAAAE8"]
[Wed May 20 10:14:00.122356 2026] [:error] [pid 41364:tid 41390] [client 20.226.25.243:47465] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/insc.php"] [unique_id "ag0Y6BKTmyvxtNXrN-hX3QAAAJg"]
[Wed May 20 10:14:01.175104 2026] [:error] [pid 41279:tid 41359] [client 20.226.25.243:60220] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/insc.php"] [unique_id "ag0Y6bEFyfaehGZbt4xN5AAAANc"]
[Wed May 20 10:14:01.855911 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:33493] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/insc.php"] [unique_id "ag0Y6RfFs-oSOOcyjyx3zgAAAQE"]
[Wed May 20 10:14:02.555183 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:60213] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "ag0Y6hfFs-oSOOcyjyx31AAAAQM"]
[Wed May 20 10:14:03.262508 2026] [:error] [pid 41364:tid 41388] [client 20.226.25.243:57635] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "ag0Y6xKTmyvxtNXrN-hX4AAAAJY"]
[Wed May 20 10:14:03.900473 2026] [:error] [pid 41279:tid 41360] [client 20.226.25.243:41691] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "ag0Y67EFyfaehGZbt4xN6QAAANg"]
[Wed May 20 10:14:04.748418 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:47449] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bgymj.php"] [unique_id "ag0Y7BfFs-oSOOcyjyx32QAAAQE"]
[Wed May 20 10:14:05.415595 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:42125] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "ag0Y7RfFs-oSOOcyjyx32wAAAQM"]
[Wed May 20 10:14:06.217380 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:47452] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "ag0Y7hfFs-oSOOcyjyx34AAAARA"]
[Wed May 20 10:14:06.948690 2026] [:error] [pid 44059:tid 44068] [client 20.226.25.243:57593] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "ag0Y7hfFs-oSOOcyjyx35AAAAQc"]
[Wed May 20 10:14:07.591525 2026] [:error] [pid 41279:tid 41341] [client 20.226.25.243:57574] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.dj/index.php"] [unique_id "ag0Y77EFyfaehGZbt4xN6gAAAMU"]
[Wed May 20 10:14:08.274325 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:46414] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ag0Y8BfFs-oSOOcyjyx35wAAAQ4"]
[Wed May 20 10:14:09.118618 2026] [:error] [pid 41279:tid 41338] [client 20.226.25.243:9874] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ag0Y8bEFyfaehGZbt4xN6wAAAMI"]
[Wed May 20 10:14:09.911191 2026] [:error] [pid 41278:tid 41309] [client 20.226.25.243:33504] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ag0Y8fWiNKASEfiGdwZ4KgAAAEA"]
[Wed May 20 10:14:10.578846 2026] [:error] [pid 41279:tid 41355] [client 20.226.25.243:42178] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/adminfuns.php"] [unique_id "ag0Y8rEFyfaehGZbt4xN7AAAANM"]
[Wed May 20 10:14:11.232687 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:19855] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/011i.php"] [unique_id "ag0Y8xfFs-oSOOcyjyx36gAAARY"]
[Wed May 20 10:14:11.884712 2026] [:error] [pid 44059:tid 44068] [client 20.226.25.243:19329] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/011i.php"] [unique_id "ag0Y8xfFs-oSOOcyjyx37QAAAQc"]
[Wed May 20 10:14:12.575145 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:27716] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/011i.php"] [unique_id "ag0Y9BfFs-oSOOcyjyx39QAAAQ4"]
[Wed May 20 10:14:13.344178 2026] [:error] [pid 44059:tid 44081] [client 20.226.25.243:42200] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/011i.php"] [unique_id "ag0Y9RfFs-oSOOcyjyx3_wAAARQ"]
[Wed May 20 10:14:14.000148 2026] [:error] [pid 44059:tid 44074] [client 20.226.25.243:42213] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "ag0Y9RfFs-oSOOcyjyx4BwAAAQ0"]
[Wed May 20 10:14:14.756118 2026] [:error] [pid 41278:tid 41331] [client 20.226.25.243:51290] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "ag0Y9vWiNKASEfiGdwZ4LgAAAFY"]
[Wed May 20 10:14:15.616154 2026] [:error] [pid 41279:tid 41346] [client 20.226.25.243:53996] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "ag0Y97EFyfaehGZbt4xN_wAAAMo"]
[Wed May 20 10:14:16.263493 2026] [:error] [pid 41278:tid 41332] [client 20.226.25.243:52881] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "ag0Y-PWiNKASEfiGdwZ4LwAAAFc"]
[Wed May 20 10:14:16.902268 2026] [:error] [pid 44059:tid 44070] [client 20.226.25.243:19359] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "ag0Y-BfFs-oSOOcyjyx4GgAAAQk"]
[Wed May 20 10:14:17.548424 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:60175] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "ag0Y-RfFs-oSOOcyjyx4HAAAAQ4"]
[Wed May 20 10:14:18.694662 2026] [:error] [pid 41278:tid 41316] [client 20.226.25.243:60169] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "ag0Y-vWiNKASEfiGdwZ4MQAAAEc"]
[Wed May 20 10:14:19.325925 2026] [:error] [pid 41277:tid 41287] [client 20.226.25.243:52912] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/166.php"] [unique_id "ag0Y-7TTCltJmboB5ufNKwAAAAU"]
[Wed May 20 10:14:20.033378 2026] [:error] [pid 41279:tid 41344] [client 20.226.25.243:47456] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/leaf.php"] [unique_id "ag0Y_LEFyfaehGZbt4xOCQAAAMg"]
[Wed May 20 10:14:20.669579 2026] [:error] [pid 41278:tid 41321] [client 20.226.25.243:42229] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/leaf.php"] [unique_id "ag0Y_PWiNKASEfiGdwZ4QAAAAEw"]
[Wed May 20 10:14:21.534519 2026] [:error] [pid 44059:tid 44077] [client 20.226.25.243:58052] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/leaf.php"] [unique_id "ag0Y_RfFs-oSOOcyjyx4HwAAARA"]
[Wed May 20 10:14:22.346568 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:46413] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/leaf.php"] [unique_id "ag0Y_hKTmyvxtNXrN-hYMwAAAIc"]
[Wed May 20 10:14:23.007855 2026] [:error] [pid 44059:tid 44076] [client 20.226.25.243:53213] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "ag0Y_xfFs-oSOOcyjyx4IQAAAQ8"]
[Wed May 20 10:14:23.645154 2026] [:error] [pid 44059:tid 44068] [client 20.226.25.243:52920] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "ag0Y_xfFs-oSOOcyjyx4IwAAAQc"]
[Wed May 20 10:14:24.535398 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:41677] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "ag0ZABfFs-oSOOcyjyx4JQAAAQI"]
[Wed May 20 10:14:25.234109 2026] [:error] [pid 44059:tid 44074] [client 20.226.25.243:60189] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/grsiuk.php"] [unique_id "ag0ZARfFs-oSOOcyjyx4JgAAAQ0"]
[Wed May 20 10:14:25.896275 2026] [:error] [pid 41364:tid 41383] [client 20.226.25.243:42190] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "ag0ZARKTmyvxtNXrN-hYNwAAAJE"]
[Wed May 20 10:14:26.622598 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:57730] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "ag0ZAhfFs-oSOOcyjyx4KgAAAQ4"]
[Wed May 20 10:14:27.315062 2026] [:error] [pid 41277:tid 41286] [client 20.226.25.243:57759] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "ag0ZA7TTCltJmboB5ufNMwAAAAQ"]
[Wed May 20 10:14:28.099983 2026] [:error] [pid 41279:tid 41346] [client 20.226.25.243:52890] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/8.php"] [unique_id "ag0ZBLEFyfaehGZbt4xOEgAAAMo"]
[Wed May 20 10:14:28.883522 2026] [:error] [pid 41364:tid 41370] [client 20.226.25.243:48532] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "ag0ZBBKTmyvxtNXrN-hYOgAAAIQ"]
[Wed May 20 10:14:29.602424 2026] [:error] [pid 44059:tid 44069] [client 20.226.25.243:19343] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "ag0ZBRfFs-oSOOcyjyx4LAAAAQg"]
[Wed May 20 10:14:30.318325 2026] [:error] [pid 44059:tid 44072] [client 20.226.25.243:52883] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "ag0ZBhfFs-oSOOcyjyx4LQAAAQs"]
[Wed May 20 10:14:31.147771 2026] [:error] [pid 44059:tid 44076] [client 20.226.25.243:31597] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fs.php"] [unique_id "ag0ZBxfFs-oSOOcyjyx4MAAAAQ8"]
[Wed May 20 10:14:31.802556 2026] [:error] [pid 41278:tid 41326] [client 20.226.25.243:60203] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws38.php"] [unique_id "ag0ZB_WiNKASEfiGdwZ4UQAAAFE"]
[Wed May 20 10:14:32.469810 2026] [:error] [pid 41277:tid 41302] [client 20.226.25.243:47480] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws38.php"] [unique_id "ag0ZCLTTCltJmboB5ufNNAAAABQ"]
[Wed May 20 10:14:33.252167 2026] [:error] [pid 41279:tid 41343] [client 20.226.25.243:42183] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws38.php"] [unique_id "ag0ZCbEFyfaehGZbt4xOFgAAAMc"]
[Wed May 20 10:14:33.997524 2026] [:error] [pid 41364:tid 41366] [client 20.226.25.243:19391] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ws38.php"] [unique_id "ag0ZCRKTmyvxtNXrN-hYPQAAAIA"]
[Wed May 20 10:14:34.635722 2026] [:error] [pid 44059:tid 44084] [client 20.226.25.243:27796] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classsmtps.php"] [unique_id "ag0ZChfFs-oSOOcyjyx4MQAAARc"]
[Wed May 20 10:14:35.354049 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:48551] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classsmtps.php"] [unique_id "ag0ZCxKTmyvxtNXrN-hYPgAAAI0"]
[Wed May 20 10:14:36.145732 2026] [:error] [pid 41364:tid 41388] [client 20.226.25.243:19460] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classsmtps.php"] [unique_id "ag0ZDBKTmyvxtNXrN-hYQAAAAJY"]
[Wed May 20 10:14:36.836779 2026] [:error] [pid 41278:tid 41332] [client 20.226.25.243:19881] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/classsmtps.php"] [unique_id "ag0ZDPWiNKASEfiGdwZ4VQAAAFc"]
[Wed May 20 10:14:37.553782 2026] [:error] [pid 41279:tid 41358] [client 20.226.25.243:60383] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ag0ZDbEFyfaehGZbt4xOGAAAANY"]
[Wed May 20 10:14:38.178330 2026] [:error] [pid 41278:tid 41312] [client 20.226.25.243:53138] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ag0ZDvWiNKASEfiGdwZ4VwAAAEM"]
[Wed May 20 10:14:38.895806 2026] [:error] [pid 41279:tid 41345] [client 20.226.25.243:58465] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ag0ZDrEFyfaehGZbt4xOHAAAAMk"]
[Wed May 20 10:14:39.581957 2026] [:error] [pid 44059:tid 44068] [client 20.226.25.243:10512] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ag0ZDxfFs-oSOOcyjyx4MgAAAQc"]
[Wed May 20 10:14:40.212916 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:19514] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ag0ZEBfFs-oSOOcyjyx4MwAAAQI"]
[Wed May 20 10:14:40.879579 2026] [:error] [pid 41278:tid 41313] [client 20.226.25.243:48536] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ag0ZEPWiNKASEfiGdwZ4WwAAAEQ"]
[Wed May 20 10:14:41.525167 2026] [:error] [pid 41278:tid 41329] [client 20.226.25.243:19463] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ag0ZEfWiNKASEfiGdwZ4XAAAAFQ"]
[Wed May 20 10:14:42.192836 2026] [:error] [pid 41364:tid 41377] [client 20.226.25.243:60368] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sadcut1.php"] [unique_id "ag0ZEhKTmyvxtNXrN-hYUgAAAIs"]
[Wed May 20 10:14:42.909081 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:52679] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/y.php"] [unique_id "ag0ZEhfFs-oSOOcyjyx4TgAAAQE"]
[Wed May 20 10:14:43.590832 2026] [:error] [pid 41277:tid 41284] [client 20.226.25.243:52195] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/y.php"] [unique_id "ag0ZE7TTCltJmboB5ufNQgAAAAI"]
[Wed May 20 10:14:44.277924 2026] [:error] [pid 44059:tid 44078] [client 20.226.25.243:58477] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/y.php"] [unique_id "ag0ZFBfFs-oSOOcyjyx4VAAAARE"]
[Wed May 20 10:14:45.050736 2026] [:error] [pid 41278:tid 41309] [client 20.226.25.243:19900] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/y.php"] [unique_id "ag0ZFfWiNKASEfiGdwZ4XgAAAEA"]
[Wed May 20 10:14:45.690380 2026] [:error] [pid 41279:tid 41352] [client 20.226.25.243:19509] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "ag0ZFbEFyfaehGZbt4xOLQAAANA"]
[Wed May 20 10:14:46.365869 2026] [:error] [pid 41278:tid 41326] [client 20.226.25.243:54962] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "ag0ZFvWiNKASEfiGdwZ4XwAAAFE"]
[Wed May 20 10:14:47.056927 2026] [:error] [pid 41277:tid 41297] [client 20.226.25.243:57735] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "ag0ZF7TTCltJmboB5ufNRQAAAA8"]
[Wed May 20 10:14:47.684352 2026] [:error] [pid 41364:tid 41369] [client 20.226.25.243:27778] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/7.php"] [unique_id "ag0ZFxKTmyvxtNXrN-hYWQAAAIM"]
[Wed May 20 10:14:48.334840 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:10532] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "ag0ZGBfFs-oSOOcyjyx4VwAAARU"]
[Wed May 20 10:14:48.992516 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:58442] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "ag0ZGBfFs-oSOOcyjyx4WQAAARY"]
[Wed May 20 10:14:49.650190 2026] [:error] [pid 41277:tid 41286] [client 20.226.25.243:19850] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "ag0ZGbTTCltJmboB5ufNRwAAAAQ"]
[Wed May 20 10:14:50.273506 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:10546] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/a5.php"] [unique_id "ag0ZGhfFs-oSOOcyjyx4WgAAAQw"]
[Wed May 20 10:14:50.927953 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:56607] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ag0ZGhfFs-oSOOcyjyx4XAAAAQI"]
[Wed May 20 10:14:51.563194 2026] [:error] [pid 41278:tid 41331] [client 20.226.25.243:54968] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ag0ZG_WiNKASEfiGdwZ4YQAAAFY"]
[Wed May 20 10:14:52.208911 2026] [:error] [pid 41278:tid 41314] [client 20.226.25.243:27833] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ag0ZHPWiNKASEfiGdwZ4YgAAAEU"]
[Wed May 20 10:14:52.911883 2026] [:error] [pid 41277:tid 41296] [client 20.226.25.243:48003] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ag0ZHLTTCltJmboB5ufNSAAAAA4"]
[Wed May 20 10:14:53.708974 2026] [:error] [pid 41279:tid 41359] [client 20.226.25.243:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/asd.php
[Wed May 20 10:14:54.025033 2026] [:error] [pid 41279:tid 41337] [client 20.226.25.243:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/default.php
[Wed May 20 10:14:54.340911 2026] [:error] [pid 41279:tid 41347] [client 20.226.25.243:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/gettest.php
[Wed May 20 10:14:54.657052 2026] [:error] [pid 41279:tid 41352] [client 20.226.25.243:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/tfm.php
[Wed May 20 10:14:54.973099 2026] [:error] [pid 41279:tid 41345] [client 20.226.25.243:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/t.php
[Wed May 20 10:14:55.605875 2026] [:error] [pid 41279:tid 41340] [client 20.226.25.243:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/6xBAm3vODE05BSzkJZRAws.php
[Wed May 20 10:14:55.933086 2026] [:error] [pid 41279:tid 41357] [client 20.226.25.243:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/onclickfuns.php
[Wed May 20 10:14:56.582015 2026] [:error] [pid 41279:tid 41342] [client 20.226.25.243:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/.info.php
[Wed May 20 10:14:56.911886 2026] [:error] [pid 41279:tid 41349] [client 20.226.25.243:60362] File does not exist: /usr/local/apache/htdocs/suspended-page/albin.php
[Wed May 20 10:14:57.292462 2026] [:error] [pid 41279:tid 41348] [client 20.226.25.243:60362] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dragonshell.php"] [unique_id "ag0ZIbEFyfaehGZbt4xOQQAAAMw"]
[Wed May 20 10:14:57.960303 2026] [:error] [pid 44059:tid 44076] [client 20.226.25.243:56580] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dragonshell.php"] [unique_id "ag0ZIRfFs-oSOOcyjyx4YwAAAQ8"]
[Wed May 20 10:14:58.827690 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:43571] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dragonshell.php"] [unique_id "ag0ZIhfFs-oSOOcyjyx4ZgAAAQw"]
[Wed May 20 10:14:59.464735 2026] [:error] [pid 44059:tid 44063] [client 20.226.25.243:19982] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dragonshell.php"] [unique_id "ag0ZIxfFs-oSOOcyjyx4ZwAAAQI"]
[Wed May 20 10:15:00.224783 2026] [:error] [pid 44059:tid 44075] [client 20.226.25.243:43553] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "ag0ZJBfFs-oSOOcyjyx4aAAAAQ4"]
[Wed May 20 10:15:00.862230 2026] [:error] [pid 41277:tid 41285] [client 20.226.25.243:27814] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "ag0ZJLTTCltJmboB5ufNSQAAAAM"]
[Wed May 20 10:15:01.504807 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:56615] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "ag0ZJRKTmyvxtNXrN-hYYwAAAJU"]
[Wed May 20 10:15:02.170472 2026] [:error] [pid 41277:tid 41295] [client 20.226.25.243:45405] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/gifclass.php"] [unique_id "ag0ZJrTTCltJmboB5ufNTAAAAA0"]
[Wed May 20 10:15:02.800614 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:27782] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "ag0ZJhKTmyvxtNXrN-hYZAAAAII"]
[Wed May 20 10:15:03.455476 2026] [:error] [pid 41279:tid 41350] [client 20.226.25.243:27789] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "ag0ZJ7EFyfaehGZbt4xOQwAAAM4"]
[Wed May 20 10:15:04.114563 2026] [:error] [pid 41278:tid 41310] [client 20.226.25.243:54168] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "ag0ZKPWiNKASEfiGdwZ4ZgAAAEE"]
[Wed May 20 10:15:04.748367 2026] [:error] [pid 41364:tid 41369] [client 20.226.25.243:34147] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sql.php"] [unique_id "ag0ZKBKTmyvxtNXrN-hYZgAAAIM"]
[Wed May 20 10:15:05.403230 2026] [:error] [pid 44059:tid 44067] [client 20.226.25.243:55262] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "ag0ZKRfFs-oSOOcyjyx4aQAAAQY"]
[Wed May 20 10:15:06.055503 2026] [:error] [pid 41364:tid 41383] [client 20.226.25.243:44783] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "ag0ZKhKTmyvxtNXrN-hYZwAAAJE"]
[Wed May 20 10:15:06.719970 2026] [:error] [pid 41364:tid 41370] [client 20.226.25.243:54165] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "ag0ZKhKTmyvxtNXrN-hYaAAAAIQ"]
[Wed May 20 10:15:07.361536 2026] [:error] [pid 41278:tid 41313] [client 20.226.25.243:43558] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/about.php"] [unique_id "ag0ZK_WiNKASEfiGdwZ4aAAAAEQ"]
[Wed May 20 10:15:08.028764 2026] [:error] [pid 44059:tid 44062] [client 20.226.25.243:27813] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/function.php"] [unique_id "ag0ZLBfFs-oSOOcyjyx4bAAAAQE"]
[Wed May 20 10:15:08.654934 2026] [:error] [pid 44059:tid 44066] [client 20.226.25.243:5756] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/function.php"] [unique_id "ag0ZLBfFs-oSOOcyjyx4bQAAAQU"]
[Wed May 20 10:15:09.277547 2026] [:error] [pid 44059:tid 44085] [client 20.226.25.243:48015] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/function.php"] [unique_id "ag0ZLRfFs-oSOOcyjyx4bwAAARg"]
[Wed May 20 10:15:09.985052 2026] [:error] [pid 44059:tid 44064] [client 20.226.25.243:5697] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/function.php"] [unique_id "ag0ZLRfFs-oSOOcyjyx4cAAAAQM"]
[Wed May 20 10:15:10.673394 2026] [:error] [pid 44059:tid 44074] [client 20.226.25.243:44792] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/date.php"] [unique_id "ag0ZLhfFs-oSOOcyjyx4cQAAAQ0"]
[Wed May 20 10:15:11.313996 2026] [:error] [pid 44059:tid 44082] [client 20.226.25.243:37359] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/date.php"] [unique_id "ag0ZLxfFs-oSOOcyjyx4cgAAARU"]
[Wed May 20 10:15:11.984563 2026] [:error] [pid 41364:tid 41379] [client 20.226.25.243:44766] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/date.php"] [unique_id "ag0ZLxKTmyvxtNXrN-hYawAAAI0"]
[Wed May 20 10:15:12.617352 2026] [:error] [pid 41364:tid 41388] [client 20.226.25.243:56629] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/date.php"] [unique_id "ag0ZMBKTmyvxtNXrN-hYbQAAAJY"]
[Wed May 20 10:15:13.284167 2026] [:error] [pid 41278:tid 41327] [client 20.226.25.243:56593] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo.php"] [unique_id "ag0ZMfWiNKASEfiGdwZ4agAAAFI"]
[Wed May 20 10:15:14.068370 2026] [:error] [pid 41278:tid 41324] [client 20.226.25.243:5711] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo.php"] [unique_id "ag0ZMvWiNKASEfiGdwZ4bAAAAE8"]
[Wed May 20 10:15:14.703439 2026] [:error] [pid 41278:tid 41320] [client 20.226.25.243:52686] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo.php"] [unique_id "ag0ZMvWiNKASEfiGdwZ4bQAAAEs"]
[Wed May 20 10:15:15.367976 2026] [:error] [pid 41278:tid 41323] [client 20.226.25.243:58446] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pomo.php"] [unique_id "ag0ZM_WiNKASEfiGdwZ4bgAAAE4"]
[Wed May 20 10:15:16.002994 2026] [:error] [pid 44059:tid 44083] [client 20.226.25.243:52676] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t/rfi.php"] [unique_id "ag0ZNBfFs-oSOOcyjyx4dQAAARY"]
[Wed May 20 10:15:16.636935 2026] [:error] [pid 41364:tid 41381] [client 20.226.25.243:5703] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t/rfi.php"] [unique_id "ag0ZNBKTmyvxtNXrN-hYbgAAAI8"]
[Wed May 20 10:15:17.399718 2026] [:error] [pid 44059:tid 44073] [client 20.226.25.243:56583] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t/rfi.php"] [unique_id "ag0ZNRfFs-oSOOcyjyx4dgAAAQw"]
[Wed May 20 10:15:18.039631 2026] [:error] [pid 41364:tid 41374] [client 20.226.25.243:37984] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t/rfi.php"] [unique_id "ag0ZNhKTmyvxtNXrN-hYcQAAAIg"]
[Wed May 20 10:15:18.997141 2026] [:error] [pid 41364:tid 41387] [client 20.226.25.243:56970] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sendmail.php"] [unique_id "ag0ZNhKTmyvxtNXrN-hYcgAAAJU"]
[Wed May 20 10:15:19.642194 2026] [:error] [pid 41364:tid 41367] [client 20.226.25.243:56495] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sendmail.php"] [unique_id "ag0ZNxKTmyvxtNXrN-hYcwAAAIE"]
[Wed May 20 10:15:20.310338 2026] [:error] [pid 41364:tid 41368] [client 20.226.25.243:52700] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sendmail.php"] [unique_id "ag0ZOBKTmyvxtNXrN-hYdAAAAII"]
[Wed May 20 10:15:20.968079 2026] [:error] [pid 41364:tid 41373] [client 20.226.25.243:54180] [client 20.226.25.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sendmail.php"] [unique_id "ag0ZOBKTmyvxtNXrN-hYdQAAAIc"]
[Wed May 20 12:23:42.388603 2026] [:error] [pid 41279:tid 41339] [client 212.30.36.110:57609] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 12:23:43.386918 2026] [:error] [pid 41364:tid 41368] [client 212.30.36.148:47793] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 12:23:43.890795 2026] [:error] [pid 41279:tid 41353] [client 212.30.36.121:58627] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 12:23:44.390974 2026] [:error] [pid 41279:tid 41359] [client 212.30.36.138:46343] File does not exist: /usr/local/apache/htdocs/suspended-page/adminer.php
[Wed May 20 14:34:00.465264 2026] [:error] [pid 7731:tid 7754] [client 34.46.57.55:53198] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "ag1V2H9qQlHXbkl2nEuehgAAAZU"]
[Wed May 20 14:34:00.862684 2026] [:error] [pid 44059:tid 44082] [client 34.46.57.55:52602] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "ag1V2BfFs-oSOOcyjyzQawAAARU"]
[Wed May 20 14:34:01.251386 2026] [:error] [pid 41277:tid 41287] [client 34.46.57.55:61397] [client 34.46.57.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag1V2bTTCltJmboB5ufm1wAAAAU"]
[Wed May 20 14:49:23.387980 2026] [:error] [pid 41364:tid 41380] [client 20.220.236.34:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed May 20 14:49:23.617927 2026] [:error] [pid 41364:tid 41376] [client 20.220.236.34:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Wed May 20 14:49:23.885454 2026] [:error] [pid 41364:tid 41378] [client 20.220.236.34:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/file.php
[Wed May 20 14:49:24.131800 2026] [:error] [pid 41364:tid 41389] [client 20.220.236.34:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/goods.php
[Wed May 20 14:49:24.350586 2026] [:error] [pid 41364:tid 41369] [client 20.220.236.34:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Wed May 20 14:49:24.599530 2026] [:error] [pid 41364:tid 41381] [client 20.220.236.34:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/simple.php
[Wed May 20 14:49:24.864341 2026] [:error] [pid 41364:tid 41374] [client 20.220.236.34:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Wed May 20 14:49:25.340650 2026] [:error] [pid 41364:tid 41379] [client 20.220.236.34:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Wed May 20 14:49:25.575002 2026] [:error] [pid 41364:tid 41370] [client 20.220.236.34:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/file3.php
[Wed May 20 14:49:25.794411 2026] [:error] [pid 41364:tid 41387] [client 20.220.236.34:32378] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-mail.php
[Wed May 20 14:49:26.010065 2026] [:error] [pid 41364:tid 41388] [client 20.220.236.34:32378] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ag1ZdhKTmyvxtNXrN-iXPgAAAJY"]
[Wed May 20 14:49:27.327330 2026] [:error] [pid 41279:tid 41356] [client 20.220.236.34:39903] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ag1Zd7EFyfaehGZbt4x0hQAAANQ"]
[Wed May 20 14:49:28.298998 2026] [:error] [pid 41279:tid 41347] [client 20.220.236.34:13948] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ag1ZeLEFyfaehGZbt4x0hgAAAMs"]
[Wed May 20 14:49:29.247062 2026] [:error] [pid 41278:tid 41312] [client 20.220.236.34:16730] [client 20.220.236.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ag1ZefWiNKASEfiGdwaYpQAAAEM"]
[Wed May 20 16:05:09.692810 2026] [:error] [pid 7664:tid 7676] [client 39.58.49.255:64815] [client 39.58.49.255] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 39.58.49.255, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ag1rNXZ8s7o3eiqT2kvbQwAAAUk"]
[Wed May 20 16:05:09.698122 2026] [:error] [pid 7664:tid 7676] [client 39.58.49.255:64815] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 20 21:27:19.450539 2026] [:error] [pid 44059:tid 44069] [client 34.138.251.182:50238] [client 34.138.251.182] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.138.251.182, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ag22txfFs-oSOOcyjywvCgAAAQg"]
[Wed May 20 21:27:19.454415 2026] [:error] [pid 44059:tid 44069] [client 34.138.251.182:50238] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Wed May 20 21:27:22.153369 2026] [:error] [pid 44059:tid 44066] [client 34.138.251.182:50238] [client 34.138.251.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ag22uhfFs-oSOOcyjywvFgAAAQU"]
[Wed May 20 21:27:22.735895 2026] [:error] [pid 7731:tid 7743] [client 34.138.251.182:63442] [client 34.138.251.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ag22un9qQlHXbkl2nEskqAAAAYo"]
[Wed May 20 21:27:23.385750 2026] [:error] [pid 7731:tid 7749] [client 34.138.251.182:59224] [client 34.138.251.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "ag22u39qQlHXbkl2nEskrAAAAZA"]
[Wed May 20 21:27:23.827766 2026] [:error] [pid 41277:tid 41290] [client 34.138.251.182:57027] [client 34.138.251.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "ag22u7TTCltJmboB5ucHzgAAAAg"]
[Wed May 20 21:27:24.412009 2026] [:error] [pid 41278:tid 41333] [client 34.138.251.182:65463] [client 34.138.251.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ag22vPWiNKASEfiGdwa85gAAAFg"]
[Wed May 20 21:27:24.928570 2026] [:error] [pid 41364:tid 41369] [client 34.138.251.182:64368] [client 34.138.251.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ag22vBKTmyvxtNXrN-jgTwAAAIM"]
[Wed May 20 21:27:25.508795 2026] [:error] [pid 44059:tid 44081] [client 34.138.251.182:60941] [client 34.138.251.182] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "ag22vRfFs-oSOOcyjywvHgAAARQ"]
[Wed May 20 23:03:07.255991 2026] [:error] [pid 44059:tid 44084] [client 20.46.171.81:6210] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Wed May 20 23:03:07.384219 2026] [:error] [pid 44059:tid 44083] [client 20.46.171.81:6210] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Wed May 20 23:03:07.501532 2026] [:error] [pid 44059:tid 44080] [client 20.46.171.81:6210] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Wed May 20 23:03:07.625316 2026] [:error] [pid 44059:tid 44081] [client 20.46.171.81:6210] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Wed May 20 23:03:07.744114 2026] [:error] [pid 44059:tid 44073] [client 20.46.171.81:6210] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Wed May 20 23:03:07.879962 2026] [:error] [pid 44059:tid 44074] [client 20.46.171.81:6210] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Wed May 20 23:03:08.028795 2026] [:error] [pid 44059:tid 44061] [client 20.46.171.81:6210] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Wed May 20 23:03:08.159683 2026] [:error] [pid 44059:tid 44066] [client 20.46.171.81:6210] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Wed May 20 23:03:08.949130 2026] [:error] [pid 44059:tid 44076] [client 20.46.171.81:6210] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Wed May 20 23:03:09.287045 2026] [:error] [pid 44059:tid 44070] [client 20.46.171.81:6210] [client 20.46.171.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ag3NLRfFs-oSOOcyjyxB6AAAAQk"]
[Wed May 20 23:03:09.872914 2026] [:error] [pid 41277:tid 41300] [client 20.46.171.81:6290] [client 20.46.171.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ag3NLbTTCltJmboB5ucR4wAAABI"]
[Wed May 20 23:03:10.243481 2026] [:error] [pid 44059:tid 44077] [client 20.46.171.81:6284] [client 20.46.171.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ag3NLhfFs-oSOOcyjyxB6QAAARA"]
[Wed May 20 23:03:10.550591 2026] [:error] [pid 41364:tid 41367] [client 20.46.171.81:6291] [client 20.46.171.81] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ag3NLhKTmyvxtNXrN-j7dQAAAIE"]
[Thu May 21 01:36:53.278374 2026] [:error] [pid 44059:tid 44080] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Thu May 21 01:36:53.405031 2026] [:error] [pid 44059:tid 44067] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu May 21 01:36:53.531197 2026] [:error] [pid 44059:tid 44078] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu May 21 01:36:53.657719 2026] [:error] [pid 44059:tid 44069] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu May 21 01:36:53.814999 2026] [:error] [pid 44059:tid 44070] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Thu May 21 01:36:53.942152 2026] [:error] [pid 44059:tid 44075] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu May 21 01:36:54.068621 2026] [:error] [pid 44059:tid 44074] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu May 21 01:36:54.195582 2026] [:error] [pid 44059:tid 44068] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu May 21 01:36:54.322014 2026] [:error] [pid 44059:tid 44076] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Thu May 21 01:36:54.474477 2026] [:error] [pid 44059:tid 44071] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu May 21 01:36:54.601233 2026] [:error] [pid 44059:tid 44073] [client 13.70.0.142:1165] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu May 21 01:36:54.724914 2026] [:error] [pid 44059:tid 44072] [client 13.70.0.142:1165] [client 13.70.0.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ag3xNhfFs-oSOOcyjyxdvAAAAQs"]
[Thu May 21 01:36:55.231134 2026] [:error] [pid 41279:tid 41342] [client 13.70.0.142:2171] [client 13.70.0.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ag3xN7EFyfaehGZbt4zAiAAAAMY"]
[Thu May 21 01:36:55.722382 2026] [:error] [pid 7731:tid 7743] [client 13.70.0.142:9081] [client 13.70.0.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ag3xN39qQlHXbkl2nEtkLAAAAYo"]
[Thu May 21 01:36:56.232061 2026] [:error] [pid 7664:tid 7691] [client 13.70.0.142:3695] [client 13.70.0.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ag3xOHZ8s7o3eiqT2ksyyQAAAVg"]
[Thu May 21 01:53:44.021827 2026] [:error] [pid 41364:tid 41376] [client 176.65.132.73:54385] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.65.132.73, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ag31KBKTmyvxtNXrN-gyHQAAAIo"]
[Thu May 21 01:53:44.025374 2026] [:error] [pid 41364:tid 41376] [client 176.65.132.73:54385] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Thu May 21 01:53:45.043332 2026] [:error] [pid 41364:tid 41383] [client 176.65.132.73:54422] [client 176.65.132.73] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 176.65.132.73, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ag31KRKTmyvxtNXrN-gyHwAAAJE"]
[Thu May 21 01:53:45.047247 2026] [:error] [pid 41364:tid 41383] [client 176.65.132.73:54422] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Thu May 21 08:35:58.341771 2026] [:error] [pid 49982:tid 49997] [client 194.163.157.206:50774] [client 194.163.157.206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/sftp-config.json"] [unique_id "ag5TbmFwIDa5Tf8O4bZGmwAAAM0"]
[Thu May 21 23:24:10.005766 2026] [:error] [pid 49884:tid 49948] [client 34.150.255.112:62934] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXTQAAAIE"]
[Thu May 21 23:24:10.436066 2026] [:error] [pid 49884:tid 49969] [client 34.150.255.112:65316] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "ag8jmq5MPpsTNNHWS6gXtAAAAJY"]
[Thu May 21 23:24:10.891866 2026] [:error] [pid 9188:tid 9193] [client 34.150.255.112:60916] [client 34.150.255.112] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "ag8jmrGYm6q5dNSUvA__EAAAAcE"]
[Thu May 21 23:56:16.571937 2026] [:error] [pid 9157:tid 9160] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Thu May 21 23:56:16.720589 2026] [:error] [pid 9157:tid 9173] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Thu May 21 23:56:16.844866 2026] [:error] [pid 9157:tid 9172] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Thu May 21 23:56:16.969187 2026] [:error] [pid 9157:tid 9171] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Thu May 21 23:56:17.114679 2026] [:error] [pid 9157:tid 9182] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Thu May 21 23:56:17.240532 2026] [:error] [pid 9157:tid 9174] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Thu May 21 23:56:17.365830 2026] [:error] [pid 9157:tid 9183] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Thu May 21 23:56:17.491981 2026] [:error] [pid 9157:tid 9164] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Thu May 21 23:56:17.616040 2026] [:error] [pid 9157:tid 9180] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Thu May 21 23:56:17.740127 2026] [:error] [pid 9157:tid 9178] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Thu May 21 23:56:17.861851 2026] [:error] [pid 9157:tid 9175] [client 104.208.91.205:11295] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Thu May 21 23:56:17.983374 2026] [:error] [pid 9157:tid 9176] [client 104.208.91.205:11295] [client 104.208.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ag8rIcGfHcLNqE8m88KmCwAAAZE"]
[Thu May 21 23:56:18.515706 2026] [:error] [pid 9114:tid 9137] [client 104.208.91.205:12798] [client 104.208.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ag8rIm8FiJqDBEoTvqyOiAAAAVU"]
[Thu May 21 23:56:19.163135 2026] [:error] [pid 9114:tid 9127] [client 104.208.91.205:1453] [client 104.208.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ag8rI28FiJqDBEoTvqyOigAAAUs"]
[Thu May 21 23:56:19.766765 2026] [:error] [pid 9189:tid 9220] [client 104.208.91.205:12541] [client 104.208.91.205] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ag8rI5vTDh1NbYizKVzazQAAAgE"]
[Fri May 22 08:49:06.390862 2026] [:error] [pid 15585:tid 15652] [client 176.65.139.229:52550] [client 176.65.139.229] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "ag-oAiKb-vB41AF-LC2ALwAAAIU"]
[Fri May 22 09:27:36.623609 2026] [:error] [pid 15585:tid 15652] [client 64.226.77.253:62014] [client 64.226.77.253] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.226.77.253, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ag-xCCKb-vB41AF-LC2b6AAAAIU"]
[Fri May 22 09:27:36.627155 2026] [:error] [pid 15585:tid 15652] [client 64.226.77.253:62014] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri May 22 09:52:45.969828 2026] [:error] [pid 15585:tid 15667] [client 185.198.240.211:65037] [client 185.198.240.211] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ag-27SKb-vB41AF-LC2l1QAAAJQ"]
[Fri May 22 10:06:20.090053 2026] [:error] [pid 15585:tid 15655] [client 159.65.43.31:55918] [client 159.65.43.31] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 159.65.43.31, incrementing brute counter"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-login.php"] [unique_id "ag-6HCKb-vB41AF-LC2rsAAAAIg"]
[Fri May 22 10:06:20.093695 2026] [:error] [pid 15585:tid 15655] [client 159.65.43.31:55918] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-login.php
[Fri May 22 17:07:47.712031 2026] [:error] [pid 15583:tid 15607] [client 161.118.202.128:56031] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAc43naOncRcIm17YX0vQAAABM"]
[Fri May 22 17:07:47.887193 2026] [:error] [pid 58813:tid 58824] [client 161.118.202.128:56149] [client 161.118.202.128] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "ahAc456yyKWDKULhxJ1qrgAAAUg"]
[Fri May 22 17:11:07.801928 2026] [:error] [pid 15679:tid 15702] [client 34.93.63.75:59228] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "ahAdqyh8tgGc38WJ-GwwaAAAANU"]
[Fri May 22 17:11:08.094930 2026] [:error] [pid 15585:tid 15648] [client 34.93.63.75:60595] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahAdrCKb-vB41AF-LC1JPgAAAIE"]
[Fri May 22 17:11:08.381650 2026] [:error] [pid 15584:tid 15624] [client 34.93.63.75:62265] [client 34.93.63.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feed/"] [unique_id "ahAdrN9Z_TVLbNEx52gMCwAAAEQ"]
[Fri May 22 17:39:21.194920 2026] [:error] [pid 15583:tid 15607] [client 104.28.248.163:26066] [client 104.28.248.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/HEAD"] [unique_id "ahAkSXnaOncRcIm17YX5nAAAABM"]
[Fri May 22 17:39:21.200100 2026] [:error] [pid 15679:tid 15685] [client 104.28.248.163:26070] [client 104.28.248.163] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "ahAkSSh8tgGc38WJ-Gw2vAAAAMQ"]
[Sat May 23 00:01:09.565101 2026] [:error] [pid 15583:tid 15607] [client 3.104.119.140:56112] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "ahB9xXnaOncRcIm17YVMFQAAABM"]
[Sat May 23 00:01:09.651759 2026] [:error] [pid 15583:tid 15591] [client 3.104.119.140:56128] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "ahB9xXnaOncRcIm17YVMFwAAAAM"]
[Sat May 23 00:01:09.708651 2026] [:error] [pid 15583:tid 15590] [client 3.104.119.140:56138] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "ahB9xXnaOncRcIm17YVMGAAAAAI"]
[Sat May 23 00:01:09.771175 2026] [:error] [pid 15583:tid 15598] [client 3.104.119.140:56154] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "ahB9xXnaOncRcIm17YVMGQAAAAo"]
[Sat May 23 00:01:09.830908 2026] [:error] [pid 15583:tid 15588] [client 3.104.119.140:56160] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.staging"] [unique_id "ahB9xXnaOncRcIm17YVMGgAAAAA"]
[Sat May 23 00:01:09.890309 2026] [:error] [pid 15583:tid 15593] [client 3.104.119.140:56172] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "ahB9xXnaOncRcIm17YVMGwAAAAU"]
[Sat May 23 00:01:09.947710 2026] [:error] [pid 15679:tid 15687] [client 3.104.119.140:56182] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.test"] [unique_id "ahB9xSh8tgGc38WJ-GyPNQAAAMY"]
[Sat May 23 00:01:10.009884 2026] [:error] [pid 15679:tid 15697] [client 3.104.119.140:56192] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.remote"] [unique_id "ahB9xih8tgGc38WJ-GyPNgAAANA"]
[Sat May 23 00:01:10.072756 2026] [:error] [pid 15583:tid 15611] [client 3.104.119.140:56204] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.bak"] [unique_id "ahB9xnnaOncRcIm17YVMHAAAABc"]
[Sat May 23 00:01:10.134908 2026] [:error] [pid 15583:tid 15589] [client 3.104.119.140:56210] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.backup"] [unique_id "ahB9xnnaOncRcIm17YVMHQAAAAE"]
[Sat May 23 00:01:10.200404 2026] [:error] [pid 58813:tid 58831] [client 3.104.119.140:56216] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.save"] [unique_id "ahB9xp6yyKWDKULhxJ2kzwAAAU8"]
[Sat May 23 00:01:10.256534 2026] [:error] [pid 15583:tid 15592] [client 3.104.119.140:56228] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.old"] [unique_id "ahB9xnnaOncRcIm17YVMHgAAAAQ"]
[Sat May 23 00:01:10.324652 2026] [:error] [pid 15583:tid 15610] [client 3.104.119.140:56240] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.sample"] [unique_id "ahB9xnnaOncRcIm17YVMIQAAABY"]
[Sat May 23 00:01:10.394466 2026] [:error] [pid 15583:tid 15603] [client 3.104.119.140:56248] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.example"] [unique_id "ahB9xnnaOncRcIm17YVMIgAAAA8"]
[Sat May 23 00:01:10.452270 2026] [:error] [pid 15585:tid 15669] [client 3.104.119.140:56252] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dev"] [unique_id "ahB9xiKb-vB41AF-LC22xQAAAJY"]
[Sat May 23 00:01:10.517348 2026] [:error] [pid 15583:tid 15591] [client 3.104.119.140:56264] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.prod"] [unique_id "ahB9xnnaOncRcIm17YVMIwAAAAM"]
[Sat May 23 00:01:10.580675 2026] [:error] [pid 15583:tid 15590] [client 3.104.119.140:56272] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.stage"] [unique_id "ahB9xnnaOncRcIm17YVMJAAAAAI"]
[Sat May 23 00:01:10.638623 2026] [:error] [pid 15583:tid 15598] [client 3.104.119.140:56282] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.ci"] [unique_id "ahB9xnnaOncRcIm17YVMJQAAAAo"]
[Sat May 23 00:01:10.706051 2026] [:error] [pid 15583:tid 15596] [client 3.104.119.140:56290] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.docker"] [unique_id "ahB9xnnaOncRcIm17YVMJgAAAAg"]
[Sat May 23 00:01:10.778546 2026] [:error] [pid 58782:tid 58789] [client 3.104.119.140:56302] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.live"] [unique_id "ahB9xoxsdTFafgO8vhRADwAAAQU"]
[Sat May 23 00:01:10.853372 2026] [:error] [pid 58813:tid 58826] [client 3.104.119.140:56316] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.preprod"] [unique_id "ahB9xp6yyKWDKULhxJ2k0gAAAUo"]
[Sat May 23 00:01:10.924343 2026] [:error] [pid 15583:tid 15611] [client 3.104.119.140:56320] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.uat"] [unique_id "ahB9xnnaOncRcIm17YVMKAAAABc"]
[Sat May 23 00:01:10.984399 2026] [:error] [pid 15585:tid 15664] [client 3.104.119.140:56326] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.dist"] [unique_id "ahB9xiKb-vB41AF-LC22xgAAAJE"]
[Sat May 23 00:01:11.043645 2026] [:error] [pid 58813:tid 58832] [client 3.104.119.140:56336] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.swp"] [unique_id "ahB9x56yyKWDKULhxJ2k0wAAAVA"]
[Sat May 23 00:01:11.111564 2026] [:error] [pid 58813:tid 58840] [client 3.104.119.140:56342] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env~"] [unique_id "ahB9x56yyKWDKULhxJ2k1AAAAVg"]
[Sat May 23 00:01:11.178838 2026] [:error] [pid 58813:tid 58836] [client 3.104.119.140:56358] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env1"] [unique_id "ahB9x56yyKWDKULhxJ2k1QAAAVQ"]
[Sat May 23 00:01:11.249079 2026] [:error] [pid 58782:tid 58790] [client 3.104.119.140:56366] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env2"] [unique_id "ahB9x4xsdTFafgO8vhRAEAAAAQY"]
[Sat May 23 00:01:11.326753 2026] [:error] [pid 15585:tid 15659] [client 3.104.119.140:56380] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env_copy"] [unique_id "ahB9xyKb-vB41AF-LC22xwAAAIw"]
[Sat May 23 00:01:11.387595 2026] [:error] [pid 15583:tid 15601] [client 3.104.119.140:56382] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.txt"] [unique_id "ahB9x3naOncRcIm17YVMKgAAAA0"]
[Sat May 23 00:01:11.458760 2026] [:error] [pid 15679:tid 15684] [client 3.104.119.140:56394] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.json"] [unique_id "ahB9xyh8tgGc38WJ-GyPOAAAAMM"]
[Sat May 23 00:01:11.518188 2026] [:error] [pid 15583:tid 15605] [client 3.104.119.140:56408] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.yaml"] [unique_id "ahB9x3naOncRcIm17YVMLAAAABE"]
[Sat May 23 00:01:11.579375 2026] [:error] [pid 58782:tid 58794] [client 3.104.119.140:56414] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.yml"] [unique_id "ahB9x4xsdTFafgO8vhRAEQAAAQo"]
[Sat May 23 00:01:11.640375 2026] [:error] [pid 58782:tid 58793] [client 3.104.119.140:56418] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/app/.env"] [unique_id "ahB9x4xsdTFafgO8vhRAEgAAAQk"]
[Sat May 23 00:01:11.708479 2026] [:error] [pid 58782:tid 58797] [client 3.104.119.140:56430] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/apps/.env"] [unique_id "ahB9x4xsdTFafgO8vhRAEwAAAQ0"]
[Sat May 23 00:01:11.778143 2026] [:error] [pid 58813:tid 58821] [client 3.104.119.140:56444] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "ahB9x56yyKWDKULhxJ2k1wAAAUU"]
[Sat May 23 00:01:11.856833 2026] [:error] [pid 58782:tid 58785] [client 3.104.119.140:56460] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/web/.env"] [unique_id "ahB9x4xsdTFafgO8vhRAFAAAAQE"]
[Sat May 23 00:01:11.920794 2026] [:error] [pid 15585:tid 15663] [client 3.104.119.140:56464] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/site/.env"] [unique_id "ahB9xyKb-vB41AF-LC22ygAAAJA"]
[Sat May 23 00:01:11.986948 2026] [:error] [pid 58782:tid 58802] [client 3.104.119.140:56470] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public/.env"] [unique_id "ahB9x4xsdTFafgO8vhRAFgAAARI"]
[Sat May 23 00:01:12.045400 2026] [:error] [pid 15585:tid 15658] [client 3.104.119.140:56484] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/.env"] [unique_id "ahB9yCKb-vB41AF-LC22ywAAAIs"]
[Sat May 23 00:01:12.115969 2026] [:error] [pid 15585:tid 15660] [client 3.104.119.140:56494] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "ahB9yCKb-vB41AF-LC22zAAAAI0"]
[Sat May 23 00:01:12.184922 2026] [:error] [pid 58782:tid 58791] [client 3.104.119.140:56506] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/server/.env"] [unique_id "ahB9yIxsdTFafgO8vhRAFwAAAQc"]
[Sat May 23 00:01:12.249054 2026] [:error] [pid 58782:tid 58806] [client 3.104.119.140:56516] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/frontend/.env"] [unique_id "ahB9yIxsdTFafgO8vhRAGAAAARY"]
[Sat May 23 00:01:12.315954 2026] [:error] [pid 15583:tid 15606] [client 3.104.119.140:56520] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/src/.env"] [unique_id "ahB9yHnaOncRcIm17YVMLgAAABI"]
[Sat May 23 00:01:12.382337 2026] [:error] [pid 15583:tid 15590] [client 3.104.119.140:56526] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/core/.env"] [unique_id "ahB9yHnaOncRcIm17YVMLwAAAAI"]
[Sat May 23 00:01:12.449032 2026] [:error] [pid 15583:tid 15588] [client 3.104.119.140:56528] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/core/app/.env"] [unique_id "ahB9yHnaOncRcIm17YVMMAAAAAA"]
[Sat May 23 00:01:12.514060 2026] [:error] [pid 15585:tid 15647] [client 3.104.119.140:56540] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/config/.env"] [unique_id "ahB9yCKb-vB41AF-LC22zQAAAIA"]
[Sat May 23 00:01:12.581539 2026] [:error] [pid 15679:tid 15705] [client 3.104.119.140:56552] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/private/.env"] [unique_id "ahB9yCh8tgGc38WJ-GyPOQAAANg"]
[Sat May 23 00:01:12.646090 2026] [:error] [pid 15583:tid 15611] [client 3.104.119.140:56554] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/application/.env"] [unique_id "ahB9yHnaOncRcIm17YVMMQAAABc"]
[Sat May 23 00:01:12.712397 2026] [:error] [pid 58782:tid 58801] [client 3.104.119.140:56562] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/bootstrap/.env"] [unique_id "ahB9yIxsdTFafgO8vhRAGgAAARE"]
[Sat May 23 00:01:12.776529 2026] [:error] [pid 15583:tid 15595] [client 3.104.119.140:56568] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/database/.env"] [unique_id "ahB9yHnaOncRcIm17YVMMgAAAAc"]
[Sat May 23 00:01:12.841486 2026] [:error] [pid 15583:tid 15609] [client 3.104.119.140:56570] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/storage/.env"] [unique_id "ahB9yHnaOncRcIm17YVMNQAAABU"]
[Sat May 23 00:01:12.915331 2026] [:error] [pid 15585:tid 15671] [client 3.104.119.140:56580] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/var/www/.env"] [unique_id "ahB9yCKb-vB41AF-LC22zgAAAJg"]
[Sat May 23 00:01:12.978505 2026] [:error] [pid 15585:tid 15653] [client 3.104.119.140:56592] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/var/www/html/.env"] [unique_id "ahB9yCKb-vB41AF-LC22zwAAAIY"]
[Sat May 23 00:01:13.058988 2026] [:error] [pid 58782:tid 58787] [client 3.104.119.140:56596] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/current/.env"] [unique_id "ahB9yYxsdTFafgO8vhRAHAAAAQM"]
[Sat May 23 00:01:13.137049 2026] [:error] [pid 15583:tid 15606] [client 3.104.119.140:56612] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/release/.env"] [unique_id "ahB9yXnaOncRcIm17YVMNwAAABI"]
[Sat May 23 00:01:13.196482 2026] [:error] [pid 15679:tid 15700] [client 3.104.119.140:56616] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/releases/.env"] [unique_id "ahB9ySh8tgGc38WJ-GyPOwAAANM"]
[Sat May 23 00:01:13.261684 2026] [:error] [pid 15679:tid 15695] [client 3.104.119.140:56632] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/shared/.env"] [unique_id "ahB9ySh8tgGc38WJ-GyPPAAAAM4"]
[Sat May 23 00:01:13.324784 2026] [:error] [pid 58813:tid 58823] [client 3.104.119.140:56636] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/deploy/.env"] [unique_id "ahB9yZ6yyKWDKULhxJ2k2QAAAUc"]
[Sat May 23 00:01:13.387915 2026] [:error] [pid 15583:tid 15604] [client 3.104.119.140:56650] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/build/.env"] [unique_id "ahB9yXnaOncRcIm17YVMOAAAABA"]
[Sat May 23 00:01:13.451447 2026] [:error] [pid 15585:tid 15666] [client 3.104.119.140:56654] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/dist/.env"] [unique_id "ahB9ySKb-vB41AF-LC220AAAAJM"]
[Sat May 23 00:01:13.525921 2026] [:error] [pid 58782:tid 58788] [client 3.104.119.140:56668] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/public_html/.env"] [unique_id "ahB9yYxsdTFafgO8vhRAHgAAAQQ"]
[Sat May 23 00:01:13.591265 2026] [:error] [pid 58782:tid 58807] [client 3.104.119.140:56684] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/htdocs/.env"] [unique_id "ahB9yYxsdTFafgO8vhRAHwAAARc"]
[Sat May 23 00:01:13.650396 2026] [:error] [pid 58782:tid 58797] [client 3.104.119.140:56692] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/www/.env"] [unique_id "ahB9yYxsdTFafgO8vhRAIAAAAQ0"]
[Sat May 23 00:01:13.718682 2026] [:error] [pid 15583:tid 15588] [client 3.104.119.140:56700] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/html/.env"] [unique_id "ahB9yXnaOncRcIm17YVMOQAAAAA"]
[Sat May 23 00:01:13.778791 2026] [:error] [pid 15585:tid 15669] [client 3.104.119.140:56708] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/live/.env"] [unique_id "ahB9ySKb-vB41AF-LC220QAAAJY"]
[Sat May 23 00:01:13.841486 2026] [:error] [pid 15583:tid 15593] [client 3.104.119.140:32912] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/prod/.env"] [unique_id "ahB9yXnaOncRcIm17YVMOgAAAAU"]
[Sat May 23 00:01:13.912929 2026] [:error] [pid 15583:tid 15611] [client 3.104.119.140:32914] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/dev/.env"] [unique_id "ahB9yXnaOncRcIm17YVMOwAAABc"]
[Sat May 23 00:01:13.972053 2026] [:error] [pid 15583:tid 15595] [client 3.104.119.140:32930] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/staging/.env"] [unique_id "ahB9yXnaOncRcIm17YVMPAAAAAc"]
[Sat May 23 00:01:14.038155 2026] [:error] [pid 58782:tid 58795] [client 3.104.119.140:32934] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/opt/.env"] [unique_id "ahB9yoxsdTFafgO8vhRAIgAAAQs"]
[Sat May 23 00:01:14.108973 2026] [:error] [pid 58782:tid 58791] [client 3.104.119.140:32942] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/laravel/.env"] [unique_id "ahB9yoxsdTFafgO8vhRAIwAAAQc"]
[Sat May 23 00:01:14.179789 2026] [:error] [pid 58782:tid 58806] [client 3.104.119.140:32954] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/symfony/.env"] [unique_id "ahB9yoxsdTFafgO8vhRAJAAAARY"]
[Sat May 23 00:01:14.271749 2026] [:error] [pid 15583:tid 15591] [client 3.104.119.140:32964] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/wordpress/.env"] [unique_id "ahB9ynnaOncRcIm17YVMPgAAAAM"]
[Sat May 23 00:01:14.343140 2026] [:error] [pid 15583:tid 15603] [client 3.104.119.140:32974] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/wp/.env"] [unique_id "ahB9ynnaOncRcIm17YVMPwAAAA8"]
[Sat May 23 00:01:14.406460 2026] [:error] [pid 15583:tid 15597] [client 3.104.119.140:32982] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/.env"] [unique_id "ahB9ynnaOncRcIm17YVMQAAAAAk"]
[Sat May 23 00:01:14.472316 2026] [:error] [pid 15585:tid 15654] [client 3.104.119.140:32990] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/drupal/.env"] [unique_id "ahB9yiKb-vB41AF-LC220wAAAIc"]
[Sat May 23 00:01:14.533471 2026] [:error] [pid 15679:tid 15694] [client 3.104.119.140:33004] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/joomla/.env"] [unique_id "ahB9yih8tgGc38WJ-GyPPwAAAM0"]
[Sat May 23 00:01:14.598114 2026] [:error] [pid 15679:tid 15697] [client 3.104.119.140:33012] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/magento/.env"] [unique_id "ahB9yih8tgGc38WJ-GyPQAAAANA"]
[Sat May 23 00:01:14.661486 2026] [:error] [pid 15679:tid 15704] [client 3.104.119.140:33016] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/shopify/.env"] [unique_id "ahB9yih8tgGc38WJ-GyPQQAAANc"]
[Sat May 23 00:01:14.727905 2026] [:error] [pid 15679:tid 15692] [client 3.104.119.140:33020] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/prestashop/.env"] [unique_id "ahB9yih8tgGc38WJ-GyPQgAAAMs"]
[Sat May 23 00:01:14.795991 2026] [:error] [pid 15679:tid 15688] [client 3.104.119.140:33030] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/codeigniter/.env"] [unique_id "ahB9yih8tgGc38WJ-GyPQwAAAMc"]
[Sat May 23 00:01:14.860932 2026] [:error] [pid 58782:tid 58801] [client 3.104.119.140:33034] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/cakephp/.env"] [unique_id "ahB9yoxsdTFafgO8vhRAJgAAARE"]
[Sat May 23 00:01:14.939081 2026] [:error] [pid 15585:tid 15667] [client 3.104.119.140:33046] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/yii/.env"] [unique_id "ahB9yiKb-vB41AF-LC221QAAAJQ"]
[Sat May 23 00:01:15.000871 2026] [:error] [pid 15585:tid 15661] [client 3.104.119.140:33048] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/laravel5/.env"] [unique_id "ahB9yyKb-vB41AF-LC221gAAAI4"]
[Sat May 23 00:01:15.067697 2026] [:error] [pid 15585:tid 15652] [client 3.104.119.140:33054] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/v1/.env"] [unique_id "ahB9yyKb-vB41AF-LC221wAAAIU"]
[Sat May 23 00:01:15.146381 2026] [:error] [pid 15585:tid 15658] [client 3.104.119.140:33060] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/v2/.env"] [unique_id "ahB9yyKb-vB41AF-LC222AAAAIs"]
[Sat May 23 00:01:15.213404 2026] [:error] [pid 15585:tid 15660] [client 3.104.119.140:33070] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/v3/.env"] [unique_id "ahB9yyKb-vB41AF-LC222QAAAI0"]
[Sat May 23 00:01:15.329675 2026] [:error] [pid 15585:tid 15657] [client 3.104.119.140:33078] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/v1/.env"] [unique_id "ahB9yyKb-vB41AF-LC222gAAAIo"]
[Sat May 23 00:01:15.430139 2026] [:error] [pid 15585:tid 15650] [client 3.104.119.140:33080] [client 3.104.119.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/v2/.env"] [unique_id "ahB9yyKb-vB41AF-LC222wAAAIM"]
[Sat May 23 10:58:47.796997 2026] [:error] [pid 30940:tid 30964] [client 31.59.129.102:49676] [client 31.59.129.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env"] [unique_id "ahEX55qUP2XZmzp7RDqsKwAAAA8"]
[Sat May 23 10:58:49.095937 2026] [:error] [pid 31039:tid 31061] [client 31.59.129.102:49720] [client 31.59.129.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.development"] [unique_id "ahEX6aIYDYo8WvA5zLKxpQAAANQ"]
[Sat May 23 10:58:49.099816 2026] [:error] [pid 25876:tid 25885] [client 31.59.129.102:49750] [client 31.59.129.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/api/.env"] [unique_id "ahEX6QSpWUCKPezIBJDstAAAAQc"]
[Sat May 23 10:58:49.100444 2026] [:error] [pid 25876:tid 25878] [client 31.59.129.102:49696] [client 31.59.129.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.local"] [unique_id "ahEX6QSpWUCKPezIBJDstQAAAQA"]
[Sat May 23 10:58:49.100808 2026] [:error] [pid 25876:tid 25889] [client 31.59.129.102:49734] [client 31.59.129.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/backend/.env"] [unique_id "ahEX6QSpWUCKPezIBJDstgAAAQs"]
[Sat May 23 10:58:49.104517 2026] [:error] [pid 25876:tid 25897] [client 31.59.129.102:49706] [client 31.59.129.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.env.production"] [unique_id "ahEX6QSpWUCKPezIBJDstwAAARM"]
[Sat May 23 13:38:34.864918 2026] [:error] [pid 30941:tid 30985] [client 103.2.5.223:64408] [client 103.2.5.223] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 103.2.5.223, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ahE9WnTIgjSDhiZmvlV04QAAAEk"]
[Sat May 23 13:38:34.869623 2026] [:error] [pid 30941:tid 30985] [client 103.2.5.223:64408] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 23 15:40:23.113298 2026] [:error] [pid 30940:tid 30961] [client 8.228.69.57:51645] [client 8.228.69.57] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.228.69.57, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ahFZ55qUP2XZmzp7RDrjJAAAAAw"]
[Sat May 23 15:40:23.116767 2026] [:error] [pid 30940:tid 30961] [client 8.228.69.57:51645] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sat May 23 15:40:26.642814 2026] [:error] [pid 30940:tid 30973] [client 8.228.69.57:51645] [client 8.228.69.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahFZ6pqUP2XZmzp7RDrjLQAAABg"]
[Sat May 23 15:40:27.110372 2026] [:error] [pid 31039:tid 31060] [client 8.228.69.57:58965] [client 8.228.69.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahFZ66IYDYo8WvA5zLINYAAAANM"]
[Sat May 23 15:40:27.576488 2026] [:error] [pid 31039:tid 31057] [client 8.228.69.57:53284] [client 8.228.69.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahFZ66IYDYo8WvA5zLINYQAAANA"]
[Sat May 23 15:40:28.137126 2026] [:error] [pid 31039:tid 31047] [client 8.228.69.57:55397] [client 8.228.69.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahFZ7KIYDYo8WvA5zLINZQAAAMY"]
[Sun May 24 12:59:21.315841 2026] [:error] [pid 2639:tid 2642] [client 20.63.33.98:30650] File does not exist: /usr/local/apache/htdocs/suspended-page/revealability.php
[Sun May 24 12:59:21.541178 2026] [:error] [pid 2639:tid 2651] [client 20.63.33.98:30650] File does not exist: /usr/local/apache/htdocs/suspended-page/ok.php
[Sun May 24 12:59:21.796103 2026] [:error] [pid 2639:tid 2660] [client 20.63.33.98:30650] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Sun May 24 12:59:22.027253 2026] [:error] [pid 2639:tid 2657] [client 20.63.33.98:30650] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Sun May 24 12:59:22.244543 2026] [:error] [pid 2639:tid 2643] [client 20.63.33.98:30650] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Sun May 24 12:59:22.486489 2026] [:error] [pid 2639:tid 2649] [client 20.63.33.98:30650] File does not exist: /usr/local/apache/htdocs/suspended-page/wehrman.php
[Sun May 24 12:59:22.703735 2026] [:error] [pid 2639:tid 2656] [client 20.63.33.98:30650] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-thi.php
[Sun May 24 12:59:22.920829 2026] [:error] [pid 2639:tid 2655] [client 20.63.33.98:30650] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Sun May 24 12:59:23.150382 2026] [:error] [pid 2639:tid 2660] [client 20.63.33.98:30650] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-trackback.php
[Sun May 24 12:59:23.531088 2026] [:error] [pid 2639:tid 2653] [client 20.63.33.98:30650] File does not exist: /usr/local/apache/htdocs/suspended-page/333.php
[Sun May 24 12:59:23.756935 2026] [:error] [pid 2639:tid 2643] [client 20.63.33.98:30650] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ahKFq0zQncQTd0Z0Oe8gWwAAAQI"]
[Sun May 24 12:59:24.242444 2026] [:error] [pid 49744:tid 49758] [client 20.63.33.98:30647] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ahKFrDsE5kPdFpUbbHGadAAAAMw"]
[Sun May 24 12:59:24.725732 2026] [:error] [pid 49775:tid 49787] [client 20.63.33.98:52728] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ahKFrIvZb8G6T8WpI1hb6gAAAAo"]
[Sun May 24 12:59:25.324604 2026] [:error] [pid 49775:tid 49789] [client 20.63.33.98:30625] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/edit.php"] [unique_id "ahKFrYvZb8G6T8WpI1hb7AAAAAw"]
[Sun May 24 12:59:25.839332 2026] [:error] [pid 49775:tid 49785] [client 20.63.33.98:52683] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ahKFrYvZb8G6T8WpI1hb7gAAAAg"]
[Sun May 24 12:59:26.470275 2026] [:error] [pid 23497:tid 23502] [client 20.63.33.98:63411] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ahKFriPlV47QcYwd2v-B3gAAAUI"]
[Sun May 24 12:59:26.969154 2026] [:error] [pid 23497:tid 23521] [client 20.63.33.98:44532] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ahKFriPlV47QcYwd2v-B3wAAAVU"]
[Sun May 24 12:59:27.456194 2026] [:error] [pid 23497:tid 23524] [client 20.63.33.98:30629] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ahKFryPlV47QcYwd2v-B4gAAAVg"]
[Sun May 24 12:59:28.174760 2026] [:error] [pid 23497:tid 23515] [client 20.63.33.98:54678] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "ahKFsCPlV47QcYwd2v-B5AAAAU8"]
[Sun May 24 12:59:28.809191 2026] [:error] [pid 23497:tid 23508] [client 20.63.33.98:37973] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "ahKFsCPlV47QcYwd2v-B5wAAAUg"]
[Sun May 24 12:59:29.394735 2026] [:error] [pid 23497:tid 23505] [client 20.63.33.98:30618] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "ahKFsSPlV47QcYwd2v-B6gAAAUU"]
[Sun May 24 12:59:30.059461 2026] [:error] [pid 49744:tid 49762] [client 20.63.33.98:52673] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "ahKFsjsE5kPdFpUbbHGadQAAANA"]
[Sun May 24 12:59:30.782446 2026] [:error] [pid 23497:tid 23514] [client 20.63.33.98:44525] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-der.php"] [unique_id "ahKFsiPlV47QcYwd2v-B8QAAAU4"]
[Sun May 24 12:59:31.486588 2026] [:error] [pid 23497:tid 23501] [client 20.63.33.98:63390] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-der.php"] [unique_id "ahKFsyPlV47QcYwd2v-B9AAAAUE"]
[Sun May 24 12:59:31.992760 2026] [:error] [pid 23497:tid 23511] [client 20.63.33.98:54692] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-der.php"] [unique_id "ahKFsyPlV47QcYwd2v-B9gAAAUs"]
[Sun May 24 12:59:32.750058 2026] [:error] [pid 23497:tid 23510] [client 20.63.33.98:30621] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-der.php"] [unique_id "ahKFtCPlV47QcYwd2v-B-AAAAUo"]
[Sun May 24 12:59:33.387175 2026] [:error] [pid 23497:tid 23524] [client 20.63.33.98:52713] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ahKFtSPlV47QcYwd2v-B_AAAAVg"]
[Sun May 24 12:59:33.938552 2026] [:error] [pid 23497:tid 23508] [client 20.63.33.98:37969] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ahKFtSPlV47QcYwd2v-CAAAAAUg"]
[Sun May 24 12:59:34.601891 2026] [:error] [pid 23497:tid 23511] [client 20.63.33.98:44481] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ahKFtiPlV47QcYwd2v-CBAAAAUs"]
[Sun May 24 12:59:35.083957 2026] [:error] [pid 23497:tid 23512] [client 20.63.33.98:63360] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ahKFtyPlV47QcYwd2v-CBwAAAUw"]
[Sun May 24 12:59:35.562911 2026] [:error] [pid 49775:tid 49782] [client 20.63.33.98:44510] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "ahKFt4vZb8G6T8WpI1hb-wAAAAU"]
[Sun May 24 12:59:36.069910 2026] [:error] [pid 23497:tid 23515] [client 20.63.33.98:48764] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "ahKFuCPlV47QcYwd2v-CCgAAAU8"]
[Sun May 24 12:59:36.551926 2026] [:error] [pid 49775:tid 49798] [client 20.63.33.98:37994] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "ahKFuIvZb8G6T8WpI1hb_QAAABU"]
[Sun May 24 12:59:37.033722 2026] [:error] [pid 49775:tid 49787] [client 20.63.33.98:54705] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asasx.php"] [unique_id "ahKFuYvZb8G6T8WpI1hb_gAAAAo"]
[Sun May 24 12:59:37.482364 2026] [:error] [pid 49744:tid 49748] [client 20.63.33.98:54682] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "ahKFuTsE5kPdFpUbbHGadwAAAMI"]
[Sun May 24 12:59:38.025997 2026] [:error] [pid 49688:tid 49700] [client 20.63.33.98:30614] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "ahKFumYoQ9V6a_4pBsiG7QAAAEk"]
[Sun May 24 12:59:38.518900 2026] [:error] [pid 23497:tid 23523] [client 20.63.33.98:37993] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "ahKFuiPlV47QcYwd2v-CDgAAAVc"]
[Sun May 24 12:59:39.079707 2026] [:error] [pid 49775:tid 49793] [client 20.63.33.98:63401] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "ahKFu4vZb8G6T8WpI1hcAgAAABA"]
[Sun May 24 12:59:39.544205 2026] [:error] [pid 49688:tid 49704] [client 20.63.33.98:52698] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app.php"] [unique_id "ahKFu2YoQ9V6a_4pBsiG8AAAAE0"]
[Sun May 24 12:59:40.064872 2026] [:error] [pid 49775:tid 49800] [client 20.63.33.98:48739] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app.php"] [unique_id "ahKFvIvZb8G6T8WpI1hcBQAAABc"]
[Sun May 24 12:59:40.598818 2026] [:error] [pid 49775:tid 49780] [client 20.63.33.98:30601] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app.php"] [unique_id "ahKFvIvZb8G6T8WpI1hcCQAAAAM"]
[Sun May 24 12:59:41.120018 2026] [:error] [pid 49775:tid 49777] [client 20.63.33.98:48733] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app.php"] [unique_id "ahKFvYvZb8G6T8WpI1hcCwAAAAA"]
[Sun May 24 12:59:41.589705 2026] [:error] [pid 49744:tid 49761] [client 20.63.33.98:48758] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahKFvTsE5kPdFpUbbHGaeQAAAM8"]
[Sun May 24 12:59:42.098019 2026] [:error] [pid 49688:tid 49713] [client 20.63.33.98:48757] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahKFvmYoQ9V6a_4pBsiG8QAAAFY"]
[Sun May 24 12:59:42.678082 2026] [:error] [pid 49689:tid 49734] [client 20.63.33.98:54661] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahKFvgaxiY3NxLUD97VHOwAAAJA"]
[Sun May 24 12:59:43.165214 2026] [:error] [pid 49775:tid 49778] [client 20.63.33.98:52723] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "ahKFv4vZb8G6T8WpI1hcDwAAAAE"]
[Sun May 24 12:59:43.675975 2026] [:error] [pid 49689:tid 49719] [client 20.63.33.98:63368] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "ahKFvwaxiY3NxLUD97VHPAAAAIE"]
[Sun May 24 12:59:44.161414 2026] [:error] [pid 49744:tid 49746] [client 20.63.33.98:54703] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "ahKFwDsE5kPdFpUbbHGafQAAAMA"]
[Sun May 24 12:59:44.615564 2026] [:error] [pid 49744:tid 49763] [client 20.63.33.98:52691] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "ahKFwDsE5kPdFpUbbHGafwAAANE"]
[Sun May 24 12:59:45.107686 2026] [:error] [pid 49689:tid 49726] [client 20.63.33.98:54684] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "ahKFwQaxiY3NxLUD97VHPgAAAIg"]
[Sun May 24 12:59:45.655571 2026] [:error] [pid 49689:tid 49736] [client 20.63.33.98:30641] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ahKFwQaxiY3NxLUD97VHPwAAAJI"]
[Sun May 24 12:59:46.204183 2026] [:error] [pid 49744:tid 49769] [client 20.63.33.98:30611] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ahKFwjsE5kPdFpUbbHGaggAAANc"]
[Sun May 24 12:59:46.683696 2026] [:error] [pid 49688:tid 49711] [client 20.63.33.98:30652] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ahKFwmYoQ9V6a_4pBsiG8wAAAFQ"]
[Sun May 24 12:59:47.124716 2026] [:error] [pid 49689:tid 49739] [client 20.63.33.98:63423] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ahKFwwaxiY3NxLUD97VHRAAAAJU"]
[Sun May 24 12:59:47.709635 2026] [:error] [pid 23497:tid 23519] [client 20.63.33.98:48745] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "ahKFwyPlV47QcYwd2v-CFAAAAVM"]
[Sun May 24 12:59:48.383812 2026] [:error] [pid 2639:tid 2644] [client 20.63.33.98:52716] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "ahKFxEzQncQTd0Z0Oe8gnwAAAQM"]
[Sun May 24 12:59:49.073478 2026] [:error] [pid 49744:tid 49748] [client 20.63.33.98:30649] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "ahKFxTsE5kPdFpUbbHGahgAAAMI"]
[Sun May 24 12:59:49.550488 2026] [:error] [pid 2639:tid 2660] [client 20.63.33.98:48737] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "ahKFxUzQncQTd0Z0Oe8goQAAARM"]
[Sun May 24 12:59:50.040994 2026] [:error] [pid 2639:tid 2648] [client 20.63.33.98:37964] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wefile.php"] [unique_id "ahKFxkzQncQTd0Z0Oe8gowAAAQc"]
[Sun May 24 12:59:50.639220 2026] [:error] [pid 23497:tid 23506] [client 20.63.33.98:44528] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wefile.php"] [unique_id "ahKFxiPlV47QcYwd2v-CGAAAAUY"]
[Sun May 24 12:59:51.089185 2026] [:error] [pid 49744:tid 49756] [client 20.63.33.98:30624] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wefile.php"] [unique_id "ahKFxzsE5kPdFpUbbHGahwAAAMo"]
[Sun May 24 12:59:51.688797 2026] [:error] [pid 23497:tid 23512] [client 20.63.33.98:63414] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wefile.php"] [unique_id "ahKFxyPlV47QcYwd2v-CGgAAAUw"]
[Sun May 24 12:59:52.209845 2026] [:error] [pid 49689:tid 49726] [client 20.63.33.98:52703] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "ahKFyAaxiY3NxLUD97VHTQAAAIg"]
[Sun May 24 12:59:52.677921 2026] [:error] [pid 49775:tid 49799] [client 20.63.33.98:30594] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "ahKFyIvZb8G6T8WpI1hcEgAAABY"]
[Sun May 24 12:59:53.264867 2026] [:error] [pid 23497:tid 23507] [client 20.63.33.98:39686] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "ahKFySPlV47QcYwd2v-CGwAAAUc"]
[Sun May 24 12:59:53.834401 2026] [:error] [pid 49744:tid 49758] [client 20.63.33.98:30597] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file30.php"] [unique_id "ahKFyTsE5kPdFpUbbHGaiwAAAMw"]
[Sun May 24 12:59:54.331220 2026] [:error] [pid 2639:tid 2649] [client 20.63.33.98:63418] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "ahKFykzQncQTd0Z0Oe8gqAAAAQg"]
[Sun May 24 12:59:55.018505 2026] [:error] [pid 49775:tid 49793] [client 20.63.33.98:44512] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "ahKFy4vZb8G6T8WpI1hcEwAAABA"]
[Sun May 24 12:59:55.817424 2026] [:error] [pid 23497:tid 23504] [client 20.63.33.98:54683] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "ahKFyyPlV47QcYwd2v-CHQAAAUQ"]
[Sun May 24 12:59:56.421141 2026] [:error] [pid 49688:tid 49714] [client 20.63.33.98:30645] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file4.php"] [unique_id "ahKFzGYoQ9V6a_4pBsiG9wAAAFc"]
[Sun May 24 12:59:56.949309 2026] [:error] [pid 23497:tid 23516] [client 20.63.33.98:48706] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ahKFzCPlV47QcYwd2v-CIAAAAVA"]
[Sun May 24 12:59:57.445401 2026] [:error] [pid 23497:tid 23505] [client 20.63.33.98:37979] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ahKFzSPlV47QcYwd2v-CIQAAAUU"]
[Sun May 24 12:59:58.020528 2026] [:error] [pid 23497:tid 23503] [client 20.63.33.98:48722] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ahKFziPlV47QcYwd2v-CIgAAAUM"]
[Sun May 24 12:59:58.688879 2026] [:error] [pid 49688:tid 49708] [client 20.63.33.98:54717] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ahKFzmYoQ9V6a_4pBsiG_AAAAFE"]
[Sun May 24 12:59:59.504963 2026] [:error] [pid 49688:tid 49712] [client 20.63.33.98:37982] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ahKFz2YoQ9V6a_4pBsiG_gAAAFU"]
[Sun May 24 13:00:00.111999 2026] [:error] [pid 49689:tid 49738] [client 20.63.33.98:54657] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ahKF0AaxiY3NxLUD97VHUwAAAJQ"]
[Sun May 24 13:00:01.088592 2026] [:error] [pid 23497:tid 23520] [client 20.63.33.98:52710] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ahKF0SPlV47QcYwd2v-CJQAAAVQ"]
[Sun May 24 13:00:01.690883 2026] [:error] [pid 49744:tid 49746] [client 20.63.33.98:63397] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ahKF0TsE5kPdFpUbbHGajwAAAMA"]
[Sun May 24 13:00:02.322560 2026] [:error] [pid 23497:tid 23521] [client 20.63.33.98:44503] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "ahKF0iPlV47QcYwd2v-CKAAAAVU"]
[Sun May 24 13:00:02.954298 2026] [:error] [pid 49775:tid 49796] [client 20.63.33.98:63410] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "ahKF0ovZb8G6T8WpI1hcFgAAABM"]
[Sun May 24 13:00:03.700170 2026] [:error] [pid 49688:tid 49699] [client 20.63.33.98:52706] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "ahKF02YoQ9V6a_4pBsiHAgAAAEg"]
[Sun May 24 13:00:04.563495 2026] [:error] [pid 49689:tid 49726] [client 20.63.33.98:60549] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-access.php"] [unique_id "ahKF1AaxiY3NxLUD97VHVwAAAIg"]
[Sun May 24 13:00:05.210967 2026] [:error] [pid 49688:tid 49705] [client 20.63.33.98:63398] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "ahKF1WYoQ9V6a_4pBsiHBAAAAE4"]
[Sun May 24 13:00:05.766317 2026] [:error] [pid 49688:tid 49712] [client 20.63.33.98:56354] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "ahKF1WYoQ9V6a_4pBsiHBgAAAFU"]
[Sun May 24 13:00:06.292819 2026] [:error] [pid 2639:tid 2662] [client 20.63.33.98:63408] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "ahKF1kzQncQTd0Z0Oe8grgAAARU"]
[Sun May 24 13:00:06.934160 2026] [:error] [pid 23497:tid 23519] [client 20.63.33.98:30600] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "ahKF1iPlV47QcYwd2v-CKgAAAVM"]
[Sun May 24 13:00:07.445072 2026] [:error] [pid 23497:tid 23500] [client 20.63.33.98:37972] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ahKF1yPlV47QcYwd2v-CLAAAAUA"]
[Sun May 24 13:00:07.942383 2026] [:error] [pid 23497:tid 23511] [client 20.63.33.98:48742] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ahKF1yPlV47QcYwd2v-CLQAAAUs"]
[Sun May 24 13:00:08.411851 2026] [:error] [pid 49689:tid 49732] [client 20.63.33.98:63412] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ahKF2AaxiY3NxLUD97VHWgAAAI4"]
[Sun May 24 13:00:08.945228 2026] [:error] [pid 23497:tid 23512] [client 20.63.33.98:63376] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ahKF2CPlV47QcYwd2v-CMAAAAUw"]
[Sun May 24 13:00:09.414915 2026] [:error] [pid 23497:tid 23502] [client 20.63.33.98:48760] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-wz.php"] [unique_id "ahKF2SPlV47QcYwd2v-CMQAAAUI"]
[Sun May 24 13:00:09.867938 2026] [:error] [pid 49775:tid 49788] [client 20.63.33.98:54674] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-wz.php"] [unique_id "ahKF2YvZb8G6T8WpI1hcGwAAAAs"]
[Sun May 24 13:00:10.431903 2026] [:error] [pid 49689:tid 49735] [client 20.63.33.98:54715] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-wz.php"] [unique_id "ahKF2gaxiY3NxLUD97VHXQAAAJE"]
[Sun May 24 13:00:11.053945 2026] [:error] [pid 49775:tid 49798] [client 20.63.33.98:44516] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-wz.php"] [unique_id "ahKF24vZb8G6T8WpI1hcHAAAABU"]
[Sun May 24 13:00:11.521418 2026] [:error] [pid 49689:tid 49734] [client 20.63.33.98:30628] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "ahKF2waxiY3NxLUD97VHYAAAAJA"]
[Sun May 24 13:00:12.045204 2026] [:error] [pid 49744:tid 49758] [client 20.63.33.98:39740] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "ahKF3DsE5kPdFpUbbHGalAAAAMw"]
[Sun May 24 13:00:12.611404 2026] [:error] [pid 49689:tid 49736] [client 20.63.33.98:30617] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "ahKF3AaxiY3NxLUD97VHZAAAAJI"]
[Sun May 24 13:00:13.125490 2026] [:error] [pid 49775:tid 49795] [client 20.63.33.98:63379] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "ahKF3YvZb8G6T8WpI1hcHgAAABI"]
[Sun May 24 13:00:13.789231 2026] [:error] [pid 49689:tid 49730] [client 20.63.33.98:63365] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ahKF3QaxiY3NxLUD97VHaAAAAIw"]
[Sun May 24 13:00:14.493862 2026] [:error] [pid 49689:tid 49739] [client 20.63.33.98:63384] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ahKF3gaxiY3NxLUD97VHagAAAJU"]
[Sun May 24 13:00:15.079582 2026] [:error] [pid 49689:tid 49737] [client 20.63.33.98:52676] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ahKF3waxiY3NxLUD97VHbAAAAJM"]
[Sun May 24 13:00:15.693787 2026] [:error] [pid 49689:tid 49723] [client 20.63.33.98:44517] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ahKF3waxiY3NxLUD97VHcAAAAIU"]
[Sun May 24 13:00:16.185186 2026] [:error] [pid 23497:tid 23501] [client 20.63.33.98:48723] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ahKF4CPlV47QcYwd2v-CMgAAAUE"]
[Sun May 24 13:00:16.818758 2026] [:error] [pid 49689:tid 49740] [client 20.63.33.98:63369] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ahKF4AaxiY3NxLUD97VHcwAAAJY"]
[Sun May 24 13:00:17.430937 2026] [:error] [pid 49688:tid 49698] [client 20.63.33.98:37974] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ahKF4WYoQ9V6a_4pBsiHEAAAAEc"]
[Sun May 24 13:00:18.012835 2026] [:error] [pid 49688:tid 49699] [client 20.63.33.98:63366] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ahKF4mYoQ9V6a_4pBsiHEQAAAEg"]
[Sun May 24 13:00:18.539507 2026] [:error] [pid 2639:tid 2657] [client 20.63.33.98:56338] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccou.php"] [unique_id "ahKF4kzQncQTd0Z0Oe8gsAAAARA"]
[Sun May 24 13:00:19.045526 2026] [:error] [pid 49689:tid 49736] [client 20.63.33.98:56332] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccou.php"] [unique_id "ahKF4waxiY3NxLUD97VHdgAAAJI"]
[Sun May 24 13:00:19.711744 2026] [:error] [pid 49689:tid 49739] [client 20.63.33.98:54694] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccou.php"] [unique_id "ahKF4waxiY3NxLUD97VHdwAAAJU"]
[Sun May 24 13:00:20.273219 2026] [:error] [pid 23497:tid 23522] [client 20.63.33.98:63402] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccou.php"] [unique_id "ahKF5CPlV47QcYwd2v-COAAAAVY"]
[Sun May 24 13:00:20.809901 2026] [:error] [pid 23497:tid 23506] [client 20.63.33.98:54709] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "ahKF5CPlV47QcYwd2v-COQAAAUY"]
[Sun May 24 13:00:21.398872 2026] [:error] [pid 2639:tid 2655] [client 20.63.33.98:54688] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "ahKF5UzQncQTd0Z0Oe8gsgAAAQ4"]
[Sun May 24 13:00:22.074724 2026] [:error] [pid 49689:tid 49727] [client 20.63.33.98:30606] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "ahKF5gaxiY3NxLUD97VHeQAAAIk"]
[Sun May 24 13:00:22.692298 2026] [:error] [pid 2639:tid 2663] [client 20.63.33.98:48726] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "ahKF5kzQncQTd0Z0Oe8gtAAAARY"]
[Sun May 24 13:00:23.193827 2026] [:error] [pid 2639:tid 2650] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/lib.php
[Sun May 24 13:00:23.441196 2026] [:error] [pid 2639:tid 2653] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/yellow.php
[Sun May 24 13:00:23.688613 2026] [:error] [pid 2639:tid 2656] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Sun May 24 13:00:23.942961 2026] [:error] [pid 2639:tid 2654] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-firewall.php
[Sun May 24 13:00:24.201557 2026] [:error] [pid 2639:tid 2659] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/fun.php
[Sun May 24 13:00:24.450250 2026] [:error] [pid 2639:tid 2649] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/drykl.php
[Sun May 24 13:00:24.813038 2026] [:error] [pid 2639:tid 2647] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/sys.php
[Sun May 24 13:00:25.068082 2026] [:error] [pid 2639:tid 2658] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Sun May 24 13:00:25.316563 2026] [:error] [pid 2639:tid 2646] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/shell20211028.php
[Sun May 24 13:00:25.564437 2026] [:error] [pid 2639:tid 2641] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-ver.php
[Sun May 24 13:00:25.814042 2026] [:error] [pid 2639:tid 2644] [client 20.63.33.98:30638] File does not exist: /usr/local/apache/htdocs/suspended-page/lala.php
[Sun May 24 13:00:26.064148 2026] [:error] [pid 2639:tid 2651] [client 20.63.33.98:30638] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "ahKF6kzQncQTd0Z0Oe8gwgAAAQo"]
[Sun May 24 13:00:26.596882 2026] [:error] [pid 23497:tid 23500] [client 20.63.33.98:52715] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "ahKF6iPlV47QcYwd2v-CPwAAAUA"]
[Sun May 24 13:00:27.091599 2026] [:error] [pid 23497:tid 23522] [client 20.63.33.98:44511] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "ahKF6yPlV47QcYwd2v-CQAAAAVY"]
[Sun May 24 13:00:27.846331 2026] [:error] [pid 2639:tid 2645] [client 20.63.33.98:48730] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sbhu.php"] [unique_id "ahKF60zQncQTd0Z0Oe8gxAAAAQQ"]
[Sun May 24 13:00:28.429045 2026] [:error] [pid 2639:tid 2655] [client 20.63.33.98:63389] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-sing.php"] [unique_id "ahKF7EzQncQTd0Z0Oe8gxQAAAQ4"]
[Sun May 24 13:00:29.093419 2026] [:error] [pid 23497:tid 23512] [client 20.63.33.98:54665] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-sing.php"] [unique_id "ahKF7SPlV47QcYwd2v-CRAAAAUw"]
[Sun May 24 13:00:29.573049 2026] [:error] [pid 23497:tid 23520] [client 20.63.33.98:63417] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-sing.php"] [unique_id "ahKF7SPlV47QcYwd2v-CRgAAAVQ"]
[Sun May 24 13:00:30.124968 2026] [:error] [pid 49688:tid 49694] [client 20.63.33.98:54693] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-sing.php"] [unique_id "ahKF7mYoQ9V6a_4pBsiHFAAAAEM"]
[Sun May 24 13:00:30.731162 2026] [:error] [pid 49688:tid 49708] [client 20.63.33.98:63417] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "ahKF7mYoQ9V6a_4pBsiHFQAAAFE"]
[Sun May 24 13:00:31.217048 2026] [:error] [pid 23497:tid 23501] [client 20.63.33.98:48754] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "ahKF7yPlV47QcYwd2v-CTwAAAUE"]
[Sun May 24 13:00:31.818552 2026] [:error] [pid 23497:tid 23515] [client 20.63.33.98:44514] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "ahKF7yPlV47QcYwd2v-CUAAAAU8"]
[Sun May 24 13:00:32.287715 2026] [:error] [pid 49688:tid 49713] [client 20.63.33.98:39702] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file59.php"] [unique_id "ahKF8GYoQ9V6a_4pBsiHFgAAAFY"]
[Sun May 24 13:00:32.818976 2026] [:error] [pid 49775:tid 49782] [client 20.63.33.98:54673] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-slss.php"] [unique_id "ahKF8IvZb8G6T8WpI1hcKgAAAAU"]
[Sun May 24 13:00:33.391917 2026] [:error] [pid 49688:tid 49712] [client 20.63.33.98:56324] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-slss.php"] [unique_id "ahKF8WYoQ9V6a_4pBsiHFwAAAFU"]
[Sun May 24 13:00:34.066077 2026] [:error] [pid 49744:tid 49755] [client 20.63.33.98:48714] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-slss.php"] [unique_id "ahKF8jsE5kPdFpUbbHGanwAAAMk"]
[Sun May 24 13:00:34.675639 2026] [:error] [pid 49688:tid 49696] [client 20.63.33.98:54663] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-slss.php"] [unique_id "ahKF8mYoQ9V6a_4pBsiHGQAAAEU"]
[Sun May 24 13:00:35.249063 2026] [:error] [pid 49689:tid 49740] [client 20.63.33.98:37968] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ahKF8waxiY3NxLUD97VHhwAAAJY"]
[Sun May 24 13:00:35.875123 2026] [:error] [pid 2639:tid 2664] [client 20.63.33.98:56346] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ahKF80zQncQTd0Z0Oe8gyAAAARc"]
[Sun May 24 13:00:36.426049 2026] [:error] [pid 49689:tid 49718] [client 20.63.33.98:44543] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ahKF9AaxiY3NxLUD97VHigAAAIA"]
[Sun May 24 13:00:36.912619 2026] [:error] [pid 2639:tid 2651] [client 20.63.33.98:44490] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/x.php"] [unique_id "ahKF9EzQncQTd0Z0Oe8gzQAAAQo"]
[Sun May 24 13:00:37.436936 2026] [:error] [pid 49688:tid 49701] [client 20.63.33.98:30634] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "ahKF9WYoQ9V6a_4pBsiHHAAAAEo"]
[Sun May 24 13:00:37.892582 2026] [:error] [pid 49689:tid 49738] [client 20.63.33.98:37967] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "ahKF9QaxiY3NxLUD97VHkQAAAJQ"]
[Sun May 24 13:00:38.376179 2026] [:error] [pid 49688:tid 49703] [client 20.63.33.98:48725] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "ahKF9mYoQ9V6a_4pBsiHHQAAAEw"]
[Sun May 24 13:00:38.910563 2026] [:error] [pid 49688:tid 49698] [client 20.63.33.98:44495] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "ahKF9mYoQ9V6a_4pBsiHHwAAAEc"]
[Sun May 24 13:00:39.419108 2026] [:error] [pid 49688:tid 49699] [client 20.63.33.98:39739] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff.php"] [unique_id "ahKF92YoQ9V6a_4pBsiHIQAAAEg"]
[Sun May 24 13:00:39.937749 2026] [:error] [pid 49688:tid 49714] [client 20.63.33.98:63420] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff.php"] [unique_id "ahKF92YoQ9V6a_4pBsiHIwAAAFc"]
[Sun May 24 13:00:40.504146 2026] [:error] [pid 49688:tid 49692] [client 20.63.33.98:30631] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff.php"] [unique_id "ahKF-GYoQ9V6a_4pBsiHJAAAAEE"]
[Sun May 24 13:00:40.983037 2026] [:error] [pid 49688:tid 49704] [client 20.63.33.98:54706] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff.php"] [unique_id "ahKF-GYoQ9V6a_4pBsiHJQAAAE0"]
[Sun May 24 13:00:41.479536 2026] [:error] [pid 49744:tid 49765] [client 20.63.33.98:41324] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ahKF-TsE5kPdFpUbbHGapQAAANM"]
[Sun May 24 13:00:41.953629 2026] [:error] [pid 49688:tid 49705] [client 20.63.33.98:54675] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ahKF-WYoQ9V6a_4pBsiHJwAAAE4"]
[Sun May 24 13:00:42.521452 2026] [:error] [pid 49688:tid 49713] [client 20.63.33.98:48734] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ahKF-mYoQ9V6a_4pBsiHKQAAAFY"]
[Sun May 24 13:00:43.030333 2026] [:error] [pid 23497:tid 23522] [client 20.63.33.98:52701] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ahKF-yPlV47QcYwd2v-CZgAAAVY"]
[Sun May 24 13:00:43.525645 2026] [:error] [pid 49688:tid 49693] [client 20.63.33.98:30655] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ahKF-2YoQ9V6a_4pBsiHKwAAAEI"]
[Sun May 24 13:00:44.004757 2026] [:error] [pid 49688:tid 49715] [client 20.63.33.98:37985] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ahKF_GYoQ9V6a_4pBsiHLAAAAFg"]
[Sun May 24 13:00:44.515528 2026] [:error] [pid 49688:tid 49709] [client 20.63.33.98:52720] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ahKF_GYoQ9V6a_4pBsiHLgAAAFI"]
[Sun May 24 13:00:45.075623 2026] [:error] [pid 2639:tid 2665] [client 20.63.33.98:52684] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ahKF_UzQncQTd0Z0Oe8g4QAAARg"]
[Sun May 24 13:00:45.666892 2026] [:error] [pid 2639:tid 2663] [client 20.63.33.98:44492] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "ahKF_UzQncQTd0Z0Oe8g4wAAARY"]
[Sun May 24 13:00:46.160759 2026] [:error] [pid 49744:tid 49753] [client 20.63.33.98:37996] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "ahKF_jsE5kPdFpUbbHGaqQAAAMc"]
[Sun May 24 13:00:46.644613 2026] [:error] [pid 23497:tid 23503] [client 20.63.33.98:56327] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "ahKF_iPlV47QcYwd2v-CZwAAAUM"]
[Sun May 24 13:00:47.157000 2026] [:error] [pid 49744:tid 49750] [client 20.63.33.98:52725] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wmore1.php"] [unique_id "ahKF_zsE5kPdFpUbbHGarAAAAMQ"]
[Sun May 24 13:00:47.757320 2026] [:error] [pid 23497:tid 23518] [client 20.63.33.98:37952] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "ahKF_yPlV47QcYwd2v-CaQAAAVI"]
[Sun May 24 13:00:48.265372 2026] [:error] [pid 23497:tid 23523] [client 20.63.33.98:30623] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "ahKGACPlV47QcYwd2v-CawAAAVc"]
[Sun May 24 13:00:48.798162 2026] [:error] [pid 23497:tid 23508] [client 20.63.33.98:38014] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "ahKGACPlV47QcYwd2v-CcQAAAUg"]
[Sun May 24 13:00:49.246709 2026] [:error] [pid 49744:tid 49759] [client 20.63.33.98:30603] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ah25.php"] [unique_id "ahKGATsE5kPdFpUbbHGasQAAAM0"]
[Sun May 24 13:00:49.766697 2026] [:error] [pid 49744:tid 49753] [client 20.63.33.98:37989] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "ahKGATsE5kPdFpUbbHGaswAAAMc"]
[Sun May 24 13:00:50.270229 2026] [:error] [pid 23497:tid 23504] [client 20.63.33.98:30610] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "ahKGAiPlV47QcYwd2v-CcwAAAUQ"]
[Sun May 24 13:00:50.750610 2026] [:error] [pid 49744:tid 49749] [client 20.63.33.98:42349] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "ahKGAjsE5kPdFpUbbHGatgAAAMM"]
[Sun May 24 13:00:51.240991 2026] [:error] [pid 49744:tid 49756] [client 20.63.33.98:63395] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "ahKGAzsE5kPdFpUbbHGauAAAAMo"]
[Sun May 24 13:00:52.104927 2026] [:error] [pid 23497:tid 23513] [client 20.63.33.98:44486] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ahKGBCPlV47QcYwd2v-CdwAAAU0"]
[Sun May 24 13:00:52.646759 2026] [:error] [pid 23497:tid 23505] [client 20.63.33.98:48749] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ahKGBCPlV47QcYwd2v-CegAAAUU"]
[Sun May 24 13:00:53.198774 2026] [:error] [pid 23497:tid 23518] [client 20.63.33.98:63413] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ahKGBSPlV47QcYwd2v-CfAAAAVI"]
[Sun May 24 13:00:53.703697 2026] [:error] [pid 23497:tid 23501] [client 20.63.33.98:52694] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ahKGBSPlV47QcYwd2v-CfgAAAUE"]
[Sun May 24 13:00:54.210080 2026] [:error] [pid 49744:tid 49763] [client 20.63.33.98:48761] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "ahKGBjsE5kPdFpUbbHGauQAAANE"]
[Sun May 24 13:00:55.353910 2026] [:error] [pid 23497:tid 23519] [client 20.63.33.98:30644] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "ahKGByPlV47QcYwd2v-CggAAAVM"]
[Sun May 24 13:00:56.454691 2026] [:error] [pid 23497:tid 23518] [client 20.63.33.98:44539] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "ahKGCCPlV47QcYwd2v-ChQAAAVI"]
[Sun May 24 13:00:57.530100 2026] [:error] [pid 23497:tid 23504] [client 20.63.33.98:42328] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "ahKGCSPlV47QcYwd2v-CiAAAAUQ"]
[Sun May 24 13:00:58.578976 2026] [:error] [pid 49744:tid 49755] [client 20.63.33.98:54712] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ahKGCjsE5kPdFpUbbHGavwAAAMk"]
[Sun May 24 13:00:59.564266 2026] [:error] [pid 23497:tid 23513] [client 20.63.33.98:39709] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ahKGCyPlV47QcYwd2v-CmAAAAU0"]
[Sun May 24 13:01:00.294958 2026] [:error] [pid 49775:tid 49795] [client 20.63.33.98:54666] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ahKGDIvZb8G6T8WpI1hcLQAAABI"]
[Sun May 24 13:01:00.997992 2026] [:error] [pid 23497:tid 23524] [client 20.63.33.98:48755] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ahKGDCPlV47QcYwd2v-CqAAAAVg"]
[Sun May 24 13:01:01.512267 2026] [:error] [pid 23497:tid 23500] [client 20.63.33.98:48731] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "ahKGDSPlV47QcYwd2v-CqQAAAUA"]
[Sun May 24 13:01:02.253446 2026] [:error] [pid 49775:tid 49793] [client 20.63.33.98:41290] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "ahKGDovZb8G6T8WpI1hcLwAAABA"]
[Sun May 24 13:01:03.147163 2026] [:error] [pid 23497:tid 23520] [client 20.63.33.98:63371] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "ahKGDyPlV47QcYwd2v-CrQAAAVQ"]
[Sun May 24 13:01:03.758762 2026] [:error] [pid 49775:tid 49800] [client 20.63.33.98:63415] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/samll.php"] [unique_id "ahKGD4vZb8G6T8WpI1hcMQAAABc"]
[Sun May 24 13:01:04.309771 2026] [:error] [pid 23497:tid 23511] [client 20.63.33.98:48710] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "ahKGECPlV47QcYwd2v-CsQAAAUs"]
[Sun May 24 13:01:04.825786 2026] [:error] [pid 2639:tid 2648] [client 20.63.33.98:48719] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "ahKGEEzQncQTd0Z0Oe8g6QAAAQc"]
[Sun May 24 13:01:05.438695 2026] [:error] [pid 2639:tid 2660] [client 20.63.33.98:52707] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "ahKGEUzQncQTd0Z0Oe8g6gAAARM"]
[Sun May 24 13:01:05.958519 2026] [:error] [pid 2639:tid 2645] [client 20.63.33.98:39071] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "ahKGEUzQncQTd0Z0Oe8g7AAAAQQ"]
[Sun May 24 13:01:06.433762 2026] [:error] [pid 49689:tid 49723] [client 20.63.33.98:52717] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahKGEgaxiY3NxLUD97VHogAAAIU"]
[Sun May 24 13:01:06.971049 2026] [:error] [pid 49775:tid 49784] [client 20.63.33.98:30632] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahKGEovZb8G6T8WpI1hcNwAAAAc"]
[Sun May 24 13:01:07.598549 2026] [:error] [pid 23497:tid 23523] [client 20.63.33.98:63397] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahKGEyPlV47QcYwd2v-CsgAAAVc"]
[Sun May 24 13:01:08.078177 2026] [:error] [pid 49744:tid 49765] [client 20.63.33.98:60568] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahKGFDsE5kPdFpUbbHGazgAAANM"]
[Sun May 24 13:01:08.608315 2026] [:error] [pid 23497:tid 23513] [client 20.63.33.98:30643] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ahKGFCPlV47QcYwd2v-CtAAAAU0"]
[Sun May 24 13:01:09.137285 2026] [:error] [pid 49689:tid 49733] [client 20.63.33.98:37980] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ahKGFQaxiY3NxLUD97VHpAAAAI8"]
[Sun May 24 13:01:09.684914 2026] [:error] [pid 2639:tid 2662] [client 20.63.33.98:63361] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ahKGFUzQncQTd0Z0Oe8g7QAAARU"]
[Sun May 24 13:01:10.169735 2026] [:error] [pid 23497:tid 23518] [client 20.63.33.98:52721] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ahKGFiPlV47QcYwd2v-CtwAAAVI"]
[Sun May 24 13:01:10.725789 2026] [:error] [pid 23497:tid 23514] [client 20.63.33.98:54689] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ahKGFiPlV47QcYwd2v-CuQAAAU4"]
[Sun May 24 13:01:11.261876 2026] [:error] [pid 23497:tid 23502] [client 20.63.33.98:61231] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ahKGFyPlV47QcYwd2v-CvQAAAUI"]
[Sun May 24 13:01:11.815454 2026] [:error] [pid 23497:tid 23523] [client 20.63.33.98:48721] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ahKGFyPlV47QcYwd2v-CvwAAAVc"]
[Sun May 24 13:01:12.427329 2026] [:error] [pid 23497:tid 23520] [client 20.63.33.98:52702] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ahKGGCPlV47QcYwd2v-CwQAAAVQ"]
[Sun May 24 13:01:12.936885 2026] [:error] [pid 49744:tid 49756] [client 20.63.33.98:44507] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "ahKGGDsE5kPdFpUbbHGazwAAAMo"]
[Sun May 24 13:01:13.687962 2026] [:error] [pid 49688:tid 49693] [client 20.63.33.98:56362] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "ahKGGWYoQ9V6a_4pBsiHPwAAAEI"]
[Sun May 24 13:01:14.232808 2026] [:error] [pid 49744:tid 49766] [client 20.63.33.98:52692] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "ahKGGjsE5kPdFpUbbHGa0gAAANQ"]
[Sun May 24 13:01:14.824630 2026] [:error] [pid 49688:tid 49701] [client 20.63.33.98:44541] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cilus.php"] [unique_id "ahKGGmYoQ9V6a_4pBsiHQgAAAEo"]
[Sun May 24 13:01:15.433109 2026] [:error] [pid 49775:tid 49794] [client 20.63.33.98:52689] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "ahKGG4vZb8G6T8WpI1hcOwAAABE"]
[Sun May 24 13:01:16.185331 2026] [:error] [pid 49775:tid 49777] [client 20.63.33.98:48766] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "ahKGHIvZb8G6T8WpI1hcPQAAAAA"]
[Sun May 24 13:01:16.696453 2026] [:error] [pid 49744:tid 49755] [client 20.63.33.98:52690] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "ahKGHDsE5kPdFpUbbHGa1QAAAMk"]
[Sun May 24 13:01:17.271332 2026] [:error] [pid 49688:tid 49695] [client 20.63.33.98:38002] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "ahKGHWYoQ9V6a_4pBsiHQwAAAEQ"]
[Sun May 24 13:01:17.927283 2026] [:error] [pid 23497:tid 23517] [client 20.63.33.98:30605] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "ahKGHSPlV47QcYwd2v-CxgAAAVE"]
[Sun May 24 13:01:18.526864 2026] [:error] [pid 23497:tid 23515] [client 20.63.33.98:42354] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "ahKGHiPlV47QcYwd2v-CyAAAAU8"]
[Sun May 24 13:01:19.053388 2026] [:error] [pid 23497:tid 23524] [client 20.63.33.98:41323] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "ahKGHyPlV47QcYwd2v-CyQAAAVg"]
[Sun May 24 13:01:19.652515 2026] [:error] [pid 2639:tid 2647] [client 20.63.33.98:48753] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/pass4.php"] [unique_id "ahKGH0zQncQTd0Z0Oe8g9AAAAQY"]
[Sun May 24 13:01:20.276724 2026] [:error] [pid 23497:tid 23519] [client 20.63.33.98:30636] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-su.php"] [unique_id "ahKGICPlV47QcYwd2v-C4AAAAVM"]
[Sun May 24 13:01:20.844248 2026] [:error] [pid 2639:tid 2646] [client 20.63.33.98:30608] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-su.php"] [unique_id "ahKGIEzQncQTd0Z0Oe8g9QAAAQU"]
[Sun May 24 13:01:21.521879 2026] [:error] [pid 49689:tid 49742] [client 20.63.33.98:30616] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-su.php"] [unique_id "ahKGIQaxiY3NxLUD97VHpwAAAJg"]
[Sun May 24 13:01:22.030836 2026] [:error] [pid 2639:tid 2644] [client 20.63.33.98:52735] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-su.php"] [unique_id "ahKGIkzQncQTd0Z0Oe8g9wAAAQM"]
[Sun May 24 13:01:22.486693 2026] [:error] [pid 2639:tid 2657] [client 20.63.33.98:38005] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/like.php"] [unique_id "ahKGIkzQncQTd0Z0Oe8g-AAAARA"]
[Sun May 24 13:01:22.982438 2026] [:error] [pid 49689:tid 49726] [client 20.63.33.98:37956] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/like.php"] [unique_id "ahKGIgaxiY3NxLUD97VHqAAAAIg"]
[Sun May 24 13:01:23.513130 2026] [:error] [pid 2639:tid 2652] [client 20.63.33.98:63377] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/like.php"] [unique_id "ahKGI0zQncQTd0Z0Oe8g-gAAAQs"]
[Sun May 24 13:01:23.979004 2026] [:error] [pid 2639:tid 2656] [client 20.63.33.98:30639] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/like.php"] [unique_id "ahKGI0zQncQTd0Z0Oe8g_AAAAQ8"]
[Sun May 24 13:01:24.458392 2026] [:error] [pid 2639:tid 2643] [client 20.63.33.98:54699] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mass.php"] [unique_id "ahKGJEzQncQTd0Z0Oe8g_gAAAQI"]
[Sun May 24 13:01:24.957183 2026] [:error] [pid 2639:tid 2647] [client 20.63.33.98:63363] [client 20.63.33.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mass.php"] [unique_id "ahKGJEzQncQTd0Z0Oe8hAQAAAQY"]
[Sun May 24 13:01:25.455285 2026] [:error] [pid 2639:tid 2651] [client 20.63.33.98:39688] File does not exist: /usr/local/apache/htdocs/suspended-page/mass.php
[Sun May 24 13:01:25.674873 2026] [:error] [pid 2639:tid 2664] [client 20.63.33.98:39688] File does not exist: /usr/local/apache/htdocs/suspended-page/i.php
[Sun May 24 13:01:25.893271 2026] [:error] [pid 2639:tid 2646] [client 20.63.33.98:39688] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Sun May 24 13:01:26.111019 2026] [:error] [pid 2639:tid 2658] [client 20.63.33.98:39688] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Sun May 24 13:01:26.330833 2026] [:error] [pid 2639:tid 2665] [client 20.63.33.98:39688] File does not exist: /usr/local/apache/htdocs/suspended-page/reze.php
[Sun May 24 13:01:26.549897 2026] [:error] [pid 2639:tid 2645] [client 20.63.33.98:39688] File does not exist: /usr/local/apache/htdocs/suspended-page/database.php
[Sun May 24 13:01:26.774054 2026] [:error] [pid 2639:tid 2663] [client 20.63.33.98:39688] File does not exist: /usr/local/apache/htdocs/suspended-page/favicon.php
[Sun May 24 17:09:19.881448 2026] [:error] [pid 23497:tid 23509] [client 176.231.151.209:51759] [client 176.231.151.209] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 176.231.151.209, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ahLAPyPlV47QcYwd2v_dbAAAAUk"]
[Sun May 24 17:09:19.886790 2026] [:error] [pid 23497:tid 23509] [client 176.231.151.209:51759] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 24 18:45:17.820145 2026] [:error] [pid 49744:tid 49760] [client 45.91.22.45:63469] [client 45.91.22.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/enhanced-text-widget/analyst/src/403x.php"] [unique_id "ahLWvTsE5kPdFpUbbHHSQwAAAM4"]
[Sun May 24 18:45:18.638437 2026] [:error] [pid 49775:tid 49794] [client 45.91.22.19:63691] [client 45.91.22.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/semrush/x.php"] [unique_id "ahLWvovZb8G6T8WpI1idHgAAABE"]
[Sun May 24 18:45:19.412996 2026] [:error] [pid 23497:tid 23521] [client 45.91.22.7:38159] [client 45.91.22.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-sarang.php"] [unique_id "ahLWvyPlV47QcYwd2v_7wQAAAVU"]
[Sun May 24 18:45:20.226264 2026] [:error] [pid 23497:tid 23522] [client 45.91.22.50:41683] [client 45.91.22.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/main_json.php"] [unique_id "ahLWwCPlV47QcYwd2v_7wwAAAVY"]
[Sun May 24 18:45:21.023402 2026] [:error] [pid 23497:tid 23505] [client 45.91.22.45:35659] [client 45.91.22.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/WPManager/up.php"] [unique_id "ahLWwSPlV47QcYwd2v_7xgAAAUU"]
[Sun May 24 18:45:21.795581 2026] [:error] [pid 23497:tid 23509] [client 45.91.22.13:29869] [client 45.91.22.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/builder-and-developer/inc/tgm/error.php"] [unique_id "ahLWwSPlV47QcYwd2v_7ywAAAUk"]
[Sun May 24 18:45:22.556685 2026] [:error] [pid 23497:tid 23503] [client 45.91.22.14:31417] [client 45.91.22.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-responsive-menu/inc/js/ace-min-noconflict/403x.php"] [unique_id "ahLWwiPlV47QcYwd2v_7zwAAAUM"]
[Sun May 24 18:45:23.490624 2026] [:error] [pid 23497:tid 23512] [client 45.91.22.19:22971] [client 45.91.22.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/advanced-llms-txt-generator/assets/css/css_json.php"] [unique_id "ahLWwyPlV47QcYwd2v_71gAAAUw"]
[Sun May 24 18:45:24.315061 2026] [:error] [pid 49689:tid 49738] [client 45.91.22.10:24439] [client 45.91.22.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/age-restriction/modules/remote_support/remote_init.php"] [unique_id "ahLWxAaxiY3NxLUD97V3OwAAAJQ"]
[Sun May 24 18:45:25.187411 2026] [:error] [pid 2639:tid 2655] [client 45.91.22.14:59443] [client 45.91.22.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php"] [unique_id "ahLWxUzQncQTd0Z0Oe9wKQAAAQ4"]
[Sun May 24 18:45:26.010716 2026] [:error] [pid 41708:tid 41715] [client 45.91.22.52:35369] [client 45.91.22.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/advanced-product-fields-for-woocommerce/db.php"] [unique_id "ahLWxv4tQzoTxpuHBF7NwQAAAYU"]
[Sun May 24 18:45:26.872185 2026] [:error] [pid 49744:tid 49756] [client 45.91.22.28:47005] [client 45.91.22.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/Diff/Engine/template-singl-portfolio.php"] [unique_id "ahLWxjsE5kPdFpUbbHHSRAAAAMo"]
[Sun May 24 18:45:27.705422 2026] [:error] [pid 41708:tid 41719] [client 45.91.22.50:55913] [client 45.91.22.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentythree/patterns/index.php"] [unique_id "ahLWx_4tQzoTxpuHBF7NxAAAAYk"]
[Sun May 24 18:45:28.478192 2026] [:error] [pid 4777:tid 4782] [client 45.91.22.35:28627] [client 45.91.22.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "ahLWyPtPctoQOm4w5pN5bgAAAcA"]
[Sun May 24 18:45:29.250132 2026] [:error] [pid 41708:tid 41728] [client 45.91.22.38:38051] [client 45.91.22.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wpforms/class-wpforms-update.php"] [unique_id "ahLWyf4tQzoTxpuHBF7NxgAAAZI"]
[Sun May 24 18:45:30.121881 2026] [:error] [pid 2639:tid 2657] [client 45.91.22.38:37707] [client 45.91.22.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/phpadmin/autoload_classmap.php"] [unique_id "ahLWykzQncQTd0Z0Oe9wMAAAARA"]
[Sun May 24 18:45:30.904495 2026] [:error] [pid 23497:tid 23508] [client 45.91.22.18:55953] [client 45.91.22.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/so-pinyin-slugs/inc/js-inc.php"] [unique_id "ahLWyiPlV47QcYwd2v_75gAAAUg"]
[Sun May 24 18:45:31.707104 2026] [:error] [pid 49689:tid 49725] [client 45.91.22.41:38647] [client 45.91.22.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wpcall-button/button-image.php"] [unique_id "ahLWywaxiY3NxLUD97V3QQAAAIc"]
[Sun May 24 18:45:32.483086 2026] [:error] [pid 49688:tid 49701] [client 45.91.22.6:63477] [client 45.91.22.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/SecurityFin/SecurityFin.php"] [unique_id "ahLWzGYoQ9V6a_4pBsixKwAAAEo"]
[Sun May 24 18:45:33.255922 2026] [:error] [pid 2639:tid 2653] [client 45.91.22.34:50351] [client 45.91.22.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/fukasawa/inc/classes/403.php"] [unique_id "ahLWzUzQncQTd0Z0Oe9wNQAAAQw"]
[Sun May 24 18:45:34.025609 2026] [:error] [pid 41708:tid 41725] [client 45.91.22.22:31389] [client 45.91.22.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hello-plus/classes/ehp-social-elf.php"] [unique_id "ahLWzv4tQzoTxpuHBF7N0AAAAY8"]
[Sun May 24 18:45:34.872283 2026] [:error] [pid 4777:tid 4804] [client 45.91.22.18:37749] [client 45.91.22.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/theme-check/theme-check.php"] [unique_id "ahLWzvtPctoQOm4w5pN5cwAAAdY"]
[Sun May 24 18:45:35.674208 2026] [:error] [pid 2639:tid 2641] [client 45.91.22.34:43787] [client 45.91.22.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/WordPressCore/include.php"] [unique_id "ahLWz0zQncQTd0Z0Oe9wOQAAAQA"]
[Sun May 24 18:45:36.658364 2026] [:error] [pid 2639:tid 2650] [client 45.91.22.51:32519] [client 45.91.22.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/dummyyummy/wp-signup.php"] [unique_id "ahLW0EzQncQTd0Z0Oe9wOgAAAQk"]
[Sun May 24 18:45:37.423053 2026] [:error] [pid 23497:tid 23518] [client 45.91.22.5:57385] [client 45.91.22.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/dzs-zoomsounds/1877.php"] [unique_id "ahLW0SPlV47QcYwd2v_77QAAAVI"]
[Sun May 24 18:45:38.196326 2026] [:error] [pid 23497:tid 23509] [client 45.91.22.16:56315] [client 45.91.22.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/core-plugin/include.php"] [unique_id "ahLW0iPlV47QcYwd2v_78AAAAUk"]
[Sun May 24 18:45:38.972395 2026] [:error] [pid 4777:tid 4789] [client 45.91.22.13:33387] [client 45.91.22.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/linkpreview/index.php"] [unique_id "ahLW0vtPctoQOm4w5pN5eAAAAcc"]
[Sun May 24 18:45:39.756500 2026] [:error] [pid 23497:tid 23517] [client 45.91.22.19:22501] [client 45.91.22.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/linkpreview/db.php"] [unique_id "ahLW0yPlV47QcYwd2v_7-wAAAVE"]
[Sun May 24 18:45:40.534351 2026] [:error] [pid 23497:tid 23511] [client 45.91.22.41:47287] [client 45.91.22.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "ahLW1CPlV47QcYwd2v_8AAAAAUs"]
[Sun May 24 18:45:41.475720 2026] [:error] [pid 4777:tid 4798] [client 45.91.22.40:34627] [client 45.91.22.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/aatdgetgdg/main.php"] [unique_id "ahLW1ftPctoQOm4w5pN5fAAAAdA"]
[Sun May 24 18:45:42.257090 2026] [:error] [pid 4777:tid 4803] [client 45.91.22.46:56377] [client 45.91.22.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/init-help/init.php"] [unique_id "ahLW1vtPctoQOm4w5pN5fwAAAdU"]
[Sun May 24 18:45:43.033123 2026] [:error] [pid 49689:tid 49734] [client 45.91.22.28:55241] [client 45.91.22.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/seoplugins/mar.php"] [unique_id "ahLW1waxiY3NxLUD97V3QwAAAJA"]
[Sun May 24 18:45:43.809161 2026] [:error] [pid 49689:tid 49732] [client 45.91.22.33:58117] [client 45.91.22.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/press/wp-class.php"] [unique_id "ahLW1waxiY3NxLUD97V3RAAAAI4"]
[Sun May 24 18:45:44.615796 2026] [:error] [pid 49744:tid 49763] [client 45.91.22.40:59707] [client 45.91.22.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "ahLW2DsE5kPdFpUbbHHSTgAAANE"]
[Sun May 24 18:45:45.429169 2026] [:error] [pid 49688:tid 49697] [client 45.91.22.14:37061] [client 45.91.22.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/schema/geckos.php"] [unique_id "ahLW2WYoQ9V6a_4pBsixMQAAAEY"]
[Sun May 24 18:45:46.266588 2026] [:error] [pid 49775:tid 49791] [client 45.91.22.34:31377] [client 45.91.22.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/5PJcpMFsD8B.php"] [unique_id "ahLW2ovZb8G6T8WpI1idJwAAAA4"]
[Sun May 24 18:45:47.053506 2026] [:error] [pid 49689:tid 49738] [client 45.91.22.39:61867] [client 45.91.22.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "ahLW2waxiY3NxLUD97V3RgAAAJQ"]
[Sun May 24 18:45:47.830995 2026] [:error] [pid 2639:tid 2653] [client 45.91.22.41:32225] [client 45.91.22.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php"] [unique_id "ahLW20zQncQTd0Z0Oe9wPQAAAQw"]
[Sun May 24 18:45:48.606420 2026] [:error] [pid 23497:tid 23516] [client 45.91.22.5:29739] [client 45.91.22.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager.php"] [unique_id "ahLW3CPlV47QcYwd2v_8DAAAAVA"]
[Sun May 24 18:45:49.374106 2026] [:error] [pid 23497:tid 23514] [client 45.91.22.52:41787] [client 45.91.22.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/seotheme/db.php"] [unique_id "ahLW3SPlV47QcYwd2v_8EgAAAU4"]
[Sun May 24 18:45:50.138773 2026] [:error] [pid 49744:tid 49752] [client 45.91.22.21:50683] [client 45.91.22.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twenty/twenty.php"] [unique_id "ahLW3jsE5kPdFpUbbHHSVQAAAMY"]
[Sun May 24 18:45:50.911622 2026] [:error] [pid 49775:tid 49794] [client 45.91.22.5:64011] [client 45.91.22.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd-1/pwnd.php"] [unique_id "ahLW3ovZb8G6T8WpI1idMgAAABE"]
[Sun May 24 18:45:51.684288 2026] [:error] [pid 49744:tid 49767] [client 45.91.22.13:52107] [client 45.91.22.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/fonts/fonts.php"] [unique_id "ahLW3zsE5kPdFpUbbHHSWQAAANU"]
[Sun May 24 18:45:52.501657 2026] [:error] [pid 23497:tid 23501] [client 45.91.22.50:46577] [client 45.91.22.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/Cache/Cache.php"] [unique_id "ahLW4CPlV47QcYwd2v_8HgAAAUE"]
[Sun May 24 18:45:53.262976 2026] [:error] [pid 49689:tid 49730] [client 45.91.22.47:64189] [client 45.91.22.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/calmly/issue.php"] [unique_id "ahLW4QaxiY3NxLUD97V3SAAAAIw"]
[Sun May 24 18:45:54.093680 2026] [:error] [pid 23497:tid 23502] [client 45.91.22.8:42801] [client 45.91.22.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pridmag/db.php"] [unique_id "ahLW4iPlV47QcYwd2v_8JwAAAUI"]
[Sun May 24 18:45:54.881056 2026] [:error] [pid 23497:tid 23508] [client 45.91.22.11:60285] [client 45.91.22.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/shell/noimg.php"] [unique_id "ahLW4iPlV47QcYwd2v_8KwAAAUg"]
[Sun May 24 18:45:55.655226 2026] [:error] [pid 23497:tid 23503] [client 45.91.22.35:29305] [client 45.91.22.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd-2/pwnd.php"] [unique_id "ahLW4yPlV47QcYwd2v_8LwAAAUM"]
[Sun May 24 18:45:56.505662 2026] [:error] [pid 49689:tid 49722] [client 45.91.22.36:49875] [client 45.91.22.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/schema/yanz.php"] [unique_id "ahLW5AaxiY3NxLUD97V3SQAAAIQ"]
[Sun May 24 18:45:57.275793 2026] [:error] [pid 4777:tid 4797] [client 45.91.22.16:36335] [client 45.91.22.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/aahana/json.php"] [unique_id "ahLW5ftPctoQOm4w5pN5lAAAAc8"]
[Sun May 24 18:45:58.046250 2026] [:error] [pid 4777:tid 4798] [client 45.91.22.5:56391] [client 45.91.22.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/TOPXOH/wDR.php"] [unique_id "ahLW5vtPctoQOm4w5pN5lgAAAdA"]
[Sun May 24 18:45:58.816775 2026] [:error] [pid 49689:tid 49725] [client 45.91.22.8:36731] [client 45.91.22.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "ahLW5gaxiY3NxLUD97V3SgAAAIc"]
[Sun May 24 18:45:59.648611 2026] [:error] [pid 49744:tid 49768] [client 45.91.22.3:47193] [client 45.91.22.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/Divi/404.php"] [unique_id "ahLW5zsE5kPdFpUbbHHSXwAAANY"]
[Sun May 24 18:46:00.479287 2026] [:error] [pid 2639:tid 2654] [client 45.91.22.4:59783] [client 45.91.22.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/ubh/ubh.php"] [unique_id "ahLW6EzQncQTd0Z0Oe9wQAAAAQ0"]
[Sun May 24 18:46:01.263265 2026] [:error] [pid 2639:tid 2661] [client 45.91.22.51:61813] [client 45.91.22.51] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/classwithtostring.php"] [unique_id "ahLW6UzQncQTd0Z0Oe9wQgAAARQ"]
[Sun May 24 18:46:02.096564 2026] [:error] [pid 23497:tid 23512] [client 45.91.22.35:29815] [client 45.91.22.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/fix/up.php"] [unique_id "ahLW6iPlV47QcYwd2v_8NwAAAUw"]
[Sun May 24 18:46:03.116829 2026] [:error] [pid 41708:tid 41714] [client 45.91.22.3:43531] [client 45.91.22.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/about.php"] [unique_id "ahLW6_4tQzoTxpuHBF7N4AAAAYQ"]
[Sun May 24 18:46:03.914603 2026] [:error] [pid 49744:tid 49752] [client 45.91.22.28:29247] [client 45.91.22.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/hello.php"] [unique_id "ahLW6zsE5kPdFpUbbHHSbgAAAMY"]
[Sun May 24 18:46:04.740684 2026] [:error] [pid 49689:tid 49724] [client 45.91.22.7:33489] [client 45.91.22.7] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "ahLW7AaxiY3NxLUD97V3UAAAAIY"]
[Sun May 24 18:46:05.774187 2026] [:error] [pid 23497:tid 23521] [client 45.91.22.53:32489] [client 45.91.22.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "ahLW7SPlV47QcYwd2v_8OQAAAVU"]
[Sun May 24 18:46:06.585098 2026] [:error] [pid 23497:tid 23524] [client 45.91.22.14:57951] [client 45.91.22.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "ahLW7iPlV47QcYwd2v_8QQAAAVg"]
[Sun May 24 18:46:07.352734 2026] [:error] [pid 49744:tid 49756] [client 45.91.22.21:37541] [client 45.91.22.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "ahLW7zsE5kPdFpUbbHHScgAAAMo"]
[Sun May 24 18:46:08.159498 2026] [:error] [pid 2639:tid 2662] [client 45.91.22.43:48719] [client 45.91.22.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "ahLW8EzQncQTd0Z0Oe9wRQAAARU"]
[Sun May 24 18:46:08.941131 2026] [:error] [pid 49689:tid 49718] [client 45.91.22.39:20213] [client 45.91.22.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "ahLW8AaxiY3NxLUD97V3VQAAAIA"]
[Sun May 24 18:46:09.877399 2026] [:error] [pid 49775:tid 49785] [client 45.91.22.39:40345] [client 45.91.22.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "ahLW8YvZb8G6T8WpI1idPQAAAAg"]
[Sun May 24 18:46:10.647970 2026] [:error] [pid 49775:tid 49798] [client 45.91.22.36:63803] [client 45.91.22.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "ahLW8ovZb8G6T8WpI1idQAAAABU"]
[Sun May 24 18:46:11.428883 2026] [:error] [pid 49689:tid 49733] [client 45.91.22.41:56829] [client 45.91.22.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "ahLW8waxiY3NxLUD97V3WgAAAI8"]
[Sun May 24 18:46:12.211024 2026] [:error] [pid 4777:tid 4797] [client 45.91.22.16:61385] [client 45.91.22.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "ahLW9PtPctoQOm4w5pN5nAAAAc8"]
[Sun May 24 18:46:13.031505 2026] [:error] [pid 4777:tid 4805] [client 45.91.22.13:21579] [client 45.91.22.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "ahLW9ftPctoQOm4w5pN5nQAAAdc"]
[Sun May 24 18:46:13.827027 2026] [:error] [pid 41708:tid 41725] [client 45.91.22.6:25037] [client 45.91.22.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/index.php"] [unique_id "ahLW9f4tQzoTxpuHBF7N7wAAAY8"]
[Sun May 24 18:46:14.622930 2026] [:error] [pid 49689:tid 49735] [client 45.91.22.46:56137] [client 45.91.22.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "ahLW9gaxiY3NxLUD97V3YQAAAJE"]
[Sun May 24 18:46:15.423068 2026] [:error] [pid 49775:tid 49797] [client 45.91.22.6:41245] [client 45.91.22.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/classwithtostring.php"] [unique_id "ahLW94vZb8G6T8WpI1idQgAAABQ"]
[Sun May 24 18:46:16.282962 2026] [:error] [pid 23497:tid 23505] [client 45.91.22.5:36061] [client 45.91.22.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/dropdown.php"] [unique_id "ahLW-CPlV47QcYwd2v_8SAAAAUU"]
[Sun May 24 18:46:17.059794 2026] [:error] [pid 2639:tid 2665] [client 45.91.22.49:32263] [client 45.91.22.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/autoload_classmap.php"] [unique_id "ahLW-UzQncQTd0Z0Oe9wSQAAARg"]
[Sun May 24 18:46:17.861289 2026] [:error] [pid 23497:tid 23508] [client 45.91.22.42:24043] [client 45.91.22.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "ahLW-SPlV47QcYwd2v_8SQAAAUg"]
[Sun May 24 18:46:18.642715 2026] [:error] [pid 2639:tid 2648] [client 45.91.22.46:34499] [client 45.91.22.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/index.php"] [unique_id "ahLW-kzQncQTd0Z0Oe9wTAAAAQc"]
[Sun May 24 18:46:19.494738 2026] [:error] [pid 2639:tid 2657] [client 45.91.22.31:23811] [client 45.91.22.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "ahLW-0zQncQTd0Z0Oe9wTQAAARA"]
[Sun May 24 18:46:20.283882 2026] [:error] [pid 49744:tid 49755] [client 45.91.22.44:23977] [client 45.91.22.44] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/fmadmin.php"] [unique_id "ahLW_DsE5kPdFpUbbHHSfAAAAMk"]
[Sun May 24 18:46:21.213624 2026] [:error] [pid 49744:tid 49765] [client 45.91.22.21:62119] [client 45.91.22.21] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/admin.php"] [unique_id "ahLW_TsE5kPdFpUbbHHSfgAAANM"]
[Sun May 24 18:46:21.991519 2026] [:error] [pid 2639:tid 2651] [client 45.91.22.5:30069] [client 45.91.22.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/options.php"] [unique_id "ahLW_UzQncQTd0Z0Oe9wTwAAAQo"]
[Sun May 24 18:46:22.782953 2026] [:error] [pid 4777:tid 4796] [client 45.91.22.23:47409] [client 45.91.22.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/index.php"] [unique_id "ahLW_vtPctoQOm4w5pN5pAAAAc4"]
[Sun May 24 18:46:23.546616 2026] [:error] [pid 49744:tid 49758] [client 45.91.22.42:42039] [client 45.91.22.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/about.php"] [unique_id "ahLW_zsE5kPdFpUbbHHSgQAAAMw"]
[Sun May 24 18:46:24.323569 2026] [:error] [pid 23497:tid 23505] [client 45.91.22.42:45119] [client 45.91.22.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/mah/function.php"] [unique_id "ahLXACPlV47QcYwd2v_8VQAAAUU"]
[Sun May 24 18:46:25.089453 2026] [:error] [pid 23497:tid 23514] [client 45.91.22.52:24031] [client 45.91.22.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/3PJcpMFsD8B.php"] [unique_id "ahLXASPlV47QcYwd2v_8WwAAAU4"]
[Sun May 24 18:46:25.854363 2026] [:error] [pid 49689:tid 49727] [client 45.91.22.9:31115] [client 45.91.22.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/function.php"] [unique_id "ahLXAQaxiY3NxLUD97V3YwAAAIk"]
[Sun May 24 18:46:26.657935 2026] [:error] [pid 4777:tid 4789] [client 45.91.22.13:43009] [client 45.91.22.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin.php"] [unique_id "ahLXAvtPctoQOm4w5pN5qAAAAcc"]
[Sun May 24 18:46:27.535636 2026] [:error] [pid 23497:tid 23522] [client 45.91.22.46:42153] [client 45.91.22.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ahLXAyPlV47QcYwd2v_8YgAAAVY"]
[Sun May 24 18:46:28.307487 2026] [:error] [pid 23497:tid 23510] [client 45.91.22.41:58093] [client 45.91.22.41] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/content.php"] [unique_id "ahLXBCPlV47QcYwd2v_8ZgAAAUo"]
[Sun May 24 18:46:29.125851 2026] [:error] [pid 41708:tid 41715] [client 45.91.22.33:43707] [client 45.91.22.33] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/default.php"] [unique_id "ahLXBf4tQzoTxpuHBF7N-QAAAYU"]
[Sun May 24 18:46:29.897821 2026] [:error] [pid 4777:tid 4785] [client 45.91.22.25:63543] [client 45.91.22.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/bypass.php"] [unique_id "ahLXBftPctoQOm4w5pN5rAAAAcM"]
[Sun May 24 18:46:30.668099 2026] [:error] [pid 49689:tid 49725] [client 45.91.22.20:26887] [client 45.91.22.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/inputs.php"] [unique_id "ahLXBgaxiY3NxLUD97V3ZQAAAIc"]
[Sun May 24 18:46:31.444915 2026] [:error] [pid 41708:tid 41730] [client 45.91.22.10:46583] [client 45.91.22.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ahLXB_4tQzoTxpuHBF7N_AAAAZQ"]
[Sun May 24 18:46:32.218502 2026] [:error] [pid 23497:tid 23524] [client 45.91.22.9:57781] [client 45.91.22.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/simple.php"] [unique_id "ahLXCCPlV47QcYwd2v_8bgAAAVg"]
[Sun May 24 18:46:33.012716 2026] [:error] [pid 4777:tid 4804] [client 45.91.22.54:35945] [client 45.91.22.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/file2.php"] [unique_id "ahLXCftPctoQOm4w5pN5rwAAAdY"]
[Sun May 24 18:46:33.789734 2026] [:error] [pid 49688:tid 49692] [client 45.91.22.30:59653] [client 45.91.22.30] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/themes.php"] [unique_id "ahLXCWYoQ9V6a_4pBsixRAAAAEE"]
[Sun May 24 18:46:34.555180 2026] [:error] [pid 49744:tid 49753] [client 45.91.22.54:41441] [client 45.91.22.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/config.php"] [unique_id "ahLXCjsE5kPdFpUbbHHShAAAAMc"]
[Sun May 24 18:46:35.323724 2026] [:error] [pid 23497:tid 23505] [client 45.91.22.38:21299] [client 45.91.22.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/style.php"] [unique_id "ahLXCyPlV47QcYwd2v_8dAAAAUU"]
[Sun May 24 18:46:36.094561 2026] [:error] [pid 4777:tid 4790] [client 45.91.22.50:49043] [client 45.91.22.50] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/style2.php"] [unique_id "ahLXDPtPctoQOm4w5pN5sgAAAcg"]
[Sun May 24 18:46:36.944022 2026] [:error] [pid 4777:tid 4798] [client 45.91.22.38:46291] [client 45.91.22.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/about.php"] [unique_id "ahLXDPtPctoQOm4w5pN5tQAAAdA"]
[Sun May 24 18:46:37.753386 2026] [:error] [pid 49688:tid 49696] [client 45.91.22.18:29783] [client 45.91.22.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/xleet.php"] [unique_id "ahLXDWYoQ9V6a_4pBsixRQAAAEU"]
[Sun May 24 18:46:38.521210 2026] [:error] [pid 2639:tid 2663] [client 45.91.22.23:20505] [client 45.91.22.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/login.php"] [unique_id "ahLXDkzQncQTd0Z0Oe9wYgAAARY"]
[Sun May 24 18:46:39.298166 2026] [:error] [pid 23497:tid 23507] [client 45.91.22.28:28701] [client 45.91.22.28] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/gel4y.php"] [unique_id "ahLXDyPlV47QcYwd2v_8fgAAAUc"]
[Sun May 24 18:46:40.190253 2026] [:error] [pid 23497:tid 23516] [client 45.91.22.22:52701] [client 45.91.22.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/admin.php"] [unique_id "ahLXECPlV47QcYwd2v_8gAAAAVA"]
[Sun May 24 18:46:41.099324 2026] [:error] [pid 4777:tid 4805] [client 45.91.22.23:64209] [client 45.91.22.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/radio.php"] [unique_id "ahLXEftPctoQOm4w5pN5uQAAAdc"]
[Sun May 24 18:46:41.885301 2026] [:error] [pid 2639:tid 2652] [client 45.91.22.24:63275] [client 45.91.22.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/demo.php"] [unique_id "ahLXEUzQncQTd0Z0Oe9wagAAAQs"]
[Sun May 24 18:46:42.683482 2026] [:error] [pid 4777:tid 4794] [client 45.91.22.45:48171] [client 45.91.22.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/moon.php"] [unique_id "ahLXEvtPctoQOm4w5pN5vAAAAcw"]
[Sun May 24 18:46:43.603036 2026] [:error] [pid 41708:tid 41723] [client 45.91.22.13:26561] [client 45.91.22.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/link.php"] [unique_id "ahLXE_4tQzoTxpuHBF7OAgAAAY0"]
[Sun May 24 18:46:44.369851 2026] [:error] [pid 4777:tid 4798] [client 45.91.22.47:51623] [client 45.91.22.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/tiny.php"] [unique_id "ahLXFPtPctoQOm4w5pN5wAAAAdA"]
[Sun May 24 18:46:45.148600 2026] [:error] [pid 4777:tid 4783] [client 45.91.22.22:49901] [client 45.91.22.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/user.php"] [unique_id "ahLXFftPctoQOm4w5pN5xAAAAcE"]
[Sun May 24 18:46:45.951675 2026] [:error] [pid 2639:tid 2665] [client 45.91.22.49:59909] [client 45.91.22.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/menu.php"] [unique_id "ahLXFUzQncQTd0Z0Oe9wbwAAARg"]
[Sun May 24 18:46:46.739152 2026] [:error] [pid 2639:tid 2661] [client 45.91.22.14:26841] [client 45.91.22.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/alfa.php"] [unique_id "ahLXFkzQncQTd0Z0Oe9wcgAAARQ"]
[Sun May 24 18:46:47.531185 2026] [:error] [pid 2639:tid 2651] [client 45.91.22.23:34517] [client 45.91.22.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "ahLXF0zQncQTd0Z0Oe9wdAAAAQo"]
[Sun May 24 18:46:48.316693 2026] [:error] [pid 49775:tid 49790] [client 45.91.22.5:44485] [client 45.91.22.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "ahLXGIvZb8G6T8WpI1idUgAAAA0"]
[Sun May 24 18:46:49.100317 2026] [:error] [pid 2639:tid 2654] [client 45.91.22.36:61241] [client 45.91.22.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/info.php"] [unique_id "ahLXGUzQncQTd0Z0Oe9wegAAAQ0"]
[Sun May 24 18:46:49.888823 2026] [:error] [pid 49688:tid 49700] [client 45.91.22.47:54867] [client 45.91.22.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/log.php"] [unique_id "ahLXGWYoQ9V6a_4pBsixTQAAAEk"]
[Sun May 24 18:46:50.653965 2026] [:error] [pid 23497:tid 23512] [client 45.91.22.20:41623] [client 45.91.22.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wso.php"] [unique_id "ahLXGiPlV47QcYwd2v_8mwAAAUw"]
[Sun May 24 18:46:51.424183 2026] [:error] [pid 23497:tid 23516] [client 45.91.22.2:51463] [client 45.91.22.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/scrollbottom/anamama-2.php"] [unique_id "ahLXGyPlV47QcYwd2v_8ngAAAVA"]
[Sun May 24 18:46:52.200382 2026] [:error] [pid 41708:tid 41721] [client 45.91.22.10:33655] [client 45.91.22.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/filemanager.php"] [unique_id "ahLXHP4tQzoTxpuHBF7OBwAAAYs"]
[Sun May 24 18:46:52.967318 2026] [:error] [pid 41708:tid 41722] [client 45.91.22.48:32217] [client 45.91.22.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/403.php"] [unique_id "ahLXHP4tQzoTxpuHBF7OCgAAAYw"]
[Sun May 24 18:46:53.776732 2026] [:error] [pid 2639:tid 2646] [client 45.91.22.6:37585] [client 45.91.22.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/doc.php"] [unique_id "ahLXHUzQncQTd0Z0Oe9wgwAAAQU"]
[Sun May 24 18:46:54.631611 2026] [:error] [pid 49775:tid 49784] [client 45.91.22.39:52967] [client 45.91.22.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/404.php"] [unique_id "ahLXHovZb8G6T8WpI1idWAAAAAc"]
[Sun May 24 18:46:55.586782 2026] [:error] [pid 49688:tid 49709] [client 45.91.22.9:27151] [client 45.91.22.9] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/mah.php"] [unique_id "ahLXH2YoQ9V6a_4pBsixUAAAAFI"]
[Sun May 24 18:46:56.365673 2026] [:error] [pid 2639:tid 2644] [client 45.91.22.35:45389] [client 45.91.22.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp.php"] [unique_id "ahLXIEzQncQTd0Z0Oe9wiQAAAQM"]
[Sun May 24 18:46:57.150084 2026] [:error] [pid 49775:tid 49790] [client 45.91.22.50:49939] [client 45.91.22.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "nextspaceconsulting.com.au"] [uri "/fm.php"] [unique_id "ahLXIYvZb8G6T8WpI1idXQAAAA0"]
[Sun May 24 18:46:57.920438 2026] [:error] [pid 49775:tid 49795] [client 45.91.22.10:55795] [client 45.91.22.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/1.php"] [unique_id "ahLXIYvZb8G6T8WpI1idYAAAABI"]
[Sun May 24 18:46:59.460176 2026] [:error] [pid 4777:tid 4794] [client 45.91.22.48:43769] [client 45.91.22.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/a.php"] [unique_id "ahLXI_tPctoQOm4w5pN5xwAAAcw"]
[Sun May 24 18:47:00.276437 2026] [:error] [pid 49688:tid 49710] [client 45.91.22.54:43149] [client 45.91.22.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/m.php"] [unique_id "ahLXJGYoQ9V6a_4pBsixWQAAAFM"]
[Sun May 24 18:47:01.244803 2026] [:error] [pid 49775:tid 49800] [client 45.91.22.6:63985] [client 45.91.22.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/modules/ets_whatsapp/security.php"] [unique_id "ahLXJYvZb8G6T8WpI1idZwAAABc"]
[Sun May 24 18:47:02.173777 2026] [:error] [pid 2639:tid 2642] [client 45.91.22.35:40499] [client 45.91.22.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/beez/index.php"] [unique_id "ahLXJkzQncQTd0Z0Oe9wkAAAAQE"]
[Sun May 24 18:47:02.976311 2026] [:error] [pid 49744:tid 49751] [client 45.91.22.11:55863] [client 45.91.22.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/beez3/index.php"] [unique_id "ahLXJjsE5kPdFpUbbHHSiwAAAMU"]
[Sun May 24 18:47:03.795384 2026] [:error] [pid 23497:tid 23520] [client 45.91.22.34:56471] [client 45.91.22.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/protostar/error.php"] [unique_id "ahLXJyPlV47QcYwd2v_8pQAAAVQ"]
[Sun May 24 18:47:04.623544 2026] [:error] [pid 41708:tid 41732] [client 45.91.22.16:50151] [client 45.91.22.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/beez3/error.php"] [unique_id "ahLXKP4tQzoTxpuHBF7OEwAAAZY"]
[Sun May 24 18:47:05.448104 2026] [:error] [pid 41708:tid 41710] [client 45.91.22.49:28779] [client 45.91.22.49] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/beez3/jsstrings.php"] [unique_id "ahLXKf4tQzoTxpuHBF7OFQAAAYA"]
[Sun May 24 18:47:06.224507 2026] [:error] [pid 4777:tid 4800] [client 45.91.22.52:21711] [client 45.91.22.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/atomic/index.php"] [unique_id "ahLXKvtPctoQOm4w5pN50AAAAdI"]
[Sun May 24 18:47:07.009145 2026] [:error] [pid 49775:tid 49778] [client 45.91.22.20:44251] [client 45.91.22.20] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/cassiopeia/error.php"] [unique_id "ahLXK4vZb8G6T8WpI1idbAAAAAE"]
[Sun May 24 18:47:07.794634 2026] [:error] [pid 4777:tid 4791] [client 45.91.22.48:20753] [client 45.91.22.48] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/templates/ja_purity/index.php"] [unique_id "ahLXK_tPctoQOm4w5pN50wAAAck"]
[Sun May 24 18:47:08.603463 2026] [:error] [pid 41708:tid 41729] [client 45.91.22.35:44753] [client 45.91.22.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/bypas.php"] [unique_id "ahLXLP4tQzoTxpuHBF7OFgAAAZM"]
[Sun May 24 18:47:09.489827 2026] [:error] [pid 2639:tid 2642] [client 45.91.22.52:32189] [client 45.91.22.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/license.php"] [unique_id "ahLXLUzQncQTd0Z0Oe9wlwAAAQE"]
[Sun May 24 18:47:10.263746 2026] [:error] [pid 2639:tid 2662] [client 45.91.22.42:27709] [client 45.91.22.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/ateprivacy-policy-guide.php"] [unique_id "ahLXLkzQncQTd0Z0Oe9wmAAAARU"]
[Sun May 24 18:47:11.514787 2026] [:error] [pid 49688:tid 49707] [client 45.91.22.10:53309] [client 45.91.22.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/news-portal/error.php"] [unique_id "ahLXL2YoQ9V6a_4pBsixYgAAAFA"]
[Sun May 24 18:47:12.326211 2026] [:error] [pid 49688:tid 49691] [client 45.91.22.39:47959] [client 45.91.22.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "ahLXMGYoQ9V6a_4pBsixZgAAAEA"]
[Sun May 24 18:47:13.103700 2026] [:error] [pid 2639:tid 2660] [client 45.91.22.53:53925] [client 45.91.22.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/core/core.php"] [unique_id "ahLXMUzQncQTd0Z0Oe9wmgAAARM"]
[Sun May 24 18:47:13.951699 2026] [:error] [pid 2639:tid 2645] [client 45.91.22.32:53345] [client 45.91.22.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/news-portal/sitebar.php"] [unique_id "ahLXMUzQncQTd0Z0Oe9wmwAAAQQ"]
[Sun May 24 18:47:14.730673 2026] [:error] [pid 41708:tid 41733] [client 45.91.22.13:61861] [client 45.91.22.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/elementor/index.php"] [unique_id "ahLXMv4tQzoTxpuHBF7OHAAAAZc"]
[Sun May 24 18:47:15.537980 2026] [:error] [pid 49775:tid 49788] [client 45.91.22.26:48953] [client 45.91.22.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/StylePlugin/up.php"] [unique_id "ahLXM4vZb8G6T8WpI1idcwAAAAs"]
[Sun May 24 18:47:16.317901 2026] [:error] [pid 2639:tid 2646] [client 45.91.22.32:49215] [client 45.91.22.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-cache-sys/index.php"] [unique_id "ahLXNEzQncQTd0Z0Oe9wnQAAAQU"]
[Sun May 24 18:47:17.092051 2026] [:error] [pid 2639:tid 2643] [client 45.91.22.39:62547] [client 45.91.22.39] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/mrx404/upp.php"] [unique_id "ahLXNUzQncQTd0Z0Oe9wnwAAAQI"]
[Sun May 24 18:47:17.913586 2026] [:error] [pid 41708:tid 41732] [client 45.91.22.32:64669] [client 45.91.22.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/filester/assets/css/404.php"] [unique_id "ahLXNf4tQzoTxpuHBF7OHgAAAZY"]
[Sun May 24 18:47:18.696639 2026] [:error] [pid 49744:tid 49764] [client 45.91.22.19:48733] [client 45.91.22.19] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/shell/index.php"] [unique_id "ahLXNjsE5kPdFpUbbHHSjgAAANI"]
[Sun May 24 18:47:19.745915 2026] [:error] [pid 23497:tid 23500] [client 45.91.22.52:51595] [client 45.91.22.52] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/template-singl-portfolio.php"] [unique_id "ahLXNyPlV47QcYwd2v_8sAAAAUA"]
[Sun May 24 18:47:20.519807 2026] [:error] [pid 41708:tid 41726] [client 45.91.22.40:61579] [client 45.91.22.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wordpress-seo/admin/metabox/about.php"] [unique_id "ahLXOP4tQzoTxpuHBF7OIQAAAZA"]
[Sun May 24 18:47:21.292284 2026] [:error] [pid 49744:tid 49760] [client 45.91.22.25:50025] [client 45.91.22.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wordpress-seo/src/dashboard/application/search-rankings/about.php"] [unique_id "ahLXOTsE5kPdFpUbbHHSjwAAAM4"]
[Sun May 24 18:47:22.060090 2026] [:error] [pid 49775:tid 49794] [client 45.91.22.32:65103] [client 45.91.22.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/Iitespeed-cache/classwithtostring.php"] [unique_id "ahLXOovZb8G6T8WpI1iddwAAABE"]
[Sun May 24 18:47:22.898494 2026] [:error] [pid 23497:tid 23514] [client 45.91.22.6:20281] [client 45.91.22.6] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/elementor/core/files/about.php"] [unique_id "ahLXOiPlV47QcYwd2v_8swAAAU4"]
[Sun May 24 18:47:23.683288 2026] [:error] [pid 23497:tid 23515] [client 45.91.22.11:54953] [client 45.91.22.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/elementor/includes/interfaces/about.php"] [unique_id "ahLXOyPlV47QcYwd2v_8tAAAAU8"]
[Sun May 24 18:47:24.470880 2026] [:error] [pid 49744:tid 49748] [client 45.91.22.15:61209] [client 45.91.22.15] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/waspthemes-yellow-pencil/images/list/about.php"] [unique_id "ahLXPDsE5kPdFpUbbHHSlAAAAMI"]
[Sun May 24 18:47:25.299085 2026] [:error] [pid 49744:tid 49757] [client 45.91.22.3:62647] [client 45.91.22.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/woocommerce/includes/import/about.php"] [unique_id "ahLXPTsE5kPdFpUbbHHSlQAAAMs"]
[Sun May 24 18:47:26.070399 2026] [:error] [pid 49688:tid 49701] [client 45.91.22.25:25011] [client 45.91.22.25] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/miniorange-malware-protection/handler/about.php"] [unique_id "ahLXPmYoQ9V6a_4pBsixagAAAEo"]
[Sun May 24 18:47:26.834397 2026] [:error] [pid 49744:tid 49759] [client 45.91.22.8:54485] [client 45.91.22.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/mtodm/index.php"] [unique_id "ahLXPjsE5kPdFpUbbHHSlgAAAM0"]
[Sun May 24 18:47:27.639584 2026] [:error] [pid 49744:tid 49754] [client 45.91.22.2:40855] [client 45.91.22.2] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/elementor/modules/atomic-widgets/prop-types/transform/lock.php"] [unique_id "ahLXPzsE5kPdFpUbbHHSmQAAAMg"]
[Sun May 24 18:47:28.481506 2026] [:error] [pid 49775:tid 49779] [client 45.91.22.4:20431] [client 45.91.22.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/x/wp-classs-editor.php"] [unique_id "ahLXQIvZb8G6T8WpI1idfAAAAAI"]
[Sun May 24 18:47:29.251322 2026] [:error] [pid 41708:tid 41725] [client 45.91.22.5:39517] [client 45.91.22.5] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/elementor-pro/cong.php"] [unique_id "ahLXQf4tQzoTxpuHBF7OKAAAAY8"]
[Sun May 24 18:47:30.024113 2026] [:error] [pid 49775:tid 49778] [client 45.91.22.4:45429] [client 45.91.22.4] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/pretty-link/js/build/wp-cron.php"] [unique_id "ahLXQovZb8G6T8WpI1idfQAAAAE"]
[Sun May 24 18:47:30.825620 2026] [:error] [pid 49744:tid 49767] [client 45.91.22.3:28605] [client 45.91.22.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/slideshow-ck/themes/config.php"] [unique_id "ahLXQjsE5kPdFpUbbHHSmwAAANU"]
[Sun May 24 18:47:31.592590 2026] [:error] [pid 2639:tid 2645] [client 45.91.22.34:27899] [client 45.91.22.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/system.php"] [unique_id "ahLXQ0zQncQTd0Z0Oe9wowAAAQQ"]
[Sun May 24 18:47:32.502866 2026] [:error] [pid 23497:tid 23512] [client 45.91.22.35:59095] [client 45.91.22.35] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp-admin/security.php"] [unique_id "ahLXRCPlV47QcYwd2v_8vgAAAUw"]
[Sun May 24 18:47:33.293655 2026] [:error] [pid 23497:tid 23506] [client 45.91.22.16:63239] [client 45.91.22.16] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/contact-form-7/rstsgd.php"] [unique_id "ahLXRSPlV47QcYwd2v_8wAAAAUY"]
[Sun May 24 18:47:34.085036 2026] [:error] [pid 49775:tid 49784] [client 45.91.22.26:64369] [client 45.91.22.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/shortcodes-ultimate/admin.php"] [unique_id "ahLXRovZb8G6T8WpI1idgwAAAAc"]
[Sun May 24 18:47:34.856582 2026] [:error] [pid 41708:tid 41711] [client 45.91.22.40:57397] [client 45.91.22.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wordpress-seo/inc/WPSEO.php"] [unique_id "ahLXRv4tQzoTxpuHBF7OLQAAAYE"]
[Sun May 24 18:47:35.630609 2026] [:error] [pid 49744:tid 49749] [client 45.91.22.10:35243] [client 45.91.22.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/woocommerce/includes/admin/reports/class-wc-report-orders-stats.php"] [unique_id "ahLXRzsE5kPdFpUbbHHSngAAAMM"]
[Sun May 24 18:47:36.412785 2026] [:error] [pid 23497:tid 23514] [client 45.91.22.11:40721] [client 45.91.22.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/contact-form-7/admin/js/contact-form-7-admin.js.php"] [unique_id "ahLXSCPlV47QcYwd2v_8wwAAAU4"]
[Sun May 24 18:47:37.183329 2026] [:error] [pid 23497:tid 23515] [client 45.91.22.23:28157] [client 45.91.22.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/revslider/temp/update_extract/revslider.php"] [unique_id "ahLXSSPlV47QcYwd2v_8xAAAAU8"]
[Sun May 24 18:47:38.102645 2026] [:error] [pid 23497:tid 23509] [client 45.91.22.22:61635] [client 45.91.22.22] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php"] [unique_id "ahLXSiPlV47QcYwd2v_8xwAAAUk"]
[Sun May 24 18:47:38.879895 2026] [:error] [pid 23497:tid 23518] [client 45.91.22.26:50471] [client 45.91.22.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyone/template-parts/index.php"] [unique_id "ahLXSiPlV47QcYwd2v_8yAAAAVI"]
[Sun May 24 18:47:39.662873 2026] [:error] [pid 49775:tid 49798] [client 45.91.22.54:23219] [client 45.91.22.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentyfour/patterns/file.php"] [unique_id "ahLXS4vZb8G6T8WpI1idhgAAABU"]
[Sun May 24 18:47:40.440160 2026] [:error] [pid 2639:tid 2646] [client 45.91.22.34:60121] [client 45.91.22.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/assets/fonts/index.php"] [unique_id "ahLXTEzQncQTd0Z0Oe9wpQAAAQU"]
[Sun May 24 18:47:41.237238 2026] [:error] [pid 23497:tid 23514] [client 45.91.22.18:36401] [client 45.91.22.18] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwenty/assets/fonts/inter/index.php"] [unique_id "ahLXTSPlV47QcYwd2v_8zAAAAU4"]
[Sun May 24 18:47:42.014705 2026] [:error] [pid 49744:tid 49754] [client 45.91.22.46:35071] [client 45.91.22.46] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/twentytwentytwo/parts/index.php"] [unique_id "ahLXTjsE5kPdFpUbbHHSoQAAAMg"]
[Sun May 24 18:47:42.789631 2026] [:error] [pid 41708:tid 41719] [client 45.91.22.13:64115] [client 45.91.22.13] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/chillbud/inc/welcome/assets/img/index.php"] [unique_id "ahLXTv4tQzoTxpuHBF7ONAAAAYk"]
[Sun May 24 18:47:45.116594 2026] [:error] [pid 49688:tid 49711] [client 45.91.22.8:63099] [client 45.91.22.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/astra/inc/builder/type/base/dynamic-css/button/index.php"] [unique_id "ahLXUWYoQ9V6a_4pBsixcAAAAFQ"]
[Sun May 24 18:47:46.703667 2026] [:error] [pid 23497:tid 23506] [client 45.91.22.11:55587] [client 45.91.22.11] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/neve/assets/apps/dashboard/build/index.php"] [unique_id "ahLXUiPlV47QcYwd2v_8zwAAAUY"]
[Sun May 24 18:47:47.614565 2026] [:error] [pid 23497:tid 23512] [client 45.91.22.24:39767] [client 45.91.22.24] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/packed.php"] [unique_id "ahLXUyPlV47QcYwd2v_80AAAAUw"]
[Sun May 24 18:47:48.481921 2026] [:error] [pid 4777:tid 4791] [client 45.91.22.26:63991] [client 45.91.22.26] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "ahLXVPtPctoQOm4w5pN58wAAAck"]
[Sun May 24 18:47:49.259013 2026] [:error] [pid 4777:tid 4783] [client 45.91.22.47:47883] [client 45.91.22.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/uploads/wpforms/index.php"] [unique_id "ahLXVftPctoQOm4w5pN59QAAAcE"]
[Sun May 24 18:47:50.111224 2026] [:error] [pid 23497:tid 23511] [client 45.91.22.40:57097] [client 45.91.22.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/plugins/admin.php"] [unique_id "ahLXViPlV47QcYwd2v_82AAAAUs"]
[Sun May 24 18:47:50.964746 2026] [:error] [pid 23497:tid 23522] [client 45.91.22.47:46397] [client 45.91.22.47] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/languages/themes/index.php"] [unique_id "ahLXViPlV47QcYwd2v_82gAAAVY"]
[Sun May 24 18:47:51.743104 2026] [:error] [pid 23497:tid 23502] [client 45.91.22.10:39773] [client 45.91.22.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/codemirror/config.php"] [unique_id "ahLXVyPlV47QcYwd2v_83wAAAUI"]
[Sun May 24 18:47:52.592900 2026] [:error] [pid 4777:tid 4800] [client 45.91.22.31:47383] [client 45.91.22.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/js/tinymce/themes/about.php"] [unique_id "ahLXWPtPctoQOm4w5pN5-wAAAdI"]
[Sun May 24 18:47:53.396333 2026] [:error] [pid 4777:tid 4783] [client 45.91.22.48:53209] [client 45.91.22.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/block-bindings/system_core.php"] [unique_id "ahLXWftPctoQOm4w5pN5_QAAAcE"]
[Sun May 24 18:47:54.225927 2026] [:error] [pid 4777:tid 4793] [client 45.91.22.31:60679] [client 45.91.22.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "ahLXWvtPctoQOm4w5pN6AAAAAcs"]
[Sun May 24 18:47:55.024556 2026] [:error] [pid 49744:tid 49746] [client 45.91.22.15:24895] [client 45.91.22.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/sodium_compat/namespaced/Core/goods.php"] [unique_id "ahLXWzsE5kPdFpUbbHHSpwAAAMA"]
[Sun May 24 18:47:55.859088 2026] [:error] [pid 49775:tid 49781] [client 45.91.22.45:55683] [client 45.91.22.45] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "ahLXW4vZb8G6T8WpI1idiAAAAAQ"]
[Sun May 24 18:47:56.912054 2026] [:error] [pid 41708:tid 41712] [client 45.91.22.32:33441] [client 45.91.22.32] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-admin/maint/wp-conflg.php"] [unique_id "ahLXXP4tQzoTxpuHBF7OQgAAAYI"]
[Sun May 24 18:47:57.701990 2026] [:error] [pid 4777:tid 4806] [client 45.91.22.23:34083] [client 45.91.22.23] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-config-sample.php"] [unique_id "ahLXXftPctoQOm4w5pN6CAAAAdg"]
[Sun May 24 18:47:58.478934 2026] [:error] [pid 49775:tid 49784] [client 45.91.22.8:25735] [client 45.91.22.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/pwnd-themes/php5-litespeed.php"] [unique_id "ahLXXovZb8G6T8WpI1idjQAAAAc"]
[Sun May 24 18:47:59.251797 2026] [:error] [pid 41708:tid 41726] [client 45.91.22.38:53155] [client 45.91.22.38] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/updraft/emptydir/index.php"] [unique_id "ahLXX_4tQzoTxpuHBF7ORgAAAZA"]
[Sun May 24 18:48:00.026138 2026] [:error] [pid 2639:tid 2659] [client 45.91.22.10:22681] [client 45.91.22.10] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/themes/rstsgd.php"] [unique_id "ahLXYEzQncQTd0Z0Oe9wrgAAARI"]
[Sun May 24 18:48:01.088848 2026] [:error] [pid 49775:tid 49790] [client 45.91.22.29:24093] [client 45.91.22.29] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/wp-solo/solo.php"] [unique_id "ahLXYYvZb8G6T8WpI1idjwAAAA0"]
[Sun May 24 18:48:02.224191 2026] [:error] [pid 41708:tid 41721] [client 45.91.22.42:42971] [client 45.91.22.42] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/view-source/moon.php"] [unique_id "ahLXYv4tQzoTxpuHBF7OSwAAAYs"]
[Sun May 24 18:48:03.242633 2026] [:error] [pid 41708:tid 41734] [client 45.91.22.36:48545] [client 45.91.22.36] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/security_1777619880/caches.php"] [unique_id "ahLXY_4tQzoTxpuHBF7OTQAAAZg"]
[Sun May 24 18:48:04.368282 2026] [:error] [pid 41708:tid 41725] [client 45.91.22.34:25029] [client 45.91.22.34] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/social_1777619877/caches.php"] [unique_id "ahLXZP4tQzoTxpuHBF7OUQAAAY8"]
[Sun May 24 18:48:05.145898 2026] [:error] [pid 49775:tid 49778] [client 45.91.22.40:35001] [client 45.91.22.40] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/jsonq.php"] [unique_id "ahLXZYvZb8G6T8WpI1idkQAAAAE"]
[Sun May 24 18:48:05.956916 2026] [:error] [pid 2639:tid 2649] [client 45.91.22.54:53751] [client 45.91.22.54] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/payment-gateway-pix-for-woocommerce/Includes/files/certs_c6/admin.php"] [unique_id "ahLXZUzQncQTd0Z0Oe9wuAAAAQg"]
[Sun May 24 18:48:06.963853 2026] [:error] [pid 49744:tid 49758] [client 45.91.22.8:58815] [client 45.91.22.8] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/ioxi/ioxi-o2.php"] [unique_id "ahLXZjsE5kPdFpUbbHHSsAAAAMw"]
[Sun May 24 18:48:07.776570 2026] [:error] [pid 49744:tid 49762] [client 45.91.22.37:21801] [client 45.91.22.37] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/plugin/uninstall.php"] [unique_id "ahLXZzsE5kPdFpUbbHHSsgAAANA"]
[Sun May 24 18:48:08.550526 2026] [:error] [pid 49744:tid 49766] [client 45.91.22.3:57333] [client 45.91.22.3] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-content/plugins/Shelly/Shelly.php"] [unique_id "ahLXaDsE5kPdFpUbbHHStQAAANQ"]
[Sun May 24 20:58:07.213030 2026] [:error] [pid 15835:tid 15844] [client 34.26.158.70:50538] [client 34.26.158.70] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.26.158.70, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ahL132WbknYlUM9P0qPCIgAAAAc"]
[Sun May 24 20:58:07.216585 2026] [:error] [pid 15835:tid 15844] [client 34.26.158.70:50538] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Sun May 24 20:58:09.878326 2026] [:error] [pid 15835:tid 15860] [client 34.26.158.70:50538] [client 34.26.158.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "ahL14WWbknYlUM9P0qPCNAAAABc"]
[Sun May 24 20:58:10.465938 2026] [:error] [pid 11281:tid 11335] [client 34.26.158.70:49976] [client 34.26.158.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "ahL14pKmC9taWvA91j53VwAAAJY"]
[Sun May 24 20:58:11.092544 2026] [:error] [pid 11282:tid 11355] [client 34.26.158.70:61403] [client 34.26.158.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "ahL14-0bPyN3C7HZ1R-RowAAAM8"]
[Sun May 24 20:58:11.781407 2026] [:error] [pid 15835:tid 15849] [client 34.26.158.70:49200] [client 34.26.158.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "ahL142WbknYlUM9P0qPCOgAAAAw"]
[Sun May 24 22:44:58.338498 2026] [:error] [pid 15835:tid 15855] [client 62.4.29.86:3446] [client 62.4.29.86] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "ahMO6mWbknYlUM9P0qP3uAAAABI"]
[Mon May 25 04:26:48.965758 2026] [:error] [pid 50423:tid 50448] [client 170.64.224.245:49420] [client 170.64.224.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "ahNfCKJWO7En4nKEQ3j6EgAAARc"]
[Mon May 25 04:26:49.088527 2026] [:error] [pid 50423:tid 50445] [client 170.64.224.245:47210] [client 170.64.224.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "ahNfCaJWO7En4nKEQ3j6FAAAARQ"]
[Mon May 25 04:26:49.368680 2026] [:error] [pid 9398:tid 9423] [client 170.64.224.245:49458] [client 170.64.224.245] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||nextspaceconsulting.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "nextspaceconsulting.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahNfCehIu7KstzsCua-BOgAAANM"]
[Mon May 25 04:26:49.376182 2026] [:error] [pid 50423:tid 50448] [client 170.64.224.245:49434] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jquery.filer/php/readme.txt"] [unique_id "ahNfCaJWO7En4nKEQ3j6JAAAARc"]
[Mon May 25 04:26:49.389981 2026] [:error] [pid 9398:tid 9407] [client 170.64.224.245:49444] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jquery.filer/php/readme.txt"] [unique_id "ahNfCehIu7KstzsCua-BOwAAAMc"]
[Mon May 25 04:26:49.398138 2026] [:error] [pid 50423:tid 50445] [client 170.64.224.245:49472] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "ahNfCaJWO7En4nKEQ3j6JQAAARQ"]
[Mon May 25 04:26:49.404192 2026] [:error] [pid 50423:tid 50447] [client 170.64.224.245:49426] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jquery.filer/php/readme.txt"] [unique_id "ahNfCaJWO7En4nKEQ3j6JgAAARY"]
[Mon May 25 04:26:49.412212 2026] [:error] [pid 50423:tid 50426] [client 170.64.224.245:49464] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "ahNfCaJWO7En4nKEQ3j6JwAAAQE"]
[Mon May 25 04:26:49.421114 2026] [:error] [pid 9398:tid 9425] [client 170.64.224.245:49458] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BPAAAANU"]
[Mon May 25 04:26:49.451720 2026] [:error] [pid 9302:tid 9326] [client 170.64.224.245:49482] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2egAAABM"]
[Mon May 25 04:26:49.453632 2026] [:error] [pid 9303:tid 9352] [client 170.64.224.245:49496] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/file-manager/initialize"] [unique_id "ahNfCX3bQScbssitjPQa6QAAAFI"]
[Mon May 25 04:26:49.455502 2026] [:error] [pid 50423:tid 50435] [client 170.64.224.245:49512] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahNfCaJWO7En4nKEQ3j6KAAAAQo"]
[Mon May 25 04:26:49.463947 2026] [:error] [pid 50423:tid 50440] [client 170.64.224.245:49518] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahNfCaJWO7En4nKEQ3j6KQAAAQ8"]
[Mon May 25 04:26:49.464910 2026] [:error] [pid 50423:tid 50442] [client 170.64.224.245:49522] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahNfCaJWO7En4nKEQ3j6KgAAARE"]
[Mon May 25 04:26:49.494811 2026] [:error] [pid 50423:tid 50443] [client 170.64.224.245:49538] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNfCaJWO7En4nKEQ3j6LAAAARI"]
[Mon May 25 04:26:49.495585 2026] [:error] [pid 9302:tid 9323] [client 170.64.224.245:49554] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2ewAAABA"]
[Mon May 25 04:26:49.505414 2026] [:error] [pid 9302:tid 9315] [client 170.64.224.245:49558] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2fAAAAAg"]
[Mon May 25 04:26:49.506718 2026] [:error] [pid 9303:tid 9344] [client 170.64.224.245:49562] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa6gAAAEo"]
[Mon May 25 04:26:49.508166 2026] [:error] [pid 9398:tid 9413] [client 170.64.224.245:49568] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BPQAAAMk"]
[Mon May 25 04:26:49.513889 2026] [:error] [pid 50423:tid 50427] [client 170.64.224.245:49576] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNfCaJWO7En4nKEQ3j6LQAAAQI"]
[Mon May 25 04:26:49.518804 2026] [:error] [pid 9304:tid 9379] [client 170.64.224.245:49592] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY2wAAAJI"]
[Mon May 25 04:26:49.537842 2026] [:error] [pid 9304:tid 9365] [client 170.64.224.245:49608] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY3AAAAIQ"]
[Mon May 25 04:26:49.539155 2026] [:error] [pid 9302:tid 9322] [client 170.64.224.245:49622] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2fQAAAA8"]
[Mon May 25 04:26:49.539945 2026] [:error] [pid 9303:tid 9342] [client 170.64.224.245:49638] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa6wAAAEg"]
[Mon May 25 04:26:49.548603 2026] [:error] [pid 9398:tid 9415] [client 170.64.224.245:49642] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BPgAAAMs"]
[Mon May 25 04:26:49.549480 2026] [:error] [pid 9304:tid 9374] [client 170.64.224.245:49650] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY3QAAAI0"]
[Mon May 25 04:26:49.550267 2026] [:error] [pid 9304:tid 9383] [client 170.64.224.245:49652] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY3gAAAJY"]
[Mon May 25 04:26:49.552757 2026] [:error] [pid 9302:tid 9325] [client 170.64.224.245:49662] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2fgAAABI"]
[Mon May 25 04:26:49.555785 2026] [:error] [pid 9302:tid 9328] [client 170.64.224.245:49664] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2fwAAABU"]
[Mon May 25 04:26:49.557698 2026] [:error] [pid 9303:tid 9340] [client 170.64.224.245:49666] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upload/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa7AAAAEY"]
[Mon May 25 04:26:49.561368 2026] [:error] [pid 9398:tid 9424] [client 170.64.224.245:49672] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BPwAAANQ"]
[Mon May 25 04:26:49.580013 2026] [:error] [pid 9398:tid 9412] [client 170.64.224.245:49682] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BQAAAAMg"]
[Mon May 25 04:26:49.590518 2026] [:error] [pid 9303:tid 9338] [client 170.64.224.245:49696] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa7QAAAEQ"]
[Mon May 25 04:26:49.595544 2026] [:error] [pid 9303:tid 9343] [client 170.64.224.245:49716] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa7gAAAEk"]
[Mon May 25 04:26:49.595731 2026] [:error] [pid 9398:tid 9417] [client 170.64.224.245:49712] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BQQAAAM0"]
[Mon May 25 04:26:49.597737 2026] [:error] [pid 9302:tid 9312] [client 170.64.224.245:49756] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2gQAAAAU"]
[Mon May 25 04:26:49.598143 2026] [:error] [pid 9302:tid 9319] [client 170.64.224.245:49730] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2gAAAAAw"]
[Mon May 25 04:26:49.598683 2026] [:error] [pid 9398:tid 9419] [client 170.64.224.245:49740] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BQgAAAM8"]
[Mon May 25 04:26:49.605202 2026] [:error] [pid 9303:tid 9346] [client 170.64.224.245:49768] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa7wAAAEw"]
[Mon May 25 04:26:49.621399 2026] [:error] [pid 9302:tid 9317] [client 170.64.224.245:49776] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2ggAAAAo"]
[Mon May 25 04:26:49.631428 2026] [:error] [pid 9302:tid 9314] [client 170.64.224.245:49790] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2gwAAAAc"]
[Mon May 25 04:26:49.636941 2026] [:error] [pid 9302:tid 9316] [client 170.64.224.245:49798] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2hAAAAAk"]
[Mon May 25 04:26:49.640680 2026] [:error] [pid 9398:tid 9422] [client 170.64.224.245:49806] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/upload/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BQwAAANI"]
[Mon May 25 04:26:49.641261 2026] [:error] [pid 9303:tid 9354] [client 170.64.224.245:49820] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa8AAAAFQ"]
[Mon May 25 04:26:49.668444 2026] [:error] [pid 9304:tid 9376] [client 170.64.224.245:49836] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY3wAAAI8"]
[Mon May 25 04:26:49.683542 2026] [:error] [pid 9303:tid 9350] [client 170.64.224.245:49844] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa8QAAAFA"]
[Mon May 25 04:26:49.695192 2026] [:error] [pid 9304:tid 9373] [client 170.64.224.245:49858] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY4AAAAIw"]
[Mon May 25 04:26:49.710012 2026] [:error] [pid 9398:tid 9428] [client 170.64.224.245:49868] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BRAAAANg"]
[Mon May 25 04:26:49.712115 2026] [:error] [pid 9398:tid 9400] [client 170.64.224.245:49860] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BRQAAAMA"]
[Mon May 25 04:26:49.713964 2026] [:error] [pid 9304:tid 9363] [client 170.64.224.245:49878] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY4QAAAII"]
[Mon May 25 04:26:49.735602 2026] [:error] [pid 9304:tid 9370] [client 170.64.224.245:49894] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY4gAAAIk"]
[Mon May 25 04:26:49.746619 2026] [:error] [pid 9398:tid 9418] [client 170.64.224.245:49898] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BRgAAAM4"]
[Mon May 25 04:26:49.751741 2026] [:error] [pid 9304:tid 9367] [client 170.64.224.245:49912] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY4wAAAIY"]
[Mon May 25 04:26:49.753388 2026] [:error] [pid 9304:tid 9366] [client 170.64.224.245:49928] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY5AAAAIU"]
[Mon May 25 04:26:49.756425 2026] [:error] [pid 9398:tid 9421] [client 170.64.224.245:49938] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BRwAAANE"]
[Mon May 25 04:26:49.756768 2026] [:error] [pid 9304:tid 9380] [client 170.64.224.245:49944] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY5QAAAJM"]
[Mon May 25 04:26:49.776468 2026] [:error] [pid 9303:tid 9334] [client 170.64.224.245:49954] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa8gAAAEA"]
[Mon May 25 04:26:49.777216 2026] [:error] [pid 9303:tid 9349] [client 170.64.224.245:49966] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa8wAAAE8"]
[Mon May 25 04:26:49.789268 2026] [:error] [pid 9304:tid 9377] [client 170.64.224.245:49978] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY5gAAAJA"]
[Mon May 25 04:26:49.794456 2026] [:error] [pid 9398:tid 9401] [client 170.64.224.245:49990] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BSAAAAME"]
[Mon May 25 04:26:49.797844 2026] [:error] [pid 9304:tid 9381] [client 170.64.224.245:50006] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY5wAAAJQ"]
[Mon May 25 04:26:49.798351 2026] [:error] [pid 9398:tid 9416] [client 170.64.224.245:50010] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BSQAAAMw"]
[Mon May 25 04:26:49.819521 2026] [:error] [pid 9303:tid 9341] [client 170.64.224.245:50018] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa9AAAAEc"]
[Mon May 25 04:26:49.832181 2026] [:error] [pid 9304:tid 9372] [client 170.64.224.245:50024] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNfCeVEV2qpMC_1UzRY6AAAAIs"]
[Mon May 25 04:26:49.839371 2026] [:error] [pid 9398:tid 9427] [client 170.64.224.245:50032] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahNfCehIu7KstzsCua-BSgAAANc"]
[Mon May 25 04:26:49.861398 2026] [:error] [pid 9303:tid 9339] [client 170.64.224.245:50044] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa9QAAAEU"]
[Mon May 25 04:26:49.955667 2026] [:error] [pid 9304:tid 9378] [client 170.64.224.245:50060] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahNfCeVEV2qpMC_1UzRY6QAAAJE"]
[Mon May 25 04:26:49.966368 2026] [:error] [pid 9302:tid 9331] [client 170.64.224.245:50090] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahNfCS1RaFfTSnDQnqE2hQAAABg"]
[Mon May 25 04:26:49.967287 2026] [:error] [pid 9303:tid 9351] [client 170.64.224.245:50062] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/server/php/"] [unique_id "ahNfCX3bQScbssitjPQa9gAAAFE"]
[Mon May 25 04:26:49.968570 2026] [:error] [pid 9302:tid 9307] [client 170.64.224.245:50078] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahNfCS1RaFfTSnDQnqE2hgAAAAA"]
[Mon May 25 04:26:49.977122 2026] [:error] [pid 9302:tid 9329] [client 170.64.224.245:50102] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2hwAAABY"]
[Mon May 25 04:26:49.981363 2026] [:error] [pid 9302:tid 9324] [client 170.64.224.245:50126] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2iAAAABE"]
[Mon May 25 04:26:49.983733 2026] [:error] [pid 9302:tid 9321] [client 170.64.224.245:50112] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2iQAAAA4"]
[Mon May 25 04:26:49.999342 2026] [:error] [pid 9302:tid 9330] [client 170.64.224.245:50134] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset/server/php/"] [unique_id "ahNfCS1RaFfTSnDQnqE2igAAABc"]
[Mon May 25 04:26:50.000142 2026] [:error] [pid 9302:tid 9308] [client 170.64.224.245:50144] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahNfCS1RaFfTSnDQnqE2iwAAAAE"]
[Mon May 25 04:26:50.007039 2026] [:error] [pid 9302:tid 9313] [client 170.64.224.245:50160] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2jAAAAAY"]
[Mon May 25 04:26:50.007499 2026] [:error] [pid 9302:tid 9309] [client 170.64.224.245:50156] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/server/php/"] [unique_id "ahNfCi1RaFfTSnDQnqE2jQAAAAI"]
[Mon May 25 04:26:50.008402 2026] [:error] [pid 9302:tid 9320] [client 170.64.224.245:50162] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/server/php/"] [unique_id "ahNfCi1RaFfTSnDQnqE2jgAAAA0"]
[Mon May 25 04:26:50.011612 2026] [:error] [pid 9304:tid 9384] [client 170.64.224.245:50172] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY6gAAAJc"]
[Mon May 25 04:26:50.016440 2026] [:error] [pid 50423:tid 50449] [client 170.64.224.245:50184] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6NAAAARg"]
[Mon May 25 04:26:50.018697 2026] [:error] [pid 50423:tid 50441] [client 170.64.224.245:50198] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6NQAAARA"]
[Mon May 25 04:26:50.018789 2026] [:error] [pid 50423:tid 50432] [client 170.64.224.245:50214] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6NgAAAQc"]
[Mon May 25 04:26:50.024358 2026] [:error] [pid 50423:tid 50448] [client 170.64.224.245:50240] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6NwAAARc"]
[Mon May 25 04:26:50.028409 2026] [:error] [pid 50423:tid 50445] [client 170.64.224.245:50224] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6OAAAARQ"]
[Mon May 25 04:26:50.028694 2026] [:error] [pid 9302:tid 9311] [client 170.64.224.245:50252] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin/server/php/"] [unique_id "ahNfCi1RaFfTSnDQnqE2jwAAAAQ"]
[Mon May 25 04:26:50.040478 2026] [:error] [pid 50423:tid 50447] [client 170.64.224.245:50268] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6OQAAARY"]
[Mon May 25 04:26:50.041858 2026] [:error] [pid 50423:tid 50426] [client 170.64.224.245:50280] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6OgAAAQE"]
[Mon May 25 04:26:50.048590 2026] [:error] [pid 50423:tid 50435] [client 170.64.224.245:50294] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6OwAAAQo"]
[Mon May 25 04:26:50.049018 2026] [:error] [pid 50423:tid 50440] [client 170.64.224.245:50308] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6PAAAAQ8"]
[Mon May 25 04:26:50.051020 2026] [:error] [pid 50423:tid 50442] [client 170.64.224.245:50312] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6PQAAARE"]
[Mon May 25 04:26:50.055853 2026] [:error] [pid 9304:tid 9362] [client 170.64.224.245:50316] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY6wAAAIE"]
[Mon May 25 04:26:50.058640 2026] [:error] [pid 9303:tid 9358] [client 170.64.224.245:50348] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahNfCn3bQScbssitjPQa9wAAAFg"]
[Mon May 25 04:26:50.059209 2026] [:error] [pid 9302:tid 9327] [client 170.64.224.245:50324] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNfCi1RaFfTSnDQnqE2kAAAABQ"]
[Mon May 25 04:26:50.060223 2026] [:error] [pid 50423:tid 50443] [client 170.64.224.245:50338] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6PgAAARI"]
[Mon May 25 04:26:50.064737 2026] [:error] [pid 50423:tid 50427] [client 170.64.224.245:50356] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6PwAAAQI"]
[Mon May 25 04:26:50.070843 2026] [:error] [pid 50423:tid 50439] [client 170.64.224.245:50380] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugin/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6QAAAAQ4"]
[Mon May 25 04:26:50.071954 2026] [:error] [pid 50423:tid 50425] [client 170.64.224.245:50372] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6QQAAAQA"]
[Mon May 25 04:26:50.080807 2026] [:error] [pid 50423:tid 50436] [client 170.64.224.245:50386] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6QgAAAQs"]
[Mon May 25 04:26:50.090463 2026] [:error] [pid 50423:tid 50428] [client 170.64.224.245:50392] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6QwAAAQM"]
[Mon May 25 04:26:50.101978 2026] [:error] [pid 50423:tid 50434] [client 170.64.224.245:50400] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6RAAAAQk"]
[Mon May 25 04:26:50.102521 2026] [:error] [pid 50423:tid 50431] [client 170.64.224.245:50414] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6RQAAAQY"]
[Mon May 25 04:26:50.105880 2026] [:error] [pid 50423:tid 50438] [client 170.64.224.245:50418] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/server/php/"] [unique_id "ahNfCqJWO7En4nKEQ3j6RgAAAQ0"]
[Mon May 25 04:26:50.169216 2026] [:error] [pid 50423:tid 50441] [client 170.64.224.245:50428] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6RwAAARA"]
[Mon May 25 04:26:50.182373 2026] [:error] [pid 9302:tid 9310] [client 170.64.224.245:50444] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2kgAAAAM"]
[Mon May 25 04:26:50.192657 2026] [:error] [pid 50423:tid 50432] [client 170.64.224.245:50446] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6SAAAAQc"]
[Mon May 25 04:26:50.194174 2026] [:error] [pid 9302:tid 9326] [client 170.64.224.245:50448] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2kwAAABM"]
[Mon May 25 04:26:50.199962 2026] [:error] [pid 9302:tid 9323] [client 170.64.224.245:50462] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2lAAAABA"]
[Mon May 25 04:26:50.200257 2026] [:error] [pid 9302:tid 9315] [client 170.64.224.245:50454] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2lQAAAAg"]
[Mon May 25 04:26:50.212774 2026] [:error] [pid 9302:tid 9322] [client 170.64.224.245:50464] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2lgAAAA8"]
[Mon May 25 04:26:50.213756 2026] [:error] [pid 9302:tid 9325] [client 170.64.224.245:50480] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2lwAAABI"]
[Mon May 25 04:26:50.216998 2026] [:error] [pid 9302:tid 9312] [client 170.64.224.245:50490] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2mAAAAAU"]
[Mon May 25 04:26:50.225170 2026] [:error] [pid 9303:tid 9348] [client 170.64.224.245:50504] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQa-AAAAE4"]
[Mon May 25 04:26:50.228610 2026] [:error] [pid 9302:tid 9319] [client 170.64.224.245:50502] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2mQAAAAw"]
[Mon May 25 04:26:50.234474 2026] [:error] [pid 9304:tid 9375] [client 170.64.224.245:50520] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY7AAAAI4"]
[Mon May 25 04:26:50.236181 2026] [:error] [pid 9302:tid 9317] [client 170.64.224.245:50532] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2mgAAAAo"]
[Mon May 25 04:26:50.244153 2026] [:error] [pid 9303:tid 9355] [client 170.64.224.245:50554] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQa-QAAAFU"]
[Mon May 25 04:26:50.244731 2026] [:error] [pid 9303:tid 9335] [client 170.64.224.245:50546] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQa-gAAAEE"]
[Mon May 25 04:26:50.245485 2026] [:error] [pid 9302:tid 9314] [client 170.64.224.245:50578] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2mwAAAAc"]
[Mon May 25 04:26:50.246310 2026] [:error] [pid 9303:tid 9353] [client 170.64.224.245:50566] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQa-wAAAFM"]
[Mon May 25 04:26:50.248450 2026] [:error] [pid 9303:tid 9356] [client 170.64.224.245:50584] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQa_AAAAFY"]
[Mon May 25 04:26:50.254106 2026] [:error] [pid 9302:tid 9316] [client 170.64.224.245:50600] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2nAAAAAk"]
[Mon May 25 04:26:50.255046 2026] [:error] [pid 9303:tid 9347] [client 170.64.224.245:50610] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQa_QAAAE0"]
[Mon May 25 04:26:50.263503 2026] [:error] [pid 9304:tid 9382] [client 170.64.224.245:50624] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY7QAAAJU"]
[Mon May 25 04:26:50.269081 2026] [:error] [pid 9303:tid 9352] [client 170.64.224.245:50640] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQa_gAAAFI"]
[Mon May 25 04:26:50.270829 2026] [:error] [pid 9303:tid 9344] [client 170.64.224.245:50652] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQa_wAAAEo"]
[Mon May 25 04:26:50.279063 2026] [:error] [pid 9304:tid 9385] [client 170.64.224.245:50668] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY7gAAAJg"]
[Mon May 25 04:26:50.279987 2026] [:error] [pid 9303:tid 9342] [client 170.64.224.245:50676] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbAAAAAEg"]
[Mon May 25 04:26:50.286872 2026] [:error] [pid 9303:tid 9340] [client 170.64.224.245:50686] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbAQAAAEY"]
[Mon May 25 04:26:50.287151 2026] [:error] [pid 9303:tid 9338] [client 170.64.224.245:50702] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbAgAAAEQ"]
[Mon May 25 04:26:50.288409 2026] [:error] [pid 9398:tid 9405] [client 170.64.224.245:50714] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahNfCuhIu7KstzsCua-BSwAAAMU"]
[Mon May 25 04:26:50.288955 2026] [:error] [pid 9303:tid 9343] [client 170.64.224.245:50718] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbAwAAAEk"]
[Mon May 25 04:26:50.292726 2026] [:error] [pid 9398:tid 9406] [client 170.64.224.245:50728] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahNfCuhIu7KstzsCua-BTAAAAMY"]
[Mon May 25 04:26:50.300840 2026] [:error] [pid 9303:tid 9346] [client 170.64.224.245:50734] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbBAAAAEw"]
[Mon May 25 04:26:50.304877 2026] [:error] [pid 9303:tid 9354] [client 170.64.224.245:50744] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbBQAAAFQ"]
[Mon May 25 04:26:50.315180 2026] [:error] [pid 9303:tid 9350] [client 170.64.224.245:50760] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbBgAAAFA"]
[Mon May 25 04:26:50.331715 2026] [:error] [pid 9303:tid 9334] [client 170.64.224.245:50766] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbCAAAAEA"]
[Mon May 25 04:26:50.332112 2026] [:error] [pid 9303:tid 9341] [client 170.64.224.245:50772] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbCQAAAEc"]
[Mon May 25 04:26:50.335603 2026] [:error] [pid 9303:tid 9339] [client 170.64.224.245:50784] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbCgAAAEU"]
[Mon May 25 04:26:50.436862 2026] [:error] [pid 9398:tid 9420] [client 170.64.224.245:50792] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahNfCuhIu7KstzsCua-BTQAAANA"]
[Mon May 25 04:26:50.437800 2026] [:error] [pid 9398:tid 9402] [client 170.64.224.245:50828] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahNfCuhIu7KstzsCua-BTgAAAMI"]
[Mon May 25 04:26:50.439019 2026] [:error] [pid 9304:tid 9369] [client 170.64.224.245:50808] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY8AAAAIg"]
[Mon May 25 04:26:50.439823 2026] [:error] [pid 9304:tid 9371] [client 170.64.224.245:50812] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY8QAAAIo"]
[Mon May 25 04:26:50.451121 2026] [:error] [pid 50423:tid 50447] [client 170.64.224.245:50832] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6TQAAARY"]
[Mon May 25 04:26:50.469865 2026] [:error] [pid 9303:tid 9351] [client 170.64.224.245:50840] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbDAAAAFE"]
[Mon May 25 04:26:50.471344 2026] [:error] [pid 9304:tid 9379] [client 170.64.224.245:50852] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY8gAAAJI"]
[Mon May 25 04:26:50.479965 2026] [:error] [pid 50423:tid 50430] [client 170.64.224.245:50860] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6TgAAAQU"]
[Mon May 25 04:26:50.481036 2026] [:error] [pid 9304:tid 9365] [client 170.64.224.245:50872] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY8wAAAIQ"]
[Mon May 25 04:26:50.482115 2026] [:error] [pid 9303:tid 9358] [client 170.64.224.245:50886] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbDQAAAFg"]
[Mon May 25 04:26:50.483377 2026] [:error] [pid 9303:tid 9336] [client 170.64.224.245:50878] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbDgAAAEI"]
[Mon May 25 04:26:50.483963 2026] [:error] [pid 9302:tid 9331] [client 170.64.224.245:50894] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2nQAAABg"]
[Mon May 25 04:26:50.499698 2026] [:error] [pid 9398:tid 9414] [client 170.64.224.245:50900] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahNfCuhIu7KstzsCua-BUAAAAMo"]
[Mon May 25 04:26:50.518250 2026] [:error] [pid 9303:tid 9355] [client 170.64.224.245:50910] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbDwAAAFU"]
[Mon May 25 04:26:50.518931 2026] [:error] [pid 9303:tid 9348] [client 170.64.224.245:50908] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbEAAAAE4"]
[Mon May 25 04:26:50.528097 2026] [:error] [pid 9303:tid 9335] [client 170.64.224.245:50918] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbEQAAAEE"]
[Mon May 25 04:26:50.528097 2026] [:error] [pid 9303:tid 9356] [client 170.64.224.245:50932] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbEgAAAFY"]
[Mon May 25 04:26:50.529713 2026] [:error] [pid 9303:tid 9347] [client 170.64.224.245:50942] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbFAAAAE0"]
[Mon May 25 04:26:50.530612 2026] [:error] [pid 9303:tid 9353] [client 170.64.224.245:50928] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbEwAAAFM"]
[Mon May 25 04:26:50.531007 2026] [:error] [pid 9304:tid 9374] [client 170.64.224.245:50936] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY9AAAAI0"]
[Mon May 25 04:26:50.547887 2026] [:error] [pid 9303:tid 9344] [client 170.64.224.245:50946] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbFQAAAEo"]
[Mon May 25 04:26:50.568330 2026] [:error] [pid 9398:tid 9423] [client 170.64.224.245:50948] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNfCuhIu7KstzsCua-BUQAAANM"]
[Mon May 25 04:26:50.569971 2026] [:error] [pid 9303:tid 9344] [client 170.64.224.245:50960] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbFwAAAEo"]
[Mon May 25 04:26:50.570015 2026] [:error] [pid 9303:tid 9342] [client 170.64.224.245:50972] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbFgAAAEg"]
[Mon May 25 04:26:50.662008 2026] [:error] [pid 9303:tid 9340] [client 170.64.224.245:50982] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCn3bQScbssitjPQbGAAAAEY"]
[Mon May 25 04:26:50.667115 2026] [:error] [pid 9303:tid 9338] [client 170.64.224.245:50990] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahNfCn3bQScbssitjPQbGQAAAEQ"]
[Mon May 25 04:26:50.669279 2026] [:error] [pid 9303:tid 9343] [client 170.64.224.245:51006] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahNfCn3bQScbssitjPQbGgAAAEk"]
[Mon May 25 04:26:50.675387 2026] [:error] [pid 9398:tid 9407] [client 170.64.224.245:51010] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahNfCuhIu7KstzsCua-BUgAAAMc"]
[Mon May 25 04:26:50.697610 2026] [:error] [pid 9303:tid 9346] [client 170.64.224.245:51020] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbGwAAAEw"]
[Mon May 25 04:26:50.705308 2026] [:error] [pid 9303:tid 9354] [client 170.64.224.245:51022] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCn3bQScbssitjPQbHAAAAFQ"]
[Mon May 25 04:26:50.705738 2026] [:error] [pid 9398:tid 9425] [client 170.64.224.245:51026] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahNfCuhIu7KstzsCua-BUwAAANU"]
[Mon May 25 04:26:50.709748 2026] [:error] [pid 9303:tid 9350] [client 170.64.224.245:51032] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahNfCn3bQScbssitjPQbHQAAAFA"]
[Mon May 25 04:26:50.711607 2026] [:error] [pid 9303:tid 9337] [client 170.64.224.245:51048] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahNfCn3bQScbssitjPQbHgAAAEM"]
[Mon May 25 04:26:50.717787 2026] [:error] [pid 9398:tid 9413] [client 170.64.224.245:51050] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahNfCuhIu7KstzsCua-BVAAAAMk"]
[Mon May 25 04:26:50.722521 2026] [:error] [pid 9398:tid 9415] [client 170.64.224.245:51062] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahNfCuhIu7KstzsCua-BVQAAAMs"]
[Mon May 25 04:26:50.723699 2026] [:error] [pid 9303:tid 9341] [client 170.64.224.245:51064] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahNfCn3bQScbssitjPQbHwAAAEc"]
[Mon May 25 04:26:50.733077 2026] [:error] [pid 9303:tid 9339] [client 170.64.224.245:51080] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbIAAAAEU"]
[Mon May 25 04:26:50.737988 2026] [:error] [pid 9303:tid 9351] [client 170.64.224.245:51090] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahNfCn3bQScbssitjPQbIQAAAFE"]
[Mon May 25 04:26:50.741215 2026] [:error] [pid 9303:tid 9358] [client 170.64.224.245:51092] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahNfCn3bQScbssitjPQbIgAAAFg"]
[Mon May 25 04:26:50.748700 2026] [:error] [pid 9304:tid 9376] [client 170.64.224.245:51116] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY9QAAAI8"]
[Mon May 25 04:26:50.749499 2026] [:error] [pid 9304:tid 9373] [client 170.64.224.245:51104] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY9gAAAIw"]
[Mon May 25 04:26:50.750506 2026] [:error] [pid 50423:tid 50442] [client 170.64.224.245:51128] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6UQAAARE"]
[Mon May 25 04:26:50.754020 2026] [:error] [pid 50423:tid 50443] [client 170.64.224.245:51142] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6UgAAARI"]
[Mon May 25 04:26:50.772080 2026] [:error] [pid 9304:tid 9370] [client 170.64.224.245:51180] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY-AAAAIk"]
[Mon May 25 04:26:50.774730 2026] [:error] [pid 9303:tid 9336] [client 170.64.224.245:51168] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahNfCn3bQScbssitjPQbIwAAAEI"]
[Mon May 25 04:26:50.775573 2026] [:error] [pid 9398:tid 9424] [client 170.64.224.245:51160] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahNfCuhIu7KstzsCua-BVgAAANQ"]
[Mon May 25 04:26:50.775886 2026] [:error] [pid 9304:tid 9363] [client 170.64.224.245:51144] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY-QAAAII"]
[Mon May 25 04:26:50.776929 2026] [:error] [pid 9304:tid 9367] [client 170.64.224.245:51190] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY-gAAAIY"]
[Mon May 25 04:26:50.784612 2026] [:error] [pid 9304:tid 9366] [client 170.64.224.245:51210] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY-wAAAIU"]
[Mon May 25 04:26:50.785327 2026] [:error] [pid 9304:tid 9380] [client 170.64.224.245:51194] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY_AAAAJM"]
[Mon May 25 04:26:50.796313 2026] [:error] [pid 9304:tid 9377] [client 170.64.224.245:51212] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY_QAAAJA"]
[Mon May 25 04:26:50.801594 2026] [:error] [pid 9304:tid 9381] [client 170.64.224.245:51214] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY_gAAAJQ"]
[Mon May 25 04:26:50.802303 2026] [:error] [pid 9304:tid 9378] [client 170.64.224.245:51224] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRY_wAAAJE"]
[Mon May 25 04:26:50.816933 2026] [:error] [pid 9304:tid 9362] [client 170.64.224.245:51246] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRZAAAAAIE"]
[Mon May 25 04:26:50.817367 2026] [:error] [pid 9304:tid 9384] [client 170.64.224.245:51234] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRZAQAAAJc"]
[Mon May 25 04:26:50.819498 2026] [:error] [pid 9398:tid 9412] [client 170.64.224.245:51258] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahNfCuhIu7KstzsCua-BVwAAAMg"]
[Mon May 25 04:26:50.826945 2026] [:error] [pid 9304:tid 9375] [client 170.64.224.245:51266] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRZAgAAAI4"]
[Mon May 25 04:26:50.827042 2026] [:error] [pid 9398:tid 9417] [client 170.64.224.245:51280] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahNfCuhIu7KstzsCua-BWAAAAM0"]
[Mon May 25 04:26:50.846980 2026] [:error] [pid 9304:tid 9382] [client 170.64.224.245:51288] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRZAwAAAJU"]
[Mon May 25 04:26:50.859272 2026] [:error] [pid 9398:tid 9419] [client 170.64.224.245:51300] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahNfCuhIu7KstzsCua-BWQAAAM8"]
[Mon May 25 04:26:50.887819 2026] [:error] [pid 9304:tid 9385] [client 170.64.224.245:51304] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRZBAAAAJg"]
[Mon May 25 04:26:50.890199 2026] [:error] [pid 9304:tid 9361] [client 170.64.224.245:51314] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRZBQAAAIA"]
[Mon May 25 04:26:50.906327 2026] [:error] [pid 9304:tid 9369] [client 170.64.224.245:51318] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRZBgAAAIg"]
[Mon May 25 04:26:50.923321 2026] [:error] [pid 50423:tid 50436] [client 170.64.224.245:51322] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6VQAAAQs"]
[Mon May 25 04:26:50.923579 2026] [:error] [pid 50423:tid 50428] [client 170.64.224.245:51326] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6VgAAAQM"]
[Mon May 25 04:26:50.931167 2026] [:error] [pid 50423:tid 50434] [client 170.64.224.245:51340] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6VwAAAQk"]
[Mon May 25 04:26:50.933449 2026] [:error] [pid 50423:tid 50438] [client 170.64.224.245:51352] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6WAAAAQ0"]
[Mon May 25 04:26:50.948051 2026] [:error] [pid 50423:tid 50449] [client 170.64.224.245:51356] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6WQAAARg"]
[Mon May 25 04:26:50.954688 2026] [:error] [pid 50423:tid 50437] [client 170.64.224.245:51366] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6WgAAAQw"]
[Mon May 25 04:26:50.963600 2026] [:error] [pid 50423:tid 50448] [client 170.64.224.245:51382] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6WwAAARc"]
[Mon May 25 04:26:50.964597 2026] [:error] [pid 9302:tid 9307] [client 170.64.224.245:51394] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2ngAAAAA"]
[Mon May 25 04:26:50.973449 2026] [:error] [pid 50423:tid 50446] [client 170.64.224.245:51406] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6XAAAARU"]
[Mon May 25 04:26:50.974343 2026] [:error] [pid 50423:tid 50445] [client 170.64.224.245:51422] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahNfCqJWO7En4nKEQ3j6XQAAARQ"]
[Mon May 25 04:26:50.981147 2026] [:error] [pid 9302:tid 9329] [client 170.64.224.245:51434] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2nwAAABY"]
[Mon May 25 04:26:50.981412 2026] [:error] [pid 9304:tid 9371] [client 170.64.224.245:51426] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRZCAAAAIo"]
[Mon May 25 04:26:50.982122 2026] [:error] [pid 9304:tid 9379] [client 170.64.224.245:51436] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCuVEV2qpMC_1UzRZCQAAAJI"]
[Mon May 25 04:26:50.989928 2026] [:error] [pid 9398:tid 9422] [client 170.64.224.245:51442] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahNfCuhIu7KstzsCua-BWgAAANI"]
[Mon May 25 04:26:50.998029 2026] [:error] [pid 9302:tid 9324] [client 170.64.224.245:51454] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2oAAAABE"]
[Mon May 25 04:26:50.999289 2026] [:error] [pid 9302:tid 9321] [client 170.64.224.245:51462] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahNfCi1RaFfTSnDQnqE2oQAAAA4"]
[Mon May 25 04:26:51.004865 2026] [:error] [pid 9304:tid 9365] [client 170.64.224.245:51472] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahNfC-VEV2qpMC_1UzRZCgAAAIQ"]
[Mon May 25 04:26:51.006540 2026] [:error] [pid 9302:tid 9330] [client 170.64.224.245:51482] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2ogAAABc"]
[Mon May 25 04:26:51.010811 2026] [:error] [pid 9302:tid 9308] [client 170.64.224.245:51488] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2owAAAAE"]
[Mon May 25 04:26:51.015144 2026] [:error] [pid 9398:tid 9428] [client 170.64.224.245:51496] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BWwAAANg"]
[Mon May 25 04:26:51.016155 2026] [:error] [pid 9302:tid 9313] [client 170.64.224.245:51504] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2pAAAAAY"]
[Mon May 25 04:26:51.019844 2026] [:error] [pid 9302:tid 9320] [client 170.64.224.245:51516] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2pQAAAA0"]
[Mon May 25 04:26:51.023437 2026] [:error] [pid 9302:tid 9311] [client 170.64.224.245:51526] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2pgAAAAQ"]
[Mon May 25 04:26:51.031563 2026] [:error] [pid 9398:tid 9400] [client 170.64.224.245:51532] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BXAAAAMA"]
[Mon May 25 04:26:51.042032 2026] [:error] [pid 9398:tid 9418] [client 170.64.224.245:51534] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BXQAAAM4"]
[Mon May 25 04:26:51.047125 2026] [:error] [pid 9302:tid 9327] [client 170.64.224.245:51546] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2pwAAABQ"]
[Mon May 25 04:26:51.049088 2026] [:error] [pid 9302:tid 9310] [client 170.64.224.245:51560] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2qAAAAAM"]
[Mon May 25 04:26:51.051536 2026] [:error] [pid 9302:tid 9318] [client 170.64.224.245:51574] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2qQAAAAs"]
[Mon May 25 04:26:51.070700 2026] [:error] [pid 50423:tid 50444] [client 170.64.224.245:51586] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfC6JWO7En4nKEQ3j6XwAAARM"]
[Mon May 25 04:26:51.072111 2026] [:error] [pid 50423:tid 50430] [client 170.64.224.245:51582] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahNfC6JWO7En4nKEQ3j6YAAAAQU"]
[Mon May 25 04:26:51.098529 2026] [:error] [pid 50423:tid 50426] [client 170.64.224.245:51606] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahNfC6JWO7En4nKEQ3j6YQAAAQE"]
[Mon May 25 04:26:51.100027 2026] [:error] [pid 9398:tid 9421] [client 170.64.224.245:51594] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BXgAAANE"]
[Mon May 25 04:26:51.108006 2026] [:error] [pid 9398:tid 9401] [client 170.64.224.245:51620] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BXwAAAME"]
[Mon May 25 04:26:51.114015 2026] [:error] [pid 9398:tid 9427] [client 170.64.224.245:51630] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BYAAAANc"]
[Mon May 25 04:26:51.116931 2026] [:error] [pid 9398:tid 9403] [client 170.64.224.245:51636] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BYQAAAMM"]
[Mon May 25 04:26:51.133107 2026] [:error] [pid 9398:tid 9426] [client 170.64.224.245:51646] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BYgAAANY"]
[Mon May 25 04:26:51.143188 2026] [:error] [pid 9398:tid 9405] [client 170.64.224.245:51650] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BYwAAAMU"]
[Mon May 25 04:26:51.150695 2026] [:error] [pid 9398:tid 9406] [client 170.64.224.245:51666] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BZAAAAMY"]
[Mon May 25 04:26:51.158822 2026] [:error] [pid 9398:tid 9402] [client 170.64.224.245:51668] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BZQAAAMI"]
[Mon May 25 04:26:51.176020 2026] [:error] [pid 9398:tid 9404] [client 170.64.224.245:51682] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BZgAAAMQ"]
[Mon May 25 04:26:51.176468 2026] [:error] [pid 9304:tid 9374] [client 170.64.224.245:51684] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC-VEV2qpMC_1UzRZDAAAAI0"]
[Mon May 25 04:26:51.183433 2026] [:error] [pid 9398:tid 9414] [client 170.64.224.245:51694] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BZwAAAMo"]
[Mon May 25 04:26:51.193517 2026] [:error] [pid 9398:tid 9423] [client 170.64.224.245:51710] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BaAAAANM"]
[Mon May 25 04:26:51.195802 2026] [:error] [pid 9398:tid 9407] [client 170.64.224.245:51712] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BaQAAAMc"]
[Mon May 25 04:26:51.202741 2026] [:error] [pid 9398:tid 9425] [client 170.64.224.245:51724] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BagAAANU"]
[Mon May 25 04:26:51.203802 2026] [:error] [pid 9398:tid 9413] [client 170.64.224.245:51738] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BawAAAMk"]
[Mon May 25 04:26:51.218244 2026] [:error] [pid 9398:tid 9415] [client 170.64.224.245:51742] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BbAAAAMs"]
[Mon May 25 04:26:51.219893 2026] [:error] [pid 9398:tid 9424] [client 170.64.224.245:51754] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BbQAAANQ"]
[Mon May 25 04:26:51.226247 2026] [:error] [pid 9398:tid 9412] [client 170.64.224.245:51762] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BbgAAAMg"]
[Mon May 25 04:26:51.238689 2026] [:error] [pid 9302:tid 9326] [client 170.64.224.245:51766] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2qgAAABM"]
[Mon May 25 04:26:51.248206 2026] [:error] [pid 9304:tid 9373] [client 170.64.224.245:51770] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC-VEV2qpMC_1UzRZDQAAAIw"]
[Mon May 25 04:26:51.261187 2026] [:error] [pid 9398:tid 9417] [client 170.64.224.245:51774] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BbwAAAM0"]
[Mon May 25 04:26:51.280074 2026] [:error] [pid 9398:tid 9419] [client 170.64.224.245:51780] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BcAAAAM8"]
[Mon May 25 04:26:51.291143 2026] [:error] [pid 9303:tid 9335] [client 170.64.224.245:51796] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC33bQScbssitjPQbJAAAAEE"]
[Mon May 25 04:26:51.446276 2026] [:error] [pid 50423:tid 50427] [client 170.64.224.245:51802] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC6JWO7En4nKEQ3j6ZAAAAQI"]
[Mon May 25 04:26:51.453631 2026] [:error] [pid 50423:tid 50439] [client 170.64.224.245:51810] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC6JWO7En4nKEQ3j6ZQAAAQ4"]
[Mon May 25 04:26:51.457285 2026] [:error] [pid 50423:tid 50425] [client 170.64.224.245:51820] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC6JWO7En4nKEQ3j6ZgAAAQA"]
[Mon May 25 04:26:51.463931 2026] [:error] [pid 50423:tid 50436] [client 170.64.224.245:51822] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC6JWO7En4nKEQ3j6aAAAAQs"]
[Mon May 25 04:26:51.489044 2026] [:error] [pid 9304:tid 9368] [client 170.64.224.245:51832] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC-VEV2qpMC_1UzRZDgAAAIc"]
[Mon May 25 04:26:51.524144 2026] [:error] [pid 50423:tid 50434] [client 170.64.224.245:51840] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC6JWO7En4nKEQ3j6agAAAQk"]
[Mon May 25 04:26:51.525097 2026] [:error] [pid 9304:tid 9370] [client 170.64.224.245:51848] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC-VEV2qpMC_1UzRZDwAAAIk"]
[Mon May 25 04:26:51.539046 2026] [:error] [pid 9302:tid 9323] [client 170.64.224.245:51858] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2qwAAABA"]
[Mon May 25 04:26:51.558787 2026] [:error] [pid 9302:tid 9315] [client 170.64.224.245:51866] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2rAAAAAg"]
[Mon May 25 04:26:51.569414 2026] [:error] [pid 9302:tid 9322] [client 170.64.224.245:51888] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfCy1RaFfTSnDQnqE2rQAAAA8"]
[Mon May 25 04:26:51.569741 2026] [:error] [pid 9398:tid 9428] [client 170.64.224.245:51874] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC-hIu7KstzsCua-BcQAAANg"]
[Mon May 25 04:26:51.585266 2026] [:error] [pid 50423:tid 50438] [client 170.64.224.245:51902] [client 170.64.224.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNfC6JWO7En4nKEQ3j6awAAAQ0"]
[Mon May 25 07:09:22.904112 2026] [:error] [pid 9398:tid 9422] [client 104.28.214.122:38872] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/ms-themes.php"] [unique_id "ahOFIuhIu7KstzsCua-3MQAAANI"]
[Mon May 25 07:09:30.616451 2026] [:error] [pid 9302:tid 9312] [client 104.28.214.122:20413] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ahOFKi1RaFfTSnDQnqFbzgAAAAU"]
[Mon May 25 07:09:38.093743 2026] [:error] [pid 9304:tid 9375] [client 104.28.246.122:55336] [client 104.28.246.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/file.php"] [unique_id "ahOFMuVEV2qpMC_1UzSWtQAAAI4"]
[Mon May 25 07:09:39.548930 2026] [:error] [pid 50423:tid 50428] [client 104.28.214.122:20074] [client 104.28.214.122] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "nextspaceconsulting.com.au"] [uri "/flower.php"] [unique_id "ahOFM6JWO7En4nKEQ3g_LQAAAQM"]
[Mon May 25 08:13:13.439962 2026] [:error] [pid 62426:tid 62439] [client 4.225.163.177:8405] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/.well-known/"] [unique_id "ahOUGUj3D3Mo8ANpTRBx9AAAAAk"]
[Mon May 25 08:13:14.832907 2026] [:error] [pid 62428:tid 62503] [client 4.225.163.177:64908] File does not exist: /usr/local/apache/htdocs/suspended-page/404.php
[Mon May 25 08:13:15.118040 2026] [:error] [pid 62428:tid 62494] [client 4.225.163.177:64908] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Mon May 25 08:13:15.401286 2026] [:error] [pid 62428:tid 62500] [client 4.225.163.177:64908] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon May 25 08:13:15.712730 2026] [:error] [pid 62428:tid 62488] [client 4.225.163.177:64908] File does not exist: /usr/local/apache/htdocs/suspended-page/about.php
[Mon May 25 08:13:15.995423 2026] [:error] [pid 62428:tid 62497] [client 4.225.163.177:64908] File does not exist: /usr/local/apache/htdocs/suspended-page/admin.php
[Mon May 25 08:13:16.278711 2026] [:error] [pid 62428:tid 62499] [client 4.225.163.177:64908] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon May 25 08:13:16.561533 2026] [:error] [pid 62428:tid 62501] [client 4.225.163.177:64908] File does not exist: /usr/local/apache/htdocs/suspended-page/an.php
[Mon May 25 08:13:16.844951 2026] [:error] [pid 62428:tid 62489] [client 4.225.163.177:64908] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon May 25 08:13:17.129422 2026] [:error] [pid 62428:tid 62484] [client 4.225.163.177:64908] File does not exist: /usr/local/apache/htdocs/suspended-page/cache.php
[Mon May 25 08:13:17.692089 2026] [:error] [pid 62428:tid 62495] [client 4.225.163.177:64908] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ahOUHZNosGBa7mui3VSeogAAAIs"]
[Mon May 25 08:13:18.888210 2026] [:error] [pid 62515:tid 62533] [client 4.225.163.177:8428] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ahOUHhig0_XsOwmnrv9PoQAAANA"]
[Mon May 25 08:13:20.086436 2026] [:error] [pid 62515:tid 62532] [client 4.225.163.177:8392] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ahOUIBig0_XsOwmnrv9PpgAAAM8"]
[Mon May 25 08:13:21.289058 2026] [:error] [pid 62426:tid 62451] [client 4.225.163.177:64359] [client 4.225.163.177] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/chosen.php"] [unique_id "ahOUIUj3D3Mo8ANpTRBx_QAAABU"]
[Mon May 25 13:21:26.975754 2026] [:error] [pid 62426:tid 62441] [client 170.64.238.42:46416] [client 170.64.238.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "ahPcVkj3D3Mo8ANpTRCpDAAAAAs"]
[Mon May 25 13:21:27.140446 2026] [:error] [pid 62428:tid 62486] [client 170.64.238.42:45650] [client 170.64.238.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nextspaceconsulting.com.au"] [uri "/.git/config"] [unique_id "ahPcV5NosGBa7mui3VTvbwAAAII"]
[Mon May 25 13:21:27.442540 2026] [:error] [pid 62427:tid 62463] [client 170.64.238.42:46422] [client 170.64.238.42] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.nextspaceconsulting.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.nextspaceconsulting.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahPcV_MUa83fc4GDyBw3NAAAAUY"]
[Mon May 25 13:21:27.462577 2026] [:error] [pid 62426:tid 62433] [client 170.64.238.42:46478] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/jquery.filer/php/readme.txt"] [unique_id "ahPcV0j3D3Mo8ANpTRCpDwAAAAM"]
[Mon May 25 13:21:27.481782 2026] [:error] [pid 62515:tid 62525] [client 170.64.238.42:46432] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2pgAAAMg"]
[Mon May 25 13:21:27.492515 2026] [:error] [pid 62428:tid 62497] [client 170.64.238.42:46444] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahPcV5NosGBa7mui3VTvcQAAAI0"]
[Mon May 25 13:21:27.493196 2026] [:error] [pid 62427:tid 62478] [client 170.64.238.42:46422] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahPcV_MUa83fc4GDyBw3NQAAAVU"]
[Mon May 25 13:21:27.496599 2026] [:error] [pid 62426:tid 62449] [client 170.64.238.42:46466] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahPcV0j3D3Mo8ANpTRCpEAAAABM"]
[Mon May 25 13:21:27.506824 2026] [:error] [pid 62515:tid 62527] [client 170.64.238.42:46454] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2pwAAAMo"]
[Mon May 25 13:21:27.507705 2026] [:error] [pid 62426:tid 62445] [client 170.64.238.42:46468] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahPcV0j3D3Mo8ANpTRCpEQAAAA8"]
[Mon May 25 13:21:27.537829 2026] [:error] [pid 62426:tid 62450] [client 170.64.238.42:46480] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahPcV0j3D3Mo8ANpTRCpEgAAABQ"]
[Mon May 25 13:21:27.543965 2026] [:error] [pid 62426:tid 62436] [client 170.64.238.42:46492] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahPcV0j3D3Mo8ANpTRCpEwAAAAY"]
[Mon May 25 13:21:27.545385 2026] [:error] [pid 62426:tid 62434] [client 170.64.238.42:46508] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahPcV0j3D3Mo8ANpTRCpFAAAAAQ"]
[Mon May 25 13:21:27.545923 2026] [:error] [pid 62428:tid 62501] [client 170.64.238.42:46514] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahPcV5NosGBa7mui3VTvcgAAAJE"]
[Mon May 25 13:21:27.551464 2026] [:error] [pid 62426:tid 62439] [client 170.64.238.42:46536] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahPcV0j3D3Mo8ANpTRCpFQAAAAk"]
[Mon May 25 13:21:27.553165 2026] [:error] [pid 62428:tid 62490] [client 170.64.238.42:46530] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahPcV5NosGBa7mui3VTvcwAAAIY"]
[Mon May 25 13:21:27.555724 2026] [:error] [pid 62426:tid 62438] [client 170.64.238.42:46538] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahPcV0j3D3Mo8ANpTRCpFgAAAAg"]
[Mon May 25 13:21:27.557105 2026] [:error] [pid 62426:tid 62448] [client 170.64.238.42:46546] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/server/php/"] [unique_id "ahPcV0j3D3Mo8ANpTRCpFwAAABI"]
[Mon May 25 13:21:27.586842 2026] [:error] [pid 62426:tid 62454] [client 170.64.238.42:46548] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahPcV0j3D3Mo8ANpTRCpGAAAABg"]
[Mon May 25 13:21:27.587525 2026] [:error] [pid 62515:tid 62523] [client 170.64.238.42:46556] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2qAAAAMY"]
[Mon May 25 13:21:27.588785 2026] [:error] [pid 62515:tid 62518] [client 170.64.238.42:46558] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2qQAAAME"]
[Mon May 25 13:21:27.597207 2026] [:error] [pid 62515:tid 62539] [client 170.64.238.42:46564] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2qgAAANY"]
[Mon May 25 13:21:27.598869 2026] [:error] [pid 62515:tid 62530] [client 170.64.238.42:46572] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2qwAAAM0"]
[Mon May 25 13:21:27.610783 2026] [:error] [pid 62515:tid 62538] [client 170.64.238.42:46582] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2rAAAANU"]
[Mon May 25 13:21:27.626576 2026] [:error] [pid 62515:tid 62521] [client 170.64.238.42:46588] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2rQAAAMQ"]
[Mon May 25 13:21:27.627470 2026] [:error] [pid 62515:tid 62541] [client 170.64.238.42:46602] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2rgAAANg"]
[Mon May 25 13:21:27.630627 2026] [:error] [pid 62515:tid 62535] [client 170.64.238.42:46628] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2sAAAANI"]
[Mon May 25 13:21:27.631009 2026] [:error] [pid 62515:tid 62519] [client 170.64.238.42:46618] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2rwAAAMI"]
[Mon May 25 13:21:27.631570 2026] [:error] [pid 62515:tid 62524] [client 170.64.238.42:46644] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2sQAAAMc"]
[Mon May 25 13:21:27.642781 2026] [:error] [pid 62515:tid 62540] [client 170.64.238.42:46648] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2sgAAANc"]
[Mon May 25 13:21:27.643107 2026] [:error] [pid 62515:tid 62517] [client 170.64.238.42:46658] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2swAAAMA"]
[Mon May 25 13:21:27.652671 2026] [:error] [pid 62515:tid 62532] [client 170.64.238.42:46666] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2tAAAAM8"]
[Mon May 25 13:21:27.658855 2026] [:error] [pid 62515:tid 62534] [client 170.64.238.42:46668] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2tQAAANE"]
[Mon May 25 13:21:27.661774 2026] [:error] [pid 62515:tid 62520] [client 170.64.238.42:46672] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2tgAAAMM"]
[Mon May 25 13:21:27.668636 2026] [:error] [pid 62515:tid 62531] [client 170.64.238.42:46680] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2twAAAM4"]
[Mon May 25 13:21:27.671980 2026] [:error] [pid 62515:tid 62529] [client 170.64.238.42:46688] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2uAAAAMw"]
[Mon May 25 13:21:27.695755 2026] [:error] [pid 62515:tid 62526] [client 170.64.238.42:46692] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2uQAAAMk"]
[Mon May 25 13:21:27.711453 2026] [:error] [pid 62515:tid 62537] [client 170.64.238.42:46694] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2ugAAANQ"]
[Mon May 25 13:21:27.712135 2026] [:error] [pid 62515:tid 62522] [client 170.64.238.42:46700] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2uwAAAMU"]
[Mon May 25 13:21:27.713929 2026] [:error] [pid 62515:tid 62533] [client 170.64.238.42:46708] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2vAAAANA"]
[Mon May 25 13:21:27.723548 2026] [:error] [pid 62515:tid 62525] [client 170.64.238.42:46716] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2vQAAAMg"]
[Mon May 25 13:21:27.738695 2026] [:error] [pid 62515:tid 62527] [client 170.64.238.42:46718] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2vgAAAMo"]
[Mon May 25 13:21:27.740344 2026] [:error] [pid 62515:tid 62523] [client 170.64.238.42:46732] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2vwAAAMY"]
[Mon May 25 13:21:27.743331 2026] [:error] [pid 62427:tid 62473] [client 170.64.238.42:46752] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahPcV_MUa83fc4GDyBw3NgAAAVA"]
[Mon May 25 13:21:27.743636 2026] [:error] [pid 62515:tid 62518] [client 170.64.238.42:46748] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2wAAAAME"]
[Mon May 25 13:21:27.754244 2026] [:error] [pid 62515:tid 62539] [client 170.64.238.42:46754] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2wQAAANY"]
[Mon May 25 13:21:27.756060 2026] [:error] [pid 62515:tid 62530] [client 170.64.238.42:46770] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2wgAAAM0"]
[Mon May 25 13:21:27.764049 2026] [:error] [pid 62515:tid 62538] [client 170.64.238.42:46786] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2wwAAANU"]
[Mon May 25 13:21:27.764292 2026] [:error] [pid 62515:tid 62521] [client 170.64.238.42:46802] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2xAAAAMQ"]
[Mon May 25 13:21:27.781124 2026] [:error] [pid 62515:tid 62541] [client 170.64.238.42:46806] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2xQAAANg"]
[Mon May 25 13:21:27.782485 2026] [:error] [pid 62515:tid 62535] [client 170.64.238.42:46820] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2xgAAANI"]
[Mon May 25 13:21:27.785611 2026] [:error] [pid 62515:tid 62519] [client 170.64.238.42:46830] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2yAAAAMI"]
[Mon May 25 13:21:27.785713 2026] [:error] [pid 62515:tid 62524] [client 170.64.238.42:46846] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2xwAAAMc"]
[Mon May 25 13:21:27.789603 2026] [:error] [pid 62515:tid 62540] [client 170.64.238.42:46852] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2yQAAANc"]
[Mon May 25 13:21:27.805324 2026] [:error] [pid 62515:tid 62517] [client 170.64.238.42:46868] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2ygAAAMA"]
[Mon May 25 13:21:27.807116 2026] [:error] [pid 62515:tid 62532] [client 170.64.238.42:46880] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2ywAAAM8"]
[Mon May 25 13:21:27.823153 2026] [:error] [pid 62515:tid 62534] [client 170.64.238.42:46882] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2zAAAANE"]
[Mon May 25 13:21:27.823888 2026] [:error] [pid 62515:tid 62520] [client 170.64.238.42:46884] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2zQAAAMM"]
[Mon May 25 13:21:27.828932 2026] [:error] [pid 62515:tid 62529] [client 170.64.238.42:46896] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2zgAAAMw"]
[Mon May 25 13:21:27.829777 2026] [:error] [pid 62515:tid 62526] [client 170.64.238.42:46908] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-2zwAAAMk"]
[Mon May 25 13:21:27.830682 2026] [:error] [pid 62515:tid 62537] [client 170.64.238.42:46922] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-20AAAANQ"]
[Mon May 25 13:21:27.846076 2026] [:error] [pid 62515:tid 62522] [client 170.64.238.42:46938] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-20QAAAMU"]
[Mon May 25 13:21:27.849089 2026] [:error] [pid 62515:tid 62525] [client 170.64.238.42:46944] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-20gAAAMg"]
[Mon May 25 13:21:27.870641 2026] [:error] [pid 62515:tid 62527] [client 170.64.238.42:46958] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahPcVxig0_XsOwmnrv-21AAAAMo"]
[Mon May 25 13:21:28.934079 2026] [:error] [pid 62427:tid 62472] [client 170.64.238.42:46430] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/jquery.filer/php/readme.txt"] [unique_id "ahPcWPMUa83fc4GDyBw3OQAAAU8"]
[Mon May 25 13:21:28.976077 2026] [:error] [pid 62722:tid 62726] [client 170.64.238.42:53908] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/jquery.filer/php/readme.txt"] [unique_id "ahPcWKM6ssnLWYf6CVDZCAAAAEI"]
[Mon May 25 13:21:29.074934 2026] [:error] [pid 62515:tid 62531] [client 170.64.238.42:53916] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-23gAAAM4"]
[Mon May 25 13:21:29.079501 2026] [:error] [pid 62722:tid 62730] [client 170.64.238.42:53926] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/server/php/"] [unique_id "ahPcWaM6ssnLWYf6CVDZCQAAAEY"]
[Mon May 25 13:21:29.083374 2026] [:error] [pid 62722:tid 62739] [client 170.64.238.42:53932] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZCgAAAE8"]
[Mon May 25 13:21:29.106085 2026] [:error] [pid 62722:tid 62747] [client 170.64.238.42:53948] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZCwAAAFc"]
[Mon May 25 13:21:29.109381 2026] [:error] [pid 62428:tid 62506] [client 170.64.238.42:53960] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahPcWZNosGBa7mui3VTvdwAAAJY"]
[Mon May 25 13:21:29.112051 2026] [:error] [pid 62515:tid 62520] [client 170.64.238.42:53974] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-23wAAAMM"]
[Mon May 25 13:21:29.116871 2026] [:error] [pid 62722:tid 62744] [client 170.64.238.42:53984] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZDAAAAFQ"]
[Mon May 25 13:21:29.121662 2026] [:error] [pid 62515:tid 62529] [client 170.64.238.42:53988] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-24AAAAMw"]
[Mon May 25 13:21:29.125282 2026] [:error] [pid 62722:tid 62740] [client 170.64.238.42:53990] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZDgAAAFA"]
[Mon May 25 13:21:29.129416 2026] [:error] [pid 62427:tid 62475] [client 170.64.238.42:54002] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/server/php/"] [unique_id "ahPcWfMUa83fc4GDyBw3OwAAAVI"]
[Mon May 25 13:21:29.129518 2026] [:error] [pid 62515:tid 62526] [client 170.64.238.42:54016] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-24QAAAMk"]
[Mon May 25 13:21:29.149123 2026] [:error] [pid 62722:tid 62743] [client 170.64.238.42:54022] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZDwAAAFM"]
[Mon May 25 13:21:29.149799 2026] [:error] [pid 62722:tid 62736] [client 170.64.238.42:54024] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/server/php/"] [unique_id "ahPcWaM6ssnLWYf6CVDZEAAAAEw"]
[Mon May 25 13:21:29.151976 2026] [:error] [pid 62515:tid 62537] [client 170.64.238.42:54034] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-24gAAANQ"]
[Mon May 25 13:21:29.154851 2026] [:error] [pid 62722:tid 62733] [client 170.64.238.42:54048] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahPcWaM6ssnLWYf6CVDZEQAAAEk"]
[Mon May 25 13:21:29.156637 2026] [:error] [pid 62515:tid 62522] [client 170.64.238.42:54060] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugin/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-24wAAAMU"]
[Mon May 25 13:21:29.160347 2026] [:error] [pid 62515:tid 62525] [client 170.64.238.42:54068] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-25AAAAMg"]
[Mon May 25 13:21:29.161565 2026] [:error] [pid 62515:tid 62536] [client 170.64.238.42:54076] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-25QAAANM"]
[Mon May 25 13:21:29.163640 2026] [:error] [pid 62515:tid 62527] [client 170.64.238.42:54078] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-25gAAAMo"]
[Mon May 25 13:21:29.167265 2026] [:error] [pid 62722:tid 62746] [client 170.64.238.42:54086] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/server/php/"] [unique_id "ahPcWaM6ssnLWYf6CVDZEgAAAFY"]
[Mon May 25 13:21:29.168561 2026] [:error] [pid 62515:tid 62539] [client 170.64.238.42:54102] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-25wAAANY"]
[Mon May 25 13:21:29.172254 2026] [:error] [pid 62722:tid 62729] [client 170.64.238.42:54122] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/server/php/"] [unique_id "ahPcWaM6ssnLWYf6CVDZEwAAAEU"]
[Mon May 25 13:21:29.176338 2026] [:error] [pid 62722:tid 62737] [client 170.64.238.42:54116] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset/server/php/"] [unique_id "ahPcWaM6ssnLWYf6CVDZFAAAAE0"]
[Mon May 25 13:21:29.193470 2026] [:error] [pid 62428:tid 62496] [client 170.64.238.42:54144] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/server/php/"] [unique_id "ahPcWZNosGBa7mui3VTveAAAAIw"]
[Mon May 25 13:21:29.194118 2026] [:error] [pid 62722:tid 62732] [client 170.64.238.42:54134] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZFQAAAEg"]
[Mon May 25 13:21:29.196305 2026] [:error] [pid 62515:tid 62528] [client 170.64.238.42:54160] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-26AAAAMs"]
[Mon May 25 13:21:29.197705 2026] [:error] [pid 62515:tid 62523] [client 170.64.238.42:54168] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-26QAAAMY"]
[Mon May 25 13:21:29.199183 2026] [:error] [pid 62722:tid 62731] [client 170.64.238.42:54182] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugin/server/php/"] [unique_id "ahPcWaM6ssnLWYf6CVDZFwAAAEc"]
[Mon May 25 13:21:29.203546 2026] [:error] [pid 62722:tid 62741] [client 170.64.238.42:54186] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZGAAAAFE"]
[Mon May 25 13:21:29.205422 2026] [:error] [pid 62722:tid 62734] [client 170.64.238.42:54194] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahPcWaM6ssnLWYf6CVDZGQAAAEo"]
[Mon May 25 13:21:29.215174 2026] [:error] [pid 62515:tid 62518] [client 170.64.238.42:54204] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-26gAAAME"]
[Mon May 25 13:21:29.219362 2026] [:error] [pid 62515:tid 62533] [client 170.64.238.42:54208] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-26wAAANA"]
[Mon May 25 13:21:29.235209 2026] [:error] [pid 62426:tid 62444] [client 170.64.238.42:54224] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/server/php/"] [unique_id "ahPcWUj3D3Mo8ANpTRCpGQAAAA4"]
[Mon May 25 13:21:29.241388 2026] [:error] [pid 62515:tid 62519] [client 170.64.238.42:54238] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugin/server/php/"] [unique_id "ahPcWRig0_XsOwmnrv-27AAAAMI"]
[Mon May 25 13:21:29.257527 2026] [:error] [pid 62722:tid 62739] [client 170.64.238.42:54250] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahPcWaM6ssnLWYf6CVDZHAAAAE8"]
[Mon May 25 13:21:29.259271 2026] [:error] [pid 62722:tid 62730] [client 170.64.238.42:54240] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZHQAAAEY"]
[Mon May 25 13:21:29.273528 2026] [:error] [pid 62427:tid 62481] [client 170.64.238.42:54254] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3PAAAAVg"]
[Mon May 25 13:21:29.285049 2026] [:error] [pid 62515:tid 62524] [client 170.64.238.42:54256] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-27QAAAMc"]
[Mon May 25 13:21:29.289334 2026] [:error] [pid 62515:tid 62538] [client 170.64.238.42:54270] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-27gAAANU"]
[Mon May 25 13:21:29.315089 2026] [:error] [pid 62427:tid 62470] [client 170.64.238.42:54282] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3PQAAAU0"]
[Mon May 25 13:21:29.320078 2026] [:error] [pid 62515:tid 62521] [client 170.64.238.42:54290] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-27wAAAMQ"]
[Mon May 25 13:21:29.330795 2026] [:error] [pid 62515:tid 62540] [client 170.64.238.42:54302] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-28AAAANc"]
[Mon May 25 13:21:29.333625 2026] [:error] [pid 62427:tid 62471] [client 170.64.238.42:54308] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3PgAAAU4"]
[Mon May 25 13:21:29.335515 2026] [:error] [pid 62515:tid 62517] [client 170.64.238.42:54314] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-28QAAAMA"]
[Mon May 25 13:21:29.345284 2026] [:error] [pid 62515:tid 62532] [client 170.64.238.42:54328] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-28gAAAM8"]
[Mon May 25 13:21:29.350066 2026] [:error] [pid 62515:tid 62541] [client 170.64.238.42:54332] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-28wAAANg"]
[Mon May 25 13:21:29.352953 2026] [:error] [pid 62427:tid 62466] [client 170.64.238.42:54346] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3PwAAAUk"]
[Mon May 25 13:21:29.353964 2026] [:error] [pid 62515:tid 62531] [client 170.64.238.42:54360] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-29AAAAM4"]
[Mon May 25 13:21:29.361863 2026] [:error] [pid 62427:tid 62461] [client 170.64.238.42:54364] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3QAAAAUQ"]
[Mon May 25 13:21:29.362772 2026] [:error] [pid 62515:tid 62529] [client 170.64.238.42:54378] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-29QAAAMw"]
[Mon May 25 13:21:29.367335 2026] [:error] [pid 62515:tid 62526] [client 170.64.238.42:54384] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-29gAAAMk"]
[Mon May 25 13:21:29.371785 2026] [:error] [pid 62722:tid 62747] [client 170.64.238.42:54390] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZHgAAAFc"]
[Mon May 25 13:21:29.374843 2026] [:error] [pid 62427:tid 62479] [client 170.64.238.42:54392] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3QQAAAVY"]
[Mon May 25 13:21:29.378706 2026] [:error] [pid 62427:tid 62460] [client 170.64.238.42:54398] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3QgAAAUM"]
[Mon May 25 13:21:29.381467 2026] [:error] [pid 62426:tid 62443] [client 170.64.238.42:54414] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpGgAAAA0"]
[Mon May 25 13:21:29.387632 2026] [:error] [pid 62426:tid 62446] [client 170.64.238.42:54424] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpGwAAABA"]
[Mon May 25 13:21:29.396881 2026] [:error] [pid 62427:tid 62465] [client 170.64.238.42:54450] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3QwAAAUg"]
[Mon May 25 13:21:29.397840 2026] [:error] [pid 62426:tid 62440] [client 170.64.238.42:54440] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpHAAAAAo"]
[Mon May 25 13:21:29.398566 2026] [:error] [pid 62426:tid 62437] [client 170.64.238.42:54454] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpHQAAAAc"]
[Mon May 25 13:21:29.403957 2026] [:error] [pid 62722:tid 62744] [client 170.64.238.42:54458] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZHwAAAFQ"]
[Mon May 25 13:21:29.405117 2026] [:error] [pid 62515:tid 62537] [client 170.64.238.42:54474] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-29wAAANQ"]
[Mon May 25 13:21:29.417075 2026] [:error] [pid 62722:tid 62740] [client 170.64.238.42:54482] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZIQAAAFA"]
[Mon May 25 13:21:29.423060 2026] [:error] [pid 62515:tid 62522] [client 170.64.238.42:54496] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-2-AAAAMU"]
[Mon May 25 13:21:29.428457 2026] [:error] [pid 62426:tid 62447] [client 170.64.238.42:54506] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpHgAAABE"]
[Mon May 25 13:21:29.429126 2026] [:error] [pid 62427:tid 62477] [client 170.64.238.42:54516] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3RAAAAVQ"]
[Mon May 25 13:21:29.455287 2026] [:error] [pid 62722:tid 62743] [client 170.64.238.42:54540] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZIwAAAFM"]
[Mon May 25 13:21:29.456331 2026] [:error] [pid 62515:tid 62525] [client 170.64.238.42:54558] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-2-QAAAMg"]
[Mon May 25 13:21:29.458069 2026] [:error] [pid 62722:tid 62733] [client 170.64.238.42:54552] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZJAAAAEk"]
[Mon May 25 13:21:29.459140 2026] [:error] [pid 62722:tid 62736] [client 170.64.238.42:54532] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZJQAAAEw"]
[Mon May 25 13:21:29.472441 2026] [:error] [pid 62722:tid 62746] [client 170.64.238.42:54560] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZJgAAAFY"]
[Mon May 25 13:21:29.488113 2026] [:error] [pid 62427:tid 62458] [client 170.64.238.42:54574] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3RQAAAUE"]
[Mon May 25 13:21:29.531526 2026] [:error] [pid 62722:tid 62732] [client 170.64.238.42:54582] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZJwAAAEg"]
[Mon May 25 13:21:29.532982 2026] [:error] [pid 62722:tid 62731] [client 170.64.238.42:54594] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZKAAAAEc"]
[Mon May 25 13:21:29.545242 2026] [:error] [pid 62722:tid 62741] [client 170.64.238.42:54604] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZKQAAAFE"]
[Mon May 25 13:21:29.546833 2026] [:error] [pid 62426:tid 62435] [client 170.64.238.42:54610] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpHwAAAAU"]
[Mon May 25 13:21:29.550306 2026] [:error] [pid 62722:tid 62734] [client 170.64.238.42:54614] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZKgAAAEo"]
[Mon May 25 13:21:29.558520 2026] [:error] [pid 62427:tid 62463] [client 170.64.238.42:54630] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3RgAAAUY"]
[Mon May 25 13:21:29.574581 2026] [:error] [pid 62722:tid 62739] [client 170.64.238.42:54640] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZKwAAAE8"]
[Mon May 25 13:21:29.586817 2026] [:error] [pid 62722:tid 62730] [client 170.64.238.42:54646] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZLAAAAEY"]
[Mon May 25 13:21:29.589265 2026] [:error] [pid 62428:tid 62503] [client 170.64.238.42:54662] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahPcWZNosGBa7mui3VTveQAAAJM"]
[Mon May 25 13:21:29.592895 2026] [:error] [pid 62515:tid 62536] [client 170.64.238.42:54680] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-2-gAAANM"]
[Mon May 25 13:21:29.594909 2026] [:error] [pid 62515:tid 62527] [client 170.64.238.42:54678] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-2-wAAAMo"]
[Mon May 25 13:21:29.600159 2026] [:error] [pid 62515:tid 62539] [client 170.64.238.42:54696] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahPcWRig0_XsOwmnrv-2_AAAANY"]
[Mon May 25 13:21:29.604153 2026] [:error] [pid 62722:tid 62742] [client 170.64.238.42:54708] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZLQAAAFI"]
[Mon May 25 13:21:29.608162 2026] [:error] [pid 62722:tid 62747] [client 170.64.238.42:54710] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZLgAAAFc"]
[Mon May 25 13:21:29.616067 2026] [:error] [pid 62722:tid 62744] [client 170.64.238.42:54716] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZLwAAAFQ"]
[Mon May 25 13:21:29.629727 2026] [:error] [pid 62722:tid 62748] [client 170.64.238.42:54730] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZMAAAAFg"]
[Mon May 25 13:21:29.632725 2026] [:error] [pid 62722:tid 62740] [client 170.64.238.42:54744] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZMgAAAFA"]
[Mon May 25 13:21:29.635111 2026] [:error] [pid 62722:tid 62743] [client 170.64.238.42:54752] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZMwAAAFM"]
[Mon May 25 13:21:29.636893 2026] [:error] [pid 62722:tid 62733] [client 170.64.238.42:54754] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZNAAAAEk"]
[Mon May 25 13:21:29.644539 2026] [:error] [pid 62722:tid 62736] [client 170.64.238.42:54760] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZNgAAAEw"]
[Mon May 25 13:21:29.647950 2026] [:error] [pid 62722:tid 62732] [client 170.64.238.42:54774] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZNwAAAEg"]
[Mon May 25 13:21:29.650691 2026] [:error] [pid 62722:tid 62731] [client 170.64.238.42:54782] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZOAAAAEc"]
[Mon May 25 13:21:29.677786 2026] [:error] [pid 62722:tid 62741] [client 170.64.238.42:54792] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZOQAAAFE"]
[Mon May 25 13:21:29.692370 2026] [:error] [pid 62722:tid 62724] [client 170.64.238.42:54818] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZOgAAAEA"]
[Mon May 25 13:21:29.692370 2026] [:error] [pid 62722:tid 62734] [client 170.64.238.42:54806] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZOwAAAEo"]
[Mon May 25 13:21:29.789991 2026] [:error] [pid 62427:tid 62476] [client 170.64.238.42:54828] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahPcWfMUa83fc4GDyBw3RwAAAVM"]
[Mon May 25 13:21:29.791915 2026] [:error] [pid 62722:tid 62742] [client 170.64.238.42:54854] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZPAAAAFI"]
[Mon May 25 13:21:29.792740 2026] [:error] [pid 62722:tid 62730] [client 170.64.238.42:54840] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZPQAAAEY"]
[Mon May 25 13:21:29.802278 2026] [:error] [pid 62722:tid 62748] [client 170.64.238.42:54856] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZPgAAAFg"]
[Mon May 25 13:21:29.804951 2026] [:error] [pid 62427:tid 62478] [client 170.64.238.42:54858] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3SAAAAVU"]
[Mon May 25 13:21:29.818008 2026] [:error] [pid 62426:tid 62430] [client 170.64.238.42:54868] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpIAAAAAA"]
[Mon May 25 13:21:29.833782 2026] [:error] [pid 62427:tid 62468] [client 170.64.238.42:54870] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahPcWfMUa83fc4GDyBw3SQAAAUs"]
[Mon May 25 13:21:29.835839 2026] [:error] [pid 62426:tid 62441] [client 170.64.238.42:54878] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpIQAAAAs"]
[Mon May 25 13:21:29.836695 2026] [:error] [pid 62426:tid 62452] [client 170.64.238.42:54882] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpIgAAABY"]
[Mon May 25 13:21:29.837531 2026] [:error] [pid 62426:tid 62453] [client 170.64.238.42:54884] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpIwAAABc"]
[Mon May 25 13:21:29.845742 2026] [:error] [pid 62426:tid 62451] [client 170.64.238.42:54896] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpJAAAABU"]
[Mon May 25 13:21:29.848413 2026] [:error] [pid 62427:tid 62473] [client 170.64.238.42:54910] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3SgAAAVA"]
[Mon May 25 13:21:29.851273 2026] [:error] [pid 62426:tid 62431] [client 170.64.238.42:54924] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpJQAAAAE"]
[Mon May 25 13:21:29.856190 2026] [:error] [pid 62427:tid 62464] [client 170.64.238.42:54936] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahPcWfMUa83fc4GDyBw3SwAAAUc"]
[Mon May 25 13:21:29.861163 2026] [:error] [pid 62426:tid 62432] [client 170.64.238.42:54944] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpJgAAAAI"]
[Mon May 25 13:21:29.862135 2026] [:error] [pid 62426:tid 62442] [client 170.64.238.42:54952] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpJwAAAAw"]
[Mon May 25 13:21:29.872162 2026] [:error] [pid 62427:tid 62457] [client 170.64.238.42:54958] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahPcWfMUa83fc4GDyBw3TAAAAUA"]
[Mon May 25 13:21:29.877874 2026] [:error] [pid 62427:tid 62467] [client 170.64.238.42:54962] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahPcWfMUa83fc4GDyBw3TQAAAUo"]
[Mon May 25 13:21:29.880424 2026] [:error] [pid 62426:tid 62433] [client 170.64.238.42:54972] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpKAAAAAM"]
[Mon May 25 13:21:29.881930 2026] [:error] [pid 62426:tid 62449] [client 170.64.238.42:54978] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpKQAAABM"]
[Mon May 25 13:21:29.882699 2026] [:error] [pid 62515:tid 62518] [client 170.64.238.42:54984] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahPcWRig0_XsOwmnrv-2_QAAAME"]
[Mon May 25 13:21:29.885178 2026] [:error] [pid 62426:tid 62445] [client 170.64.238.42:54988] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpKgAAAA8"]
[Mon May 25 13:21:29.888115 2026] [:error] [pid 62426:tid 62450] [client 170.64.238.42:54996] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpKwAAABQ"]
[Mon May 25 13:21:29.889316 2026] [:error] [pid 62427:tid 62472] [client 170.64.238.42:54998] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahPcWfMUa83fc4GDyBw3TwAAAU8"]
[Mon May 25 13:21:29.892870 2026] [:error] [pid 62426:tid 62436] [client 170.64.238.42:55000] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpLAAAAAY"]
[Mon May 25 13:21:29.898377 2026] [:error] [pid 62722:tid 62737] [client 170.64.238.42:55002] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZQAAAAE0"]
[Mon May 25 13:21:29.903257 2026] [:error] [pid 62722:tid 62740] [client 170.64.238.42:55012] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWaM6ssnLWYf6CVDZQQAAAFA"]
[Mon May 25 13:21:29.904787 2026] [:error] [pid 62427:tid 62475] [client 170.64.238.42:55022] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahPcWfMUa83fc4GDyBw3UAAAAVI"]
[Mon May 25 13:21:29.914976 2026] [:error] [pid 62427:tid 62459] [client 170.64.238.42:55024] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahPcWfMUa83fc4GDyBw3UQAAAUI"]
[Mon May 25 13:21:29.926940 2026] [:error] [pid 62426:tid 62434] [client 170.64.238.42:55026] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpLQAAAAQ"]
[Mon May 25 13:21:29.928292 2026] [:error] [pid 62427:tid 62480] [client 170.64.238.42:55030] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahPcWfMUa83fc4GDyBw3UgAAAVc"]
[Mon May 25 13:21:29.934953 2026] [:error] [pid 62426:tid 62439] [client 170.64.238.42:55036] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahPcWUj3D3Mo8ANpTRCpLgAAAAk"]
[Mon May 25 13:21:29.944985 2026] [:error] [pid 62515:tid 62533] [client 170.64.238.42:55050] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahPcWRig0_XsOwmnrv-2_gAAANA"]
[Mon May 25 13:21:29.947043 2026] [:error] [pid 62515:tid 62535] [client 170.64.238.42:55056] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahPcWRig0_XsOwmnrv-2_wAAANI"]
[Mon May 25 13:21:29.959559 2026] [:error] [pid 62427:tid 62481] [client 170.64.238.42:55064] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahPcWfMUa83fc4GDyBw3UwAAAVg"]
[Mon May 25 13:21:29.971177 2026] [:error] [pid 62515:tid 62519] [client 170.64.238.42:55080] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahPcWRig0_XsOwmnrv-3AAAAAMI"]
[Mon May 25 13:21:29.981558 2026] [:error] [pid 62515:tid 62524] [client 170.64.238.42:55090] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahPcWRig0_XsOwmnrv-3AQAAAMc"]
[Mon May 25 13:21:29.998270 2026] [:error] [pid 62515:tid 62538] [client 170.64.238.42:55100] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWRig0_XsOwmnrv-3AgAAANU"]
[Mon May 25 13:21:30.025689 2026] [:error] [pid 62427:tid 62471] [client 170.64.238.42:55114] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3VAAAAU4"]
[Mon May 25 13:21:30.026212 2026] [:error] [pid 62427:tid 62470] [client 170.64.238.42:55112] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3VQAAAU0"]
[Mon May 25 13:21:30.027187 2026] [:error] [pid 62427:tid 62466] [client 170.64.238.42:55106] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3VgAAAUk"]
[Mon May 25 13:21:30.044439 2026] [:error] [pid 62427:tid 62461] [client 170.64.238.42:55124] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3VwAAAUQ"]
[Mon May 25 13:21:30.051265 2026] [:error] [pid 62427:tid 62479] [client 170.64.238.42:55126] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3WAAAAVY"]
[Mon May 25 13:21:30.053671 2026] [:error] [pid 62427:tid 62460] [client 170.64.238.42:55130] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3WQAAAUM"]
[Mon May 25 13:21:30.064470 2026] [:error] [pid 62427:tid 62465] [client 170.64.238.42:55132] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3WgAAAUg"]
[Mon May 25 13:21:30.070337 2026] [:error] [pid 62427:tid 62463] [client 170.64.238.42:55158] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3WwAAAUY"]
[Mon May 25 13:21:30.071164 2026] [:error] [pid 62427:tid 62458] [client 170.64.238.42:55146] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3XAAAAUE"]
[Mon May 25 13:21:30.071245 2026] [:error] [pid 62427:tid 62477] [client 170.64.238.42:55150] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3XQAAAVQ"]
[Mon May 25 13:21:30.078183 2026] [:error] [pid 62722:tid 62726] [client 170.64.238.42:55166] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZQwAAAEI"]
[Mon May 25 13:21:30.081605 2026] [:error] [pid 62722:tid 62736] [client 170.64.238.42:55168] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZRAAAAEw"]
[Mon May 25 13:21:30.087650 2026] [:error] [pid 62427:tid 62476] [client 170.64.238.42:55186] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3XgAAAVM"]
[Mon May 25 13:21:30.088345 2026] [:error] [pid 62515:tid 62540] [client 170.64.238.42:55176] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3AwAAANc"]
[Mon May 25 13:21:30.093691 2026] [:error] [pid 62428:tid 62492] [client 170.64.238.42:55196] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahPcWpNosGBa7mui3VTvewAAAIg"]
[Mon May 25 13:21:30.096943 2026] [:error] [pid 62427:tid 62478] [client 170.64.238.42:55210] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3XwAAAVU"]
[Mon May 25 13:21:30.106950 2026] [:error] [pid 62428:tid 62501] [client 170.64.238.42:55212] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahPcWpNosGBa7mui3VTvfAAAAJE"]
[Mon May 25 13:21:30.107032 2026] [:error] [pid 62428:tid 62490] [client 170.64.238.42:55228] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahPcWpNosGBa7mui3VTvfQAAAIY"]
[Mon May 25 13:21:30.113109 2026] [:error] [pid 62515:tid 62517] [client 170.64.238.42:55242] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3BAAAAMA"]
[Mon May 25 13:21:30.113744 2026] [:error] [pid 62515:tid 62520] [client 170.64.238.42:55244] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3BQAAAMM"]
[Mon May 25 13:21:30.120427 2026] [:error] [pid 62515:tid 62532] [client 170.64.238.42:55246] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3BgAAAM8"]
[Mon May 25 13:21:30.124886 2026] [:error] [pid 62515:tid 62541] [client 170.64.238.42:55248] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3BwAAANg"]
[Mon May 25 13:21:30.125995 2026] [:error] [pid 62428:tid 62499] [client 170.64.238.42:55256] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahPcWpNosGBa7mui3VTvfgAAAI8"]
[Mon May 25 13:21:30.129481 2026] [:error] [pid 62515:tid 62531] [client 170.64.238.42:55262] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3CAAAAM4"]
[Mon May 25 13:21:30.135432 2026] [:error] [pid 62515:tid 62529] [client 170.64.238.42:55272] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3CQAAAMw"]
[Mon May 25 13:21:30.141024 2026] [:error] [pid 62515:tid 62526] [client 170.64.238.42:55278] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3CgAAAMk"]
[Mon May 25 13:21:30.151315 2026] [:error] [pid 62428:tid 62491] [client 170.64.238.42:55288] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahPcWpNosGBa7mui3VTvfwAAAIc"]
[Mon May 25 13:21:30.151410 2026] [:error] [pid 62515:tid 62529] [client 170.64.238.42:55294] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3CwAAAMw"]
[Mon May 25 13:21:30.162751 2026] [:error] [pid 62515:tid 62522] [client 170.64.238.42:55302] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3DAAAAMU"]
[Mon May 25 13:21:30.165511 2026] [:error] [pid 62515:tid 62528] [client 170.64.238.42:55318] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3DQAAAMs"]
[Mon May 25 13:21:30.168205 2026] [:error] [pid 62428:tid 62495] [client 170.64.238.42:55322] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahPcWpNosGBa7mui3VTvgAAAAIs"]
[Mon May 25 13:21:30.171157 2026] [:error] [pid 62515:tid 62523] [client 170.64.238.42:55330] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3DgAAAMY"]
[Mon May 25 13:21:30.195464 2026] [:error] [pid 62428:tid 62502] [client 170.64.238.42:55338] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahPcWpNosGBa7mui3VTvgQAAAJI"]
[Mon May 25 13:21:30.211023 2026] [:error] [pid 62722:tid 62731] [client 170.64.238.42:55344] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZRgAAAEc"]
[Mon May 25 13:21:30.228668 2026] [:error] [pid 62515:tid 62527] [client 170.64.238.42:55354] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3DwAAAMo"]
[Mon May 25 13:21:30.235334 2026] [:error] [pid 62722:tid 62741] [client 170.64.238.42:55356] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZRwAAAFE"]
[Mon May 25 13:21:30.245920 2026] [:error] [pid 62515:tid 62518] [client 170.64.238.42:55366] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3EAAAAME"]
[Mon May 25 13:21:30.257066 2026] [:error] [pid 62722:tid 62724] [client 170.64.238.42:55368] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZSAAAAEA"]
[Mon May 25 13:21:30.274027 2026] [:error] [pid 62722:tid 62734] [client 170.64.238.42:55380] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZSQAAAEo"]
[Mon May 25 13:21:30.278941 2026] [:error] [pid 62427:tid 62468] [client 170.64.238.42:55404] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3YAAAAUs"]
[Mon May 25 13:21:30.279915 2026] [:error] [pid 62515:tid 62530] [client 170.64.238.42:55388] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3EgAAAM0"]
[Mon May 25 13:21:30.286992 2026] [:error] [pid 62515:tid 62533] [client 170.64.238.42:55408] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3EwAAANA"]
[Mon May 25 13:21:30.288093 2026] [:error] [pid 62515:tid 62535] [client 170.64.238.42:55422] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3FAAAANI"]
[Mon May 25 13:21:30.301290 2026] [:error] [pid 62515:tid 62519] [client 170.64.238.42:55438] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3FQAAAMI"]
[Mon May 25 13:21:30.318353 2026] [:error] [pid 62515:tid 62524] [client 170.64.238.42:55454] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3FgAAAMc"]
[Mon May 25 13:21:30.320343 2026] [:error] [pid 62515:tid 62538] [client 170.64.238.42:55468] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3FwAAANU"]
[Mon May 25 13:21:30.321913 2026] [:error] [pid 62515:tid 62540] [client 170.64.238.42:55492] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3GAAAANc"]
[Mon May 25 13:21:30.321947 2026] [:error] [pid 62515:tid 62521] [client 170.64.238.42:55484] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3GQAAAMQ"]
[Mon May 25 13:21:30.330422 2026] [:error] [pid 62515:tid 62517] [client 170.64.238.42:55506] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3GgAAAMA"]
[Mon May 25 13:21:30.331492 2026] [:error] [pid 62515:tid 62520] [client 170.64.238.42:55494] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3GwAAAMM"]
[Mon May 25 13:21:30.342450 2026] [:error] [pid 62428:tid 62493] [client 170.64.238.42:55514] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahPcWpNosGBa7mui3VTvggAAAIk"]
[Mon May 25 13:21:30.362086 2026] [:error] [pid 62427:tid 62473] [client 170.64.238.42:55528] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWvMUa83fc4GDyBw3YgAAAVA"]
[Mon May 25 13:21:30.363293 2026] [:error] [pid 62515:tid 62532] [client 170.64.238.42:55542] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3HQAAAM8"]
[Mon May 25 13:21:30.373796 2026] [:error] [pid 62428:tid 62498] [client 170.64.238.42:55556] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWpNosGBa7mui3VTvgwAAAI4"]
[Mon May 25 13:21:30.406524 2026] [:error] [pid 62722:tid 62742] [client 170.64.238.42:55558] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZSgAAAFI"]
[Mon May 25 13:21:30.509365 2026] [:error] [pid 62722:tid 62730] [client 170.64.238.42:55562] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZSwAAAEY"]
[Mon May 25 13:21:30.553305 2026] [:error] [pid 62722:tid 62748] [client 170.64.238.42:55564] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZTAAAAFg"]
[Mon May 25 13:21:30.558677 2026] [:error] [pid 62722:tid 62727] [client 170.64.238.42:55570] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZTQAAAEM"]
[Mon May 25 13:21:30.573842 2026] [:error] [pid 62722:tid 62746] [client 170.64.238.42:55582] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZTgAAAFY"]
[Mon May 25 13:21:30.585971 2026] [:error] [pid 62722:tid 62737] [client 170.64.238.42:55586] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZTwAAAE0"]
[Mon May 25 13:21:30.597729 2026] [:error] [pid 62722:tid 62740] [client 170.64.238.42:55594] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZUAAAAFA"]
[Mon May 25 13:21:30.599715 2026] [:error] [pid 62722:tid 62743] [client 170.64.238.42:55608] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWqM6ssnLWYf6CVDZUQAAAFM"]
[Mon May 25 13:21:30.615586 2026] [:error] [pid 62515:tid 62531] [client 170.64.238.42:55614] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3HgAAAM4"]
[Mon May 25 13:21:30.628704 2026] [:error] [pid 62515:tid 62537] [client 170.64.238.42:55616] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3HwAAANQ"]
[Mon May 25 13:21:30.642192 2026] [:error] [pid 62515:tid 62526] [client 170.64.238.42:55628] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3IQAAAMk"]
[Mon May 25 13:21:30.657974 2026] [:error] [pid 62515:tid 62529] [client 170.64.238.42:55636] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWhig0_XsOwmnrv-3IgAAAMw"]
[Mon May 25 13:21:30.671247 2026] [:error] [pid 62426:tid 62438] [client 170.64.238.42:55638] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.nextspaceconsulting.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahPcWkj3D3Mo8ANpTRCpLwAAAAg"]
[Mon May 25 21:38:28.788007 2026] [:error] [pid 62428:tid 62507] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Mon May 25 21:38:28.909122 2026] [:error] [pid 62428:tid 62497] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Mon May 25 21:38:29.029968 2026] [:error] [pid 62428:tid 62506] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Mon May 25 21:38:29.173424 2026] [:error] [pid 62428:tid 62500] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Mon May 25 21:38:29.305947 2026] [:error] [pid 62428:tid 62489] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Mon May 25 21:38:29.427054 2026] [:error] [pid 62428:tid 62492] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Mon May 25 21:38:29.582817 2026] [:error] [pid 62428:tid 62498] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/as.php
[Mon May 25 21:38:31.162809 2026] [:error] [pid 62428:tid 62504] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Mon May 25 21:38:31.283561 2026] [:error] [pid 62428:tid 62503] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/abc.php
[Mon May 25 21:38:31.404962 2026] [:error] [pid 62428:tid 62490] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/av.php
[Mon May 25 21:38:31.526006 2026] [:error] [pid 62428:tid 62508] [client 20.2.19.200:7038] File does not exist: /usr/local/apache/htdocs/suspended-page/autoload_classmap.php
[Mon May 25 21:38:31.678469 2026] [:error] [pid 62428:tid 62487] [client 20.2.19.200:7038] [client 20.2.19.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ahRQ15NosGBa7mui3VRnawAAAIM"]
[Mon May 25 21:38:32.219668 2026] [:error] [pid 62426:tid 62451] [client 20.2.19.200:6254] [client 20.2.19.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ahRQ2Ej3D3Mo8ANpTRAQFAAAABU"]
[Mon May 25 21:38:32.781025 2026] [:error] [pid 62722:tid 62735] [client 20.2.19.200:4692] [client 20.2.19.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ahRQ2KM6ssnLWYf6CVBTGwAAAEs"]
[Mon May 25 21:38:33.398329 2026] [:error] [pid 62426:tid 62432] [client 20.2.19.200:6028] [client 20.2.19.200] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/asus.php"] [unique_id "ahRQ2Uj3D3Mo8ANpTRAQHQAAAAI"]
[Tue May 26 17:05:07.959026 2026] [:error] [pid 20125:tid 20129] [client 34.11.17.55:56302] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/"] [unique_id "ahViQ9k9jeWERFDLJc4yOAAAAMI"]
[Tue May 26 17:05:08.407355 2026] [:error] [pid 20125:tid 20138] [client 34.11.17.55:59563] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-includes/ID3/license.txt"] [unique_id "ahViRNk9jeWERFDLJc4yPAAAAMs"]
[Tue May 26 17:05:08.839744 2026] [:error] [pid 55988:tid 55996] [client 34.11.17.55:54405] [client 34.11.17.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/feed/"] [unique_id "ahViRP3kVIz2sql52sdhyQAAAQU"]
[Tue May 26 18:43:37.612904 2026] [:error] [pid 33886:tid 33901] [client 86.227.63.46:62545] [client 86.227.63.46] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 86.227.63.46, incrementing ddos counter"] [hostname "nextspaceconsulting.com.au"] [uri "/xmlrpc.php"] [unique_id "ahV5WbBYzgp5rPVdHcV1vgAAAEo"]
[Tue May 26 18:43:37.618021 2026] [:error] [pid 33886:tid 33901] [client 86.227.63.46:62545] File does not exist: /usr/local/apache/htdocs/suspended-page/xmlrpc.php
[Tue May 26 20:10:04.341004 2026] [:error] [pid 33977:tid 33994] [client 20.206.111.149:16257] File does not exist: /usr/local/apache/htdocs/suspended-page/ff.php
[Tue May 26 20:10:04.652819 2026] [:error] [pid 33977:tid 33989] [client 20.206.111.149:16257] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Tue May 26 20:10:04.963295 2026] [:error] [pid 33977:tid 34004] [client 20.206.111.149:16257] File does not exist: /usr/local/apache/htdocs/suspended-page/tires.php
[Tue May 26 20:10:05.275140 2026] [:error] [pid 33977:tid 33980] [client 20.206.111.149:16257] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-block.php
[Tue May 26 20:10:05.604526 2026] [:error] [pid 33977:tid 33985] [client 20.206.111.149:16257] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-der.php
[Tue May 26 20:10:05.916833 2026] [:error] [pid 33977:tid 33986] [client 20.206.111.149:16257] File does not exist: /usr/local/apache/htdocs/suspended-page/ah25.php
[Tue May 26 20:10:06.229501 2026] [:error] [pid 33977:tid 33993] [client 20.206.111.149:16257] File does not exist: /usr/local/apache/htdocs/suspended-page/inputs.php
[Tue May 26 20:10:06.541056 2026] [:error] [pid 33977:tid 33987] [client 20.206.111.149:16257] File does not exist: /usr/local/apache/htdocs/suspended-page/samll.php
[Tue May 26 20:10:07.466372 2026] [:error] [pid 33977:tid 33999] [client 20.206.111.149:16257] File does not exist: /usr/local/apache/htdocs/suspended-page/favicon.php
[Tue May 26 20:10:07.785550 2026] [:error] [pid 33977:tid 33984] [client 20.206.111.149:16257] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "ahWNn-9cnSDNAU9sYPjKpQAAAAQ"]
[Tue May 26 20:10:09.010181 2026] [:error] [pid 36497:tid 36523] [client 20.206.111.149:16327] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "ahWNobjKQWM1gBmBY4jXzgAAAM0"]
[Tue May 26 20:10:09.925105 2026] [:error] [pid 33977:tid 33980] [client 20.206.111.149:16271] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "ahWNoe9cnSDNAU9sYPjKrwAAAAA"]
[Tue May 26 20:10:10.654607 2026] [:error] [pid 33887:tid 33924] [client 20.206.111.149:16362] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aboutc.php"] [unique_id "ahWNotCOI_FV7meOxGcjqgAAAIU"]
[Tue May 26 20:10:11.503688 2026] [:error] [pid 43701:tid 43703] [client 20.206.111.149:16273] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ahWNo4WtVI_UGrhtwKCC4wAAAUA"]
[Tue May 26 20:10:12.381722 2026] [:error] [pid 33887:tid 33936] [client 20.206.111.149:16383] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ahWNpNCOI_FV7meOxGcjsAAAAJE"]
[Tue May 26 20:10:13.236982 2026] [:error] [pid 33887:tid 33921] [client 20.206.111.149:16360] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ahWNpdCOI_FV7meOxGcjtAAAAII"]
[Tue May 26 20:10:14.288931 2026] [:error] [pid 33977:tid 33988] [client 20.206.111.149:16329] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-load.php"] [unique_id "ahWNpu9cnSDNAU9sYPjKxAAAAAg"]
[Tue May 26 20:10:16.177820 2026] [:error] [pid 43701:tid 43719] [client 20.206.111.149:16320] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "ahWNqIWtVI_UGrhtwKCDDQAAAVA"]
[Tue May 26 20:10:17.774165 2026] [:error] [pid 43701:tid 43705] [client 20.206.111.149:16339] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "ahWNqYWtVI_UGrhtwKCDGQAAAUI"]
[Tue May 26 20:10:19.471932 2026] [:error] [pid 33977:tid 33981] [client 20.206.111.149:16275] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "ahWNq-9cnSDNAU9sYPjKzgAAAAE"]
[Tue May 26 20:10:21.498443 2026] [:error] [pid 43701:tid 43714] [client 20.206.111.149:16350] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/aevly.php"] [unique_id "ahWNrYWtVI_UGrhtwKCDLQAAAUs"]
[Tue May 26 20:10:23.366837 2026] [:error] [pid 43701:tid 43726] [client 20.206.111.149:16305] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "ahWNr4WtVI_UGrhtwKCDQQAAAVc"]
[Tue May 26 20:10:25.103807 2026] [:error] [pid 43701:tid 43714] [client 20.206.111.149:16263] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "ahWNsYWtVI_UGrhtwKCDUgAAAUs"]
[Tue May 26 20:10:26.381555 2026] [:error] [pid 33888:tid 33962] [client 20.206.111.149:16382] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "ahWNsjqzTeoxiinZsGHzSAAAARA"]
[Tue May 26 20:10:27.356636 2026] [:error] [pid 33977:tid 33986] [client 20.206.111.149:16194] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atkno.php"] [unique_id "ahWNs-9cnSDNAU9sYPjK-gAAAAY"]
[Tue May 26 20:10:28.103789 2026] [:error] [pid 43701:tid 43714] [client 20.206.111.149:16260] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "ahWNtIWtVI_UGrhtwKCDfwAAAUs"]
[Tue May 26 20:10:29.456476 2026] [:error] [pid 33888:tid 33956] [client 20.206.111.149:16364] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "ahWNtTqzTeoxiinZsGHzUAAAAQo"]
[Tue May 26 20:10:31.244892 2026] [:error] [pid 33888:tid 33967] [client 20.206.111.149:16343] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "ahWNtzqzTeoxiinZsGHzVQAAARU"]
[Tue May 26 20:10:33.094924 2026] [:error] [pid 33886:tid 33902] [client 20.206.111.149:16267] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mini.php"] [unique_id "ahWNubBYzgp5rPVdHcWNpQAAAEs"]
[Tue May 26 20:10:35.490868 2026] [:error] [pid 33888:tid 33957] [client 20.206.111.149:16358] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-thi.php"] [unique_id "ahWNuzqzTeoxiinZsGHzXwAAAQs"]
[Tue May 26 20:10:37.009170 2026] [:error] [pid 36497:tid 36518] [client 20.206.111.149:16336] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-thi.php"] [unique_id "ahWNvbjKQWM1gBmBY4jYRgAAAMg"]
[Tue May 26 20:10:38.877974 2026] [:error] [pid 36497:tid 36519] [client 20.206.111.149:16352] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-thi.php"] [unique_id "ahWNvrjKQWM1gBmBY4jYTQAAAMk"]
[Tue May 26 20:10:40.563285 2026] [:error] [pid 43701:tid 43720] [client 20.206.111.149:16356] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-thi.php"] [unique_id "ahWNwIWtVI_UGrhtwKCDrQAAAVE"]
[Tue May 26 20:10:42.026686 2026] [:error] [pid 33888:tid 33965] [client 20.206.111.149:16282] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWNwjqzTeoxiinZsGHzcAAAARM"]
[Tue May 26 20:10:43.033199 2026] [:error] [pid 43701:tid 43706] [client 20.206.111.149:16351] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWNw4WtVI_UGrhtwKCDvgAAAUM"]
[Tue May 26 20:10:44.347559 2026] [:error] [pid 33886:tid 33895] [client 20.206.111.149:16193] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWNxLBYzgp5rPVdHcWNswAAAEQ"]
[Tue May 26 20:10:45.315201 2026] [:error] [pid 33977:tid 33981] [client 20.206.111.149:16340] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "ahWNxe9cnSDNAU9sYPjLdAAAAAE"]
[Tue May 26 20:10:46.654980 2026] [:error] [pid 36497:tid 36519] [client 20.206.111.149:16378] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ahWNxrjKQWM1gBmBY4jYWwAAAMk"]
[Tue May 26 20:10:47.855207 2026] [:error] [pid 36497:tid 36515] [client 20.206.111.149:16337] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ahWNx7jKQWM1gBmBY4jYYwAAAMU"]
[Tue May 26 20:10:49.419607 2026] [:error] [pid 33888:tid 33953] [client 20.206.111.149:16326] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ahWNyTqzTeoxiinZsGHzdQAAAQc"]
[Tue May 26 20:10:50.628823 2026] [:error] [pid 33886:tid 33899] [client 20.206.111.149:16243] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/amax.php"] [unique_id "ahWNyrBYzgp5rPVdHcWNuAAAAEg"]
[Tue May 26 20:10:51.857017 2026] [:error] [pid 33887:tid 33941] [client 20.206.111.149:16347] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wehrman.php"] [unique_id "ahWNy9COI_FV7meOxGckCgAAAJY"]
[Tue May 26 20:10:53.243654 2026] [:error] [pid 36497:tid 36527] [client 20.206.111.149:16261] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wehrman.php"] [unique_id "ahWNzbjKQWM1gBmBY4jYdQAAANE"]
[Tue May 26 20:10:55.367509 2026] [:error] [pid 36497:tid 36532] [client 20.206.111.149:16370] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wehrman.php"] [unique_id "ahWNz7jKQWM1gBmBY4jYewAAANY"]
[Tue May 26 20:10:58.518475 2026] [:error] [pid 36497:tid 36534] [client 20.206.111.149:16371] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wehrman.php"] [unique_id "ahWN0rjKQWM1gBmBY4jYhAAAANg"]
[Tue May 26 20:11:00.237979 2026] [:error] [pid 33977:tid 33983] [client 20.206.111.149:16259] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "ahWN1O9cnSDNAU9sYPjLqwAAAAM"]
[Tue May 26 20:11:01.206487 2026] [:error] [pid 33977:tid 33980] [client 20.206.111.149:16290] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "ahWN1e9cnSDNAU9sYPjLrgAAAAA"]
[Tue May 26 20:11:02.232061 2026] [:error] [pid 33977:tid 33993] [client 20.206.111.149:16334] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "ahWN1u9cnSDNAU9sYPjLrwAAAA0"]
[Tue May 26 20:11:03.320670 2026] [:error] [pid 33977:tid 33981] [client 20.206.111.149:16256] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/b.php"] [unique_id "ahWN1-9cnSDNAU9sYPjLsAAAAAE"]
[Tue May 26 20:11:04.685509 2026] [:error] [pid 33977:tid 34002] [client 20.206.111.149:16363] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-sing.php"] [unique_id "ahWN2O9cnSDNAU9sYPjLswAAABY"]
[Tue May 26 20:11:09.875794 2026] [:error] [pid 43701:tid 43713] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-sing.php
[Tue May 26 20:11:10.794591 2026] [:error] [pid 43701:tid 43714] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-links-opml.php
[Tue May 26 20:11:11.109395 2026] [:error] [pid 43701:tid 43713] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/edit.php
[Tue May 26 20:11:11.421497 2026] [:error] [pid 43701:tid 43711] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/wmore1.php
[Tue May 26 20:11:11.744511 2026] [:error] [pid 43701:tid 43706] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-access.php
[Tue May 26 20:11:12.078460 2026] [:error] [pid 43701:tid 43722] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue May 26 20:11:12.390762 2026] [:error] [pid 43701:tid 43716] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/sbhu.php
[Tue May 26 20:11:12.724463 2026] [:error] [pid 43701:tid 43711] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/bgymj.php
[Tue May 26 20:11:13.036849 2026] [:error] [pid 43701:tid 43726] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/file30.php
[Tue May 26 20:11:13.361396 2026] [:error] [pid 43701:tid 43713] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/yellow.php
[Tue May 26 20:11:13.685660 2026] [:error] [pid 43701:tid 43727] [client 20.206.111.149:16220] File does not exist: /usr/local/apache/htdocs/suspended-page/reze.php
[Tue May 26 20:11:14.116707 2026] [:error] [pid 43701:tid 43718] [client 20.206.111.149:16220] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wefile.php"] [unique_id "ahWN4oWtVI_UGrhtwKCExAAAAU8"]
[Tue May 26 20:11:15.400878 2026] [:error] [pid 33977:tid 33991] [client 20.206.111.149:16225] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wefile.php"] [unique_id "ahWN4-9cnSDNAU9sYPjLvAAAAAs"]
[Tue May 26 20:11:16.440029 2026] [:error] [pid 43701:tid 43726] [client 20.206.111.149:16377] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wefile.php"] [unique_id "ahWN5IWtVI_UGrhtwKCE3wAAAVc"]
[Tue May 26 20:11:18.229380 2026] [:error] [pid 33977:tid 34003] [client 20.206.111.149:16366] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wefile.php"] [unique_id "ahWN5u9cnSDNAU9sYPjLwgAAABc"]
[Tue May 26 20:11:19.725732 2026] [:error] [pid 33977:tid 34004] [client 20.206.111.149:16274] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ahWN5-9cnSDNAU9sYPjLyQAAABg"]
[Tue May 26 20:11:20.731300 2026] [:error] [pid 43701:tid 43707] [client 20.206.111.149:16212] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ahWN6IWtVI_UGrhtwKCE8AAAAUQ"]
[Tue May 26 20:11:21.744868 2026] [:error] [pid 33977:tid 34002] [client 20.206.111.149:16324] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ahWN6e9cnSDNAU9sYPjL0wAAABY"]
[Tue May 26 20:11:22.480024 2026] [:error] [pid 33886:tid 33915] [client 20.206.111.149:16285] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xda.php"] [unique_id "ahWN6rBYzgp5rPVdHcWN_AAAAFg"]
[Tue May 26 20:11:23.223081 2026] [:error] [pid 43701:tid 43711] [client 20.206.111.149:16204] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "ahWN64WtVI_UGrhtwKCE-QAAAUg"]
[Tue May 26 20:11:24.035800 2026] [:error] [pid 33977:tid 34002] [client 20.206.111.149:16357] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "ahWN7O9cnSDNAU9sYPjL4AAAABY"]
[Tue May 26 20:11:24.864429 2026] [:error] [pid 33886:tid 33912] [client 20.206.111.149:16369] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "ahWN7LBYzgp5rPVdHcWN_QAAAFU"]
[Tue May 26 20:11:25.831097 2026] [:error] [pid 33977:tid 33996] [client 20.206.111.149:16265] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/revealability.php"] [unique_id "ahWN7e9cnSDNAU9sYPjL7wAAABA"]
[Tue May 26 20:11:26.524810 2026] [:error] [pid 36497:tid 36529] [client 20.206.111.149:16277] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "ahWN7rjKQWM1gBmBY4jY6AAAANM"]
[Tue May 26 20:11:27.264569 2026] [:error] [pid 33888:tid 33949] [client 20.206.111.149:16269] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "ahWN7zqzTeoxiinZsGHz7QAAAQM"]
[Tue May 26 20:11:28.078466 2026] [:error] [pid 43701:tid 43709] [client 20.206.111.149:16276] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "ahWN8IWtVI_UGrhtwKCFBQAAAUY"]
[Tue May 26 20:11:28.896212 2026] [:error] [pid 33888:tid 33951] [client 20.206.111.149:16368] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/forbidals.php"] [unique_id "ahWN8DqzTeoxiinZsGHz8wAAAQU"]
[Tue May 26 20:11:29.871374 2026] [:error] [pid 33887:tid 33922] [client 20.206.111.149:16345] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/i.php"] [unique_id "ahWN8dCOI_FV7meOxGckSAAAAIM"]
[Tue May 26 20:11:30.805187 2026] [:error] [pid 33887:tid 33931] [client 20.206.111.149:16341] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/i.php"] [unique_id "ahWN8tCOI_FV7meOxGckTAAAAIw"]
[Tue May 26 20:11:32.003529 2026] [:error] [pid 33888:tid 33962] [client 20.206.111.149:16264] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/i.php"] [unique_id "ahWN9DqzTeoxiinZsGH0AwAAARA"]
[Tue May 26 20:11:33.241607 2026] [:error] [pid 33886:tid 33911] [client 20.206.111.149:16262] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/i.php"] [unique_id "ahWN9bBYzgp5rPVdHcWOCgAAAFQ"]
[Tue May 26 20:11:34.846714 2026] [:error] [pid 43701:tid 43722] [client 20.206.111.149:16200] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "ahWN9oWtVI_UGrhtwKCFFAAAAVM"]
[Tue May 26 20:11:38.844833 2026] [:error] [pid 43701:tid 43710] [client 20.206.111.149:16287] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "ahWN-oWtVI_UGrhtwKCFPAAAAUc"]
[Tue May 26 20:11:39.879162 2026] [:error] [pid 33977:tid 33993] [client 20.206.111.149:16279] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "ahWN--9cnSDNAU9sYPjMMgAAAA0"]
[Tue May 26 20:11:40.846290 2026] [:error] [pid 33887:tid 33925] [client 20.206.111.149:16344] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/900.php"] [unique_id "ahWN_NCOI_FV7meOxGckaAAAAIY"]
[Tue May 26 20:11:41.721366 2026] [:error] [pid 33886:tid 33897] [client 20.206.111.149:16361] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "ahWN_bBYzgp5rPVdHcWOFAAAAEY"]
[Tue May 26 20:11:42.543762 2026] [:error] [pid 33977:tid 34004] [client 20.206.111.149:16367] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "ahWN_u9cnSDNAU9sYPjMOwAAABg"]
[Tue May 26 20:11:43.303037 2026] [:error] [pid 33977:tid 33994] [client 20.206.111.149:16258] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "ahWN_-9cnSDNAU9sYPjMPQAAAA4"]
[Tue May 26 20:11:44.038957 2026] [:error] [pid 43701:tid 43723] [client 20.206.111.149:16284] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kj.php"] [unique_id "ahWOAIWtVI_UGrhtwKCFWAAAAVQ"]
[Tue May 26 20:11:44.891727 2026] [:error] [pid 33886:tid 33909] [client 20.206.111.149:16280] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "ahWOALBYzgp5rPVdHcWOGQAAAFI"]
[Tue May 26 20:11:45.593645 2026] [:error] [pid 33886:tid 33906] [client 20.206.111.149:16376] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "ahWOAbBYzgp5rPVdHcWOHAAAAE8"]
[Tue May 26 20:11:46.282006 2026] [:error] [pid 33977:tid 34001] [client 20.206.111.149:16278] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "ahWOAu9cnSDNAU9sYPjMSwAAABU"]
[Tue May 26 20:11:47.022672 2026] [:error] [pid 43701:tid 43723] [client 20.206.111.149:16354] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wuasr.php"] [unique_id "ahWOA4WtVI_UGrhtwKCFagAAAVQ"]
[Tue May 26 20:11:47.711401 2026] [:error] [pid 43701:tid 43719] [client 20.206.111.149:16365] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "ahWOA4WtVI_UGrhtwKCFcAAAAVA"]
[Tue May 26 20:11:48.809218 2026] [:error] [pid 33886:tid 33913] [client 20.206.111.149:16301] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "ahWOBLBYzgp5rPVdHcWOIQAAAFY"]
[Tue May 26 20:11:49.541839 2026] [:error] [pid 33887:tid 33939] [client 20.206.111.149:16380] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "ahWOBdCOI_FV7meOxGckbQAAAJQ"]
[Tue May 26 20:11:50.607808 2026] [:error] [pid 36497:tid 36523] [client 20.206.111.149:16238] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/t.php"] [unique_id "ahWOBrjKQWM1gBmBY4jZjwAAAM0"]
[Tue May 26 20:11:51.635316 2026] [:error] [pid 33888:tid 33970] [client 20.206.111.149:16311] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "ahWOBzqzTeoxiinZsGH0QgAAARg"]
[Tue May 26 20:11:52.344294 2026] [:error] [pid 33977:tid 33986] [client 20.206.111.149:16319] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "ahWOCO9cnSDNAU9sYPjMYwAAAAY"]
[Tue May 26 20:11:53.044829 2026] [:error] [pid 43701:tid 43714] [client 20.206.111.149:16197] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "ahWOCYWtVI_UGrhtwKCFmAAAAUs"]
[Tue May 26 20:11:53.900090 2026] [:error] [pid 43701:tid 43721] [client 20.206.111.149:16216] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/class-t.api.php"] [unique_id "ahWOCYWtVI_UGrhtwKCFoAAAAVI"]
[Tue May 26 20:11:55.040972 2026] [:error] [pid 33887:tid 33926] [client 20.206.111.149:16323] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-slss.php"] [unique_id "ahWOC9COI_FV7meOxGckfQAAAIc"]
[Tue May 26 20:11:55.843376 2026] [:error] [pid 43701:tid 43725] [client 20.206.111.149:16283] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-slss.php"] [unique_id "ahWOC4WtVI_UGrhtwKCFrgAAAVY"]
[Tue May 26 20:11:57.507686 2026] [:error] [pid 33888:tid 33964] [client 20.206.111.149:16349] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-slss.php"] [unique_id "ahWODTqzTeoxiinZsGH0WgAAARI"]
[Tue May 26 20:11:58.816304 2026] [:error] [pid 36497:tid 36529] [client 20.206.111.149:16291] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-slss.php"] [unique_id "ahWODrjKQWM1gBmBY4jZ2AAAANM"]
[Tue May 26 20:11:59.961889 2026] [:error] [pid 36497:tid 36525] [client 20.206.111.149:16333] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "ahWOD7jKQWM1gBmBY4jZ3QAAAM8"]
[Tue May 26 20:12:00.854823 2026] [:error] [pid 33977:tid 33996] [client 20.206.111.149:16381] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "ahWOEO9cnSDNAU9sYPjMewAAABA"]
[Tue May 26 20:12:01.756348 2026] [:error] [pid 43701:tid 43717] [client 20.206.111.149:16286] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "ahWOEYWtVI_UGrhtwKCF6gAAAU4"]
[Tue May 26 20:12:02.672832 2026] [:error] [pid 36497:tid 36526] [client 20.206.111.149:16325] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/crgio.php"] [unique_id "ahWOErjKQWM1gBmBY4jZ4AAAANA"]
[Tue May 26 20:12:03.401095 2026] [:error] [pid 43701:tid 43710] [client 20.206.111.149:16231] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "ahWOE4WtVI_UGrhtwKCGBAAAAUc"]
[Tue May 26 20:12:04.118342 2026] [:error] [pid 43701:tid 43722] [client 20.206.111.149:16312] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "ahWOFIWtVI_UGrhtwKCGDQAAAVM"]
[Tue May 26 20:12:04.789949 2026] [:error] [pid 43701:tid 43706] [client 20.206.111.149:16342] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "ahWOFIWtVI_UGrhtwKCGHQAAAUM"]
[Tue May 26 20:12:05.450736 2026] [:error] [pid 36497:tid 36512] [client 20.206.111.149:16246] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/Okxob.php"] [unique_id "ahWOFbjKQWM1gBmBY4jZ6wAAAMI"]
[Tue May 26 20:12:06.117742 2026] [:error] [pid 33887:tid 33925] [client 20.206.111.149:16143] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mass.php"] [unique_id "ahWOFtCOI_FV7meOxGckjAAAAIY"]
[Tue May 26 20:12:06.843034 2026] [:error] [pid 33977:tid 33991] [client 20.206.111.149:16286] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mass.php"] [unique_id "ahWOFu9cnSDNAU9sYPjMgQAAAAs"]
[Tue May 26 20:12:07.488076 2026] [:error] [pid 33977:tid 33992] [client 20.206.111.149:16313] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mass.php"] [unique_id "ahWOF-9cnSDNAU9sYPjMgwAAAAw"]
[Tue May 26 20:12:08.165407 2026] [:error] [pid 33977:tid 33994] [client 20.206.111.149:16314] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/mass.php"] [unique_id "ahWOGO9cnSDNAU9sYPjMiAAAAA4"]
[Tue May 26 20:12:08.818984 2026] [:error] [pid 33977:tid 33993] [client 20.206.111.149:16293] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ahWOGO9cnSDNAU9sYPjMiQAAAA0"]
[Tue May 26 20:12:09.567636 2026] [:error] [pid 33977:tid 33983] [client 20.206.111.149:16234] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ahWOGe9cnSDNAU9sYPjMjQAAAAM"]
[Tue May 26 20:12:10.236994 2026] [:error] [pid 36497:tid 36526] [client 20.206.111.149:16266] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ahWOGrjKQWM1gBmBY4jaAAAAANA"]
[Tue May 26 20:12:10.917497 2026] [:error] [pid 33887:tid 33938] [client 20.206.111.149:16281] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/dropdown.php"] [unique_id "ahWOGtCOI_FV7meOxGckjwAAAJM"]
[Tue May 26 20:12:11.622064 2026] [:error] [pid 33886:tid 33912] [client 20.206.111.149:16201] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "ahWOG7BYzgp5rPVdHcWONAAAAFU"]
[Tue May 26 20:12:12.276842 2026] [:error] [pid 33977:tid 33988] [client 20.206.111.149:16288] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "ahWOHO9cnSDNAU9sYPjMkgAAAAg"]
[Tue May 26 20:12:12.981608 2026] [:error] [pid 36497:tid 36532] [client 20.206.111.149:16374] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-good.php"] [unique_id "ahWOHLjKQWM1gBmBY4jaDwAAANY"]
[Tue May 26 20:12:13.848151 2026] [:error] [pid 33887:tid 33921] [client 20.206.111.149:16353] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-good.php
[Tue May 26 20:12:14.172380 2026] [:error] [pid 33887:tid 33929] [client 20.206.111.149:16353] File does not exist: /usr/local/apache/htdocs/suspended-page/mifta.php
[Tue May 26 20:12:14.482379 2026] [:error] [pid 33887:tid 33943] [client 20.206.111.149:16353] File does not exist: /usr/local/apache/htdocs/suspended-page/amxloxxr.php
[Tue May 26 20:12:14.815209 2026] [:error] [pid 33887:tid 33933] [client 20.206.111.149:16353] File does not exist: /usr/local/apache/htdocs/suspended-page/file59.php
[Tue May 26 20:12:15.153390 2026] [:error] [pid 33887:tid 33926] [client 20.206.111.149:16353] File does not exist: /usr/local/apache/htdocs/suspended-page/asasx.php
[Tue May 26 20:12:15.876315 2026] [:error] [pid 33887:tid 33928] [client 20.206.111.149:16353] File does not exist: /usr/local/apache/htdocs/suspended-page/ms-edit.php
[Tue May 26 20:12:16.196569 2026] [:error] [pid 33887:tid 33925] [client 20.206.111.149:16353] File does not exist: /usr/local/apache/htdocs/suspended-page/file4.php
[Tue May 26 20:12:16.947460 2026] [:error] [pid 33887:tid 33937] [client 20.206.111.149:16353] File does not exist: /usr/local/apache/htdocs/suspended-page/hplfuns.php
[Tue May 26 20:12:17.438750 2026] [:error] [pid 33887:tid 33940] [client 20.206.111.149:16353] File does not exist: /usr/local/apache/htdocs/suspended-page/1index.php
[Tue May 26 20:12:18.108141 2026] [:error] [pid 33887:tid 33930] [client 20.206.111.149:16353] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-su.php
[Tue May 26 20:12:18.434274 2026] [:error] [pid 33887:tid 33936] [client 20.206.111.149:16353] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccou.php"] [unique_id "ahWOItCOI_FV7meOxGckuwAAAJE"]
[Tue May 26 20:12:19.816329 2026] [:error] [pid 36497:tid 36510] [client 20.206.111.149:16299] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccou.php"] [unique_id "ahWOI7jKQWM1gBmBY4jaLwAAAMA"]
[Tue May 26 20:12:20.670601 2026] [:error] [pid 33977:tid 33996] [client 20.206.111.149:16331] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccou.php"] [unique_id "ahWOJO9cnSDNAU9sYPjMpQAAABA"]
[Tue May 26 20:12:21.358443 2026] [:error] [pid 43701:tid 43717] [client 20.206.111.149:16330] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ccou.php"] [unique_id "ahWOJYWtVI_UGrhtwKCGoQAAAU4"]
[Tue May 26 20:12:22.079747 2026] [:error] [pid 43701:tid 43716] [client 20.206.111.149:16310] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-ver.php"] [unique_id "ahWOJoWtVI_UGrhtwKCGqQAAAU0"]
[Tue May 26 20:12:22.736888 2026] [:error] [pid 36497:tid 36511] [client 20.206.111.149:16248] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-ver.php"] [unique_id "ahWOJrjKQWM1gBmBY4jaPQAAAME"]
[Tue May 26 20:12:23.427329 2026] [:error] [pid 33888:tid 33969] [client 20.206.111.149:16335] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-ver.php"] [unique_id "ahWOJzqzTeoxiinZsGH0egAAARc"]
[Tue May 26 20:12:24.144224 2026] [:error] [pid 36497:tid 36532] [client 20.206.111.149:16195] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-ver.php"] [unique_id "ahWOKLjKQWM1gBmBY4jaRAAAANY"]
[Tue May 26 20:12:24.935809 2026] [:error] [pid 43701:tid 43708] [client 20.206.111.149:16304] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "ahWOKIWtVI_UGrhtwKCGxQAAAUU"]
[Tue May 26 20:12:25.759665 2026] [:error] [pid 36497:tid 36510] [client 20.206.111.149:16268] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "ahWOKbjKQWM1gBmBY4jaUAAAAMA"]
[Tue May 26 20:12:26.631893 2026] [:error] [pid 33977:tid 34001] [client 20.206.111.149:16196] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "ahWOKu9cnSDNAU9sYPjMsAAAABU"]
[Tue May 26 20:12:27.305994 2026] [:error] [pid 33888:tid 33946] [client 20.206.111.149:16206] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/db.php"] [unique_id "ahWOKzqzTeoxiinZsGH0fQAAAQA"]
[Tue May 26 20:12:28.078881 2026] [:error] [pid 33888:tid 33950] [client 20.206.111.149:16165] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "ahWOLDqzTeoxiinZsGH0fwAAAQQ"]
[Tue May 26 20:12:29.230667 2026] [:error] [pid 43701:tid 43716] [client 20.206.111.149:16199] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "ahWOLYWtVI_UGrhtwKCG3wAAAU0"]
[Tue May 26 20:12:30.139181 2026] [:error] [pid 33886:tid 33903] [client 20.206.111.149:16297] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "ahWOLrBYzgp5rPVdHcWORQAAAEw"]
[Tue May 26 20:12:30.932003 2026] [:error] [pid 43701:tid 43727] [client 20.206.111.149:16221] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lib.php"] [unique_id "ahWOLoWtVI_UGrhtwKCG7wAAAVg"]
[Tue May 26 20:12:31.558992 2026] [:error] [pid 43701:tid 43723] [client 20.206.111.149:16224] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sys.php"] [unique_id "ahWOL4WtVI_UGrhtwKCG9wAAAVQ"]
[Tue May 26 20:12:32.253990 2026] [:error] [pid 33977:tid 33987] [client 20.206.111.149:16209] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sys.php"] [unique_id "ahWOMO9cnSDNAU9sYPjMzgAAAAc"]
[Tue May 26 20:12:33.359892 2026] [:error] [pid 33977:tid 33984] [client 20.206.111.149:16379] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sys.php"] [unique_id "ahWOMe9cnSDNAU9sYPjM0gAAAAQ"]
[Tue May 26 20:12:34.416444 2026] [:error] [pid 33886:tid 33902] [client 20.206.111.149:16228] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sys.php"] [unique_id "ahWOMrBYzgp5rPVdHcWOUAAAAEs"]
[Tue May 26 20:12:35.660125 2026] [:error] [pid 33977:tid 34004] [client 20.206.111.149:16128] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "ahWOM-9cnSDNAU9sYPjM3AAAABg"]
[Tue May 26 20:12:36.630320 2026] [:error] [pid 33887:tid 33923] [client 20.206.111.149:16222] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "ahWONNCOI_FV7meOxGck5QAAAIQ"]
[Tue May 26 20:12:37.681878 2026] [:error] [pid 33888:tid 33953] [client 20.206.111.149:16146] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "ahWONTqzTeoxiinZsGH0lwAAAQc"]
[Tue May 26 20:12:38.514955 2026] [:error] [pid 33887:tid 33935] [client 20.206.111.149:16208] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lala.php"] [unique_id "ahWONtCOI_FV7meOxGck9QAAAJA"]
[Tue May 26 20:12:39.574481 2026] [:error] [pid 43701:tid 43722] [client 20.206.111.149:16316] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ahWON4WtVI_UGrhtwKCHEgAAAVM"]
[Tue May 26 20:12:40.569738 2026] [:error] [pid 33887:tid 33924] [client 20.206.111.149:16315] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ahWOONCOI_FV7meOxGck-QAAAIU"]
[Tue May 26 20:12:41.483854 2026] [:error] [pid 33888:tid 33966] [client 20.206.111.149:16302] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ahWOOTqzTeoxiinZsGH0oQAAARQ"]
[Tue May 26 20:12:42.735580 2026] [:error] [pid 33888:tid 33952] [client 20.206.111.149:16207] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bthil.php"] [unique_id "ahWOOjqzTeoxiinZsGH0pwAAAQY"]
[Tue May 26 20:12:43.881368 2026] [:error] [pid 33977:tid 33996] [client 20.206.111.149:16211] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fun.php"] [unique_id "ahWOO-9cnSDNAU9sYPjNAAAAABA"]
[Tue May 26 20:12:44.896148 2026] [:error] [pid 33886:tid 33895] [client 20.206.111.149:16242] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fun.php"] [unique_id "ahWOPLBYzgp5rPVdHcWOjAAAAEQ"]
[Tue May 26 20:12:46.318771 2026] [:error] [pid 33886:tid 33896] [client 20.206.111.149:16230] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fun.php"] [unique_id "ahWOPrBYzgp5rPVdHcWOkAAAAEU"]
[Tue May 26 20:12:47.811004 2026] [:error] [pid 33886:tid 33903] [client 20.206.111.149:16308] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fun.php"] [unique_id "ahWOP7BYzgp5rPVdHcWOkwAAAEw"]
[Tue May 26 20:12:48.958567 2026] [:error] [pid 33886:tid 33906] [client 20.206.111.149:16131] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ahWOQLBYzgp5rPVdHcWOmwAAAE8"]
[Tue May 26 20:12:49.895027 2026] [:error] [pid 33887:tid 33937] [client 20.206.111.149:16303] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ahWOQdCOI_FV7meOxGclKgAAAJI"]
[Tue May 26 20:12:50.636186 2026] [:error] [pid 36497:tid 36524] [client 20.206.111.149:16218] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ahWOQrjKQWM1gBmBY4jajgAAAM4"]
[Tue May 26 20:12:51.848364 2026] [:error] [pid 33977:tid 33987] [client 20.206.111.149:16306] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-the.php"] [unique_id "ahWOQ-9cnSDNAU9sYPjNHwAAAAc"]
[Tue May 26 20:12:53.309417 2026] [:error] [pid 36497:tid 36523] [client 20.206.111.149:16250] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ahWORbjKQWM1gBmBY4jakwAAAM0"]
[Tue May 26 20:12:54.532563 2026] [:error] [pid 33887:tid 33934] [client 20.206.111.149:16375] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ahWORtCOI_FV7meOxGclQAAAAI8"]
[Tue May 26 20:12:55.627153 2026] [:error] [pid 33888:tid 33948] [client 20.206.111.149:16167] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ahWORzqzTeoxiinZsGH01gAAAQI"]
[Tue May 26 20:12:56.624090 2026] [:error] [pid 36497:tid 36516] [client 20.206.111.149:16348] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vx.php"] [unique_id "ahWOSLjKQWM1gBmBY4jamQAAAMY"]
[Tue May 26 20:12:57.349825 2026] [:error] [pid 36497:tid 36533] [client 20.206.111.149:16272] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ahWOSbjKQWM1gBmBY4jaoQAAANc"]
[Tue May 26 20:12:58.181172 2026] [:error] [pid 43701:tid 43715] [client 20.206.111.149:16317] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ahWOSoWtVI_UGrhtwKCHSgAAAUw"]
[Tue May 26 20:12:59.648285 2026] [:error] [pid 33977:tid 33994] [client 20.206.111.149:16270] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ahWOS-9cnSDNAU9sYPjNLQAAAA4"]
[Tue May 26 20:13:01.291849 2026] [:error] [pid 33888:tid 33962] [client 20.206.111.149:16157] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ff1.php"] [unique_id "ahWOTTqzTeoxiinZsGH0_gAAARA"]
[Tue May 26 20:13:02.171883 2026] [:error] [pid 43701:tid 43716] [client 20.206.111.149:16355] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWOToWtVI_UGrhtwKCHYgAAAU0"]
[Tue May 26 20:13:03.250070 2026] [:error] [pid 33888:tid 33961] [client 20.206.111.149:16097] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWOTzqzTeoxiinZsGH1FQAAAQ8"]
[Tue May 26 20:13:04.132311 2026] [:error] [pid 36497:tid 36515] [client 20.206.111.149:16332] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWOULjKQWM1gBmBY4jauAAAAMU"]
[Tue May 26 20:13:05.084694 2026] [:error] [pid 43701:tid 43727] [client 20.206.111.149:16226] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/explorer/index_.php"] [unique_id "ahWOUYWtVI_UGrhtwKCHbQAAAVg"]
[Tue May 26 20:13:06.133045 2026] [:error] [pid 36497:tid 36517] [client 20.206.111.149:16254] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "ahWOUrjKQWM1gBmBY4javwAAAMc"]
[Tue May 26 20:13:07.085558 2026] [:error] [pid 33887:tid 33936] [client 20.206.111.149:16147] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "ahWOU9COI_FV7meOxGclTAAAAJE"]
[Tue May 26 20:13:08.431564 2026] [:error] [pid 33887:tid 33925] [client 20.206.111.149:16245] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "ahWOVNCOI_FV7meOxGclTgAAAIY"]
[Tue May 26 20:13:09.550449 2026] [:error] [pid 36497:tid 36527] [client 20.206.111.149:16156] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/error.php"] [unique_id "ahWOVbjKQWM1gBmBY4jawwAAANE"]
[Tue May 26 20:13:10.341851 2026] [:error] [pid 33887:tid 33919] [client 20.206.111.149:16213] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ahWOVtCOI_FV7meOxGclUgAAAIA"]
[Tue May 26 20:13:11.004169 2026] [:error] [pid 33887:tid 33929] [client 20.206.111.149:16073] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ahWOV9COI_FV7meOxGclVgAAAIo"]
[Tue May 26 20:13:11.679964 2026] [:error] [pid 33887:tid 33930] [client 20.206.111.149:16217] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ahWOV9COI_FV7meOxGclWwAAAIs"]
[Tue May 26 20:13:12.395403 2026] [:error] [pid 33977:tid 34000] [client 20.206.111.149:16162] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/333.php"] [unique_id "ahWOWO9cnSDNAU9sYPjNRwAAABQ"]
[Tue May 26 20:13:13.132503 2026] [:error] [pid 43701:tid 43709] [client 20.206.111.149:16161] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ahWOWYWtVI_UGrhtwKCHqwAAAUY"]
[Tue May 26 20:13:13.911898 2026] [:error] [pid 33977:tid 33989] [client 20.206.111.149:16159] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ahWOWe9cnSDNAU9sYPjNTAAAAAk"]
[Tue May 26 20:13:14.713111 2026] [:error] [pid 33887:tid 33923] [client 20.206.111.149:16129] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ahWOWtCOI_FV7meOxGclagAAAIQ"]
[Tue May 26 20:13:15.658626 2026] [:error] [pid 33886:tid 33892] [client 20.206.111.149:16171] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ftde.php"] [unique_id "ahWOW7BYzgp5rPVdHcWO-gAAAEE"]
[Tue May 26 20:13:16.551604 2026] [:error] [pid 33888:tid 33955] [client 20.206.111.149:16307] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app.php"] [unique_id "ahWOXDqzTeoxiinZsGH1TAAAAQk"]
[Tue May 26 20:13:17.574169 2026] [:error] [pid 33886:tid 33895] [client 20.206.111.149:16163] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/app.php"] [unique_id "ahWOXbBYzgp5rPVdHcWPAAAAAEQ"]
[Tue May 26 20:13:18.644036 2026] [:error] [pid 33977:tid 33985] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/app.php
[Tue May 26 20:13:18.986048 2026] [:error] [pid 33977:tid 33996] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/cilus.php
[Tue May 26 20:13:19.321481 2026] [:error] [pid 33977:tid 33980] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/a5.php
[Tue May 26 20:13:19.725963 2026] [:error] [pid 33977:tid 33997] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/test.php
[Tue May 26 20:13:20.058803 2026] [:error] [pid 33977:tid 33990] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/aa.php
[Tue May 26 20:13:20.371044 2026] [:error] [pid 33977:tid 33981] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/term.php
[Tue May 26 20:13:20.682147 2026] [:error] [pid 33977:tid 33991] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/file61.php
[Tue May 26 20:13:20.993605 2026] [:error] [pid 33977:tid 33995] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/la.php
[Tue May 26 20:13:21.307571 2026] [:error] [pid 33977:tid 34004] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/first.php
[Tue May 26 20:13:21.633115 2026] [:error] [pid 33977:tid 34003] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/pass4.php
[Tue May 26 20:13:21.944586 2026] [:error] [pid 33977:tid 33999] [client 20.206.111.149:16239] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-firewall.php
[Tue May 26 20:13:22.310170 2026] [:error] [pid 33977:tid 33984] [client 20.206.111.149:16239] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ahWOYu9cnSDNAU9sYPjNbwAAAAQ"]
[Tue May 26 20:13:22.948788 2026] [:error] [pid 33888:tid 33959] [client 20.206.111.149:16252] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ahWOYjqzTeoxiinZsGH1VAAAAQ0"]
[Tue May 26 20:13:23.721390 2026] [:error] [pid 33888:tid 33950] [client 20.206.111.149:16219] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ahWOYzqzTeoxiinZsGH1VgAAAQQ"]
[Tue May 26 20:13:24.563660 2026] [:error] [pid 43701:tid 43713] [client 20.206.111.149:16133] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/lv.php"] [unique_id "ahWOZIWtVI_UGrhtwKCIDAAAAUo"]
[Tue May 26 20:13:25.430167 2026] [:error] [pid 43701:tid 43726] [client 20.206.111.149:16093] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ahWOZYWtVI_UGrhtwKCIFQAAAVc"]
[Tue May 26 20:13:26.258757 2026] [:error] [pid 33888:tid 33965] [client 20.206.111.149:16253] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ahWOZjqzTeoxiinZsGH1WAAAARM"]
[Tue May 26 20:13:27.043122 2026] [:error] [pid 33888:tid 33954] [client 20.206.111.149:16177] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ahWOZzqzTeoxiinZsGH1WQAAAQg"]
[Tue May 26 20:13:27.707068 2026] [:error] [pid 43701:tid 43708] [client 20.206.111.149:16215] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/yas.php"] [unique_id "ahWOZ4WtVI_UGrhtwKCIKgAAAUU"]
[Tue May 26 20:13:28.735542 2026] [:error] [pid 36497:tid 36533] [client 20.206.111.149:16205] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "ahWOaLjKQWM1gBmBY4jbHwAAANc"]
[Tue May 26 20:13:29.455527 2026] [:error] [pid 33977:tid 33986] [client 20.206.111.149:16068] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "ahWOae9cnSDNAU9sYPjNfQAAAAY"]
[Tue May 26 20:13:30.246458 2026] [:error] [pid 33887:tid 33932] [client 20.206.111.149:16292] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "ahWOatCOI_FV7meOxGclmwAAAI0"]
[Tue May 26 20:13:31.074069 2026] [:error] [pid 33888:tid 33957] [client 20.206.111.149:16240] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-trackback.php"] [unique_id "ahWOazqzTeoxiinZsGH1YgAAAQs"]
[Tue May 26 20:13:32.088740 2026] [:error] [pid 33888:tid 33966] [client 20.206.111.149:16338] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ahWObDqzTeoxiinZsGH1ZgAAARQ"]
[Tue May 26 20:13:33.267558 2026] [:error] [pid 33887:tid 33919] [client 20.206.111.149:16030] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ahWObdCOI_FV7meOxGclrAAAAIA"]
[Tue May 26 20:13:34.696513 2026] [:error] [pid 33888:tid 33956] [client 20.206.111.149:16232] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ahWObjqzTeoxiinZsGH1dAAAAQo"]
[Tue May 26 20:13:35.572838 2026] [:error] [pid 36497:tid 36528] [client 20.206.111.149:16244] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/png.php"] [unique_id "ahWOb7jKQWM1gBmBY4jbNwAAANI"]
[Tue May 26 20:13:36.370489 2026] [:error] [pid 33977:tid 33994] [client 20.206.111.149:16359] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "ahWOcO9cnSDNAU9sYPjNhAAAAA4"]
[Tue May 26 20:13:37.131650 2026] [:error] [pid 43701:tid 43720] [client 20.206.111.149:16203] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "ahWOcYWtVI_UGrhtwKCIVQAAAVE"]
[Tue May 26 20:13:38.051025 2026] [:error] [pid 33977:tid 33985] [client 20.206.111.149:16137] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "ahWOcu9cnSDNAU9sYPjNhwAAAAU"]
[Tue May 26 20:13:42.471167 2026] [:error] [pid 43701:tid 43721] [client 20.206.111.149:16210] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-at.php"] [unique_id "ahWOdoWtVI_UGrhtwKCIWAAAAVI"]
[Tue May 26 20:13:43.436757 2026] [:error] [pid 33888:tid 33968] [client 20.206.111.149:16135] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/database.php"] [unique_id "ahWOdzqzTeoxiinZsGH1jgAAARY"]
[Tue May 26 20:13:44.513989 2026] [:error] [pid 43701:tid 43706] [client 20.206.111.149:16152] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/database.php"] [unique_id "ahWOeIWtVI_UGrhtwKCIZgAAAUM"]
[Tue May 26 20:13:45.167702 2026] [:error] [pid 36497:tid 36534] [client 20.206.111.149:16192] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/database.php"] [unique_id "ahWOebjKQWM1gBmBY4jbaQAAANg"]
[Tue May 26 20:13:45.858284 2026] [:error] [pid 33886:tid 33898] [client 20.206.111.149:16175] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/database.php"] [unique_id "ahWOebBYzgp5rPVdHcWPEAAAAEc"]
[Tue May 26 20:13:46.601205 2026] [:error] [pid 33887:tid 33921] [client 20.206.111.149:16294] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/like.php"] [unique_id "ahWOetCOI_FV7meOxGcl7wAAAII"]
[Tue May 26 20:13:47.325106 2026] [:error] [pid 43701:tid 43703] [client 20.206.111.149:16373] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/like.php"] [unique_id "ahWOe4WtVI_UGrhtwKCIcQAAAUA"]
[Tue May 26 20:13:48.303109 2026] [:error] [pid 43701:tid 43717] [client 20.206.111.149:16082] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/like.php"] [unique_id "ahWOfIWtVI_UGrhtwKCIdwAAAU4"]
[Tue May 26 20:13:49.428488 2026] [:error] [pid 33886:tid 33891] [client 20.206.111.149:16318] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/like.php"] [unique_id "ahWOfbBYzgp5rPVdHcWPGgAAAEA"]
[Tue May 26 20:13:50.785374 2026] [:error] [pid 33888:tid 33947] [client 20.206.111.149:16148] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "ahWOfjqzTeoxiinZsGH1kgAAAQE"]
[Tue May 26 20:13:51.556111 2026] [:error] [pid 43701:tid 43710] [client 20.206.111.149:16202] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "ahWOf4WtVI_UGrhtwKCIhQAAAUc"]
[Tue May 26 20:13:52.997979 2026] [:error] [pid 43701:tid 43707] [client 20.206.111.149:16092] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "ahWOgIWtVI_UGrhtwKCIigAAAUQ"]
[Tue May 26 20:13:54.051991 2026] [:error] [pid 36497:tid 36525] [client 20.206.111.149:16322] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xxx.php"] [unique_id "ahWOgrjKQWM1gBmBY4jbxQAAAM8"]
[Tue May 26 20:13:54.831038 2026] [:error] [pid 33888:tid 33960] [client 20.206.111.149:16214] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ahWOgjqzTeoxiinZsGH1rQAAAQ4"]
[Tue May 26 20:13:55.570910 2026] [:error] [pid 33977:tid 33983] [client 20.206.111.149:16372] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ahWOg-9cnSDNAU9sYPjNqQAAAAM"]
[Tue May 26 20:13:56.251246 2026] [:error] [pid 36497:tid 36532] [client 20.206.111.149:16086] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ahWOhLjKQWM1gBmBY4jb7QAAANY"]
[Tue May 26 20:13:57.039317 2026] [:error] [pid 33886:tid 33903] [client 20.206.111.149:16160] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/new.php"] [unique_id "ahWOhbBYzgp5rPVdHcWPOgAAAEw"]
[Tue May 26 20:13:57.810367 2026] [:error] [pid 43701:tid 43704] [client 20.206.111.149:16166] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "ahWOhYWtVI_UGrhtwKCIoQAAAUE"]
[Tue May 26 20:13:58.628091 2026] [:error] [pid 43701:tid 43724] [client 20.206.111.149:16229] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "ahWOhoWtVI_UGrhtwKCIpQAAAVU"]
[Tue May 26 20:13:59.403559 2026] [:error] [pid 33977:tid 33991] [client 20.206.111.149:16125] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "ahWOh-9cnSDNAU9sYPjNtgAAAAs"]
[Tue May 26 20:14:00.043401 2026] [:error] [pid 43701:tid 43712] [client 20.206.111.149:16136] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/sid3.php"] [unique_id "ahWOiIWtVI_UGrhtwKCIrgAAAUk"]
[Tue May 26 20:14:00.919495 2026] [:error] [pid 43701:tid 43705] [client 20.206.111.149:16295] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ahWOiIWtVI_UGrhtwKCIsQAAAUI"]
[Tue May 26 20:14:01.649387 2026] [:error] [pid 36497:tid 36529] [client 20.206.111.149:16296] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ahWOibjKQWM1gBmBY4jcKgAAANM"]
[Tue May 26 20:14:02.310026 2026] [:error] [pid 36497:tid 36516] [client 20.206.111.149:16144] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ahWOirjKQWM1gBmBY4jcNgAAAMY"]
[Tue May 26 20:14:03.048307 2026] [:error] [pid 33887:tid 33933] [client 20.206.111.149:16189] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/txets.php"] [unique_id "ahWOi9COI_FV7meOxGcl_QAAAI4"]
[Tue May 26 20:14:03.745528 2026] [:error] [pid 33977:tid 33984] [client 20.206.111.149:16251] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "ahWOi-9cnSDNAU9sYPjNvgAAAAQ"]
[Tue May 26 20:14:04.400553 2026] [:error] [pid 43701:tid 43716] [client 20.206.111.149:16115] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "ahWOjIWtVI_UGrhtwKCIugAAAU0"]
[Tue May 26 20:14:05.353097 2026] [:error] [pid 36497:tid 36513] [client 20.206.111.149:16328] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "ahWOjbjKQWM1gBmBY4jcWwAAAMM"]
[Tue May 26 20:14:06.113301 2026] [:error] [pid 33886:tid 33901] [client 20.206.111.149:16249] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/shell20211028.php"] [unique_id "ahWOjrBYzgp5rPVdHcWPPQAAAEo"]
[Tue May 26 20:14:06.800551 2026] [:error] [pid 33977:tid 33993] [client 20.206.111.149:16235] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-wz.php"] [unique_id "ahWOju9cnSDNAU9sYPjNxQAAAA0"]
[Tue May 26 20:14:07.511796 2026] [:error] [pid 43701:tid 43707] [client 20.206.111.149:16100] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-wz.php"] [unique_id "ahWOj4WtVI_UGrhtwKCIxAAAAUQ"]
[Tue May 26 20:14:08.159931 2026] [:error] [pid 33977:tid 34003] [client 20.206.111.149:16174] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-wz.php"] [unique_id "ahWOkO9cnSDNAU9sYPjNyQAAABc"]
[Tue May 26 20:14:08.878379 2026] [:error] [pid 33977:tid 33997] [client 20.206.111.149:16188] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-wz.php"] [unique_id "ahWOkO9cnSDNAU9sYPjNywAAABE"]
[Tue May 26 20:14:09.570772 2026] [:error] [pid 36497:tid 36515] [client 20.206.111.149:16007] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "ahWOkbjKQWM1gBmBY4jciwAAAMU"]
[Tue May 26 20:14:10.194687 2026] [:error] [pid 43701:tid 43723] [client 20.206.111.149:16180] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "ahWOkoWtVI_UGrhtwKCIyAAAAVQ"]
[Tue May 26 20:14:10.856371 2026] [:error] [pid 36497:tid 36518] [client 20.206.111.149:16130] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "ahWOkrjKQWM1gBmBY4jcrgAAAMg"]
[Tue May 26 20:14:11.511227 2026] [:error] [pid 43701:tid 43715] [client 20.206.111.149:16173] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/albin.php"] [unique_id "ahWOk4WtVI_UGrhtwKCI0QAAAUw"]
[Tue May 26 20:14:12.207789 2026] [:error] [pid 33887:tid 33925] [client 20.206.111.149:16181] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "ahWOlNCOI_FV7meOxGcmBwAAAIY"]
[Tue May 26 20:14:13.060585 2026] [:error] [pid 36497:tid 36511] [client 20.206.111.149:16007] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "ahWOlbjKQWM1gBmBY4jcxwAAAME"]
[Tue May 26 20:14:13.781830 2026] [:error] [pid 43701:tid 43716] [client 20.206.111.149:16075] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "ahWOlYWtVI_UGrhtwKCI1gAAAU0"]
[Tue May 26 20:14:14.853039 2026] [:error] [pid 33888:tid 33948] [client 20.206.111.149:16085] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/ok.php"] [unique_id "ahWOljqzTeoxiinZsGH15wAAAQI"]
[Tue May 26 20:14:15.634774 2026] [:error] [pid 33887:tid 33931] [client 20.206.111.149:16233] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/drykl.php"] [unique_id "ahWOl9COI_FV7meOxGcmCgAAAIw"]
[Tue May 26 20:14:16.685658 2026] [:error] [pid 43701:tid 43724] [client 20.206.111.149:16078] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/drykl.php"] [unique_id "ahWOmIWtVI_UGrhtwKCI4AAAAVU"]
[Tue May 26 20:14:17.406054 2026] [:error] [pid 43701:tid 43722] [client 20.206.111.149:16083] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/drykl.php"] [unique_id "ahWOmYWtVI_UGrhtwKCI5wAAAVM"]
[Tue May 26 20:14:19.092065 2026] [:error] [pid 33886:tid 33895] [client 20.206.111.149:16088] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/drykl.php"] [unique_id "ahWOm7BYzgp5rPVdHcWPWgAAAEQ"]
[Tue May 26 20:14:19.986905 2026] [:error] [pid 33977:tid 33997] [client 20.206.111.149:16383] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/atomlib.php"] [unique_id "ahWOm-9cnSDNAU9sYPjN2AAAABE"]
[Tue May 26 20:14:21.285310 2026] [:error] [pid 43701:tid 43705] [client 20.206.111.149:16273] File does not exist: /usr/local/apache/htdocs/suspended-page/atomlib.php
[Tue May 26 20:14:21.651051 2026] [:error] [pid 43701:tid 43722] [client 20.206.111.149:16273] File does not exist: /usr/local/apache/htdocs/suspended-page/z.php
[Tue May 26 20:14:21.976155 2026] [:error] [pid 43701:tid 43703] [client 20.206.111.149:16273] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-png.php
[Tue May 26 20:14:23.154857 2026] [:error] [pid 43701:tid 43712] [client 20.206.111.149:16273] File does not exist: /usr/local/apache/htdocs/suspended-page/sadcut1.php
[Tue May 26 20:14:23.467300 2026] [:error] [pid 43701:tid 43720] [client 20.206.111.149:16273] File does not exist: /usr/local/apache/htdocs/suspended-page/wp.php
[Tue May 26 20:14:23.782600 2026] [:error] [pid 43701:tid 43711] [client 20.206.111.149:16273] File does not exist: /usr/local/apache/htdocs/suspended-page/x.php
[Tue May 26 20:14:24.094731 2026] [:error] [pid 43701:tid 43722] [client 20.206.111.149:16273] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-conflg.php
[Tue May 26 20:14:24.408074 2026] [:error] [pid 43701:tid 43708] [client 20.206.111.149:16273] File does not exist: /usr/local/apache/htdocs/suspended-page/wp-update.php
[Tue May 26 20:14:24.742917 2026] [:error] [pid 43701:tid 43712] [client 20.206.111.149:16273] File does not exist: /usr/local/apache/htdocs/suspended-page/hello.php
[Tue May 26 20:14:25.080921 2026] [:error] [pid 43701:tid 43710] [client 20.206.111.149:16273] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "ahWOoYWtVI_UGrhtwKCJEQAAAUc"]
[Tue May 26 20:14:25.886781 2026] [:error] [pid 43701:tid 43722] [client 20.206.111.149:16236] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "ahWOoYWtVI_UGrhtwKCJEgAAAVM"]
[Tue May 26 20:14:26.820643 2026] [:error] [pid 43701:tid 43709] [client 20.206.111.149:16320] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "ahWOooWtVI_UGrhtwKCJGAAAAUY"]
[Tue May 26 20:14:27.557592 2026] [:error] [pid 43701:tid 43723] [client 20.206.111.149:16182] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/NewFile.php"] [unique_id "ahWOo4WtVI_UGrhtwKCJHAAAAVQ"]
[Tue May 26 20:14:28.546048 2026] [:error] [pid 43701:tid 43727] [client 20.206.111.149:16154] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "ahWOpIWtVI_UGrhtwKCJIgAAAVg"]
[Tue May 26 20:14:29.284820 2026] [:error] [pid 33886:tid 33912] [client 20.206.111.149:16071] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "ahWOpbBYzgp5rPVdHcWPZwAAAFU"]
[Tue May 26 20:14:30.267182 2026] [:error] [pid 33977:tid 33989] [client 20.206.111.149:16134] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "ahWOpu9cnSDNAU9sYPjN5gAAAAk"]
[Tue May 26 20:14:31.045416 2026] [:error] [pid 36497:tid 36512] [client 20.206.111.149:16271] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless5.php"] [unique_id "ahWOp7jKQWM1gBmBY4jdSAAAAMI"]
[Tue May 26 20:14:31.750807 2026] [:error] [pid 33888:tid 33952] [client 20.206.111.149:16113] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "ahWOpzqzTeoxiinZsGH2IAAAAQY"]
[Tue May 26 20:14:32.404099 2026] [:error] [pid 43701:tid 43725] [client 20.206.111.149:16321] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "ahWOqIWtVI_UGrhtwKCJKAAAAVY"]
[Tue May 26 20:14:33.265759 2026] [:error] [pid 33977:tid 34003] [client 20.206.111.149:16257] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "ahWOqe9cnSDNAU9sYPjN7gAAABc"]
[Tue May 26 20:14:33.980305 2026] [:error] [pid 33977:tid 33997] [client 20.206.111.149:16169] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/v2.php"] [unique_id "ahWOqe9cnSDNAU9sYPjN8QAAABE"]
[Tue May 26 20:14:34.633216 2026] [:error] [pid 33977:tid 33995] [client 20.206.111.149:16081] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp4.php"] [unique_id "ahWOqu9cnSDNAU9sYPjN8gAAAA8"]
[Tue May 26 20:14:35.481849 2026] [:error] [pid 33887:tid 33933] [client 20.206.111.149:16158] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp4.php"] [unique_id "ahWOq9COI_FV7meOxGcmIQAAAI4"]
[Tue May 26 20:14:36.598528 2026] [:error] [pid 43701:tid 43709] [client 20.206.111.149:16080] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp4.php"] [unique_id "ahWOrIWtVI_UGrhtwKCJNAAAAUY"]
[Tue May 26 20:14:37.924989 2026] [:error] [pid 33888:tid 33969] [client 20.206.111.149:16187] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp4.php"] [unique_id "ahWOrTqzTeoxiinZsGH2NgAAARc"]
[Tue May 26 20:14:38.951324 2026] [:error] [pid 33977:tid 33987] [client 20.206.111.149:16194] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "ahWOru9cnSDNAU9sYPjN-QAAAAc"]
[Tue May 26 20:14:40.074167 2026] [:error] [pid 43701:tid 43704] [client 20.206.111.149:16150] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "ahWOsIWtVI_UGrhtwKCJPgAAAUE"]
[Tue May 26 20:14:41.541393 2026] [:error] [pid 33977:tid 34004] [client 20.206.111.149:16198] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "ahWOse9cnSDNAU9sYPjOAgAAABg"]
[Tue May 26 20:14:42.452975 2026] [:error] [pid 43701:tid 43704] [client 20.206.111.149:16105] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/bless11.php"] [unique_id "ahWOsoWtVI_UGrhtwKCJRQAAAUE"]
[Tue May 26 20:14:43.761756 2026] [:error] [pid 33977:tid 33992] [client 20.206.111.149:16142] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fileas.php"] [unique_id "ahWOs-9cnSDNAU9sYPjOBwAAAAw"]
[Tue May 26 20:14:45.283341 2026] [:error] [pid 33977:tid 34001] [client 20.206.111.149:16364] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fileas.php"] [unique_id "ahWOte9cnSDNAU9sYPjOCwAAABU"]
[Tue May 26 20:14:46.645794 2026] [:error] [pid 33888:tid 33946] [client 20.206.111.149:16255] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fileas.php"] [unique_id "ahWOtjqzTeoxiinZsGH2PwAAAQA"]
[Tue May 26 20:14:47.808387 2026] [:error] [pid 36497:tid 36533] [client 20.206.111.149:16149] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fileas.php"] [unique_id "ahWOt7jKQWM1gBmBY4jd1AAAANc"]
[Tue May 26 20:14:48.815851 2026] [:error] [pid 36497:tid 36510] [client 20.206.111.149:16119] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aothait.php"] [unique_id "ahWOuLjKQWM1gBmBY4jd3gAAAMA"]
[Tue May 26 20:14:49.535041 2026] [:error] [pid 43701:tid 43723] [client 20.206.111.149:16168] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aothait.php"] [unique_id "ahWOuYWtVI_UGrhtwKCJbgAAAVQ"]
[Tue May 26 20:14:50.430301 2026] [:error] [pid 33888:tid 33948] [client 20.206.111.149:16247] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aothait.php"] [unique_id "ahWOujqzTeoxiinZsGH2QAAAAQI"]
[Tue May 26 20:14:51.481700 2026] [:error] [pid 33977:tid 33981] [client 20.206.111.149:16172] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-aothait.php"] [unique_id "ahWOu-9cnSDNAU9sYPjOGQAAAAE"]
[Tue May 26 20:14:52.200817 2026] [:error] [pid 43701:tid 43712] [client 20.206.111.149:16043] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "ahWOvIWtVI_UGrhtwKCJeQAAAUk"]
[Tue May 26 20:14:52.884465 2026] [:error] [pid 36497:tid 36533] [client 20.206.111.149:16190] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "ahWOvLjKQWM1gBmBY4jeCwAAANc"]
[Tue May 26 20:14:53.665097 2026] [:error] [pid 33977:tid 33993] [client 20.206.111.149:16069] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "ahWOve9cnSDNAU9sYPjOHgAAAA0"]
[Tue May 26 20:14:54.482615 2026] [:error] [pid 33887:tid 33942] [client 20.206.111.149:16011] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/motu.php"] [unique_id "ahWOvtCOI_FV7meOxGcmNAAAAJc"]
[Tue May 26 20:14:55.289443 2026] [:error] [pid 33977:tid 33986] [client 20.206.111.149:16193] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ahWOv-9cnSDNAU9sYPjOJAAAAAY"]
[Tue May 26 20:14:56.150798 2026] [:error] [pid 36497:tid 36519] [client 20.206.111.149:16186] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ahWOwLjKQWM1gBmBY4jeIwAAAMk"]
[Tue May 26 20:14:56.883503 2026] [:error] [pid 43701:tid 43715] [client 20.206.111.149:16326] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ahWOwIWtVI_UGrhtwKCJlQAAAUw"]
[Tue May 26 20:14:57.638820 2026] [:error] [pid 33888:tid 33960] [client 20.206.111.149:16350] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/fff.php"] [unique_id "ahWOwTqzTeoxiinZsGH2TQAAAQ4"]
[Tue May 26 20:14:58.437397 2026] [:error] [pid 43701:tid 43706] [client 20.206.111.149:16090] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "ahWOwoWtVI_UGrhtwKCJoAAAAUM"]
[Tue May 26 20:14:59.536949 2026] [:error] [pid 33977:tid 33992] [client 20.206.111.149:16158] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "ahWOw-9cnSDNAU9sYPjOMAAAAAw"]
[Tue May 26 20:15:00.540445 2026] [:error] [pid 33888:tid 33966] [client 20.206.111.149:16340] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "ahWOxDqzTeoxiinZsGH2UQAAARQ"]
[Tue May 26 20:15:01.739022 2026] [:error] [pid 33887:tid 33932] [client 20.206.111.149:16178] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp5.php"] [unique_id "ahWOxdCOI_FV7meOxGcmPQAAAI0"]
[Tue May 26 20:15:02.898489 2026] [:error] [pid 43701:tid 43711] [client 20.206.111.149:16261] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ahWOxoWtVI_UGrhtwKCJvgAAAUg"]
[Tue May 26 20:15:04.016781 2026] [:error] [pid 33887:tid 33939] [client 20.206.111.149:16185] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ahWOyNCOI_FV7meOxGcmQQAAAJQ"]
[Tue May 26 20:15:04.761102 2026] [:error] [pid 33977:tid 33993] [client 20.206.111.149:16066] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ahWOyO9cnSDNAU9sYPjOVAAAAA0"]
[Tue May 26 20:15:05.730061 2026] [:error] [pid 33887:tid 33931] [client 20.206.111.149:16170] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/wp-act.php"] [unique_id "ahWOydCOI_FV7meOxGcmSAAAAIw"]
[Tue May 26 20:15:06.360030 2026] [:error] [pid 33886:tid 33915] [client 20.206.111.149:16275] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "ahWOyrBYzgp5rPVdHcWPjgAAAFg"]
[Tue May 26 20:15:07.043250 2026] [:error] [pid 43701:tid 43726] [client 20.206.111.149:16378] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "ahWOy4WtVI_UGrhtwKCJ1AAAAVc"]
[Tue May 26 20:15:07.790128 2026] [:error] [pid 33888:tid 33967] [client 20.206.111.149:16346] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "ahWOyzqzTeoxiinZsGH2dQAAARU"]
[Tue May 26 20:15:08.762806 2026] [:error] [pid 43701:tid 43706] [client 20.206.111.149:16223] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/myfile.php"] [unique_id "ahWOzIWtVI_UGrhtwKCJ5gAAAUM"]
[Tue May 26 20:15:09.461438 2026] [:error] [pid 36497:tid 36528] [client 20.206.111.149:16267] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "ahWOzbjKQWM1gBmBY4jeSQAAANI"]
[Tue May 26 20:15:10.157085 2026] [:error] [pid 33888:tid 33961] [client 20.206.111.149:16179] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "ahWOzjqzTeoxiinZsGH2egAAAQ8"]
[Tue May 26 20:15:10.849111 2026] [:error] [pid 36497:tid 36534] [client 20.206.111.149:16155] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "ahWOzrjKQWM1gBmBY4jeTgAAANg"]
[Tue May 26 20:15:11.502618 2026] [:error] [pid 33886:tid 33893] [client 20.206.111.149:16164] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xqq.php"] [unique_id "ahWOz7BYzgp5rPVdHcWPlQAAAEI"]
[Tue May 26 20:15:12.165757 2026] [:error] [pid 36497:tid 36516] [client 20.206.111.149:16110] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kolda.php"] [unique_id "ahWO0LjKQWM1gBmBY4jeVgAAAMY"]
[Tue May 26 20:15:12.835379 2026] [:error] [pid 33888:tid 33952] [client 20.206.111.149:16067] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kolda.php"] [unique_id "ahWO0DqzTeoxiinZsGH2ggAAAQY"]
[Tue May 26 20:15:13.479260 2026] [:error] [pid 33977:tid 33982] [client 20.206.111.149:16337] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kolda.php"] [unique_id "ahWO0e9cnSDNAU9sYPjOlgAAAAI"]
[Tue May 26 20:15:14.217843 2026] [:error] [pid 33887:tid 33933] [client 20.206.111.149:16358] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/kolda.php"] [unique_id "ahWO0tCOI_FV7meOxGcmZwAAAI4"]
[Tue May 26 20:15:15.165403 2026] [:error] [pid 33888:tid 33961] [client 20.206.111.149:16351] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ahWO0zqzTeoxiinZsGH2hwAAAQ8"]
[Tue May 26 20:15:16.103549 2026] [:error] [pid 33977:tid 34003] [client 20.206.111.149:16132] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ahWO1O9cnSDNAU9sYPjOpAAAABc"]
[Tue May 26 20:15:16.763071 2026] [:error] [pid 33888:tid 33970] [client 20.206.111.149:16141] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ahWO1DqzTeoxiinZsGH2jQAAARg"]
[Tue May 26 20:15:17.453881 2026] [:error] [pid 36497:tid 36527] [client 20.206.111.149:16070] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/666.php"] [unique_id "ahWO1bjKQWM1gBmBY4jeaAAAANE"]
[Tue May 26 20:15:18.262023 2026] [:error] [pid 33977:tid 33997] [client 20.206.111.149:16305] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xoot.php"] [unique_id "ahWO1u9cnSDNAU9sYPjOqwAAABE"]
[Tue May 26 20:15:19.074034 2026] [:error] [pid 33887:tid 33939] [client 20.206.111.149:16102] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xoot.php"] [unique_id "ahWO19COI_FV7meOxGcmbAAAAJQ"]
[Tue May 26 20:15:19.858064 2026] [:error] [pid 33888:tid 33962] [client 20.206.111.149:16106] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xoot.php"] [unique_id "ahWO1zqzTeoxiinZsGH2kwAAARA"]
[Tue May 26 20:15:21.017409 2026] [:error] [pid 33888:tid 33946] [client 20.206.111.149:16117] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/xoot.php"] [unique_id "ahWO2TqzTeoxiinZsGH2mQAAAQA"]
[Tue May 26 20:15:22.397763 2026] [:error] [pid 33887:tid 33926] [client 20.206.111.149:16371] [client 20.206.111.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/vgtyu.php"] [unique_id "ahWO2tCOI_FV7meOxGcmbgAAAIc"]
[Tue May 26 20:15:24.018154 2026] [:error] [pid 33888:tid 33963] [client 20.206.111.149:16343] File does not exist: /usr/local/apache/htdocs/suspended-page/vgtyu.php
[Tue May 26 20:15:24.331223 2026] [:error] [pid 33888:tid 33966] [client 20.206.111.149:16343] File does not exist: /usr/local/apache/htdocs/suspended-page/06.php
[Tue May 26 20:15:24.644936 2026] [:error] [pid 33888:tid 33953] [client 20.206.111.149:16343] File does not exist: /usr/local/apache/htdocs/suspended-page/erty.php
[Tue May 26 20:15:24.955395 2026] [:error] [pid 33888:tid 33956] [client 20.206.111.149:16343] File does not exist: /usr/local/apache/htdocs/suspended-page/fs.php
[Tue May 26 20:15:25.275401 2026] [:error] [pid 33888:tid 33958] [client 20.206.111.149:16343] File does not exist: /usr/local/apache/htdocs/suspended-page/66.php
[Tue May 26 20:15:25.593707 2026] [:error] [pid 33888:tid 33969] [client 20.206.111.149:16343] File does not exist: /usr/local/apache/htdocs/suspended-page/grsiuk.php
[Tue May 26 20:15:25.904983 2026] [:error] [pid 33888:tid 33946] [client 20.206.111.149:16343] File does not exist: /usr/local/apache/htdocs/suspended-page/new4.php
[Tue May 26 20:15:26.268460 2026] [:error] [pid 33888:tid 33959] [client 20.206.111.149:16343] File does not exist: /usr/local/apache/htdocs/suspended-page/pouhg.php
[Tue May 26 20:15:26.666406 2026] [:error] [pid 33888:tid 33957] [client 20.206.111.149:16343] File does not exist: /usr/local/apache/htdocs/suspended-page/xa.php
[Tue May 26 20:15:26.978020 2026] [:error] [pid 33888:tid 33956] [client 20.206.111.149:16343] File does not exist: /usr/local/apache/htdocs/suspended-page/ms.php
[Tue May 26 23:20:54.130104 2026] [:error] [pid 33886:tid 33909] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/1.php
[Tue May 26 23:20:54.149173 2026] [:error] [pid 33886:tid 33908] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/2.php
[Tue May 26 23:20:54.168357 2026] [:error] [pid 33886:tid 33914] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/7.php
[Tue May 26 23:20:54.186688 2026] [:error] [pid 33886:tid 33907] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/10.php
[Tue May 26 23:20:54.210314 2026] [:error] [pid 33886:tid 33903] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/13.php
[Tue May 26 23:20:54.229509 2026] [:error] [pid 33886:tid 33894] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/100.php
[Tue May 26 23:20:54.249904 2026] [:error] [pid 33886:tid 33912] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/222.php
[Tue May 26 23:20:54.268716 2026] [:error] [pid 33886:tid 33891] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/adminfuns.php
[Tue May 26 23:20:54.288291 2026] [:error] [pid 33886:tid 33905] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/abcd.php
[Tue May 26 23:20:54.323073 2026] [:error] [pid 33886:tid 33915] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/al.php
[Tue May 26 23:20:54.341748 2026] [:error] [pid 33886:tid 33910] [client 20.5.101.115:8384] File does not exist: /usr/local/apache/htdocs/suspended-page/alfa.php
[Tue May 26 23:20:54.356940 2026] [:error] [pid 33886:tid 33913] [client 20.5.101.115:8384] [client 20.5.101.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ahW6VrBYzgp5rPVdHcXP8gAAAFY"]
[Tue May 26 23:20:54.426140 2026] [:error] [pid 43701:tid 43703] [client 20.5.101.115:12020] [client 20.5.101.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ahW6VoWtVI_UGrhtwKBWlwAAAUA"]
[Tue May 26 23:20:54.495204 2026] [:error] [pid 33977:tid 33983] [client 20.5.101.115:5013] [client 20.5.101.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ahW6Vu9cnSDNAU9sYPg4ZgAAAAM"]
[Tue May 26 23:20:54.605332 2026] [:error] [pid 33977:tid 33984] [client 20.5.101.115:5030] [client 20.5.101.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "nextspaceconsulting.com.au"] [uri "/as.php"] [unique_id "ahW6Vu9cnSDNAU9sYPg4ZwAAAAQ"]